Network user can't see local home directory

Hi there,
I have a Mac Mini running Lion Server with Directory Services turned on. I've been using this to allow network users to log into Lion clients, as well as set up mobile accounts. This has been working fine.
Now I've just created a new network user for use with a Mountain Lion client and have experienced some strangeness with this new user's home directory. The binding to the directory was fine, and the credentials for the network user were fine. However, when logged in, this new user has his home drive mapped to /Network/Servers/<servername>/Users/<username> rather than the expected /Users/<username>. This has bad side-effects. For instance, Chrome tries to save downloads to the server instead of locally.
What I can't work out is why the home directory isn't pointing to a local location. The other users (on Lion) have the same home directories defined in their Open Directory profiles. The only difference is the new user is on Mountain Lion, but I don't think this has any bearing to the problem.
Can anyone offer some advice?
Benjamin

So I took my Mac Mini running OS X 10.8 Server, along with two client laptops: one exhibiting the problem I described, and the other where network logins and home directories worked as intended.
Long story short, the guys at the Bar couldn't figure it out. The user definitions in Open Directory seemed ok, but they still couldn't work out why no local home directories were being created. Not sure if this helps, but in trouble-shooting, we also discovered that trying to login with a network user on the problematic laptop didn't work when the server wasn't on the network. It's as if the server is required to be present.
Anyway, the case has been referred to the business team, which is supposed to have more expertise with OS X Server.

Similar Messages

Network Users - Can't login without home folder

Hey everyone,
Got a problem. We upgraded our lab from 10.6.8 to 10.9.3. Preserving our settings and bootcamp by simply upgrading. After getting nearly all machines sorted out with active directory we are still having a problem with 2-3 machines with network user accounts being able to login. If no local home folder has been created prior to upgrading to 10.9.3 then the user cannot login, the login prompt dissapears then re-appears. Any way to fix this?
Here is a run down of the set-up.
Our settings force network users to have a local home folder on the local mac that they are logging into.
Mac OS X server is 10.6.8.
Active directory server is 2012 R2.
Network users without a pre-created home folder on the local mac prior to upgrade cannot login. The login prompt dissapears, then re-appears. No login.
Computers are managed with workgroup manager, as well as apple remote desktop. But no settings are applied, and no login scripts are being run.
Also I have noticed something concerning Mac OS X 10.8.5 and up. And that is in the active directory settings, if you bind to a domain (using active directory and not LDAP), lets say for example:
mydistrict.maindistrict.net
And you go to add your local active directory district to the Authentication/Contacts search policy eg: Active Directory/mydistrict.maindistrict.net
it will only show: Active Directory/mydistrict/alldomains.maindistrict.net.
It shows a list of all domains for the forest. But it also adds the district that you bound to as the search directory?
Let me use a precise example using actual names.
Bind to local district: pineville.ketsds.net
Now in search policy on 10.8.5 up to 10.9.3 it displays possible search domains like this:
Active Directory/PINEVILLE/pineville.ketsds.net <- The domain we want.
Active Directory/PINEVILLE/all-other-domains-in-forest.ketsds.net <--Which is fine.
Which is all fine, but when we select the local domain for authentication, and contacts search it adds it, but in the overview it says that it is not in our search policy even though it is.
On Mac OS X versions below this (10.6.8 and down, cannot verify for 10.7 as we do not have systems with it) it displays the search domains as:
Active Directory/pineville.ketsds.net
as compared to this on 10.8.5 and above:
Active Directory/PINEVILLE/pineville.ketsds.net
as well as all the other domains, and when you add the local to the search policy it does not give the error that it is not in your search policy. Is there anyway to make this happen on 10.8.5 and above? We have tried everything. Network accounts will login even though it says this, it is just annoying.
Last question is on one computer that we upgraded, we had a problem with the network accounts. Tried deleting the .plist for network preferences, and the Directory services folder as well as the Open directory folder and now it create the open directory folder as locked and any changes made with the directory utility in the search policy is immediatley reverted once we hit apply.
Summary of questions:
1.) Network users cannot login without local folder created prior to upgrade.
2.) Mac OS X 10.8.5 and above does not correctly add Authentication/Contact search policy domains as it does in 10.6.8 and below.
3.) Active Directory/Open Directory Authentication/Contact search policy settings keey reverting after applying. (Happened prior to deleting .plist files and AD/OD folders in /Library/Preferences)
Thanks guys, sorry if thi post is so long! :/

-BUMP
Not sure what the bump policy is but my post is fadiing fast. Third page already.
Kind of an urgent situation guys, any help or insight at all would be greatly appreciated!!

How do you setup a user mobile account, with the home directory stored locally and not synced to the server?

