Similar Messages

Screen Sharing Broken for Network Account Admins Mac OS X Server

Re: OS X 10.8.4, Server.app 2.2.1
After replacing a failed Airport Extreme -- and the resulting changes in server IP address -- Screen sharing is now broken for "Network" account administrators. "Local" adminstrators can screen share successfully.
When logging in as a Local Admin, the System Log contains a single entry:
Authentication: SUCCEEDED :: User Name: localadmin :: Viewer Address: 10.0.1.6 :: Type: DH
When logging as a Network Admin, a similar line appears:
Authentication: SUCCEEDED :: User Name: testnetwork :: Viewer Address: 10.0.1.6 :: Type: DH
followed by screen-fulls of other log messages, eventually ending -- a minute or two later -- with:
screensharingd[77693]: uid 1034 not found
screensharingd[77693]: unable to get width and height of display.
at which point the client sees a "Error: Network connection lost." alert. 1034 is the UID of "testnetwork", as seen in
dscl /LDAPv3/127.0.0.1 -list /Users UniqueID
So apparently, Network users are authenticated, but screensharingd cannot find the user.
changeip -checkhostname returns "success". Just to be sure, I "Updated the Host Name" as suggested by the "Network Configuration Has Changed" alert in Server.app -- problem remains.
How does one debug this? Are there more comprehensive debug logging options available for screensharingd or login window? Anyone else seen this problem?

Linc: thanks for your inquiry.
Here are more steps I've taken to solve this problem:
1) From a Time Machine backup to a test partition, I restored the server from before the failure of the base station and found that the login problems were present then.
2) On yet another test partition, I created from scratch a new OS X Server. Added a local administrator, and a network admistrator and discovered the same problem: network administrators cannot screen share, although in this case, they are simply unauthorized.
Using dscl, things look OK: there is a /Local/Default/Groups/com.apple.access_screensharing that lists only the admin group, and the admin group contains networkAdmin.
Furthermore, I can log in as the networkadmin from the login window, as "Other".
Furthermore, I can ssh into the server using the networkadmin credential.
I used odutil to boost the logging OpenDirectory log level. The logs are very verbose, but to my eyes, it looks like OD recognizes the networkUser, but screensharingd fails to authorize. See logs below.
Can someone confirm that screen sharing from network admin accounts works at all? Is there a way to elevate screensharingd logging to find out more about why it rejects network admins?
TIA
/var/log/opendirectoryd.log
4643.65273.65277, Module: search - ODQueryCreateWithNode request, NodeID: 3D4241C6-FAFF-4816-8F7C-B3E0ED6F56A6, RecordType(s): dsRecTypeStandard:Users, Attribute: dsAttrTypeStandard:RecordName, MatchType: EqualTo, Equality: CaseIgnore, Value(s): networkadmin, Requested Attributes: dsAttributesStandardAll, Max Results: 1
4643.65273.65277, Node: /LDAPv3/127.0.0.1, Module: search - queuing request to connection - '/LDAPv3/127.0.0.1:ldap:406935A6-9ADB-413A-A82B-7F30F4E9E5A1'
4643.65273.65277, Node: /LDAPv3/127.0.0.1, Module: ldap - adding 'dsAttrTypeStandard:RecordName' for ambiguous name query
4643.65273.65277, Node: /LDAPv3/127.0.0.1, Module: ldap - adding 'dsAttrTypeStandard:RealName' for ambiguous name query
4643.65273.65277, Node: /LDAPv3/127.0.0.1, Module: ldap - query with filter - '(&(&(objectClass=inetOrgPerson)(objectClass=posixAccount)(objectClass=shadowAc count)(objectClass=apple-user)(objectClass=extensibleObject))(|(uid=networkadmin )(cn=networkadmin)))', baseDN - 'cn=users, dc=testserver,dc=local'
4643.65273.65277, Node: /LDAPv3/127.0.0.1, Module: ldap - found result - 'uid=networkadmin,cn=users,dc=testserver,dc=local'
4643.65273.65277, Node: /LDAPv3/127.0.0.1, Module: ldap - ODQueryCreateWithNode completed, delivered 1 result
4643.65273, Node: /Search, Module: search - ODQueryCreateWithNode completed, delivered 1 result
4643.65278 - Client: screensharingd, UID: 0, EUID: 0, GID: 0, EGID: 0
4643.65278 - ODNodeRelease request, NodeID: 184CFA31-1EB8-4384-B9CA-D04A93736CB1
4643.65278, Node: /Search - ODNodeRelease completed
clearing all node authentication connections
/var/log/system.log:
screensharingd[4665]: Authentication: FAILED :: User Name: networkadmin :: Viewer Address: 10.0.1.6 :: Type: DH

HT204023 I am not able to set my Personal Hotspot setting, if I try to set it massage displayed "To enable Personal Hotspot for this account, contact carrier " I am in Oman and using Nawras service for data plan. Plz help me

I am not able to set my Personal Hotspot setting, if I try to set it massage displayed "To enable Personal Hotspot for this account, contact carrier " I am in Oman and using Nawras service for data plan. Plz help me. Before I was using this service but now facing problem.

