Access to AFP mount freezes task

Hi,
I'm experiencing a really strange problem. I have three iMacs, all backing up with time Machine onto a MacMini with Mavericks Server installed.
One of those iMacs sometimes reaches a point, when it cannot finish a backup. It just stops!
When that happens, the sparsebundle cannot be used anymore because it's "still in use"
So, I repaired all permissions, checked the disk and filesystem, even re-installed mavericks from scratch. Still the same problem.
For the clean installation i created a backup with tar of the most important files on a newly created share on the mac mini server. This worked. But restoring does not. The tar just "freezes" during restore, not on the same file, every time something different.
And: when that happens, the share is not usable anymore. When trying to access is, the corresponding proccess freezes (even ls does not work).
I thought it could be a network issue. So a changed from LAN to WiFi - same error.
I'm a bit lost here. It probably is not related with an error on mac mini server, as it stores other machines without problems - logs don't show any errors that could lead to this behavior.
Network issue is probably ruled out as well, as it happens on different network devices.
Any idea what else could cause such a problem?
thanks

the sparsebundle cannot be used anymore because it's "still in use"
See C12.
Time Machine Troubleshooting
Have you tried restarting the server and your computer?

Similar Messages

Finder + ACLs over AFP Mounted Remote Volume

Hey Guys!
My Finder is not able to display ACLs on files coming from an AFP mounted volume. The ACLs are there -- ``ls -lef'' displays them correctly. If there some obvious thing here that I'm missing?
regards,
P

Yes, sort of. Whenever you're doing an "opportunistic mount" where the server and client are not joined to the same directory domain, permissions masking will take place. When masking is in effect, it maps access from the currently logged-in user (session owner) on the client to the server share point based on the name and password entered after choosing Go > Connect to Server.
When dealing with masked permissions, this will be the case:
* On the client-side, the Finder Info windows may or may not correctly show all ACLs and POSIX permissions of items on the share point. They may simply display effective access - e.g. "you can only read" - without further detail. This depends on the protocol. Typically AFP share points will show correct server-side ACLs and POSIX permissions.
* On the client-side, listing (ls) the contents of the share point via Terminal will indicate that the session owner has full control and is the "POSIX owner" with others' access at zero (0700). These are the masked permissions, not the real ones.
* On the server, permissions listed via ls in Terminal or Server Admin's File Sharing section will be the correct ones.
--Gerrit

Authenticated AFP Mount at Login

Hi All,
   I posted this question on Apple's UNIX Discussion, Authenticated AFP Mount at Login, but I wanted to run it by the specialists here. Hopefully everything I'm going to tell you is in the other thread but I would like to make this post self-contained so that you don't have to read the other post if you don't wish to.
   I have client computers and an AFP server, all of which run 10.4.7. The AFP server is running the server version of OS X with an unlimited license and the clients are running the client version of OS X, all completely up-to-date. I haven't used Open DIrectory. They are all domain joined machines in our Active Directory domain and as such, they are configured as Kerberos clients of the Active Directory domain. All users except the administrator are users of this domain and they have Windoze home directories that are on an SMB share. I would also like them to have shared AFP Mac home directories.
   I like the way that OS X handles the Windoze home directories, putting them in the Dock. If I add a listing in AD for Mac home directories, will OS X still do the same thing with the users' Windoze home directories? I assumed that it wouldn't and so for my domain users, I checked the option to have local home directories created. Then I made /Users a symlink to the mount point of the AFP share. The problem is that I want the mount to be an authenticated mount, using Kerberos for authentication.
   I've tried mounting the share with a LaunchAgent and with a LoginHook. I don't remember whether I got an authenticated mount with the LaunchAgent but I am consistently able to get an authenticated mount with the LoginHook. However, neither of these are executed early enough in the login process. My experience has been that access to home directories is needed seconds before the LoginHook is run. In fact, I had a new home directory created for a user and then the AFP share was mounted on the directory containing the new home directory.
