Mac users prompted for password when reading PDFs from Internet
We produce PDFs with a randomly generated password to "protect" them from being editted.
Periodically, we get complaints from Mac users who, upon clicking the PDF link, are prompted to enter the password. My guess at this point is that they have Acrobat (not Reader) installed and it's wanting to open the PDF in an editable mode by default.
Does this sound correct?
What instructions should we give them to work around this issue? Is there a settings change for this (least desireable) or a Ctrl-Click sequence to get it in "read-only" mode?
We're not Mac folks -- don't have one in-house -- so we haven't had an environment to experiment in.
BTW: The issue is with our clients' customers so we need something fairly non-technical for directions.
Thanks, Scott
Scott, Check your private messages.
Similar Messages
-
Mac user prompted for password for Mac server shares at every login
I have a client that uses Mac machines. The server is also Mac server.
The machines are not in a domain/realm, so each machine has its own user database including the server.
The user connects to a share on the server, where she is set up with the same user name and password as on her local Mac for convenience.
When you connect to the share the first time, you are prompted to provide the credentials, and you can select to save this password in Keychain. We selected YES, remember this password in my Keychain.
However, at every login, she has to provide credentials to connect to the share again.
Any ideas why keychain is not remembering this login so that she can re-connect to the share (it is set as a Login Item) seamlessly?
Thank you,
SandraUnix shortnames can be viewed/set on the client computers by opening system preferences, going to users & groups, Right-Clicking on a user, and opening the "Advanced Options..." pane. In the field that says "Account Name:" is the UNIX shortname that the system assigned o that user when their account was originally created.
DO NOT CHANGE THE USER'S SHORTNAME HERE. All kinds of bad things will happen. Once it is established (as your original post suggests), you don't want to change it.
What you can do is on your server, in the users & groups sharing preferences, establish server accounts for your users that have identical shortnames to the ones they already have assigned on their individual macs. -
Mac not asking for Password when waking up from Sleep.
Hi. I have a MacBook Pro that recently stopped asking for my password when the screen sleeps... I am concerned about security and would like to have this feature working again.
I have the "Req password to wake..." setting checked in the Security pref pane and I've tried both rebooting as well as resetting the pram with removing the battery & power and holding down the power button.
Any help would be greatly appreciated.Have you tried to deselect, restart, then select and restart... see if that works?
-
SharePoint prompting for password when saving word document
Saving a word document back to SharePoint always prompts for credentials.
I am the administrator for a SharePoint farm. We have enabled kerberos, and added the portal to the intranet zone in Internet Explorer by group policy. Most of the time this limits the amount of password prompts our customers see (including viewing the portal
in a browser, and opening documents); however, we are still getting the prompt for credentials when trying to save a word document back to SharePoint.
Here are some details: - SharePoint 2010 - Word 2010 - Kerberos enabled - Portal added to intranet zone in IE - Checkbox for passing automatic credentials enabled
Can anyone help? Is there something I've missed? Is this prompt just unavoidable?Hi,
Internet Explorer uses the Web Client service when you use Internet Explorer to access a
WebDAV resource. The Web Client Service uses Windows HTTP Services (WinHTTP) to perform the network I/O to the remote host. WinHTTP sends user credentials only in response to requests that occur on a local intranet site.
However, WinHTTP does not check the security zone
settings in Internet Explorer to determine whether a Web site is in a zone that lets credentials be sent automatically.
Click Start, type regedit in the Start Search box, and then press
ENTER.
Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters
On the Edit menu, point to New, and then click
Multi-String Value.
Type AuthForwardServerList, and then press ENTER.
On the Edit menu, click Modify.
In the Value data box, type the URL of the server that hosts the Web share, and then click
OK.
Note You can also type a list of URLs in the
Value data box. For more information, see the "Sample URL list" section in this article.
Exit Registry Editor.
