Lion Server Problems Enrolling iPads - Certificate Error

I'm trying to set up a very basic internally managed iPad trolley, we have 16 iPads and a Lion Mac Mini Server.
Today was our first install day and I'm stuck with a couple of errors that I get on the iPads when I try to enroll them.
I've already gone through various threads and followed a few peoples advice on re-creating Open Directory + certs to no avail.
At the moment there are 2 certs that I can use - The first being the one that Profile Manager made when creating Open Directory and the second being a self signed cert that I created manually afterward. I get a different error depending on which cert I use.
The auto created OD one comes back with "Invalid Profile"
The self signed cert comes back with "The server certificate for "https://nhmacserver01.domainname.co.uk/devicemanagement/api/device/ota_service" is invalid.
As I don't have my SSL cert signed by 3rd party I have been installing the "Trust Profile" before Enrolling.
I have thoroughly checked DNS and all is okay on that front, is there anything else I could of overlooked here?
On the server the auto created OD cert comes up as trusted whereas the self signed one does not so I suspect that the auto created one is the way forward..
I am back on site again tomorrow so can post up any additional details that might give you guys a better idea of where i've got to.
Thanks a lot in advance,
Martin

Tried with a different CA certificate, and this solved the problem. It seems like the original CA certificate was the wrong one, and there was only one, expired client certificate which was attached to the CA. Since IE doesn't show you the selection box when there is only one certificate, I didn't see which client certificate was being used.
So in summary - problem solved...
Michael

Similar Messages

Many Lion Server Problems

I think I have run into most of the Lion Server issues mentioned so far and perhaps a few self inflicted new ones.
1) Upgrade from Snow Leopard worked except the migration failed. Naturally I did not have a backup of the server configuration.
2) Manual configuration has many problems related to the machine name. I was using a linux box for DNS and a private LAN DNS name space. My router is configured to forward many services to my OSX Server box. Somehow I could not configure Lion Mail to operate. The machine name, Internet name, local internet name, etc. are very confusing and different things happen depending upon using Server or Server Admin. In Snow Leopard I could use a command line utility to set the return mail address to my MX record but under Lion I had to eliminate the private LAN name space, configure Lion to be the DNS before I could get e-mail to operate correctly from both IMAP and WEB mail.
3) Once you attempt to use Open Directory the only way to correct a failed configuration is to re-install from scratch.
4) If LDAP and the Password process fail to launch then they ping on/off every 10 seconds forever. Only a re-install from scratch is the fix. When this happens it appears that the permissions on the boot drive are hopelessly broken. I do not mess with the permissions but now I am pondering a nightly permissions repair script.
5) Using self signed certificates seems to cause many problems. If I use them for the mail server everything is OK. If I use them for Open Directory I cannot seem to get the other systems to connect.
6) Under Snow Leopard I could see all users and their pictures on the remote Mac's. I can't find this on Lion.
7) Open Directory quit after a week of operation requiring a clean install from my backup. I turned off Reserve Server Resources. I hope this helps.
8) Timeouts on Lion seem to be infinite. Once one application falls into a timeout you eventually must power cycle the whole machine.
9) The first time a user users mail I have to force kill it and restart before it performs the initial configuration. This has happened 3 times so far.
10) Manually editing user permissions from Finder within the Admin account (i.e. correcting my old user directories to match my new user ID's) is an exercise in futility. Using the command line seems to be the only reliable way.
11) I still cannot get profiles to work but I am afraid to try because the server seems to fragile.
12) Carbon Copy Cloner is a required tool with Lion. As soon as you have something working, make a fresh backup so you do not have to redownload everything. I now make a nightly backup of the boot drive with CCC and cron.
13) Some settings only take affect on a reboot, when you are making/testing changes this causes an interesting phase delay between making a change and observing an effect.
My system is a Mac Mini with 8GB and 24TB of RAID storage on Firewire.
It hosts home directories, e-mail, wiki's, etc for my wife & kids. All data is on the Mini so the other macs at home are bare except for OS and Apps.
This upgrade has caused more trouble than all other system upgrades I have ever done. It is making me think seriously about making another stab at LDAP/OD on Linux for my home server.

You might want to take a look at the much more functional AirPort Utility 5.6 for Mac OS X Lion on a "test" Mac to see if that works better for you. Oddly, 5.6 was released on the same day as AirPort Utility 6.0.
You can keep both 5.6 and 6.0 on a Mac (You cannot delete 6.0).

Messaging Server: Problem Adding SSL Certificate

We have a problem importing a CA certificate into Messaging Server 7 on Solaris 10 x86.
Platform
uname -a
SunOS mail1 5.10 Generic_138889-03 i86pc i386 i86pcMessaging Server Version
imsimta version
Sun Java(tm) System Messaging Server 7.0-3.01 64bit (built Dec 9 2008)
libimta.so 7.0-3.01 64bit (built 09:24:13, Dec 9 2008)We have created a certificate database and generated a certificate request, as follows:
msgcert generate-certDB
msgcert request-cert --name mail.domain.xxx --org "University of XXX" --org-unit ITS --city XXX --state "XXX" --country GB -F ascii -o /tmp/ssl.csrHowever, when we come to import the CA-supplied certificate we get the following error.
msgcert add-cert Server-Cert /tmp/mail1.crt
Enter the certificate database password:
Unable to find private key for this certificate.
Failed to add the certificate.I'm confused. What does the msgcert request-cert command use as a private key when generating the certificate request? Should I have used openssl to generate the certificate request with a known private key?
Thanks
Alan

I solved the problem by converting certificate to pkcs#12 format and importing it.
openssl pkcs12 -export -in cert.pem -inkey private.key -out cert.pkcs12 -name Server-Cert
/opt/sun/comms/messaging64/bin/msgcert add-cert Server-Cert cert.pkcs12Alan

31.3.0 hangs when connecting to my IMAPS server (problem with intermediate certificates or SSL in general?).

After update to 31.3.0 Thunderbird hangs when connecting to IMAPS server aie.de (intermediate certificates in chain). No error message is given, Thunderbird just hangs with out updating the subject lines of the inbox.