Md Asad wrote:
Yes but they told mobile co mean Device 'iPhone co'
Sorry but that makes no sense in English. Only your mobile phone company (i.e. "carrier") can enable the Personal Hotspot feature.

If I have two email accounts, one personal hotmail account and one MS Exchange work account, how can I setup individual notifications for each account. Right now, any email from any account has the same notification. I want work to be different than perso

If I have two email accounts, one personal hotmail account and one MS Exchange work account on my iPhone 4s, How can I setup individual notifications for each account? Fore example, if I get a work email, I want to hear a DING, DING....If I get a personal email, I want to hear a BEEP, BEEP. Right now, any email from any account has the same notification. I want work incoming email notification to be different than personal incoming notification. The only semi-workaround I've seen is just disable any notification for the Hotmail account, so only work emails would notify. But then I don't know when I get a personal email. Even the lowely Blackberry Torch 9800 has this feature..not iPhone 4s??
Thanks

Sorry you get only one notification sound for all email accounts. you can send a suggestion to apple here http://www.apple.com/feedback/

Can you have multiple users for one account?

Can you have multiple users for one account? if so how do you set it up.
We are using it for our department and it would be great to see who created what form instead of it being all one name.

Each person should have their own account. You can easily share the forms with other people in your department. You will be able to see who the author of the form is.
More information on how to share :
http://forums.adobe.com/docs/DOC-2462
Information on how to copy a forms to a different account :
http://forums.adobe.com/docs/DOC-1390
Hope this helps
Gen

My old itunes id was an email that no longer can be used, therefore, I can not change the password for that account. Everything that I purchased under that id name will not play. How can I fix this?

My old itunes id was an email that no longer can be used, therefore, I can not change the password for that account. Everything that I purchased under that id name will not play. How can I fix this?

I no longer have an email address that was also my Apple ID. Can I still use the email address as my Apple ID?
Apple recommends you change your Apple ID to your current, working email address. This will not create another Apple ID, it will only change it to your working email address. See Changing the name you use for your Apple ID if you'd like more information.
Note: @mac.com and @me.com Apple IDs can not be renamed. If you no longer use the .mac or .me email address be sure to add your valid email address as an additional email address.
From here > http://support.apple.com/kb/HT5622?viewlocale=en_US
If necessary...
Contact iTunes Customer Service and request assistance
Use this Link > Apple Support iTunes Store Contact

Can you have different passwords for mail account and ICloud?

Can you have different passwords for mail account and ICloud?

Yes - you want to go under Notifications, Mail. Set each acct the way you want.

How can i enable my cookies for only one website?

how can i enable my cookies for only one website?

CShaya wrote:
how can i enable my cookies for only one website?
Safari
There is no preference setting available for that.
Best.

How can I enable the "find my ipad" button in the icloud screen?

I have had my Ipad mini for about a year but never thought to enable the "find my ipad" feature. When I go into the icloud screen under settings it gives me lot of options but the "find my ipad" button appears in light grey font and won't allow me to turn it on. It is the only feature on this page that I can't change. Any ideas?

You must have a valid Apple ID installed, and a valid iCloud account. Check your iCloud account information and see that it matches your Apple ID.

Can't enable disk use for restored shuffle

My shuffle stopped playing music in March. I continued using it as a removable disk. I tried the restore utility and it worked - now my shuffle plays music again. However the latest iTunes (7.0.1 and 7.0.2) has no checkbox to enable disk use for when the Shuffle is connected. The checkbox is there for a 5G iPod but not for the Shuffle.
So - now it works as an iPod but no longer works as a disk. What is going on here? How can I enable disk use?

iTunes 7.0.2 is still displaying that checkbox for both of our local Shuffles.
Perhaps you just need to scroll down to find it. If it's actually not there then I'd have to think that this is an iTunes question, not an iPod one, and might be better placed in those forums.

How can you 'block' your Iphone, if somebody stole it? so that they can not mess with your social network accounts or anything alike?

Yesterday night, somebody stole my Iphone.
Now I'm trying to safe my privacy and everything trough itunes. But how can I 'block' the Iphone, so the thief won't be able to access my phone, or at least not my apps and stuff? is there anyway, -besides trying the impossible and getting it back- I can do??
I'd really apprecciate any tipp and help at this one!!!

