How to user Workgroup Manager IMPORT

I'm using OSX server 10.5.7 now, Workgroup Manager import differ from 10.4 server, I cannot use previous import XML script to import user. What is the new format of user import?
I've read the Manual, import can be any text file like csv format.
I've tried but fail to import list of user. example txt file below
USERNAME:UID:PASSWORD
usera:2011:12345678
userb:2012:12345678
userc:2013:12345678

Hi
Have you considered Passenger?
http://macinmind.com/?pid=2&progid=1&subpid=1
Tony

Similar Messages

How many users can I import at one time?

Is there a limit on how many users I can import at one time?
Also, how about other record types (Lead, Opportunity, Contacts ...etc.) Is there a limit on these also?
Where in the documentation that I can find info for this please?
I'm using CRMOD Release 18
Thanks

Account
30,000
Account Team
50,000
Appointment
30,000
Appointment Contact
50,000
Appointment User
50,000
Asset
80,000
Campaign
50,000
Contact (Admin)
30,000
Contact (Personal)
2,000
Contact Role
50,000
Contact Team
50,000
Lead
30,000
Notes
50,000
Opportunity
30,000
Opportunity Product
80,000
Opportunity Team
50,000
Portfolio
30,000
Product
80,000
Service Request
30,000
Solution
50,000
Task
30,000
Task Contact
50,000
Task User
50,000
User
500
Campaign Recipient
50,000
Custom Objects
30,000
Dealer
80,000
Vehicle
80,000

Spreadsheet Format for Workgroup Manager Import

Hey guys,
I am having some trouble figuring out the system used to import users into workgroup manager. I have a spreadsheet (.csv format) that I need to import, and the help says nothing about what needs to go where as far as name/lastname/password. I have tried importing with no luck as of yet. Is there a pre-defined spreadsheet format or is all of that declared using the screen just before an import?

Hi,
The Command_Line.pdf document over at http://www.apple.com/server/documentation/ has some useful information.
hth,
b.

How do I get system users/groups to appear in the Workgroup Manager list?

When I open the Workgroup Manager and select the Users tab, it only shows users set up in the Workgroup Manager -- same when I browse Groups. But, I also have a couple system users/groups set up not in the workgroup manager, but through the OS's System Preference interface for Users.
Is there a way to automatically have System users appear in the Workgroup list?
I also can't add users to System groups, since the groups also won't appear in the Workgroup Manager (like adding a user to the group Admin or Staff -- default system groups).
I'd just like the option to "show System users and groups" somewhere.
Thanks.
Patrick

Hi
If I understand your post correctly then launch WorkGroup Manager and select Preferences from the WorkGroup Manager Menu. Enable the Show "All Records" tab and inspector option and click OK. In the Users/Groups/Computer tab you should now see the addition of another icon - it looks like a bullseye. Select this and under the filter field selecting 'AccessControls' will show you a long list. Scroll down and select Users. Now go back to the Users tab and you should see all users visible and invisible. You’ll see the same thing for Groups.
You will see different Users and Groups depending which directory node you are in. In the LDAP node you should only see Directory and System Administrator as well as VPN MPPE Key Access User in addition to any user you have created within that node. In the local Net Info node you should see users such as Amavisd User, Clamav User, Cyrus IMAP User etc. You’ll also see UIDs and GUIDs amongst a wealth of other information if you select a user or group and select the Inspector tab.
You can modify record attribute and values as well as adding your own. You can even use WGM in the same way you would use Net Info Manager locally if you wish.
Tony

I can't see system users in Workgroup Manager

How do I get the user accounts that are already on Mac OS X Server to show up as users in Workgroup Manager? Re-adding the user from "Add User" creates a conflict, so I know the account is being seen by Workgroup Manager. Thanks for the help.

