Leopard clients on Panther Server - locked files/folders

Since I migrated my client systems to 10.5.2 I have a very annoying problem. I am running 10.3.9 server.
Every Time I create a folder on the server I am locked out as a client. Can’t even change the rights as a client! Have to go to the server and set proper rights.
If I create the Folder on the client and copy it all seems ok!?
For examole if I use my Tax program and try to make a backup within the program it automatically creates a folder on the server volume where it tries to save the copy but it can not because of missing rights.
And so on …
Any help? Thank you
Willi
PS: If the solution is: upgrade server to Leopard any donations are welcome

I have the same problem:
In my network we have some clients: 4 PowerMac G5 with 10.5.2, and several PowerMac G4s and a PowerMac G5 with 10.4.11.
All these clients connects to an Xserve G5 with connected an Xserve RAID 1TB with some common network share.
Xserve has 10.3.9 server.
Since I updated 4 clients to Leopard, when I copy (or create) a folder to the Xserve, permission become immediately 700 (in unix style, so rwx------).
Even with [cmd]+ I cannot change its permission, I have to ssh to the server and than chmod that folder to make it available to other clients.
I tried several solutions: I thought it was something related to the global umask but it was set to 0022, so permissions should be 755 (or rwxr-xr-x).
Strangely, this didn't happen when I try to copy some files either in the share or in an existent folder.
If I try copying files or folders from a Tiger client, everything goes well.
Can anybody help me???
Thanks.

Similar Messages

Leopard client on Tiger Server

Hello All,
I'm the sysadmin hat wearer at work. We're running PHD and OD for a collection of iMacs in the office here with Tiger Server and Tiger Clients, (runs well).
However, we just hired a new guy and have a new iMac coming in with Leopard on it. I've seen posts out there saying there are a lot of problems getting a Leopard Client to work with a Tiger Server. Unfortunately our Tiger server config has been customized so much over the last couple of years that I'm just not ready undertake the upgrade on the server OS yet and will likely just buy a new server down the road anyway.
My question is, should I downgrade the new machine coming in to Tiger or cross my fingers and try to make the Leopard client work with the Tiger Server, what kind of issues should I be expecting/watching for?
Any insight would be much appreciated!

Hi
You may want to consult this post:
http://discussions.apple.com/message.jspa?messageID=7295681#7295681
Not entirely relevant but it does contain something that might be useful? You are only talking about one Leopard client so it should not be that much of a problem? Although how far you have customized your environment from the 'norm' - whatever that is - may affect how successful you are?
If its a new model iMac I doubt very much if you can 'downgrade' anyway. Have a look at the mac specific system disks that come with it as that will be the lowest version OS that can be installed. You may be able to downgrade it with some effort if you really try - I doubt it - but what would be the point of that? 'Breaking' something to 'fix' an unknown is never really successful is it?
As for posts mentioning problems? That is what the forum is for. It does not necessarily follow that you will see those problems. There are just as many - if not more - with little or no problems who - of course - don't post.
Tony

Leopard Client to Tiger Server

I currently have roughly 80 eMacs that all connect to a 10.4.10 server. I have upgraded one of the computers to leopard and now the workgroup management piece seems to not be working properly.
I can login into the computer since it talks to AD for authentication but it doesn't not read the preferences from workgroup manager. (Blocked applications are able to be opened and shares do not mount)
This all works on 10.4.11 with no issues.
Please help.

I finally got around to upgrading the Tiger server to 10.4.11. I have the same issue on the Leopard client of shares not mounting and applications (ie iTunes) being able to be opened. The other computers in the school all run 10.4.11 and the workgroup manager preferences work fine on those machines.
This laptop was upgraded to 10.5 so I'm not sure if that's where the problem lies. Perhaps I should try a clean install?

Can I fool the Mac App Store into thinking my mini runs Snow Leopard Client rather than server?

