Strange Permissions problem when creating new Open Directory user

I just set up a mac lab to authenticate to an Open Directory server which also stores home folders. All of the initial users I created work fine, there were about 50 users that I set up. When I added a new user this morning though, it would not allow him to access anything within his home folder (i.e. nothing worked)
I went back to the server and took a look at the Users share and noticed that when his accound was created, instead of setting the owner of the folder to his username (xxx123) it was set to his userid number (1024). I did a chown on his directory to his username and he was then able to access his home directory from the clients.
I realize I found a fix, but I would prefer to not have to do this every time I create a new user. Why is this happening?

Have you used the "Role" drop-down to "SYSDBA"? - if not, you get the ORA-01017 error.

Similar Messages

Can't create new open directory user

hi.
If I use the workgroupmanager to create a new user it automatically creates one with a "crypt" password.
first it is shown as open directory, but then if I re-load, it says "crypt" password.
If I try to change it to open directory the system tells me that I am not authorized to do so.
it does not matter if I try the workgroupmanager locally or via my macbook remotely.
if I create them via the server preferences it works fine.
since I am a newbie here, maybe I am doing something wrong... ideas? please.
thanks.
martindavid

Check out this tread, you are not alone but there doesn't seem to be a single solution...
http://discussions.info.apple.com/thread.jspa?threadID=2262981
I had this code and MY solution came from the fact that I had turned OFF DNS because I couldn't see that "I" was using it. turning it back on and ensuring that it was correctly configured solved it for me!

Unable To Create New Open Directory Master

I have a brand new installation of MacOS X Mountain Lion Server, latest version, in a brand new Mac Mini. This Mac Mini is being co-located in a data centre, and I am setting it up via remote access (screen sharing). The data centre has setup DNS zone records for my domain, including a reverse DNS PTR record, and everything in the DNS is working fine.
During the installation of Server, when the installer asked for the type of 'Host Name', I selected 'Host name for Internet'. The installer was able to use the IP address of the Mac Mini to automatically find the correct host name, and configure it. Once the installation was complete, no services were turned on - not even DNS, as the installer probably figured out that DNS services were being handled externally.
The first thing I went to try and do was to turn on Open Directory. I turn the service on, and a sheet comes down, where I select to "Create a new Open Directory Domain". I click 'next', and on the next sheet I enter the OD Administrator's details, and password. Click 'next' again, and then I get the following message:
"This computer's host name is invalid.
The host name does not resolve to any configured address of this computer. Please ensure the host name is correct."
Opening Terminal app, and typing "hostname", I get the correct hostname, as showing in Server app itself.
Entering "sudo changeip -checkhostname" in Terminal app, I get all correct details for the IP address and host name of the machine, and the message: "The names match. There is nothing to change. dirserv:success = 'success'"
I finally tried getting Server app to change the host name itself - going into the Server pane, select the 'Network' tab, and in the 'Names' section, next to the host name, click on the "Edit..." button. Again, went through the wizard, and the wizard again was able to find the hostname automatically from the machine's IP address. Once the 'changing' process was completed, I went to try and initialise Open Directory, and again, got the same message.
Can anyone shed any light? Any suggestion would be welcome at this stage...

