Can't create new open directory user

hi.
If I use the workgroupmanager to create a new user it automatically creates one with a "crypt" password.
first it is shown as open directory, but then if I re-load, it says "crypt" password.
If I try to change it to open directory the system tells me that I am not authorized to do so.
it does not matter if I try the workgroupmanager locally or via my macbook remotely.
if I create them via the server preferences it works fine.
since I am a newbie here, maybe I am doing something wrong... ideas? please.
thanks.
martindavid

Check out this tread, you are not alone but there doesn't seem to be a single solution...
http://discussions.info.apple.com/thread.jspa?threadID=2262981
I had this code and MY solution came from the fact that I had turned OFF DNS because I couldn't see that "I" was using it. turning it back on and ensuring that it was correctly configured solved it for me!

Similar Messages

Strange Permissions problem when creating new Open Directory user

I just set up a mac lab to authenticate to an Open Directory server which also stores home folders. All of the initial users I created work fine, there were about 50 users that I set up. When I added a new user this morning though, it would not allow him to access anything within his home folder (i.e. nothing worked)
I went back to the server and took a look at the Users share and noticed that when his accound was created, instead of setting the owner of the folder to his username (xxx123) it was set to his userid number (1024). I did a chown on his directory to his username and he was then able to access his home directory from the clients.
I realize I found a fix, but I would prefer to not have to do this every time I create a new user. Why is this happening?

Have you used the "Role" drop-down to "SYSDBA"? - if not, you get the ORA-01017 error.

Unable To Create New Open Directory Master

I have a brand new installation of MacOS X Mountain Lion Server, latest version, in a brand new Mac Mini. This Mac Mini is being co-located in a data centre, and I am setting it up via remote access (screen sharing). The data centre has setup DNS zone records for my domain, including a reverse DNS PTR record, and everything in the DNS is working fine.
During the installation of Server, when the installer asked for the type of 'Host Name', I selected 'Host name for Internet'. The installer was able to use the IP address of the Mac Mini to automatically find the correct host name, and configure it. Once the installation was complete, no services were turned on - not even DNS, as the installer probably figured out that DNS services were being handled externally.
The first thing I went to try and do was to turn on Open Directory. I turn the service on, and a sheet comes down, where I select to "Create a new Open Directory Domain". I click 'next', and on the next sheet I enter the OD Administrator's details, and password. Click 'next' again, and then I get the following message:
"This computer's host name is invalid.
The host name does not resolve to any configured address of this computer. Please ensure the host name is correct."
Opening Terminal app, and typing "hostname", I get the correct hostname, as showing in Server app itself.
Entering "sudo changeip -checkhostname" in Terminal app, I get all correct details for the IP address and host name of the machine, and the message: "The names match. There is nothing to change. dirserv:success = 'success'"
I finally tried getting Server app to change the host name itself - going into the Server pane, select the 'Network' tab, and in the 'Names' section, next to the host name, click on the "Edit..." button. Again, went through the wizard, and the wizard again was able to find the hostname automatically from the machine's IP address. Once the 'changing' process was completed, I went to try and initialise Open Directory, and again, got the same message.
Can anyone shed any light? Any suggestion would be welcome at this stage...

