Server admin not seeing directory users from workgroup manager

I am setting up a new Xserve with Snow Leopard (get 'em while we can). We have eight other XServes running Leopard or Snow Leopard server. On those machines we have set up file sharing over AFP. The machines are connected to our Active Directory server and our users authenticate using their domain passwords. All of our other servers were setup in Leopard and were upgraded to Snow Leopard. We have not had any issues authenticating to those boxes.
This is the first one that we have actually setup new-out-of-the-box in Snow Leopard. I can set Workgroup Manager up to connect to our AD, and can see and search my domain users and groups in Workgroup Manager. When I try to set up my File Shares in Server Admin, none of my domain users show up-only local accounts.
What have I missed? In Leopard, when I connected to the domain, the users immediately became available in Server Admin. Not so in SL, at least on this box.
Help?

Hi
The first thing to check is if you've bound the Server to the AD Domain. The second thing is if the /Active Directory/All Domains is in the Search Policy. If you don't do either of these WorkGroup Manager won't display anything coming from the AD Schema.
In 10.6 Apple moved the Directory Utility from where it used to be in /Applications/Utilities and made it part of the Accounts Preferences Pane. Perhaps it's this change that's confusing you? I would not advise doing this but it's also possible you used the Server Setup Assistant to do most of the configuration? If you did maybe something went wrong at that stage (won't be the first time) and you need to manually bind the Server instead?
As ever make sure this server is using the same NTP Server as the others.
Tony

Similar Messages

  • I can't see system users in Workgroup Manager

    How do I get the user accounts that are already on Mac OS X Server to show up as users in Workgroup Manager? Re-adding the user from "Add User" creates a conflict, so I know the account is being seen by Workgroup Manager. Thanks for the help.

    Hi
    Yes. Firstly de-select the option to show System Users and Groups. Use the Filter to only show you Users with UIDs above a certain number. If you've used the default numbering system start with IDs over 1000. This gets around you inadvertently exporting and/or deleting the default Administrator account.
    Select the users you're interested in the Local node. Go the Server Menu and select Export. Save the exported file to the Desktop and give it a meaningful name. Now delete those exported users from the local node. You can't have the same users in both directory nodes. Select the LDAP node and select Import from the Server Menu. The rest should be fairly obvious.
    A couple of things to look out for. When importing those Users they should automatically be assigned Open Directory for their User Password Types in the Advanced Tab. Change them to suit if they come in as Crypt. Passwords don't carry over so you will have to either assign these again or force users to change them at next log on. Assuming these are users with networked home profiles?
    Tony

  • Exporting users from Workgroup Manager to Excel

    Hi all,
    Just wondering if anyone knows of a way to export users from Workgroup Manager in a "normal" format, eg CSV or Excel etc? Or if a program exists to post-process the current exported file?
    The current file has bits like this in it:
    <key>kAPOPRequired</key>\
    <string>APOPNotRequired</string>\
    <key>kAltMailStoreLoc</key>\
    <string></string>\
    <key>kAttributeVersion</key>\
    <string>Apple Mail 1.0</string>\
    <key>kAutoForwardValue</key>\
    <string></string>\
    <key>kIMAPLoginState</key>\
    <string>IMAPAllowed</string>\
    <key>kMailAccountLocation</key>\
    Which I would like to remove, or put into various columns in Excel.
    Sadly we are moving to Windows, so I need to get everything out of OD into a format that can be imported into AD. So basically a spreadsheet with firstname, lastname, email address, location/address, group memberships etc etc.
    Any help appreciated

    Thanks Andbrowny
    I gave it a go, but got a strange error, does this mean anything to you?
    admin$ sudo ldapsearch -LLL -H ldap://127.0.0.1 -b "cn=users,dc=my,dc=domain,dc=net" > userexport.ldif
    Password:
    SASL/GSSAPI authentication started
    ldapsasl_interactive_binds: Local error (-2)
    additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No credentials cache found)
    I suspect my OD is screwed, as slapd maxes out all 8 cores every few days, and takes out the mail server as a side effect.
    The Linux link wasn't applicable to this, all the commands and paths are different to MacOS X unfortunately.

