10.4 Workgroup manager and xserv slow..

We have an XSERV running 10.4.11 server that was working fine. last week the server OS drive became corrupted and I have to reformat and reload the backup we had from retrospect. All seemed OK... BUT.. now when a user going to login to workgroup manager, it is very slow getting to the desktop and getting any icons on the desktop. this is happening in our 2 computer labs that have IMAC computers. They were fast BEFORE the server crashed and had to be restored...

Quote:
Do we need to modify/update some schema changes with Lion to be applied to the AD?
That's the question, it looks to me like it might be trying to store the configurations in a different attribute or something.

Similar Messages

Workgroup Manager and Server Admin 10.5 - Use to manage Tiger Server?

Is it possible to use Workgroup Manager and Server Admin 10.5 running on Leopard Client to administer Tiger Server?

I'm having major problems with server tools managing my 10.4.11 server. I'm finding that at least with the web management tools, I cannot make any changes to the 10.4 server Sites. To make matters worse, I cannot install 10.4 tools to get back that functionality.

Workgroup manager and imovie 8

Hello
I am using workgroup manager and imovie 8. When I login as a student or staff user, I cannot import files such as AVI. I get an error message (This file cannot be copied or moved error code: -43). If I login as admin, I am able to import files. I even tried to create a local user, but I still have to give admin rights to get it to work. I noticed in imovie 8 that when I am importing an AVI file from my flip camera, there is a save to pull down option that lists the Mac OS X hard drive. It does not give an option to save it to another location. Could that be the problem? When a student or staff is logged in, they cannot save to the local HD. I tried a previous version of imovie and was successful at importing a file. However, I want to use imovie 8. Any suggestions?? Thank you

It doesn't _+*just work*+_ if that is what you are asking. You will lose all your transitions and other work when importing an iMovie 06 HD project in iMovie 08.
There are some workarounds but hopefully enough pressure will be put on Apple to get this fixed. Please send feedback to Apple to help get this resolved.
http://www.apple.com/feedback/imovie.html
It is sad that iMovie 08 actually has less editing power than Microsoft's Movie Maker application - I did not think I would ever get to say that

Workgroup Manager and Safari

I've got Mac OS X client machines using Active Directory for login credentials and Open Directory for Workgroup Management.
Recently I've been trying to change the Homepage within Safari but can't. After some testing and much frustration, I've determined that I seem to be able to change any other preference on the machine except Safari preferences.
Does anyone know a solution to this?
Thanks

Greetings,
I am experiencing the same problem. My clients are running 10.4.7, and my server is also running 10.4.7 Server (It's an Xserve). Safari only wants to load the silly http://www.apple.com/startpage/
I am only setting preferences at the Computer level, not user, nor groups. Hence I don't think it's conflicting with anything. Any advice would be helpful. Thanks,
Andrew
Andrew W. Johnson
Programmer Analyst
Department of Instructional Computing
Division of Information Technology
Stony Brook University
S-1464 Frank Melville Jr. Memorial Library
Stony Brook, NY 11794-3350
Tel: (631) 632-1824
Cell: (631) 767-9946
Fax: (631) 632-9803
Mac OS X (10.4.7)

Does workgroup manager and OSX have problems?

I am a classroom teacher using Adobe CS2 on 24 IMac G5's and 3 IMac G5's with the intel processor. I have had problems with Photoshop and Illustrator saving empty files and files disappearing. So my Tech people want to redo the server.
They tell me that I can have only one group of users, because more groups causes many problems. At the present time I have four groups set up according to the different classes I teach. The groups are Desktop Publishing, Digital Photography, IWP Students and Night school. Each group has different programs and template files that they need for assignments.
I have been told this using of two or more groups is what's causing saving problems with Adobe CS2 programs.
They want to make one group for all students and I don't see why if workgroup manager sets preferences for each group (about 75 students in each group) that 2 or 4 groups is all that many. Right now each student is assigned to a group and only sees programs or files that are used in that group.
If this new an improved setup is done then all students see everything and have access to all programs for all classes instead of just the group assigned to the class they are in.
Am I missing something or isn't the server and workgroup manager supposed to be able to set up different groups so you can limit access.
I want to limit access but the tech people want something easy and less limited. Are they right that the saving problems of Adobe CS2 programs is due to too many groups(4 total) with different preferences? Does Workgroup manager have problems with this type of setup? Are the Tech people just taking the easy way out to save on the new setup? Is my theory of limiting access wrong?
I am from the days of At Ease with panels. I never had problems no file sharing no extra files or programs to use.
Any opinions on the server setup with Workgroup Manager?
Dennis

Sorry I placed this in the wrong OS area and I don't know how to move it to the correct OS area. Can anyone help with that?
Dennis

Workgroup Manager and Login Picture

I would like to manage the login screen picture from Workgroup Manager (the 'DefaultDesktop.jpg'). I know where to change the picture in CoreServices. I am looking for a solution where I do not have to touch all computers in the building in order to change this setting.

