Locked out my self- ACI problem

Hi,
I'm trying to configure password reset for OpenSSO, and while doing it I made a mistake creating the ACI for a user on Sun DS 6.3 with write permissions to the userPassword attribute of all users. I'm new to OpenSSO and Sun DS and ended up applying the ACI wrongly and now I can only authenticate to sun DS with the user I created for opensso password reset, any other user fails to authenticate. I created the ACI using the ACI wizard of the DSCC web console and after this happened I deleted it also using DSCC but it still won't let me in with other users different from the one I created for opensso password reset.
So my question is, how can I reset the ACI's to default values or trouble shoot the problem I created ?

Here's the output of a login attempt through opensso using the username (sorry for the long post but I don't see a way to attach a file here), splited in two posts as it doesn't fit in one:
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  Operation extension a4677d8 allocated
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  Copying the Context (from ACLCB to ACLPB)
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -   SRC: NATTRS: 0, NTHANDLES:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  DEST NATTRS: 0, NTHANDLES:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  acl_summary(main): access_allowed(search) on entry(uid=prueba5,ou=personas,ou=people,dc=itac,dc=com,dc=co) (reason: root user)
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  Root access (read) allowed on entry(uid=prueba5,ou=personas,ou=people,dc=itac,dc=com,dc=co)
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  Root access (read) allowed on entry(uid=prueba5,ou=people,dc=itac,dc=com,dc=co)
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  **** ACL OPERATION STAT BEGIN ( aclpb:a4677d8 Block type: Main Block): Conn:9 Operation:18  *******
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of entries scanned: 0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of times ACL List scanned: 0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of ACLs with target matched:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of times acl resource matched:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of times ANOM list scanned:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of times Context was copied:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of times Attrs was copied:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -   **** ACL OPERATION STAT END  *******
[11/Aug/2009:15:54:11 -0500] - DEBUG - conn=-1 op=-1 msgId=-1 -  macro ht in aclpb_done: before free:
[11/Aug/2009:15:54:11 -0500] - DEBUG - conn=-1 op=-1 msgId=-1 -  macro ht in aclpb_done: after free:
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  Operation extension a4677d8 deallocated
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  Operation extension a4677d8 allocated
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  Copying the Context (from ACLCB to ACLPB)
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -   SRC: NATTRS: 0, NTHANDLES:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  DEST NATTRS: 0, NTHANDLES:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  acl_summary(main): access_allowed(search) on entry(uid=prueba5,ou=personas,ou=people,dc=itac,dc=com,dc=co) (reason: root user)
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  Root access (read) allowed on entry(uid=prueba5,ou=personas,ou=people,dc=itac,dc=com,dc=co)
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  Root access (read) allowed on entry(uid=prueba5,ou=people,dc=itac,dc=com,dc=co)
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  **** ACL OPERATION STAT BEGIN ( aclpb:a4677d8 Block type: Main Block): Conn:10 Operation:85  *******
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of entries scanned: 0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of times ACL List scanned: 0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of ACLs with target matched:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of times acl resource matched:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of times ANOM list scanned:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of times Context was copied:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -     Number of times Attrs was copied:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -   **** ACL OPERATION STAT END  *******
[11/Aug/2009:15:54:11 -0500] - DEBUG - conn=-1 op=-1 msgId=-1 -  macro ht in aclpb_done: before free:
[11/Aug/2009:15:54:11 -0500] - DEBUG - conn=-1 op=-1 msgId=-1 -  macro ht in aclpb_done: after free:
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  Operation extension a4677d8 deallocated
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  Operation extension a4677d8 allocated
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  Copying the Context (from ACLCB to ACLPB)
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -   SRC: NATTRS: 0, NTHANDLES:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  DEST NATTRS: 0, NTHANDLES:0
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  acl_summary(main): access_allowed(search) on entry(uid=prueba5,ou=people,dc=itac,dc=com,dc=co) (reason: root user)
[11/Aug/2009:15:54:11 -0500] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 -  Root access (read) allowed on entry(uid=prueba5,ou=people,dc=itac,dc=com,dc=co)

Similar Messages

  • I spilled water on my laptop and my "i", "j" and "k" letters don't work on my laptop. However my main problem is that my password contains an "i" so i am locked out of my computer. Any ideas how I can get around the password and login.

