Apache2 & User Home dirs....

OK, the setup. Multiple servers in one tree, broken down by containers.
ABCD is the tree. Picture three containers below this: 123, 456, 789.
Following info in TID 10090225, I've been able to setup the webserver
(WWW) in 123 properly. WWW is serviced from its own server, while the LDAP
search context is set to ABCD. Now, heres the odd part-- using the syntax
http://www.abc.com, get web pages. Using http://www.abc.com/~mkovacs, get
what is in my public_html directory as expected. My home dir is in a 6.5
server located in 456. Now, follow exactly the same steps for users in 789
and we get a 404.. The log shows:
[DATE] [error][client 10.1.1.1] could not create path context. error: 115
(obsfucated for safety)
Now, I try this on any account who's home dir is in the server in CX=456,
all is fine. I am very confused at this point; its like it doesn't want to
access anything outside the one servers home directory structure... Did I
miss a step somewhere??
MJK

Michael Kovacs wrote:
> OK, think I have part of it worked out. It looks like you need a
> uniqueID in the Other tab of a users account. Accounts created before
> 6.5 don't have this; I've tried to get mod_edir to use CN without
> success... The key seems to be manually entering this attribute...
> One doc mentioned setting up LDIF to import this attribute, but there
> were no instructions on setting it up or making sure it worked for all
> users.. Any tips?
>
> MJK
>
>
I run it OK using the cn attribute.
It seems to me to be two issues:
If Apache is set up to use a particular user for browsing the
LDAP (eDir) directory it must have the rights to the home directory and
some other attributes in the LDAP directory
The server hosting Apache needs read rights to the home
directories of the remote servers.
It has been a long time since I set these up, once I did it by editing
httpd.conf, and later using the graphical web manager from https - port
2200 - open source - manage single apache.
You could look at the doco for mod_edir on forge.novell.com
Warren

Similar Messages

Deleting pre-defined apple folders in a Users home dir

Hello,
i would like to know if its possible to delete the following folders in my Users-home dir:
* Downloads
* Music
* Movies
* Pictures
As far as i see 10.5 throws an error if you try to delete them via finder. Havent tried to delete them via terminal as i would like to know if it would cause problems.
Basically i guess those folders are "secured" as Apple applications like Safari, itunes, iMovie etc use them.
Well i dont use those applications at all and it would be great to free my home-folder a bit just to have a better overview.
any help is appreciated
fidel

Hello fidel,
You can remove those directories but I would do so cautiously. Some applications may expect to "see" them in your home folder. Each directory has an ACE (access control entry) which will prevent you from deleting the folder in the Finder. To delete them you must do so as the root user in the Terminal app by preferencing the rm command with sudo.

Accessing users home dir from W7 using net use

Hi!
Probably I'm doing something wrong. OES11SP1 on SLES11SP2. User home dir accessible using net use from Windows XP, but not from Windows 7. Already tried to change LmCompatibilityLevel in registry (to 1), but didn't help. I recall, some year ago I had same problem from W7 (64bit) and then I installed Novell Client, now I'm trying to wo the client, should be possible?
More thanks, Alar.

On 10.10.2013 13:56, NovAlf wrote:
>
> Hi!
> Probably I'm doing something wrong. OES11SP1 on SLES11SP2. User home dir
> accessible using net use from Windows XP, but not from Windows 7.
> Already tried to change LmCompatibilityLevel in registry (to 1), but
> didn't help. I recall, some year ago I had same problem from W7 (64bit)
> and then I installed Novell Client, now I'm trying to wo the client,
> should be possible?
> More thanks, Alar.
If you can or can't access a share on OES11 without the Novell CLient
depends on if you have configured and enabled CIFS on the server.
Note that "Net Use" is an universal command, and uses the Novell CLient
too *if* it is installed. Many People believe "Net Use" would somehow be
Microsoft Network specific, but it isn't. It uses whatever network
client is isnstalled and able to access the resource.
CU,
Massimo Rosen
Novell Knowledge Partner
No emails please!
http://www.cfc-it.de

Setting up new user home dir -- what is *supposed* to happen"

Folks:
Could someone tell me what Workgroup Mgr is supposed to do when you tell it to set up new home dir?
Right now it creates the dir, but sets the perms to drwxr-xr-x, owner root, and it's empty.
This means the new user can't do anything with the dir, and I'm fairly certain Wkg Mgr is supposed to have put some files in there?
Any clues appreciated,
Graham

I've been having some trouble with creating home directories on my server, and others are no doubt more expert in this field than I am, but what should be created are the Documents, Movies, Music, Pictures, Public, and Sites directories that you expect to see. If you create those (or whatever subset you want) and set the ownership of the directory to the correct user, Library and Desktop will be automatically created when they log in.
In my case, for a while now "Create Home Now" hasn't been working and the home directory is not automatically created when the user logs in. If I set it up manually everything works out, but I'd like to know why this is happening. I can't figure out what's wrong with the share point if that's the problem.