MrHoffman, thank you for your guidance. You have, however, given me a bit of a headache.
MrHoffman wrote:
127.0.0.1 is likely going to be incorrect here. Please reference the DC DNS servers, and not a local server. If you're in a DC and particularly with a public-facing host without an outboard firewall to block DNS traffic, you likely do not want to be running your own local DNS services.
As described previously, the server was referencing the DC DNS servers. The server was not running its own DNS service. Open Directory was not able to detect that the ip address and the hostname were correct with this setup - even though the command line on the server as well as externally showed that all DNS records were setup correctly, and that the IP address and hostname matched. The server's own installation wizard and 'Change Host Name' wizard automatically detected the hostname from the machine's ip address - by consulting the reverse DNS PTR record in the DC DNS servers.
Starting the server's own DNS server - and adding '127.0.0.1' to the top of the DNS list in Preferences - allowed me to create the Open Directory master, finally. Of course, the internal DNS server was setup so that only the server itself could access it - it was closed to any other machines - and even then, I had it running only momentarily: once Open Directory created its master domain, I switched DNS service off, and removed '127.0.0.1' from the DNS list in Prefences.
With that setup, everything seemed to work fine. All users were able to login, access their share points and their mail.
MrHoffman wrote:
For the host name, the host name would usually be the FQDN fully-qualified domain name, and "example.com" isn't usually a host name. You'd usually find somehostname.example.com here
That is the only machine in the domain. All public sub-domains - like 'mail', 'www' or 'calendar' - point to the same machine. The reverse DNS PTR record points to the higher-level domain "example.com".
Your warning, however, made me worried:
MrHoffman wrote:
I'd probably rebuild the OD configuration, as I'd wonder of OD now had a bogus host name. Once bad DNS gets involved, the entanglements can be quite pernicious..
So I decided to heed your advice, and rebuild OD. I deleted the Open Directory master, and tried rebuilding it with DNS service turned off. As before, OD insists that "the host name does not resolve to any configured address of this computer", and refuses to create the new Master. I ended up following the procedure above again - switching DNS service on temporarily to get OD to work.
The problem is, that now no user can connect to the server anymore. Everyone keeps getting a message stating that their password is wrong - including users on their iPhones and iPads.
I suspect that when I created the new OD Master, it created a new certificate, and that is what is causing problems. While I could try to get the desktop users to delete the old certificates from their keychain, this is not really an option for iPhone/iPad users.
Where do I go from here? After almost 24 hours straight dealing with this, I'm at the end of my rope...

Error creating new Open Directory domain

The wizard for creating a new Open Directory domain in Server.app on Mountain Lion responds with the following error message:
     "An error occurred while configuring My Server as a directory server. Please check your network configuration and try again."
Not very helpful. How do find out what the actual error is?
Thanks.

Can anyone translate these log messages?
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]: label: default
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]:         dbname: od:/Local/Default
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]:         mkey_file: /var/db/krb5kdc/m-key
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]:         acl_file: /var/db/krb5kdc/kadmind.acl
Aug 12 05:22:26 myhost com.apple.launchd[1] (com.apple.Kerberos.kpasswdd[60241]): Exited: Killed: 9
Aug 12 05:22:26 myhost com.apple.launchd[1] (com.apple.Kerberos.kpasswdd): Throttling respawn: Will start in 10 seconds
Aug 12 05:22:26 myhost com.apple.launchd[1] (com.apple.Kerberos.kadmind[60242]): Exited: Killed: 9
Aug 12 05:22:26 myhost com.apple.launchd[1] (com.apple.Kerberos.kadmind): Throttling respawn: Will start in 10 seconds
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]: WARNING Found KDC certificate (O=System Identity,CN=com.apple.kerberos.kdc)is missing the PK-INIT KDC EKU, this is bad for interoperability.
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]: KDC started
Aug 12 05:22:26 myhost.mydomain.com Server[46707]: An error occurred while configuring My Mac Mini Server as a directory server:
        Error Domain=XSActionErrorDomain Code=-1 "A child action failed" UserInfo=0x7fb854a2ad90 {XSActionErrorActionsKey=(
            "Creating Open Directory master"
        ), NSLocalizedDescription=A child action failed}

Can't login to new open directory users

I have a Mac Mini Server running 10.8.2 Server. I have existing users, most with no home directory and a couple with network home directories.
However, any NEW users I add (in LDAPv3), they aren't able to login. When I create the user, the "access account" option is checked and stays checked after the user is configured & saved, and stays that way when I relauch Workgroup Manager.
However, when I attempt to login to this user from a network comptuer, the "access account" checkbox gets unchecked. I can check it again and save the account, but when I reopen Workgroup Manager, it's unchecked.
Help???