I've googled this to death and can't find an answer because, well, Google ain't all its cracked up to be.
I highly object to Apple forcing you to pay for both Lion Client & Server if you have a server model Mac. Especially seeing as Lion Server software is just an app that sits on top of standard Lion, and that you can remove/disable it anyway. I bought a Mini from a chap in Hong Kong purely because it was way more powerful for the price than any Mini's available running a client OS here in the UK. I have no intention of learning to use the server side products, its not an interest and never will be. Plus some of the ways in which OS X 10.6 server operates gets on my nerves because of the control the server has over certain functions.
I'm happy to go through the process of a fresh install of retail Snow Leopard firest IF I really have to as it's cheaper than Lion & Lion Server, but ultimately it's just £26 spent for the sake of it. I was wondering if anyone knows of a system file that can be tweaked so when the App Store checks my OS version, it doesn't see server, only standard Snow Leopard?
Having read the online instructionals on how to move and save the download files and then perform a fresh install from a boot device (as the upgrade under the above circumstances would likely wreck the system) I'm living in hope I don't need to go through retail Snow Leopard first.
Thanks all!

Probably the best idea although do read their Terms Of Use first. Do realize that anybody here who answers your question is in contravention of the YOU as much as you would be for posing the question.
But good luck
Pete

Permissions Issue: Tiger Clients on Panther Server

I've seen multiple posts on this topic but no sollutions. Ack!
Server: Quicksilver 933, OSX Server 10.3.9 Unlimited
Client: G4/1Ghz 1.5MB RAM, OSX 10.4.8
Problem: A user logs in via a 10.3.9 machine and has read/write access to the appropriate folders on the server.
The same username logged in from the 10.4.8 machine has read-only access to many, but not all, of the folders.

Are the folders in question locked folders? Clients before 10.4.6 could write to locked folders (folders you couldn't delete, move or rename). From 10.4.6 or later however, the clients have read-only permissions. Just remove the locked flag of the folder, or use this hint if you wish to protect the folder from deletion:
http://discussions.apple.com/thread.jspa?messageID=3787449&tstart=0#3787449
Have fun
Gerd

Permissions are not shown correctly in Get Info on Snow Leopard client, using Tiger server w/ ACL's

Invoking "Get Info" on a file or folder which is on a shared volume hosted by a G5 running Server 10.4 fails to show meaningful permissions when done from a 10.6 iMac. It says only that the user has "custom permissions", which is true since there are ACL's in operation. However, the Owner and Group POSIX settings are not shown, only the Everyone setting shows, making it impossible to determine which user created the file (in order to resolve issues when permissions prevent intended action). The same file or folder will show Owner and Group on 10.5 systems, as well as at the 10.4 Server itself, so we do have a workaround. I have noticed, though, that I have run into permissions restrictions where I should not, such as creating a folder on a shared volume using a 10.6 system, and then not being able to save into that folder from the same system/user.
Is there something about the implementation of ACL's in Tiger that confounds Snow Leopard's Finder?

Hi,
I did two things to get it working, and haven't taken the time to sort out which did it. But it is working so it's good enough for me.
First I followed TeenTitan's suggestion, and also checked "Allow printing from the internet". I'm behind a firewall so not too concerned I'll get someone's odd photo on the printer.
Second I went back to server admin, selected the queue under queues in the Print service, then selected IPP and deselected LPR. Bonjour went grey but stayed checked.
After this I see the printer with "@ server name" appended, and it added the printer drivers like it should.
So all working well.

Can't lock files, folders, or disks!!

I am running 10.3.9 on my old B&W G3 and I want to lock the disk and folders so that my kids don't mess anything up while playing games. When I get info for my harddrive it does not give me the option of locking, I can't even lock the disk name in and my son keeps typing nonsense in the field. I open folders and the lock option under get info is grayed out. Can anyone walk me through this?

If you are running Mac OS X, you should create an additional account for each kid. Then they can't get into anything and mess it up permanently without the Owner/Administrator password.
System Preferences > Accounts > [goofy little + sign down at the bottom]
Do NOT give them "administer this computer" rights.

Cant bind leopard clients to Tiger server

Hi can one of you help me
Im trying to implement an OD server into a small network, ive set up a small test network to try things out on which is a G4 Powermac with OSX server 10.4 a new imac running 10.5.5 and an old powerbook running 10.5.5
i set up DNS and then setup open directory when i go to Directory utility on the clients and try to bind to the OD they seem to bind ok but then in the list it says server is not responding with a red circle
if i go to search policy and remove the /LDAPv3/servername the light turns green but says server is responding normally. this server is not in you authentication search policy. Putting back in the line and the server is not responding
Is this a problem with LDAP i dont know where to start, both clients say this

I had the same thing... except mine was working last night and not this morning... that'll teach me for working too late!
Anyhoo - I fixed it by disabling "Enable SSL" on the LDAP tab of the OD Master's Open Directory Setting pane, then rebinding the client (having ripped down and reset it's local Kerberos config - see http://support.apple.com/kb/TS1245) then re-enabling SSL on the Master. No idea why it worked (trying to figure it out now), but it did... give it a try.
Note, this is not to enable SSL connections from the client to the Directory - that's a whole 'nother can of worms I'm opening as we speak, following http://www.afp548.com/article.php?story=20071203011158936.
Good luck...

