Change SMB settings (sharepoint, status, etc.) with Server Admin

Hi. Big problems with Server Admin to administer SMB service with Mac OS X Server 10.5.2.
When you share a sharepoint, you set the enable oplocks and enable strict locking as you want and when you save, all your settings disappear. Fix with modifying directly /etc/smb.conf.
Worse. My server "B" is connected to an ODM "A". No problem with Open Directory / Kerberos except when I try to bind the SMB Service to the PDC. When you choose Domain Member, the setting is automatically reverted to Standalone (nothing's visible in the log with the status change). When you choose Latin 1 850, the setting goes back to Latin US 437.
I'm lost.
Any experience ?
Best regards.

I have a Leopard Server 10.5.2 and it's a PDC. Same problem with strict locking and Code Page Latin US 437.
Doing many tests I found this solution to the code page problem that seem to be a sync problem of the Server Admin.
Try this but remember to do a backup of your files!!
To change the SMB Code Page, modify the smb service default configuration file:
sudo pico /System/Library/CoreServices/SmbFileServer.bundle/Resources/ServerDefaults.plis t
Set:
<key>DOSCodePage</key>
<string>CP437</string>
To:
<key>DOSCodePage</key>
<string>CP850</string>
Save in pico with ctrl+x and Restart SMB Service in server admin.

Similar Messages

I have been getting my email in duplicate in MacMail for the past week. I haven't changed any settings on MacMail. My server is Verizon/Yahoo. How can I get it to stop?

I have been getting my email in duplicate in MacMail for the past week. I haven't changed any settings on MacMail. My server is Verizon/Yahoo. How can I get it to stop?

I have been getting my email in duplicate in MacMail for the past week. I haven't changed any settings on MacMail. My server is Verizon/Yahoo. How can I get it to stop?

Upgrade to Lion from 10.6 shows no ical, etc. in server admin... but runs them...

Upgraded on of my (4) servers today from the latest 10.6 to 10.7. I downloaded the whole package, everyhting went fine, until I accessed the server with server admin (10.7).
From all of my services only DNS, Firewall, Mail and OpenDirectory were up and running (and showing up).
But I had iCal, AFP, Adressbock, VPN and Web running.
I did not have Mail running (so I do not know why the upgrade to lion switched mailservices on.)
So now the funny part. I tried to add the missing services via "add service...", but they are not there and nowhere.
So, assuming no iCal on the server running I thought my clients will not have iCal access, but to my great surprise. iCal worked just fine...?!
So I startet the app "Server" on the lion server itself.
To my surprise, there were all the missing services runnig and switched on. I switched them off and on again (to get them maybe visible in Server Admin) but nothing changed.
Now I am running with all the services on but they are not visible in Server Admin...
Only small problem I noticed, is that from my 3 afp sharepoints only one was visible, I switched again off and on file sharing via "server.app" and - voala all sharepoints are back again...
Hmm, strange... I will wait with upgrading my other servers.
regards
Robert

what you have described is the correct behaviour. Server Admin has changed and some of the services are now in Server.

Can I connect to server with Server Admin over vpn?

I succeed to connect with the server over vpn, allowing me to connect to disks e.g. but I seem not to be able to connect to the server to administer it with Server Admin. Is it a matter of openingen a port?

Thanks,
But, Iam facing another problem.
When I am trying to connect to Oracle 9i server database with Oracle 10g client, Iam facing the following problem.
On my 10g client machine for the tnsnames.org file, I added configuration of Oracle 9i service. When Iam trying to connect with username, password and host string of oracle 9i server, I am getting the following error:
ORA-12514: TNS:listener does not currently know of service requested in connect descriptor
Waiting for Reply,
Satish.

