10.5.2 totally broke SMB and AFP shares (and kerberos) on my network

Hey Folks,
I'm really kicking myself for not testing 10.5.2 first... this is a disaster for me.
After installing, I can no longer access any SMB or AFP shares (regardless of host OS) using my kerberos ticket (granted from Tiger Server).
If I use the GO menu and Connect To Server it also fails, almost instantly. The server logs suggest its not even trying.
I have totally lost access to all of my shares, ssh with kerberos is broken...
Anyone else seeing problems?
Leopard in general introduced some issues with the local KDC on each machine trusting mdns...its a way to make back to my mac work ... and it broke SMB for me and a lot of people, but it wasn't the end of the world since I was sharing everything via AFP as well. Now that AFP is broken too I'm at a loss...100% down.

Something I have been messing with is my mit.edu.Kerberos file, located in System/Library/Preferences.
Take a Tiger machine, and use Text Editor to look at it's mit.edu.Kerberos file. Then, do the same with the Leopard machine. I've been trying to get Leopard to work with the Tiger kerberos settings, without luck so far. But it's a step in the right direction. Try this for starters:
On my system, when I try to use Connect to Server with the Finder, it gives me the vague "Volume Couldn't Mount" error.
Make a backup of mit.edu.Kerberos on your Leopard machine (use a test machine if possible, not a production machine). Then, delete the original file and reboot.
Try to COnnect TO server again. On my machine, I'm given a login prompt, which if I re-authenticate, I'm able to connect to the share. Your previously deleted mit.edu.Kerberos file has been recreated after this point. I'm not sure how permanent of a solution it is, however.
But it's something to tinker with if you're so inclined.

Similar Messages

What happens if I make a new iCloud account? My brother and I share and neither of us have enough space to back up our phones, and need to.

My brother and I share and iCloud account, and we have the basic 5.0GB of space. The backup space is full and neither of us can back up our phones but need to, so we can clear space on our phones. I want to make a new iCloud account for myself so that I have 5.0GB to myself, but will doing so mess up data on our phones? Such as contacts, apps, etc. Also, if it is safe to make a new account, how can I do so?

Just so you know, doing an iCloud backup is not going to free up any space on your device. It is only going to back up what is on your device in case you need it to restore your device. If you need to free up space on your device, go to Settings>General>Usage, and under the first Storage section, see what is taking up so much room on your phone.
Delete any unneeded apps, delete mail, text messages with videos and photos, remove photos from your Camera Roll if you have imported them to your computer, etc.
If you set up a separate iCloud account, then everything associated with the other iCloud account will no longer be there. Contacts can be preserved by "Keeping them on your Phone" when you delete the original iCloud account (it will ask you if you want to do that). Then, when you add the new iCloud account, you can "Merge" them with that account so you still have them.
Apps are associated with your iTunes account, and you can have a separate iCloud account from your iTunes account (see the section "Using one Apple ID for iCloud and a different Apple ID for Store Purchases":
Using your Apple ID for Apple services
To create a new iCloud account, you are essentially setting up a new Apple ID. Here is another helpful support article about setting up a new iCloud account:
Creating an iCloud account: Frequently Asked Questions
Cheers,
GB

Permissioning problems with TimeCapsule AFP share and multiple users

Hi,
I am currently sharing my TimeCapsule filesystem (guest perms) as AFP, I have it automounting via automounter. Problem is that whoever hit's the automounter dir first is marked as the owner of all the shared files, other users then cannot delete/modify them (i want the share completely world read/writeable). The mount_afp command does not seem to support the relevant fmask/dmask params that mount_nfs does (which would cause the mount to be mounted with consistent ownership.)
So..
1. I presume NFS is not supported (boo!)
2. Does anyone else have this working? I would imagine that I should also be able to get this working through group permissions, but for the same reason i cannot force automounter to mount the filesystem with the user/group ownership I want.
thoughts?suggestions?
Thanks
Liam
P.S. I could also try SMB but playing movies on Frontrow off a networked SMB filesystem is usually poor (compared to NFS anyway)

Yes, you can turn off photos in icloud. (settings - icloud- photos)
You can also allow users to use their own apple id's for imessages and facetime. Unlike icloud those can be changed any time, so that does not present security problem. Settings -messages and settings- facetime.
If you dead set on using same apple id, you can make sure that every user only has their phone number checked in messages, so everyone has to go to settings- messages- send and receive and uncheck apple id.

