Back in January 2008, I began to notice troublesome behavior with Windows clients connecting to my Mac OS X Server 10.5 fileserver. When some Windows clients, particularly Windows XP users, try to connect to a share, they can create a folder but can't change the name of the folder from "New Folder". Also, they can drop a file on the share, but not change that name, either. This always happened when activity was performed at the root level of the network share, while subfolders behaved as expected. If the network share had 777 (rwxrwxrwx) at the root level, all worked well, which indicated a permissions issue, not so much a communication issue. BUt it's the ACLs that caused grief. I posted this to the Mac OS X Server list hosted by Apple.
ls -l@and observe the output. Increase the verbosity of Samba logging by editing your /etc/smb.conf file, increasing the integer slightly, between one and ten (though five and above becomes very, very noisy).
nt acl support; you'll see information about how Samba matches Windows NT permissions to POSIX-style permissions. This was the method used by Windows XP, while later versions of Windows used the more Windows-like ACLs which is analogous to Mac OS X ACLs. The net effect was that XP read the permissions in an undesirable way, paying attention to Samba's method instead of Mac OS X Server's method. We want the server OS to control access, not Samba.
nt acl support = nowhere appropriate — at the end of the file below the notes, in its own
[Global]section. Do not edit the hooked /var/db/smb.conf file because that's associated with Server Admin (which writes to an XML file while another process converts that into a Samba conf file — change it here and it will likely get wiped).
• Samba in 10.6 adds two directives to any share that must be manually overridden. • (Somewhat deprecated) Samba + OpenLDAP + Kerberos + AFP + Leopard = ♥
• Samba and extended attributes
• Samba and ADS
• Hiding directories in Samba that have spaces in the name
• Scary Excel "Share Workbook" feature behavior with Samba (See also Apple KB article.)
• Invalid characters in extended attributes on Samba directories