New-MailboxFolder and permissions

I see a couple of other posts from people regarding this issue with the inability of an Administrator to create folders for other users using
New-MailboxFolder, but it seems most people give up pretty quickly.
When trying to run New-MailboxFolder on another user's mailbox, I get an error that the Mailbox doesn't exist.
How can I get this command to actually work? I followed the instructions on the TechNet article to assign the necessary rights to my admin account (Organization Management and Recipient Management).
I am on Exchange 2013, and I am running the EMS as a privileged user that is not configured as a recipient.
Thanks!

Hi,
BY default, The cmdlet New-mailboxfolder cannot be used from EMS to create folders in another user’s mailbox, this cmdlet must be run in context of the user. Because this cmdlet assigned to type self management role.
Check the role assignment with below cmdlet
Get-ManagementRole -Cmdlet Get-MailboxFolder
Get-ManagementRole MyBaseIptions | fl *scope*
I recommend this blog for more information about this cmdlet.
http://blogs.technet.com/b/ilvancri/archive/2010/08/20/get-mailboxfolder-is-not-working-amp-exchange-web-services-getting-started.aspx
Best Regards.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Lynn-Li
TechNet Community Support

Similar Messages

All files are locked, a new entry in permissions and more

Following instructions from here on how to try to correct another issue, I was repair permissions and to boot in safe mode. Since then all kinds of things are messed up.
I had to reset PRAM because the home and boot screens were were all stretched out of whack (this situation has occured once before shortly after getting this new machine)
EVERY SINGLE DATA FILE created prior to this safe mode is now LOCKED. EVERY ONE!!!!!! If I try to save any file so far I have tested, I am told the file is locked and I do not have permissions. My user mode didn't have administrative control before, but I changed that because unlocking everything to use it was more complicated having to enter the username and password. New files created are also locked. However, a new Pages file I have tested shows locked but it will save to the same file with a CMD-S.
Having to unlock files to save work in them really slows work. Apple not allowing Save As on Apple apps is getting really tedious. I tried with a non-Apple app (PhotoShop) and its files are locked after creation. This means I have to unlock every stupid file before I can save it, then it relocks If I go into Get Info to unlock the file, as soon as i close that window, the file shows locked when I do a new Get Info. This is not a good user experience!!!!!!!!!!!!!! I have hundreds of thousands of files used in publishing, graphics, photos, and music. I tried to save an existing Photoshop file back to the Desktop and was told I could not save because was locked - that I needed to unlock the file or enclosing folders. When Photoshop closes it says can't save Preferences because file is locked.
If I unlock the Sartup drive it relocks as soon as the Get Info window closes.
In Sharing and Permissions the user called Everyone has a custom settings and some files even have two Everyone entries. Newly created files have had the User with Read & Write and Staff and Everyone with Read Only. My user folder Get Info shows locked with the user, staff and everyone with Read & Write permmissions. If I unlock in Get Info it reverts to locked after I close the Info window.
Safari opens to the same page on this forum where another problem was discussed. I have reset selected items in Safari that I thought might have caused this, but no change.
Pages keeps opening a page that was thrown in the trash and is not even on the computer (at least doesn't show in the finder),
Numbers keeps opening a file that was opened and saved days ago.
iDVD will open the same project each time, even if something else has been worked on since.
I have cleared recent entries in these programs and the field keeps coming back when I open again.
I unchecked the Restore windows when quitting option in General Sys Prefs and when I open it again it is checked. I know that Lion will reopen a page if I quit without closing the window first. Now, at least with Apple apps, the same file opens now whether it exists or not as well as the new file I am opening by clicking on it.
I have run permissions check in Disk Utility several times.
It seems that it is affecting Apple apps that remember where there were last and the visiting history.
Autosave on apps other than Apple can't save because the files are locked and I get error messages.
iPhoto files saved on a firewire drive are also show locked but testing on a duplicate file, I found I can edit with PhotoShop and it will save the changes.
With Finale, it has saved the files, even though locked. The odd thing is that in the finder it shows the correct creation and modifided dates, but it shows an old last opened date. Pages documents show all three with correct dates/times.
I suspect there is at least one if not more Pref plist files that needs to be fixed, but I have now idea where to start.

HI,
Make sure you are logged in as the admin user.
Right or control click the MacintoshHD icon then click: Get Info
At the bottom of the Get Info window, click the gold padlock icon. You will be prompted for your admin password.
Under Privilege where you see: Read & Write "toggle" the arrows to set your permissions for system / admin etc.
Close the Get Info window.
Carolyn

Unable to download from AppStore, updates,etc.Messages 'the installer is damaged' to 'there might be a problem with file ownership and permissions.' I am the owner and only user of a new MBP. What could be going on?

