Cant Access external shares from my admin account

Hi,
the title says it all.
No matter if I try to connect via smb or afp. If I try to log in from the admin account to external afp or smb shares the login is refused cause of permissions.
IF I do switch to a user other than the system admin account, the access to external shares works like a charm.
In my case its an external NAS from Buffalo (Linkstation Duo).
Also from other Lion machines ... no problem when trying to access that share.
Im aware of the DHCAST128 changes but as you can read above it seems that this is not the issue.
Any hints or suggentions?
Thanks!
Andrew

Hi-
You can use the account that you use daily, as SuperDuper will clone the entire drive, which includes all accounts, applications and data. SD will require an administrator password to run the cloning, but this can be done from any account.

Similar Messages

Access to Resources via Non-admin accounts

Is there any way to provide access to resources so that they are accessible via
non-admin accounts. For e.g. to Retrieve my JMSConnectionfactory i do a
Environment env = new Environment();
env.setProviderUrl(url);
env.setSecurityPrincipal(username);
env.setSecurityCredentials(password);
Context ctx = env.getInitialContext();
The username and password here is the admin account. This works fine but if i
use a non-admin account(member of Operators group), i get exceptions on Domainloghandler
runtime
Problem: I need to register a mbean that needs to access JMS Resources. Since
our deployment team doesnt want to provide us access to admin accounts, we use
a "operators" group account to register our mbeans. if i do this, i get a
Access not Allowed for subject:principals=[operator, Operators], on ResourceType:
DomainLogHandlerRuntime Action: execute Target: registerToMe.
This happens when my managed resource tries to access a JMS ConnectionFactory.
Instead if i register my mbeans using the admin account, everything is fine and
my managed resource works nice.
This is on weblogic 81 SP1 on Solaris. Please let me know if you need more details.
Any clues/hints/solutions greatly appreciated. There is not a lot of documentation
on how to access/register mbeans using non-admin accounts.
TIA
Raj

I have done some more debugging on this and have narrowed down the issue to the
location where my initialcontext is being obtained.
so if i register my mbean as a non-admin account and do an operation on the managed
resource which fetches initial context, i get the below exception. This is how
i get my initialcontext
weblogic.jndi.Environment env = new weblogic.jndi.Environment();
env.setProviderURL("t3://machine:8102,machine:8103");
env.setSecurityPrincipal("operator");
env.setSecurityCredentials("operator");
Context ctx = env.getInitialContext();
I am doing this from a mbean thats registered on a different managed server(t3://machine:8101)...
Whats wrong with this?
TIA
Raj
"Raj" <[email protected]> wrote:
>
Is there any way to provide access to resources so that they are accessible
via
non-admin accounts. For e.g. to Retrieve my JMSConnectionfactory i do
a
Environment env = new Environment();
env.setProviderUrl(url);
env.setSecurityPrincipal(username);
env.setSecurityCredentials(password);
Context ctx = env.getInitialContext();
The username and password here is the admin account. This works fine
but if i
use a non-admin account(member of Operators group), i get exceptions
on Domainloghandler
runtime
Problem: I need to register a mbean that needs to access JMS Resources.
Since
our deployment team doesnt want to provide us access to admin accounts,
we use
a "operators" group account to register our mbeans. if i do this, i get
a
Access not Allowed for subject:principals=[operator, Operators], on ResourceType:
DomainLogHandlerRuntime Action: execute Target: registerToMe.
This happens when my managed resource tries to access a JMS ConnectionFactory.
Instead if i register my mbeans using the admin account, everything is
fine and
my managed resource works nice.
This is on weblogic 81 SP1 on Solaris. Please let me know if you need
more details.
Any clues/hints/solutions greatly appreciated. There is not a lot of
documentation
on how to access/register mbeans using non-admin accounts.
TIA
Raj

How can I set up a new user account that has access to iPhoto data on Admin account?

I have set up a new user account for my son. I have set up his parental controls but I would like him to have access to the data in iPhoto and iTunes from the Admin account. I do allow him access to the applications with the parental controls, but they are empty. Thanks for your help!