My partner and I share and iCloud account, we updated our software now whenever she gets a text message I see it on my phone and vice versa

My partner and I share an iCloud account . We both have the iPhone 5. We recently updated the software to the iOS 7.2 and now whenever she gets a text message I receive and vice versa. This never happened before only happened since the update

iCloud has nothing to do with messages (iCloud does include an email account, but not a messaging service). If you both use the same AppleID for iMessage, then you are sharing the same messaging account.
One of you needs to get an alternate AppleID, sigin out of iMessage, then sign in with the alternate AppleID. That way you will each have your own private iMessage accounts.

Can smb and afp coexist on the same host?

Greetings all!
I've been using Macs and OSX for a year. And recently I bought another MBP so I am seriously considering Time Machine backups. I have a Linux home server running Ubuntu 12.04 and Samba and my previous MBP running Mountain Lion connects to it happily without any problem. But my trouble started when I tried to setup afp on the same box.
I followed this post and this post and got the fake time capsule showing in Time Machine without any problem. But soon I found myself unable to connect to the old samba shares. The smb host now displays as a Time Capsule. If I click on that OSX will say 'failed to connect'.
As I understand there are 2 pieces involved on the server side, avahi to broadcast the service info and netatalk to provide the service itself. It's a bit like nmbd and smbd in Samba. If this is true then it's somewhat understandable that OSX can not display the same host as 2 different types of services at the same time. So I stopped avahi-daemon and very soon the old Samba shares appeared again.
I am able to connect to both services using command+k but I would rather have them running normally so that my wife will be able to use them without extra tech support. Can anyone tell me if what I said above is true and/or if there is a graceful way around this? If answer is no then I will have to create a virtual machine or nic alias just for time machine and I think it's quite a waste.
Thanks!