Creating Open Directory Replica fails with Server Admin Error Value 1127

Hallo,
I have seen a lot of similar threads here and they were helpful up to a certain point, but in the end, they did not solve my problem.
Currently, it comes down to this. The Server Admin Error message ist really meaningless and I could not find a single for the error value on the whole wide web. As such, I switched to the command line versions of the tools involved to geht more meaningful results. It worked. Specifically, creating a replica of an openldap master means using slapconfig.
When executing
slapconfig -createreplica master.ourdomain.com diradmin
as root on the prospective replica machine, I get the following error message:
ssh command failed with status 127
That command is not allowed with the root account via public key authentication.
That makes perfect sense to me, but how is it meant to work then?
Executing slapconfig as admin tells me that this tool is to be executed as root. On the other hand, root login via ssh is not allowed in Mac OS X by default, which seems fine to me. I even changed /etc/sshd_config on the Open Directory Master machine to "PermitRootLogin yes". However, neither reloading ssh using launchctl nor restarting the whole server made this setting operational. Trying to login from command line as root still tells me:
root login is not permitted to this machine via public key authentication.
While this is the current state where I need help urgently, I changed some other things before. I tell about to exclude these issues as possible reason of failure. I got this message for quite a while:
Replica Setup failed : This machine does not have a valid computer name
I was sure, this machine meant the target machine, the open directory master, because the domain had changed there once before I had taken over responsibility as an admin in this environment. And in fact, changeip disguised an issue there. The command proposed by changeip to fix the situation did not seem appropriate because this machine is multihomed with a public and a private IP adress. Proper name resolution is available for both interfaces including reverse lookup. I dont like this setup, but it was the only way to get mail service running smoothly. Running changeip on the machine itself using these arguments
changeip /LDAPv3/127.0.0.1 internalIP internalIP old.ours.com current.ours.com
reported success in updating password server, open directory, both interfaces, hostconfig (which in fact did not change) and samba. It reported an issue with kadmin which is related to Kerberos (we dont use Kerberos yet).
Changing the hostname of the server using changeip did not solve the issue. I then found the hint to check with scutil. This showed that the Hostname was not set on the prospective replica machine. (A question aside: in how many place is the hostname stored? The traditional /etc/hostname has gone, but seems to be replaces with several other configuration files and databases. I cant see this as an advantage). Setting the hostname using scutil worked fine. However, it did not solve the problem either. At least, slapconfig now started to complain about not being able to log in as root instead of failing from the start.
I also checked all log files on bboth machines that might have to do with openldap, as there are /var/log/slapd.log, /var/log/system.log and /Library/Log/slapconfig.log. I also checked the log of th layer on top of openldap which is /Library/Log/DirectoryService.server.log. None of them revealed anything noticeable beside a lot of of entries that I have googled in the last few hours and which all dont seem to be associated with the problem in question.
I will take a break now, but I have to fix this until tomorrow and I hope to get the ultimate hint from you, dear reader.
Thanks and bye, Christian Völker

ssh command failed with status 127
That command is not allowed with the root account via public key authentication.
Initial OD replication takes place via 'ssh'. If you have 'sshd' configured on the OD Master to authenticate with public keys then the OD replica will not be able to communicate with the OD Master via 'ssh'. You must configure the OD Master to use 'ssh' with password authentication and root login enabled.
Demote the replica back to standalone. Stop any services that you may have running on the primary network interface. Then stop any services that you may have running on the secondary network interface. In the 'Network' System Prefpane remove the IP number from the secondary interface then deactivate the secondary network interface.
Assign the private IP address and hostname that you wish to use for the replica to the primary network interface. Assign the 'public' IP number to the secondary interface. Check the DNS to see that the IP address and hostname for the primary network interface resolve both forward and reverse for the hostname of the replica that you have chosen. If it does not, fix your DNS before proceeding.
In the 'Sharing' System Prefpane, change the name of the machine to the hostname (server.domain.tld) of the replica that you have chosen. Then use 'changeip -checkhostname' to see if the IP/hostname matches. Fix it if it doesn't.
Then configure the /etc/sshd_config file on the OD master like this:
\# Authentication:
PermitRootLogin yes
PasswordAuthentication yes
PubkeyAuthentication no
and the /etc/ssh_config file on the OD replica like this:
PasswordAuthentication yes
PubkeyAuthentication no
Then from the OD replica as the 'root' user issue:
slapconfig -createreplica <ODMasterIPorFQDN> <diradmin user>
Make sure that the 'diradmin' user's password contains only alpha-numeric characters -no 'option-characters' or symbols, change it first if it does. Once the process completes, reactivate the secondary interface for the 'public' IP and check the configuration of services that will be using that IP, then start your other services. Secure the 'ssh' service on both machines to disable password authentication and 'root' logins.