Hi
Yes. Firstly de-select the option to show System Users and Groups. Use the Filter to only show you Users with UIDs above a certain number. If you've used the default numbering system start with IDs over 1000. This gets around you inadvertently exporting and/or deleting the default Administrator account.
Select the users you're interested in the Local node. Go the Server Menu and select Export. Save the exported file to the Desktop and give it a meaningful name. Now delete those exported users from the local node. You can't have the same users in both directory nodes. Select the LDAP node and select Import from the Server Menu. The rest should be fairly obvious.
A couple of things to look out for. When importing those Users they should automatically be assigned Open Directory for their User Password Types in the Advanced Tab. Change them to suit if they come in as Crypt. Passwords don't carry over so you will have to either assign these again or force users to change them at next log on. Assuming these are users with networked home profiles?
Tony

AD Users not showing up in Workgroup Manager

Hi, I'm configuring a new installation of 10.4 server on an Intel Xserve to integrate with an already existing AD domain and provide group policies to Mac users via OD.
So far, the install has been so smooth, fast, and simple. The Xserve has been joined to the AD domain, Kerberos is running, and I have an active OpenDirectory Master.
Now, when I go to Workgroup Manager, the users in the AD domain do not show up and if I try to authenticate with the same username and password I used to bind to the domain I get the error "The login information is not valid for this server". Also, if I use dscl I can navigate to "/Active Directory/All Domains/Users" but if I try to run ls I get "ls: DS error: eDSCannotAccessSession".

Hi Tim
You are almost there but not quite.
Firstly its not important if the AD Server does not have a reverse pointer. As long as the OD Master does that should be enough. Ultimately it would be better if there was one configured but there is not much you can do about that is there? I doubt very much if the AD Admin is going to want to fiddle with a 'live' DC's DNS Service if its likely to affect his domain?
What I generally do is this:
Make sure SMB Digital Signing is Not Enabled on the AD Server. There should be at least two places where this has to be disabled. If the 'powers that be' have defined SMB Digital Signing then SFM (Services For Macintosh) must be installed. If its 'nada' to both then you will be severely limited in integrating OSX Server and mac clients with AD. Yes of course make sure there is an (A) and Reverse PTR for the mac server. Next bind all mac clients to the AD Server and make sure the AD Server is listed first for Authentication and Contacts, also make sure mac clients are using the AD for authentication. Test and verify a mac client to see if (a) home folders are created and accessed and that mac clients successfully log in. You sometimes don't get the two.
Now turn your attention to OSX Server. Make sure you have (a) reserved a fixed IP address for it in the AD's DHCP Service and you have placed the AD's IP address as the primary IP address in the DNS Server's field in the Network Preferences Pane (b) tested DNS fully and that OS X Server resolves correctly on the forward and reverse pointers for itself. Now bind OSX Server to the AD using the Active Directory plug in in Directory Access and an AD admin account that has authority for the Domain. Launch Workgroup Manager and you should see AD Users and Groups have 'flowed' into the /Active Directory/All Domains node. Quit out of WGM and launch Server Admin. Enable the AFP Service and set the authentication method to Any Method. Select Open Directory and change the Role from Standalone to Open Directory Master. You will be prompted to create the default Directory Administrator account diradmin (UID 1000). You should see the Kerberos Realm and search base fields autofill with the fqdn of the Server. Change both of these to reflect the fqdn of the AD Server. For example if the fqdn of your mac server is osxserver.addomain.com and the windows server is adserver.addomain.com then change the information presented in thos fields to ADSERVER.ADDOMAIN.COM and dc=adserver,dc=addomain,dc=com. As you can see you should only need to change the first part. Click OK or Continue and you should now have an OD Master that is not the KDC (Kerberos has been stopped). This is the state you want it be in before going any further. You can now 'kerberize' the AFP Service you started previously by selecting the kerberize button and using the same AD admin account you used to previously bind the server to the AD. To doublecheck if the AFP Service has been kerberized launch terminal and issue:
sudo kadmin.local -q list_principals
You should see an entry for [email protected] amongst others.
Now launch Directory Access and make sure the server's loopback address is listed in the LDAPv3 plug in. Make sure that the server is listed first in the Authentication and Contacts fields. Quit out of Server Admin and launch WGM. Navigate to the /LDAPv3/127.0.0.1 node and you should see diradmin waiting for you. Open another connection window in WGM and navigate to the /Active Directory/All Domains node. When you authenticate the /LDAPv3 node you use diradmin, when you authenticate the /Active Directory node you use the AD admin account. Create a Group in the /LDAPv3 node select the + icon and toggle between the two nodes as you select users or groups and add them to your /LDAPv3 node. Once you are happy select a preference to manage, apply desired changes and save the changes. This is better done on a client machine with the Server applications installed.
Back to your mac clients. Begin to join these to the LDAP node using the LDAPv3 plug in in Directory Access. Use the Server's IP Address or its FQDN if the DHCP Server is also doling out DNS information to networked clients. Its IP address should be good enough. Don't bother with authenticated binding and make sure clients are not using the OD master for authentication and contacts. Lastly make sure the Active Directory/All Domains and the /LDAPv3/OD Master IP address or fqdn are in that order for browsed directories.
Its best if you have a secure local admin account on all your mac clients and that each mac is named differently. Set this in the Sharing Preferences Pane.
Begin to test. If everything is OK you should now have mac clients logging into home directories controlled by AD as well as OD Managed Preferences being applied.
One final thing. Avoid using .local as the basis for the DNS Service. I realise in your environment you have no control over that. In which case make sure all mac clients have the AD's .local domain name in the Search Domains field in the Network Preferences Pane. If your clients have Leopard installed you should not have to bother as Leopard copes with .local name resolution better than previous versions of the OS.
As ever how successful you are and how long it takes will depend mostly on how well the AD is configured. There is no magic bullet that can be used on the mac side to fix a poorly configured AD environment. If everything is as it should be regarding the AD Server it should not take you longer than 10-20 minutes (after server installation) for the server and possibly 2-3 minutes for each client. It really should not take that long.
Does this help?
Tony

