Local user not allowed in OS X server

After installing OS X Server 3.03, I now notice when I am logged into the Mac Mini hosting the server, I am not allowed to log in as a local user. This change in user permissions completely defeats the reason for me to have the server running, namely the ability to log into the machine from within my home or outside via VPN. Why am I not allowed to log in on the local network and is there a way to change something so I can?

I'm not sure I understand what this means:
when I am logged into the Mac Mini hosting the server, I am not allowed to log in as a local user
Please clarify.

Similar Messages

Java.lang.Exception: User : principals=[admin] is not allowed to shutdown the server

Hi,
When i shut down my managed and admin servers through the console i am getting
the following exception.Any one have an idea on this?
Exception :
java.lang.Exception: User : principals=[admin] is not allowed to shutdown the
server.
     at weblogic.server.ServerLifeCycleRuntime.shutdown(ServerLifeCycleRuntime.java:299)
     at java.lang.reflect.Method.invoke(Native Method)
     at weblogic.management.internal.DynamicMBeanImpl.invokeLocally(DynamicMBeanImpl.java:750)
     at weblogic.management.internal.DynamicMBeanImpl.invoke(DynamicMBeanImpl.java:732)
     at com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1557)
     at com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1525)
     at weblogic.management.internal.RemoteMBeanServerImpl.invoke(RemoteMBeanServerImpl.java:928)
     at weblogic.management.internal.MBeanProxy.invoke(MBeanProxy.java:472)
     at weblogic.management.internal.MBeanProxy.invoke(MBeanProxy.java:200)
     at $Proxy105.shutdown(Unknown Source)
     at java.lang.reflect.Method.invoke(Native Method)
     at weblogic.management.console.actions.mbean.DoMBeanOperationAction.performOnSingle(DoMBeanOperationAction.java:206)
     at weblogic.management.console.actions.mbean.DoMBeanOperationAction.perform(DoMBeanOperationAction.java:188)
     at weblogic.management.console.actions.internal.ActionServlet.doAction(ActionServlet.java:171)
     at weblogic.management.console.actions.internal.ActionServlet.doPost(ActionServlet.java:85)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at weblogic.servlet.internal.ServletStubImpl$ServletInvocationAction.run(ServletStubImpl.java:1075)
     at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:418)
     at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:306)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:5517)
     at weblogic.security.service.SecurityServiceManager.runAs(SecurityServiceManager.java:685)
     at weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletContext.java:3156)
     at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:2506)
     at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:234)
     at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:210)

I have the exact same problem. It is for a WLI 7.0 SP-5 domain. I started admin and managed servers using the startWeblogic and startManagedWebLogic scripts, but trying to stop them from the console is throwing this exception:
java.lang.Exception: User : principals=[admin] is not allowed to shutdown the server.
     at weblogic.server.ServerLifeCycleRuntime.shutdown(ServerLifeCycleRuntime.java:299)
     at java.lang.reflect.Method.invoke(Native Method)
     at weblogic.management.internal.DynamicMBeanImpl.invokeLocally(DynamicMBeanImpl.java:736)
     at weblogic.management.internal.DynamicMBeanImpl.invoke(DynamicMBeanImpl.java:718)
     at com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1557)
     at com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1525)
     at weblogic.management.internal.RemoteMBeanServerImpl.invoke(RemoteMBeanServerImpl.java:1107)
     at weblogic.management.internal.MBeanProxy.invoke(MBeanProxy.java:472)
     at weblogic.management.internal.MBeanProxy.invoke(MBeanProxy.java:200)
     at $Proxy105.shutdown(Unknown Source)
     at java.lang.reflect.Method.invoke(Native Method)
     at weblogic.management.console.actions.mbean.DoMBeanOperationAction.performOnSingle(DoMBeanOperationAction.java:206)
     at weblogic.management.console.actions.mbean.DoMBeanOperationAction.perform(DoMBeanOperationAction.java:188)
     at weblogic.management.console.actions.internal.ActionServlet.doAction(ActionServlet.java:171)
     at weblogic.management.console.actions.internal.ActionServlet.doPost(ActionServlet.java:85)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at weblogic.servlet.internal.ServletStubImpl$ServletInvocationAction.run(ServletStubImpl.java:1094)
     at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:437)
     at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:319)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:5626)
     at weblogic.security.service.SecurityServiceManager.runAs(SecurityServiceManager.java:685)
     at weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletContext.java:3213)
     at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:2555)
     at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:251)
     at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:219)
I upgraded from WLI7.0 SP-1 to SP-5, and since then I am getting this error.
Please help!