I want to be able to setup a user mobile account, with the home directory stored locally and not synced to the server. What is the best way to do this? I am running Server 10.6 with 10.6 clients. Open Directory will be used to authenticate and manage preferences. Also, this one account will be used simultaneosly in a computer lab setting, so files will be stored locally in the client, hence the need to NOT sync to the server. Any Ideas?

currofelix wrote:
So what does WGM Look like in the Home Tab? afp://servername.domainname/Users? or afp://Users?
The attached screen shots should help you:
You will only have to do this step once. Obviously you want to use the user's shortname here.
Then, you will see this as an option in WGM:

MacBook can't see my home wireless network after upgrade to OSX 10.8.5

After upgrading to OSX 10.8.5, my MacBook does not detect any wireless nertworks. My iPad and iPhone work fine, my router has been rebooted, WiFi is turned on, and the ethernet connection is how I am writing this message to you via broadband. There are a half dozen wireless networks in range (according to my iPhone) but the MacBook cannot find the router I am sitting next to. Any ideas on how to correct this issue?

It appears an SMC reset was required:
HT5815 I've just done the 10.8.5 update on my MacBook Pro end of 2008, and WiFi don't work after reboot... Impossible to activate it...
Here is your other post: MacBook can't see my home wireless network after upgrade to OSX 10.8.5
If you reply to it and marked it "solved", perhaps with a link to that post (copy and paste it, or just say you performed the SMC reset) it will help others find a solution. Thanks!

I am logged on to a wifi and can see files from other users on this network. Can they see my files as well?

I am logged on to a wifi and can see files from other users on this network. Can they see my files as well?

Yes and no. It depends on your settings.
Go into "System Preference" and click on "Sharing"
If you have services checked such as "File Sharing" then others can see your computer on the network. But you really don't need to worry because others would need your username and password to have access to your files.
What you see are just computers annousing themselfs on the network. To have access to said computers, Username and Passwords are required.
Hope this helps

Can't create portable home directory

I recently changed a user's login in Active Directory (she changed her last name.) I changed her local home folder on her Mac to her new login, ran chown on the folder to update her home directory ownership to the new login name and everything was fine. She could log in and access her account using her new login. However, she now gets the message "Can't create portable home directory" when logging in. Nobody else on the machine gets that message. I understand what it's telling me, but I don't know where to look to fix it.

see how many occurrences her shortname has in netinfo and delete the second one. There is a conflict on the local machine w/ her userid and shortname or try removing the first acct and let it rebuild her new user acct on the local machine.

HT202233 If I made the mobile account for a network user, can this user unlock the FileVault2-disk?

My Mac is connected to Microsoft Active Directory. Every time I schould unlock the disk with the local admin, then login as network user.
If I made the mobile account for a network user, can this user unlock the FileVault2-disk?
Thanks.

Yes, but the FileVault password won't be updated automatically if the login password changes.

LDAP with local home directory?

Greetings.
I'm trying to configure the Macs to authenticate based off of the LDAP server. I'm pretty sure I've got that part working, but I'm running into difficulty figuring out how to specify using a local home directory template rather than an NFS / AFP portable home directory. All the guides on the internet out there seem to want to use NFS, which we don't have setup (and don't intend to).
Based on instructions of various texts, manuals, and blogs, I've created a user account called "labuser", and a group called "users", and then given any member of the group "users" write-access to the folder /Users/labuser. This way they login to a default home directory (at least for now). What information do i specify for LDAP's "apple-user-homeDirectory" entry to make it look for this /Users/labuser folder rather than an NFS share?

So basically I should add C:\Documents and Settings instead of /Users for windows accounts?
Because if I don't specify anything it creates a roaming profile on the windows machine, and puts the user directory both on the windows machine and a copy on the server under /Users/Profiles. Or at least is what is doing now... so I manually have to change the profile to local on the windows machine and delete the folder on the server...

How can i know the home directory of my runtime report on registry

Dear sirs,
please how can i know the home directory of my runtime report on registry?
i have a lot of homes and when i make file to modify the home directory it not done and that is mean that i make effect of another home, and i want to know which home is activated in registory.
Thanks in Advance and waiting the help

If you have a backup on computer iTunes see below:
iTunes > Preferences... (Windows: Edit > Preferences...) > Devices > hover over your backup with the mouse, the serial number will popup.

User can't see items to add to worksheet

Hello!
I have a problem with some user who does not see any items from business area when trying to create workbook in Discoverer Dekstop.
Environment:
OD:XP Prof SP2
DB: Oracle XE 10.2.0.1.0 Production
Desktop Clinet 10.1.2.48.18
EUL Library 10.1.2.48.18
EUL 5.1.1.0.0.0
The testing scenario was:
created a user in Oracle XE and 4 tables imported in this schema, create joins, indexes... Created 5 users with select granted on this tables. Each user has his own EUL and all can work with no problems except one user. This particular user log into Discoverer Administrator and creates an EUL and Business area. But when the user logs into D.Desktop and tries to create a Workbook, at setp 2 of the Create Workbook wizard there are no items to add to the Worksheet. All the users have the exactly the same clients, privileges and were created in the same way. All off them can work normally in D.Administrator. Any ideas why this user can't see any items from BusinessArea?
Thanks for Your help, Peter