    I spilled water on my laptop and my "i", "j" and "k" letters don't work on my laptop. However my main problem is that my password contains an "i" so i am locked out of my computer. Any ideas how I can get around the password and login. I tried the method where you go into single user mode and type in commands, however that method uses some of the letters that are not working on my laptop.

    You didn't mention which version of OS X your running but there are password reset utilities provided OS X: Changing or resetting an account password (Snow Leopard and earlier) - Apple Support  or  OS X: Changing or resetting an account password - Apple Support
    Alternately you can use an external keyboard to log in and change the password. Make a backup if you don't have one, it's likely that your problems aren't over. If that water continues to migrate downward and fries the logic board your macbook will be toast.

  • I forgot my password and now i'm locked out. how can i fix this problem?

    i forgot my password and now im locked out. how can i fix this problem?

    Here is what you can do straight from Apple
    http://support.apple.com/en-us/ht1212

  • Locked out - permissions problem - List Fetching instead of my name under Get Info

    locked out - permissions problem - List Fetching instead of my name under Get Info - can nott unlock files and some apps

    For 10.7, hold down Command R at Startup and you get recovery Mode Utilities.
    Choose Disk Utility. Select your Hard drive. Check the SMART Status for "Verified. Select the Boot Volume, by default it is "Macintosh HD".Run REPAIR disk. If it completes without incident, run Repair Permissions as well.
    You can also hold down Option at Startup, and Choose Recovery HD as the boot device. It gets you to the same place in Utilities.

  • Windows 8.1 & office home business 2012 - Locks out ALL office programs * There was a problem sending the command to the program*

    Hello,
      I'm at wits end...BRAND NEW HP pavilion preloaded wit windows 8.1. Purchased a separate full version of Office 2012 Home and Business...downloaded it..loaded ...ran it....it runs fine ..UNTIL maintenance or other updates come through....then I receive
    a ** * There was a problem sending the command to the program**** and it lock out ALL office programs with the same message.
    My only fix has been to recover to a date BEFORE the updates or maintenance..and this works..UNTIL the updates or maintenance install....then it's Groundhog day all over again.
    I have tried all the suggested fixes I have found..NONE work..NONE!! And pray tell how you can get into advanced options or any other portion of the programs to turn off the DDE when you cant access the programs or initialize them at all!!!??
    SOS!!

    Hi,
    I have definitely heard your frustration, we can try these steps to check if it works. 
    Note: Before doing the following steps, please make a backup of your registry first.
    1. edit "HKEY_CLASSES_ROOT\Word.Document.12\shell\Open " and delete the "ddeexec" key.  The "ddeexec" key can also be deleted from "HKEY_CLASSES_ROOT\Word.DocumentMacroEnabled.12\shell\Open". 
    2. Change the registry for Word 2013 by right-clicking and saving:
    Windows Registry Editor Version 5.00 [-HKEY_CLASSES_ROOT\Word.Document.12\shell\Open\ddeexec] @="[REM _DDE_Direct][FileOpen(\"%1\")]" [-HKEY_CLASSES_ROOT\Word.Document.12\shell\Open\ddeexec\Application] @="WordView" [-HKEY_CLASSES_ROOT\Word.Document.12\shell\Open\ddeexec\Topic]
    @="System" [-HKEY_CLASSES_ROOT\Word.DocumentMacroEnabled.12\shell\Open\ddeexec] @="[REM _DDE_Direct][FileOpen(\"%1\")]" [-HKEY_CLASSES_ROOT\Word.DocumentMacroEnabled.12\shell\Open\ddeexec\Application] @="WordView" [-HKEY_CLASSES_ROOT\Word.DocumentMacroEnabled.12\shell\Open\ddeexec\Topic]
    @="System"
    3. Double-click the file after downloading to update the registry.
    For more detail information:
    http://www.dilloway.co.uk/there-was-a-problem-sending-the-command.html

  • HT1688 i cant use my i phone because of a password problem and i am locked out of my phone, how do i get my password?

    I am locked out of my I phone and need password help to be able to use my phone, does anyone know how I can get my password to unlock my i phone?

    Read
    http://support.apple.com/kb/ht1212
    If you dont know hte password then this is what you have to do

  • Safari 7.0.5 problem-- I can't erase saved passwords-- I delete it in Preferences, it keeps entering the old password. I just got locked out of a bank account-- AGAIN!

    I changed my password for an important account.
    I deleted the old password under preferences on Safari.
    I entered the new password and it asked to save it.
    Next time I went to the account----it entered the old password--- and after three tries, I was locked out of the account.
    I re-did the whole process--- it happened again!
    Help!