Non Leopard client accessing the server

I have one machine in our office, a G5, that is not running snow leopard since it is not an intel machine. How do I configure that machine to join the server? All the other machines were done with login items in the account section, but that isn't available.

You should be able to use the Directory Utility, located in the /Applications/Utilities folder to manually bind to the Snow Leopard server.

Leopard Clients Take 10 Minutes to Connect to Tiger 10.4.11 Server

I have a single Tiger server OS X 10.4.11, on a LAN with 5 Tiger Clients and 2 Leopard clients, all with up-to-date patches.
My problem is, that ALL of the Tiger clients can access any of the server shares almost instantaneously, but when I try to connect a Leopard client the the server, it initially takes a minimum of 10 minutes! If I just click on the server <as displayed on the Finder SHARED tab>, the connection eventually fails. However, if I click on the "Connect as" button, after about 10 minutes, I get the user/password login, and the Leopard client connects immediately, and all the data on all the share points are accessible.
But, if I don't actually mount a share point (i.e. see a the Network drive icon on the desktop), and use finder column mode to navigate through the shares, if I click on a local drive in the same finder window, I have to go through the whole 10 minute wait again before I see the user/password login.
So my question:
Why is it taking a minimum of 10 minutes for the Leopard clients to connect, where as the Tiger clients connect immediately?
So, if anyone can help me trouble shoot or resolve the server settings so that the Leo clients can connect as quickly as the Tiger clients, I would be extremely grateful.
BTW - I followed the setup instructions precisely as per the Linda.com *+Mac OS X Server v10.4 Tiger Essential Training+* CD.
TIA
Gary
All the shares are setup as:
General:
Share this item and its contents.
Access:
Owner=Root (Read & Write);
Group=Staff (Read & Write);
Everyone (Read Only);
No ACL
Protocols:
Apple File Settings:
Share this item using AFP;
Allow AFP guest access;
Custom Name=<unique name>;
Default permissions for new files and folders=Use standard POSIX behavior
Windows File Settings:
Share this item using SMB
Allow SMB guest access
Enable strict locking
Default permissions for new files and folders:
Assign as follows: Owner=Read & Write; Group=Read & Write; Everyone=Read Only
FTP Settings
Share this item using FTP
Allow FTP guest access
Common FTP name: <same unique name>
Network Mount
Where: LDAPv3.127.0.0.1 (locked)
AFP is setup as follows:
General:
Enable Bonjour registration
Access:
Authentication=Standard
Enable Secure connections
Client & Guest connections=Unlimited
Logging:
(Everything); Archive every 7 days
Idle Users: (nothing checked
All staff members are defined as part of the "staff" group.

Windows File Settings:
Share this item using SMB
Allow SMB guest access
Enable strict locking
Default permissions for new files and folders:
Do you have any Windows clients on your network? If not turn OFF the SMB server and change the settings here so there is no SMB sharing.
FTP Settings
Share this item using FTP
Allow FTP guest access
Common FTP name: <same unique name>
Do your users access this sharepoint with FTP from inside your network? If not, stop the FTP server and change the settings to not share this via FTP.
General:
Enable Bonjour registration
Turn this off for all sharepoints. If you have no Bonjour-only printers -like some of those POS HP color Laserjet 26xx or 36xx series- enter this in Terminal.app or through the 'Send UNIX command...' in ARD to all of your Leopard clients:
launchctl unload -w /System/Library/LaunchDaemons/com.apple.mDNSResponder.plist
user should be root if sent from ARD, prepend 'sudo' (without quotes) if in Terminal.app or if you're using an admin username from ARD. This turns off Bonjour.
Also, in WGM, look at each individual user account and see if the 'Primary Group ID' is listed in the 'Other Groups' list. If it's not, click the '+' sign and drag the user's primary group into the 'Other Groups' list and then save. You can 'shift-click' and select groups of users and add the group to them all at once if they are all in the same groups.
Access:
Authentication=Standard
Change the access to 'Any Method'. If your clients are all bound to the OD master and the sharepoints are listed in the directory (meaning Kerberos SSO works for all clients and users), the clients will try Kerberos first and anything else -like DHX authentication- if that fails. Also, if you are managing your clients with MCX you should have those shares mounting before log-in -meaning at startup- using guest access or at login with the username/pass.

