Logging to a systemd per-user journal from shell

Does anybody know how I can log a message to a per-user journal without using a per-user systemd service (~/.config/systemd/user/something.service)?
As root, I can run:
echo This is a test. | systemd-cat -t test
or:
echo This is a test. | logger -t test
and see the logged message with:
journalctl --since='-300' -e
or:
journalctl --since='-300' -et test
As a non-root user, I can see the logs of per-user systemd services, among other things, with:
journalctl --user --since=today
I'm unable, however, to find a way to see the output of using systemd-cat or logger as a user, and when I use those commands, the timestamp of the user journal file in /var/log/journal doesn't change, so I don't think the journal is actually being written.
Any ideas?

Apparently I can do so as some users but not others.
For example:
echo This is a test. | sudo -u http systemd-cat -t test
allows me to see the entry in the journal, but:
echo This is a test. | sudo -u somenewuser systemd-cat -t test
doesn't.

Similar Messages

Wayland backend per user for Gnome Shell?

Hello, I've been trying to set environment variable with Wayland backend for Gnome Shell on Wayland but this per user just doesn't work.
I tried to put:
export GDK_BACKEND=wayland
export CLUTTER_BACKEND=wayland
to files like .profile and .bashrc but Gnome Shell doesn't tolerate these two. Without Wayland backend everything just run in XWayland "mode".
Weston tolerate this backends but it is highly "underfetaured" and sometimes it's just crash (some breakpoint trap).
Any response appreciated.

I have had a brief look and I think there may be a way in to add/change things via .desktop files. It looks like whenever gnome loads a .desktop type file it should look in $XDG_CONFIG_HOME home which, by default, would be $HOME/.config first before loading it from one of the standard system directories. The standard session definitions are desktop files (though with a .session extension) so putting a copy on $HOME/.config should enable user specific reconfiguration.

How to log off a single AD user from a list of servers

I have a user account I need to logoff from all servers in a list. For example domain\user2 needs to be logged off all servers in a list. Here is what I have so far:
foreach ($_ in get-content C:/servers.txt)
{(gwmi win32_operatingsystem -ComputerName$_).Win32Shutdown(4)}
The problem is all this does is log off the first user in the session list when you are looking at task manager. How could
I log off just a specific user?

This thread on stackoverflow may be useful to you if the user is connected to an RD session on your servers: Powershell Log Off Remote Session
As a starting point:
$server = 'MyServer'
$username = "domain\usertologoff"
$session = ((quser /server:$server | ? { $_ -match $username }) -split ' +')[2]
logoff $session /server:$server
(the script listed logs the current user off, I changed it to all you to enter the username)
Jason Warren
@jaspnwarren
jasonwarren.ca
habaneroconsulting.com/Insights

I'm having a problem with logging into a FileVault-protected user account after restoring from Time Machine backup.

Hi all,
My computer had been running really slowly for a while, so I decided to erase the whole hard drive and reinstall the operating system, and then I was going to restore the files I cared about from Time Machine. The main account, which had all my documents and photos, was FileVault-protected. The last thing I did before erasing the hard drive was to run one last Time Machine backup. As far as I remember, I always ran Time Machine backups with the FileVaulted user logged in.
I don't remember whether I was using FileVault 1 or 2. I had been using FileVault 1, but I installed Lion as soon as it came out and I thought I had migrated to FileVault 2 at that point.
Once I erased the hard drive and reinstalled the operating system, I browsed the Time Machine disk and, within the Users folder, there was no folder for the main user account. When I tried to reinstall everything by restoring from Time Machine backup, I'd get the option for all the user accounts, but when I tried to log in with the main one I'd get the dreaded "You are unable to log in to the FileVault user account "User" at this time. Log in failed because an error occurred." Finally, when attempting to restore from the Time Machine backup again, I noticed something strange: After the computer got to about 10% done restoring, it declared itself completed successfully and rebooted.
I've tried a number of tips that came up from questions about similar issues on the Apple support forum, but had no luck. Is there any way to get these files back? Did they ever even get backed up?
Thanks.

