Connection Failed on arrakis

Hey there,

I'm trying to set up afp but I can't get it to work. I have a Shared Folder, Delorean, that I want to use as Time Capsule.
The server shows up in my Finder's sidebar. When I try to login with my account ("pseudonym", member of group "pseudonym"; the one I set up when installing omv) I get the notification "Connection Failed" (in Finder, macOS 10.13.3). I use the unix password of that account. When I use another password I get the typical macOS shaking dialog that signifies a wrong password.

A screenshot of how the share for netatalk is configured is attached. In the Settings Tab all I did was check "enabled".

Permissions are set up as follows:

$ ll /sharedfolders/
drwxrws---+   3 root users  4096 Jan 27 17:35 Delorean

My afp.conf looks like this:

[Global]
max connections = 20
mac charset = MAC_ROMAN
unix charset = LOCALE
guest account = nobody
uam list = uams_dhx.so,uams_dhx2.so
save password = no
[Delorean]
path = /srv/dev-disk-by-label-WD/Delorean
read only = no
unix priv = yes
file perm = 0664
directory perm = 0775
umask = 0002
invisible dots = no
time machine = yes
password = ########
vol size limit = 256000
valid users = "pseudonym" "@pseudonym"
invalid users = 
rolist = 
rwlist = "pseudonym" "@pseudonym"

Versions:
Kernel: 4.14.8-sunxi
OMV: 4.0.19-1 (Arrakis)
openmediavault-netatalk: 4.0.6-1

Installed manually on armbian 5.38 (Stretch).

Any advice how to debug this?

Zitat von wastez

It’s clear that it can’t connect with the unix permissions set above.
You have set only read and write for user root and group users.

Ah crap. pseudonym is in the user's group, I forgot to mention that / edited it out by accident. There is another thread about group permissions not working, but that was due wrong syntax in afp.conf caused by OMV (which is why I posted that snippet in the first place). As far as I understand this should be sufficient, no? Explicitly setting rwx-rights for pseudonym:pseudonym worked.

Also @subzero79 you're right, setting an additional password for netatalk doesn't really help much anyways (given it's max length i 8 chars) and only complicates the setup.