Good tip from Francis.
Last night I finaly was able to get things back to semi normal to summarise here are some tips that worked for me.
Things first went wrong when I tried to add a new user in work group manager. After doing this I got some quite strange behaviour.
The server appeared to hang when loggin on with the new user. but ssh to the server was working. Finally after about 10 minutes I hit the reset button on the server it appeared to go into sleep mode then automagically it logged in the user. Wow did it work .... no, Bad news other users could no longer ssh to the server... Arrrr. Cause tracked down to Kerberous reported as no longer running... Clients (my family ) startign to report cant access services like email ... help...
Rather than all the pain of tryig to fix that this is what I did.
1) Back up OD in Server Admin ( not Server.app) OD dosent show up there dont know why ??
2) Make sure the DNS is working
nslookup, dig, hostname commands ... all reported correctly forward and reverse MYSERVER.MYDOMAIN.COM. domain and IP address. I even re-ordered the DNS name so that the local address 192.168.10.X was reported first on my local netwrok before the external ip of the server.
3) Create a completly new OD by deleatign the old one by setting is as a stand alone then re-creating is as a new master ( use Server Admin tool )
Finally Kerbrous all reported as runnig ... Try again to add a user...
4) Add new user in Workgroup manager open on server not remotly this didnt work.
5) set home account with apf://fqd.name/Users/
6) make sure home account is accessable on network.
6) set shell
7) in Server Admin give all permissions to services new user will need. such as ssh login as required.
8) in Server.app ( not Server Admin or workgroup manager )
check that new user appears. The local OD must be in the Directory Exployer search path for this to happen
and the server must be binded to this path.
I added both /Ldap3/127.0.0.1 but also importantly /ldap3/MYSERVER.MYDOMAIN.COM
9) in Server app click on the user then select the Advanced settings. Make sure user has home dir selectd as the correct /Users folder on the server
( this was not set at first and had the value of 99 no idea why ) there are also other important settings here.
10) Finally restore OD with perevious backup to add back the rest of the users.
Apparantly this actually does a merge not a overwrite.
End state every thign finaly working .....
except the iChat/jabber server for some reasion wont accept authanicate users.... rrrr.
Bonjour works on the local network but well the point of havign a jabber server was for family in countary A to talk to grandparents and have private secure video phone with country B so would have been nice if that worked
Good luck
Hope that helps

New open directory account doesn't create mail account

Hi All
I have a Mac Mini with lion server, Fresh out of the box i messed with it a few times to learn and then i did a clean (internet) install and started with the settings i wanted (hostname, etc) with no mistakes. (It seems Lion doesn't like applhying most changes)
When i set it up i created one local admin user that won't be in the open directory.
Anyway, I've set up the following :
* Address Book
* File Sharing
* iCal
* Mail
* Profile Manager
* and VPN
The first open directory user i added was myself and that user managed to get assigned an email account.
Susiquent users i've added have not been registered with the mail subsystem.
I've checked this using the "Server Admin" additional download management tool. (Mail service on the left, Maintenance up the top and then accounts uder that)
There is only one mail account and thats the first one i've added.
I havn't played with the settings so other than switching things on it should "just work" but it doesn't.
I've prevously setup vmail servers using mysql to store the accounts with postfix and courioer imap but that was in some ways simpler as nothing was under the covers. I havn't dug too much into the dovecot config files, etc as i believe there is an all knowing server configuration engine at work here that isn't doing its job (which i havn't dug into)
Has anyone had this issue of the mail accounts not being created?
Or can anyone point me to a fix?

It seems to have something to do with profile manager.
I get stack traces in the "system messages" logs for the "Server" application, grrrr.
I'll get that info and attempt to submit a but report tonight.

Move user files and preferences to new open directory log in

I have a machine that I have been using for a few months. I log in to the machine as an admin user. We just put in a new MAC OS X server and are going to be using Open Directory and probably Mobility on the users.
Is it possible to move or duplicate current state (preferences, passwords, bookmarks, email, etc.) of my computer to a new Open Directory log in on the same computer. If i can what is going to be the easiest way.
Both the sever and my machine are 10.5.6.

If you're logged into the old drive, select GO from the FInder menu while holding the option key down. Select Library from the submenu. This is your Home Library.
The Mail folder will contain all accounts, mailboxes, and account preferences.
The Mail application preferences will be stored in the Preference folder.
For "what files you need" , that depends on what you're trying to accomplish. What are you trying to do?