MrHoffman, thank you for your guidance. You have, however, given me a bit of a headache.
MrHoffman wrote:
127.0.0.1 is likely going to be incorrect here. Please reference the DC DNS servers, and not a local server. If you're in a DC and particularly with a public-facing host without an outboard firewall to block DNS traffic, you likely do not want to be running your own local DNS services.
As described previously, the server was referencing the DC DNS servers. The server was not running its own DNS service. Open Directory was not able to detect that the ip address and the hostname were correct with this setup - even though the command line on the server as well as externally showed that all DNS records were setup correctly, and that the IP address and hostname matched. The server's own installation wizard and 'Change Host Name' wizard automatically detected the hostname from the machine's ip address - by consulting the reverse DNS PTR record in the DC DNS servers.
Starting the server's own DNS server - and adding '127.0.0.1' to the top of the DNS list in Preferences - allowed me to create the Open Directory master, finally. Of course, the internal DNS server was setup so that only the server itself could access it - it was closed to any other machines - and even then, I had it running only momentarily: once Open Directory created its master domain, I switched DNS service off, and removed '127.0.0.1' from the DNS list in Prefences.
With that setup, everything seemed to work fine. All users were able to login, access their share points and their mail.
MrHoffman wrote:
For the host name, the host name would usually be the FQDN fully-qualified domain name, and "example.com" isn't usually a host name. You'd usually find somehostname.example.com here
That is the only machine in the domain. All public sub-domains - like 'mail', 'www' or 'calendar' - point to the same machine. The reverse DNS PTR record points to the higher-level domain "example.com".
Your warning, however, made me worried:
MrHoffman wrote:
I'd probably rebuild the OD configuration, as I'd wonder of OD now had a bogus host name. Once bad DNS gets involved, the entanglements can be quite pernicious..
So I decided to heed your advice, and rebuild OD. I deleted the Open Directory master, and tried rebuilding it with DNS service turned off. As before, OD insists that "the host name does not resolve to any configured address of this computer", and refuses to create the new Master. I ended up following the procedure above again - switching DNS service on temporarily to get OD to work.
The problem is, that now no user can connect to the server anymore. Everyone keeps getting a message stating that their password is wrong - including users on their iPhones and iPads.
I suspect that when I created the new OD Master, it created a new certificate, and that is what is causing problems. While I could try to get the desktop users to delete the old certificates from their keychain, this is not really an option for iPhone/iPad users.
Where do I go from here? After almost 24 hours straight dealing with this, I'm at the end of my rope...

Error creating new Open Directory domain

The wizard for creating a new Open Directory domain in Server.app on Mountain Lion responds with the following error message:
     "An error occurred while configuring My Server as a directory server. Please check your network configuration and try again."
Not very helpful. How do find out what the actual error is?
Thanks.

Can anyone translate these log messages?
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]: label: default
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]:         dbname: od:/Local/Default
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]:         mkey_file: /var/db/krb5kdc/m-key
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]:         acl_file: /var/db/krb5kdc/kadmind.acl
Aug 12 05:22:26 myhost com.apple.launchd[1] (com.apple.Kerberos.kpasswdd[60241]): Exited: Killed: 9
Aug 12 05:22:26 myhost com.apple.launchd[1] (com.apple.Kerberos.kpasswdd): Throttling respawn: Will start in 10 seconds
Aug 12 05:22:26 myhost com.apple.launchd[1] (com.apple.Kerberos.kadmind[60242]): Exited: Killed: 9
Aug 12 05:22:26 myhost com.apple.launchd[1] (com.apple.Kerberos.kadmind): Throttling respawn: Will start in 10 seconds
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]: WARNING Found KDC certificate (O=System Identity,CN=com.apple.kerberos.kdc)is missing the PK-INIT KDC EKU, this is bad for interoperability.
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]: KDC started
Aug 12 05:22:26 myhost.mydomain.com Server[46707]: An error occurred while configuring My Mac Mini Server as a directory server:
        Error Domain=XSActionErrorDomain Code=-1 "A child action failed" UserInfo=0x7fb854a2ad90 {XSActionErrorActionsKey=(
            "Creating Open Directory master"
        ), NSLocalizedDescription=A child action failed}

Encounters a Problem when creating or opening project

I could only get V1 to work with Admin priviliges, otherwise it threw up the message "Adobe Premiere Elements has encountered a problem & needs to close"
So I have upgraded to V10, but now hit the same block even with users having admin priviledges.
Happens when I try to create a new project (when clicking OK after entering new details) or when trying to open an existing project.
When creating a new project the basic folders and files are created before the error message and crash.
I am using Windows XP SP3 with all latest updates.
So I can do nothing at all with PE10.
Error code is 0xc0000005
Flag 0x00000000
Record 0x000000000000000
Address 0x00000000196cd0a3
Any ideas?