tristonej wrote:
I don't quite understand why people buying non-Apple devices should not expect OSX to work with them
Because Apple has no control over 3rd parties. They can do what they want. If Apple publishes a new authentication mechanism in 2002, the 3rd party doesn't have to implement it. That isn't Apple's fault. If they do get around to supporting it in 2009 and then some 4th party doesn't bother to use the 2009 code in 2011, Apple still can't do anything about that. If anyone else wants to advertise, and support, Time Machine compatibility, they are welcome to do that. They definitely have the advertising part down, the support, not so much.
There is a time when apple only worked with apple but that aparently was not sustainable. And that's why now Apple is embracing smb
Apple's goal is to choose the best solution for its customers. Sometimes that is a proprietary connection or protocol and sometimes it is something industry standard. In all cases, there has to be some cut off for testing and support. That is why Apple eventually stops supporting its own hardware and technologies at a certain point. That is also why Apple will support SMB as deployed by Microsoft but isn't going to waste much time on home-built Linux servers.
(it's said even samba was used shortly on OSX, not quite sure) and allow users to install windows on macs. Even OSX itselt is based on FreeBSD and uses quite a lot of open source components.
Apple uses a lot of open source software. Samba was one of those projects. Unfortunately, the people that made those products didn't want Apple using them so they changed the licensing to prohibit Apple (and pretty much only Apple) from using their source code. That is why some of the open source packages in OS X are stuck in a 2007 version. That is also why Apple abandonned Samba and wrote its own SMB implementation.
OS X is not based on FreeBSD. It has a BSD-flavoured POSIX layer, but it is a distinct operating system at its core.
IMHO there is no magic in throwing money at propiretary hardware/software or praying to Steve Jobs. If something is not working, it must be that there is a bug in the code or the design. And neither OSX nor Macs are built by God, which means they are bugged as other software/hardware.
I'm confused. When did anyone say anything about praying to Steve Jobs or divine technology? You asked about using Linux as a Time Machine server. I suggested you avoid that if you value your data. I also asked why you would want to keep running Linux now that you have a Mac. A Mac can do anything Linux can do with a fraction of the effort.
The answer is simple, Macs can not do what I want.
Which is?
Withe a standard mATX case I can have quite a few 3.5" drive bays while there is only one 2.5" in a Mac mini. And with Ubuntu/Debian, getting/updating the software or the system is quite easy, just one or a few lines of apt commands, not quite possible with OSX.
That's certainly true. OS X updates itself without having to run any apt commands.
If you must compile something from the source to get a Linux running then something must be seriously wrong.
My thoughts exactly. But perhaps you didn't follow me entirely. Apt, yum, etc don't have everything one needs to setup something as fancy as, I don't know, a web server. While I did have to compile a number of things from source, I had to actually edit the source a couple of times as well.
The best thing I love about Linux is openess. You can customize almost everything and change it whatever way you want. With Mac, for example the 2013 Retina MBP I just bought, it's not even possible to change the power button behavior, which is very annoying.
Then why did you buy a Mac? That's no big secret. Some people like not have to configure everything just to get it running. I have other things to do than edit config files.
Back to my original question. I think the problem is not quite with compatibility of Bonjor but rather whether OSX can show this or not. Imagine you have a smb share and afp share on the same host, with the same name, how would OSX display it? And which icon will OSX use to display the host? I can not think of the answer so if you know please tell me.
OS X will just display it like it display any server. One of your links event has instructions on how to pick the icon you want to fake. If you are running both services then I am not sure which one it would try to connect with. Neither of your services are native, not matter how much they try to fake it. If you wanted a specific service you would have to manually use the correct protocol in Finder > Go > Connect to Server. However, bot of those links were posted before Mavericks. Obviously they don't work anymore. It's Linux. It's open. Right? So fix it and post it on your own blog. I do not know what modifications you would have to make to either Samba or Netatalk to make them work with Mavericks.
If all you need is to allow your wife to connect to one specific protocol, then manually connect to that service, saving your password in the keychain, and create an alias by Command-option dragging the server to some other folder. Then, she can just double-click on the alias to connect to the network.
Now, if you really want to be clever, you can setup an automount to that service instead. Then the server will be mounted and unmounted as needed.

AFP Freeze and Cisco VPN Client w/ new Macbook Pro

I have an Intel Core Duo Macbook Pro with all software updates installed and running Cisco VPN client v4.9.01 (0030). If I try to connect to one of my clients via VPN and then connect to one of the server shares, afp basically freezes. I have added a snip of the log below. BUT - I take the same laptop onsite and try to connect to the same server, it works like a champ. I have tried the VPN connection from multiple source points (ie, different ISPs and routers/firewalls) and wired and wireless and all result in the same. I am frustrated and running out of options. Note that the same problem occurred with the previous Cisco VPN client and I thought the newer version would fix it - id didn't. Any help would be much appreciated.
tia,
Bill
Oct 27 16:05:01 my-computer kernel[0]: AFP_VFS afpfs_Reconnect: doing reconnect on /Volumes/ADVSERV
Oct 27 16:05:01 my-computer kernel[0]: AFP_VFS afpfs_Reconnect: connect to the server /Volumes/ADVSERV
Oct 27 16:05:01 my-computer kernel[0]: AFP_VFS afpfs_Reconnect: Opening session /Volumes/ADVSERV
Oct 27 16:05:01 my-computer kernel[0]: AFP_VFS afpfs_Reconnect: Logging in with uam 10 /Volumes/ADVSERV
Oct 27 16:05:01 my-computer kernel[0]: AFP_VFS afpfs_Reconnect: Restoring session /Volumes/ADVSERV
Oct 27 16:05:01 my-computer KernelEventAgent[59]: tid 00000000 received VQ_NOTRESP event (1)
Oct 27 16:06:02 my-computer kernel[0]: AFP_VFS afpfs_Reconnect: doing reconnect on /Volumes/ADVSERV
Oct 27 16:06:02 my-computer kernel[0]: AFP_VFS afpfs_Reconnect: connect to the server /Volumes/ADVSERV
Oct 27 16:06:02 my-computer kernel[0]: AFP_VFS afpfs_Reconnect: Opening session /Volumes/ADVSERV
Oct 27 16:06:02 my-computer kernel[0]: AFP_VFS afpfs_Reconnect: Logging in with uam 10 /Volumes/ADVSERV
Oct 27 16:06:03 my-computer kernel[0]: AFP_VFS afpfs_Reconnect: Restoring session /Volumes/ADVSERV
Oct 27 16:06:03 my-computer KernelEventAgent[59]: tid 00000000 received VQ_NOTRESP event (1)

