Keep client in Home Directory

Any one have ideas as to how to "lock" limit linux system file system browsing from applications interfaces.
We tried a few ideas - 1) rbash - creates issues with the exec function, setting systems into KDE kiosk mode works well with integrated kde applications, not so well for others. 3) Jail - too resource intensive for environments running in excess of 5000 clients.
Any ideas would be very much appreciated.

Additional Information.
As a prototype we are evaluating StarOffice, SGD and other NX based applications to defer/terminate additional expenditures associated with the Incumbent.
One strategy to replace: Implement SDG and Star office on "like" Internet accessible terminal servers executing Solaris 10 on X2100 series machines.
Issues to date:
1). The ability of the user to browse the Solaris 10 system file structures from application file/load/save interface.
We have attempted multiple solutions/workarounds to limit the abilities of the client/user to browse the Solaris file system, it is a very difficult issue to resolve, appears with current Solaris technology, as one may see it.
We also now have NoMachine operational with KDE kiosk desktop works well, but removes the seamless "my applications" runs locally perception. Yes, Nomachine can run seamless and deliver very good capabilities, SGD based on our review, just may be leading in the evaluation to deliver seamless integration of remote applications to the desktop.
Anyone have additional thoughts as how to limit the capabilitity of the client/user file browse access from the applications?
Summary.
1) KDE Desktop works well technically, user/client experience based on our polls, confusing
2) Seamless application SGD - works well, file system browse capabilities, not good
3) Containers/Jail/Virtual Machines - too support and resource intensive for large installations 10K users plus
4) Nomachine, from our experience user support intensive
5) Restricted shells - Limites SGD launch capabilities

Similar Messages

How to read client's home directory files using signed applets

hi
i want to konw the exact procedure for the creation of signed applets . using that i want to read my client files....
Thanks
Dileep

google: http://www.google.com/search?q=how+to+sign+an+applet

Can I and should I move my home directory to my new Thunderbolt RAID drive?

I have just purchased a Thunderbolt Promoise Pegasus Raid set to Raid5. I have never owned a RAID device before so i apologise if these questions seem strange or rudimentary.
I am running an internal 7200 RPM 1TB disc but I have heard that the Thunderbolt throughput is faster than even my internal drive. Is that the case?
If so...
Would it be possible/wise for me to move my home directory to the RAID?
Would it be possible/wise for me run the entire system from the RAID?
Finally, if I keep the system/home directory on the RAID, can I/shoud I use the RAID for Time Machine Backups?
Thanks in advance for any thoughts

Here's what I did:
Copied my home directory to the RAID (not NAS incidentally, but RAID via thunderbolt)
System Prefernces -> accounts
Unlock to make changes and control-click on the account you want to move.
In there you will see a home directory location. Change it to where your new home directory location is.
Restart.
You know it has worked if the new location icon is the familiar picture of a house.
Probably a good idea to have a fallback account you can log into in case something happens.
No issues with any software, plenty of room now on the internal drive ad everything works nice and snappy

Home directory is not created and cannot log from client computer

I am trying to set up MacOsX server. I already have another server which is my DNS server. I am trying to create an Open Directory Master server.
Server was updated to 10.4.8 MacOsX from the beginning of existence.
I created couple of users in Open directory domain for testing purposes.
So, the first problem is, that when I am trying to create a user home directory server does not create it and does not give any errors about that. I tried in bash createhomedir utility, it did not work either, again, no error messages.
Another problem:
I set up Open Directory master with LDAP. It was set up correctly, no error messages. At least I did not see any.
The I tried to connect to the server from my client iMac computer which has 10.4.8 MacOsX as well. So I set up LDAP there in Directory services, it was able to find my server and bind to it. Then when I am trying to login with username and password in Open Directory on the server, it does nor recognize it. No error messages in logs as well.
However, if I am trying to use ssh from client machine to connect to Server using the names which are in Open Directory on the server it allows me to do so. But of course it says no home directory defined.
Than you very much for responce!

An Open Directory Master requires DNS running somewhere. You could have a scenario involving 4 servers where: DNS is provided by Server A, Server B is a Web & Mail Server, Server C providing FTP Services and Server D providing LDAP services with managed preferences and automounting Home Directories (ODM). In this scenario DNS is provide by Server A and any other server requiring DNS using Server A’s DNS. You could expand this scenario if you wanted and have replica (fallover) servers for Servers A, B C or D, or if you are the frugal sort just one replica server replicating the 4 primary servers. You can do all of this pretty much in 10.4 GUI with some additional configuration using Terminal
Mac OS X (10.4.8)
Mac OS X (10.4.8)
Mac OS X (10.4.8)

Home Directory on server or client?