After this registry entry is created, the WebClient service will read the entry value. If the client computer tries to access a URL that matches any of the expressions in the list, the user credential will be sent successfully to authenticate
the user, even if no proxy is configured.
Note You have to restart the WebClient service after you modify the registry.
Reference: http://support.microsoft.com/kb/943280?wa=wsignin1.0
-Ivan
Ivan Sanders My LinkedIn Profile,
My Blog,
@iasanders. -
Mac users seeing jumbled characters when opening PDF
One of our company websites has multiple PDF downloads. PC users don’t have any problems opening PDFs from the site but Mac users seeing the following when they try to open a PDF from the site.
http://www.stanpro.com/downloads.aspx
%PDF-1.6 %âãÏÓ 207 0 obj <<>/Metadata 204 0 R/AcroForm 248 0 R/Pages 203 0 R/Type/Catalog>> endobj 204 0 obj <>stream uuid:df0e711f-70bc-4857-bdd1-275bcfcc6091 adobe:docid:indd:70b3223d-78fa-11dd-af15-b73c49d06c8d proof:pdf 70b3223c-78fa-11dd-af15-b73c49d06c8d adobe:docid:indd:70b32237-78fa-11dd-af15-b73c49d06c8d ReferenceStream 72.00 72.00 Inches uuid:39efc3b3-c5a6-4fba-9c26-db1dd9cdabc6 uuid:A72AE2EB8F63DB119478C1231986404D
What causes this problem for a Mac user?Unfortunately we can't download a sample PDF unless registerd but, if they are seeing %PDF-1.6 in the text of the PDF when opening, my guess would be that they aren't opening it with Reader.
That is the code that they are viewing. Reader wouldn't show that. They may be opening it in Word or some other text editor. -
Outlook 2007 Clients Prompt For Password When Opening
I am running Exchange 2007 Standard. New outlook 07 clients prompt for password each time it is opened. Older clients do not prompt for password. Is there any way for outlook 07 to not prompt for password? Users already logged into domain, should their credentials not be recognized automatically like with outlook 03?
This fixed it for me.
http://social.technet.microsoft.com/Forums/en-US/exchangesvrgeneral/thread/383d130e-869f-4fce-9502-8b340904b0ba/#636c5a5e-c61f-414b-8e85-562c888b83cc
Quote:
Same problem here after restarting SBS 2008 for upgrades (annoying login box popping up after starting Outlook and also other times).
This solved the problem for me:
IIS Mgr on SBS 2008 / - / SBS Web Applications /
- SSL Settings / Client certificates - Stop / Start web server after changing settings:
Autodiscover: Ignore
EWS: Ignore
OAB: Accept *)
owa: Accept *)
Rpc: Accept *)
RpcWithCert: Accept *)
*) All these have to be Accept to get rid of login box
Best regards
Bjorn
I was having the same issue. SBS2008, Exchange 2007. Only being prompted in Outlook 2007 clients. Tried a lot of different things to fix it, but none worked. This started happening after a round of security updates but I could not find KB2412171 on the list. -
Prompted for Password when Moving Item to Trash
Whenever I attempt to send anything from my Startup Disk to the Trash (This problem only happens when moving to the trash from the Startup disk, not with my external hard drive or any USB drives attached) it prompts for my Administrator Username and Password. When I do that, the file then skips the trash and is deleted immediately. Items already in the trash are seemingly unnaffected.
I did some research online, which led me to believe it might be my trashes.db file. I followed some steps to fix this file in the UNIX Terminal, but I can't do that without a SU (SuperUser) account, so I enabled the root account and used that for the repair. However, nothing has changed and I am continuing to see this problem.
I am running OS X Lion, 10.7.2, and it is a 2010 Mac Mini. I am an administrator account and I have access to UNIX sudo commands through the root user set up on my computer. Any help would be greatly appreciated.Thanks to both for your replies.
Eric,
Thanks much for that link and the Apple Token workaround. That did the trick!
Thanks a lot for your help.