   The only way I could find to have the share available when home directories are first accessed is to automount it. However, I've been unable to make the automounter authenticate. I'm wondering if the Kerberos ticket is even available at the time the home directory is first accessed. Whatever the reason, every attempt to force authentication has simply resulted in a failure of the mount. Of course I was trying to force the issue on the server. If I could configure the client to insist on authentication, maybe the login process would wait until the Kerberos ticket is acquired. Does anyone know how to so configure the client?
   My current solution is a combination of the two methods above. It works surprising well but it's a kludge and I don't trust it to be stable. What I do is to configure the automount and /Users is a symlink to a mount point in /Network/Servers. Then, when the LoginHook runs, not only does it mount the same share (authenticated) in /Volumes, it deletes the /Users symlink and creates a new one that points to the authenticated mount point of the share in /Volumes. Naturally, processes that run early in the login obtain open file descriptors to user files in the unauthenticated mount. Mdimporter is one such process but I assume that such file descriptors are soon closed due to lack of permissions to read and write. After that, I've seen no other problems. When the user logs out, the symlink is restored to point into /Network/Servers and the authenticated share is dismounted.
   My question is whether there are better alternatives to this kludge. I'm loathe to change Active Directory because it would mean also changing our account creation scripts and applications. However, that is possible if that's the only way to do what I want reliably. Any thoughts would be appreciated.
Gary
~~~~
   <SilverStr> media ethics is an oxymoron, much
               like Jumbo Shrimp and Microsoft Works.
   <MonkAway> not to mention NT Security

Actually, there's a much simpler way to use your Mac OS X Server to host home directories for your AD users.
First of all, I would recommend configuring your Mac OS X system as an Open Directory Master then use Directory Access to bind it to Active Directory. Configure the server's authentication search path (policy) starting with /NetInfo/root (closest), then /LDAPv3/127.0.0.1 (Open Directory), then /Active Directory/All Domains.
Next, use Workgroup Manager to define a share point and create a dynamic mount for it (to /Network/Servers/servername/...path.../share) using the Network Mount tab in Workgroup Manager/Sharing. Define the permissions of this home directory share point such that all users can read only. I recommend root:staff, 755. Ensure that AFP Guest Access is enabled for the share and that AFP Guest Access is turned on for the AFP process in Server Admin. (This share point will be mounted dynamically and will be authenticated when doing so. You shouldn't have to allow guest access but it's often required because the dynamic automounter wants to create a mount point for the home directory share upon startup, where it acts as a static automount.)
Be absolutely certain that your server has a valid DNS hostname so that the /Network/Servers/servername field remains the same. Plus, you'll need that for Kerberos anyway.
Third, you'll need to figure out how to store the dsAttrTypeStandard:NFSHomeDirectory (home) and dsAttrTypeStandard:HomeDirectory (home_loc) attributes in user accounts in Active Directory. You can use Apple's schema (published in the User Management Admin Guide for Mac OS X 10.4) or you can repurpose existing unused attributes in user accounts already in AD. If you're repurposing, you'll need to use the AdsiEdit.msc snap-in to do so, and each attribute should have a single value of UTF-8 (Unicode) string.
If you're repurposing: On your server, you'll need to "tell" the systems about the repurposed attributes by manually editing the ActiveDirectory.plist file. In Property List Editor, open the file (change its permissions so that you can write first), expand the AD Attribute Mappings Table, then expand the dsRecTypeStandard:Users array. Look for items whose values are dsAttrTypeStandard:NFSHomeDirectory and dsAttrTypeStandard:HomeDirectory and change their names to the appropriate numeric ID of the AD attribute that you're using to store the respective information.
Either way, when populating the attributes for NFSHomeDirectory and HomeDirectory for each user account, use the following syntax:
NFSHomeDirectory is the path to the home from the client's point of view: /Network/Servers/homeserver.somewhere.com/Volumes/ServerHD2/Homes, for example.
HomeDirectory contains the AFP URL and path to the user's home like: <homedir><url>afp://homeserver.somewhere.com/Homes</url><path>joey</path></homedir>
Fourth, on your home directory server, you'll want to make sure that it's joined to the same Kerberos realm as the Active Directory domain controllers.
You can bind your clients to either the Open Directory domain, Active Directory Domain, or both. If you bind them to AD, you'll have to make the necessary edits to the ActiveDirectory.plist file if you're repurposing unused AD attributes.