Is your regular user an Admin?
Yes. So is the new account I tried to set up.
Are these apps installed in the main /Applications folder?
Yes.
Are they App Store apps or installs from disc/download?
Both, but App Store purchases are a clear minority, and aren't much of a problem, due to the ease of re-downloading and activating. The downloaded programs are the ones that present the problems. I have not been good about archiving serial numbers and the like, mostly because I've never had a problem like this before.
What specific apps are you having trouble with? For instance, I know that MS Office and Adobe CS5 for perfectly well for all users on my MBP.
This is a very long list. Let me give you some of it, and if you really need all of them, I'll add to the list later.
1Password 4
ABBYY FineReader for ScanSnap
Adobe Acrobat 8 Professional
Adobe Photoshop Elements 8 plus On ONE add-on filters
Burn
calibre
DiskTracker
Dragon Dictate
Flv Crunch 1.5.0
GraphicConverter
Harmony Assistant
iBank
iSkysoft iMedia Converter Deluxe
MacX Video Converter Pro
QMidi
Screenium
Unison
WireTap Studio
Also, what troubleshooting steps have you taken so far?
Not much, since I have no idea where the problem is. I looked for some central repository of software serial numbers or activations, but didn't find one.

Accessing external DB from other computer?

i am migrating from a 2006 mac pro running Lion to a 2012 running yosemite.
two questions please.
1. can i /store/ the aperture database on a separate 1 TB drive in the 2012 machine with a number of other databases and simply have this drive be my "database" drive?
2. can i open and work on the aperture database on this drive that is in the 2012 machine (say if it is in the pictures folder on the 2012 machine or on the separate "database drive" in the 2012 machine) while i am booted into Lion on the 2006 machine? i mean, until i get totally set up to work in yosemite is this a possibility?
thanks

You can store your Aperture library on a second internal drive or a directly connected external drive. The file system of the drive needs to be MacOS Extended (Journaled). So if you want to recycle drives you used with a Windows computer, move all data off the drive, and reformat the drive with Disk Utility.
See this support document: Use locally mounted Mac OS X Extended volumes for your Aperture library
If you want to access the drive from different user accounts set the "Ignore Ownership on this Volume" flag, see: iPhoto: Sharing libraries among multiple users (the tile says iPhoto, but this holds also for Aperture).
If you want to use a library, that is on an internal disk on another mac, you cannot use the library over a network connection. You need a wired connection. Boot the second Mac in target disk mode, see: OS X Lion: Transfer files between two computers using target disk mode
Target disk mode will mount the second computer as an external disk.

Can I transfer songs from my admin account to a new user account?

I want to start using a user account as my main account instead of the admin account. I bought a bunch of songs from iTunes and downloaded them to my admin account.
Can I transfer these songs from my admin account to a new user account and then de-authorized the songs on my admin account?
Thanks,
Mark

If you don't change your iTMS account, you don't have to de-authorize.
Your computer is already authorized to play the songs.
This article tells you more about (de)authorization.
Hope this helps.
M
17' iMac fp 800 MHz 768 MB RAM Mac OS X (10.3.9) Several ext. HD (backup and data)

I had first registered my iPhone with an old laptop, the computer is no longer functional. I cant now transfer music from my iTunes account to my phone, I am not sure what to do any suggestions?

I had first registered my iPhone with an old laptop, the computer is no longer functional. I cant now transfer music from my iTunes account to my phone, I am not sure what to do any suggestions?

Iphone will sync itunes content with one computer at a time. If you sync to another, it will erase the current content and replace with content from the new computer.
What have you tried?
What happened?

Accessing file shares from JSP

Hi,
I need to be able to access file shares from a JSP page. Here's the JSP code:
<%@ page language="java" %>
<%@ page import="java.io.*" %>
<%@ page errorPage="errorPage.jsp" %>
<%
String fileSystemPath = "\\\\130.26.1.199\\MeetingManager30\\test.txt";
File f = new File(fileSystemPath);
f.createNewFile();
%>The above code resides in a server with IP 130.9.68.6 and is deployed onto the Tomcat on the server.
When I tried to run the above code, I got this error
java.io.IOException: Access is denied at java.io.WinNTFileSystem.createFileExclusively(Native Method) at java.io.File.createNewFile(File.java:827) at org.apache.jsp.test_jsp._jspService
(test_jsp.java:55) at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:137) at javax.servlet.http.HttpServlet.service(HttpServlet.java:853) at org.apache.jasper.servlet.JspServletWrapper.service
(JspServletWrapper.java:210) at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:295) at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:241) at
javax.servlet.http.HttpServlet.service(HttpServlet.java:853) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247) at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193) at org.apache.catalina.core.StandardWrapperValve.invoke
(StandardWrapperValve.java:256) at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643) at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480) at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995) at org.apache.catalina.core.StandardContextValve.invoke
(StandardContextValve.java:191) at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643) at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480) at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995) at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2422) at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:180) at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invok
eNext(StandardPipeline.java:643) at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:171) at
org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:641) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:163)
at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:641) at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480) at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995) at org.apache.catalina.core.StandardEngineValve.invoke
(StandardEngineValve.java:174) at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643) at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480) at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995) at org.apache.coyote.tomcat4.CoyoteAdapter.service(CoyoteAdapter.java:199) at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:833) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processCon
nection(Http11Protocol.java:711) at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:584) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run
(ThreadPool.java:687) at java.lang.Thread.run(Thread.java:536) Seems like I'm having a system level security setting problem here.
I know it's a security issue, because I've encountered the equivalent problem in ASP/IIS, and I had to give a domain user rights to both the IIS Virtual Directory, and the file share to be able to access.
Any ideas how to set up Tomcat to be able to access the file share successfully?
Thanks in advance!