What To Do If Your iDevice or Computer Is Lost Or Stolen
iPhone, iPod Touch, and iPad
If you activated Find My Phone before it was lost or stolen, you can track it only if Wi-Fi is enabled on the device. What you cannot do is track your device using a serial number or other identifying number. You cannot expect Apple or anyone else to find your device for you. You cannot recover your loss unless you insure your device for such loss. It is not covered by your warranty.
If your iPhone, iPod, iPod Touch, or iPad is lost or stolen what do you do? There are things you should have done in advance - before you lost it or it was stolen - and some things to do after the fact. Here are some suggestions:
This link, Re: Help! I misplaced / lost my iPhone 5 today morning in delta Chelsea hotel downtown an I am not able to track it. Please help!, has some good advice regarding your options when your iDevice is lost or stolen.
1. Reporting a lost or stolen Apple product
2. Find my lost iPod Touch
3. AT&T. Sprint, and Verizon can block stolen phones/tablets
4. What-To-Do-When-Iphone-Is-Stolen
5. iCloud- Use Lost Mode
6. What to do if your iOS device is lost or stolen
7. 6 Ways to Track and Recover Your Lost/Stolen iPhone
8. Find My iPhone
9. Report Stolen iPad | Stolen Lost Found Online
It pays to be proactive by following the advice on using Find My Phone before you lose your device:
1. Find My iPhone
2. Setup your iDevice on iCloud
3. OS X Lion/Mountain Lion- About Find My Mac
4. How To Set Up Free Find Your iPhone (Even on Unsupported Devices)
Mac Computer
       Find My Mac can be used from Find My Phone at iCloud.com and via Find
       My Phone on your iDevice.
      The following is third-party anti-theft software:
           1. STEM 2.1
           2. MacPhoneHome 3.5
           3. MacTrack 7.5.0
           4. VUWER 1.7
           5. Sneaky Bastar* 0.2.0
           6. Undercover 5.1.1
           7. LoJack for Laptops
           8. Hidden 2.0
           9. Prey 0.6.2

HT4061 I can't change the country for my account as it says I have rentals that have not expired, but they expired weeks ago

How can I sort this out? My account says it is only valid for purchases from the UK itunes store, but I have now moved to the US. How can I get around this problem?

If your device is signed into an old iCloud ID, and if it is an earlier version of your current ID*, do the following:
Make sure you are signed into iMessage and FaceTime with your current ID. If they are signed into the old ID, go to Settings>Messages>Send & Receive and Settings>FaceTime, tap the ID, sign out, then sign back in with your current ID.
Then temporarily recreate the old ID by going to https://appleid.apple.com, click Manage my Apple ID and sign in with your current iCloud ID. Click edit next to the primary email account, change it back to your old email address and save the change. (You should not have to verify the old email account so it doesn’t matter if you no longer have access to it.) Now go to Settings>iCloud, turn off Find My iDevice and enter your current password when prompted (even though it prompts you for the password for your old ID). Then go to Settings>iCloud, tap Sign Out (or Delete Account if you are not running iOS 8) and choose Delete from My iDevice when prompted (your iCloud data will still be in iCloud). Next, go back to https://appleid.apple.com and change your primary email address back to the way it was. Now you can go to Settings>iCloud and sign back in with your current iCloud ID and password (your data will download back to your device).
* If that's not the case, you'll have to contact the Apple account security team and ask for assistance resetting the password for the old ID: Apple ID: Contacting Apple for help with Apple ID account security. You'll have to be able to prove your identity to them before they will do this.

How can I enable spell checking for a text box that is just one line, e.g. subject in e-mail?

In a prior version of Firefox I found a website somewhere that told me what to do to enable spell checking for text boxes that are just one line. I got used to being able to send an e-mail with a Subject Line that didn't have a misspelling. Now it doesn't work. Please tell me how I can enable that again. I am on a Mac using Firefox 6.0.2. Thanks!

See:
*http://kb.mozillazine.org/Spell_checking
*http://kb.mozillazine.org/layout.spellcheckDefault
You can set the pref layout.spellcheckDefault to 2 on the about:config page.
To open the about:config page, type about:config in the location (address) bar and press the "Enter" key, just like you type the url of a website to open a website. 
If you see a warning then you can confirm that you want to access that page. 
*Use the Filter bar at to top of the about:config page to locate a preference more easily.
*Preferences that have been modified show as bold (user set).
*Preferences can be reset to the default or changed via the right-click context menu.

How do i delete an itunes account so I can use the email address for another account?

how do i delete an itunes acount so I can use the amail for another account?

Maybe he's referring to renaming another iTunes Store account after making the email address null and available to be used. Otherwise, I agree with you that it is pointless.

Mobile Account Preferences visible on Menubar for Network Accounts

On Mobile Accounts (setup with Profile Manager), acting as network account (home folder in server), the mobile account preferences are shown on the menubar. In addion, it says "last home sync" incomplete. Both are wrong according to my understanding.
However it makes sense - and it if the case - if the account is really working as mobile account with local home folder on a e.g. macbook.
Does anyone has the same issue?

I have the same issue. No fix yet.
One of my machines has joined the network and seems to be ok in almost every way...clearly with the exception of this way.
I will post if / when I find a solution.
W

Can I enable simple finder for network accounts?

Similar Messages

Maybe you are looking for