--Gerrit

Just bought an ipod touch and it wont sync with itunes. Tried resetting sync history but doesnt work, plus when i try to access itunes preferences it freezes for ages and creates loads of distnoted.exe files?????

Just bought an ipod touch and it wont sync with itunes. Tried resetting sync history but doesnt work, plus when i try to access itunes preferences it freezes for ages and creates loads of distnoted.exe files?????

Just realised when reading other peoples problems that it is not actually letting me reset sync history???

InDesign CS4 (ver.6) can not package all images from afp mounted server

I'm experiencing an issue on multiple Intel Mac's running OS 10.6.8 when packaging files some of the server based art does not collect.
In some folers some of the art collects and in the same folder some other files don't.
The missing files are generally .jpg or .eps and it's a combination of these files that are not being collected.
Images are sometimes shared between users but the missing images do not appear to be open elsewhere.
The docuemtns are stored across several AFP mounted server hosted on a Windows 2004 Server running ExtremeZIP to allow AFP cpnnection.
Moving the files to different volumes on the server does not appear to resolve this issue.
Any thoughts or questions? Apologies if this isn't clear.

I just had this happen again with a new InDeslgin CS4 file, I took the missing images and relinked them to a new folder I just created on my desktop and it still does nt collect these files. So not only the server, but now my desktop, and it's not just my computer, I can reproduce on other macs in 10.6.8
I convertd the files from .EPS (from Photoshop: they're flattned) to .PDF (from Apple Preview) and relinked them, and I was not able to package either.
I did find the solution:
I checked off "Include Fonts and Links Hidden and Non-Printing Content"
even though these items were on visible layers and not on the pasteboard they were excluded before I checked it off.
Thanks for your help!

Searches within InDesign Have Stopped Working on AFP Mounted Volumes On OS X 10.9

I have run into a new problem since using InDesign CC on a Mac running Mavericks, the search function has ceased working on AFP mounted volumes. For example, when placing an image, if I navigate to a pot of images on my server and then tap in part of the file name within the search field there is nothing found, even though the file name I am searching for is there.
I have spoken to Adobe technical support who said "well I do apologize for your inconvenience however adobe does not support if the file is on the network. We would be happy to help you if there is any issue with Search if the files are located locally". Slightly frustrating answer!
This issue looks to be related to the Mavericks operating system as I have Macs running OS X 10.8 which are fine, it is only the OS X 10.9 Macs that have this problem. Is anyone else having these issues?

I have no problem on two Macs running Mac OS X 10.9.2 with InDesign CC 9.2.
Have you started by restoring your preferences. Here's how:
Trash, Replace, Reset, or Restore the application Preferences
If you use the delete folder method, remember that in OS X 10.9, the <Home> library his hidden. In the Finder, hold down the Option key, and choose Go > Library to make it visible.

How do I remove an non-existent AFP mount from user's Home listing?

Hello.
I was testing setting up a user with a Network Home Folder and everything was working fine until the external drive that was housing the Share Point (automountable, set to be used for user home folders) went down and became corrupt. As this drive was just being used for testing purposes, there was no backup and it wasn't a big deal (or so I thought). My problem now though — I have a "ghost" entry in the Workgroup Manager/Accounts/User (any user)/Home listing for the afp network home mount. If I select it, the option to remove it is grayed out, so I have no way to remove it from the listing.
Does anyone know how I can remove it from the listed? I've tried mounting a new drive, naming it the same as the old drive, and creating the Share Point again in the hopes that it would "relink". But, that didn't seem to work and I still can't remove it from the listing.
I'm hoping there's something I can edit somewhere that'll make Workgroup Manager "forget" this afp mount?
Any advice would be appreciated!
Thanks,
Kristin.

OK, I sorted this out.
First step is to recreate the folders and Share Points exactly as per the originals. Then, Instead of disabling auto-mount and unsharing all in one go, break it up into two steps as follow:
- disbaled auto-mount and clicked save
- unshared and clicked save
Doing it as a single step (ie. disbaled auto-mount, unshare and save) doesn't work. You need to do it in two separate steps (disable auto-mount & save + unshare & save). I don't know if this is just something weird with my install or what, but it totally solved the problem, and now the AFP ghosts are all gone.