User home dir restriction...

Dear Sir /Madam,
I want to restrict a user on unix within his home dir .He can go down to his home dir and work but should have access up to his home dir..or any other file system dir...
Regds,
Sharad

Hi
Change the permissions on the directory above the users home directory ( from the users directory this would be referred to as "." ) so that "others" field is not readable. It would look something like this:
/export/home/a_user rwxrwx---
You may need to check which group the user has been assigned to and change the group permissions as well.

ASA WebVPN - Accessing Users Home Dir's

I have an ASA 5540 and an ACS 4.0. I am configuring an SSL based WebVPN for users in an active directory. I want to give the users access to their Windows Home Dir and have created a CIFS link in the URL list in the tunnel group policy for those users.
I want to give the users access to \\SERVER\Share\%username% as it is described in windows terms. How do I go about this in the ASA, as the above does not work at all? The ASA wants to use the / instead of \ in the CIFS shares. It works fine for normal shares and hidden share specified with $, but not using the %username% variable.
The documentation on SSL VPNS on both ASA and ACS 4.0 is terrible.
Best regards,
Neal Lewis

On ASA 8.x code:
CSCO_WEBVPN_USERNAME - WebVPN user login ID
CSCO_WEBVPN_PASSWORD - WebVPN user login password
CSCO_WEBVPN_INTERNAL_PASSWORD -WebVPN user Internal( or Domain) Password
CSCO_WEBVPN_CONNECTION_PROFILE - WebVPN user login group drop-down (tunnel-group alias)
CSCO_WEBVPN_MACRO1 - set via Radius-LDAP Vendor Specific Attribute (VSA)
CSCO_WEBVPN_MACRO2 - set via Radius-LDAP Vendor Specific Attribute (VSA)

Network home dirs & Indesign cs3

I am getting the following error when trying to use InDesign as a network user (home dirs on a Mac OS X Server)
Adobe InDesign is missing required files. Please reinstall.
/Library/Application Support/Adobe/TypeSupport/.../ROMAN.TXT
Have reinstalled and made sure everything is up to date.
I found a post on here which suggested that permissions were incorrect within the network home directory itself. Could the poster please post more details of what they had to do to get things working?
It works fine as a local user.
Thank you.

Hi Stephen
I had some progress with my problem. Make sure the user has a valid Caches folder in their Library folder in their home dir. Make sure that they have read/write access to the folder and if everything looks ok, trash it, log out, log in and try again.
stu

NFS home dirs as individual qtree or folder?

I'm setting up individual user home dirs to be automounted under linux, so NFS (we're using cmode if it matters). I don't know wether to setup the home dirs as individual qtrees per person (ex: /home_vol/qtree_username), or a single homedire qtree where everyone has a folder (ex: /vol1/home_qtree/username). I've seen this done both ways, and I don't really know if one's better than the other. I feel like the per user qtree is more flexible, but a bigger pain to manage. Any thoughts/advice?

I've always stayed away from creating a qtree per-user. It always seemed like a lot more overhead for each user vs just creating them as a subdirectory of a qtree. I don't know how many users you are talking about but the max qtrees per-volume may be an issue. --rdp

Command line creating of users fails to correctly set afp:// based home dir

i'm using a script to make users. they come and go quite a lot, don't want to be using a mouse all day long.
i thought it would be simple. dscl /LDAPv3/127.0.0.1 -create /Users/user1 NFSHomeDirectory /network/servers/some.server.here/path
with some other part of the script creating the home directory and setting it up for use.
this only gets me a nfs based home directory, which doesn't seem to work. when i make them in WGM, i get an afp based one. (afp://some.server.here/group1/user1)
what's the trick? how can i create an OD entry with dscl which results in the same outcome as using WGM?

