Can't login to Final Cut Server with AD group...

I just setup the Final Cut server and I also linked it to Active Directory so we could use the groups on it. I opened up the preferences and added a group to that from AD and then set them with admin. However, when I login with a user who is a member of that group it won't let me in. The only user I can get on with is the local admin. Does anyone know how I can use the members of the AD group so if their password changes or the group membership changes I don't always have to go and update it?

now when I run:
./adprincadd.pl -dc <fully qualified hostname of AD server> fcsvr/<fully qualified hostname of FCSVR machine>
I get:
No Kerberos TGT!
You must have kerberos ticket that allows writing to the computer record in AD. Use kinit to get a ticket
but kinit give me: Cannot find KDC for requested realm
How can I correct this so I can get the kerberos ticket and resolve this?

Similar Messages

Final Cut Server with MatrixStore

Hello everyone!
I`ve build a HD based archive with 3 MacPro 8Core. One of them is the FCSvr and other two are for cluster (archive and compressor transcoding).
I`ve successfully installed everything ok except for the integration between MatrixStore (www.object-matrix.com). I want to know if anyone has suspenseful installed the matrixstore script integration with FCSvr.
Regards

Answering myself:
I`ve found the problem! It`s Qmaster fault. As I`ve tried to use MatrixStore with other services (like Qmaster controller - not supported by MatrixStore - ) the nfsd service used by Qmaster (when it`s Cluster Controller) doesn`t allow the connections on MatrixStore to be made correctly and securely.
For that matter it`s obvious that when Object Matrix guys say it only supports (and works) if MatrixStore is the only Service running, they know what they were talking!
Thanks for Object Matrix guys for the superb support (even in the case that they didn`t need or was supposed to, as I`ve tried to build a configuration that was explicit unsupported)!
Regards

Final Cut Server to PC Server

I'm interested it the Final Cut Server system. Would it be possible to use Final Cut Server with a G5 and then have the media stored on my Dell power edge media server. I do see conflicts with large file names but would it work?

Make sure when you crete devices that authenticate to do so in the System Prefs and not the Java Admin GUI. This is due to keychain issues and the Java client no running as root. The reason it is even there in the Java GUI is because artbox (FCSvr's previous self) ran as root and this is just an artifact of that old architecture.

Integrating Final Cut Server 1.5 with Active Directory

Following the directions in the Final Cut Server Setup Guide and I am running into errors. Fun with Final Cut Server. Fun with Kerberos.
Final Cut Server v.1.5 is running on an Intel Xserve running 10.5.6 Server, joined to AD. Active Directory is running on a Windows Server 2008 setup.
I dropped the ini files on the domain controllers, as directed by Apple KB (http://support.apple.com/kb/HT3688) and I ran the commands directed in the setup guide.
The adprincadd command should be run literally, of course, but there's a mistake straight-away when it should read "./adprincadd.pl", the ".pl" is missing. Also it says "fcsvr/fqdn of fcsvr", so naturally I replaced the fqdn, but the "fcsvr" prefixed threw me off. It gave me errors until I opened Kerberos.app and notcied that the kerb ticket was in ldap/, then the command worked for me. At least no errors, until I checked the ticket and it said I had no permissions and that the keytab entry was invalid. Wheeee.
1. First I tried:
(some info redacted)
node09:sbin root# ./adprincadd.pl -dc dc01.example.com. fcs.example.com.
Getting kerberos principal for computer account
Kerberos principal is ---
Getting computer id...---
Getting AD Domain...---
Base DN is dc=example,dc=com
getting kerb ticket using [email protected] got ticket
SASL-bind to dc01.example.com. successful
Computer record is at CN=---,CN=Computers,DC=example,DC=com
Checking to see if ---.--.---. exists...000020B5: AtrErr: DSID-031529F7, #1:
0: 000020B5: DSID-031529F7, problem 1005 (CONSTRAINTATTTYPE), data 0, Att 90303 (servicePrincipalName)
at ./adprincadd.pl line 165
2. Then I noticed the /ldap in Kerberos.app and changed the adprinadd command:
Everything ran well, with no errors...
Finding kvno...2
Reading /etc/krb5.keytab...done.
Creating new keytab file...done.
Writing out temporary keytab...done.
Making backup of old keytab and moving new keytab into place...done.
Operation Completed. You can verify with "kinit <ad user>; kvno -k /etc/krb5.keytab ldap/---.example.com"
3. Verifying with kinit gave me the keytab errors:
kinit matx; kvno -k /etc/krb5.keytab ldap/fcs.example.com
Please enter the password for [email protected]:
ldap/[email protected]: kvno = 2, keytab entry invalid
kvno: Permission denied while decrypting ticket for 'ldap/[email protected]'
Thoughts?