Thanks,
Kristin.

AFP Clients Freeze During "Find File" Search

I've been having an issue with my 10.2.8 servers for the past 3 months. When one client begins a "Find File" search on a network volume, all of the clients connected to the server sharing that volume freeze until the search is completed. As it stands now, if I don't restart the servers each morning AFP will freeze altogether. So far I've install a fresh copy of 10.2 server on a new machine and copyed the data over but it had no effect. I've seen no errors in network utility on both the client and the server. Any Ideas on what to look for would be greatly appreciated.

Here what I got back when I tried this:
techs01:~ techs$ sudo mdutil -i on/ZZ01ProductionServer/Hammer
We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:
#1) Respect the privacy of others.
#2) Think before you type.
#3) With great power comes great responsibility.
Password:
mdutil: unknown indexing state -- on/ZZ01ProductionServer/Hammer
usage: mdutil -pE volume ...
mdutil can be used to manage the metadata stores used by Spotlight.
-p publish metadata for the provided volumes.
-i (on|off) set indexing status for the provided volumes.
-E erase the master copy of the metadata stores for the provided volumes.
-s print indexing status for the provided volumes.
I then tried erasing the master copy of the metadata stores (-E) and it came back with a message saying none existed.

How can i restrict access to a mounted smb drive?

Hope someone can help this is bugging me! i'm running this apple script as a student logs in to mount the students share folder, located on a MS2003 server, and a share drive on an Xserve to their desktop:
set student_name to (do shell script "echo $USER")
property stu_password : ""
-- displays the password dialog box and stores the result in stu_password
repeat while stu_password is ""
display dialog "enter your password to access the share" default answer stu_password with hidden answer
set stu_password to text returned of result
end repeat
-- mounts the network share to the desktop
tell application "Finder"
open location "smb://servername/stuhome/" & student_name & "/"
open location "afp://" & student_name & ":" & stu_password & "@servername/Share/"
end tell
It works fine and mounts the drives however... finder then defaults the network location so the student has access to all the folders on /servername/stuhome/ I just want it to mount /servername/stuhome/username/ with no backwards access. I cant set permissions from a server folder level (i don't think!) as its a windows server. any suggestions? why does finder do this? ta.
Intel XServe Mac OS X (10.4.10)
Intel XServe Mac OS X (10.4.10)

I've done a work round i'm not 100% happy with but it will do! If anyone else has this problem feel free to mail me.

AFP Mount Error -5002

Something broke recently and I'm struggling to figure out what may have happened...
When logging into client machines (that have been bound to the server) the server appears in the Finder sidebar under "Shared" as usual. But when clicking on the server's name to mount some sharepoints we are seeing "Connection Failed" errors.
System.log notes:
+Mar 28 15:55:01 mymac /System/Library/CoreServices/Finder.app/Contents/MacOS/Finder[178]: SharePointBrowser::handleOpenCallBack returned -5002+
Strangely it's possible to use the menu item "Connect to Server..." to select the server then the sharepoint and no password is required as sharepoints mount as expected. I assume "Connect to Server..." is correctly using "single sign-on" whereas simply clicking on the server's icon in the Finder's sidebar is not?!?
Kerberos is fine and running...and everything appears to be ok with OD.
Anyone seen this or have some ideas what might be going on?
Thanks!

I have a similar issue, that started the day after I applied the latest Apple Security update 2008-002 on a client's Mac OS X 10.4.11 server. I have a mixed client base of Leopard and Tiger users, and they are all bound to the Apple OD Server, and access to all home directories on the server work just fine for all users, but these users connect to other share points on the server by going to the Finder's Go Menu and selecting Connect to server (actually they all have alias to this share points). Since the update none of these clients can access some of the departmental shares, they just don't appear in the Connect to Server window as an option. Leopard users on the other hand, can access these shares by using the sidebar option to connect to the server. I have reviewed all privileges and user groups on the server, and have found that some users were no longer listed in the group (they were before). After adding these user again, they still can not see those file server shares. I turned off and on AppleShare, I restarted the server, and I unshared the directories and shared them out again, but my problem continues.