Client with IP address is not allowed to access the server

While trying to connect to the SQL Database on Windows Azure via SQL Server Data Tools 2012 (from local), it gives me a message "Client with IP address 'X.X.X.X' is not allowed to access the server". And in the message it also gives you the direction
on how to fix this.
So, going back to the Windows Azure Management Portal, I have included the current IP address in to the existing firewall rule. I tried to connect to the sql database on azure via SSDT it worked properly.
Next day.. when I open the tool and trying to connect, it gave the same error, so I checked in the portal and this time it was showing different IP, then I added this IP to the firewall list, and I was able to connect.
Question: Is this a normal behaviour for adding IP each day to the firewall rule? (OR, I am using the "Free Trial" subscription, is this the issue?), or is there anything more I need to do to avoid adding the IP each day?
Please let me know.
Thank you.

Hello,
To workaround your requirement, you can try to use the New- SqlAzureFirewallRule command line in PowerShell to configure the firewall rule allow your current IP automatically.
Reference:
Update Azure DB Firewall Rules with PowerShell
http://social.msdn.microsoft.com/Forums/windowsazure/en-us/67540278-1f54-491b-9dd2-73587cf51cef/configure-allowed-ip-addresses?forum=ssdsgetstarted
Regards,
Fanny Liu
Fanny Liu
TechNet Community Support

Changing Facebook User Not Allowed? Oops.

I decided to try the Facebook Publishing "feature". Unfortunately I did not notice when I did the authorization that the browser was pointing to an OLD Facebook account. Now, (after deauthorizing that account) I can't authorize the correct account. I get the message:
Changing the facebook user for a saved connection is not allowed
Is there any way around this?
Gee, one little mistake and I'm blocked for life?
Steve

The answer appears to be the following:
Right Click on the original Facebook Publish Service and select "Create Another Publish Service via Facebook..."
Establish your connection to Facebook, giving this one a new name.
Right Click on the original Facebook Publish Service and select "Delete Publish Service"
Done.
Not exactly user friendly! But, it works. ;-)
Steve

Weblogic myrealm user not allowed with name "viewer"

Hi,
I am trying to create a user(from weblogic console) in myrealm with name "viewer" and I see that I am not allowed but I don't get any error.
When I am creating it programatically from a java program and assign it to a role called "Viewer", when connecting to my application using this "viewer" username the only rolse detected by my application are authenticated-role and anonymous-role. The "Viewer" role is not seen.
Are there any restricted words that can be used for a user in weblogic myrealm?
Thanks
Regards Corneliu

Hi,
Regarding Transactions , the following link can helpful to you .
Regards,
Prasanna Yalam

Messages - no user is allowed to login after server reboot

Hello all together,
I had to reboot a XServe with Mac OS X 10.8.3 and Server App 2.2.1 installed using the command line because I couldn't connect via ARD anymore at that time and the users couldn't login at all with their OD accounts.
After the reboot no user was able to login to the messages server which wasn't any problem before this reboot. "User ID or password is wrong". The messages service in server.app is running. I restarted it twice without any advance. The passwordservice server log shows up all requests and the passwordservice error log has no entries at all. I couldn't find any related entries in any of the logs I searched in, especially not in the system.log.
The users trying to login are local network users which are allowed to use this service and are all members of one group which is also allowed to use this service.
If I turn the messages service off and try it again I get the same error. Therefor I can't even say if the service is definitely running but port 5223 is opened.
Any suggestions?
I really appreciate your help!
Kind regards,
ragob66