I work for an architects firm (about a dozen people) and we currently keep user accounts/home directories on individual machines, although we have a server. What are the advantages, besides being able to log into your account from any machine, in keeping the home directories/user accounts on the server?
And what are the disadvantages? And what about laptop users?
Or should I be looking at mobile home directories, in which case I'd ask the same relative questions as above?

We are an architecture firm also, with a total of 8 employes.
We have network home directories set up (I did not set it up) but have had no problems. We do not have Portable home directories setup, as there is no need. Our boss is the only one that uses a laptop and no need to work from home. It is very handy to have user accounts available at any machine, as there are sometimes when we need to get some repair done on a tower, we just pull an old one out of storage, or move to an empty desk. When we get a new computer, I just image it with our base image, and it s in production in an hour or so.
The main reason for the dir. on the server is due to backups. We nightly backup our entire server to firewire drive then rotate weekly. This gets all user information, email, as well as all of our working data.
As for "intense server usage" our server is a G4 PPC MDD 1.25 Ghz with 1.25 GB of ram running Server 10.4.7. During the day, there area anywhere from 4-7 clients connected to the server, but our CPU stays well under 20%. It only peaks during backups, @ night.
Services running are :AFP, DHCP, NetBoot, NFS, OpenDirectory (Master), and VPN.
We have also setup VPN, so we can work from home, or admin remotely.
Our main files used are Vectorworks files, ranging from 10-50 MB, but some Photoshop files that get large.
Anyway, that is my experience, take what you want. I was thrown into the sysadmin after coming on out of Architecture school, and it is a balancing act to keep the system working while keeping my billable hours high.
Spinner
Mac Pro 2.66 Ghz Mac OS X (10.4.7)

Solaris 10 NIS Client user account home directory

Hi all,
I am newbie of NIS in solaris and i am setting up NIS(central authentication of user) ,So related to this i have setup and server and client but
i am getting problem while accessing user account in client side.
in client side i can login user which i have created in server but it is not able to find its home dir .even though i added user with the -m option on server and home dir of user is created in server side .
*(No directory! Logging in with home=/)*which i have created in NIS server.
also i am not able to create any directories or files in the client system it says.
bash-3.00$ mkdir a
mkdir: Failed to make directory "a"; Permission deniedBoth the server and client have same domainname and NIS service is also running properly.
on the server side this is the entry of the /etc/auto_home
# Copyright 2003 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
# ident "@(#)auto_home 1.6 03/04/28 SMI"
# Home directory map for automounter
+auto_home
* SS09:/export/home/&here SS09 is the NIS server name and i can see it both server and client side .
bash-3.00$ ypwhich
SS09
bash-3.00$
bash-3.00$
bash-3.00$ svcs nis/client
STATE STIME FMRI
online 11:53:05 svc:/network/nis/client:defaultSo please help me regarding this ...
Thanks
anuj
Edited by: anuindia on Apr 16, 2009 11:02 PM
Edited by: anuindia on Apr 16, 2009 11:03 PM

Look over on http://docs.sun.com for the NIS guide for your version of Solaris.
alan

MacOS keep open file in home directory

I don't know if I've changed anything but my Mac keeps open every files written in the HOME directory with the default editor. Any idea to modify this behavior? I'm using Mac OS X 10.6
Thank you in advance.

Never mind. I was able to fix it. Just delete every thing from ~/Library/Preferences (or move all files to another location and then move them back if you don't want to lose your settings).