I suggest you ask in the Leopard Server forum.

Workgroup Manager loses all passwords when the Xserver is rebooted

Hi all.. I'm a newbie with Mac server, an MCSE and former Network Adminstrator of an all Windows domain, now in a mixed environment and responsible for the Mac server/clients as well as the Windows server/clients.
In January we attempted a migration from Panther server to Tiger/Xserve, on a brand new server. It appeared to have worked, and users were able to log in successfully after being created in Workgroup Manager, and given passwords.
Our problem is huge!! We cannot reboot this server!! Therefore, we cannot do upgrades, for just one problem. What happens when we reboot is that ALL passworeds in Workgroup Manager have to be entered again!
Any help will be gratefully appreciated!
High School XServe Administrator

Tony,
I wish to thank you for the helpful comments/suggestions to download the article at:
http://docs.info.apple.com/article.html?path=ServerAdmin/10.4/en/c3gs4.html
It was an excellent quick guide that I followed to the letter, and then I called Apple Support and was able to further troubleshoot our server/client connection issues. When I left at the end of the day, the server is in great shape, although we still have some connection issues and tomorrow one of our Mac teachers who used to manage our Mac server will show me how to re-create the shared folders/shares and then add the users to the shares.
The good news is that the users are now semi-connecting, with the peppermint-stick progress indicator, but then a failure message that refers to the shares.
Your link to the article was a terrific start for me, and the Apple technician was most impressed that I had already covered all of the suggestions in that article when we spoke.
Thanks... one more post after a complete success, hopefully tomorrow... which I will probably spend re-creating all users and shares..
High School XServe Admin

Imovie 8 and Workgroup manager

Hello
I am using workgroup manager and imovie 8. When I login as a student or staff user, I cannot import files such as AVI. I get an error message (This file cannot be copied or moved error code: -43). If I login as admin, I am able to import files. I even tried to create a local user, but I still have to give admin rights to get it to work. I noticed in imovie 8 that when I am importing an AVI file from my flip camera, there is a save to pull down option that lists the Mac OS X hard drive. It does not give an option to save it to another location. Could that be the problem? When a student or staff is logged in, they cannot save to the local HD. I tried a previous version of imovie and was successful at importing a file. However, I want to use imovie 8. Any suggestions?? Thank you

Hello
I am using workgroup manager and imovie 8. When I login as a student or staff user, I cannot import files such as AVI. I get an error message (This file cannot be copied or moved error code: -43). If I login as admin, I am able to import files. I even tried to create a local user, but I still have to give admin rights to get it to work. I noticed in imovie 8 that when I am importing an AVI file from my flip camera, there is a save to pull down option that lists the Mac OS X hard drive. It does not give an option to save it to another location. Could that be the problem? When a student or staff is logged in, they cannot save to the local HD. I tried a previous version of imovie and was successful at importing a file. However, I want to use imovie 8. Any suggestions?? Thank you

Home Directories can't be deleted in Workgroup Manager

I set up a Home Directory at the ROOT level of my server to test it. I was successful so I "thought" I knew what I was doing.
I needed the Directories to be in my XRaid as that's where the "room" is and I expect to have 15-20 Home Directories.
So I deleted the User folders at the ROOT level and unshared them in Server Admin (prob the WRONG order).
Now the path to the deleted Directories still shows up in Workgroup Manager and the little "negative" sign is grayed out. I see no other way to delete it.
Now I'm stuck as it appears that any time I try to create a new Home Directory, it "saves" quietly but the user folder it creates is only 44k (although it includes all the Home folders). When I attempt a Log-In I get an error:
"You are unable to log in to the user account "jeff" at this time. Logging in to the account failed because an error occurred. The home folder for the user account is located on an AFP or SMB server....."
I tried exporting all my Users, deleting then and importing them... same issue.
Any other ideas??
Thanks