Hi Bill,
Do you have any comparison data on services that DO work? I don't connect remotely to any Apple services so can't vouch for AFP always working, but have no issues with RDP services for Windows servers. Running 4.9.00 (0050). I have however just quickly VPN'd to a client and successfully opened an AFP share and browsed around over VPN - didn't even hesitate in establishing the connection.
When you mention taking the machine onsite i am assuming that you directly access the AFP shares and not via VPN, hence confirming that the VPN software is potentially the issue?
Are you running IPSEC over UDP or TCP? My transport is over UDP.
Good luck,
Justin

AFP Shares dissapears randomly

Hi,
I have the following problem: I have an XServer with Mac OS X 10.6.4 and a Mac Book Pro as client. Sometimes the AFP shares not working. The Calendar server also not working. All other services (mail, internet, vpn etc.) is working fine. After a time the AFP shares and the calendar is working again without doing something.
Sometimes a reboot of the client also helps but not always. The CIFS shares on parallels works fine.
I have found some topics with a similar problem on Airport Extreme but this seems to be a spinning down problem with the harddisk. On the server I can access local everything without a problem.
Does anybody knows a solution?
Best greetings
David

We've also been suffering with disappearing AFP and SMB shares. Some shares will remain up -- possibly the less used ones? Still struggling to figure out the pattern.
Initially, this was just on a Mini running OSXS 10.6.3, but later also appeared on a XServer (2008) using a Drobo RAID over FW 800 (possibly relevant). Haven't been able to shake loose from it yet, although the 10.6.5 update seems to of mostly fixed the Mini at least.
Sometimes restarting AFP will work. Sometimes rebooting will work. But not always. Guess we'll have to keep looking....
Simon.

What do I need to do to enable Active Directory users to authenticate to AFP shares in 10.8 server?

We recently upgraded from 10.6 server to 10.8 server and are having trouble with AFP shares and Active Directory. We have shares on each of our OS X servers that should be mountable by any Active Directory user at the site the server resides. In 10.6, this worked beautifully. Simply adding the appropriate AD groups with appropriate permissions to the ACL of the folder(s) being shared worked without a hitch. In 10.8 server, this is not working. Permissions are defined correctly (as far as I can tell), the server is bound to AD, but yet no AD user who should have access can mount the share. When attempting to mount the share on a 10.6 client, the user gets the short and simple "You entered an invalid username or password. Please try again." On a 10.7 client, the window shakes.
What confuses me even more is that no local users can mount the share as well. I try as our admin account, I receive the following error message on our 10.6 clients:
Actually, as I was forumulating this post, logging in as the server administrator account is now working...???!!!
This was the error message we were receiving on 10.7 clients before it magically started working:
In any case, authenticating as an AD user is still no go. Any ideas?

I had something similar to this. In the name field put in DOMAIN\username rather than just the name.