Problem with home directories NOT in Users and Workgroup manager

I am setting up a Leopard server (10.5.3) with the users directories in /h1. This is mounted as /Volumes/h1.
It is exported under AFP as /h1.
When I try to get Workgroup manager to create a home directory, I can enter the home directory as:
afp://quattro.innocon.com/h1
path is 'user'
Full path is:
/Network/Servers/quattro.innocon.com/Volumes/h1
However, when I try to log in as this this user, it says that the directory /Network/Servers/quattro.innocon.com/h1/username does not exist.
I cannot seem to figure out why the 'Volumes' part of the full path is being lost.
Any ideas on how to get this right?

have you checked to see if /Network/Servers/quattro.innocon.com exists?
I'm having ALOT of issues with automount not picking up on the mount-maps set by Open Directory.. If anyone has any solutions on this it would be great.

Workgroup Manager missing users running on 10.6.7 client

Strange issue I am coming across while running the most current version of Workgroup Manager (I just downloaded it again to make sure) on a Mac Os X 10.6.7 client! -> I notice that I am missing a lot of users when I log in and the application opens. I have already deleted the corresponding workgroup manager .plist (user/library/preferences) as well but this does not do much other than asking me to enter server and username/password again
Oddly enough ALL the accounts that are "missing" tend to be lower 3digit User ID's only... in fact the ONLY 3digit id that is showing up is my admin account.
Here's the really ODD part - Workgroup manager is only doing this when it is running on a 10.6 client mac! I am running the IDENTICAL version on a 10.5.8 client, logging into the same server, and ALL the missing users magically appear. Using the same server name, same login, same password - So I am pretty sure this issue is only due to some sort of glitch in how Workgroup manager is running on 10.6( my ver is 10.6.7)
AND of course the "missing" user names are still functioning perfectly well w/ clients receiving emails, logging in to folders etc. etc.
I cannot imagine that I am the only person having this issue, and am wondering if Apple or someone else can please give me some guidance as to the source of this problem and hopefully a bug fix / resolution of the same as I don't want to have to downgrade from 10.6 > 10.5 in order to perform user administration on my server (Server is also 10.6.7)
Thanks in advance for your help

You many not know how to do it now, but you will if you follow the instructions in the link. Or you can simply remove the original Home folder you configured in Setup Assistant while logged into the one you migrated. Then re-migrate your Home folder which will now take on the original account username. Then log into the newly migrated Home folder and delete the other one.

Exporting users from Workgroup Manager to Excel

Hi all,
Just wondering if anyone knows of a way to export users from Workgroup Manager in a "normal" format, eg CSV or Excel etc? Or if a program exists to post-process the current exported file?
The current file has bits like this in it:
<key>kAPOPRequired</key>\
<string>APOPNotRequired</string>\
<key>kAltMailStoreLoc</key>\
<string></string>\
<key>kAttributeVersion</key>\
<string>Apple Mail 1.0</string>\
<key>kAutoForwardValue</key>\
<string></string>\
<key>kIMAPLoginState</key>\
<string>IMAPAllowed</string>\
<key>kMailAccountLocation</key>\
Which I would like to remove, or put into various columns in Excel.
Sadly we are moving to Windows, so I need to get everything out of OD into a format that can be imported into AD. So basically a spreadsheet with firstname, lastname, email address, location/address, group memberships etc etc.
Any help appreciated