Hello, I'm having issues with the client login after AD integration. I followed the steps from http://support.apple.com/kb/HT3818 and the Terminal output reported a success.
I'm able to add AD groups in Final Cut Server Group Permissions. However, when I try logging in on the FCServer client using credentials associated with AD group I've added, I'm getting an error message from the client stating:
"Please re-enter the username and password or contact the server administrator. Please note that the username and password are case-sensitive."
The FQDN is correct in the Server field of the client.
I'm able to log into the client using locally created user accounts that I've created on the server so I know the client is communicating correctly.
The only thing I can find in the Console for the client machine is this:
11/25/09 10:50:12 AM /Users/*/Desktop/Final Cut Server.app/Contents/MacOS/Final Cut Server[1773] Warning: accessing obsolete X509Anchors.
In the server Console, this is a suspect message: /Library/Application Support/Final Cut Server/Final Cut Server.bundle/Contents/MacOS/fcsvr_stored[77891] pps proxy error: dsDoDirNodeAuth = -14091
Not finding much info out there regarding this. Any guidance is appreciated.

Active Directory logins from Windows to Final Cut Server

While I did manage to solve my main problem with Integrating AD with Final Cut Server at this one site.... It turns out that there a typo in the kerberos config file. Ooops. Now logins in from Mac OS using AD credentials works well. Unfortunately, I am still seeing some minor issues, like certain groups in AD not being able to login, and for some reason the Windows users can't login (only the Macs using AD credentials). Any seeing anything like this? Of course I enabled certain groups in Final Cut Server pref pane to match certain AD groups, but in the end only the BuiltIn groups worked, not the Domain Users, Domain Admin groups. Strange. And not sure why Windows users can't login. Same domain. Fun times.

It seems like I read the inital Kb article wrong. The Windows clients get the krb5.ini file, not the Domain Controller. LOL. Thanks to drew for pointing that out to me.
http://support.apple.com/kb/HT3688
In order for Active Directory bound Windows Final Cut Server client systems to successfully authenticate to Final Cut Server, you must create a custom Kerberos configuration file on the Windows client system.

Final Cut Server: Cannot connect to Java Web Start with a web browser

I get this exact error http://support.apple.com/kb/TS1610, but their steps do not fix it.
sudo cp /etc/apache2/sites/0000any_80.conf.default /etc/apache2/sites/0000any_80.conf
has me validate and then goes back to the prompt the other:
Xserve:~ admin$ sudo /Library/Application\ Support/Final\ Cut\ Server/Final\ Cut\ Server.bundle/Contents/Resources/sbin/post-install.sh
Stopping Final Cut Server services ...
launchctl: Error unloading: com.apple.FinalCutServer.fcsvr_ldsd
launchctl: Error unloading: com.apple.FinalCutServer.fcsvr_stored
Starting postgresql ...
Initializing database ...
could not connect to server: No such file or directory
Is the server running locally and accepting
connections on Unix domain socket "/tmp/.s.PGSQL.8820"?
connection failed, retrying (1) ...
-- updating: pxtraitclass
-- updating: pxperm
-- updating: pxgroup
-- updating: pxschema
-- updating: pxentitylinktype
-- updating: pxenum
-- updating: pxenumentry
-- updating: pxmdfield
-- updating: pxtrait
-- updating: pxmdgroup
-- updating: pxmdgrouphasfield
-- updating: pxeventstatus
-- initializing config package: base
-- updating: enum
-- updating: enumentry
-- updating: mdfield
-- updating: mdgroup
-- updating: mdgrouphasfield
-- updating: mdmap
Settings plist already present, not overwriting.
Starting Final Cut Server services ...
Configuring webstart for OS X Server on default site ...
web:Modules:array_id:php5module:enabled = yes
web:Modules:array_id:userdirmodule:enabled = yes
web:Modules:array_id:apple_userdirmodule:enabled = yes
web:Sites:array_id:*:80_:IfModule:_array_id:mod_rewrite.c:RewriteCond:_arrayindex:0 = "%{REQUEST_METHOD} ^TRACE"
web:Sites:array_id:*:80_:IfModule:_array_id:modrewrite.c:RewriteEngine = yes
web:Sites:array_id:*:80_:IfModule:_array_id:mod_rewrite.c:RewriteRule:_arrayindex:0 = ".* - [F]"
web:Sites:array_id:*:80_:IfModule:_array_id:mod_rewrite.c:RewriteRule:_arrayindex:1 = "^/FinalCutServer$ /~fcsvr/Sites/webstart/index.php [NC,L]"
service: This command still works, but it is deprecated. Please use launchctl(8) instead.
service: This command still works, but it is deprecated. Please use launchctl(8) instead.
Xserve:~ admin$
Help? I should point out this is my first experience with OSXserver and I am not exactly an advanced user.
Message was edited by: otterholt