using this script now. seems to work:
dscl -u diradmin -P $dirpass /LDAPv3/127.0.0.1 -create /Users/"$sinaUSER"
dscl -u diradmin -P $dirpass /LDAPv3/127.0.0.1 -create /Users/"$sinaUSER" UserShell /bin/bash
dscl -u diradmin -P $dirpass /LDAPv3/127.0.0.1 -create /Users/"$sinaUSER" RealName "$sinaFIRST $sinaSECOND"
dscl -u diradmin -P $dirpass /LDAPv3/127.0.0.1 -create /Users/"$sinaUSER" UniqueID "$userID"
dscl -u diradmin -P $dirpass /LDAPv3/127.0.0.1 -create /Users/"$sinaUSER" PrimaryGroupID "$mainG"
dscl -u diradmin -P $dirpass /LDAPv3/127.0.0.1 -create /Users/"$sinaUSER" NFSHomeDirectory /Network/Servers/my.server.com/Volumes/promise/"$homeF"/"$sinaUSER"
dscl -u diradmin -P $dirpass /LDAPv3/127.0.0.1 -create /Users/"$sinaUSER" HomeDirectory "<home_dir><url>afp://my.server.com/$homeF</url><path>$sinaUSER</path></home_di r>"
dscl -u diradmin -P $dirpass /LDAPv3/127.0.0.1 -create /Users/"$sinaUSER" homeDirectory /Network/Servers/my.server.com/Volumes/promise/"$homeF"/"$sinaUSER"
dscl -u diradmin -P $dirpass /LDAPv3/127.0.0.1 -create /Users/"$sinaUSER" apple-user-homeurl "<home_dir><url>afp://my.server.com/$homeF/</url><path>$sinaUSER</path></home_d ir>"
echo -n "GID2, "
[ "$secG" != "none" ] && dscl -u diradmin -P $dirpass /LDAPv3/127.0.0.1 -append /Groups/"$secG" GroupMembership "$sinaUSER"
echo -n "pass, "
dscl -u diradmin -P $dirpass /LDAPv3/127.0.0.1 -passwd /Users/"$sinaUSER" "$sinaPASS"
echo -n "quota, "
[ "$Uquota" != "none" ] && dscl -u diradmin -P $dirpass /LDAPv3/127.0.0.1 -create /Users/"$sinaUSER" HomeDirectoryQuota "$Uquota"
# create home directory
echo -n "Creating: home Dir: "
/usr/sbin/createhomedir -n /LDAPv3/127.0.0.1 -u "$sinaUSER"

Default User Template for AD users with Win home dirs

Hi all,
Can anyone tell me if it's possible for AD users with Windows based home directories to get a default user template given to them the first time they login to a Mac bound to AD?
I can give local users and users with home dirs on our Xserve my default user settings via the English.lproj template, but I cannot for the life of me get this to work for those users with Windows based home directories.
This is a biggie since my boss has mandated that ALL our student home directories are to be hosted under Windows from now on...
Thanks in advance.

So you are using roaming profiles on AD and when they log into a Mac you want to setup their default, is that what I am hearing?
You will need to modify the English.lproj on the local machine to setup the default template. Since the mac server is not involved in the authentication and hosting of a roaming AD account with windows home folder, the client creates the home folder initially. Modify the default English.lproj on the clients.

AD Users auth Ok but cannot log into AFP Home dirs

Hello,
I have a problem that has been driving me nuts for around 6 weeks so wondering if someone can help me out.
I have an XServe that has been bound to the AD Server. This server holds the users only. The Xserve is connected to an XRAID. I recently rebuilt The XRAID to be a 0+1 (2 stripes, 1 mirroring the 2nd). I then configured the Home Dirs on the Xserve to reside on the XRAID. I created a folder called UserHomes and then shared this using AFP and SMB. I removed guest access for both protocols. I Added the AD users groups to the ACLs to allow them access. I added the AD admin with full control rights to all folders, and the AD Staff group with read only access to that folder only.
I then used a script that would use dscl to extract the AD users into a list, created a folder for their Home dir, copied the Default template into their home dirs and then chowned the homedir to the AD user and chmodded the homedir 700.
Now, when i try to log in as an AD user, they get authenticated correctly as would be expected but then the login window disappears and the user is left with the desktop picture and a spinning coloured ball. This stays like this until the machine is hard-reset or the loginwindow is quit remotely.
I have tried using mobile accounts for the same user and this results in the user logging in, synching and even having full access to their home dir from the doc as well as all shares available to them, showing that kerberos seems to be working. But this started to do the same as full network accounts as well, ie the spinning ball after login.
I have rebuilt the OD server, the clients and even swapped out the switches and cabling. Same result. I have run tcpdump which seems to suggest things are as they should be (although i don't really know what i am looking for) But AFP logs show the client opening and closing forks but never logging in).
DNS is resolving successfully also.
Any ideas on what could be the problem