Is anyone having the same type of problems I'm having with Lion. I have a new MacBook Pro, received 7 weeks ago, preinstalled with Leopard 10.6.7. I didn't migrate anything from my old iMac, wanted a clean install from the Apple Store. While there, I asked for the upgrade to Lion 10.7, however their system was down.
I installed it myself, wirelessly about a week later, and Apple emailed me a receipt. Now, I've had to call support directly last week when I lost Mail, Address Book, was unable to open Preview or iTunes, among other problems. Seemed fixed after a session that baffled even the store tech. Now I am unable to download or install the recent Mac updates for Lion, from the App Store, could not install Adobe Reader, etc. Messages range from 'A network error has occured - Check your Internet connection and try again' to 'The Installer is damaged and cannot open the package. There may be a problem with file ownership or permissions.' All fail and I'll probably have to call Apple again. I am frustrated beyond words. Logs 'Install's runner tool is not properly configured as a setuid tool', domain errors, 'attempt to write a readonly database, and on and on. I have barely done a thing on this computer except search online for help with these problems. Safari gives me a 'You are not connected to the internet' too often. Diagnostics disagrees. I do see wi-fi problems in the forum. Disk and permissions were fine at the beginning of the earlier problems, checked first by support tech. I'm not sure if support tech even knew. I was just happy they were fixed. Anyone have these download and/or install problems after a 'clean bill of health' so to speak, only a week ago?

Let's try the following user tip with that one:
"There is a problem with this Windows Installer package ..." error messages when installing iTunes for Windows

Two of me as admin users in new MBA causes permissions issues after setup and migration

Normally I migrate to new Macs via firewire target mode. Flash forward to a new MacBook Air with no firewire.
I think I made a mistake in migration. I began setup as a new owner of the brand new MBA, then migrated my existing G4 PowerBook contents using Time Machine via USB.
The end result is that I have two accounts that represent me on the new MBA; the one I was guided into setting up when I first powered the MBA up, and the old user account from the PB. Although both are admin accounts, I have access to only some files when logged in as either admin. I tried repairing permissions, but no go. It also seems to hide files from the other account when searching in Spotlight.
It seems the only fix may be to do this all over again without setting up a new account in the MBA, but is that even possible? What would be the best way out of this mess so that I have one admin account with access to new files created under the new user and old files from the old PB user, as well as full permissions for all documents?

I concur with Colin: start over and use Setup Assistant. I used Migration Assistant once and it took me a week to clear up the mess. Although the two are basically the same process, by the time you use MA you already have an account established - hence the duplications - whereas SA moves over and creates one account.
And, for Colin:
looks like the OP inserted an impage/jpg of his post?

I just restored my 13" MBP i5 at the apple store to the newest version of Lion after issues with a previous Time Machine backup from Snow Leopard- this time I created a new account and just ported files and folders, and now MS Office doesn't work. Help?

I just restored my 13" MBP i5 at the apple store to the newest version of Lion after issues with a previous Time Machine backup from Snow Leopard- this time I created a new account and just ported files and folders, and now MS Office doesn't work.
^^ that's the main problem. Here's the full history.
I bought a new 13" i5 MBP, early 2011 edition. I had an old white Macbook 2.14 ghz core2duo on Snow Leopard. I attempted to port over my time machine backup, but encountered problems in that my User was inaccessible from the new computer after the import finished, and I had to go in and change the root password, etc, and for some reason or another, I couldn't install any programs at all from that administrator's account. By "couldn't" I mean I could install them, but upon installation they would never boot. So, I took it to the apple store and did a clean install from the most up to date Lion OSX. Then, I created a brand new admin account, instead of trying to import the old one, and things seemed great. Then, I just imported my old files from the TM backup, but not any system settings, permissions, or user data. Just my Docs, pics, vids, apps, and itunes stuff.
Here's where things get weird again. I imported this stuff under the name "old", but all of these folders have a red negative sign on them, marking them as restricted. So, from my main admin account, I cannot even peruse these folders. Since I didn't import user data, I can't sign in to the "old" account to change permissions. I already tried to change the permissions from system preferences, but that didn't change anything. And now, for whatever reason, of all the apps that were imported then, MS Office is the only set of apps that does not work. When I click on it, it just says there was a problem and asks if I'd like to send a report to apple. I tried reinstalling it to no avail. I'm an English student, so i really need access to Word. Can anyone help? The Apple store is a major detour for me and would like to fix this issue myself.

Most likely you have Office 2004 which are PPC-only applications and will not work in Lion. Upgrade to Office 2011. Other alternatives are:
Apple's iWork suite (Pages, Numbers, and Keynote.)
Open Office (Office 2007-like suite compatible with OS X.)
NeoOffice (similar to Open Office.)
LibreOffice (a new direction for the Open Office suite.)