Hi, this dind't help.
I can resolve host name, so it looks like DNS works:
If I typed: <IP address> or localhost or localhostname.local or hostname I stiil get the default OS X web page with services, but no service is available not I can't connect to FCS web start page.
I didn't change DNS records - it is default as it was after installation of system and FCs.

How do I uninstall Java 7 on my Lion, so that I can run Final Cut Server again?

One of my fellow employees thought he was doin me a favor yesterday and upgraded my java on my Lion machine... now I cannot access my Final Cut Server any more.
How can I get back to a java version that works..... after all the java site is somewhat useless when it comes to this question.
Any pointers will be greatly appreciated.

Boot Camp allows you to install Windows on the hard drive of a Mac. It's more difficult and you must be very careful with the Windows installation. If you do something wrong, you may lose Mac OS X.
Some Macs support Windows 8 > http://support.apple.com/kb/HT5634?viewlocale=en_US&locale=en_US If your computer is supported, you can install Windows 8.
You can install Windows 8 from a DVD or a USB drive. If you want to install Windows 8 from a USB drive, you have to buy Windows 8 in the Microsoft Store, which will allow you to download Windows 8 in a ISO file, that you will be able to burn to a USB drive using Boot Camp Assistant (it's in /Applications/Utilities).
Apple has got official steps to install Windows on your iMac > http://manuals.info.apple.com/en_US/boot_camp_install-setup_10.8.pdf

Soundtrack Pro and Final Cut Server....can you check-in/check-out?

Hello!
Just curious how the workflow is with Soundtrack Pro and Final Cut Server. We haven't used Soundtrack Pro, but have been thinking about it for Surround Sound projects.

You can check in anything into FCSvr, any type of project file or media file. Unlike checking in/out a Final Cut Pro project, with any other application, you'll need to check out the project file for that app, and manually check out all the media associated with it. Many folks will simply set up the STP, or Motion, or InDesign, or Illustrator project and it's associated media all into the same folder on their workstation. Then check in/out that folder as a "bundled asset". This makes a zip file in FCSvr that holds all of those needed files together. When you check it out, it's unzipped and places on your local workstation. When you check back in, FCSvr re-zips it and replaces the original on it's RAID storage drive.

Why can't I use final cut pro 7 with Mavericks?

Why can't I use final cut pro 7 with Mavericks? Is any one else having problems? All my media is reputedly "offline" even though I can see all the files. Using the reconnect to media function doesn't do a thing. All of my previous projects are the same. Any ideas would be most welcome!

Because it is $299.99, and there is tax.
Cheers,
GB

I have a .mov file that is 59 gigs. Is there a converter that can reduce the file size with minor resolution loss so I can import it into final cut express?

I have a .mov file that is 59 gigs. Is there a converter that can reduce the file size with minor resolution loss so I can import it into final cut express?

Open the file in QuickTime Player. Then do Tools > Show Movie Inspector. What does it say for Format and FPS?
At 59GB, I suspect you have either a 4 hour DV video or a 1+ hour video that was converted to Apple Intermediate Codec. If it's either of those, you can import it directly into FCE provided you select the appropriate Easy Setup first. Your clips have to match the properties of the Easy Setup you are using.
If it's neither DV or AIC then you need to convert it to one of those codecs. (QuickTime/DV or QuickTime/AIC) Many people in this forum rely on MPEG Streamclip (it's free and works great).

How can i buy final cut pro with my account p.s its no u.s id?

how can i buy final cut pro with my account p.s its no u.s id?

You are wanting to change your account to US to buy FCPX? Do you have a credit card at least?

I can't fix the issue on Final Cut Server,

I tried to fix this issue, I don't have this program anymore, but it is continued appearing the error on my laptop.
"Final Cut Server cannot start without a valid serial number. Please enter your serial number in the server's Final Cut Server System Preferences panel."
For your information, I deleted this program few years ago, It is really annoying me, "Popup" Check the picture ( Below)
I would appreciate, if you resolve my problem thanks!