Cannot login to network account (leopard client and server)

Up until now, I have used local accounts on my leopard server. I want to start experimenting with OD prior to implementing. I created a new user account in the /LDAPv3/127.0.0.1 domain, and have bound my leopard client to the server using directory utility. On the login screen, "Network Accounts Available" has a green button to the left of it. When I try and login to the server account, the login window just shakes. At first, I could enter the password and then it would prompt me for a new password. Trying to enter a new password would not allow me to login. I went back to server admin and disabled the "require new password" setting, (as well as the other good security policies)...
I have also reset the password in WGM, and made sure to disable all the security stuff there too...
Lastly, I have deleted the server in directory utility, rebooted, then added it back in, and rebooted again...
I still cannot login to the server account, the login screen just shakes
Does anyone have an idea of what settings and or logs I can check to try and narrow down what is going on?
Thanks in advance....

to close out the thread, I have working dns on my network, but I did not have dns enabled on my server. I enabled the dns service and entered just the info for my server, then assigned my server and client to use the server's ip addy as the primary dns server. Next, I created the home directory.
Once both steps were done, I was able to log in from my client to my server based account...
FYI-I found a document on afp548.com called "leopard server: advanced setup, rsync backup and automated reporting" that walks you right thru the process...Here is the link, it's a very useful doc....
http://www.afp548.com/filemgmt_data/files/Leopard%20Server%20Quickstart%20Guide. pdf
thanks again boomboom_uk and woVi, your suggestions were spot on....

Leopard client controls view of tiger server share point

Hi, recently purchased a Mac Mini running Leopard all patched. Connected via afp to a Xserve RAID, Xserve running a sharepoint using ACL's. In list view the leopard client controls the list view on the Xserve, meaning that all the other Tiger clients see the leopard clients folder structure when they connect to the sharepoint. I have not changed any settings on the Xserve, just re-propogated the permissions and ACL's.
Any ideas would be great,
Andy

ipb1962 wrote:
BUT When I use the DHCP service to specify my DNS to a Leopard Client from (Tiger Server on a G5)
it does not resolve to any internet address.
Can you clarify what you mean here?

Simply setup client features with server installed in advanced mode...

Hi,
If I setup my server in standard "mode" I see that Leopard clients discover my server automatically and the server try to set all clients fatures (Mail accounts, Ical server, etc.).
There is a way to activate this useful fature ALSO with a server installed in "advanced" mode?
My server need to be installed in advanced mode because it's an open directory master with a DNS that serve all my lan.
Thanks in advance...

Hi Kranthi_06,
According to your description, you have an environment with reporting services installed, the info given by the client they are using reportingservices with sharepoint integrated mode. In SSMS, you can see two databases with names reportserver$DEN2010 and
reportserver$DEN2010tempdb.
In Native Mode, in the SQL Server Installation Wizard, if we select Install and configure option, the ReportServer database will be created automatically through Setup. If we choose the Install only option, we must use the Reporting Services Configuration
Manager to create the database manually. By default, the database format is ReportServer and ReportServerTempDB. In SharePoint Mode, we need to create at least one Reporting Services service application by using SharePoint Central Administration or Reporting
Services PowerShell cmdlets, then three databases are created for each Reporting Services service application and the database names by default include a guid that represents the service application. The following are example names of the three SharePoint
mode databases:
ReportingService_90a9f37075544f22953c4a62e4a9f370
ReportingService_90a9f37075544f22953c4a62e4a9f370TempDB
ReportingService_90a9f37075544f22953c4a62e4a9f370_Alerting
For SSRS 2008 R2 or early versions, we can identify report server mode using the Reporting Services Configuration Manager. For SSRS 2012 or later versions, Reporting Services Configuration Manager no longer supports Reporting Services SharePoint mode. Configuration
of SharePoint mode is completed using SharePoint Central Administration.
Reference:
Verifying SharePoint integrated mode installation
Create a Report Server Database
If you have any more questions, please feel free to ask.
Thanks,
Wendy Fu

Panther and leopard clients on a tiger server...expected problems...