[Solved]Can t create new directory on other drives

Hi
I use arch linux 64 bit.
My system can mount other drives like usb hdd and manjaro and windows but
can t create new directory on them even as root.
my system information is :
/etc/fstab:
# /etc/fstab: static file system information
# <file system> <dir> <type> <options> <dump> <pass>
# /dev/sda3
UUID=88e6666f-6762-4f20-9944-82429dd5bc2f / ext4 rw,relatime,data=ordered 0 1
UUID=263ad1bd-2e85-4330-905c-c730193e959b swap swap defaults 0 0
/etc/group:
root:x:0:root
bin:x:1:root,bin,daemon
daemon:x:2:root,bin,daemon
sys:x:3:root,bin
adm:x:4:root,daemon
tty:x:5:
disk:x:6:root
lp:x:7:daemon
mem:x:8:
kmem:x:9:
wheel:x:10:root,hasan
ftp:x:11:
mail:x:12:
uucp:x:14:
log:x:19:root
utmp:x:20:
locate:x:21:
rfkill:x:24:
smmsp:x:25:
http:x:33:
games:x:50:
lock:x:54:
uuidd:x:68:
dbus:x:81:
network:x:90:
video:x:91:
audio:x:92:
optical:x:93:
floppy:x:94:
storage:x:95:hasan
scanner:x:96:
power:x:98:hasan
nobody:x:99:
users:x:100:
systemd-journal:x:190:
avahi:x:84:
polkitd:x:102:
lightdm:x:620:
git:x:619:
vboxusers:x:108:hasan
What can I do?
thanks
Last edited by hosseini (2014-02-08 20:47:13)

hasan@hasan ~]$ mount
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
sys on /sys type sysfs (rw,nosuid,nodev,noexec,relatime)
dev on /dev type devtmpfs (rw,nosuid,relatime,size=2018728k,nr_inodes=504682,mode=755)
run on /run type tmpfs (rw,nosuid,nodev,relatime,mode=755)
/dev/sda3 on / type ext4 (rw,relatime,data=ordered)
securityfs on /sys/kernel/security type securityfs (rw,nosuid,nodev,noexec,relatime)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev)
devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000)
tmpfs on /sys/fs/cgroup type tmpfs (rw,nosuid,nodev,noexec,mode=755)
cgroup on /sys/fs/cgroup/systemd type cgroup (rw,nosuid,nodev,noexec,relatime,xattr,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd)
pstore on /sys/fs/pstore type pstore (rw,nosuid,nodev,noexec,relatime)
cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,nosuid,nodev,noexec,relatime,cpuset)
cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup (rw,nosuid,nodev,noexec,relatime,cpuacct,cpu)
cgroup on /sys/fs/cgroup/memory type cgroup (rw,nosuid,nodev,noexec,relatime,memory)
cgroup on /sys/fs/cgroup/devices type cgroup (rw,nosuid,nodev,noexec,relatime,devices)
cgroup on /sys/fs/cgroup/freezer type cgroup (rw,nosuid,nodev,noexec,relatime,freezer)
cgroup on /sys/fs/cgroup/net_cls type cgroup (rw,nosuid,nodev,noexec,relatime,net_cls)
cgroup on /sys/fs/cgroup/blkio type cgroup (rw,nosuid,nodev,noexec,relatime,blkio)
systemd-1 on /proc/sys/fs/binfmt_misc type autofs (rw,relatime,fd=28,pgrp=1,timeout=300,minproto=5,maxproto=5,direct)
hugetlbfs on /dev/hugepages type hugetlbfs (rw,relatime)
tmpfs on /tmp type tmpfs (rw)
debugfs on /sys/kernel/debug type debugfs (rw,relatime)
mqueue on /dev/mqueue type mqueue (rw,relatime)
configfs on /sys/kernel/config type configfs (rw,relatime)
fusectl on /sys/fs/fuse/connections type fusectl (rw,relatime)
gvfsd-fuse on /run/user/1000/gvfs type fuse.gvfsd-fuse (rw,nosuid,nodev,relatime,user_id=1000,group_id=100)
/dev/sda1 on /media/WIN7 type ntfs (rw,nosuid,nodev,relatime,uid=1000,gid=100,fmask=0177,dmask=077,nls=utf8,errors=continue,mft_zone_multiplier=1,uhelper=udisks)
/dev/sda2 on /media/MANJARO type ext4 (rw,nosuid,nodev,relatime,data=ordered,uhelper=udisks)
I want create new directory on them. I just use enlightenment .
Last edited by hosseini (2014-02-08 19:33:17)