10.5 clients won't login/mount home directory

Hello all,
I am having some issues with 10.5.8 clients logging in network users. At our school, we have a "magic triangle" setup -- Mac and PC clients, an Active Directory for user authentication (a Win 2k3 server DC I believe), and an Open Directory server (running 10.7.5 OS X Server) for Workgroup Managment and software updates. Along with this, there is a Linux NAS box that acts as the file server hosting the user's home directories.
I have a few test student accounts that I have set up exactly the same way that normal student accounts are added to AD. Users have complained that these 10.5.8 clients will not let any students log on, as I have verified with my test student accounts. When logging in, an error comes up that says "Logging into the account failed because an error occurred". In secure.log I get a "smb_mount: syserror = Broken pipe" line along with
ERROR | -[HomeDirMounter mountNetworkHomeWithURL:attributes:dirPath:username:] | PremountHomeDirectoryWithAuthentication( url=smb://fileserver.domain.org/username, homedir=/Network/Servers/fileserver.domain.org/username, name=username ) returned 32
When I turn off "Create Mobile Account at Login", the user can log in just fine, which obviously leads me to believe that there is an issue with mounting the samba share for the user's home directory during the HomeSync.
I know the client can resolve the file server's hostname by nslookup, so I don't think DNS is the issue. But I'm all out of ideas after looking everywhere online, and am hoping someone can assist me with this. I'm just a computer technician and not a network sys admin by any means, but I know a good enough amount to try to troubleshoot this. Even my network manager is stumped, and his answer is to upgrade the client to 10.6, resolving that the issue is with 10.5. I want to try to solve this issue rather than having to re-image all the 10.5 machines.
Obviously school is out for the weekend, so I won't be back for a couple days to work on the issue if anyone does respond in the next couple days.
Thanks in advance!
-Brandon

Hi Brandon, certainly no expert at this, but let me trow this out at you...
Found a work-around. This command adds a delay, in this case 45 seconds, before displaying the Login Window.
defaults write /Library/Preferences/com.apple.loginwindow StartupDelay -int 45
If the Login Window UI detects that the network servers are available when it starts, it will skip the delay, also if network servers become available before the delay expires, the Login Window UI cancels the delay and displays.
Kent

Can ssh into client iMac but cannot mount home directory ...

I've got a server running 10.4.11 and a bunch of client iMacs (10.5.n). If I ssh into a client iMac it lets me log in but cannot mount my home directory (which lives on the server). Obviously ssh is getting my credentials from the server but isn't getting (or cannot get) the information to mount my disk. If I log in through the gui on the client it all works fine. I suspect this is less of an error and more of a design. Is there a way to get the clients to mount my home when logging in with ssh? If not then Apple presumably has a reason for disallowing this behaviour. Is there a way around this? Perhaps with mount_afp?
We want to be able to log into many client iMacs at once to run computations on them. Eventually we want to do this on a suite of XServes and XGrid. This is all very easy with linux and nfs and I was expecting the same sort of ability through OS X. I know that I can export everything from the server with nfs (though that may not solve my problem) but I only have the one system and multiple users and I can't really experiment while they are connected.
Suggestions? Comments? If there are obvious examples of this elsewhere please point me toward them.

Well it's never worked that way for me. Do you actually use this method to log in?
I've gone through all of the server logs, watching what gets added as I log on to a client. I don't see anything there that suggests it is even attempting to mount the home directory. I also watched on the client and didn't see any errors. When I ssh into a client I see the following message on the terminal, "Could not chdir to home directory /Network/Servers/server.some.place/Volumes/R1/UsersR1/username: Unknown error: 118" This suggests that the client knows where my home should be but doesn't know how to mount it.
I have enabled the basic setup on my server. User accounts have Home URLs like "afp://server.some.place/UsersR1/username" and Full Paths like "/Network/Servers/server.some.place/Volumes/R1/UsersR1" (R1 is a RAID disk). UsersR1 has been made into a Share Point and Server Admin tells me that the disk "will be automatically mounted using the AFP protocol as /Network/Servers/R1 on client machines". This part doesn't seem to be true as when I log into a client through the GUI the actual path that is mounted as my home is /Network/Servers/server.some.place/R1" (pwd in my home directory returns /Network/Servers/server.some.place/Volumes/R1/UsersR1/username which is a actually rather inconvenient).
Under the Advanced tab in the Workgroup Manager, Accounts pane, I've got "Allow simultaneous login on managed computers". This seems to work but also seems only to apply to the GUI, that is I can log onto several clients at once.
How do I ask a client machine what home directory information it is getting from the server for any particular user? Is there some setup on the client machines that will enable automatic mounting of homes through ssh? On the clients, the Directory Utility, which I have used to connect the client to a Directory Server, has a Mounts pane which allows me to "Edit automatic NFS mounts for this computer". I am not exporting any NFS from the server, but perhaps this is the way to make it work?
Perhaps what I want to requires Kerberos? I don't have that enabled.
When I have done this on a cluster of linux machines I exported the home directory from the server with NFS (exportfs) and then, using NIS and automount on the clients it "just worked". It was very simple. If it is supposed to work with Macs and OS X, it may be simple but it's not obvious.