    Passwords saved by Safari are actually stored in Keychain Access.
    Open Keychain Access located in   HD > Applications > Utilities
    Select Passwords on the left.
    Type in the name of the website you are trying to change the password for top right corner of the Keychain Access window.
    That website keychain should be there.
    Then right or control click that keychain then click Delete.
    Then back to Safari. From the Safari menu bar click Safari > Preferences then select the Privacy tab.
    Click:  Remove All Website Data
    Then select the Passwords tab then delete the the website. Make sure: AutoFill user names and passwords is selected.
    Now go to the bank account website and try changing your password.

  • Can you 'lock out' a workstation via ZENworks?

    Hi,
    I was wondering if there was a way to 'lock out' a workstation via
    ZENworks so users can no longer log into the workstation temporarily.
    This is the scenario - when someone within our company orders a new
    workstation, they will many times tell us that the workstation is being
    replaced when in reality the old workstation it is replacing is never
    taken off the network.
    The problem? - we do not charge any new license fees for replacement
    workstations PROVIDING the old workstation is disposed of (that way we
    are able to transfer the licenses from the old to the new). If the old
    workstation is still used, we are in violation of license fees.
    Solution? - 'lock out' the old workstation so no one can use it any
    longer unless they call our Helpdesk and it is 'unlocked' at which time
    we remind them of the license charges.
    I am not sure how this can be performed. We currently do something
    similar with NEW XP PCs that have no local user accounts on them yet
    (basically we enable login restrictions under the DLU policy - if the
    workstation can't create a local user account for the user, they can't
    log into the network or the PC). That solution would not work in this
    case though since the local accounts would already be created on the PC.
    We don't want to remove any software from the machine that will need to
    be reinstalled in case the site does want to keep the machine on the
    network after a new one is purchased. The solution should be designed to
    easily enable the machine if the site does decide they want to keep the
    machine on the network. Later on we would FDISK the PC for disposal.
    Any help would be GREATLY appreciated as ALWAYS!
    Steve

    Perhaps a Workstation Associated app that just pushed an invalid value for the
    GINA.DLL
    Either Remote Regedit or another Force-Run app could restore this to a correct
    value.
    Needs testing to make sure you can fix what you break, but this would lead
    everything intact.
    Marcus Breiden wrote:
    > On Mon, 23 May 2005 19:05:23 GMT, [email protected] wrote:
    >
    > > I am not sure how this can be performed. We currently do something
    > > similar with NEW XP PCs that have no local user accounts on them yet
    > > (basically we enable login restrictions under the DLU policy - if the
    > > workstation can't create a local user account for the user, they can't
    > > log into the network or the PC). That solution would not work in this
    > > case though since the local accounts would already be created on the PC.
    >
    > hmmm.... I would create an application and associate it to the wks, make it
    > force run..
    >
    > in that app remove / or change the Tree for the workstation manager... this
    > will disable all policy management (also DLU)...
    >
    > in case your accounts are locally on that box you would have to do some
    > more stuff to get around your problem...
    > --
    >
    > Marcus Breiden
    >
    > Please change -- to - to mail me.
    > The content of this mail is my private and personal opinion.
    > http://www.edu-magic.net
    Craig Wilson
    CNE3, 4, 5 - MCSE - CCNA
    NSC Sysop (http://support.novell.com/forums/)
    Tech Writer - http://www.ithowto.com
    (I Peter 4:10)

  • STARTSAP_NBAS DDIC password locking out

    Guys,
    We are doing 4.6c upgrade to ERP6 and during STARTSAP_NBAS phase DDIC locking out and cant start SAP original system. We tried to unlock the password and also did the reset using SAPup reset DDICpwd. But its still locking out.
    When we tried to login to the system using GUI through DDIC we can login but when we try reset the password in SU01 we are getting syntax error " The data object "*USH02" does not have a component called "PASSCODE"."
    Please help
    Reward points will be awarded for helpful answers
    Thanks
    Santosh

