DSM-G600, DNS-3xx and NSA-220 Hack Forum

tbone887 · 2008-08-13 21:01:13

Hi all,

I am experiencing a problem with saving files to the DNS-323 from microsoft office products... word, excel, outlook, etc...

It is happening on both of my dns-323's.

First off the 323's are running FW 1.05

If I save an office file directly from an office program, say excel, to the 323 via a mapped drive in windows, it gets 700 file permissions or -rwx------

I can open the file on the local network, but cannot open it via ftp, due to the permissions being for the owner only, the owner shows as 501.

If I copy the file within the same directory from within windows it then gets 777 or -rwxrwxrwx permissions, which can be accessed via FTP.

If I first save to my hard drive from excel and then copy the file to the dns-323, the permissions are 777.

This only happens with office files and not other software.

Any ideas?

I have been in contact with Dlink for about 2 months now, and they don't have any idea.

Thanks,
Tbone

mig · 2008-08-13 22:33:35

tbone8877, could you provide the following information (indicated by the ???),
also what are the user and group names associated with the numbers?

Saved via office : owner:501 group: ??? permissions: -rwx------

Saved via explorer: owner:??? group:??? permissions: -rwxrwxrwx

What users are you using to connect via FTP?

There is a pulldown box for 'oplocks' on the D-Link web GUI Advancec -> Network Access
is this set to yes or no?

tbone887 · 2008-08-13 23:28:52

I attached a screenshot showing the properties of the two files from within windows and from my FTP client.

Let me know what other info may help the situation.

Thanks,
Tbone

Attachments:

permissions.jpg, Size: 173,866 bytes, Downloads: 263

mig · 2008-08-14 02:35:28

The file saved by office is user:501 (nobody) group:501 (nobody) premissions: -rwx------

The file saved by explorer is user:501 (nobody) group:501 (nobody) permissions: -rwxrwxrwx

It seems the mapped drive is being accessed via user:501 (nobody)

How are you connecting via FTP (which user are you connecting the FTP client with)?

Have you setup any users for FTP or shares on the DNS-323?

Last edited by mig (2008-08-14 02:42:23)

tbone887 · 2008-08-14 02:50:25

To connect with FTP I use cute ftp mostly.

It doesn't work in Firefox or IE either.

I have users and shares set up for FTP access on the DNS 323. These users can log in and get the files if they are 777, but not if they are 700.

I done be confused.

Thanks,
Tbone

EDIT
So it's clear, by mapped drive, I mean I have assigned the DNS323 a drive letter on my local network.

You can open the files on other computers on my local network, just not remotely via FTP.

Another strange thing... I can delete the files via FTP that I can't open or copy.

Last edited by tbone887 (2008-08-14 03:43:17)

mig · 2008-08-14 21:48:58

tbone887 wrote:
I have users and shares set up for FTP access on the DNS 323. These users can log in and get the files if they are 777, but not if they are 700.

The three number 777 or 700 specify the access rights for a file, with respect to the file's owner and group - (the user who saved the file)
The first digit specifies access right for the file's owner
The second digit specifies access rights for the file's group
The third digit specifies access rights for all other system users

If you are accessing the system as user: 'nobody', group: 'nobody' and
the file your are trying to access is owned by user: 'nobody', group: 'nobody', permissions 700
you will be able to read/write/execute the file

If you are accessing the system as some ftp user, lets say "user:'ftp1', group :ftp1'"
and trying to access the same file (u:'nobody', g:'nobody', 700)
you will not be able to read/write/execute the file, because...
- you are not the user who owns the file --- file owner: 'nobody', your user 'ftp1'
- you are not in the same group as the file owner --- file group: 'nobody', your group 'ftp1'
- and access right for all system users (the third digit) is 0 --- NO read, NO write, NO execute permission

Any file with a third digit of 7 means any user of the system has full access permissions, rwx.

So, if MS Office insists on changing the file permission to 700,
which means ONLY the file's user has access permission, no access rights for group or others,
then you have to access the mapped drive (samba share) and FTP with the same user.

So you have two choices:
1) map the share as the same user you connect the FTP client with
2) connect the FTP client as the same users you map the share ('nobody' in your case)

Last edited by mig (2008-08-14 22:05:18)

icewater · 2010-10-09 01:59:24

Sorry to dig out an old thread.
I too am having the same problem and I've found a solution.

Problem:
When saving directly to the mapped drive using MS office, the file permission is set to 700 automatically.
And the files then cannot be accessed via ftp when logged in as another user.
I cannot log in as "nobody" since there is no account set up as such.

Solution:
In windows, mapped the drive to your 323 using credentials. ie mapped the drive using a username and password.
Now when saving a file directly from MS office (word / excel, etc), the file permission is now automatically set to 777.
Therefore, do NOT map the drive with NO username and password.
To change the file permissions of any existing files which has 700 set, you can individually change it in windows using properties, security, permission.
Or if you want to bulk change, then telnet/ssh and use the chmod command.

I hope this will help someone out.

Last edited by icewater (2010-10-09 02:03:16)

icewater · 2010-10-10 13:20:19

I think the issue is only affecting firmware <1.08.

The release note for 1.08:
9. Bugfix: Unable to save the modified word/excel file which already in device through Samba.

I was previously using firmware 1.05.

I've just upgraded to 1.09 and this issue is fixed.

DSM-G600, DNS-3xx and NSA-220 Hack Forum

Announcement

#1 2008-08-13 21:01:13

DNS-323 Permissions Issues

#2 2008-08-13 22:33:35

Re: DNS-323 Permissions Issues

#3 2008-08-13 23:28:52

Re: DNS-323 Permissions Issues

#4 2008-08-14 02:35:28

Re: DNS-323 Permissions Issues

#5 2008-08-14 02:50:25

Re: DNS-323 Permissions Issues

#6 2008-08-14 21:48:58

Re: DNS-323 Permissions Issues

tbone887 wrote:

#7 2010-10-09 01:59:24

Re: DNS-323 Permissions Issues

#8 2010-10-10 13:20:19

Re: DNS-323 Permissions Issues

Board footer