My users do not get an error message when they connect. My AFP authentication method was set to Any Method, and I changed it to Standard (No Kerberos) at which time they could access there shares again, but when I do this some (not all ) Leopard clients fail to login at all. Kerberos is running just fine, and it has been for years now.
I have spent ours researching this issue, and have not found any other usres with this same problem. One user had a similar problem, but his user did get an error message that username or password are incorrect. He did spent a couple of hours on the phone with Apple Care, and they were unable to duplicate this issue.
I was not using ACL's on this server, but this week I gave it a try, but my users can still not see their shares.

Issue with AFP Mounts

I am migrating the user homes from a Linux server to a 10.5.8 Xserve.
The users are all setup in an LDAP environment.
The homes are currently on an NFS server running Linux. All users login to network accounts and are automatically connected to their NFS homes upon login.
I would like to start only migrating the files and thereby changed the users homes to something like this:
/Network/Servers/<afs server>/Volumes/NetworkFolder/testuser
The user testuser has the same uid, user, pwd in the LDAP as on the new Xserve. The Xserve volume is finally mounted and I can login with my network home as testuser. However, the files are all read only. I cannot change anything in the new home files.
The access log on the AFS server says I'm logged in as Guest
I'm sure its a simple option I'm forgetting either in the LDAP config or on the AFS - I just seem to be stuck.
Any idea on how to get this to work would be greatly appreciated.
- Thanks, Peter

I was looking for something like this. I have just bought a WD My Book World NAS drive. I connected it to my old router (G) and discovered it was too slow to wirelessly stream high bitrate music or movies. I then bought a Belkin N+ router which resolved this issue. However I have trouble with the mounts. When I wake my MacBook from sleep I can normally see the drive under Shares in Finder, but after some minutes it disappears. If I Go -> Network in Finder it turns up, but will not connect. The funny thing is I can be streaming music from the darn thing without interruption! The network shares on the desktop also turns on/off erratically. I can still access the folder contents from these even that the drive is not visible in Finder.
The NAS is set up for AFP on all shares which should be ok. I have tried both dynamic and fixed IP address on the NAS, but my Mac gets it dynamically. I'll try a fixed IP for this.
People are talking about automatic mount of network resources on start up. I came from Windblows and do not know all the fancy Unix commands and config files stuff. So how do you folks do this?
Will be much appreciated, thanks!

AFP Mount NO OPTION to mount entire hard disk

After installing Leopard, I'm no longer able to mount using the AFP protocol the entire hard drive. Earlier, it would give me the option of mounting "Hard_Drive" or "User", but now somehow it only gives me the "User" mount option. I'm the super user/root so I don't understand.
Any ideas?

The reason seems to have been that somehow my account (I'm the only user) lost administrative access. I found the solution here. It works.
http://discussions.apple.com/thread.jspa?messageID=5645315&#5645315
=============
1. Shut down the computer if it is on.
2. Press the power button to start the computer.
3. Immediately press and hold the Command (Apple) key and one of the following:
the "s" key for single-user mode.
4. Type mount -uw /
5. Type passwd
6. Enter new password (this will be for the root user account)
7. Type reboot
8. Login with any of your usernames just to get the desktop up.
9. After desktop comes up choose System Preferences, then choose accounts. Unlock if you have to and using the username: root ..... password you just setup in the single user mode You now should be able to make users including the top user on the left an admin...
(just so everyone knows... I didn't realize from above post that I was supppose to unlock with the USERNAME: "root" instead of my own user name.
==========================

Can not AFP mount?

Hi, I just enabled a sharepoint on the server using AFP protocol, guest access is enabled. Enabled "network mounting of this share point" under Custom mount path: "/afptst".
on Mac Pro client, I tried on command line:
mkdir /afptest
mount_afp -i afp://username@xserver/Volumes/sharepoint /afptest
it gave out errors:
mount_afp: the mount flags are 0000 the altflags are 0020
mount_afp: AFPMountURL returned error -5019, errno is 2
Could anybody give me some clues?