Dear A.T., thanks for trying to help. Regarding your questions:
the PC is a single-user machine on a small network. In accordance with Microsofts security recommendations, the working user account does not have administrator priviledges
4Gb RAM of which 2.15Gb unused
683Gb free space on C:
Two internal disks, formatted NTFS
Latest Quicktime installed
Previous version of Premiere Elements was v1
A bit more information on how it fails. Approximately 10 seconds after specifying a new project or giving details for a project to open I see a window informing me that a problem has been encountered and asking if I want to send details to Microsoft. I dont know if this is Adobe or Microsoft generated. If I click on any option then Premiere Elements disappears and a window declares "MS Visual C++, Runtime Error!, Program c:\program files\A...., R6030 - CRT not initialised
The Windows event log records "Faulting Adobe Premiere Elements.exe - faulting module display.dll version 6.0.0.0" I found display.dll in c:\Program Files\Adobe\Adobe Premiere Elements 10 folder. So an Adobe dll is causing the problem?
So as you recommended, I updated the Intel G35 chipset driver, and that then allowed me to open create new projects and open old ones! Progress!
But, after doing some video editing, when trying to close Premiere Elements, it crashes with the same unexpected problem encountered error and the same C++ error. This time the Windows Event Viewer stated that the faulting file was Ig4dev32.dll - the new G35 chipset driver I had just installed.
So I can now create and work on projects but likely to lose my work unexpectedly!

Problem when creating new resource in CMSXDB

We installed the CMSXDB sample succesfully.
We can create new users, create new folders; but when adding a documnt (resource) to a folder we get following error.
For an external document:
oracle.otnsamples.cmsxdb.exception.CMSAccessException: IOException in FileUploadUitlsjava.io.IOException: java.sql.SQLException: Invalid argument(s) in call
     at oracle.otnsamples.cmsxdb.useraction.FileUploadUtils.(FileUploadUtils.java:89)
     at oracle.otnsamples.cmsxdb.useraction.DataUtils.resource(DataUtils.java:885)
     at NewResource.jspService(_NewResource.java:73)
     at com.orionserver.http.OrionHttpJspPage.service(OrionHttpJspPage.java:56)
If we try the other option (creation on the fly); we get following error:
oracle.otnsamples.cmsxdb.exception.CMSAccessException: SQLException in createresource in resource method of DataUtils : java.sql.SQLException: SQLException in getCLOB : java.sql.SQLException: Invalid argument(s) in call
     at oracle.otnsamples.cmsxdb.useraction.DataUtils.resource(DataUtils.java:1109)
     at NewResource.jspService(_NewResource.java:73)
     at com.orionserver.http.OrionHttpJspPage.service(OrionHttpJspPage.java:56)
     at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:317)
     at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:465)
     at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:379) ...
Do you have any idea what can be the cause for this error?

Hi Mark,
The details of the properties that you have to set in Connection.properties file
List of properties to be altered (Mandatory)
DBWebURL=http://incq234a.idc.oracle.com:8080
The HTTP url where the xdb servlet engine is running
Format : http://<hostname_where_db_is_installed>:8080
siteRootPath=/tmp/testsite
The absolute path under which the files will be generated, once a file is sent for externalization and approved by cmsadmin.
The file will be generated under ConnParams.siteRoot/<resource_path>.<content_type>
example: /tmp/testsite/cmshome/news/headlines.html
List of properties to be altered( Optional )
[ we recommend that the default values be used and these properties not be altered ]
DataSourceName=jdbc/CmsdbDS
Name of the datasource, that was entered in J2EE_HOME/config/data-sources.xml
DBUsername=cmsadmin
DBPassword=cmsadmin
[ if any of the below properties are modified, then the corresponding changes have to done in xdbconfig.xml ]
CMSServletContextRoot=/OTNCMSServlet
The context root where the OTNCMSServlet can be accessed. It will be appended with the DBWebURL.i.e
http://localhost:8080/OTNCMSServlet
Once the servlet is deployed to XDB and the xdbconfig.xml file updated with the servlet entry. The Servlet can be accessed from the above URL
TransServletContextRoot =/transformservlet
The context root where the TransformServlet can be accessed. It will be appended with the DBWebURL.i.e
http://localhost:8080/transformservlet
SearchServletContextRoot =/searchservlet
The context root where the SearchServlet can be accessed. It will be appended with the DBWebURL.i.e
http://localhost:8080/searchservlet
We are looking into the resource creation issue, pls update us on wheather you are using the right values for these properties. If you were using any incorrect property values, update it and try deploying and running the app again.
Regards
Elango.