  • Server App not seeing external LDAP users & groups

    I have a clean 10.8.2 + Server install set up with our standard external LDAP directory (Novell's eDirectory in our case) configuration that is known to support Lion & Mountain Lion client LDAP authentication. With this same configuration on OS X 10.8.2 Server both Directory Utility and WGM can see all the LDAP users and groups as expected.
    When I look for the external users & groups in the LDAP domain under the Server App "Accounts" heading I cannot see any entries in either users or groups lists. Should I be able to or is this a Server App quirk?
    I can add individual LDAP users to a local group and enable access to individual services. How can I give access to services to all LDAP users without having to build & maintain a massive "All LDAP Users" local group?
    Is there a published list of required LDAP attributes for users & groups for Mountain Lion Server? I suspect there are new requirements over and above those for 10.6 server but I have failed to find a good reference. I've noticed I get different behaviours for LDAP templates that includes a mapping for GeneratedUID to one which does not for example.
    This is all so much more opaque than our superbly reliable Snow Leopard servers!
    TIA

    Ok, and again:
    You want to see Users and Groups , which are stored in an third Party directory service like OpenLDAP, in your Server.app? This is what you have to do:
    Connect the third party ldap to your server
    Have all your external LDAP entries made so you can see them in the Workgroup Manager and are able to Login with them
    When you see your LDAP-entry in the Directory Manager, change it from "From Server" to "RFC2307"
    Edit the entry, add the following mapping to it:GeneratedUUID maps to apple-generateduuid
    To your group and user entries in the external LDAP add the follwing attribute:apple-generateduuid gets the value taken from the output of "uuidgen"
    Feel lucky
    And there ist ist; now you are able to use The accounts taken from an external LDAP.

  • TS3276 I receive a pop up from ICal saying the server does not recognize me user name and password.  This started yesterday.  I have no problems with receiving or sending emails through Mail

    I receive a pop-up from ICal saying the server does not recognize my user name and password for my me.com email address.  This started yesterday and occurs about every 5 minutes or so.  There are no problems with receiving or sending email through Mail.  I did change me email password several days ago but have no problems sending/receiving since then.

    I fixed the problem.  I opened Preferences in ICal and entered my new password.  No more pop-ups

  • I bought a new McBook Pro and when I backed up from my old computer, the iCal on my new computer is not syncing. It says "The server did not recognize your user name or password for (name of my mobile me acct). Make sure you enter them correctly."

    I bought a new McBook Pro and when I backed up from my old computer, the iCal on my new computer is not syncing. It says "The server did not recognize your user name or password for (name of my mobile me acct). Make sure you enter them correctly." Any suggestions?

    Carla,
    Check this post for a possible solution.

  • Share point in server admin not working correctly... I think

    I suspect that the share point in server admin is not working correctly. In workgroup manager when I click on a user and then click on the "home" tab, under the full path field I see a file path of:
    afp://server.mydomain.com/Users
    However if I go to Server Admin -> AFP -> Share Points then click on the Users share and then click on the share point tab below, enable auto mount is disabled. How can this be possible? I thought for a directory to show up in home in workgroup manager it had to be set as an auto mount. Has something possibly corrupted? And what?

    Here's a bit more information about our setup and our experiences with Apple's CUPS implementation:
    On the server, all printer queues are set up with only lpr and ipp sharing enabled with the PPD setting for each printer set to Generic Postscript. We found that setting the PPD to the printer specific one on the server caused problems when clients tried to use printer specific options, like paper tray selection, etc.. The selection would be undone, apparently because the driver on the server would override the previous settings. Using Generic Postscript allows the client PPD settings to go through unmodified. Our printers are general a mix of HP LaserJets and some Sharp Copiers.
    All clients use lpd to the server queues with the printers' actual PPDs configured. Using ipp is superior in that printer feedback (jams, out of toner, etc) makes it back to the clients, but ipp only works when the client, the server, and the printer are on the same network. If the ipp client is not on the same network, the client spooler immediately goes into a paused state and the print job is stuck on the client.
    Using lpd to the server queues works reliably, but there is no feedback to the client. Jobs disappear from the client queue and go to the server, appearing to the user as a successful print. If the printer is down, there's nothing they can see or do about it.