Leopard Client Tiger server mobile home directory not working... hmmm

Mobile home directory is not working for my leopard clients with my tiger server.
I can log in via the Apple server account that is set for mobile.
On my tiger clients it prompts me to confirm my mobile account on log in and everything works fine if i unplug the network cable.
on my leopard clients no prompt at log in. so i go to account under system prefs and see that the account says mobile..and i click on make mobile account in the account pane in system prefs says will reboot and make account.. prompts for password for mobile account i put it in and then it says there was an error in making mobile account and then it takes me back to the main log in window.
every client i have on leopard does this...
am i missing something?
thanks in advance,
Jesse

Tiger server can control mobile account syncing and other features present on Tiger clients.
See this post for some more info on setting Leopard mobile account preferences on Tiger servers:
http://discussions.apple.com/thread.jspa?messageID=6829482&#6829482

Home directory on Windows clients

Hi all,
I have recently changed the share point location of our home directories from /Home to /home/users.
The change was very easy and went smoothly except for our Windows users.
After moving to the new share point they lost all their data under H:
I noticed that the SMB server still goes to the old /Home directory instead of the afp:/Home (which is mapped to /home/users now).
How do I tell the SMB server were to look for the home directories?
Thanks,
Ziv

Hi
Is it possible a user to login on a mac, and access their home directory that is stored on a windows server via active directory?
Yes. Provided the AD Server has been configured to accommodate mac clients first:
http://discussions.apple.com/thread.jspa?messageID=7417304&#7417304
Can the mac server mount the active dir. share and allow it to be accessed on mac clients?
If the AD Server controls the directory/volume/drive etc for home folder creation then why involve another server?
Also, if this is possible, how would I set up managed preferences for these users?
To manage mac clients using something similar to GPOs available on AD you would need OSX Server. It does not have to be an XServe. Any mac that meets Leopard Server's minimum qualifying spec will do. This is what is I would refer to as AD-OD Integration. Quite a few on this forum call it the 'Magic Triangle'. Its difficult to advise any further on this as a lot depends on what your requirements are and ultimately the AD environment you wish to integrate.
These links should provide more information:
http://www.bombich.com/mactips/activedir.html
http://macwindows.com/leopardAD.html
http://www.afp548.com/search.php?query=ActiveDirectoryIntegration&type=all&mode=search
Browse the 10.4 and 10.5 Open Directory Forums. You should find further useful material.
Tony

"Home Directory Full" message "fix doesn't work for me

Often (no, not always, it's not consistent), I get the dreaded "Home Directory full" message when I launch mail. Mail then quits when I click OK. Normally, if I launch it again right away, it works.
I tried to use the standard fix (e.g., removing the "Envelope Index" file to the desktop and launching Mail). This did cause a dialog to pup up informing me that I needed to re-index my mail file. I did that, and the process stopped with the progress indicator about two thirds through. I quit Mail and replaced the Mail folder in Library with the backup I had made before getting started.
Next, I tried the Hoover method (running the vacuum command from the Terminal. My machine grinded away for some time. I don't know how far it got (there is no progress indicator nor any other feedback of any kind), but since nothing happened for a good half hour (with no more disk activity for a long time), I quit that process, too. Get info revealed that the "Envelope Index" file had not been modified at all by this. Again, just to be on the safe side, I replaced the Mail file again with the backup copy.
Because the re-indexing in my first attempt had stopped while processing my sent items folder, I suspected that this one was the culprit. I therefore attempted to rebuild it (via the menu command in Mail). Much to my surprise, the process actually finished without an error message. However, my sent items folder now contained some 5,200 emails as opposed to the 7,00 or so it should have.
Then I saved my Mail preferences file to the desktop, made a backup copy of my Mail backup file, and launched Mail. This made the application believe that it was being launched for the first time. I used the Import command and imported only the contents of the Sent Items mailbox, specifying "Other" as the type. This imported 5,225 items; at that point, the progress indicator was showed a fully completed process, even though the "messages" folder contained 7,900 items. Checking things, I found that there was a discrepancy of 9 items (i.e., the last item that showed as having been imported was not the 5,225th item in the "messages" folder, but rather the 5,216th). I thus moved the first 5,216 items from the messages folder into a different folder and tried to import the rest. Much to my surprise, Mail imported the same 5,216 items all over again. This is when I noticed that it does not import from the "messages" folder but rather from the file called "mbox".
And this is where things stand. I still get the "Home Directory Full" message about once out of two launches of Mail (but never once Mail is up and running). I desperately need to get this fixed as I fear I'm on the brink of a disaster with my mail file.
One more clue: I cannot be 100% sure, but it seems to me that the problem began when I added a second dot mac email account to my Mail setup (we have a family pack; I always managed the main account and have more recently added one of the sub-accounts to my configuration). I also noticed that sometimes, this second dot Mac account shows up in my list of mailboxes on the left side of the screen, and sometimes it doesn't. Both these accounts are configured to be checked automatically. In addition to these IMAP accounts, I have a half dozen POP3 accounts and some 40 or 50 local mailboxes configured.
Does anyone know of a utility I can use to rebuild my entire email file instead of just the index? Or does anyone have any suggestions as to how I can manually fix things? I did do the usual stuff already (using disk utility to check the disk, fixing permissions, and so on) without detecting any problems.
Thanks in advance for any assistance you can offer.
Daniel