Hroodbwai wrote:
I can't find it! not sure what's going on but the only folder shown is the " Shared" folder.
Did you have only the one user account? If there were others, they should also be in the "Users" folder. You probably won't have access to the files inside them, but they should be there.
From what can make out, it looks like it's not backed up any of the files for the filevault account. Can't see user folder when looking through previous backups in Time Machine galaxy view.
Are you doing that from a Finder window set to your internal HD, or your computer name? It should look something like this (with the Finder in List view):
|
|
I'd been logging out and backing up manually on a regular basis.
Scheduled backups should run normally; but they won't back up the File Vault sparse bundle, nor will any run manually.
The only time it's backed-up is when you actually log out.
You should have seen this window on logout:
|
|
followed by this one:
|
|
If you didn't see the second one, or cancelled it, the account wasn't backed-up.

I have purchased a from within an app. I submit my password for the app, and then my Apple ID. I then get the following messages "Regrant failure _ please log in with the same user that has bought this app" and that is followed by "cant conn with IT _

I have purchased an item from within the app PocketBible on my iPad. However when I try to download it I am asked for my app User Name and Password and then my Apple ID and password. I give both of these. I then get a message which says Regrant failure - Please log in with the same user that has bought the app. That is then followed by Pocket Bible Alert - cannot connect to iTunes Store.
Anybody got any ideas, both what the 1st alert means and how I get round the problem please.

I had the same problem. My wife had the PocketBible on her Ipad 2 and she transferred ownership to me. I had to delete the app and reinstall it from the App store(logged in with my apple ID) and its working without a problem. I do not get those error messages when I attempt to Buy/Upgrade or Add/Remove books.

New user session from an existing logged in user browser window

Hi,
I have a requirement that says, a new browser window should be popped up with a new user session from the current "logged in user" browser window when he clicks a button event.
What I have with me is the "UserID" of that new user. Is it possible in portal?
Let me know.
Thanks,
Megha.

Megha,
I know that you can manually click CTL-N to open a new browser window and the user is still authenticated.
So I would think that you could code a similar function into the button event.
Hope it helps.
Regards,
Keith

RDS (2012 R2, Per User) client issues after moving from TS Licesning (Win 2K3, Per Device)

I run a XenApp environment (mixed Presentation Server 4.5, XA6.5, XA7.6... I know).
I've somewhat recently moved our RDS/TS licensing from an old 2K3 TS licensing vm that needed to go to a 2012 R2 RDS licensing vm.
The 2K3 vm ran with a Per Device mode, and the 2012 R2 vm is using a Per User model.
RDS is working fine as far as I can tell - handing out licenses to their RD Session hosts, in the proper security group which has the ability to Read/Write the MSLicensing user attributes (Terminal Server License Servers). By GPO, I am telling (and they are
applying) my XenApp servers to use their new RDS Licensing server and with a Per User model. The issue I
am seeing is this:
On a give XenApp server, the eventID 1011 - TerminalServicesRemoteConnectionManager
The remote session could not be established from remote desktop client
computername because its temporary license has expired.
When I hit the Details tab,
Windows Server 2003 - Terminal Server Per Device CAL Token.
Which then results in having to remove the MSLicensing registry key. Which is annoying. Anyone else run into this after moving licensing servers and/or models? Feedback would be awesome, danke!

Hi,
According to your description, it sounds like a known issue. The workwgoup is to delete the MSLicensing key under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSLicensing. (Note: please create a backup of the MSLicensing registry key and its subkeys on the
client before you remove the original key and subkeys.)
For more detailed information, you can refer to the similar thread below:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/9eb42798-e75e-4693-9a5d-9e96895e16c8/remote-desktop-license-server-problem?forum=winserverTS
Best regards,
Ssie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Change CAL to per user from per unit

Hello!
I bought per user CALS (has been verified) but I have been using per unit because the per user cal didn't update the license for the users. I don't understand why it works perfectly with per unit (group policy edited) but not per user? The system has been
online for one and half year now so it wasnt until know I noticed the problem because to many computers had been assigned a license and even when I revoke one of them I wont be able to connect another computer until december 10 so thats a big problem. I did
change to per user but it wont connect with the computer due to many licenses in use. Do I need to restart the server when I change to per user in group policy? And why is the cals working with per unit fine when I bought per user cal?
Regards