  • Can not see the report in report manager/admin tab

    Hi,
    in 8.49 on Win 2003 some users can not see the reports in report manager/admin tab. PS user can see them.
    Should we add some grants in user profile ? Which ? Any query to compare that user profile with PS ?
    Thank you.

    On the administration page, you will be able to see "View Reports For" header on the top.
    Under that header you will see the following fields:
    User ID/Type/Last/Status/Folder /Instance
    Above values will be used by PeopleSoft to filter and display the list of reports
    If the user has selected Status as Processing and saved the page, PeopleSoft will only show reports which are in Processing status.
    If user runs a report and it has been posted, it will not show up in report manager coz the filter value is set to Processing.
    Hope this helps. I dont think Permissions has anything to do with this since user is able to view the page.

  • Error in iCal: The server did not recognize your user name or password for account "Gmail."

    To keep my iCal up to date on two computers, I export an Archive in one and import it to the other. Yes, I know I should use the Cloud, but humour me.
    Export of iCal from my MacBook Air (OS 10.7.5) no longer works when imported to my desktop (OS 10.6.8). It returns an error saying "The server did not recognize your user name or password for account “Gmail.” Make sure you enter them correctly."
    After dismissing this dialogue box twice (it offers no other options, iCal crashes.
    I've turned off the option on my MacBook that asks to use my Gmail account, but since I can no longer launch iCal on my desktop, it can't import new data. How can I clean out the brain of iCal on the desktop so that it will open -- blank -- and perhaps accept a new version of my iCal data?
    Thanks,
    Bruce

    iCal
    MobileMe
    Apple Support

  • Please help  I am suddenly getting the following on my calendar  The server did not recognize your user name or password for account "..." Make sure you enter them correctly.  I depend on it for work

    Please help  I am suddenly getting the following from my calendar  The server did not recognize your user name or password for account “...” Make sure you enter them correctly.I have even tried changing the password and no luck.  I depend on it syncing with mobile me and my phone and I need it for work.

    I have been having the same issue but I think I fixed my problem.  In iCal, click iCal, Preferences, Accounts and retype your password.  That seems to have done the trick for me as far as I can tell.

  • ICal pop-up message .. The server did not recognize your user name or passw

    I'm having a problem with pop-up boxes when I launch iCal. They indicate the following;
    "The server responded with an error. The server did not recognize your user name or password for account “[email protected]” Make sure you enter them correctly."
    I recently let my MobileMe account expire as I was not using it that much. As a result, I think this issue is occuring, though I don;t know how to fix it. The same is happening on my iPhone when I attempt to receive eMails from a secondary eMail account.
    I would appreciate any help that anyone can provide.
    Thank you !! Kenneth

    A lot of people have been unable to access Yahoo e-mail on their iPhones or iPads. My wife’s iPad was not downloading Yahoo mail, although her iPhone was. Both used IOS 8.2. We tried deleting the account several times and troubleshooting all of the other settings. The problem appears to have been that allowing the IOS to automatically create the account on the iPad resulted in the wrong settings for the incoming server. The following procedure, pieced together from two websites, fixed the problem for us. So far, so good.
    https://portal.smartertools.com/kb/a2659/configure-imap-for-iphone-or-ipad.aspx
    https://help.yahoo.com/kb/mobile-mail/imap-server-settings-sln4075.html
    On the iPhone, tap Settings.
    Tap Mail, Contacts, Calendars.
    Tap your Yahoo account, then delete it.
    Tap Add Account.
    Tap Other.
    Tap Add Mail Account.
    Complete the Name, Address (email address), Password and Description fields.
    Click Next.
    Ensure IMAP is selected.
    Enter the following incoming mail server information:
    Incoming Mail (IMAP) Server - Requires SSL
    Server: imap.mail.yahoo.com
    Port: 993
    Requires SSL: Yes
    Hostname is mail.yahoo.com.
    Username is your full email address
    Password is the same password used to access webmail.
    Enter the following outgoing mail server information:
    Outgoing Mail (SMTP) Server - Requires SSL
    Server: smtp.mail.yahoo.com
    Port: 465 or 587
    Requires SSL: Yes
    Requires authentication: Yes
    Username is your full email address
    Password is the same password used to access webmail. It may have been entered for you.
    Tap Next.
    The iPhone will establish an SSL connection to your IMAP and SMTP servers.
    That’s all!