Hello,
for information purposes:
A second server reboot resolves this issue!
Thanks!
Kind regards,
ragob66

Currency Symbol displays correctly locally, but not when I deploy to server

Hi have some number fields, where I set the control hint on the view to Currency format. When I run locally, everything displays properly: $1,234.56
But when I deploy my application to our development server, the $ is coming up as a ¤1,234.56. This happens to all my currency fields, not matter what object is displaying it.
I've seen one other post that talks about using a numberConverter tag everytime I display the values, but I'd prefer to stick with "best practice" of using the control hints. Especially since it works fine locally, I have to think this is some sort of server side setting that I am missing. Does anyone have any idea what might be happening here?

The ¤ symbol is a "neutral" currency symbol, it is used if no locale can be determined (no matter if you are using control hints or converters). Try setting a default local to your application on the faces-config.xml file.
<?xml version="1.0" encoding="windows-1252"?>
<faces-config version="1.2" xmlns="http://java.sun.com/xml/ns/javaee">
<application>
    <default-render-kit-id>oracle.adf.rich</default-render-kit-id>
    <locale-config>
      <default-locale>en</default-locale>
      <supported-locale>en</supported-locale>
    </locale-config>
</application>
</faces-config>Hope this helps.

Users not getting IP from QIP server

Dear Friends,
Need your advice on this issue.
Users of our new site complained of not getting IP dynamically from DHCP server. Static IPs works fine.
The LAN interface of the router is configured with helper IP address of QIP servers.
On the router there exists a DHCP pool configuration, later we removed this config understanding the helper address will
assign the ip address dynamically.
QIP which serves as DHCP is confgured to assign the IPs, but the users complined of not getting IPs including IP phones.
Kindly advice what could be possible chances of this issue.
Thanks in advance
rYs

You cant have both the ip helper-address and a DHCP pool configured on the router. Basically what happens is the client DHCPDISCOVER will pick the first DHCP server that answers it and in this case its the the router. If you want to pass traffic all the way to the DHCP server, you need to disable the DHCP server on the router and leave only the ip helper-address configured so it can relay the broadcast to the defined DHCP server.
It sounds like you have this current topology for your DHCP server that is working:
Client       ------------>DHCPDISCOVER ---> Router(DHCP Server)
               <------------DHCPOFFER
               ------------>DHCPREQUEST
               <------------DHCPACK
You want to configure your QIP DHCP Server to respond to DHCPDISCOVER, you will need to remove the DHCP pool from the router and add "ip helper-address x.x.x.x" where x.x.x.x is your DHCP server ip.
If that still does not work, you will need to check the configuration on your DHCP server to ensure its not mis-configured. QIP is not a cisco product but you should be able to view debugs on that application to identify if the DHCP server is sending an offer or dropping the request. Most likely your scopes are mis-configured on the server.