Hi,
>>don't understand why it works perfectly with per unit (group policy edited) but not per user?
Based on the description, I assume we are using group policy to manage Remote Desktop license mode. Here, please make sure that we have a sufficient number of RDS Per User CALs installed on the license server to provide an RDS Per
User CAL for each user that needs to connect to the RD Session Host server.
Besides, for this question is more related to RDS, in order to get professional help, it's recommended that we ask for suggestions in the following RDS forum.
Remote Desktop Services
https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverTS
In addition, regarding issuing RDS CALs, the following article can be referred to for more information.
Install and issue RDS CALs or TS CALs
http://technet.microsoft.com/en-us/library/hh553159(v=ws.10).aspx
Best regards,
Frank Shen

Switch from per Device to per User

I have a few RDS servers in an isolated environment that I was going to use our corporate RDS license server with. I later found out that the servers need to be in the same domain as the licensing server itself (which they are not). The
RDS servers were already built "Per Device" but now I have to build a new RDS licensing server and I am thinking about going per User with this instance. Since the RDS servers are already Per Device (but are not technically pointing to any
valid license server yet) can I switch them to be per User and then point them to the new per User RDS license server?
Thanks
NK

Hi,
Yes, you can switch the licensing mode of the RDSH servers to Per User. For Server 2012/2012 R2 RDSH servers you would just change the mode in deployment properties, and of course make sure the RDSH servers are part of a collection so that the change
will apply to them.
You will need purchased Per User RDS CALs. If you already purchased Per Device RDS CALs I recommend contacting the reseller and seeing if you can return them and purchase Per User instead. Per User RDS CALs cost more than Per Device
RDS CALs.
-TP

Multiple users logged into one server, each users printer has a different name, application needs ONE name to print to.

Multiple users logged into one server, each users printer has a different name, application needs ONE name to print to.
I'm NOT in any way a Terminal Services expert and I need help trying to get an application program working in a multi-user environment.
The issue is that the printer changes for every user that is logged in. The application needs to print NOT to the default printer, but to a "special" printer which is selected in the application... let's call it a label printer to simplify the explanation.
You have your default regular printer, easy for the application to find that one, and then you have a special printer that labels get printed onto. The application needs to know what printer is the label printer. So we allow the user to select that in the
application and the selection is stored in a config file in
C:\ProgramData\mfgr\prog\setting files
I don't have access to the application so I can't change how this works.
In the "regular" world, selecting the label printer driver to use should be per machine, NOT per user. When a new user logs into a machine, the physical printer doesn't go "poof" and a new printer suddenly appear. Same printer for all
users.
Yet in terminal services, the physical machine is "merged" with the virtual machine on the server. And there can be many users logged in at the same time. So each users real machine (and real printer) is injected into the "fake" terminal
services machine. The name of the printers is made unique for each user. So the printers DO go "poof" and change names depending on the user logged into terminal services.
So user "A" logs in and sets up the application to print to "LabelPrinterForUserA" (or whatever the name of the printer happens to be), that setting is stored in the ProgramData subfolder, and all is well. Later, user "B" logs
in, and when they print, the application tries to print to "LabelPrinterForUserA" which doesn't exist for user B or is only accessible by user A. If user B re-configures, that breaks it for user A.
SOLUTION 1: The way that /should/ work (in my mind) is that you define one "generic" printer in Terminal Services... call it "Virtual Label printer" and when the user wants to print to it, the print job gets re-directed back to whatever
physical printer is actually connected to their local workstation. There is a map of virtual printer to actual printer depending on the current user. The application is told once to print to "Virtual Label Printer" for all users.
SOLUTION 2: Or... there should be some way to make the ProgramData sub folders separate per user. E.g. when user "A" tries to access:
C:\ProgramData\mfgr\prog\setting files
they actually get
C:\UserData\UserA\AppData\mfgr\prog\setting files
and user "B" gets
C:\UserData\UserB\AppData\mfgr\prog\setting files
So the question I have is: Does either of those solutions exist hidden somewhere in the setup of terminal server? Or is there another way around this issue that I don't know?