Hello Veer,
From what you have posted it looks like while logging your error another problem occurred. Did you get any output from your System.out calls? If not can you try adding a few in order to home in the problem area.
Hussein Badakhchani
www.orbism.com

Accessing External Data from SharePoint 2010

I want to access external data from my SharePoint site.
I'm told that I need to follow these two articles.
http://msdn.microsoft.com/en-us/library/ff953161.aspx
http://msdn.microsoft.com/en-us/library/ff625800.aspx
I followed the first article but I get this error when I open the external list in my SharePoint site:
"Unable to display this Web Part. To troubleshoot the problem, open this Web page in a Microsoft SharePoint Foundation-compatible HTML editor such as Microsoft SharePoint Designer. If the problem persists, contact your Web server administrator."
I don't know how to write a custom code
BTW I have installed PowerPivot on my SharePoint server.
Can someone please help me? I need to do this very quickly.

Hi,
Can you please elaborate whether the data you are getting is from excel file or from database.
1. If you are populating it from excel , then you can use the Excel service, Power pivot etc mechanism.
2. If you are getting it from SQL database then you can use BCS service application and use the OOTB external list and content type to display the same in your home page.
Links of artcles are given below.
http://www.concurrency.com/blog/accessing-external-data-using-business-connectivity-services-in-sharepoint-2010/
http://msdn.microsoft.com/en-us/library/ff677562(v=office.14).aspx
Hope this will help.
Thanks and Regards, -- Santanu Kumar Choudhury ----- SharePoint 2007/10/13 Developer

Issues accessing domain share from domain controller

Hi,
About 2 weeks ago, 2 of my domain controllers at one of our facilities has lost access to a domain share. If I try to access the share from the dc's, it prompts for a username/password. Now if I go to my workstation at corp, the share works fine. I can't
seem to figure out where the problem is. Any suggestions?
Thanks in advance!

You can use dcdiag and repadmin to check your DCs and your replication health status. That should let you see if something is wrong.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Update iTunes from non-Admin account?

I had to install iTunes from an admin account, but I use it from an non-admin account. When I get the message that there is a new version available, can I upgrade from the non-admin account? I don't want to try it without knowing because I don't want to corrupt anything. I'm on Windows XP.

No, you log out of you limited user account and update from an administrator account.
Personally I don't trust updating from within iTunes and I always download the installer and save it on my PC before running it.
http://www.apple.com/itunes/download/
As I am rather paranoid, I make copies of iTunes Library.itl and iTunes Library.xml before updating, do this with iTunes closed. But iTunes should make a backup of its own when updating. Unfortunately if you have to update from an account that is not your usual one, it will backup the library of the account you update from, not the one you want.
Added : Actually I may be wrong in my last point. If the backup is made when you first open iTunes and it converts the library, you may be OK. But I would make a copy anyway.
Message was edited by: polydorus

Sharing external hard drive from non-admin account

We have 2 G5 Mac's in our prepress dept. at work. There is one external FW hard drive shared from G5 #1. I decided to turn the account I use on a daily basis to a non-Admin account (on G5 #1). When I do this, G5 #2 can no longer access the FW drive that is connected to G5 #1. It doesn't even show up on G5 #2 in the list of volumes to mount. As soon as I turn the account on G5 #1 back into an Admin account, G5 #2 has access to the FW drive. I've tried changing permissions on the drive and checking "Ignore ownership on this volume" all without success. No matter what I try, G5 #2 can only access the FW drive if G5 #1 is set up as Admin. Is this normal or am I missing something? Both G5's are running Tiger 10.4.11.
Eric S.