Jdeveloper 11.1.1.6.2 is "NOT" allowing to configure application server

when configuring application server on local Jdev (11.1.1.6.2) > Build JDEVADF_11.1.1.6.2_GENERIC_120329.1447.6268 on Windows 7
i get below error
===================================================
Dec 29, 2012 12:52:35 AM oracle.security.jps.internal.common.util.XmlSchemaValidationUtil$StrictErrorHandler warning
WARNING: Failed to validate the xml content. SchemaLocation: schemaLocation value = 'http://xmlns.oracle.com/oracleas/schema/11/jps-config-11_1.xsd' must have even number of URI's. Location: line 3 column 96.
Problem invoking WLST - Traceback (innermost last):
File "C:\oracle\Jdev111162\JDEV_INSTALL\jdeveloper\fadev\bin\FADevExtendDefaultDomain.py", line 583, in ?
File "C:\oracle\Jdev111162\JDEV_INSTALL\jdeveloper\fadev\bin\FADevExtendDefaultDomain.py", line 253, in extendDomain
File "C:\Users\krathanr.ST-IDC\AppData\Local\Temp\WLSTOfflineIni7049264434314395379.py", line 89, in addTemplate
     at com.oracle.cie.domain.script.jython.CommandExceptionHandler.handleException(CommandExceptionHandler.java:51)
     at com.oracle.cie.domain.script.jython.WLScriptContext.handleException(WLScriptContext.java:1538)
     at com.oracle.cie.domain.script.jython.WLScriptContext.addTemplate(WLScriptContext.java:420)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
com.oracle.cie.domain.script.jython.WLSTException: com.oracle.cie.domain.script.jython.WLSTException: com.oracle.cie.domain.script.ScriptException: unable to parse "template-info.xml" from template jar "C:\oracle\JDEV11~1\JDEV_I~1\jdeveloper\common\templates\applications\oracle.bicomposer.slib_template_11.1.1.jar
===================================================
Please help.
Thanks
KrishnaKumar

Does this happen the first time you start the wls?
Or have you first started the wls and then tried to extent it?
Timo

Standalone Installer Not allowing install of Remote Server Admin Tools

I am trying to download the Windows 10 Technical Preview Remote Server Administration Tools since I need a way to quickly access Active Directory for my company. However whenever I attempt to download the file WindowsTH-KB2693643-x64.msu I
get an this error message:
Windows Update Standalone Installer: The update is not applicable to your computer.
I do have a 64 bit OS as well as Windows 10 Technical Preview 9926 currently running. So I am not sure as to the reason that I am getting this error. Any tips or clues would greatly help and be appreciated.

Hi Magan P,
Do you have any update about this issue?
What’s the result when you download the latest RSAT tool?
Regards,
Alex Zhao
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

WHY are Firefox users NOT "allowed" to "uninstall" "plug-ins" ????

Firefox simply has to make it possible for it's users to delete/remove/UNINSTALL UNWANTED PLUG-INS !!! WHY has this NEVER been a default option ???? I just don't understand.I found a page on how to "manually" delete plug-ins BUT...guess what ??? I ended up really screwing things up.Trying to manually delete the plug-ins that I wanted to do so with,I just randomly typed letters on my keyboard to rename the files and I did NOT write down what I has renamed these entries.
Well,the instructions for doing this were not written very well and the "uninstall" did NOT take !! I even went as far as to uninstall and reinstall the entire program (Firefox) (thinking that maybe a fresh install would give me just the default plug-ins/extensions that Firefox comes with when a person downloads Firefox for the first time) TO NO AVAIL !! PLEASE....is there ANY way that you can help me with this ???

Some plugins like Flash come as only a plugin.
*C:\Windows\SysWOW64\Macromed\Flash\
Other like the RealPlayer that you mentioned and Java come as applications that are installed as a program and add registry keys to make Firefox find the plugin.<br /><br />
Some try to install their plugin directly in a Firefox plugins folder that can reside in different locations (program folder, current profile folder, and its parent profile folder: Mozilla\plugins).<br />
The pluginreg.dat file referenced about will always have the full path of each plugin.<br />
*http://kb.mozillazine.org/Issues_related_to_plugins

Determining why windows auth not allowed on 2012 rs server

Hi. I want to determine why windows integrated security isnt working on my rs server. But the option where i'm prompted for user and pswd is when rendering my report from that server. I can remote into the machine. I can also
reach it from ssms. We run enterprise 2012 x64 sp1. It could be that our dba set it up purposely like this but when i approach him, i want to have all the facts available.
What is the easiest way for me to determine which setting (if any) is preventing such authentication? If it involves looking at a config, where might i find that config?

found it with a little help. apparently its shared by other seervers. Here is what it looks like. Does NTLM require that kerberos and kerberos spn's be in play? I'll try to read a little also. Hoping to achieve integrated
windows auth without breaking other things.
<Authentication>
<AuthenticationTypes>
<RSWindowsNTLM/>
</AuthenticationTypes>
<RSWindowsExtendedProtectionLevel>Off</RSWindowsExtendedProtectionLevel>
<RSWindowsExtendedProtectionScenario>Proxy</RSWindowsExtendedProtectionScenario>
<EnableAuthPersistence>true</EnableAuthPersistence>
</Authentication>

Portal installation: Domain or Local user?