I don't really have a "for sure" answer to this, but because people here can't seem to deal with a question that hasn't been answered I'll provide the best answer I did receive from ServerFault.com user Nathan:
I can feel your pain with using old software on terminal servers ...the solution I've come up with definitely won't scale as it requires some manual configuration, but I've gotten this method to work with our label printers (which require to be
printed to an LPT port...yep, that old).
Share your USB-connected printers to the network on each machine. Then, have the user log in on aunique session for each of them
(a TS account cannot be shared among computers for this to work) and install a network printer pointing to the USB one they shared. Try to use a DNS name to account for possible DHCP movements.
After, it should work. Each user can do this since display names can be identical as long as the ports are different (which they are).
This was clarified by the following series of comments:
I think you are on to something here, and I originally advised the admin to do this. The problem he ran into is that it setup the printer names in the TS as "printer on usersworkstation"
and he could not rename it except to change the "printer" to whatever. E.g. the "on userworkstation" remained. I believe there is another way of installing the printer which avoids this, but I can't find it. Ages ago, one used to do NET
USE LPT2 \\computer\printer password /USER:domain\user /PERSISTENT:YES and then tell the driver to print to LPT2 –  James
Newton Mar
17 at 16:21
@JamesNewton That's actually the exact method we used. The way around the "network printer" part is to install it as local printer and map it to a TCP/IP port that way. –  Nathan
C Mar
17 at 16:28
You mean in the case where the printers are TCP/IP connected and not local USB / LPT to the users workstation? That makes sense. Wonder if this will work for USB connected printers... –  James
NewtonMar
17 at 16:35
@JamesNewton You'd share the local printer on the client's PC then on the server connect via TCP/IP to it. You'd need static addresses or use DNS names if DHCP, though. –  Nathan
C Mar
17 at 16:51
Ah. Yes. I see. Looks like the LPT thing should work even with a USB connected printer:superuser.com/questions/182655/… –  James
Newton Mar
17 at 17:09

Restrict access to buttons, regions, etc. on a per user basis?

My application restricts access to buttons, regions, etc. on a per user basis.
Here is my application logic...
1. A User can only edit items they own.
2. A Super-User can edit all items
So, when a user logs in, I use a post-authentication process to set the user ID to an application level item.
Now, for example, to have an edit button display on a page, I need to check the item's owner ID against the application level user ID...and check to see if this user is on the Super User list via a query.(which could be set to another application level item upon login...I guess)
Question...What is the best way to do this? Conditional display? Authorization scheme?
Would something like the following work for a Conditional Display?
Condition: SQL Expression
&USER_ID.=&P6_ITEM_OWNER_ID. OR USER_ID in (select USER_ID from table where USER_ID=&USER_ID.)
How would I do this with an Authorization Scheme? (I like the idea of updating the logic in single location...but I'm not sure if it is possible because I have to check PX_OWNER_ID would be different on each page.)

Hi Denes,
Thanks for your code which allows user to edit (if authorized) and view (if not).
But some how - I do not get the image to show up - instead it show a small underline.
From SQL point of view - here is what I get - when i run the sql
'<img src="/i/ed-item.gif">',2,CR TEST,,,,dune2.cit.cornell.edu,CRDMTEST.CIT.CORNELL.EDU,PSPROD,,,CRDMTEST
Here is my wrap_image function
create or replace function wrap_image(p_user_name in varchar2,p_dm_name_id in number)
return varchar2 IS
v boolean := False;
ret_val varchar2(1000);
begin
dbms_output.put_line('user='||p_user_name);
dbms_output.put_line('dm_name='||p_dm_name_id);
-- Check authorization if the user is super user - return true, else if he has edit priv on dm_name_id - return true - else false
v:=ACL_DMTOOLS_DM_PRIV(p_user_name,p_dm_name_id);
if v then
ret_val := '<img src="/i/ed-item.gif">';
ret_val := ''''||ret_val||'''';
dbms_output.put_line('TRUE');
else
ret_val := '';
dbms_output.put_line('FALSE');
end if;
return ret_val;
end;
Thanks for your great educational site.
Regards
atul