Hi Peter
You might get better luck if you post questions about Discoverer into the Discoverer forum: Discoverer where I am one of the principal answerers of questions.
With regards to this particular issue it sounds as though the user does not have the correct EUL setup inside Desktop.
To check and fix, use this workflow:
1. Log on to Discoverer Desktop
2. When prompted whether to create or open a workbook, click the Cancel button
3. From the toolbar, select Tools | Options
4. Click the EUL tab - it is the last one so you will need to scroll across
5. Look at the value for Default EUL
6. If it is not the one the user created, use thr drop-down to select the right one
7. Click the OK button
8. From the toolbar, select File | Connect to Database and reconnect
9. The user should be able to see the items now
When an EUL is created you have the option of creating a public or a private EUL. If any user creates a public EUL then all users will have access to that EUL but not to the business areas and items in that EUL, not at least until the owner grants access. New connections to Desktop will pick up a default EUL which will be one of the public EULs, and not always the EUL just created by the user on that machine.
Could this be the case with you?
I hope this helps
Best wishes
Michael Armstrong-Smith
URL: http://learndiscoverer.com
Blog: http://learndiscoverer.blogspot.com

How to stop the removing a user account and saving the home directory to a disk image?

I tried to delete one of two administers on my iMac (10.10.1). After more than 12 hours it will not let me quit System Preferences for it "is removing a user account and saving the home directory to a disk image". How do I finish deleting the administer and quit System Preferences?

I would recommend asking them in C# forums: https://social.msdn.microsoft.com/Forums/vstudio/en-US/home?forum=csharpgeneral&filter=alltypes&sort=lastpostdesc
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

A particular network user can't login to a mac in a classrom but other network users can. Then the network user can login to other identical macs in same classroom. Anyone seen this before?

A particular network user can't login to a mac in a classrom but other network users can. Then the network user can login to other identical macs in same classroom. Anyone seen this before? It has happen twice. Two different teachers in two different classrooms entering the correct user name and passwords and computer won't allow them to login. Then they try in different computers in same classroom and have no problem login.

Yes. I can login with a test user. And any other network user can login as well to this particular mac. Actually the mac has bootcamp and boots into either mac or windows. The same user entering the same login username and password can login into the windows side, but not the mac side.
I had this same issue last semester in another classroom, another mac and a different teacher. This summer I reformatted and imaged that mac and I asked that teacher to login today to that reimagened mac and she had no problem today doing so.

TS3276 Having trouble sending jpeg images as attachments in Mac email.....they go thru as images and PC users can't see the SAVE or QUICK LOOK boxes that Mac mail has. One friend scrolled over the image, right clicked on it and saved as a PNG file.

Having trouble sending jpeg images as attachments in Mac email.....they go thru as images and PC users can't see the SAVE or QUICK LOOK boxes that Mac mail has. One friend scrolled over the image, right clicked on it and saved as a PNG file.

Apple Mail isn't going to change the format of any of your attachments. it isn't going to corrupt them either.
Exchange is a transport protocol and server. The issue you describe is not related to Exchange.
There are many different versions of Microsoft Outlook in use and they all have e-mail bugs. Different versions have different bugs. Some Apple Mail hack to get around a bug in Outlook 2003 may cause the same message to be problematic in Outlook 2000. Fix them both and another issue will cause trouble in Outlook 2007. You can't fix this. Apple can't fix this. Microsoft can and has but that is irrelevant if your recipients are using older versions.
One specific problem is that Apple Mail always sends image attachments inline, as images, not as iconized files. You can change this with Attachment Tamer. Just be aware that use of this software will break other things such as Stationery. E-mail is just a disaster. To date, no one outside of Apple has ever implemented the e-mail standards from 1993. Apple has continually changed its e-mail software to be more compatible with the de-facto standards that Netscape and Microsoft have unilaterally defined and people documented as "standards" after the fact. The e-mail messages that Apple Mail sends are 100% correct and do not violate any of the original standards from 1993 or the Microsoft/Netscape modifications. The problem is entirely bugs and limitations in various versions of Outlook.

A user can only see the public area in a collaboration room

Hi all,
We have experienced that a certain user can only see the public area of
a collaboration room although the user has member rights to see more
content.
We have tried to remove the user from the room and add him again. It
did not help.
Other users have been added before and after this user without problems.
What could be wrong with this user?
Regards,
Ashwin

Hi Ashwin,
Check the roles and the groups by this user.. Is the same of the others users?
Regards
Eduardo

Some users can't see attributes in the Query Builder

Hi.
I have problem. Some users can't see some of attributes of info-object in the Query Designer. Where is the problem?

I think you would need to give more details on the problem,
as <b>some</b> users are not able to see <b>some</b> attributes.
Do they all share the same profile, what is the distinguishing thing among the some users who can see the attributes and the ones who cannot see the attributes.
Need to drill down further I guess.
Cheers
Anurag

Network user can't see local home directory

Similar Messages

Maybe you are looking for