Can't create new users after GroupWise is moved from NetWare to Linux

Hi,
I moved GroupWise (Version 6.5 SP 6, single domain and single office)
from NetWare 6.5 server to SUSE Linux Enterprise server 9. It seems the
GroupWise server is running oaky. Existing users are able to connect
their mail box and send and receive messages. But I can't create new
users on the GroupWise server.
I used ConsoleOne installed on the Linux server to create new GroupWise
users. It seemed that I was able to do it. The new users appear on the
NDS and the GroupWise File IDs were assigned for these users. And I was
able to add these new users to distribution lists. But the users DB
files (userXXX.db) were not created under /grpwise/po/ofuser on the Linux
server and they cannot connect to the server. Old users cannot find them
in Novell GroupWise Address book.
Does anyone how to fix the problem?
Thanks in advance!
Jinkang

Hi,
[email protected] wrote:
>
> Hi,
>
> I moved GroupWise (Version 6.5 SP 6, single domain and single office)
> from NetWare 6.5 server to SUSE Linux Enterprise server 9. It seems the
> GroupWise server is running oaky. Existing users are able to connect
> their mail box and send and receive messages. But I can't create new
> users on the GroupWise server.
>
> I used ConsoleOne installed on the Linux server to create new GroupWise
> users. It seemed that I was able to do it. The new users appear on the
> NDS and the GroupWise File IDs were assigned for these users. And I was
> able to add these new users to distribution lists. But the users DB
> files (userXXX.db) were not created under /grpwise/po/ofuser on the Linux
> server and they cannot connect to the server. Old users cannot find them
> in Novell GroupWise Address book.
>
> Does anyone how to fix the problem?
This clearly sounds like your domain (which is the part of groupwise
which you admin against) doesn't/can't talk to the postoffice, so the
change you made (to the domain) does never get to the PO (which is where
the addressbook of your other users come from, and is what is
responsible for creating the user DB). This seems very likely to be
caused by your move not being done properly, and old information (either
path or IP address) for the PO still being in the domain and/or domain
database.
So how's the domain linked to the PO?
CU,
Massimo Rosen
Novell Product Support Forum Sysop
No emails please!
http://www.cfc-it.de

HI Everyone! Please Help me to solve problem my Macbook Pro Mid2009. First problem is my Macbook has a noise sound when i first opened but when I used it around 30min it stop the sound. Next i can't create new partition it appeared: couldn't modify

Hi Guys! I can not create new partition on my MacBook Pro. I don't what just happened on it. Before i could but these fews day i can't. When I try to create new partition it said: Partition failed. couldn't modify partition map because file system verify failed. My HHD is samsung sata 640GB.
When I went to iONE (Apple store in cambodia) they check for me and they said my HHD is no problem. So please help with this.
Thanks you so much......! any ideas please send to [email protected] or [email protected]

I've just scanned my logs and I've found a lot of failed connections to teamviewer but I do not have this app installed. Can you suggest me a way to stop these connections? I found tons of messages like this:
21/10/14 14:45:31,851 com.apple.xpc.launchd[1]: (com.teamviewer.service[1428]) Service could not initialize: Unable to set current working directory. error=2, path=/Applications/TeamViewer.app/Contents/Resources: 14A389: xpcproxy + 12907 [1227][1016C726-9ACF-3A24-9C51-A279F5C6B167]: 0x2
21/10/14 14:45:31,851 com.apple.xpc.launchd[1]: (com.teamviewer.service) Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
21/10/14 14:45:37,239 com.apple.xpc.launchd[1]: (com.teamviewer.teamviewer[1430]) Service could not initialize: Unable to set current working directory. error=2, path=/Applications/TeamViewer.app/Contents/MacOS: 14A389: xpcproxy + 12907 [1227][1016C726-9ACF-3A24-9C51-A279F5C6B167]: 0x2
21/10/14 14:45:37,239 com.apple.xpc.launchd[1]: (com.teamviewer.teamviewer) Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
thx

How do I unbind a local user from an Open Directory user?