Using Windows Server 2012 per-User RDS CAL on Server 2008 R2 Session Host

I have a Remote Desktop Licensing Server setup on my domain controller running Windows Server 2012 R2. I have installed a
’Windows Server 2012 Remote Desktop Services per-User CAL’ there and activated the licensing server already.
Currently I use ONLY Windows Server 2008 R2 machines as RDS Session Hosts (in the future I plan to transition them to 2012 R2, hence the CAL I bought is
already in the newest version).
I have already configured my WS 2008 RDS Session Hosts: set
Per-User licensing mode and specified license server address. The connectivity between my Session Host(s) and my License Server seems to be ok as the
Remote Desktop Session Host Configuration window on the Session Host correctly lists the 2012 per-user
license (CAL installed on server) from the license server.
On the License Server I can also see event logs entries (in
Microsoft-Windows-TerminalServices-Licensing/Admin), indicating that the user has been issued a license.
The issue I am having is that the license being issued is
2008 Per User CAL license (Build-in OverUsed - temporary) and not the 2012 Per User CAL license which is the only license installed on the server. According to the RDS CAL interoperability matrix at
social.technet.microsoft.com/wiki/contents/articles/14988.rds-and-ts-cal-interoperability-matrix.aspx, I was expecting the 2012 license to be backward-compatible with 2008 client (and that
in the absence of legacy licenses, the (only) 2012 license would be used for all clients connecting to the licensing server)
Before I bought my license, I found this document:
download.microsoft.com/download/3/D/4/3D42BDC2-6725-4B29-B75A-A5B04179958B/WindowsServerRDS_VLBrief.pdf
which says that - "newer version RDS CALs can be used with an older version of the server software" (In section FAQ, Q4), which means to me that
the 2012 license would work as-is for the 2008 Server and gives me flexibility when upgrading to the new server version.
How can I make this CAL work in my environment?
Note:
I have already explicitly disabled
Prevent license upgrade Group Policy setting which I assumed would fix the issue but nothing has changed.
Then I have enabled License server security group Group Polity setting
and added computers from my domain to RDS Endpoint Servers AD group. I have also created new AD group called
Terminal Server Computers and added the computer accounts there, but it changes
nothing. Reference - technet.microsoft.com/en-us/library/ee791761.aspx , technet.microsoft.com/en-us/library/cc725704.aspx and blogs.msdn.com/b/rds/archive/2009/09/17/control-the-issuance-of-rds-cals.aspx.
I found one potential ‘workaround’ which involved manually downgrading my CAL license by calling
Microsoft Clearinghouse. I am very reluctant do to so because, as I upgrade parts of my infrastructure to Server 2012, I’d need to then ask Microsoft to manually upgrade a part of my license back as well.
Am I missing something? What should I do to get my 2012 CAL to be issued to 2008 R2 server

Hi, I have tried several other possibilities.
I change expire date for my temporary assigned license (2008 CAL overused). It can be done, by changing Active Directory user properties – msTSExpireDate. When I restart my Session Host server and logged again, my license was renewed
for next 60 days (event ID - 4145).
I also delete information about license for this user (clear msTSExpireDate and msTSLicenseVersion). And the license was successfully removed from License Manager. After another SH restart it gets the same – 2008 overused – license
(event ID 4143 - license server has successfully issued …)
I now, that changing info in AD attributes is a little trick, and this is not a real value - only a reference, but it was useful to delete or change expiration date of license. But it didn’t change type of license as I expected.
Reference -
http://discussions.citrix.com/topic/243320-windows-2008-licensing-questions/
To TP:
I have found your post with information:
If you have a Server 2012 RD Licensing server you may install your 2012 RDS CALs on it (no downgrade necessary) and then set your Server 2008 R2 RDSH to
use the 2012 RDL server. The 2012 RD Licensing server will automatically issue the CALs as 2008. -
https://social.technet.microsoft.com/Forums/windowsserver/en-US/6046ded1-96bf-4d79-89ce-38aac2a6694e/can-we-use-windows-server-2012-rds-cal-license-in-rds-2008-r2-server?forum=winserverTS
And it showing my situation in brief. I also found
similar problems, but the solutions don’t meet my expectations.
https://social.technet.microsoft.com/Forums/windowsserver/en-US/dcfb1966-89a8-4b5d-bf5a-ff03ac0b7a66/rds-cal-licenses-not-recognized?forum=winserverTS
– “sudden all of the CALS were available”
https://social.technet.microsoft.com/Forums/windowsserver/en-US/f1228599-8452-4a3e-a263-061de14bfcfe/server-2012-rds-builtin-overused-cals-issue?forum=winserverTS
– “this should go away after a while”
Is there a way to determine this time you mentioned before? Or should I just wait patiently…