It is a configuration problem of the courier imap ssl daemon, resolution is shown [http://xf.wiki.mithi.com/index.php/Error_observed_in_/var/log/messages_log,_imapd:_couriertls:_accept:_error:1408F10B:SSL_routines:SSL3_GET_RECORD:wrong_version_number#Resolution here]

Best practice for licence server for RDS Farm & Certificate errors

Hello,
I am in the process of creating an RDS farm using Server 2008 R2. I have three Session Hosts and a Connection Broker.
I have a set of 10 user CALs available and also another 20 on our current RDS server which will need migrating once we go live with the farm.
I understand the User CALs need to be installed on another Server 2008 R2 and I am wondering what is best practice. We are running on an entirely virtual environment and it would be simple enough to create another server and install the CALs on there.
The only issue with that is that I would need to create a replica of this new machine for DR purposes, but this would take up valuable space which may not be necessary.
We are planning on creating replicas of one of the Session hosts and the broker for DR, so I am guessing I would need to install some CALs on the Session Host which is going to be replicated.
There are a few options and I am just wondering what is the best way to go about things.
Also, as an aside, I am getting an annoying certificate error each time I log a test user onto the RDS farm - I think this is because I am using the DNS alias of the RDS Farm to log on. Is there an easy way to get around this, other than the 'Do not show
this message again'. I have been doing some research and the world of Certificates is very confusing!!
Thanks,
Caroline
C.Rafferty

Hi Caroline,
Firstly for your License related issue, you can perform the step on any VM or can create the new VM as replica for RDSH server also. But please be sure that you have installed RD License server on it, activate it and then install RDS CAL on it. But be safe
if possible don’t install RD License server with RDCB, please make that out of it as little away. As you can also install RD License server with AD or make replica of that and install RDL on that.
Best practices for setting up Remote Desktop Licensing (Terminal Server Licensing) across Active Directory Domains/Forests or Workgroup
http://support.microsoft.com/kb/2473823
What’s the specified certificate error which you are receiving?
If you're going to allow users to connect externally and they will not be part of your domain, you would need to deploy certificates from a public CA. In meantime you can refer blog for getting insight for certificate case.
Certificate Requirements for Windows 2008 R2 and Windows 2012 Remote Desktop Services
http://blogs.technet.com/b/askperf/archive/2014/01/24/certificate-requirements-for-windows-2008-r2-and-windows-2012-remote-desktop-services.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Lion Server problem - Computer is already a network directory server

So I purchased Lion Server to trial it at home and it is not going well. Initially I was having issues connecting to the web interfaces for profile manager, etc. The server was not responding and so I uninstalled server and reinstalled it from the Mac Store (FYI: Apple has charged me for the OS and the server app as a result of this for some reason!!!)
With Server reinstalled I went to set up the server as a network directory and am shown this message every time I try to set up the directory admin account: "Computer is already a network directory server - This computer is already configured to manage network accounts. It cannot be configured again."
This leaves me unable to set up any profile or device management, I have tried the following solutions:
Uninstall and reinstall server
Deleted ServerVersion plist
Reinstalled Lion
Reinstalled Lion with format of HDD (although I did recover from a Time Machine Backup which included settings)
Any help would be appreciated.