AFP Shares

Hi. I am experiencing a lot of problems with MAC OSX mountain lion and network shares, maybe someone here can help me.
I have a freenas installed where I keep all my multimedia files (i.w. photos, musics, etc...) and I have 2 users on Mac that I normally fastswitch between then (my wife and mine!).
Problem is, I only could manage to give read and write permissions for bouth user over the same mount using NFS, but when I use NFS I got a lot of disconnections when using a lot of load (like browsing pictures).
I was wondering if is any way I could mount a AFP share and bouth users on make could read and write all files (even the new created ones)?
Any help or comments on the matter will be appreciated.
Thanks, Allan

The NFS disconnections should be related to the NAS itself. But I would like to share a mount with AFP to all my logged users. if this is possible it will be really nice.
Thanks, Allan

SMB or AFP? Connecting to an XRaid/XSan from a Mac

What's the preferred protocol when connecting from a Mac to a network volume on either a single XRaid or an Xsan volume? Any advantages to AFP? Any known issues? Any reasons to use SMB?

Thanks for input but must disagree, I have several successful installations with 3rd party network-based RAIDs, with dedicated GigE line to each machine. Works great, multiple DV25 streams to 3-4 concurrent Macs. No dropped frames
Struggling with a current setup involving one XRaid and 3 GigE clients. Have seen suggestions that there is differences between SMB and AFP but nothing specific...

Saving to SMB or AFP Server

When using the save function on some documents (not all) from pages to a network server (either SMB or AFP) I get the error: "The document (document name) could not be saved." I can hit "save as" and save it in the same directory with no issue. This "save as"'d document then cannot be saved, but can be "save as"'d yet again. Thus I end up with version 1, 2, 3, 4, 5, ad infinitum... Alternatively, I can bounce back & forth: 'version 1', then 'version 2', then 'version 1' again, then 'version 2' again.
This behavior only happens when going to the network server, saving locally always works fine. I've also found that I only get the error on certain documents, a document from the template "personal photo letter" works fine, but a document from "Modern photographer Letter" exhibits this behavior. With the good templates it always works, and with the bad templates it always doesn't work. I have tried using both the default save type and the "save new documents as packages" option with no apparent difference.
This behavior also exhibits itself across multiple mac clients on our network (all running iWork '09/Pages 4.0.2 (751), and Leopard 10.5.7). The behavior was also there for iWork '09/Pages 4.0.1 (746) and previous releases although I don't know all the previous iterations. The behavior was also there for Leopard 10.5.6 and previous releases although I don't know all the previous iterations.
When the error displays in pages, I get the following 2 messages on the console.app/all messages screen:
7/23/09 3:36:05 PM Pages[8521] NSDocument called FSPathReplaceObject() and -47 was returned.
7/23/09 3:36:05 PM /Applications/iWork '09/Pages.app/Contents/MacOS/Pages[8521] Had to sleep for 200 milliseconds to clear transactions race for -110/(.TemporaryItems/folders.501/TemporaryItems/(A Document Being Saved By Pages),(null))
Anyone out there have a clue?

Hi,
I wish I could offer a solution, but I have the same problem: both Pages and Keynote 09 will not save changes to a file that has been opened from a network server.
More details: the problem only occurs with iWork 09 files. If I open a Pages 06 file in Pages 09 and make an edit, I can save the file as part of the conversion of the file to the Pages 09 format. However, the file is not savable from then on. So, the conversion process creates a saveable file, but subsequent "saves" are not possible.

SMB or AFP?

Hi,
I have just installed a LaCie NAS on my network and all is working well. I note that I can establish the connection to the share uysing either SMB or AFP and just wondered if there is any practical difference between the two?
David

As for your other question, I am curious. Would
connecting your LaCie disk drive directly to a Mac to
format it as HFS+ and then returning it to your
network hub pose a problem?
Not sure if that is or is not possible - I have at the back of my mind from the manual that even if you connect via the USB cable it still uses its own BIOS and doesn't show up in disk utility - may be wrong, but having now got over 30GB of files on I don't think I'll experiment! I don't see me wanting too many 2GB plus files stored which, of course, is the main FAT limitation.
David

Leopard broke SMB tunnelling

I have an ssh tunnel from localhost:139 to server.company.com:139, and in my /etc/hosts I have server.company.com as an alias for localhost. With Tiger this worked great; command-K, type (or click) smb://server.company.com/share$, and I'm in. Leopard broke this; it tries to be too clever, and says: "This file server is running on your machine. Please access the volumes and files locally."
Anyone know a workaround?