Hi
When you install OSX Server by default it creates and shares Users, Groups and Public. This has been the case ever since 10.2 came out. Leopard Server continues this 'tradition'. If you delete any of these default folders after first unsharing them, the server will complain mightily as well as giving you problems.
If you want require a sharepoint for your users networked home folders to reside elsewhere simply unshare those default folders and create similar folders wherever you want them (an XServe RAID for example), share these and continue doing what you need to do.
Whenever I have had to attend a site where the local admin has deleted these folders more often than not it has required a rebuild - drastic I know. I have had some limited success by stopping all the services and unfortunately this would also mean demotion to Standalone for your OD Master and recreating the default folders (name them the same) at the root level of your server's boot drive. You can do it using the finder or terminal:
sudo mkdir /Users
Then restart the server. If on successful login the icon on the Users folder comes back then you should be OK.
Hope this helps, Tony

How to you "publish" Bonjour Shared printers using Workgroup Manager?

Dear Friends,
Hello. We have just spend considerable time setting up Mac OS X 10.6.4 server to host some printers to our Mac clients (previously we had used a Windows print server but it was too slow and inflexible). We have the printers we need set-up and shared out as Bonjour Shared printers because that sends out all of the duplex setting we need. I have tried to "publish" these using Workgroup Manager and they do not show up on the list. How do you "publish" these printers using WGM? NOT: We can't just let people select "nearby" printers because we want to set a default and use kerberos security.

Eric T Gadsby wrote:
Anthony,
Thank you for you help. The procedure you outline is what we have attempted to do. We add the Bonjour-shared printers to a client and then open Work Group Manager on the same computer but when you go to the "Printing" pane of "Preferences" the printers do not show under "Available Printers", neither do USB printers.
Hope this clarifies our problem. We would like to use Work Group Manager as advertised but it doesn't seem to be working for us.
Welcome to my world…
This 'bug' has existed for several major versions of Mac OS X Server (10.6, 10.5, and maybe 10.4). I did report it more than once to Apple as an official bug but they don't seem to 'get it' despite my best efforts.
You can do the following
Add a printer directly to a computer running WGM,
Then use WGM to 'push' the printer out to clients,
The model of the printer will then also be pushed out to clients so they automatically select the correct driver but not the correct paper tray/duplex/etc. settings.
You can do the following
Add a Mac OS X Printer Server queue to the computer running WGM (which must not be the same computer acting as the Mac OS X Printer Server) if you do this via the Bonjour advertisement of the queue then it will not get the model, or any settings from the print server.
You can then push this queue out to clients via WGM
You cannot do the following
Add a Mac OS X Printer Server queue to the computer running WGM (which must not be the same computer acting as the Mac OS X Printer Server) if you do this via IPP, then the WGM machine will get the model automatically, but not any paper tray/duplex settings.
However this queue cannot then be seen in WGM and therefore cannot be pushed out to clients.
Apparently doing custom XML, would allow also pushing out printer settings, but this is so far from 'the Macintosh Way' that only a masochist would do it.
This area is one of the few where the Mac is significantly worse than Windows, it is an area that Microsoft (mostly) sorted literally decades ago. Not only in the Windows world can you push the printer model, and the printer settings, but you can even if needed push the entire printer driver out to the (Windows) clients.

AD Users not showing up in Workgroup Manager

Hi, I'm configuring a new installation of 10.4 server on an Intel Xserve to integrate with an already existing AD domain and provide group policies to Mac users via OD.
So far, the install has been so smooth, fast, and simple. The Xserve has been joined to the AD domain, Kerberos is running, and I have an active OpenDirectory Master.
Now, when I go to Workgroup Manager, the users in the AD domain do not show up and if I try to authenticate with the same username and password I used to bind to the domain I get the error "The login information is not valid for this server". Also, if I use dscl I can navigate to "/Active Directory/All Domains/Users" but if I try to run ls I get "ls: DS error: eDSCannotAccessSession".