I synchronize the clocks of both the OS X Server and OS X Client with the AD Server. The user gets authenticated fine and the login window disappears, but thats as far as it gets the users then starts to load (open and close forks according to the AFP Log) their profile but it never turns up. No dock, no Finder. I can see that it is trying to load though because if i manage the wallpaper setting using WGM, the background of the logging in user changes. Just doesn't do anything else

Moving User Home Location

I am trying to set up a new iMac with SSD and HD. I have just migrated from another iMac. The migration moved everything to the SSD which is now quite full. I need to move my data and user folders to the HD. Can anyone advise how this should be done.
Regards

Contrary to what others might say there is no problem moving a home dir to another volume. I've been doing it since 10.1.
Here's some references:
Relocating the Home Directory Off the Boot Drive
How to Move the Home Folder in OS X – and Why
I use an SSD as a boot drive and would never consider putting my home dir on there. Ok I didn't do it before SSD either. By placing your home dir on another drive you can interchange boot drives while continuing to use your same home dir.

SQL Developer Error Creating User Home

SQL Developer was running fine on my Windows 7 64-bit machine until Monday morning. Now when I kick it off (from my Desktop shortcut), I get a small box saying: "Error creating user home in directory C:\Users\<username>\AppData\Roaming\SQL Developer".
There is no error number, and I have been unable to find this error in the SQL Developer documentation. What does it mean? It's possible that updates were pushed to my machine over the weekend (unknown -- network sysadmins are elsewhere), but I would have thought I would have gotten a different message if there were compatibility problems. Have I accidentally deleted a necessary file from my local SQL Developer folder? My connection databases are Oracle 11g.
Thanks for any suggestions.

Hi,
Here is a thread on the same issue, but so old that the advice it gives is no longer accurate:
Re: Error creating user home in directory D:\Program Files\raptor\jdev.
So let's assume you no longer have write access to your own Windows user directory. To workaround that just add the following to one of the conf files in the SQL Developer installation folder. For example, to run SQL Developer from a flash drive, I modified my E:\sqldeveloper\ide\jdk.conf to include
AddVMOption -Dide.user.dir=../../.sqldeveloperSo that the user home is E:\.sqldeveloper
Regards,
Gary
SQL Developer Team

Can't match home dir path to the actual data

probably something simple, but I cannot get my students directory to mate up again
Brief history:
unstable old world: exported user info, reinported into a clean build....this provides an old path name that was from the previous world and is now not correct
Created new share points with network mount selected
I have succesfully managed to re-home all my faculty users (only 60),
however the 658 students are not playing ball. Different share point
One thing I've noticed on the HOME screen within WGM: for a user who is a member of that old primary GID, when I click on the newly shared home path in Where, at the top of the screen it only shows
Home: afp://myservername.mydomain.com/school/username
where as a faculty member (different primary GID) clicking on the SAME home dir will get:
Home: afp://myservername.mydomain.com/school/username
/Network/Servers/myservername.mydomain.com/
right now I have 658 user with the NONE home selected and they can at least login, onece only they can actually network share to their home but I need them mounting correctly
TIA

Tim,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Problems With FTP Users home directory

Hello Everyone,
I recently ran into a problem when setting the home directory of an ftp user. What I want to be able to do is for example I have two users, one user is User1, and the other is FTPUser. Now when people ftp into the user FTPUser I want to set the home directory to be a certain path in User1. Now I was able to successfully do this on one box when creating the FTPUser I just set the home directory to be the path in User1. And when people ftped into FTPUser they were in the right directory under User1.
I tried to do this same procedure on another box, and after creating the FTPUser and setting its home directory to a path under User1. Now when they ftped into FTPUser it was showing that the home directory was "/". I examined /etc/passwd and it presents the right home directory that I want, yet when people ftp into FTPUser its showing the home directory to be "/". Any help would be appreciated. Thanks in advance.
-Kevin

Sorry for such a late reply, but I figured out my problem and will put it on here in case other people run into the same problem. You must make the FTPUser be in the same group of the normal users directory path you wish to FTP into. For example the command will look like this when making the FTP user:
useradd -g "users group number" -d /path/to/file -s /bin/sh ftpusername
so if user1 group id was 110 you would put 110 after -g and set the home dir of the ftpusername to be some path in user1. Thanks all for the help.
-Kevin
Edited by: kratkinson on Jun 22, 2009 6:46 AM

Apache2 & User Home dirs....

Similar Messages

Maybe you are looking for