Did you try using the tool from Digital Rebellion?
http://www.digitalrebellion.com/fcsremover/
It is supposed to removed Final Cut Server and Final Cut Studio.

Final Cut Server & Active Directory authentication

Hi all,
This is an older question that was not be answered in the past.
I have a Xserve with Mac OS X server 10.5.6, running Final Cut Server 1.1.1 and a Windows 2003 AD server with hundreds of users.
The issue is FCS is not authenticating against AD even though clients can do it, being binded with Directory Utility without trouble.
Could somebody tell me if is this a known issue?
Did somedody make it work?
Thanks

Same problem here. We couldn't make it work, that is login to FCS using AD users.
Don't remember where but I was reading about it in a forum, somebody said that they talk to someone in Apple and they told him this is a problem and that they were going to fix it in the next FCS update/release.
Hope they do
PS: De donde sos nono??

Long HDV and XDCAM clips through Final Cut Server

Hi,
I know that I could post this in Compressor and/or Quicktime and/or Leopard/Tiger Forums, but as this problem it`s causing my Final Cut Server to not working well, I think it makes sense to post here.
To resume: HDV and XDCAM clips (all on original codec, only xdcam transferred to mov in xdcam transfer) with file size bigger than exactly 4GB always FAILS in "Final Cut Server"/"Compressor alone in ANY machine installed from scratch"/"Anything that uses Quicktime". Source and Destination being localy or networked. DV or DV50 can get bigger than that, I`ve never seen this error with DV`s codecs.
I had seen this problem before I bought final cut server. When I was transcoding our interviews for transcription. We always worked with BETA SP and captured in DV or DV50. We were starting to go to HDV and now to XDCAM and this error has started to appear.
I have a "proxy" made a year ago from a HDV and it`s original has 8GB. I tried this file again and as I expected didn`t work. In ANY computer with any installations with only the latest updates. I`ve remembered that I was using Tiger at this time, and Quicktime/Tiger/ProApps had a old version.
My two cents are that some update from Tiger/Leopard/QuickTime/ProApps made this happen.
So ANY HDV/XDCAM file bigger than 4GB it`s FAILING in ANY system. (Tiger or Leopard, With or without FCP and QT PRO, Installed from scratch and updated every thing).
Some tests I`ve made:
-Compressor works with this two codecs to lower res in TIGER and with QuickTime Version 7.4.0 and LOWER. (had to be tested, but I think that was my version of QT when I managed to make the proxy of this two codecs).
-Compressor doesn`t work on any system with QT above 7.4.0.
-CATDV (http://www.squarebox.co.uk/) version 6 can make proxy versions of this two codecs in TIGER ONLY! They already know of this problem and CATDV 7 works on both.
-Compressing in compressor with H.264 (same codec as the FCSvr proxy) BUT without changing the resolution, size and etc. Works OK in both Tiger and Leopard.
-Exporting through QT works in ANY system BUT I loose TC, so it`s not an option (and I can`t input this workflow in FCSvr without using compressor).
-Exporting from FCP as QuickTime Movie with H.264 doesn`t work on Both (Tiger and Leopard).
-Exporting fro FCP as QuickTime Conversion with H.264 works but as exporting from QT I loose TC and can`t input this into FCSvr workflow.
Error message are always: "QuickTime error = -50" or "QuickTime error: corrupted data" (and of course it`s not corrupted because it`s used - even in FCP to edit - and opened viewed, catdv can do proxy and everything).
I`m surprised not to see anyone freaking out about this issue... I don`t think that It`s only me.
This is some problems that I came across while trying to find a solution:
http://www.paulescandon.com/blog/?p=39
http://discussions.apple.com/thread.jspa?messageID=4912265&#4912265
http://www.squarebox.co.uk/faq155.html
http://discussions.apple.com/thread.jspa?messageID=5513003&#5513003
http://discussions.apple.com/thread.jspa?threadID=1903644&tstart=0
http://discussions.apple.com/thread.jspa?threadID=1780228
http://discussions.apple.com/thread.jspa?threadID=1853507
As you can see this is not the first time I`ve posted about this issue.
I`m sending a bug report as well.
Thank You all in advance.
Regards