Sorry I copied the wrong log.
What is happening is the Open Directory Assistant attempts to create and Open Directory Master but fails claiming there was a configuration error and to view the configuration log which I have copied below.
2011-07-28 19:57:45 +0000 command: /usr/bin/ldapmodify -c -x -H ldapi://%2Fvar%2Frun%2Fldapi
2011-07-28 19:57:45 +0000 command: /usr/bin/ldapsearch -x -LLL -H ldapi://%2Fvar%2Frun%2Fldapi -b cn=config -s base olcServerID
2011-07-28 19:57:45 +0000 command: /usr/bin/ldapmodify -c -x -H ldapi://%2Fvar%2Frun%2Fldapi
2011-07-28 19:57:45 +0000 command: /usr/sbin/mkpassdb -o -u diradmin -p -q
2011-07-28 19:57:46 +0000
2011-07-28 19:57:48 +0000 command: /usr/sbin/mkpassdb -setadmin 0xdc9dacf8b95311e0b494d49a20d93acc 0
2011-07-28 19:57:48 +0000 Admin's entry UUID is: 9134bc0a-a748-4161-b6b2-53c136b933b9
2011-07-28 19:57:48 +0000 Setting SASL realm to <SERVER.FREEMAN.PRIVATE>
2011-07-28 19:57:48 +0000 command: /usr/sbin/mkpassdb -setrealm SERVER.FREEMAN.PRIVATE
2011-07-28 19:57:48 +0000 command: /bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.PasswordService.plist
2011-07-28 19:57:49 +0000 Stopping LDAP server (slapd)
2011-07-28 19:57:52 +0000 Starting LDAP server (slapd)
2011-07-28 19:57:52 +0000 Waiting for slapd to start
2011-07-28 19:57:52 +0000 ...
2011-07-28 19:57:54 +0000 Configuring Kerberos server, realm is SERVER.FREEMAN.PRIVATE
2011-07-28 19:57:54 +0000 command: /usr/sbin/kdcsetup -f /LDAPv3/ldapi://%2Fvar%2Frun%2Fldapi -w -a diradmin -p **** -v 1 SERVER.FREEMAN.PRIVATE
2011-07-28 19:58:18 +0000 Contacting the Directory Server
Authenticating to the Directory Server
Creating Kerberos directory
Creating KDC Config File
Creating Kerberos Database
Creating new random master key
Creating Kerberos Admin user
Creating ACL file
Adding kerberos auth authority to admin user
Starting kdc & kadmind
Adding the new KDC into the KerberosClient config record
Finished
2011-07-28 19:58:18 +0000 command: /usr/sbin/kdcsetup -e
2011-07-28 19:58:18 +0000 command: /usr/sbin/sso_util configure -x -r SERVER.FREEMAN.PRIVATE -f /LDAPv3/ldapi://%2Fvar%2Frun%2Fldapi -a diradmin -p **** -v 1 all
2011-07-28 19:58:19 +0000 command: /usr/sbin/mkpassdb -kerberize
2011-07-28 19:58:19 +0000 Updating user records and principals
2011-07-28 19:58:34 +0000 Asking OpenDirectoryConfig to bind to server: 127.0.0.1
2011-07-28 19:58:38 +0000 Attempting to open /LDAPv3/127.0.0.1 node
2011-07-28 19:58:38 +0000 Verified /LDAPv3/127.0.0.1 node is available
2011-07-28 19:58:40 +0000 command: /usr/sbin/sso_util info -r /LDAPv3/127.0.0.1 -p
2011-07-28 19:58:40 +0000 Creating Root CA
2011-07-28 19:58:41 +0000 ***Error creating domain CA. Error - The specified item already exists in the keychain.
2011-07-28 19:58:41 +0000 Root CA creation failed with error - -25299
2011-07-28 19:58:41 +0000 Destroying OD master as CA creation failed with error 75
2011-07-28 19:58:41 +0000 Logging slapd container data to /var/run/slapconfig_error_1311883121
2011-07-28 19:58:41 +0000 Stopping LDAP server (slapd)
2011-07-28 19:58:44 +0000 command: /usr/sbin/slapcat -l /var/run/slapconfig_error_1311883121/user.ldif
2011-07-28 19:58:44 +0000 command: /usr/sbin/slapcat -b cn=authdata -l /var/run/slapconfig_error_1311883121/authdata.ldif
2011-07-28 19:58:45 +0000 Error retrieving kerberos realm
2011-07-28 19:58:45 +0000 CopyReplicaArray: ldap_search_ext_s failed
2011-07-28 19:58:45 +0000 Error retrieving replica array
2011-07-28 19:58:45 +0000 command: /bin/launchctl unload -w /System/Library/LaunchDaemons/com.apple.opendirectorybackup.plist
2011-07-28 19:58:45 +0000 Deleting Cert Authority related data
2011-07-28 19:58:45 +0000 No intCAIdentity, not removing int CA from keychain
2011-07-28 19:58:45 +0000 command: /bin/launchctl unload -w /System/Library/LaunchDaemons/com.apple.xscertd.plist
2011-07-28 19:58:45 +0000 command: /bin/launchctl unload -w /System/Library/LaunchDaemons/com.apple.xscertd-helper.plist
2011-07-28 19:58:45 +0000 command: /bin/launchctl unload -w /System/Library/LaunchDaemons/com.apple.xscertadmin.plist
2011-07-28 19:58:45 +0000 _destroyLDAPServer: Failed to find computer record named server.freeman.private$: 2100 Connection failed to the directory server.
2011-07-28 19:58:45 +0000 Updating ldapreplicas on primary master
2011-07-28 19:58:45 +0000 Unable to locate primary master
2011-07-28 19:58:45 +0000 Primary master node is nil!
2011-07-28 19:58:45 +0000 Unable to locate ldapreplicas record: 0 (null)
2011-07-28 19:58:45 +0000 Error setting read ldap replicas array: 0 (null)
2011-07-28 19:58:45 +0000 Error setting write ldap replicas array: 0 (null)
2011-07-28 19:58:45 +0000 Could not retrieve xmlplist from ldapreplicas: 0 (null)
2011-07-28 19:58:45 +0000 Error synchronizing ldapreplicas: 0 (null)
2011-07-28 19:58:45 +0000 Removing self from the database
2011-07-28 19:58:45 +0000 Warning: An error occurred while re-enabling GSSAPI.
2011-07-28 19:58:45 +0000 Stopping LDAP server (slapd)
2011-07-28 19:58:46 +0000 cleanKeytab: unable to retrieve default realm

Lion server erased self signed certificate

Help!!! I accidentally deleted the self signed certificate that had the right keys for my third party SSL. Now I cannot replace the self signed certificate with the new SSL. Now what????

I will begin my answer by making an emphasis that the best way to protect your data in-transit is using a 2048 bit certificate signed by a trusted certificate authority (CA) instead of relying on the self-signed certificate created by SQL Server.
Please remember that the self-signed certificate created by SQL Server usage for data in-transit protection was designed as a mitigation against passive traffic sniffers that could potentially obtain SQL Server credentials being transmitted
in cleartext, but nothing more. Think of it as a mitigation against a casual adversary.
The self-signed certificate usage was not intended to replace real data in-transit protection using a certificate signed by a trusted CA and encrypting the whole communication channel. Remember, if it is self-signed, it is trivial to spoof.
After making this clarification, the self-signed certificate generated by SQL Server uses a 1024 bit key, but that size may be subject to change in future versions of the product. Once again, I would like to strongly discourage relying on the self-signed
certificate created by SQL Server for data in transit transmission.
BTW. Azure SQL Database uses a 2048 certificate issued by a valid certificate authority.
I hope this information helps,
-Raul Garcia
SQL Server Security
This posting is provided "AS IS" with no warranties, and confers no rights.