    Hi Santosh,
    The problem is clear that the table USH02 is not updated during upgrade
    so that it is not synchronized with table USR02. Please check table
    USH02 and USR02 table in database level, compare the PASSCODE field in
    both tables. (most probably there is no PASSCODE field for USH02 in db
    level as well). If so, you could do the following:
    1. Change the DDIC password to 19920706 at the table level:
        update sapr3.usr02 set bcode='61D26428640DBAB5'
                              where bname='DDIC' and mandt='000';
    2. Remove the lockflag
         update sapr3.usr02 set uflag=0;
    3. Change the DDIC password to 19920706 for the upgrade using:
    SAPUp set ddicpwd
    4. Then restart the system, and login again.
    Kind regards
    Imre Takácsi-Nagy
    Senior Support Consultant II.
    SAP Global Support Center Austria
    Netweaver WEB Application Server ABAP / JAVA

  • Unity Connection - Users with system default password getting locked out

    Hi all, hope everyone is well !!
    I am experiencing a strange problem and hope someone can give me some direction on where to start digging on this issue.
    I am getting a good number of users reporting they are getting locked out of their voice mail and they all claim that they have not changed their password and some user even got their greeting recorded by someone else. One thing in common for the users who reported the issue is that they all using the system default password. I am trying to trace to find out who/what has access to these users' mailbox but so far I have not had any luck.
    Thanks in advance !!
    Danny

    Thanks, yes am doing that now and cant really find any new/unique pattern. Plus the trace is pretty hard to follow. Cant really figure out any times stamps in the trace also. The current trace file is defaultTrace.18.trc and it has very simiiar content as some of the older ones before the problem. Right now the ESS portal is working and the slddsuser password is not locked. It seems the problem takes place on start up?
    /usr/sap/ESS/JC77/j2ee/cluster/server0/log
    Tough thing to test in production.
    I wonder what takes place at startup that would kick this problem off?
    brad

  • Locked out of G530 and requesting veriface id, which I never used, please help

    I can not get my key pad unlocked and veriface is active.  I never activated this option.  I have turned on and off but still locked out.  Please help.  Don

    Contact the store support staff who can access your account at: http://www.apple.com/emea/support/itunes/contact.html they are very good at these problems.

  • Locked Out of Blackberry ID and password Please Please Help

    I updated my blackberry messenger and its asking me for my id and password I have tried doing another ID but its not letting me do anything now my messenger has gone and I have tried accessing my app word but it keeps saying that I am locked out for security reasons so there is no way I can access bbm or my app world  could somebody help me please. HELP!!!!!!!!!!

    I have the same problem.. When I enter my blackberry ID it says that it is not associated with my phone, so i cant use bbm now after the update

  • Locked out! PLEASE HELP!

    Any help would be appreciated greatly! To start, I woke my computer screensaver and it prompted me
    with the login screen, as usual. However, when I typed in my password, the login screen shook as if it
    were wrong. Thinking I may have typed it wrong, I typedit in again...and again...and again....and again.
    Much to my dismay, it was not accepting my password. I hadn't changed it or fiddled with any of the settings
    prior to this happening. So, thinking it might be confused, I held down the power button and shut it off. Rebooting it, I was prompted again with the login. This time, it no longer showed my username. Just two blank fields. I typed in my user name, which I know as well, and my password. Still that littled prompt screen shakes in refusal. Now I am not a mac expert and I only know enough to just barely get by if problems come up. Knowing I am ignorant as to how to go about fixing this, I used my sister's computer to look around for answers. I found out I could use the mac OS X installation disk to try and reset the password.
    This ended in defeat as well.
    I clicked on my hard drive, selected my user in the dropdown and typed in the password (the same one I've always used. (Maybe that's the problem?) Everything seemed fine and I rebooted to see if the installation disk had fixed the problem. I ran into the two blank fields again. Nothing I typed in, all passwords I would ever use and different ways of typing my name, and they still refused the info I typed in.
    Booting up on the installation disk again, thinking I could try and change the password again, I was met with another horror: the dropdown said there were no users on my disk to choose from. This is where DiskWarrior comes in. I owe this software everything! I used it and found that my data was fine. I even moved my important files off onto an external hard drive just to be safe. While in there, I could even see that my user was completely intact.
    Still, even after trying to rebuild my directory with disk warrior, repairing my disk and permissions with the installation disk, all of which showed problems with my disk and fixed them, I am completely locked out of my computer. I called apple support and tgey said they could try and diagnos it over the phone or I could send it in to them. Mind you, no-one I spoke to knew what the problem was, let alone having heard of it. I'm a little low on cash and I'm not sure I want to pay to have my computer looked at only to find that they don't know what to do. (My computer us almost four years old. It's a tough little ****, having gone through a lot in my care, and it's out of warrentee, meaning the cost of diagnosis would not be covered by apple.)
    I need to know several things:
    1. Has anyone had this problem and solved it? If so, how dud you fix it?
    2. Apple seems to think it's some form of hard drive failure and suggested an archival restore or something, where the computer would reinstall its os without affecting my personal data. Chillingly, they said if that doesn't work, they recomend EARSING THE HARD DRIVE COMPLETELT. That's the last step I ever wish to take, but do you think the archival restore or whatever it's called will solve it?
    3. I did some research on the net, driven to find some way of fixing it at home, and my problem might have something to do with my Keychain. Now not being able to even log in to my computer, is there somehow a wat to access the keychain and alter/fix/erase the login info there?
    4. On the matter of the keychain, several people on the internet have suggested a solution on how to change or bypass the keychain by starting up the computer in single user mode and using programming code. I stress again: I am NOT very good with computers. I'm scared to death that I will do something wrong and mess up my entire computer. Even so, would you recommend I do this? Does my ptoblem sound like It has anything to do with the keychain?
    Thank you in advance. I really hope someone can help or at least give me a clear path to start on.
    Notes:
    My computer is 13" Macbook running Tiger version 10.4.1
    My computer also had a great fall as I stumbled over my cat and ever since, if I tried to lift the laptop While it is on it would shut off or restart. Other than that, my computer worked just fine. But getting it in to have that checked and fixed was on my to do list, but then this happens. Is there a possible connection?