Thanks in advance.
CY

Did that solve it for you cause I have the same problem and I can't seem to solve it.
mount_afp -i afp://10.0.1.52/Fatboy/ /tmp/mount_test/
User: ed
Password: xxxxx
mount_afp: the mount flags are 0000 the altflags are 0020
mount_afp: AFPMountURL returned error -5019, errno is 2

View access denied to Reset on task definition

Hi,
We are facing a weird issue. We have an end user task which we trigger directly from a web page of a different application. The URL for task launch is something like this : https://mycomany.com/idmcs/user/processLaunch.jsp?id=Self+Service+Password+Reset+Registration&op_appid=csi.
If we open a new browser window and copy paste this URL and hit enter, it takes to /user/login.jsp. We input the user credentials and submit, it triggers the task.
But the behavior is different if we do the following:
1. Open a browser window, access anonmain.jsp (https://mycomany.com/idmcs/user/anonmain.jsp)
2. It routes to anonlogin.jsp (https://mycomany.com/idmcs/user/anonlogin.jsp) and asks for anononymous user name
3. We input some junk user name submit. It takes to anonmain.jsp.
4. Now in the same browser window if we copy past the processLaunch URL (https://mycomany.com/idmcs/user/processLaunch.jsp?id=Self+Service+Password+Reset+Registration&op_appid=csi) and click submit, it ideally should route to login.jsp.
Instead it throws the view access denied error : "View access denied to Reset on process Self Service Password Reset Registration"
Any idea what the issue might be?
Thanks,
kIDMan.

Hi
Normally when this happens you need to add the process "Self Service Password Reset Registration" to the End User Tasks list and Anonymous User Tasks list configuration objects.
I dont know if this will help in your situation.
-Mocx

Cannot access external NFS mounts under Snow Leopard

I was previously running Leopard (10.5.x) and automounted an Ubuntu (9.04 Jaunty) Linux NFS mount from my iMac. I had set this up with Directory Utility and it was instantly functional and I never had any issues. After upgrading to Snow Leopard, I set up the same mount point on the same machine (using Disk Utility now), without changing any of the export settings, and Disk Utility stated that the external server had responded and appeared to be working correctly. However, when attempting to access the share, I get a 'Operation not permitted' error. I also cannot manually create the NFS mount using mount or mount_nfs. I get a similar error if I try to cd into /net/<remote-machine>/<share>. I can see the shared folder in /net/<remote-machine>, but I cannot access it (cd, ls, etc). I can see on the Linux machine that the iMac has mounted the share (showmount -a), so the problem appears to be solely in the permissions. But I have not changed any of the permissions on the remote machine, and even then, they are blown wide open (777) so I'm not sure what is causing the issue. I have tried everything as both a regular user, and as root. Any thoughts?
On the Linux NFS server:
% cat /etc/exports
/share 192.168.1.0/24(rw,sync,nosubtree_check,no_rootsquash)
% showmount -a
All mount points on <server>:
192.168.1.100:/share <-- <server> address
192.168.1.101:/share <-- iMac address
On the iMac:
% rpcinfo -t 192.168.1.100 nfs
program 100003 version 2 ready and waiting
program 100003 version 3 ready and waiting
program 100003 version 4 ready and waiting
% mount
trigger on /net/<server>/share (autofs, automounted, nobrowse)
% mount -t nfs 192.168.1.100:/share /Volumes/share1
mount_nfs: /Volumes/share1: Operation not permitted

My guess is that the Linux server is refusing NFS requests coming from a non-reserved (<1024) source port. If that's the case, adding "insecure" to the Linux export options should get it working. (Note: requiring the use of reserved ports doesn't actually make things any more secure on most networks, so the name of the option is a bit misleading.)
If you were previously able to mount that same export from a Mac, you must have been specifying the "-o resvport" option and doing the mounts as root (via sudo or automount which happens to run as root). So that may be another fix.
HTH
--macko

Access to AFP mount freezes task

Similar Messages

Maybe you are looking for