  • ICal error  "server did not recognize your user name"

    I recently was added to the MobileMe calendar beta, and now my iCal calendar doesn't sync with MobileMe. iPhone works fine. Error message when I launch iCal says "server did not recognize your user name"
    Any thoughts, suggestions would be appreciated.

    iCal/Preferences/Accounts/Password

  • I do not see the user interface for the Logic software instruments. I can hear them play through my midi keyboard but I cannot see them to adjust parameters. Please advise.

    I do not see the user interface for the Logic Pro software instruments. I can hear them play through my midi keyboard but cannot see them to adjust the parameters. Please advise.

    Couple of things - you can open the interface for any instrument or plug-in by double-clicking its insert slot on the channel strip. You can configure Logic to automatically open the interface for a plug-in when you first instantiate it in the preferences. Go to Logic Pro > Preferences > Display > Mixer, and check the box for "Open plug-in window on insertion".

  • ICal pop-up when I open: The server did not recognize your user name or password for account. Make sure you enter them correctly.

    The server did not recognize your user name or password for account. Make sure you enter them correctly.
    I am getting this pop-up whenever I open iCal. Recently changed Google password. What has gone wrong?
    <Email Edited By Host>

    You really should not post your email address to a public forum such as this where it can be harvested by spammers. I requested the Hosts edit it for your protection.

  • How to get Manager name of a particular BP/User from territory management

    Hi Guys,
    I want to retrieve the Manager name of a particular BP/User from territory management. The manager might be in any territory hierarchy level above the user.
    Please guide.
    Regards,
    Shaili

    Hi Shailip,
    Basically Territory hierarchy is customized based on client's business, from your reply if i understood properly i think your territory has 3 levels and 
    First level : District
    Second level: Area
    Third level: Branch
    when an employee at third level is passed, you need employees assigned to area and district levelwhich are above Branch(in your case managers)
    Solution:  Example
    First level : District - territory length(2 char)
    Second level: Area - - territory length(4 char)
    Third level: Branch- territory length(4 char)
    1. Read the territory hierarchy(which is customized to meet clients requirement) using function module
        CRM_TERRMAN_TERRLEVEL_READ ehich gives territory levels with territory length and territory offset
    2. pass employee(business partner number) to FM  CRM_TERRMAN_TERR_EMP_DETERMINE  and get the branch path id.
    3. Based on territory length for above levels drill down to Area's path id and District's path id and pass those path id's to
    FM CRM_TERRMAN_EMPLOYEE_DETERMINE  to get managers.
    Hope this helps.
    Thanks,
    Priyanka

Maybe you are looking for

  • Verizon Blackberry Internet Service Client (BIS)- How to create an e-mail Filter

    Hello. Thank you in advance for replying to my question. I am trying to create an e-mail filter so that a contact's e-mail messages do not get delivered to my BB and instead just go straight to my regular e-mail account. I understand that you can do

  • Can I get iBooks without wi-fi connection

    Can I get iBooks for my ipod without wi-fi? Can I download them online

  • 'Currency' as a segment in Chart of Accounts

    Hi all, Please pardon me for posting such a long mail :) If you could help me address these concerns, we would really appreciate it. This is regarding Financial Accounting Hub implementation for an Investment Company. There is a requirement (details

  • Package / procedure privileges

    In a manual, I found: "Database applications explicitly call packaged procedures as necessary. After being granted the privileges for the package, a user can explicitly execute any of the procedures contained in it." But this is not working for me. I

  • Vk11 CONDITION RCORD SAVE ERROR

    Dear Expert, Please suggest how do i resolve this issue ? Following message no we have got while doing the pricing configuration in abobe define t_code please do the needfull asap regards pavel