I have a couple MacBook Pros running Leopard that successfully bound a local account to a corresponding Open Directory account using Directory Utility.
I had to re-install Leopard Server (using Standard configuration) and re-create Open Directory accounts. Now these laptops are unable to bind to the new Open Directory accounts. They receive an error that the Open Directory user ID and password provided is incorrect. In addition the local user can no longer reset or change their password. I'm thinking this is because their local accounts are still bound to the old Open Directory accounts that no longer exist. Is there are way to unbind a local account in Leopard that has been bound to an Open Directory account via the Directory Utility.

What account are you using to bind the machine? When binding you must authenticate using the OD admin login which is usually setup as diradmin or as the current client you are logged into the machine with, but this client needs to exist on the OD server.

Reversal FB08 Creating New OPEN ITEM instead of clearing the open item.

Dear All,
My user has an issue whenever he does any reversal Tcode - FB08 in one of the general ledger "Cash in Transit" nature "open item" & "Line item" instead of clearing the open it it creates a new open line item.
I have checked in Table BKPF , the reversal number is being updated but this items are still appearing open item in FBL3N and not appearing in F-04 (all reversals) for clearing.
Can any one share what can be the reason its creating new open item and how can i solve the issue for clearing the account.
Thanks & Regards
Pravin

hi
Please check following cases
- whether this is happening in all the reversal cases of Cash in transit
- Whether is user is just using FBRA (Onsly resetting) and not going for reversal
- Chances would be one or two partial clearing may have taken for single document for the offsetting accounts
Thanks
Sandeep

In garageband I can't create new projects

In garageband I can't create new projects it says file couldn't be opened. Checking on web searches some indicate to check under Library... I do not have a Library directory on my system. Garageband came with the Mac. Any clues how to get it to work?

kenevans3 wrote:
I do not have a Library directory on my system.
in Finder hold down the OptionKey and click the Go menu, select the Library menuItem to open it

Create New NON SA User

Hi all,
I want to create new user for following operations.
1. Send DB mail.
2. Execute ad hoc queries(eg. read/write excel sheet,csv,txt files etc.)
3. can't access other database.
4. He should owner of particular database.
5. Access other server table. (optional)
Can you please tell me how to create new non sa user with above requirement. If any one give me any example its really appreciated.
Thanks in Advanced.

Hi AK9841
It is look like your current problem is not related to the original question. As
TiborK mentioned we need more information regarding the error that you get. I dont want to start a guessing game :-(
* In any case you could open a new thread for this question :-)
** using OleDB provider you connect to external resources (ms-access file in your case). the user and password that you use in the connection has nothing to do with the SQL Server or the database that you are using but to the external resources. This is basically
the same as any connection to a remote database using OleDB provider.
Ronen Ariely
[Personal Site] [Blog] [Facebook]

Can't create new folder to Applications in standard account

Hi.
As I have two accounts one admin account and other standard account and last time it didn’t work in both.
So I just restored factory settings like described here: http://support.apple.com/kb/ht3910
This fixed the problem.
Now again I can't create new folder to applications but this time it doesn’t work only in my standard account but it does work in admin account.
Previously I downloaded this program to open pdb files :http://www.loghound.com/pordible/
But it didn't work for me so I removed it to Trash. That's when I noticed that the new folder icon in applications isn't active but I can't be sure that this caused it.
I used Disc Utility to repair my macbook pro hard disk using Mac OS X Install DVD but it didn't fix the problem.
Is there any way to fix this problem without restoring factory settings again?

I think either way should work OK - it's less of a security risk to use a standard account for "everything", including web browsing, but I confess I don't myself do this. You would again have to authenticate with an admin username/password if you do download and install from the standard account.
Whichever way you do it, this article may be relevant:
*About file quarantine in Mac OS X v10.5 and v10.6*
http://support.apple.com/kb/HT3662
It includes the following:
If you have multiple user accounts on your Mac, the user account that downloaded the file is the only user account that can remove the quarantine attribute to the file. All other user accounts can open the quarantine file, but they will be presented with the quarantine dialog box asking "Are you sure you want to open it?" every time they open the file.
--------------------

Can't create new open directory user

Similar Messages

Maybe you are looking for