Hi Tim
You are almost there but not quite.
Firstly its not important if the AD Server does not have a reverse pointer. As long as the OD Master does that should be enough. Ultimately it would be better if there was one configured but there is not much you can do about that is there? I doubt very much if the AD Admin is going to want to fiddle with a 'live' DC's DNS Service if its likely to affect his domain?
What I generally do is this:
Make sure SMB Digital Signing is Not Enabled on the AD Server. There should be at least two places where this has to be disabled. If the 'powers that be' have defined SMB Digital Signing then SFM (Services For Macintosh) must be installed. If its 'nada' to both then you will be severely limited in integrating OSX Server and mac clients with AD. Yes of course make sure there is an (A) and Reverse PTR for the mac server. Next bind all mac clients to the AD Server and make sure the AD Server is listed first for Authentication and Contacts, also make sure mac clients are using the AD for authentication. Test and verify a mac client to see if (a) home folders are created and accessed and that mac clients successfully log in. You sometimes don't get the two.
Now turn your attention to OSX Server. Make sure you have (a) reserved a fixed IP address for it in the AD's DHCP Service and you have placed the AD's IP address as the primary IP address in the DNS Server's field in the Network Preferences Pane (b) tested DNS fully and that OS X Server resolves correctly on the forward and reverse pointers for itself. Now bind OSX Server to the AD using the Active Directory plug in in Directory Access and an AD admin account that has authority for the Domain. Launch Workgroup Manager and you should see AD Users and Groups have 'flowed' into the /Active Directory/All Domains node. Quit out of WGM and launch Server Admin. Enable the AFP Service and set the authentication method to Any Method. Select Open Directory and change the Role from Standalone to Open Directory Master. You will be prompted to create the default Directory Administrator account diradmin (UID 1000). You should see the Kerberos Realm and search base fields autofill with the fqdn of the Server. Change both of these to reflect the fqdn of the AD Server. For example if the fqdn of your mac server is osxserver.addomain.com and the windows server is adserver.addomain.com then change the information presented in thos fields to ADSERVER.ADDOMAIN.COM and dc=adserver,dc=addomain,dc=com. As you can see you should only need to change the first part. Click OK or Continue and you should now have an OD Master that is not the KDC (Kerberos has been stopped). This is the state you want it be in before going any further. You can now 'kerberize' the AFP Service you started previously by selecting the kerberize button and using the same AD admin account you used to previously bind the server to the AD. To doublecheck if the AFP Service has been kerberized launch terminal and issue:
sudo kadmin.local -q list_principals
You should see an entry for [email protected] amongst others.
Now launch Directory Access and make sure the server's loopback address is listed in the LDAPv3 plug in. Make sure that the server is listed first in the Authentication and Contacts fields. Quit out of Server Admin and launch WGM. Navigate to the /LDAPv3/127.0.0.1 node and you should see diradmin waiting for you. Open another connection window in WGM and navigate to the /Active Directory/All Domains node. When you authenticate the /LDAPv3 node you use diradmin, when you authenticate the /Active Directory node you use the AD admin account. Create a Group in the /LDAPv3 node select the + icon and toggle between the two nodes as you select users or groups and add them to your /LDAPv3 node. Once you are happy select a preference to manage, apply desired changes and save the changes. This is better done on a client machine with the Server applications installed.
Back to your mac clients. Begin to join these to the LDAP node using the LDAPv3 plug in in Directory Access. Use the Server's IP Address or its FQDN if the DHCP Server is also doling out DNS information to networked clients. Its IP address should be good enough. Don't bother with authenticated binding and make sure clients are not using the OD master for authentication and contacts. Lastly make sure the Active Directory/All Domains and the /LDAPv3/OD Master IP address or fqdn are in that order for browsed directories.
Its best if you have a secure local admin account on all your mac clients and that each mac is named differently. Set this in the Sharing Preferences Pane.
Begin to test. If everything is OK you should now have mac clients logging into home directories controlled by AD as well as OD Managed Preferences being applied.
One final thing. Avoid using .local as the basis for the DNS Service. I realise in your environment you have no control over that. In which case make sure all mac clients have the AD's .local domain name in the Search Domains field in the Network Preferences Pane. If your clients have Leopard installed you should not have to bother as Leopard copes with .local name resolution better than previous versions of the OS.
As ever how successful you are and how long it takes will depend mostly on how well the AD is configured. There is no magic bullet that can be used on the mac side to fix a poorly configured AD environment. If everything is as it should be regarding the AD Server it should not take you longer than 10-20 minutes (after server installation) for the server and possibly 2-3 minutes for each client. It really should not take that long.
Does this help?
Tony

Workgroup Manager Crashes at Home

Hi
This is my first post here, i hope you a merry christmas for all, i have an xserve with xraid and last week when i did a new user in workgroup manager and i want to see the "home" part, the workgroup manager inesperadidly crashes. any solution?
thanks for all

This Thread Explains the solution that worked for me.
http://discussions.apple.com/thread.jspa?messageID=663562&#663562
good luck
-Jason

How do I get system users/groups to appear in the Workgroup Manager list?