Hi Chará!
We should, but I think the others will be disappointed eheheheh.
It doesn`t matter what version of Leopard I`m using (right know I`m using Leopard Server 10.5.6, but this issue has happened even with 10.4 if QT is updated and all updates of 10.5 up, as I`
ve mentioned above).
What file size are those clips that are longer than 10min?
I really don`t get, how it`s possible that just the two of us has HDV and XDCAM files with file size longer than usual? Maybe people that do interviews don`t like to record the entire interview and when capturing those clips would be under this file size limit? Or maybe we are the only ones in the whole world that transcode longer HDV and XDCAM clips (it`s funny that it doesn`t even need to be FCSrv, with only ONE machine and compressor this issue happens all the time).
I`m convinced that I have to install a Tiger version in a virtual machine with compressor and doesn`t update anything to test this further on. But I`m certain that with TIGER and CATDV this works ok! And I think that CATDV uses QT engine to do this transcodes.
This is too much of a mystery to me. Maybe it`s time to spend 24+ hours with apple in a international call and probably not getting anywhere.
I`m only posting this here in FCSrv forum because this issue it`s must worse when you have hundreds of clips with this issue and if you bought the package it doen`t matter if it`s a problem with QT+OSX or whatever, apple has to solve it for FCSrv use.
Do you reckon?
Let`s get in touch through email: lucas at rwcine.com.br
(at = @ and delete spaces).
Regards

Red Footage and Final Cut Server

Aloha gang-
I am still testing FCS in our studio and enjoy many of the features in this product. I love being able to search for footage and pull it into my FCP project with no waiting (using edit-in-place). But I am looking for some advice and knowledge regarding Red Footage.
My scenerio is this:
We render all our red footage to offline files that we will use in the post production process. I want to tag all those files with appropriate metadata so our edit team can search and retrieve files as they need it. But with red there are 7 files (in our workflow) that correspond to the same thing. Basically there is the original R3D file which can not be used in FCP, there are the 4 quicktime proxies that the camera generates and live in the same folder as the R3D, and these are the files I want to get back to after the production is through and archived. There is the offline quicktime we generate to edit with which we need to tag. There is a log and transfer quicktime we can log and transfer all this data to FCS (but it doubles the data size so I am not looking to use this one and edit performance is okay at best), and finally there is the folder that the 4 proxies and original red file live in.
All of these files should be search able by the same metadata. Imagine the shot is of a blue bird. When I type blue bird I would want all of these files to show up (obviously I could limit my search so I only get the version I need for what I am doing i.e. offline, proxie, etc. I have made metadata lookups for this so this is not the challenge.)
The challenge is I only want to log 1 of these files and have the metadata applied to all of them. They all have almost identical names. The offline, R3D, and folder file have the exact same name. The proxies are identical but with _F, _H, _M, and _P behind them. For the catalog process I only want to transcode proxies for the _M (The _F, _H take way too long and the proxies look the same as _M and the _P is too small
I could make them a bundle but that does not help too much as the offline lives in a different place as the footage.
Any ideas would be greatful. My easiest solution is to tag the files twice, once for the production and once for the archive, but this seems like a waste of time that I could have a computer do instead
P.S. anyone successful in getting the metadata out of the red file, I see the red metadata set, and have it in place, but can not get it to show anything no matter which file I upload.
Any ideas, or help would be great
mahalo
scott

Thank you for your replies. I guess my question is not really answered because of the conundrum associated with red footage
But my workflow to get through this will be as follows: (In case anyone is interested)
Set a scan to bring in the offline quicktimes as they are rendered and have someone tag them with meaningful tags to help us search during the production. I will send those to archive when we are done.
After the project is completed and the files are removed from Final Cut Server I will set a scan to import all the _M files (they transcode faster and quality is not an issue since it is making proxies) and tag them as best I can for the long haul (archive) I can either leave the media on the drive or back it up, depending on the immediate use of the files. This works very well if the media is still there as I can just drag the _M into Clipfinder and render the shot I need as I need it.
I am storing these clips in folders labeled CC_LTOXXX (where XXX is the number for the LTO tape which increases by one for each tape I use. When I import them into Final Cut Server from the LTO folder I have a direct line to which LTO tape the file lives on. It's not easy to get the files back (so with files used frequently I will also keep a copy on an external drive I can just plug in) from an LTO, but it is doable.
If anyone has an easy way to pull a list of files from an LTO tape that would be great, and even better if it could be a list Final Cut Server made, or if Final Cut Server could just pull the files. My LTO is a network drive so I would have to access it through an IP address, but if I could do that I would be golden.
Anyway I know this will all evolve and this is just where I am right now, any ideas would be appreciated.
Mahalo
scott

Can't login to Final Cut Server with AD group...

Similar Messages

Maybe you are looking for