Problem with server admin connectio

Hi,
Im using Snow leopard server.
I have a problem with connection to server via server admin app. It just says could not connect to server.
At server console there is:
2/27/10 2:58:30 AM com.apple.launchd[1] (com.apple.servermgrd[414]) Job appears to have crashed: Trace/BPT trap
2/27/10 2:58:30 AM com.apple.launchd[1] (com.apple.servermgrd) Throttling respawn: Will start in 10 seconds
2/27/10 2:58:30 AM com.apple.ReportCrash.Root[410] 2010-02-27 02:58:30.829 ReportCrash[410:390b] Saved crash report for servermgrd[414] version ??? (???) to /Library/Logs/DiagnosticReports/servermgrd2010-02-27-025830localhost.crash
And that repeats.
Any ideas how to fix this ?

Yes it did work before. Made some changes to DNS and then server admin lost connection. Server works correctly (dns,mail,ssh access) only server admin connection is lost.
servermgrd is running:
bash-3.2# ps aux | grep servermgrd
root 298 0.0 0.7 2494120 28748 ?? Ss 1:49PM 0:22.16 servermgrd -x
root 1588 0.0 0.0 2425708 276 s001 R+ 2:29PM 0:00.00 grep servermgrd
Is there any way to reset/reinstall servermgrd and its settings to default

Propagate permissions with Server Admin?

Can someone help me change permissions using Server Admin under Mac OS X10.5.7?
I am able to set permissions to a single file or folder, but when I go to propagate the permissions to sub folders and files server admin just hangs. The status bar pops down and spins until I force quit. The permissions never propagate.... This is driving me nuts! ( I could do it by file by file, folder by folder but I have thousands to change.)
Am I doing something wrong? This seemed to work fine in past versions of the OS....
Thanks,
Robert
Message was edited by: Robert LaRocca

A better way to propagate permissions is to use chmod to set your ACL. See the following post for a basic example that resets ACLs and adds a new one granting read/write access for a group:
http://discussions.apple.com/thread.jspa?messageID=9488313&#9488313
As mentioned, you could simply change the POSIX permissions to 0777 (which grants read and write for the POSIX owner, POSIX group, and POSIX everyone fields). This solution will not apply the same permissions to newly-created files or folders and copied items, however.
This means that you'll have to continue propagating permissions (chmod -R 0777 /example) each time a new file or folder is created or copied. Not fun.
Using an ACL entry that has file_inherit and directory_inherit controls will ensure that the particular ACL entry is inherited to a newly-created or copied file or folder.
See my other posts for a detailed explanation of how new, copied, or moved items get their permissions:
http://discussions.apple.com/message.jspa?messageID=9209840#9209840
and
http://discussions.apple.com/message.jspa?messageID=9134807
Hope this helps!
--Gerrit

Can connect with Server Admin and Server Prefs, not Screen Sharing or ARD

Just set up 10.5 server on my G5, and trying to connect from 10.5 on my iMac. I have tried both with the server System Preferences set to allow Screen Sharing via VNC, and with Remote Management enabled for ARD. In both cases, I get authentication errors when trying to connect from home. I have tried with both the full username, and with the short name of the only account on the server. My assumption is that, since this is the administrator account, I don't need to setup explicit privs for it on the server.
I can authenticate without any trouble with both Server Admin and Server Preferences.
The Firewall is not enabled on either machine, although I am behind a NAT router at home -- is it necessary to open any special ports to enable screen sharing? Is it possible that having these ports closed would produce an authentication error?
Thanks for any help.