Best,
Andre -
Outlook 2013 repeatedly prompts for password when connecting to Exchange Server 2010
I am trying to configure Outlook 2013 on a Windows 8.1 Pro client. The exchange server is 2010 SP1 and works just fine with OL 2010.
When I configure OL 2013, the configuration prompts for a password for the account repeatedly with both NTLM and Basic Authentication chosen. OL 2013 tries to connect and then it disconnects with the password for the account repeatedly prompted. When
the credentials are entered, the prompt reappears immediately.
Might anyone help?
Many thanks in advance
ShuvoHi Shuvo,
Please check whether this user can access mailbox in OWA. Please manual setup this account in Control Panel to have a try. Make sure your
Server name and User name are configured correctly. If you are configure the account in internal domain environment, please click
More Settings, set Negotiate Authentication in
Security tab and uncheck Connect to Microsoft Exchange using HTTP in Connection tab.
If there is any updates, please feel free to let us know.
Thanks,
Winnie Liang
TechNet Community Support -
Stop prompting for password when uninstalling an application
Is there any way to turn off OS X from prompting for my password when deleting/uninstalling an application?
This is a security feature I would not want to disable. In addition to helping prevent accidentally deleting an app, it also protects against potential installation of nefarious malware.
True, it is a little bit of inconvenience, but, really, how often is it necessary to uninstall something? -
Kerberos - client has TGT, but prompted for password when accessing share.
I'm getting ready to deploy Leopard to my client base and I'm doing final testing. I have a magic triangle/cylinder of destiny situation, using Active Directory and Open Directory running on 10.5.2.
With a 10.5.2 client bound to both directories, I can log in to the client machine with an AD account, however when I try to connect to a file share, I am prompted for name & password. I checked /System/Library/CoreServices/Kerberos, and I have a TGT.
I'm stumped as to why I'm being prompted when I have a TGT. Any ideas?Go back to the basics. Time and DNS. Make sure all servers are using the same time server (OD box points to AD domain controller - use ntpq -p to confirm time sync). Make sure forward and reverse resolve works for all servers in the chain. If this all checks out, then look at your AFP service settings or temporarily launch SMB and see if it will issue a service ticket.
You are talking to two different machines but with a common auth point. The first process, getting the TGT is entirely devoted to communication with the AD domain. The KDC in AD agreed that you are who you claim to be and that you can be trusted, thus granting you access to domain resources. The next step is attempting to access a resource on a server that you believe to be part of the trust. In this case, an OS X Server running AFP (assumably). In this case, the OD system needs to be configured as a domain member of the AD environment and all services "Kerberized". This is an area in which Apple needs a little work under Leopard. Tiger was so easy. I've had better luck using dsconfigad's enablesso than with the GUI tools.
However, assuming that you performed all the usual steps, first review the contents of your edu.mit.kerberos file and make sure that Leopard did not rewrite the file and place the OD system in as the KDC. That is all wrong. Next, take a look at your principles by using klist -k. Is the realm information correct? And finally, review the settings in the afp configuration file. The realm information in that file is often messed up if you launch AFP before you have the server bound up properly.
My guess is that the OD box thinks it is the KDC and you will likely need to manually edit the edu.mit.kerberos file and force the file to be static (remove the third and fourth lines). This is common if you joined the AD domain and then promoted the server to OD Master.
Hope this helps -
Ipad not prompting for password when trying to access a wireless router
bought new ipad cannot access internet thru wireless router have 2 iphones that work. try to access a protected wireless network but is not asked for password just told cannot access.
This link may be helpful.
http://support.apple.com/kb/TS1398 -
Adobe Acrobat Standard and Pro - dialog prompt when opening PDF from Internet Explorer 9
Good morning.