Thanks Andbrowny
I gave it a go, but got a strange error, does this mean anything to you?
admin$ sudo ldapsearch -LLL -H ldap://127.0.0.1 -b "cn=users,dc=my,dc=domain,dc=net" > userexport.ldif
Password:
SASL/GSSAPI authentication started
ldapsasl_interactive_binds: Local error (-2)
additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No credentials cache found)
I suspect my OD is screwed, as slapd maxes out all 8 cores every few days, and takes out the mail server as a side effect.
The Linux link wasn't applicable to this, all the commands and paths are different to MacOS X unfortunately.

Workgroup Manager Find/Search only working for User ID

Hello,
I recently updated my OD Master from 10.6 to 10.7, running on an Xserve 3,1.
The upgrade went fine and I have all my users and groups intact.
However, in Workgroup Manager, when I search by "Name Contains" it will not do a search on the "Name" field.
It appears that no matter what search method I choose, I can only search on the "Short Names" field.
I still have another 10.6.8 Server with WGM on it and it does not have this issue, so it appears to be a specific issue with WGM for 10.7 (I have seen the same thing using WGM for 10.8)
Any ideas?

I noticed somewhat similar behavior a while ago - but my WGM window shows User Name (which is Name, not short name) and that can be searched by the last name, but not the first name. As in a search using smith will find John Smith, but a search using john will not. If the short name is jsmith, a search using jsmi will also work.
However, using the Search button in the top tool bar will work with real names. This picture doesn't actually prove that, but i did search on a first name and it did find it. IE, a search of John in real names found John Smith.
I think this is just how it is now.

Workgroup Manager: Adv, User Password Type grayed out (was Shadow Password)

I've set Workgroup Manager, Advanced, User Password Type: Shadow Password, Options to inactive after 90 days, fail after 5 attempts, allow user to change password, at least 8 characters every 90 days. Today after user logged in to the console, the user locked herself out remotely via sftp, ssh, & xterm from a WinXP PC running ReflectionX.
I went to the console, used Fast User Switching to bring up my admin account (her account was still logged in), we reset the password with Workgroup Manager so the red X is no longer on her username.
However, the Advanced User Password Type: drop down list is blank and grayed out and she can't log in? How do I reset this? The user has a lot of files, I'm afraid to delete and recreate the user account. That seems pretty drastic for an invalid password attempt. I've rebooted and ran Apple Updates for good measure. Any ideas how to put Shadow Password back in that box?

To unlock the user's account, after backing everything up and noting the user's uid, home dir, groups, etc, we deleted the user in WorkGroup Manager and readded her putting the user id, home dir, etc back the way it was. Everything seems to work again. The home directory files were not deleted when the user account was deleted so everything just reattached.
Still have no idea how we managed to get things so confused in the first place? The Server UI is so much more complicated and inconsistent from the client OS for dealing with users. The Mac OS X Server for Dummies book I found did not have a troubleshooting section and was no help in resolving this. We ended up contacting the Mac User's Group.
I was blown away to get an email survey from Apple support asking me to rate my opinion of my help request. I didn't get any help! They told me my 3 years of AppleCare don't apply to the Server OS I installed separately after buying the mac. Mac OS X Server has 90 days of support that I never used but had expired. They offered to sell me a help ticket for $99.
This has not lived up to the user experience I was hoping to have. I regret the day we "upgraded" to the server. Is there a way to downgrade? Now that there is only 1 unlimited version, we're totally stuck. We have no mac client connected, just PCs via sftp, ssh, vnc, & X windows...

Recreate user account in Workgroup Manager, empty mailbox

We have OS X 10.3.8 Server version. Postfix mail server.
We have a user/account with email problems and a huge mailbox. He (user: gordon) had over 16000 emails in his mailbox (/var/spool/imap/user/gordon). All other mail users on this server work fine, including newly created user accounts.
Our solutions was to try and delete all mail from his mailbox via Terminal. This did not seem to decrease the size of his mailbox. Our next idea was to delete this user in Workgroup Manager and then re-created this user. Hoping to created an new mail setup and empty mailbox. This idea failed aswell.
How does one basically purge an old account/user in Workgroup Manager, and then, recreate that same user name and effectively recreate the user with a new account, including a new/empty mailbox?
Mac OS X (10.3.8)