Problem when creating new Objects in ESR

Hi ,
When i am trying to create new objects in ESR it is no allowing me to do,i have developed around 80 interfaces as of nowmsuddenly this eeror i getting,anyone experienced this kind of issue.
*You cannot create new objects since the system is not the original system of the software component version*
You cannot create new objects since the system is not
the original system of the software component version (NOT_ORIGINAL_NO_CREATE)
MESSAGE ID: com.sap.aii.ib.server.oa.rb_all.NOT_ORIGINAL_NO_CREATE
Regards,
Raj

Hi Raja,
I am new to SAP PI. So i dunno much regarding SAP PI. Hence i am getting same error that not able to create objects in SWCV. I read this discussion but i dunno where to select the 'Modifiable & Original' options, so that i can enable the Objects. Can you please guide me?
Thanks,
Amarnath

Huge Problem When Create New Lightroom Catalog

When I created new Lightroom catalogs, I did not notice that it asks where to save it. So, it saved the catalogs in "Documents". Now it seems I have two copies of the following:
- The Lrcat files appear in Documents and on my external drive in a file labeled LRFILES
- The original raw files downloaded from the camera appears in Documents and my external drive in a file labeled ORIGINALS
I trashed the Lrcat files and the originals in Documents. I was surprised to see that the Lrcat files and original raw files ALSO disappeared (from external storage). Why, how did that happen?
I recovered the Lrcat files and original raw files and loaded them back onto the external storage. They appeared in Documents! Why, how did that happen?
I tried to relink my Lightroom pictures with the Lrcat file on the external drive. I can do it one at a time. It does not locate all the other ones even though they are all in same file, like what usually happens.
Goal is to relink all pictures with the originals on the external drive so I can get rid of the duplicate files under "Documents". How can that be done?

I don't understand why you are creating so many different catalogs. In most instances, Lightroom is much easier to manage when using a single catalog. When you use the import dialog you need to take care to specify the destination folder where you are going to download. It's all controlled in the right-hand panel of the import dialog. Ideally, you should be working with a single catalog, and choosing a destination folder on your external hard drive if that is where you want to store your images.

Problem when making new connection with user "sys"

Hi, I'm having trouble on making new connection with user sys against local 10g installation, the password is correct and I've tried making new connection with other
users which is fine.
when I click "test" or "connect", the error msg is strange like this:
"ORA-01017: invalid username/password; logon denied"
can anybody help.
Thx.

Have you used the "Role" drop-down to "SYSDBA"? - if not, you get the ORA-01017 error.

When creating new Timecard, our user couldn't select Project from the popup

Hey Guys,
Thanks for your attention, I need help.
One of our user could not create new Timecard with IE9, because when she selected new project she met the error as below,
Webpage error details
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C)
Timestamp: Mon, 22 Aug 2011 10:09:08 UTC
Message: 'LcurrentElement' is undefined
Line: 17
Char: 210
Code: 0
URI: https://selfserve.activenetwork.com/OA_HTML/RF.jsp?function_id=16744&resp_id=51224&resp_appl_id=809&security_group_id=0&lang_code=US&params=TFQXmjW38UwMUAdY82UIcs3-4MilvZgfdr8FqiKj73g
And even she has downgraded to IE8,still the same error, then tried IE7 in her VM, still same.
Is there someone who have a solution about that? That would be much appreciated.
Good day, thanks in advance.