I am having an issue where our ends users that have either Adobe Acrobat X Standard (AAXS) or Adobe Acrobat X Pro (AAXP) cannot open a PDF within Internet Explorer 9 without being prompted by a dialog box to OPEN, SAVE or SAVE AS. Our user that have Adobe Reader X (ARX) only are ok. The ARX users can click on a PDF link within the browser and it will automatically open in a new tab. However, the AAXS and AAXP users will click on that same link, but are then prompted with a dialog box to either OPEN, SAVE or SAVE AS. Has any one else seen this before? We would like it to be so that all users - no matter what Adobe PDF program they are using of the 3 mentioned - can open a PDF link by just clicking on the link and no additional dialog options appear.
The ARX users have the same Internet settings within the Adobe preferences as the AAXS and AAXP users. The check box is checked to have PDFs open within the browser, which they do, but that dialog box always appears for AAXS and AAXP users. Any thoughts?
Thank you.Thanks for the reply. I stumbled across something today after posting. I had already known that If the ARX user also had one of the other products (AAXS or AAXP), then they would get the dialog box. Here is what I just figured out: if the user uninstalled ARX and re-installed (still having both ARX and AAXS or AAXP in the end) then they no longer get the dialog box. It seems like perhaps its an issue the AAXP and AAXS are overwriting something in the registry.
-
Why do I get a black screen when loading pdf from internet
I have a MacBook Pro and upgraded to Adobe Reader 11.0.06. Now when I attempt to download a pdf from the internet, the Reader screen opens but the text portion of the screen is black. I can open pdf file i have previously saved.
Another possibility to to use the Schubert PDF plug in. It has been around for years and works great.
http://www.schubert-it.com/pluginpdf/
I do not know if it will work in Lion but it does work in Snow Leopard.
Steve H -
IMAP users continually prompted for password when switching folders
I've sifted through /var/log/mailaccess.log and I notice the following message is logged when the above behavior occurs:
Jan 19 00:59:49 hostname imap[3879]: badlogin: [XXX.XXX.XXX.XXX] GSSAPI [SASL(-13): authentication failure: user username is not allowed to proxy]
XServe Dual G5 Mac OS X (10.4.8) latest updates as of 1/19/07to elaborate on this issue a bit more.
This issue seems to be isolated to imap clients only and started occurring two days ago on a server that has worked great for a long time. The exception is Squirrelmail which works flawlessly (Thunderbird, entourage, mail.app, etc. seem to have the problem)
The only change (that we are aware of) is a shift in the spamassassin kill rates (from 7 to 6). However reverting this doesn't help.
A user can log into their imap account without problem but when navigating to a different iMap folder the authentication information is sent, fails and reprompts then for their credentials. The second attempt (retyping of the password) works and they see their email.
The problem seems to be isolated to a few users and does not affect everybody. We can not find a commonality between them though.
The error message (posted above) is what we see in the log files. We see this in
system.log
asl.log
if it helps we are also getting some skiplist errors in mail.log
"Message skiplist: recovered"
Finally we ran all of the latest updates and are fully "upped" so to speak.