You’re welcome.
When I removed the preference file (com.apple.mail.plist), I also removed
the folder "Mail" so as to start from scratch completely.
Well, that’s not what you said in your first post...
I only use "Other" because I read in one of Apple's notes that one should
try "Other" in the event that the OS X Mail import failed (which it did).
This is wrong in the case of Mail 2.x. That has to be an old article. Could you please be more specific as to where exactly did you find it?
there is a way to actually export the contents of a mailbox as individual
items that can then be reimported.
Selected messages can be exported in standard mbox format by doing File > Save As in Mail and choosing Raw Message Source from the Format popup menu. Standard mbox files can be imported into most mail clients. In particular, they can be imported back into Mail doing File > Import Mailboxes and choosing Other as the data format. Using this format, however, would cause some status flags to be lost (e.g. whether a message has been replied to).
Locally stored mailboxes can be copied to the Desktop or anywhere else by just dragging them there from Mail itself (for server-stored IMAP mailboxes, copy the messages to locally stored “On My Mac” mailboxes in Mail first). These, however, are .mbox folders (not standard mbox files), where messages are stored in individual .emlx files that other mail clients don’t know or care about. They can be imported back into Mail doing File > Import Mailboxes and choosing Mail for Mac OS X as the data format.
It also explains why the import only brought in 5,200 items instead of the 7,900.
The question is: where are the others?
In the Messages folder.
as I mentioned above, I used disk utility to check the disk and fix permissions, so I did
not just do the permissions stuff. In my experience, if checking the disk gives you an
OK result, then there is no point in booting from another disk to perform a repair disk.
Right. I missed that part of your first post. Sorry.
if the mbox files are no longer needed, can they be removed?
Yes. The only items within a mailbox (i.e. within an .mbox or an .imapmbox folder) used by Mail 2.x are Info.plist and the Messages folder. Any other files you may see there are almost certainly Mail 1.x files that Mail 2.x leaves there after the conversion. This is poorly explained in Mac OS X 10.4 Mail: Some mailbox files used by Mac OS X 10.3 are not deleted after importing. The article only talks about mailboxes in ~/Library/Mail/Mailboxes/, but the same can also be said about mailboxes in “POP-”, “IMAP-”, or “Mac-” account folders.
As long as you keep a backup copy of the old files for a while (at least, until you’re sure everything was converted properly), they can safely be removed from the Mail folder. OnyX has a Cleaning > Misc > Temporary and obsolete items option for getting rid of all those files.
Note that if you see strangely-named Messages-T0x... folders, these aren’t old files from previous versions of Mail, but rather an indication that there is something amiss. More specifically, these are temporary folders created by Mail 2.x during an import or a reindexing process (e.g. rebuilding a mailbox) that Mail should have deleted when done. Their presence is a clear indication that something didn’t work as expected.
<hr>
Here’s the procedure I usually suggest to set up Mail again from scratch:
1. If you have a .Mac account and .Mac synchronization of Mail data is enabled either in Mail > Preferences > General or in System Preferences > .Mac, disable it before proceeding.
2. Quit Mail if it’s running.
3. In the Finder, go to ~/Library/. Move (not copy) the entire Mail folder out of there, to the Desktop.
4. In the Finder, go to ~/Library/Preferences/. Locate com.apple.mail.plist and move it to the Desktop.
5. Open Mail and set it up again from scratch. If given the option to import existing mailboxes or something like that, don’t. Just enter the account information and check that everything works fine.
6. You’ll have to re-configure all your settings in Mail > Preferences. For spam-related security reasons, the first thing you should do is go to Preferences > Viewing and disable Display remote images in HTML messages if it’s enabled.
7. If Mail works fine now and you had any messages stored in local mailboxes, do File > Import Mailboxes, choose Mail for Mac OS X as the data format, and follow the instructions to import your mail from the old Mail folder that’s now on the Desktop. Import the Mailboxes folder first, then each of the POP-username@mailserver account folders, if any.
8. If .Mac synchronization of Mail data was enabled at the beginning, enable it again, go to System Preferences > .Mac > Advanced, click Reset Sync Data, and choose the appropriate options to reset the Mail data stored on the .Mac server with the data locally stored on the computer, i.e. sync data must flow from the computer to the .Mac server.
As a result of doing the above, some messages may be duplicated. Andreas Amann’s Mail Scripts has a Remove Duplicates script that you may find useful.
If all is well and you don’t miss anything, the files on the Desktop can be deleted, although you may want to keep them for a while, just in case.
Note: For those not familiarized with the ~/ notation, it refers to the user’s home folder. You can easily locate any of the folders referred to in this post by copying the folder path here, doing Go > Go to Folder in the Finder, and pasting the folder path there.