VPN to Mountain Lion Server issues

Hi,
I checked a lot of VPN threads here today, but I wasn't able to find a solution for my problem just now. I try to connect by VPN to my Mountain Lion Server, but I get an error message that the VPN server is not responding. I get this message from iPhone and Mac. The Mountain Lion Server is a new installation, no upgrade from an older server.
Some informations on my setup:
I installed the server with a hostname like myserver.mycompany.com and option 3 (internet access), as I want to use it for email at a later stage. All services are working fine (except VPN). DNS is active, but basically it only contains the adress myserver.mycompany.com and forwards everything else to our router.
I changed the DNS settings of our domain ( hosted by an ISP - so not in the local DNS ! ). I created a subdomain vpn.mycompany.com which points to the static IP of our router.
In the router I opened the UDP ports 500, 1701 and 4500, and for 1701 i made the same thing for TCP (I found this in a forum, but I think this is not necessary?), the ports are pointing to the ip of the os x server.
In OS X Server I started VPN for L2TP using the vpn.mycompany.com hostname, and a shared secret.
When I try to connect with I client from outside I try to connect using L2TP via vpn.mycompany.com using the shared secred and user-id and password. The user-id is created in OS X Mountain Lion server and is configured to use VPN service. When trying to connect I get the error message "L2TP-VPN server is not repsonding...".
In the log file of the server I see some entries for each connect:
Oct 10 20:21:45 myserver.mycompany.com racoon[13873]: Connecting.
Oct 10 20:21:45 myserver.mycompany.com racoon[13873]: IPSec Phase1 started (Initiated by peer).
Oct 10 20:21:45 myserver.mycompany.com racoon[13873]: IKE Packet: receive success. (Responder, Main-Mode message 1).
Oct 10 20:21:45 myserver.mycompany.com racoon[13873]: IKE Packet: transmit success. (Responder, Main-Mode message 2).
Oct 10 20:21:45 myserver.mycompany.com racoon[13873]: IKE Packet: receive success. (Responder, Main-Mode message 3).
Oct 10 20:21:45 myserver.mycompany.com racoon[13873]: IKE Packet: transmit success. (Responder, Main-Mode message 4).
Oct 10 20:21:48 myserver.mycompany.com racoon[13873]: IKE Packet: transmit success. (Phase1 Retransmit).
Oct 10 20:22:06 --- last message repeated 2 times ---
Oct 10 20:22:06 myserver.mycompany.com com.apple.SecurityServer[17]: Succeeded authorizing right 'system.privilege.admin' by client '/Applications/Server.app/Contents/ServerRoot/usr/libexec/ServerEventAgent' [2967] for authorization created by '/Applications/Server.app/Contents/ServerRoot/usr/libexec/ServerEventAgent' [2967] (2,0)
Oct 10 20:22:06 myserver.mycompany.com com.apple.SecurityServer[17]: Succeeded authorizing right 'system.privilege.admin' by client '/Library/PrivilegedHelperTools/com.apple.serverd' [1716] for authorization created by '/Applications/Server.app/Contents/ServerRoot/usr/libexec/ServerEventAgent' [2967] (100000,0)
Oct 10 20:22:06 myserver.mycompany.com racoon[13873]: IKE Packet: transmit success. (Phase1 Retransmit).
No more entries in log file now. Anyone any ideas what's going wrong. Might there be a problem as I use another servername outside as inside (vpn... instead of myserver...)?
Thanks!

Solved, first of all we tested to establish the VPN connection locally by adding the ip address of the server to /etc/hosts for vpn.mycompany.com. The VPN connected without problems then, so it was clear that it is a firewall/router problem, and not a server problem.
After that we studied some more documentations and found that we don't have to open port 50, but ip protocoll 50 (ESP) on the firewall. After that was done, the connection was working from the internet as well.

Fresh Install of Mountain Lion how do I export users from Lion Server

I've been having some issues with Lion Server, mainly Kerberos related and Profile Manager. So I want to start fresh with Mountain Lion.
I've installed ML and Server, and profile manager is working now for the first time (yay!)
Now I want to Import all my existing Open Directory users from Lion, I don't want to Import the entire OD though because I think some of my kerberos issues will just get carried over to ML.
I would like to just export the Users to a file then use ML server to import users from file, but I can't see an option to export in Lion Server, I have tried doing it from WGM on Lion but the 'users' file is not recognised by ML server

Great thanks for the reply, I'll try it tonight when everyone has logged off.
Yeah I was very pleased initially with kerberos on Lion, it worked great to start with, now I'm just getting expired tickets for a default realm when some users log in, yet other users continue to work fine.
I was planning to slowly install Mountain Lion Server and test is thouroghly but I've had a bit of a disaster that if forcing me to go live with ML server quicker than I wanted to!
Basically because on Lion Server I have all the Service Data on a separate drive, and I upgraded to ML server on a backup copy of Lion Server just to see what it was like, though now I've rebooted the original Lion drive but half of the services are now screwwed up because the ML Server must have changed them, so things like Wiki Server and Profile Manager are now broken from the Lion Server boot, they just show "Error Reading Settings"
I realise now I should have moved the Service data back to the local drive before doing a test upgrade so I wouldn't have messed it up! but now it seems like my best way forward is a fresh install of ML Server

Lion server vs lion desktop

I'm in need of the Profile Manager from Lion Server for administering iPads in our environment.
I understand that to do this really well within the environment, I'll need to be able to have a static IP and I will be able to arrange that.
My question is more about what I may lose on my macbook if I go ahead and bump the OS to Lion Server instead of Desktop. The biggies on my machine for usage are, of course, iTunes, Parallels, logmein, evernote, MS Office, Garage Band, Logic, iMovie, etc.
What negative impacts am I in for if I move to server on this machine?
Alternately, is there any way I can make a true, cheap OTA Profile Manager (a la MDM) on a Lion Desktop or even a windows desktop or server? I can't be spending a lot on this, but I could certainly afford Lion Server (but not a dedicated new machine for it).
Thanks ahead...

You won't lose anything from a desktop or client standpoint - any app you can run in Lion (client) you can run on Lion Server. The major difference is the addition of the server-based apps, some networking tweaks, and a minimal performance hit if you have clients fedeing off your Mac at the same time you're trying to use it (the same issue when running any background task, really).

How do i install mysql on my mac mini lion server?

How do i install mysql on my mac mini lion server?