cyradm is not part of 10.3.x
To use it you would have to install it first. See here:
http://www.afp548.com/article.php?story=20040814204411280&query=cyradm
And then follow the instructions given beforehand.
Having said that, your issue can be resolved differently. You deleted all mail manually in the file system (not a good idea, but what is done is done). So the mail is actually gone. What you are seing is Cyrus' index. Since you deleted manually the index didn't get updated. To get rid of the problem either reconstruct that users mailbox throgh Server Admin - > Mail or alternatively run:
sudo -u cyrus reconstruct -r user/gordon (assuming that's the user's name)
Alex

I'm a new Mac user. I imported photos from my PC they ended up in iphoto library on the hard drive, but when I open iphoto from my dock its empty. How do I import those photos to the dock file?

I'm a new Mac user. I imported photos from my PC through a jump drive and they ended up in my iphoto library on the hard drive but when I open iphoto from the dock its empty. How do I import those photos to the dock file from the iphoto library?

Paragon Software has the most reliable NTFS driver for Mac
tips on importing and organizing, transferring from Windows etc
http://www.apple.com/support/itunes
http://www.ilounge.com

Can't log in as a user created in Workgroup Manager

I am a little confused about users created in Workgroup Manager.
I have created an account with all the proper permissions to log in etc. Their home directory is listed as afp://home/Users (home is the name of the server). The directory for the user I am trying to log in as doesn't exist yet.
When I try to log into the server "home" with this newly created user, I get the vibrating window that indicates the log in failed.
I am used to windows and AD where I would create a user in AD and then use something like \\domain\user to log in to the machine as that user. If i wanted to create a local user on that machine, I could do that too and then log in as \\machine\user to get the local user.
Are Workgroup Manager created users like AD users? Can I use them to log into any machine on the network hooked up to the SL server machine? In this case I want to log into the SL Server machine with this user.
Thanks for any insight
Greg

There is only one root user, so saying "a root user" doesn't make sense. What you mean is an admin user, and it looks like your account has somehow manage to lose its admin privileges.
Follow the instructions in I lost my admin user and you should get them back.
Note that in this User Tip, 'youruser' is a placeholder. You are supposed to substitute the short name of your account wherever it appears.

Error -14135 Creating New User In Workgroup Manager

Hello,
I'm running 10.5.8 on a Mac Server, and until today have had no issues adding new users with a preset I've created in Workgroup Manager. Today, I've received the message:
Got unexpected error
Error of type eDSRecordAlreadyExists (-14135) on line 1268 of SourceCache/WorkgroupManager/WorkgroupManager-361.2.1/PMMUGMainView.mm
This error appears before I'm even able to enter any information.
I would appreciate any suggestions! Right now I'm running Disk Utility and repairing permissions. I haven't found any other ideas online.
Thank you!

Following is the text from Note for Custom Password Validation logic:
Customers who wish to use their own password validation logic may do
so by writing their own Java classes that implement the
oracle.apps.fnd.security.PasswordValidation Java interface. The
interface requires 3 methods to be implemented:
1) public boolean validate(String user, String password)
    - This method takes a username and password, and then returns true
or false, indicating whether the user's password is valid or invalid,
respectively.
2) public String getErrorStackMessageName()
    - This method returns the name of the message to display when the
user's password is deemed invalid (i.e., the validate() method returns
false).
3) public String getErrorStackApplicationName()
    - This method returns the application shortname for the
aforementioned error message.
After writing the Java class to perform customized password
validation, the customer must then set the value of the profile option
SIGNON_PASSWORD_CUSTOM to be the full name of the class. If, for
example, the name of the Java class is
oracle.apps.fnd.security.AppsPasswordValidation, then the value of the
SIGNON_PASSWORD_CUSTOM profile option must be
oracle.apps.fnd.security.AppsPasswordValidation. Note that AOL/J
will attempt to load this class dynamically. Hence it is necessary to
make the class accessible by AOL/J. This means that in Forms, the
class must first be loaded into the database using the loadjava
command.
You will need to apply the following patches for 11.5.1:
   1344802
   1363919
   1472974
   1351004
   1377615
You will need to apply the following patches for 11.5.2:
   1377615

How to user Workgroup Manager IMPORT

Similar Messages

Maybe you are looking for