Mail Per User Quotas Not Working

We just migrated from 10.9 server to the new 10.10 server and noticed that our per user mail quotas were no longer working. If I change the Server app - Mail setting - to have a global mail quota on it work, however, we have a few accounts that we need to leave unlimited and the per user quota will not override the global quota. So far we have had to leave the global quota disabled because of this.
Even without global quota turned off - trying to set per user mail limits is still not working. We are changing it thru the Server app and clicking users - selecting a user - then select edit mail options - and changing the setting for the limit size. No matter what we set it to - it will not work.
Does anyone know what command or how to change the per user quota limits from the command line? I found that Dovecotadm quota -u username shows you what the quota is, but I am stumped as how to change it via a command line or thru another method since the server app is not working.
Any help would be appreciated!
ps. Also posted my doveconf -n file below, but I am missing if there is anything not configured properly.
bash-3.2# dovecot -n
bash: dovecot: command not found
bash-3.2# doveconf -n
# 2.2.5: /Library/Server/Mail/Config/dovecot/dovecot.conf
# OS: Darwin 14.1.0 x86_64 hfs
aps_topic = com.apple.mail.XServer.a1c54f6d-f4ad-4431-b882-0f11570dd637
auth_mechanisms = cram-md5 plain login
auth_socket_path = /var/run/dovecot/auth-userdb
auth_username_format = %n
debug_log_path = /Library/Logs/Mail/mail-debug.log
default_internal_user = _dovecot
default_login_user = _dovenull
disable_plaintext_auth = no
first_valid_gid = 6
first_valid_uid = 6
imap_id_log = *
imap_id_send = "name" * "version" *
imap_urlauth_submit_user = submit
info_log_path = /Library/Logs/Mail/mail-info.log
log_path = /Library/Logs/Mail/mail-err.log
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c
mail_access_groups = mail
mail_attribute_dict = file:/Library/Server/Mail/Data/attributes/attributes.dict
mail_location = maildir:/Library/Server/Mail/Data/mail/%u
mail_log_prefix = "%s(pid %p user %u): "
mail_plugins = quota zlib acl fts fts_sk
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave
mdbox_rotate_size = 200 M
namespace acl-mailboxes {
list = children
location = maildir:/Library/Server/Mail/Data/mail/users/%%u:INDEX=/Library/Server/Mail/Dat a/mail/shared/%%u
prefix = shared.%%u.
separator = .
subscriptions = no
type = shared
namespace inbox {
inbox = yes
location =
mailbox Drafts {
    special_use = \Drafts
mailbox Junk {
    special_use = \Junk
mailbox Sent {
    special_use = \Sent
mailbox "Sent Messages" {
    special_use = \Sent
mailbox Trash {
    special_use = \Trash
prefix =
namespace list-archives {
list = children
location = maildir:/Library/Server/Mail/Data/listserver/messages/archive/lists/%%u:INDEX=/ Library/Server/Mail/Data/listserver/messages/archive/shared/%%u
prefix = archives.%%u.
separator = .
subscriptions = no
type = shared
passdb {
driver = od
passdb {
args = /Library/Server/Mail/Config/dovecot/submit.passdb
driver = passwd-file
plugin {
acl = vfile:/Library/Server/Mail/Config/dovecot/global-acls:cache_secs=300
acl_shared_dict = file:/Library/Server/Mail/Data/shared/shared-mailboxes
fts = sk
quota = maildir:User quota
quota_warning = storage=100%% quota-exceeded %u
quota_warning2 = storage=85%% quota-warning %u
sieve = /Library/Server/Mail/Data/rules/%u/dovecot.sieve
sieve_dir = /Library/Server/Mail/Data/rules/%u
stats_refresh = 30 secs
stats_track_cmds = yes
protocols = imap lmtp sieve pop3
quota_full_tempfail = yes
service auth {
extra_groups = _keytabusers
idle_kill = 15 mins
unix_listener auth-userdb {
    user = _dovecot
service dns_client {
unix_listener dns-client {
    mode = 0600
service imap-login {
inet_listener imap {
    port = 143
inet_listener imaps {
    port = 993
    ssl = yes
service_count = 0
service imap {
client_limit = 5
process_limit = 200
service_count = 0
service indexer-worker {
user = _dovecot
service lmtp {
unix_listener lmtp {
    mode = 0600
service managesieve-login {
inet_listener sieve {
    port = 4190
service pop3-login {
inet_listener pop3 {
    port = 110
inet_listener pop3s {
    port = 995
    ssl = yes
service pop3 {
client_limit = 5
process_limit = 200
service_count = 0
service quota-exceeded {
executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-exceeded .sh
unix_listener quota-exceeded {
    group = mail
    mode = 0660
    user = _dovecot
user = _dovecot
service quota-warning {
executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-warning. sh
unix_listener quota-warning {
    group = mail
    mode = 0660
    user = _dovecot
user = _dovecot
service stats {
fifo_listener stats-mail {
    mode = 0600
    user = _dovecot
ssl = required
ssl_ca = </etc/certificates/mail.maxxx.com.3524D1A33970C65E8A8DFF78E757DDE3C66AED10.chai n.pem
ssl_cert = </etc/certificates/mail.maxxx.com.3524D1A33970C65E8A8DFF78E757DDE3C66AED10.cert .pem
ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!ADH:!eNULL
ssl_key = </etc/certificates/mail.maxxx.com.3524D1A33970C65E8A8DFF78E757DDE3C66AED10.key. pem
ssl_key_path = /etc/certificates/mail.maxxx.com.3524D1A33970C65E8A8DFF78E757DDE3C66AED10.key.p em
userdb {
args = partition=/Library/Server/Mail/Config/dovecot/partition_map.conf global_quota=0 enforce_quotas=yes
driver = od
userdb {
args = /Library/Server/Mail/Config/dovecot/submit.passdb
driver = passwd-file
verbose_proctitle = yes
protocol lmtp {
mail_plugins = quota zlib acl fts fts_sk sieve
protocol lda {
mail_plugins = quota zlib acl fts fts_sk sieve push_notify
protocol imap {
mail_max_userip_connections = 20
mail_plugins = quota zlib acl fts fts_sk imap_acl imap_quota imap_zlib
protocol pop3 {
mail_max_userip_connections = 6