I knew what Sharepoints was but I had never used it before. Since your last post on this topic, I downloaded and installed it. I still can not make the external drive accessible to the other Mac unless my account is an admin account. Maybe I'm missing something in Sharepoints or have a wrong setting somewhere.
I'm just beginning to mess around with Terminal and Unix commands so I have no idea how to do what I'm trying to do from Terminal.
Thanks,
Eric

I recently set up multiple accounts and when I was trying to figure out how to share files I messed up something in my documents. Everytime I open a doc from the ADMIN account, a box pops up that says "The file is not in the correct format" how to fix?

I recently set up multiple accounts on my imac, When I was trying to figure out how to share the documents I must have done something wrong. When logged into the Admin account, I open up any document and I get a message box that says, "The Document could not be opened. The file isn't in the correct format. The file might be corrupted, truncated, or in an unexpected format." What did I do and how do I fix it?

Without knowing what you did it is impossible to give advice on how to correct it.
If these were files you copied over from some other system then just Re-Copy them replacing the ones that are corrupted.
Other then that I suggest you Wipe the drive and start over with a clean reinstall of the OS and programs. Then if you want to share files to All Accounts place those files in a folder in the ROOT of the drive.

Is there a way to keep selected apps that you have on your admin account inaccessible and unseen from another admin account on the same Mac?

My sister and I share computers, but it's really her Mac because she got it for her birthday. I'm using it because there is no other place to hold my iTunes library, documents, photos, etc.
She complains that I make the computer too slow after I downloaded/installed too many apps from the Mac App Store using my admin account and my iTunes account. However, they show up on her account as well, and she doesn't want to see them or have her computer slow down, so she deletes them. Is there a way to make certain apps unseen and inaccessible from other admin users on the same machine?

Only by storing them on an encrypted disk image. Anyone who has an administrator password to a Mac can use it to access all unencrypted data on the system.
(59941)

Can't access Network share from Windows 8 computer

I have a clean install of Windows 8 x64 running in a workgroup environment. I can access multiple computer/NAS shares except one share off a partifular NAS. This share is accessible from other computers and the other shares on the NAS are accessible from
this Windows 8 computer. I have cheked the credentials and they are fine, added them under the credential manager, tried to map a drive and selected use other credentials etc but it continually says "Windows cannot access \\ComputerName\ShareName"
you do not have permission. I have permission and nothing is wrong with the permissions or the server. This is driving me crazy if anyone could help it would be greatly appreciated.
I have tried:
1. Mapping drive with ip address e.g. \\ip address\sharename
2. disabled ipv6, made sure netbios enabled, made sure client for ms networks enabled.
3. Setup a new account on server, doesn't work either.
4. All sharing options enabled. I even modified the permissions on the share for "everyone" full access and it still didn't work.
Has to be something with this windows 8 machine.

Dear all,
Hi am using 2012 r2 server and i have created share folder ,and added the user Id in that share folder but while accessing in windows pc (local admin) its opning all share folder , but its not asking password if i click in share folder it shows you do not have
permission to access . but till lastweek it was worked fine . and if i tried in administrator login its asking password authentication. Please help me ASAp.
Thanks
mahamad
8884209555

Cannot access SMB shares from Windows boxes in AD domain

Hey folks
I've needed to tackel this for sometime, but Santa is bringing me a dual core G5 and the urgency just increased.
I have an Active Directory domain and all of my macs are successfully joined and get Kerberos tickets upon login. I can access any shares I need from OS X -> windows but NOT the other way around.
I did finally noticed that only local user accounts seem to appear in the accounts list in the sharing pref pane. So I have figured out that I can access any users folder with that one account- OUCH! What I need is access control based on the user.
For instance if I want to share ~jdoe and jdoe is a mobile account and an AD user then if I am logged into windows as [email protected] then I should be able to access the share on the mac. Conversly I should not be able to access ~jdoe with the mac's local admin account and pass.
Do I need to change my smb.conf to reflect AD and if so, where/what?
Also, do I need to map UIDs to anything? And, is that a security risk?
Thanks!
-N

Hi SpaceBass, have you looked into sharepoints or into Netinfo manager. I have been playing around with sharepoints and it does let me enter non local users into the sharing prefs- albeit manually. Only thing is , depending on the number of macs you have, it could be a long and tedious job entering it all by hand. Netinfo may have an easier way, I'll do some more digging and post back.
Cheers.

Cant Access external shares from my admin account

Similar Messages

Maybe you are looking for