Hi
I'm going to assume you configured your Server in Standard Configuration and not Workgroup or Advanced?
When using Standard in setting up the server DNS is automatically configured for as well as the Server taking an Open Directory Master Role. The admin account created at the beginning is for administering the Open Directory. Unknown to you and not documented at all - as far as I can see - is the 'Local Administrator' (localadmin) account.
You only become aware of this account if for some reason you have a problem with the Server which involves demoting to Standalone (ie not an Open Directory Master) once this happens you find you can't log on to the Server anymore or communicate with any of the Server applications because it won't accept any username or password other than root and localadmin for the name and the password defined for the original admin account you created right at the beginning.
Sometimes it does not even take demotion to find yourself locked out of the Server. Some have experienced this problem when running the Security Update or when some other problem has occured.
Part of the process of creating an Open Directory Master involves the creation of a 'special' directory administrator account. This account is used for administering the LDAP node. If demotion takes place this account gets blown away along with all users and group accounts that exist in the LDAP node, in fact everything to do with Open Directory is destroyed apart from Users' home folders.
Why demote if this happens? Sometimes the LDAP database gets damaged/corrupted beyond a point where normal troubleshooting methods fail. This can happen for a whole variety of reasons but more often than not is due to a poorly configured DNS Service. You basically only have two options once you reach that stage. A server reinstall involving a format and rebuild or a demotion to Standalone. Which option would you choose? Prior to demotion you can (if you have the chance) export users and groups or even archive the LDAP database itself for restoration later on. This is a useful option as everything to do with the LDAP Server is retained - passwords, users, groups etc. The other method of saving users etc does not retain passwords.
As time goes on and you become more familiar with your server you will find more and more of this information out for yourself. Hopefully the simple advice I've given helps you understand Open Directory a little better.
Hope this helps, Tony

Mac OS X Server Print Sharing Issues With Server Admin

Hello,
I have a fresh install of Mac OS X 10.6.5, with just PaperCut and network printers added. When I open Server Admin (on the server itself) and select the Print service I can see 'servermgrd' and 'cups' using 60%+ CPU each for about 3 minutes. Then when I click 'Queues' tab the 'servermgrd' and 'cups' using go back up to using 60%+ CPU each and even if I leave it running for 12 hours it continues to stay like this, until I quit Server Admin.
I currently have 45 shared printer queues.
It sounds like the same issue discussed here:
http://discussions.apple.com/thread.jspa?messageID=11895050
Any help would be great! Thank you.
Message was edited by: Pagemaster

Anyone???

Error 25308 on importing GoDaddy cert with Server Admin

Greetings,
We're in the process of migrating from Tiger Server 10.4.11 to Leopard Server 10.5.6. We did a clean install of 10.5.3 on a new machine, updated to 10.5.6, and started migrating user data. It's gone well, except that we can't import our GoDaddy SSL Certificate via Server Admin. We point the import process to the same certificate, private key and intermediate certificate that are used on our current server, but Server Admin says "failed", and I find this line in system.log:
3/17/09 3:42:33 PM servermgrd[47] servermgr_info: [47] [CertificateManager importIdentity:] Error importing private key: SecKeychainItemImport (err = -25308)
The result code means "Interaction with the Security Server is not allowed." according to Apple at http://developer.apple.com/documentation/Security/Reference/keychainservices/Ref erence/reference.html.
Can anyone point me in the right direction? Thanks.

Can you make a new cert via server admin and just have GoDaddy re-key it via your new information? It might be best to just start fresh with a clean install of the server.
JL

Can I manage custom builds of Apache and PHP with Server Admin?