Portable Home Directory no longer works on Lion bound to Active DirectoryAD

Hi, All,
I look after about 30 MacBook Air/Pro connected to a predominantly Windows corporate network.
A few months back, I installed a MacOS Server running OpenDirectory and Software Update Services for managing the MacBooks - they are configured in the standard "magic triangle" configuration, bound both to the Active Directory (running on a handfull of Windows 2003-R2 servers) and OpenDirectory; they are configured to use the Mac Server for Software Updates, and with Portable Home Directories replicated on a network share point (through AFP) to keep a backup of the user's data.
When all the MacBooks were running Snow Leopard, everything was running fine... but the last couple of laptops purchased came with Lion and they cannot synchronise their PHD's anymore :-(
I have spent a lot of time trying to pin-point the problem, including replicating a whole test-network with its own AD/OD and client Snow-Leopard/Lion laptops to try various configurations... my conclusions so far are that:
1- using Snow Leopard clients, it just works
2- using a Lion client, when the network user account is configured in the default Users O.U. on Active Directory, it just works
3- using a Lion client, when the network user account is configured in another O.U. than Users (e.g. Company-Name or External-Contractors), then the PHD syncinc doesn't work at all
4- the failure symptoms are a popup window when trying to do a manual sync saying that "your network home at (null) does not allow writing" - if automatic syncing is configured through MCX, it just fails silently
5- when PHD syncing fails, I can log on using the network account, manually mount the share point used for the network home in the Finder and read and write to it without a problem; so it' not a permission problem, but the fact that the network home directory is (null)
6- I have traced the root cause to the FileSyncAgent process which raises an exception at startup - here's what I see as the salient lines from the logfile (i've edited out the username):
0:: [12/02/07 12:45:00.512] ******************************************************************************
0:: [12/02/07 12:45:00.512] FileSyncAgent-502.2 (r?, BUILT:?, PID:385, OS:11D50b, ARCH:x86_64-64) starting
0:: [12/02/07 12:45:00.512] LA: FileSyncAgent -launchedByLaunchd -iDiskPlist
0:: [12/02/07 12:45:00.512] ******************************************************************************
0:: [12/02/07 12:45:00.512] Engineering log verbosity level = 1
1:: [12/02/07 12:45:00.512] Registered isRunning port with name 'com.apple.FileSyncAgent.iDisk.isRunning'
1:: [12/02/07 12:45:00.846] Temporary disk storage at "/Users/[USERNAME]/Library/Caches/Cleanup At Startup/FileSyncAgent-1727909307".
1:: [12/02/07 12:45:00.846] UserAgentString = "DotMacKit-like, File-Sync-Direct/502.2.? (11D50b x86_64-64)"
1:: [12/02/07 12:45:03.249] +[SSyncSet_PHD createPHDSyncSetForLocalPath:remoteHomeSpec:mountSuffixPath:name:]: Creating Sync Set with name "HomeSync_Mirror".
1:: [12/02/07 12:45:03.249] -[SSyncSet_PHD _setupNewPHDSyncSetWithLocalPath:homeSpec:mountSuffixPath:]: We've been given local home path '/Users/[USERNAME]'.
1:: [12/02/07 12:45:03.249] -[SSyncSet_PHD _setupNewPHDSyncSetWithLocalPath:homeSpec:mountSuffixPath:]: local home at "/Users/[USERNAME]"
<PHD> 1:: [12/02/07 12:45:06.458] Added new sync set "HomeSync_Mirror".
<PHD> 1:: [12/02/07 12:45:06.465] _incomingIPC: SFCreatePHDSyncSetMsgId (17) took 3.217627 seconds.
<PHD> 1:: [12/02/07 12:45:06.526] Scheduling next sync of "HomeSync_Mirror" at 2012-02-07 12:45:16 +0000