Thanks for your attention, I need help.Please post the details of the application release, database version and OS.
One of our user could not create new Timecard with IE9, because when she selected new project she met the error as below,Do you meet the minimum requirements as per this link?
Internet Explorer 9 Certified with Oracle E-Business Suite
http://blogs.oracle.com/stevenChan/entry/internet_explorer_9_certified_with
Webpage error details
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C)
Timestamp: Mon, 22 Aug 2011 10:09:08 UTC
Message: 'LcurrentElement' is undefined
Line: 17
Char: 210
Code: 0
URI: https://selfserve.activenetwork.com/OA_HTML/RF.jsp?function_id=16744&resp_id=51224&resp_appl_id=809&security_group_id=0&lang_code=US&params=TFQXmjW38UwMUAdY82UIcs3-4MilvZgfdr8FqiKj73g
Can you find any details about the error in the event viewer?
Please see if these docs help.
Customer Name LOV Errors With "'LcurrentElement' not defined" When Adding Billing Account [ID 1342927.1]
iProcurement Page Supplier Search Throws Javascript Error For Some Of The Users [ID 1303835.1]
And even she has downgraded to IE8,still the same error, then tried IE7 in her VM, still same.Can you reproduce the issue from other machines and using different browser (like Firefox) from the same machine?
Is the issue with one application user account or with all accounts?
Is there someone who have a solution about that? That would be much appreciated.Please provide more details by answering the questions in this reply.
Thanks,
Hussein

Problem when creating new SO line

Hello Everyone,
Through form personalization I have made the sales order lines non-Updatable those having status as "Release to warehouse" and those are having other than this status then it is updatable.
Suppose, there are two lines already present and second line has status like "Release to warehouse" and if I create a new line and try to save this line then the error message come up i.e. "You attempted to update a record on a block that does not allow updates."
Please provide the solution.
Thanks,
JAK

Hi Raja,
I am new to SAP PI. So i dunno much regarding SAP PI. Hence i am getting same error that not able to create objects in SWCV. I read this discussion but i dunno where to select the 'Modifiable & Original' options, so that i can enable the Objects. Can you please guide me?
Thanks,
Amarnath

Can't login to new open directory users

I have a Mac Mini Server running 10.8.2 Server. I have existing users, most with no home directory and a couple with network home directories.
However, any NEW users I add (in LDAPv3), they aren't able to login. When I create the user, the "access account" option is checked and stays checked after the user is configured & saved, and stays that way when I relauch Workgroup Manager.
However, when I attempt to login to this user from a network comptuer, the "access account" checkbox gets unchecked. I can check it again and save the account, but when I reopen Workgroup Manager, it's unchecked.
Help???

Good tip from Francis.
Last night I finaly was able to get things back to semi normal to summarise here are some tips that worked for me.
Things first went wrong when I tried to add a new user in work group manager. After doing this I got some quite strange behaviour.
The server appeared to hang when loggin on with the new user. but ssh to the server was working. Finally after about 10 minutes I hit the reset button on the server it appeared to go into sleep mode then automagically it logged in the user. Wow did it work .... no, Bad news other users could no longer ssh to the server... Arrrr. Cause tracked down to Kerberous reported as no longer running... Clients (my family ) startign to report cant access services like email ... help...
Rather than all the pain of tryig to fix that this is what I did.
1) Back up OD in Server Admin ( not Server.app) OD dosent show up there dont know why ??
2) Make sure the DNS is working
nslookup, dig, hostname commands ... all reported correctly forward and reverse MYSERVER.MYDOMAIN.COM. domain and IP address. I even re-ordered the DNS name so that the local address 192.168.10.X was reported first on my local netwrok before the external ip of the server.
3) Create a completly new OD by deleatign the old one by setting is as a stand alone then re-creating is as a new master ( use Server Admin tool )
Finally Kerbrous all reported as runnig ... Try again to add a user...
4) Add new user in Workgroup manager open on server not remotly this didnt work.
5) set home account with apf://fqd.name/Users/
6) make sure home account is accessable on network.
6) set shell
7) in Server Admin give all permissions to services new user will need. such as ssh login as required.
8) in Server.app ( not Server Admin or workgroup manager )
check that new user appears. The local OD must be in the Directory Exployer search path for this to happen
and the server must be binded to this path.
I added both /Ldap3/127.0.0.1 but also importantly /ldap3/MYSERVER.MYDOMAIN.COM
9) in Server app click on the user then select the Advanced settings. Make sure user has home dir selectd as the correct /Users folder on the server
( this was not set at first and had the value of 99 no idea why ) there are also other important settings here.
10) Finally restore OD with perevious backup to add back the rest of the users.
Apparantly this actually does a merge not a overwrite.
End state every thign finaly working .....
except the iChat/jabber server for some reasion wont accept authanicate users.... rrrr.
Bonjour works on the local network but well the point of havign a jabber server was for family in countary A to talk to grandparents and have private secure video phone with country B so would have been nice if that worked
Good luck
Hope that helps