If you're reading this and running EP 6.0, can you please check how it's installed at your site? Is it running under a domain user (e.g., US\prdadm) or a Local user (e.g., <SERVERNAME>\prdadm).
I was recently advised to install Portal using a Local user, not a Domain user.
I understand the reasoning, and I trust the person who said it, but it's just awkward - I've never seen a production SAP system running (successfully) under a Local account before. But perhaps Portal is unique in the way it handles cross-domain authentication.
And do you have cross-domain traffic? For example, your portal server might be on the "US" domain but an R/3 database is on the "SAP" domain, can your users successfully logon to the R/3 system via the Portal? Was any special saprouter or network config needed to get it working?

Jason,
NW04 (latest SP) supports cross domain traffice.
Please refer to the procedure steps detailed in the SAPHELP link below & confirm you've followed & implemented them accordingly:
"Configuring SAP Logon Tickets for Multiple Domains"
http://help.sap.com/saphelp_nw04/helpdata/en/e0/fa984050a13354e10000000a1550b0/content.htm
Via J2EE Visual Admin Tool to edit the
UME property "ume.login.mdc.hosts" may also be used, if this is what you desire with your installation.
Global server config -> services -> com.sap.security.core.ume.services
Regards,
James

AAA and local user authentication

Hi,
I already have AAA authentication setup on my switch. And I can use local users to login when the AAA server is unreachable.
But I want to know if it is possible to use local users even when the AAA server is reachable. Something like first it checks the local users databse and if the user does not exists then fallback to AAA or vice versa.
Thanks.

Ismail, the authentication method you define act as a service. So only when the service is not avilable the method fallback to the next methond you define.
So in your case if the user account is not present in the local data base it will not fallback to aaa server.
aaa authentication login default local group radius
The same holds true if the user account is not there in the aaa server
aaa authentication login default group radius local
Only when the aaa server is not responding (service downe or not reachable) it will fallback to the local database.
Hope this helps!

IP Address Added But still does not allow access

I have a laptop that I take around Australia. When I'm in a hotel I link to the interest via my mobile phone using its hotspot feature. This allows me to gain access to the internet with no problem.
When I go to the allowed ip addresses section of Azure for my SQL Database the IP address in todays case shows me 101.173.255.250.
I click on the "Add to allowed IP addresses" and everything looks good.
I then go back to my Visual Studio project which creats a connection to the same database and I'm told that I can not connect and its because my IP address is not registered.
To check my IP address I go to http://checkip.dyndns.org/ and that site also tells me that my IP address is 101.173.255.250.
Can any one tell me what I'm doing wrong. Should not the IP address in the "allowed ip addresses" be correct and once registered gain me access.
Thanks in advance to anyone who can help. Been researching this issue off and on for the past month.

Thanks for the steps. I have followed them and also deleted all firewall rules at the database level as well.
Once I had complete removing all rules, I add the IP address as in step 3 of your reply.
I then went to Visual Studio and clicked on the Tools>Connect to Database menu option. I received the following message: Cannot open server 'ir7oj6f24g' requested by the login. Client IP address '1.154.162.224' is not allowed to access the server...tracking
ID '91af1717-9066-43b3-b69f-2db393a24a25'
In the Management Portal the IP address that said that it was my IP address was 101.172.127.226 which I added in step 3.
The thing that does not make any sense is that I was able to gain access to the Management Portal for this database and execute queries against this database. I'm confused.
Regards
Steve

Local user not allowed in OS X server

Similar Messages

Maybe you are looking for