Shares not showing up on Mac OS X since update to 9.2 RC

[Lukas]

I updated to FreeNAS-9.2.0-RC-x64 yesterday and since then.
Previously I had two items, "CIFS Shares on FreeNAS" for my CIFS shares and "FreeNAS" for my AFP Time Machine share, appear in my finder sidebar but now I only see one device appear, called "FreeNAS", which doesn't contain any shares.

When running tail -f /var/log/messages I started seeing

Code:

Dec 8 21:50:59 FreeNAS notifier: Stopping avahi-daemon.

messages and suspect this might be the problem. How can i fix this?

 

[Michael Wulff Nielsen]

I second this problem, I just opened a bug ticket.

I dug around in my log and this showed up:

Dec 13 08:50:23 freenas afpd[9829]: AFP3.3 Login by nobody
Dec 13 08:50:23 freenas afpd[9829]: AFP logout by nobody
Dec 13 08:50:23 freenas afpd[9829]: dsi_stream_read: len:0, unexpected EOF
Dec 13 08:50:23 freenas afpd[9829]: afp_over_dsi: client logged out, terminating DSI session
Dec 13 08:50:23 freenas afpd[9829]: AFP statistics: 0.24 KB read, 0.22 KB written
Dec 13 08:50:49 freenas afpd[9832]: AFP3.3 Login by media
Dec 13 08:50:49 freenas afpd[9832]: AFP logout by media
Dec 13 08:50:49 freenas afpd[9832]: dsi_stream_read: len:0, unexpected EOF
Dec 13 08:50:49 freenas afpd[9832]: afp_over_dsi: client logged out, terminating DSI session
Dec 13 08:50:49 freenas afpd[9832]: AFP statistics: 0.69 KB read, 0.54 KB written


It sems that the afp client logs in and promptly gets logged out again. I am using 10.9 Mavericks on Macs mostly

 

[Icey]

Edit: With a bit more experimenting I may have resolved this. I removed the password on the AFP share and authenticated using the user account instead.

I'm having this problem on FreeNAS-9.2.0-RC-x64 (93440a9)

Dec 13 20:02:23 freenas netatalk[84941]: Netatalk AFP server starting
Dec 13 20:02:23 freenas cnid_metad[84943]: CNID Server listening on localhost:4700
Dec 13 20:02:24 freenas notifier: Stopping avahi-daemon.
Dec 13 20:02:25 freenas afpd[84942]: Netatalk AFP/TCP listening on 10.1.1.8:548
Dec 13 20:03:16 freenas afpd[85065]: AFP3.3 Login by timemachine
Dec 13 20:03:16 freenas afpd[85065]: AFP logout by timemachine
Dec 13 20:03:16 freenas afpd[85065]: dsi_stream_read: len:0, unexpected EOF
Dec 13 20:03:16 freenas afpd[85065]: afp_over_dsi: client logged out, terminating DSI session
Dec 13 20:03:16 freenas afpd[85065]: AFP statistics: 0.61 KB read, 0.45 KB written
Dec 13 20:11:01 freenas afpd[85578]: AFP3.3 Login by timemachine
Dec 13 20:11:04 freenas afpd[85578]: AFP logout by timemachine
Dec 13 20:11:04 freenas afpd[85578]: dsi_stream_read: len:0, unexpected EOF
Dec 13 20:11:04 freenas afpd[85578]: afp_over_dsi: client logged out, terminating DSI session
Dec 13 20:11:04 freenas afpd[85578]: AFP statistics: 0.59 KB read, 0.47 KB written

 

[Michael Wulff Nielsen]

I filed a bug report on this issue and Josh was able to come up with a temporary workaround:

1. Remove all password from your AFP shares (under Sharing/Apple)
2. Control access to the shares with unix users and password (set folder permissions correctly)

Then the problems go away.

See the bug report

 

[fracai]

So, is this only an issue with guest access?

 

[Lukas]

I'm really happy that you fixed your problem but mine is still unresolved.
My CIFS shares are still not appearing with automatic Bonjour/Avahi annunciation on my Mac. I always have to manually connect to them.

 

[Icey]

Either I've posted in the wrong thread or this thread was merged, sorry for the confusion.
9.2.1 RC1 here. Can confirm I'm seeing the OP's problem: my freenas box appears as only "one share" as it has AFP and CIFS. Can't confirm previous behavior because I only have one mac and it's always been mavericks.

My problem (and log) were referring to being unable to connect to AFP share at all because I set a share password as per some time machine guide I was following.

 

[dlavigne]

Do you have a bug report number?

 

[jpaetzel]

Is avahi-daemon running?

sockst -4l |grep avahi

I'll take a look at this today.

 

[jpaetzel]

In my testing avahi is restarting, it's just not logging it. I may change that as it's confusing.

Finder will not show CIFS shares if there are AFP shares. This is fallout from a change made in the avahi config to have one server with all of the services as opposed to multiple servers each with one service.

 

[Michael Wulff Nielsen]

The real problem is that if you have a mix of public/protected shares netatalk will not show the ones you have access to. It will return a connection error.

So if you have

files (public share)
backup (protected share)
music (public share)

and you try to browse the machine you get no shares back and a connection error. Proper behaviour would be to show the shares that you have access to.

And since you can't browse the cifs shares due to the changes in avahi.conf it really leaves the mac users out in the cold.

 

[jpaetzel]

But I think we figured that scenario out by using filesystem permissions instead of the netatalk password (which I'm still unable to get working and is likely leaving FreeNAS unless it can be sorted out)

 

[Michael Wulff Nielsen]

No, it does not really solve the problem. You can't combine public / private shares. If you set directory permissions on backup (from my previous example) to only allow a certain user, then everybody else is locked out of the shares.

If you want public browsing to work you should then do the following to "backup":

drwxr-xr-x myuser myuser backup

and limit the files with permissions: rwx------

Not really optimal since it means that users can peek inside the backup folder but not read the files.

 

[jpaetzel]

You can combine public and private shares.

rwxrwxrwx nobody nobody ShareRoot

rwx------ oneuser oneuser Private

rwxrwxrwx nobody nobody Anonymous

rwxrwx--- mickeymouse developers ShareForDevelopers

 

[Michael Wulff Nielsen]

What you have there is a single share with several protected folders. That is not a combination of public and privates shares.

You need multiple entries in afpd.conf to have multiple shares and this breaks if one requires a password. Your method works but it is not multiple shares per se.

 

[jpaetzel]

No. I'd create one AFP share per subdirectory. Not an AFP share of the top level directory. It would be multiple shares.

 

[Michael Wulff Nielsen]

I have that setup and it breaks. I'll post my afpd.conf and my folder setup later tonight.

 

[jpaetzel]

How does it break?

 

[Michael Wulff Nielsen]

if there is one afpd.conf share that requires user permissions to access then no shares are displayed, just a connection error. In your example the Private folder will prevent the Anonymous share from being viewed in the finder browser.

All that will be shown is a connection error when browsing as "nobody". This happens on my setup, but I will confirm it and post specific data.

 

[jpaetzel]

Ok. I will test this in a couple hours.