I have this error log
May 27 07:06:35 server servermgrd[13454]: -[AccountsRequestHandler(AccountsSystemConfigurationObservation) registerForKeychainEventNotifications]: SecKeychainAddCallback() status: -25297
May 27 07:06:35 server servermgrd[13454]: servermgr_ipfilter:ipfw config:Notice:Flushed IPv4 rules
May 27 07:06:35 server servermgrd[13454]: servermgr_ipfilter:ipfw config:Notice:Flushed IPv6 rules
May 27 07:10:35 server servermgrd[13454]: No requests in 300 seconds, shutting down
May 27 07:20:29 server ScreensharingAgent[13999]: [CL_INVALID_DEVICE] : OpenCL Error : Failed to create context! Invalid device
May 27 07:26:03 server login[14203]: USER_PROCESS: 14203 ttys000
May 27 07:26:42 server SafariDAVClient[14233]: ServerNotifications: Setting delegate to APSD
May 27 07:26:43 server SafariDAVClient[14233]: Subscription request completed
May 27 07:27:58 server SafariDAVClient[14284]: ServerNotifications: Setting delegate to APSD
May 27 07:27:59 server SafariDAVClient[14284]: Subscription request completed
May 27 07:29:03 server login[14203]: DEAD_PROCESS: 14203 ttys000
May 27 07:29:09 server login[14331]: USER_PROCESS: 14331 ttys000
May 27 07:47:30 server com.mysql.mysqld[15000]: 120527 07:47:30 mysqld_safe Logging to '/usr/local/mysql/data/server.martinhedegaard.dk.err'.
May 27 07:47:30 server com.apple.launchd[1] (0x7f82db634810.anonymous.nohup[15222]): Bug: launchd_core_logic.c:9394 (25693):0
May 27 07:47:30 server com.apple.launchd[1] (0x7f82db634810.anonymous.nohup[15222]): Switching sessions is not allowed in the system Mach bootstrap.
May 27 07:47:30 server com.apple.launchd[1] (0x7f82db634810.anonymous.nohup[15222]): _vprocmgr_switch_to_session(): kr = 0x44c
May 27 07:47:30 server com.apple.launchd[1] (0x7f82dc9015d0.anonymous.nohup[15223]): Bug: launchd_core_logic.c:9394 (25693):0
May 27 07:47:30 server com.apple.launchd[1] (0x7f82dc9015d0.anonymous.nohup[15223]): Switching sessions is not allowed in the system Mach bootstrap.
May 27 07:47:30 server com.apple.launchd[1] (0x7f82dc9015d0.anonymous.nohup[15223]): _vprocmgr_switch_to_session(): kr = 0x44c
May 27 07:47:30 server com.mysql.mysqld[15000]: 120527 07:47:30 mysqld_safe Starting mysqld daemon with databases from /usr/local/mysql/data
May 27 07:48:31 server Safari[541]: IPCClient: Server port 0 is invalid; looking it up again...
May 27 09:06:34 server servermgrd[18040]: -[AccountsRequestHandler(AccountsSystemConfigurationObservation) registerForKeychainEventNotifications]: SecKeychainAddCallback() status: -25297
May 27 09:06:35 server servermgrd[18040]: servermgr_ipfilter:ipfw config:Notice:Flushed IPv4 rules
May 27 09:06:35 server servermgrd[18040]: servermgr_ipfilter:ipfw config:Notice:Flushed IPv6 rules
May 27 09:09:01 server ScreensharingAgent[18184]: [CL_INVALID_DEVICE] : OpenCL Error : Failed to create context! Invalid device
May 27 09:09:08 server SafariDAVClient[18193]: ServerNotifications: Setting delegate to APSD
May 27 09:09:09 server SafariDAVClient[18193]: Subscription request completed
May 27 09:10:34 server servermgrd[18040]: No requests in 300 seconds, shutting down
May 27 09:29:44 server System Preferences[581]: about to perform command
May 27 09:29:48 server com.mysql.mysqld[15000]: 120527 09:29:48 mysqld_safe mysqld from pid file /usr/local/mysql/data/server.martinhedegaard.dk.pid ended
May 27 09:29:48 server com.mysql.mysqld[19056]: 120527 09:29:48 mysqld_safe Logging to '/usr/local/mysql/data/server.martinhedegaard.dk.err'.
May 27 09:29:48 server com.apple.launchd[1] (0x7f82db62da20.anonymous.nohup[19280]): Bug: launchd_core_logic.c:9394 (25693):9
May 27 09:29:48 server com.apple.launchd[1] (0x7f82db62da20.anonymous.nohup[19280]): Switching sessions is not allowed in the system Mach bootstrap.
May 27 09:29:48 server com.apple.launchd[1] (0x7f82db62da20.anonymous.nohup[19280]): _vprocmgr_switch_to_session(): kr = 0x44c
May 27 09:29:48 server com.apple.launchd[1] (0x7f82dc800da0.anonymous.nohup[19281]): Bug: launchd_core_logic.c:9394 (25693):0
May 27 09:29:48 server com.apple.launchd[1] (0x7f82dc800da0.anonymous.nohup[19281]): Switching sessions is not allowed in the system Mach bootstrap.
May 27 09:29:48 server com.apple.launchd[1] (0x7f82dc800da0.anonymous.nohup[19281]): _vprocmgr_switch_to_session(): kr = 0x44c
May 27 09:29:48 server com.mysql.mysqld[19056]: 120527 09:29:48 mysqld_safe Starting mysqld daemon with databases from /usr/local/mysql/data
May 27 09:29:49 server System Preferences[581]: status= 0
May 27 09:29:49 server System Preferences[581]: stat /usr/local/mysql/data
May 27 09:33:54 server login[14331]: DEAD_PROCESS: 14331 ttys000
May 27 09:34:12 server com.apple.launchd.peruser.501[456] (com.apple.talagent[494]): Exited: Killed: 9
May 27 09:34:12 server com.apple.launchd.peruser.501[456] ([0x0-0x3a03a].com.apple.AppleSpell[15293]): Exited: Killed: 9
May 27 09:34:12 server com.apple.launchd.peruser.501[456] (com.apple.mdworker.pool.0[18053]): Exited: Terminated: 15
May 27 09:34:12 server loginwindow[98]: DEAD_PROCESS: 98 console
May 27 09:34:12 server com.apple.dock.extra[19467]: Could not connect the action buttonPressed: to target of class NSApplication
May 27 09:34:12 server com.apple.dock.extra[19467]: 2012-05-27 09:34:12.356 com.apple.dock.extra[19467:1707] Could not connect the action buttonPressed: to target of class NSApplication
May 27 09:34:12 server com.apple.dock.extra[19467]: Could not connect the action buttonPressed: to target of class NSApplication
May 27 09:34:12 server com.apple.dock.extra[19467]: 2012-05-27 09:34:12.357 com.apple.dock.extra[19467:1707] Could not connect the action buttonPressed: to target of class NSApplication