<PHD> 1:: [12/02/07 12:45:18.122] ==========================================================
<PHD> 0:: [12/02/07 12:45:18.123] Starting automatic sync of "HomeSync_Mirror".
<PHD> 1:: [12/02/07 12:45:18.126] Peer "local" reports changes since last sync.
<PHD> 0:: [12/02/07 12:45:18.128] EXCEPTION: NilPtr <-[SPeer_FS_PHD mountPeerVolume] (Peer-FS-PHD.m:142): "'((homePath))' is nil">
<PHD> 0:: [12/02/07 12:45:18.128] BACKTRACE: {
<PHD> 0:: [12/02/07 12:45:18.128] ? | 0x105003493
<PHD> 0:: [12/02/07 12:45:18.128] ? | 0x104f70866
<PHD> 0:: [12/02/07 12:45:18.128] ? | 0x104f6fabd
<PHD> 0:: [12/02/07 12:45:18.128] ? | 0x104f6ecb4
<PHD> 0:: [12/02/07 12:45:18.128] ? | 0x7fff924bb74e
<PHD> 0:: [12/02/07 12:45:18.128] ? | 0x7fff924bb6c6
<PHD> 0:: [12/02/07 12:45:18.128] ? | 0x7fff901998bf
<PHD> 0:: [12/02/07 12:45:18.128] ? | 0x7fff9019cb75
<PHD> 0:: [12/02/07 12:45:18.128] }
7- if I use the same user account from a Snow-Leopard client, the mountPeerVolume finds the remote home_dir, mounts it and happilly trawls through the two directories to figure out what needs to be copied; I get something along the lines of:
0:: [12/02/08 18:44:15.344] Starting manual sync of "HomeSync_Mirror".
1:: [12/02/08 18:44:15.363] -[SPeer_FS_PHD mountPeerVolume]: We've been given remote home path "/Volumes/[USERNAME]".
1:: [12/02/08 18:44:15.363] -[SPeer_FS_PHD mountPeerVolume]: Remote home path exists.
1:: [12/02/08 18:44:15.363] -[SPeer_FS_PHD mountPeerVolume]: Final path to PHD remote home root = "/Volumes[USERNAME]"
8- if I use a Lion client and a user account configured in the Users O.U. on Active Directory, it works similarly well
9- in the failing use-case, if I run a "dscl xxx -read /Users/xxx" to verify that the DirectoryServices deamon returns some information, all looks good: I get all my A.D. user details, including email config and network home_directory, the MCX payload, etc
10- the only difference that I can see when running dscl between the "working use-case" and the "failing use-case" is that the Attribute for the network home directory is called HomeDirectory (working) or OriginalHomeDirectory (failing) - but the actual value is present and correct in both cases
11- I have enabled SMB as well as AFP file sharing to ensure that it's not a protocol problem rather than the share point itself that causes problem - no difference
12- I have upgraded the MacOS Server to 10.7.3 (from 10.7.2) - no difference
13- I have upgraded the Lion client from 10.7.2 to 10.7.3 - no difference
14- I have tried to manually configure the Directory Search path on the Lion client to map HomeDirectory to OriginalHomeDirectory - either the mapping didn't work or it's not the real cause of the problem, as again: no difference.
15- I have contacted AppleCare, raised a case with all the details above, been escalated from level 1 to 2 and 3 - and basically have been told that customers have reported very similar problems & that no more detail is available to me as it is a Directory Services related problem - if I want to take it further with Apple, I need Enterprise OS Support (and hence $1000s per year - and no real guarantee of result)
[thanks to anyone who's read until now]...
So my questions are (as I can't believe that I'm the only one using "proper O.U.'s" for managing users in Active Directory):
- has anyone experienced this before?
- does someone know of a workaround (other than "stick to SnowLeo" or "redesign your whole A.D."!)?
- can someone help me figure out where the FileSyncAgent process tries to get its remote home directory from - as this might point to a solution?
Many thanks