I wanted to share a scenario that is happening in the school district I work for and see if anyone has had any experiences similar and can offer some advise before I blindly proceed.
One of the schools I work in uses a single 10.4x server, and all the users in the school have a network account where they can log into managed work groups.
The computers are all running 10.3x and I have had no problems at all. Users are able to log in, see their network home folders, launch all the allowed applications.
The school is purchasing 76 new Imac computers with the new 10.5 OS on them and I was wondering what kind of problems users might experience when logging into these new workstations if they are bound to the existing server.
I was able to bind a 10.5 mac to the 10.4 server and was able to log in using a network account, see the items that were in my network home folder, launch applications I was permitted to launch and was denied applications denied in the applications preference in workgroup manager for the workgroup I was logged in to.
This is very preliminary testing and was wonder what some of you who are in similar situations have experienced.
Another concern is best described by painting a scenario.
A user logs onto a 10.3 computer and launches an application like imovie, an older version of imovie, and does some work on a project. He then saves it and moves to one of the new imacs with 10.5 on it and a newer version of imovie.
Will the newer version of the application run with the older preference files for it.
Will the preference files be rewritten and if so will the old version of imovie be able to read those or will it try and rewrite them.
Will the project created with the old version of imovie be readable by the new version.
Will the new version of imovie update the project file and if so with the old version of imovie still be able to open it?
I seem to remember reading something about how panther wrote preference files for applications completely differently than tiger did, and if so then can I expect the same for leopard client written pref files.
As you can see I have lots of questions and if I can learn from other peoples experiences then I can go into this knowing a little bit on what I can expect and hopefully this wont be a big disaster.
Mark
SD34

Will the newer version of the application run with the older preference files for it.
While I dont know this for certain, I do know that when I did an archive and install (which copies the old preferences for applications as well as the apps themselves to the new system folder) things have worked fine. I think the preference-writing scheme depends on the individual program version, and minor updates to the program (ie: Safari 3.0.3b vs 3.0.4) shouldnt change this.
Will the preference files be rewritten and if so will the old version of imovie be able to read those or will it try and rewrite them.
When you modify any preferences the files will be rewritten. If the programs have similar versions then they should be fine. All preferences are written to the same directory (~/Library/Preferences/) so if the program versions are the same then the preferences will be written similarly.
Will the project created with the old version of imovie be readable by the new version.
I'm assuming you mean going from iMovie HD to iMovie '08. I've not done this personally, but as far as I know the files will import, but the transistions and other special effects that are only available in the older version of iMovie will be removed. The media files and sequences should be preserved.
Will the new version of imovie update the project file and if so with the old version of imovie still be able to open it?
I dont know about the old version of iMovie being able to import the new version's projects, but the new version will update the projects when you save it.
I seem to remember reading something about how panther wrote preference files for applications completely differently than tiger did, and if so then can I expect the same for leopard client written pref files.
I believe the writing of preference files usually depends on the individual application, not the system.

Leopard client (10.5.5) and Panther Server (10.3.9)

Hello everybody,
We are having issues with Leopard clients trying to login with their user accounts stored in an Open Directory Mac OS X 10.3.9 and remote home directories. The login is fine, but the clients are not allowed to reach the local Applications folder. The local admin user has not problem to do so, but remote OD users are not allowed.
Any explantion? Any solution?

Hi canuckeh and everybody else,
I actually have investigated the problem further and found out that the local ACL rules are creating problems to Open Directory Users. Using Sandbox, an application which makes ACL rules easily accessible to a nice GUI, could I see that Apple has applied a ACL rule to Application folder in the Leopard client, which says:
user/group name: group:everyone
Entry type: deny
Entry behavior: delete
Apparently this rule shouldn't create problems for "everyone" to reach the local applications. But it hasn't been the case. I deleted this rule from the Applications folder allowing only the POSIX permission to stay. Every single OD user can now reach the local applications. It solved the problem, but doesn't explain Apples bug. Why does this happen I am not able to explain.
Message was edited by: abraga

Leopard clients on Panther Server - locked files/folders

Similar Messages

Maybe you are looking for