May 27 09:34:12 server com.apple.dock.extra[19467]: Could not connect the action buttonPressed: to target of class NSApplication
May 27 09:34:12 server com.apple.dock.extra[19467]: 2012-05-27 09:34:12.357 com.apple.dock.extra[19467:1707] Could not connect the action buttonPressed: to target of class NSApplication
May 27 09:34:12 server com.apple.dock.extra[19467]: Could not connect the action buttonPressed: to target of class NSApplication
May 27 09:34:12 server com.apple.dock.extra[19467]: 2012-05-27 09:34:12.358 com.apple.dock.extra[19467:1707] Could not connect the action buttonPressed: to target of class NSApplication
May 27 09:34:12 server shutdown[19471]: reboot by martinhedegaard:
May 27 09:34:12 server shutdown[19471]: SHUTDOWN_TIME: 1338104052 753955
rc.server[ 8 ]: Tuning server for 4 GB (rounded down).
May 27 09:34:22 localhost bootlog[0]: BOOT_TIME 1338104062 0
May 27 09:34:33 localhost UserEventAgent[30]: starting CaptiveNetworkSupport as SystemEventAgent built May 25 2011 12:27:35
May 27 09:34:33 localhost UserEventAgent[30]: CertsKeychainMonitor: configuring
May 27 09:34:33 localhost UserEventAgent[30]: WirelessAirPortDeviceNameCopy(): no BSD interface name found for object 12551
May 27 09:34:33 localhost UserEventAgent[30]: CaptiveNetworkSupport:CaptiveSCCopyWiFiDevices:388 WiFi Device Name == NULL
May 27 09:34:23 localhost com.apple.launchd[1]: *** launchd[1] has started up. ***
May 27 09:34:32 localhost com.apple.launchd[1] (com.apple.powerd): Unknown value for key POSIXSpawnType: Interactive
May 27 09:34:32 localhost com.apple.launchd[1] (com.apple.sandboxd): Unknown value for key POSIXSpawnType: Interactive
May 27 09:34:32 localhost com.apple.launchd[1] (com.apple.xgridd.pcastserver): Bug: launchd_core_logic.c:5193 (25693):2
May 27 09:34:32 localhost com.apple.launchd[1] (com.apple.xgridd.pcastserver): Path monitoring failed on "/var/pcast/server/xgridd/keepalive": No such file or directory
May 27 09:34:36 localhost airportd[47]: _processDLILEvent: en1 attached (down)
May 27 09:34:36 localhost mDNSResponder[31]: mDNSResponder mDNSResponder-320.16 (Mar 17 2012 21:31:16) starting OSXVers 11
May 27 09:34:36 localhost UserEventAgent[30]: CaptiveNetworkSupport:CreateInterfaceWatchList:2788 WiFi Devices Found.
May 27 09:34:36 localhost UserEventAgent[30]: CaptiveNetworkSupport:CaptivePublishState:1211 en1 - PreProbe
May 27 09:34:36 localhost UserEventAgent[30]: CaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
May 27 09:34:36: --- last message repeated 1 time ---
May 27 09:34:36 localhost UserEventAgent[30]: CaptiveNetworkSupport:CaptivePublishState:1211 en1 - PreProbe
May 27 09:34:36 localhost UserEventAgent[30]: CaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
May 27 09:34:36: --- last message repeated 1 time ---
May 27 09:34:36 localhost UserEventAgent[30]: CaptiveNetworkSupport:CaptivePublishState:1211 en1 - PreProbe
May 27 09:34:37 server configd[35]: setting hostname to "server.martinhedegaard.dk"
May 27 09:34:37 server configd[35]: network configuration changed.
May 27 09:34:40 server systemkeychain[52]: done file: /var/run/systemkeychaincheck.done
May 27 09:34:40 server configd[35]: network configuration changed.
May 27 09:34:40: --- last message repeated 1 time ---
May 27 09:34:40 server mDNSResponder[31]: D2D_IPC: Loaded
May 27 09:34:40 server mDNSResponder[31]: D2DInitialize succeeded
May 27 09:34:40 server com.apple.ucupdate.plist[83]: ucupdate: Checked 1 update, no match found.
May 27 09:34:40 server com.apple.pfctl[92]: No ALTQ support in kernel
May 27 09:34:40 server com.apple.pfctl[92]: ALTQ related functions disabled
HeadlessStartup: Already setup or this is an upgrade so we will not set the password.
May 27 09:34:40 server emond[108]: SetUpLogs: uid = 0 gid = 0
May 27 09:34:40 server named[78]: starting BIND 9.7.3-P3 -f
May 27 09:34:40 server named[78]: built with '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--disable-dependency-tracking' '--prefix=/usr' '--sysconfdir=/private/etc' '--localstatedir=/private/var' '--enable-atomic=no' '--with-openssl=yes' '--with-gssapi=yes' '--enable-symtable=none' 'CFLAGS=-arch x86_64 -arch i386 -g -Os -pipe -gdwarf-2 -D__APPLE_USE_RFC_2292' 'LDFLAGS=-arch x86_64 -arch i386 ' 'CXXFLAGS=-arch x86_64 -arch i386 -g -Os -pipe '
May 27 09:34:40 server emond[108]: SetUpLogs: opening /Library/Logs/EventMonitor/EventMonitor.error.log
May 27 09:34:40 server com.apple.SystemStarter[84]: Starting MySQL database server
May 27 09:34:40 server loginwindow[97]: Login Window Application Started
May 27 09:34:40 server com.apple.usbmuxd[82]: usbmuxd-268.5 on Jan 5 2012 at 03:34:01, running 64 bit
May 27 09:34:40 server UserEventAgent[30]: WebUserEventAgent: installed
May 27 09:34:42 server UserEventAgent[30]: Registered Workstation service - Wellness Guiden Server [3c:07:54:72:75:94]._workstation._tcp.
May 27 09:34:43 server PasswordService[93]: -[PasswordServerPrefsObject getSearchBase]: Unable to locate search base: -1 Can't contact LDAP server
May 27 09:34:43 server PasswordService[93]: -[PasswordServerPrefsObject loadXMLData]: Unable to locate passwordserver config record's plist attribute: -1 Can't contact LDAP server
May 27 09:34:43 server PasswordService[93]: -[PasswordServerPrefsObject getSearchBase]: Unable to locate search base: -1 Can't contact LDAP server
May 27 09:34:43 server PasswordService[93]: -[PasswordServerPrefsObject saveXMLData]: ldap_modify_ext_s of the passwordserver config record's plist attribute: -1 Can't contact LDAP server