I was able to fix the issue here. Steps Taken: From the comand line I ran
dscl /Search read /Users/jdoe HomeDirectory
It returned # No such key: HomeDirectory
This was the big clue.... it should have returned
HomeDirectory: <home_dir><url>afp://files.hihllc.lan/Users/jdoe</url><path>/</path></home_dir>
I unbound the Mac from AD and ran the following command in terminal.
dscacheutil -flushcache
I then went into OS X sharing preferences and renamed the computer slightly, so it would create a new computer record in AD. I rebound the machine to AD making sure in Directory Utility Advanced, under User Experience that Force local home directory on start up disk was unchecked and Network protocol to be used was AFP.
I then ran
dscl /Search read /Users/jdoe HomeDirectory
and it returned
HomeDirectory: <home_dir><url>afp://files.hihllc.lan/Users/jdoe</url><path>/</path></home_dir>
I had the user reboot... which was necessary. When he logged in HomeSync fired up. He had quite a few conflicts, so I told him to select use files on this computer for all conflicts.
I checked the FileSyncAgent.logs and it was good.
Let me know if this fixes your issue.
Thanks,
Ray

Home Directory Synchronisation and "DS_Store" files

I have five clients on Tiger connected to a Tiger server. All clients are 10.4.8.
Initially I turned Home Synchronising on, but since turned it off, realising I don't really need it. One of the clients, with the biggest profile, still keeps synchronising files. They often get the following message in relation to "DS_Store" files:
You do not have permission to synchronize this file. You can check
your permissions in the Info window in the Finder
Name: .DS_Store
Size: 6.15 KB
Modified: 09/02/2007 10:09 AM
Location: Documents/Work - laptop/office/folders/.DS_Store
My questions:
1. As I haven't apparently turned off Home Sync'ing (via the Workgroup application), what else can I check?
2. What does a DS_Store file do?
3. Will it kill something if I delete all the DS_Store files I can find, so they no longer synchronise?
4. Alternatively, how can I enable DS_Store files to be replicated?
Thanks,
Sam

A .DS_Store file is an invisible what controls what you see in every folder/directory. The most imoportant one is the one which controls the Desktop folder in your home directory. The Desktop folder is always open—it's what you see on your desktop when the Finder is running. If you delete the file, for any folder, including the Desktop, it'll be recreated as soon as you reopen the folder or relaunch the Finder, in the case of the Desktop .DS_Store file.
I can't answer your query WRT tp synchronization or servers. You might post the problem to the Servers forum.

Netboot, diskless clients, and Open Directory users?

Hi, I've been reading through the System Image pdf & maybe it's me but a couple of things aren't clear.
I want to set up diskless clients and allow users to log on to their network home folder using their OD login. Is this possible and where would be a good place to start with instructions on setup?
thanks, Patrick

Ok, I got it.
But what if I want the OD user to have some configuration data on the local client?
Let me explain that a bit better. The configuration I would like for my network and users is as follows: the server works only as an authentication server, I do not want roaming profiles or homes directory on the server; I just want the server to authenticate users when they log in to several client machines amongst the lan.
For documents sharing, in fact, I much rather prefer using Dropbox, which allows my users to share on a WAN-instead-of-LAN basis.
But a home local directory is needed for OD users to keep libraries, preferences files and so on.
Back to the old Windows server (PDC) time, I used the server as a name server authentication only, still the client created a local profile for the user of the server.
Does OD works this way too or am I missing something?
Thank you.

Keep client in Home Directory

Similar Messages

Maybe you are looking for