Okay, here's the deal: I have a shiny new Xserver Xeon with Leopard Server installed. I see that it comes with a number of programs that I'll need, preinstalled, but for various reasons (extensions and modules for PHP, Apache, and the like), I may need to roll my own builds of several of these programs and libraries. In this case, the main thing I'm concerned with is recompiling Apache and PHP.
My question is, can I do this and still manage those tools from Server Admin? I'm not averse to doing it on the command line if need be, but I'd just as soon not have to, if I have Server Admin. So, what would I need to do to make sure that I can still use Server Admin with a custom PHP and Apache?

My main interest is in using Wiki Server with the custom Apache and PHP builds. Since that's managed through Server Admin, I figured it would be best to try and integrate with the Apple tools.
Apache I could maybe get by without a rebuild, but there are definitely PHP modules I need which the default build does not come with.

Changed Calibration Settings, Big Problems Now with sRGB

I use Lightroom 1.3.1 on a PC with Windows. I've been using Lightroom for about a year for the same workflow (creating images for web primarily). I use a Canon 5D.
Today I changed the Camera Calibration Settings in the Develop module. I downloaded the "CAL ACR Calibrated" Settings and imported them. I may have downloaded settings for the 30D if that matters. With the new calibration settings, my reds looked MUCH better and I was very pleased.
Then I went to Library module. In that module the colors were washed out as before. Hmmm. Anyway, I exported to Photoshop using ProPhoto RGB (as always). The photos looked fine in Photoshop with the same great colors.
THEN I tried to convert the photos to sRGB. The nice reds went back to the washed out, orangish color they were before. I tried all the different conversion options with the same result. My work flow hasn't changed otherwise, and I have never had this problem. (My Photoshop color settings should be correct and my monitor is profiled, etc). For the record, photos that I exported previously (before making the calibration changes) still look the same and render to sRGB the same as always.
Can anyone please help!? Is this a bug in Lightroom?

>he more I think my issue is related to the difference between my monitor's color gamut and sRGB
It is definitely possible but would be very suprising as your monitor is supposed to be wider than sRGB in red. What happens when you take the saturated sRGB red image in Photoshop and soft proof for your monitor profile? You should NOT check preserve RGB numbers. Now also check "Show gamut warning." If sRGB red is really outside your monitor's gamut, the image should turn solid gray. Even if the red is outside the gamut the shift in color should be small though and you should not get the described huge shift to orange, which makes me think the calibrator must be off a bit.
>The point people were making in that forum discussion is that most web browsers (like Firefox notably) don't render using sRGB at all, but they send ALL the color information in the image to the monitor. That means some images may appear much more saturated in Firefox than they do in color managed environments (like Photoshop or, actually, Safari I think).
The first part is true, but the second part is only true on wide gamut monitors. Your monitor is almost equal to sRGB (according to the manufacturer at least) and Firefox should look almost exactly the same as Photoshop if you use sRGB and have it correctly calibrated. On most people's monitors, colors will be less saturated than what you are seeing as almost every laptop LCD screen out there is narrower in gamut than sRGB.
>Now I'm suspecting that the reason Lightroom at default settings renders red with an orange cast (as many people report) is because they want to keep output files compatible with sRGB. Otherwise, most people would assume a red color shift means either Lightroom or Photoshop is broken.
I don't think any thought went into that. The rendering Lightroom and ACR use is based on calibration that Thomas Knoll did using reference charts. They are supposed to make ACR render colors as correctly as possible into the reference space (much wider than sRGB) under the reference conditions. No attempt is made to compress the color into sRGB or so. There is unfortunately quite a bit of variation between cameras causing the oranges that people report.
>The discussion in that forum (can't find the link unfortunately) was basically about how difficult it is for SmugMug to display and print photos in a consistent way given the lack of a real standard, because more and more people buy monitors that display more than the sRGB gamut, and browsers don't display sRGB by default.
As always smugmug (and I love them BTW) is trying to solve the wrong problem. You cannot fix people's screens and browsers. If people do not calibrate their monitor and do not use color managed browsers (i.e. Safari and Firefox 3.0 beta) there is nothing you can do to help them but tell them to ... calibrate their monitors and to use color managed browsers. If people buy wide gamut monitor and do not calibrate and color manage they are asking for trouble. Luckily they are still out of reach for most consumers.
>- see if there are updates for the monitor and/or video card
- see if there is an update for the Eye-One device
- try creating a new profile from scratch just to see
- if all else fails, buy a new calibrator
- if that fails, then try switching to my older monitor...hope not
These are great steps. You definitely should try recreating the profile from scratch. Also, the Huey Pro or Colorvision Spyder calibrators can be had for <$70 if you want to check your calibrator. Both give great results. Your calibrator should do a good job, but it is always possible that you have a dud. Again, your monitor should give a response very close to sRGB in unmanaged apps, making images appear the same or very close in managed and unmanaged apps if the screen is calibrated.