May 27 09:34:43 server named[78]: command channel listening on 127.0.0.1#54
May 27 09:34:43 server mds[95]: (Normal) FMW: FMW 0 0
May 27 09:34:44 server com.mysql.mysqld[117]: 120527 09:34:44 mysqld_safe Logging to '/usr/local/mysql/data/server.martinhedegaard.dk.err'.
May 27 09:34:44 server com.apple.launchd[1] (0x7f82db403900.anonymous.nohup[359]): Bug: launchd_core_logic.c:9394 (25693):2
May 27 09:34:44 server com.apple.launchd[1] (0x7f82db403900.anonymous.nohup[359]): Switching sessions is not allowed in the system Mach bootstrap.
May 27 09:34:44 server com.apple.launchd[1] (0x7f82db403900.anonymous.nohup[359]): _vprocmgr_switch_to_session(): kr = 0x44c
May 27 09:34:44 server com.apple.launchd[1] (0x7f82db62bfd0.anonymous.nohup[360]): Bug: launchd_core_logic.c:9394 (25693):0
May 27 09:34:44 server com.apple.launchd[1] (0x7f82db62bfd0.anonymous.nohup[360]): Switching sessions is not allowed in the system Mach bootstrap.
May 27 09:34:44 server com.apple.launchd[1] (0x7f82db62bfd0.anonymous.nohup[360]): _vprocmgr_switch_to_session(): kr = 0x44c
May 27 09:34:44 server com.mysql.mysqld[117]: 120527 09:34:44 mysqld_safe Starting mysqld daemon with databases from /usr/local/mysql/data
May 27 09:34:44 server com.apple.launchd[1] (0x7f82dd0023b0.anonymous.nohup[620]): Bug: launchd_core_logic.c:9394 (25693):0
May 27 09:34:44 server com.apple.launchd[1] (0x7f82dd0023b0.anonymous.nohup[620]): Switching sessions is not allowed in the system Mach bootstrap.
May 27 09:34:44 server com.apple.launchd[1] (0x7f82dd0023b0.anonymous.nohup[620]): _vprocmgr_switch_to_session(): kr = 0x44c
May 27 09:34:44 server com.apple.launchd[1] (0x7f82dd0023b0.anonymous.nohup[621]): Bug: launchd_core_logic.c:9394 (25693):0
May 27 09:34:44 server com.apple.launchd[1] (0x7f82dd0023b0.anonymous.nohup[621]): Switching sessions is not allowed in the system Mach bootstrap.
May 27 09:34:44 server com.apple.launchd[1] (0x7f82dd0023b0.anonymous.nohup[621]): _vprocmgr_switch_to_session(): kr = 0x44c
May 27 09:34:45 server freshclam[79]: Can't query current.cvd.clamav.net
May 27 09:34:45 server freshclam[79]: Invalid DNS reply. Falling back to HTTP mode.
May 27 09:34:46 server freshclam[79]: Can't get information about database.clamav.net: nodename nor servname provided, or not known
May 27 09:34:46 server freshclam[79]: Can't read main.cvd header from database.clamav.net (IP: )
May 27 09:34:47 server rpcsvchost[660]: sandbox_init: com.apple.msrpc.netlogon.sb succeeded
May 27 09:34:47 server configd[35]: network configuration changed.
May 27 09:34:48 server servermgrd[88]: servermgr_accounts: noteDirectorySearchPolicyChanged (reopening nodes)
May 27 09:34:49 server ntpd[77]: proto: precision = 1.000 usec
May 27 09:34:50 server loginwindow[97]: **DMPROXY** Found `/System/Library/CoreServices/DMProxy'.
May 27 09:34:50 server com.apple.launchctl.LoginWindow[673]: com.apple.findmymacmessenger: Already loaded
May 27 09:34:50 server loginwindow[97]: Login Window Started Security Agent
May 27 09:34:50 server SecurityAgent[682]: Echo enabled
May 27 09:34:51 server WindowServer[143]: kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
May 27 09:34:51 server freshclam[79]: Current functionality level = 61, recommended = 63
May 27 09:34:53 server ScreensharingAgent[695]: [CL_INVALID_DEVICE] : OpenCL Error : Failed to create context! Invalid device
May 27 09:34:54 server screensharingd[694]: 3891612: (connectAndCheck) Untrusted apps are not allowed to connect to or launch Window Server before login.
May 27 09:34:54 server screensharingd[694]: kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
May 27 09:35:10 server sandboxd[713] ([712]): xscertd(712) deny job-creation
May 27 09:35:10 server UserEventAgent[30]: CertsKeychainMonitor: ready to process keychain & timer events
May 27 09:35:48 server servermgrd[88]: getting service list
May 27 09:35:49 server servermgrd[88]: servermgr_ipfilter:ipfw config:Notice:Flushed IPv4 rules
May 27 09:35:49 server servermgrd[88]: servermgr_ipfilter:ipfw config:Notice:Flushed IPv6 rules
May 27 09:36:08 server SecurityAgent[682]: User info context values set for martinhedegaard
May 27 09:36:08 server SecurityAgent[682]: Login Window login proceeding
May 27 09:36:08 server loginwindow[97]: Login Window - Returned from Security Agent
May 27 09:36:08 server loginwindow[97]: USER_PROCESS: 97 console
May 27 09:36:08 server com.apple.launchd.peruser.501[703] (com.apple.ReportCrash): Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self
May 27 09:36:08 server com.apple.launchctl.Aqua[757]: load: option requires an argument -- D
May 27 09:36:08 server com.apple.launchctl.Aqua[757]: usage: launchctl load [-wF] [-D <user|local|network|system|all>] paths...
May 27 09:36:09 server com.apple.launchd.peruser.501[703] (com.apple.launchctl.Aqua[757]): Exited with code: 1
May 27 09:36:09 server ScreensharingAgent[773]: [CL_INVALID_DEVICE] : OpenCL Error : Failed to create context! Invalid device
May 27 09:36:09 server UserEventAgent[30]: CaptiveNetworkSupport:CNSServerRegisterUserAgent:187 new user agent port: 17183
May 27 09:36:10 server com.apple.dock.extra[802]: Could not connect the action buttonPressed: to target of class NSApplication
May 27 09:36:10 server com.apple.dock.extra[802]: 2012-05-27 09:36:10.163 com.apple.dock.extra[802:1707] Could not connect the action buttonPressed: to target of class NSApplication
May 27 09:36:10 server com.apple.dock.extra[802]: Could not connect the action buttonPressed: to target of class NSApplication
May 27 09:36:10 server com.apple.dock.extra[802]: 2012-05-27 09:36:10.164 com.apple.dock.extra[802:1