    (My computer us almost four years old. It's a tough little ****, having gone through a lot in my care, and it's out of warrentee, meaning the cost of diagnosis would not be covered by apple.)
    Last I heard, there was "No Charge" for a genius appointment at the Apple Store. Repairing it is something else completely, but I believe they will take 15 minutes to do what they can.
    Adam

  • I am locked out of my iPod and can't remember the password. How can I retrieve it?

    Hello Out There,
    I'.m locked out of my iPod touche becasue I have foregotten the password. Does anyone know how I can correct the problem?

    You cannot retrieve it, you must restore via recovery mode following the instructions in http://support.apple.com/kb/HT1212 and it may take more than one time through to succeed.

  • ITunes 90 day lock out on iMac - only one AppleID can use a Mac at any one time?

    Just found out, the hard way, about Apple's patently ridiculous "90 Day Lockout" policy on iTunes (Match, Purchases download and pretty much ALL the useful features).
    Apparently, at least according to Support - who feigned surprise that this was an issue - if you blow £1,200 on an iMac to be used by two people in your home and have paid Apple an extra £25 a head for iTunes Match, you're terribly gullible. And stupid. And a potential music thief.
    The real problem is that Apple, probably in a bid to secure record label agreement to iTunes Match and in a vain attempt to curb unlawful music sharing, has decided that NO MORE THAN ONE APPLE ID can be associated with a machine ID at any one time, for iTunes purposes.
    This is fine on iPhone, iPod Touch and even iPad. Those are hardware that only one person can use at a time - there is no "multi-user" capability.
    Macs, though, are a different matter.  In Apple World we're all filthy rich and each member of a household is expected to own a separate Mac machine (iMac, MacBook Pro or Air) to be able to use the functionality and music they've paid for in iTunes and via Match.
    If you're stupid or poor or just think a Mac per person in a household is consumerism gone mad, you are stuffed.
    In our case we bought an iMac. Set up two separate and distinct User IDs and one of us set up iTunes and activated iTunes Match.
    Next day the other went into their User account, set up iTunes and then activated iTunes Match. A very very vague message popped up alluding to "transferring an Apple ID to this machine" and referencing inability to use this AppleID on another machine for 90 days. That seemed OK. The AppleID had been associated on an old Compaq netbook for iTunes, so the assumption was that it was that association that was being transferred to the iMac.
    WRONG!
    What had happened was that the second person to sign in to the iMac and set up their TOTALLY SEPERATE AppleID on a TOTALLY SEPERATE iTunes Match library and account had effectively locked out the first user from their iTunes account.
    So, if you're a family with individual iTunes accounts and iTunes Match don't bother with Apple Mac products. For the cash you spend on one mac product that only one of you will be able to use iTunes on EVERY 90 DAYS, you'd be better off buying separate, higher spec Windo$e laptops to sync with.
    Apple has really really fouled up on this.
    Support initially justified this lock out policy as being to prevent Johnny Fileshare from zipping round to his mate's house, logging into iTunes with his AppleID on his mates PC or Mac and downloading his paid for iTunes library onto his mates Mac as a gift.
    Just how likely such a random outburst of philanthropy at the expense of record labels would be is beyond me.
    During a near two hour call with support (use the Call Me function - at least the call is free) eventually, after an escalation, the tech agreed that the 90 days AppleID  lock was pointless as Apple themselves publish details in their knowledge base on how to circumvent music sharing restrictions and combine iTunes libraries - even helpfully including details of how to put said combined iTunes library on a memory stick. Johnny Fileshare can then nip round his mates house and share his iTunes content with his mate until the cows come home.
    Even worse, Apple even allow you to burn to CD a combined iTunes library up to FIVE TIMES!
    But, when it comes to logging into your own iTunes account on a shared Mac? Forget it matey. You'll steal music and can't be trusted.
    Well FU too, Apple.
    But wait! You may think you're OK because you weren't foolish enough to hand over £25 for iTunes Match...
    BEWARE: THE 90 DAY LOCKOUT IS ACTIVATED THE SECOND A USER ON A MAC ACTIVATES EITHER:
    1. Automatic downloads, or
    2 iTunes Match
    OR IF THEY HAVE THE TEMERITY TO:
    1. Check previous purchases
    THIS RENDERS ITUNES AS A PRODUCT/SERVICE WORSE THAN USELESS ON SHARED MACS.
    We have 82 days to wait for one of us to regain access to the library that cost us a fortune to build in iTunes.
    1 Week old iMac is being boxed up & returned to Apple Store.
    Two high spec non Apple  laptops being bought as a replacement. The change to be spent on petrol or pasties - which ever the UK  is running out of most...