POSTCONF -n
alias_maps = hash:/etc/aliases,hash:/var/mailman/data/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debugpeerlevel = 2
defaultprocesslimit = 75
disablevrfycommand = yes
enableserveroptions = yes
html_directory = no
inet_interfaces = all
localrecipientmaps =
luser_relay = undeliverable
mail_owner = postfix
mailboxsizelimit = 0
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
messagesizelimit = 0
mydestination = $myhostname,localhost.$mydomain,localhost,youthchannel.org,mnn.org
mydomain = mnn.org
mydomain_fallback = localhost
myhostname = mail.mnn.org
mynetworks = 127.0.0.0/8,192.168.0.0/16,216.164.83.166/32
mynetworks_style = host
newaliases_path = /usr/bin/newaliases
ownerrequestspecial = no
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpdclientrestrictions = permitsaslauthenticated, permit_mynetworks, rejectrblclient cbl.abuseat.org, rejectrblclient bl.spamcop.net, rejectrblclient sbl-xbl.spamhaus.org
smtpddatarestrictions = permit_mynetworks, rejectunauthpipelining, rejectmulti_recipientbounce, permit
smtpdhelorequired = yes
smtpdhelorestrictions = permitsaslauthenticated, permit_mynetworks, checkheloaccess hash:/etc/postfix/helo_access, rejectnon_fqdnhostname, rejectnon_fqdnsender, rejectnon_fqdnrecipient, rejectunknown_senderdomain, rejectunknown_recipientdomain, rejectinvalidhostname
smtpdpw_server_securityoptions = login,plain,cram-md5,gssapi
smtpdrecipientrestrictions = permitsaslauthenticated, permit_mynetworks, rejectnon_fqdnhostname, rejectnon_fqdnsender, rejectnon_fqdnrecipient, rejectunknown_senderdomain, rejectunauthdestination, rejectunlistedrecipient, rejectrblclient sbl-xbl.spamhaus.org, rejectrblclient cbl.abuseat.org, rejectrblclient bl.spamcop.net, permit
smtpdreject_unlistedrecipient = yes
smtpdsasl_authenable = yes
smtpdsenderrestrictions = permitsaslauthenticated, permit_mynetworks, rejectunknownaddress, rejectunknown_senderdomain, rejectnon_fqdnsender, permit
smtpdtls_certfile = /etc/certificates/Default.crt
smtpdtls_keyfile = /etc/certificates/Default.key
smtpduse_pwserver = yes
smtpdusetls = no
strictrfc821envelopes = yes
unknownaddress_rejectcode = 554
unknownclient_rejectcode = 554
unknownhostname_rejectcode = 554
unknownlocal_recipient_rejectcode = 550
Thanks for any insight.
xServe Dual G5 Mac OS X (10.4.8) powerbooks, ibooks, imacs, n' more
xServe Dual G5 Mac OS X (10.4.8) powerbooks, ibooks, imacs, n' more -
How to disable the prompt for password when receiving a call on Lync mobile on iPhone
We are doing a pilot on Lync 2013. We have mobile phones: i Phones.
When we are receiving a call, we are prompted to enter password to take the call, which in certain cases, might be a real irritant. Is there a way to bypass, or simply removing this prompt?I am not aware of any password to receive calls (and certainly there's no option I am aware of within Lync mobility policy settings)
Is this a phone password (i.e. such as the PIN code) or do you enter your AD password?
If it's the phone password then you can turn it off through Settings > Passcode, unless it set by company policy (i.e through ActiveSync policies in which case this is set through Exchange). Bear in mind that if it is your phone password then you'll have
no security on your phone.
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
Georg Thomas | Lync MVP
Blog www.lynced.com.au | Twitter
@georgathomas
Lync Edge Port Check (Beta)
Maybe you are looking for
-
Spool command in SQL Developer 3.1
Hi, I am using sqldeveloper-3.1.05.97 . There are few scripts that I need to run on a EBS sandbox to generate txt files for a analysis tool input . The script is meant to be run with SQL * Plus but I am getiing a TNS listener error due to which I wan
-
Not able to jump to a specific time on a music track (time slider has disappeared!)
I don't know how it happened (update of iOS version?) but the time indicator saying how far into the music track as well as the time slider allowing me to 'scratch' to a specific time have both disappeared. Only the volume slider remains! How can I r
-
Reports 6i - Reports won't stay in foreground.
We are using Oracle Forms and Reports 6i for Win32 and when a user launches a report or while a report is generating for previewing, if they click on the form that called it, the report preview will open in the background hidden behind the Forms appl
-
New computer won't connect to internet
I just got a new hp pavillion computer and it won't connect to my wireless. The details say something about IPv6 connectivity having no network access. I'm sending this from a borrowed Nook Color and my wireless is working just fine. Can anyone pleas
-
I uninstalled FF and reinstalled it with the same results. IE and Chrome work fine. This is something that just started yesterday afternoon. Can you help?