Changing import settings for brightness etc

Hi there,
I'm importing RAW files from my Canon 5D, and they all come in with the brightness set to +50 and the contrast to +25, the blacks are +5, and the tone curve has a slight "S" curve on it. I appreciate this is probably a "good thing", but how do I get LR to import with entirely neutral settings?
Many thanks
J

ThEse are genera;ized settings that aDobe figures will work for many users. Do your own presets, more than one if you have to, and apply appropriately on import.
If you have more than one camera you might want more than one for the differences, for instance.
Don
Don Ricklin, MacBook 1.83Ghz Duo 2 Core, Pentax *ist D
http://donricklin.blogspot.com/

Accessing network drive (kind:sharepoint) as user with no admin priviliges

I have a (linux) server which stores - and backs - up quite a bit of data for several users on my mac (Leopard).
I have set up AppleTalk on the server and password protected access. This works excellent. But for some reason I have to enable admin rights for all users to my computer - otherwise it is not possible to access the server data. I can see all the shared folders - but it simply does not allow me to access the data. It seems that my mac does not allow me to "mount" the drive...
On the log I get.
"NetworkNode:handleMountCallBack returned -6602"
It is a bit uncomfortable to have all users of my mac as "admin". Do you know how to fix this problem?
With kind regards,
Björn
Message was edited by: Bjorn_is

Hiya,
Your absolutely right in the last part. Recreating the user, gives them a new SID and you have the add that SID to SharePoint.
I would use a Powershell script to find all the places the user has permissions and replace with the new user SID.

Is it possible to change the settings in AR Properties Advanced tab with Adobe Acrobat XI?

I noticed when I went to print a PDF double sided, that despite the following the guidelines from Adobe on this process, it still printed single sided. I checked the properties of the PDF itself and on the Advanced tab, the DuplexMode was set to Simplex and was greyed out.
Is it possible to change the settings in that tab with Adobe Acrobat XI?
Regards
Sharon

Dear Sara
Thank you for your reply.
I have two printers, both support automatic duplexing. Any PDF we receive
or create we are unable to print double sided on our mac mini¹s. I didn¹t
make it clear in my question that we were fine on Windows XP, but, having
recently changed to Mac have encountered this frustrating problem.
I did a lot of research prior to recording the question and it appears I am
not the only one who has come across this problem, and I have followed the
guidelines that Adobe promote on their website to be able to print double
sided, which doesn¹t work on the mac mini Osx Mavericks.
Because the Properties, Advanced tab has ³Print Dialog Presets² that are set
to simplex and greyed out I took that to mean that no matter what printer
settings I make, and I think I¹ve gone through all that I can, the pdf will
not print double sided on Mac but will on XP.
Sorry this isn¹t the reply you must have been hoping for and look forward to
receiving further advice in regard to this matter.
Regards
Sharon

Change SMB settings (sharepoint, status, etc.) with Server Admin

Similar Messages

Maybe you are looking for