When creating new track in stereo... track opens in mono in arrange window

Since upgrading to 8.0.2...weird things are happening to previously saved projects. Stereo tracks are opening up mono and affecting following track. When creating new tracks in stereo.... tracks open mono. I don't know if this is due to 8.0.2 but all these freaky things have happening since. Also, when previewing Apple Loops, I can only hear it on one side, but Loops sounds fine once dragged to arrange window. Is this common or is my computer haunted ? Should I call Ghost Busters ? HELP !!! lol

Hi there,
I'm having the same problem as well: creating new tracks results in a mono software instrument, not the usual stereo software instrument. BUT... "Universal Track Mode" is already checked in my Audio prefs. I unchecked & rechecked it, but to no avail... I'm still only getting mono software instruments.
Any other ideas? No changes have been made to my system, and I'm running the latest version of Logic Pro.
Kirby

New open directory account doesn't create mail account

Hi All
I have a Mac Mini with lion server, Fresh out of the box i messed with it a few times to learn and then i did a clean (internet) install and started with the settings i wanted (hostname, etc) with no mistakes. (It seems Lion doesn't like applhying most changes)
When i set it up i created one local admin user that won't be in the open directory.
Anyway, I've set up the following :
* Address Book
* File Sharing
* iCal
* Mail
* Profile Manager
* and VPN
The first open directory user i added was myself and that user managed to get assigned an email account.
Susiquent users i've added have not been registered with the mail subsystem.
I've checked this using the "Server Admin" additional download management tool. (Mail service on the left, Maintenance up the top and then accounts uder that)
There is only one mail account and thats the first one i've added.
I havn't played with the settings so other than switching things on it should "just work" but it doesn't.
I've prevously setup vmail servers using mysql to store the accounts with postfix and courioer imap but that was in some ways simpler as nothing was under the covers. I havn't dug too much into the dovecot config files, etc as i believe there is an all knowing server configuration engine at work here that isn't doing its job (which i havn't dug into)
Has anyone had this issue of the mail accounts not being created?
Or can anyone point me to a fix?

It seems to have something to do with profile manager.
I get stack traces in the "system messages" logs for the "Server" application, grrrr.
I'll get that info and attempt to submit a but report tonight.

Problem when Creating Project (Composite Application Services) in NWDS

I've seen a few posts regarding this but I don't feel as if any real solution was given.
I just installed Netweaver Developer Studio (7.0.15) with the current JDK/JRE (1.6.0_07). When trying to create a new Composite Application Services project within the Studio, using the new project wizard, I get an error: Problem when Creating Project.
I get the EJB Module and Dictionary to create within my navigator with no problems, however, during the creation of the metadata, the error occurs. I do have the metadata folder appear within the navigator, but nothing in it. None of the other three items are created.
I have tried the attempt at deleting the metadata folder within my workspace directory and trying again but the same exact result occurs.
Is there any other solution out there for this problem besides attempting to find older versions of NWDS, etc. that are more "stable"?
Thank you!

Durga,
Very simple but effective solution.
I had tried uninstalling / re-installing NWDS with no effect but uninstalling / re-installing NWDS AND all java related products on my machine did work.
Note: For anyone else with this issue in the future. I installed the Java SDK / JRE 1.4.2_18 with NWDS 7.0.15 in case this is also a possible issue with versions.
Thanks, Durga!

Strange Permissions problem when creating new Open Directory user

Similar Messages

Maybe you are looking for