SSH to Lion Server: The authenticity of host ... can't be established.

In Server.app, when trying to SSH into a 10.7.4 Lion Server, I get the following reponse:
The authenticity of host '<server.domain.com> (10.0.1.xxx)' can't be established.
RSA key fingerprint is xx:xx:xx:xx:xx:xx.
Are you sure you want to continue connecting (yes/no)? no
Host key verification failed.
How do I set up sshd to use the server's signed SSL certificate for authenticity establishment?
TIA,
Larry Goldman

To answer my own question:
In general, SSH on the client in coordination with the SSHD daemon on the server use an authentication system that is separate from Lion Server's signed-SSL certificate methods. The SSH-specific keys that are exchanged between client and server are created by the ssh_keygen command. For details see the man pages.
The first time a client SSH's into a server, normal behavior is to be presented with the message: "The authenticity of the host 'server.domain.com' can't be established." along with the server's RSA key fingerprint. This fingerprint must match the one displayed by running the following command -- locally -- on the 10.7.4 Lion Server:
ssh-keygen -l -f /etc/ssh_host_rsa_key
The user has to visually compare the key strings to determine if they match. If so and the connection continues, that server's RSA key fingerprint is added to the file ~/.ssh/known_hosts (in a hidden folder in the user's Home folder).
Alternately, there is a way to add the server's RSA key fingerprint to a zone file for the domain, using a SSHFP DNS Record type, but I have not tried this myself.

Another Expired Certificate Error Thread

I've searched all over, and apologize in advance if there is already an answer for this.
I'm using the Symbian Belle OS and am running into the old problem of expired certificate errors when trying to install certain apps. The solution to this was to change the date on the phone so it coincides with that of the application you're trying to install. But that solution is no longer working.
Does anyone know of a workaround?

I did every year all the way back to 2000 but no luck
I also tried sites that will convert the .sis file into one with a valid certificate, but that fails as well. When going down that road it just tells me the certificate is not valid or that the author cannot be verified (instead of expired).

Certificate errors on Exchange 2007

We have a Exchange 2007 server that is recording certificate errors in the event log (server & domain names changed for post):
Microsoft Exchange could not find a certificate that contains the domain name contoso.com in the personal store on the local computer. Therefore, it is unable to support the STARTTLS SMTP verb for the connector DNS with a FQDN parameter of contoso.com.
Microsoft Exchange could not find a certificate that contains the domain name server.contoso.com in the personal store on the local computer.
I have checked the configuration of the send and receive connectors:
Get-SendConnector | FL name, fqdn, objectClass
Name : DNS
Fqdn : contoso.com
ObjectClass : {top, msExchConnector, mailGateway, msExchRoutingSMTPConnector}
Name : Host IT SMTP
Fqdn : contoso.com
ObjectClass : {top, msExchConnector, mailGateway, msExchRoutingSMTPConnector}
Get-ReceiveConnector | FL name, fqdn, objectClass
Name : Default servername
Fqdn : servername.contoso.com
ObjectClass : {top, msExchSmtpReceiveConnector}
Name : Client servername
Fqdn : servername.contoso.com
ObjectClass : {top, msExchSmtpReceiveConnector}
There is an installed certificate:
{mail2.contoso.com, www.mail2.contoso.com, autodiscover.contoso.com, legacy.contoso.com} - IMAP, POP, IIS, SMTP valid until 09/01/2016
There was a expired certificate:
{servername, servername.contoso.com} - SMTP valid until 08/12/2010
The fact that the mail is still working despite the expired certificate, makes me wonder if I could just change the receive connectors to use mail2.contoso.com instead of servername.contoso.com
In the same vein, could I change the send connector to mail2.contoso.com from contoso.com

Hi,
Don’t modify the FQDN value on the default Receive connector Default <Server Name> that's automatically created on Mailbox servers. If you have multiple Mailbox servers in your Exchange organization and you change the FQDN value on the Default
<Server Name> Receive connector, internal mail flow between Mailbox servers fails. For more information about it, please refer to fqdn parameter in the following article:
http://technet.microsoft.com/en-us/library/bb125140(v=exchg.80).aspx
I suggest we can renew the expired certificate with names: contoso.com, servername.contoso.com instead of changing the FQDN of receive connector and send connector:
http://blogs.technet.com/b/exchange/archive/2007/07/02/3403301.aspx
Thanks,
Winnie Liang
TechNet Community Support

How can I edit iCal server addresses in Mountain Lion? I keep getting an error with regards to my google calendar and I understand that the way to fix the problem is adjust the server address, but I cannot access it because the preferences are restrictive

How can I edit iCal server addresses in Mountain Lion?
I keep getting an error message with my google calendar, and I heard that if I delete the extra slash at the end of the address the problem will be fixed. But the iCal account preferences take me to system preferences > accounts every time I want to edit the account.
Does anyone know where I can edit the server address?

You should ask in the iCloud forum, this is for iMacs. https://discussions.apple.com/community/icloud/icloud_on_my_mac

Lion Server Problems Enrolling iPads - Certificate Error

Similar Messages

Maybe you are looking for