I guess the problem didn't resolve itself, rather it has revealed that it is intermittent (my favorite kind).
What could made a message sent to a legitimate alias username not get picked up during the imap connection. I know the smtp server accepted the message (see logs above).

Setting A default view per location per user VSM7.6

Hello
Is it possible to define a default view for each location per user with VSM 7.6 ?
In other words, I would like for a user X , once logged, when he hits any location name, he gets a default view composed of all or a subset of the cameras with the secondary stream .
Is this possible with VSM7.6 ?
thanks.

Hi,
First enable that end user can set rows per page displayed. (that you did disabled)
Run page. Set rows per page to report to 10.
Save default report from action menu.
Then disable that end users can not set rows per page.
Regards,
Jari

How do I run a user account from an external HD?

How do I run a user account from an external HD? I will be away from my desktop iMac and want to use our MacBook Pro overseas for two months with my iMac user account copied to an external drive.

1. WARNING: This procedure is for advanced users only. Some third-party software may not work as expected, or may not work at all, if the home folder is moved.
2. Back up all data.
3. Copy your home folder to the desired location, which must be on a volume of type "Mac OS Extended (Journaled)" with file ownership enabled, as shown in the Finder Info dialog. Encryption is optional. The volume must be on a local storage device, not on the network, and it must be mounted automatically at startup — before any user logs in. A disk image will not work.
The name of your home folder is your short user name. Do not rename it. Do not copy the "Users" folder.
5. Select
 ▹ System Preferences ▹ Users & Groups
Click the lock icon and authenticate. Right-click or control-click your name in the account list, and select Advanced options from the popup menu. In the sheet that opens, change the location of the home directory. Log out and log back in.
6. Test. If you have problems, reverse the above steps. If you got this far, you should have no trouble doing that. If everything works as you expect, delete the original home folder.

Logging to a systemd per-user journal from shell

Similar Messages

Maybe you are looking for