When I open the Workgroup Manager and select the Users tab, it only shows users set up in the Workgroup Manager -- same when I browse Groups. But, I also have a couple system users/groups set up not in the workgroup manager, but through the OS's System Preference interface for Users.
Is there a way to automatically have System users appear in the Workgroup list?
I also can't add users to System groups, since the groups also won't appear in the Workgroup Manager (like adding a user to the group Admin or Staff -- default system groups).
I'd just like the option to "show System users and groups" somewhere.
Thanks.
Patrick

Hi
If I understand your post correctly then launch WorkGroup Manager and select Preferences from the WorkGroup Manager Menu. Enable the Show "All Records" tab and inspector option and click OK. In the Users/Groups/Computer tab you should now see the addition of another icon - it looks like a bullseye. Select this and under the filter field selecting 'AccessControls' will show you a long list. Scroll down and select Users. Now go back to the Users tab and you should see all users visible and invisible. You’ll see the same thing for Groups.
You will see different Users and Groups depending which directory node you are in. In the LDAP node you should only see Directory and System Administrator as well as VPN MPPE Key Access User in addition to any user you have created within that node. In the local Net Info node you should see users such as Amavisd User, Clamav User, Cyrus IMAP User etc. You’ll also see UIDs and GUIDs amongst a wealth of other information if you select a user or group and select the Inspector tab.
You can modify record attribute and values as well as adding your own. You can even use WGM in the same way you would use Net Info Manager locally if you wish.
Tony

Workgroup Manager doesn't create home directories for OD accounts

I'm having an issue where home directories aren't created for OD accounts. My setup is as follows, the home directories are stored on the OD Master (the only Apple/OD/AD server on the network), and the home directory paths are filled as afp://192.168.1.254/Customers, fakeuser, /Users/Customers/fakeuser
This same pathing scheme works fine for local accounts, however for OD, clicking Create Home Directory and saving the account does nothing (no errors, nor folders created). If I ftp into said account, I wind up being directed to /Users (definitely not the expected behaviour)
I am deploying a web based upload system that I want to authenticate against OD users so as to share home folders and permissions with the ftp server, once I have this figured out I will be migrating a bunch of accounts to OD from local.

In addition to potential DNS issues, it sounds like you may be using the wrong procedure to define the users' home directories. You should never have to specify the paths manually; instead, define the share point ("Customers" in your case) to be automounted, and then it should automatically show up in the list of available home folder locations, with all the necessary paths predefined. Here's the full procedure:
1. Run Server Admin, and select: the server name in the sidebar -> File Sharing in the toolbar -> Volumes & Browse under that -> navigate to the /Customers folder in the column view.
2. Make sure the folder is being shared (with it selected, you should see an "Unshare" button near the top right of the window); if not share it with the Share Button (then Save the change).
3. Select the Share Point tab under the file browser (NOT the one above it), and select the Enable Automount checkbox. A dialog will open asking for the automount details; make sure the Directory is set to /LADPv3/127.0.0.1, Protocol to AFP, and Use for is User home folders and group folders. OK the dialog, and be sure to click Save to make the change take effect.
4. Run Workgroup Manager, and select Accounts in the toolbar -> Users (single person icon) tab under that -> some user account(s) you want to configure under that -> Home tab on the right.
5. Select (None) from the location list and click Save (this wipes out any current setting, so we can rebuild it correctly).
6. The Customers share point should be in the list of available locations (due to being configured for automount); select it, then click Create Home Now, and finally Save.

Workgroup Manager

When I create a new account in workgroup manager and type in a password for that user, it just resets the password to the diradmin's password. I have DNS configured and Kerberos is running. Is there anyway to fix this problem? And when I try to login to the account, it said unable to login to account.
Thanks

no i dont think you can, but you can restrict what users can do, so seeing all the tools shouldnt be a problem?

10.4 Workgroup manager and xserv slow..

Similar Messages

Maybe you are looking for