I solved the problem by setting up an alias for the loopback interface. Run the following command in the terminal:
sudo ifconfig lo0 alias 127.0.0.2 up
“127.0.0.2″ can be any 127.0.0.x address you like, aside from .1, and it will work just like 127.0.0.1 does. Once you do this–-and properly configure your ssh tunnel–-you can Command-K from the Finder to connect to "smb://127.0.0.2" or "smb://[email protected]", and Leopard will happily connect using this new address instead. The nice thing is this alias will stick around forever, or until you run the same command except with a “-alias”. (Using this trick, there’s no need to mount_smb by hand through the Terminal; pre-Leopard behavior is essentially restored.)
Just like with pre-10.5, keep in mind your ssh session will need to forward both TCP 139 and 445, and you’ll have to run the ssh command as root in order to allow forwarding those privileged port numbers (which is anything below 1024). I just created my ~/.ssh/config file to reflect the funky port forwarding for that host, and then call it using the following command in the terminal:
sudo ssh remoteservername -F /Users/mymac_loginname/.ssh/config
Here is the relevant excerpt from my ~/.ssh/config file…
Host remoteservername
User remoteloginname
LocalForward 127.0.0.2:139 remoteipaddress:139
LocalForward 127.0.0.2:445 remoteipaddress:445
"remoteipaddress" should be 127.0.0.1, unless you are connecting to a Windows server. (See below.)
Since Windows machines do not respond to SMB requests on 127.0.0.1, you will need to point your ssh config either to the IP address of the ‘Microsoft Loopback Adapter’ you manually installed (refer to other sources of info on the web about how to do this; it’s pretty easy), or you will have to point your ssh config to the remote server’s non-loopback IP address. If you are using the second method, be ABSOLUTELY sure you limit access to ‘File and Printer Sharing’ using the Windows Firewall or a hardware firewall, otherwise you could very well open up file sharing to the entire Internet.
Good luck!

Same here, 4s working perfectly, downloaded update 8.0.1 Now no wifi or bluetooth or hotspot. Control on/off icons are muted in colour and don't respond. Tried resetting network connections then total restore, didn't work so still have the same probl

Same here, 4s working perfectly, downloaded update 8.0.1 Now no wifi or bluetooth or hotspot. Control on/off icons are muted in colour and don't respond. Tried resetting network connections then total restore, didn't work so still have the same problems as before.

Satellite L505D-S5983
I would try another restore of the hard disk to its original out-of-the-box contents using Toshiba recovery media. Maybe something went wrong in the process. Make sure everything works before applying any updates and adding any hardware or software.
Then add things carefully, rebooting Windows and testing the USB and audio at each step.
Please note this.
The only info windows gives me for the sound card is that it from Microsoft... with a driver version of 6.1.7601.17514....which naturally doesn't really help me since I have no idea what card or mobo I have . Is there any way for me to find out what I need other than opening up my laptop?
Every one of them lists my mobo simply as a Toshiba motherboard, with no audio card information. Which I'm assuming that is because it has an internal sound processor. My problem is that none of the properties, or ANYTHING I try, will give me information on what I need to fix this...
All of the latest drivers for your model are easily found here. This one is for the sound.
Realtek Audio Driver for Windows 7 (32/64)
-Jerry

My boyfriend knew my apple id and my password and when we broke up he changed it and he changed my alternate e-mail address so i cannot restore it. The problem is that my iPhone activation is linked to iCloud. What can i do? I have old pass and e-mai

My boyfriend knew my apple id and my password and when we broke up he changed it and he changed my alternate e-mail address so i cannot restore it. The problem is that my iPhone activation is linked to iCloud. What can i do? I have old password and old alternate e-mail.

Take it and its purchase receipt to a physical Apple Store and/or click here and contact Apple's Account Security team.
(124839)

10.5.2 totally broke SMB and AFP shares (and kerberos) on my network

Similar Messages

Maybe you are looking for