    Yes, I am having this problem because I have 2 Apple IDs/iTunes accounts.  Mind you, I don't want 2 accounts but Apple forced me to make a new apple ID when they started requiring email addresses as user ID.  This was the first big mistake that Apple made.  Their second mistake was not allowing people to simply merge these accounts.  Had they not made these mistakes initially, many people would still only have one Apple account/ID. Some bloke ought to lose his job over that. 
    However, I understand this isn't the same problem as having multiple household members using the same computer.  It seems that Apple could figure this all out by either authorizing multiple users at the time of purchase, or allowing a handful of users to download to one computer. After all, if I bought a hard copy of a music CD, I could certainly allow my son or daughter to listen to it or download it to their computer.  Next thing you know, I'll have to sign a release saying that I am the only person that uses my iPod.
    I am also returning not just one but 2 brand new Mac computers ($4500 coming back from Apple to my wallet) because I am so fed up with the poor customer service response that Apple has given this problem.  Not only did they take a ton of my money for iTUnes songs, but then they restricted my access to those songs. I think it's criminal and I wouldn't be surprised if this issue ended up as a class action wrongdoing suit.  I have to admit I've considered talking to a lawyer about it myself.  I am so sick of large monopolizing companies thinking that they can treat their customers poorly and expect us to sit back and take it. The good news is that this is a free country and I can choose to throw my money at any old company I choose..........Toshiba here I come.

Maybe you are looking for

  • Is it possible to only allow given MAC addresses to access ActiveSync in Exchange 2013?

    We are designing a new Exchange 2013 environment for a client and one of their requests was to only allow known mobile devices to access ActiveSync. I can see that you can allow or block remote devices based on IP Address, model, etc. but we'd need t

  • Search not working in Windows 7, works on XP

    Hi folks, We had quite a time getting RoboHelp for Word to work on our new Windows 7 machines. The highest supported combination (of RoboHelp version and Word version) that we were aware of from the postings on this site did not work. Long story. Any

  • Installation Error with 10.1.3.1 on Red Hat Linux 4

    Hi, I am installing Oracle Application Server 10.1.3.1 on Red Hat Linux 4, and am receiving the following error: Error in invoking target install of make file ins_sqlplus.mk. If I hit 'Ignore', I continue to receive errors regarding the makefile, and

  • Multipart/mixed mime problems with mail

    So from what I've gathered Mail has problems with multipart/mixed mime type emails. I wrote a PHP script that sends customers their orders as a PDF attachment as well as the order processing department. If Mail doesn't support multipart/mime what is

  • Help regarding RRI

    Hi, We need to use the RRI interface for reorting, can anyone please help in letting me know about the steps required to perform the RRI requirement. how to go about implementing the same. many thanks Srinivas Please search the forum Edited by: Prave