Just installed Firefox 3.6. Firefox will not start and Firefox safemode does not start either. Using Task manager I do not see if started either. If I create a new profile and start from that window, Firefox starts up. I see no error windows/messages. I d

Just installed Firefox 3.6. Firefox will not start and Firefox safemode does not start either. Using Task manager I do not see if started either. If I create a new profile and start from that window, Firefox starts up. I see no error windows/messages. I do have it listed in my Firewall as an exception program with Permit All. What is happening?
== This happened ==
Every time Firefox opened
== After removing Firefox and Reinstalling it. ==
== User Agent ==
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.4; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; MS-RTC LM 8)

If that new profile works then you can transfer some files from the old profile to that new profile (be careful not to copy corrupted files)
See http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox
See also [[Basic Troubleshooting|#Make_a_new_profile|Basic Troubleshooting: Make a new profile]]

HELP! My old mac was requested to upgrade Firefox to 14.0.1. After the sucessfully installation, I received a message saying my old Mac couldn't use the new Firefox and Safari crashes. I have NO browser now!!!

My old mac was requested to upgrade Firefox to 14.0.1. After the sucessfully installation, I received a message saying my old Mac couldn't use the new Firefox and Safari crashes. I have NO browser now! Any help would be appreciated.

Hmmm... So you upgraded Firefox and now neither Firefox or Safari will work? Very weird. I have no idea what might have gone wrong. That said, when things start acting wierd, I always try a bit of maintenance first. About 95% of the time, I luck out and it works.
I use the free program Onyx. I run all the clean up routines. Then I boot to the recovery partition (Lion) or the OS X Install Disc and repair permissions and verify/repair the hard disk.
Hope this helps.

I have 2 imac computers and here are my questions: first, how to I transfer the information from my contact directory from my old imac into my new imac and once the information is transfered how can I print it? Second: I have a large music collection in m

have 2 imac computers and here are my questions: first, how to I transfer the information from my contact directory from my old imac into my new imac? Once the information is transfered how can I print it? Second: I have a large music collection in my old Imac computer how do I transfer this information to my new computer? Also how can I share this information with other computers at home?

I think you may find helpful information here:
A Basic Guide for Migrating to Intel-Macs
The Knowledgebase article Intel-based Mac: Some migrated applications may need to be updated refers to methods of dealing with migrating from PowerPC chips to Intel with the Migration Assistant safely. The authors of this tip have not had a chance to verify this works in all instances, or that it avoids the 10.6.1 and earlier Guest Account bug that caused account information to get deleted upon use of the Migration/Setup Assistant. However, a well backed up source that includes at least two backups of all the data that are not connected to your machine will help you avoid potential issues, should they arise. In event it does not work, follow the steps below.
If you are migrating a PowerPC system (G3, G4, or G5) to an Intel-Mac be careful what you migrate. Keep in mind that some items that may get transferred will not work on Intel machines and may end up causing your computer's operating system to malfunction.
Rosetta supports "software that runs on the PowerPC G3, G4, or G5 processor that are built for Mac OS X". This excludes the items that are not universal binaries or simply will not work in Rosetta:
Classic Environment, and subsequently any Mac OS 9 or earlier applications
Screensavers written for the PowerPC System Preference add-ons
All Unsanity Haxies Browser and other plug-ins
Contextual Menu Items
Applications which specifically require the PowerPC G5 Kernel extensions
Java applications with JNI (PowerPC) libraries
See also What Can Be Translated by Rosetta.
In addition to the above you could also have problems with migrated cache files and/or cache files containing code that is incompatible.
If you migrate a user folder that contains any of these items, you may find that your Intel-Mac is malfunctioning. It would be wise to take care when migrating your systems from a PowerPC platform to an Intel-Mac platform to assure that you do not migrate these incompatible items.
If you have problems with applications not working, then completely uninstall said application and reinstall it from scratch. Take great care with Java applications and Java-based Peer-to-Peer applications. Many Java apps will not work on Intel-Macs as they are currently compiled. As of this time Limewire, Cabos, and Acquisition are available as universal binaries. Do not install browser plug-ins such as Flash or Shockwave from downloaded installers unless they are universal binaries. The version of OS X installed on your Intel-Mac comes with special compatible versions of Flash and Shockwave plug-ins for use with your browser.
The same problem will exist for any hardware drivers such as mouse software unless the drivers have been compiled as universal binaries. For third-party mice the current choices are USB Overdrive or SteerMouse. Contact the developer or manufacturer of your third-party mouse software to find out when a universal binary version will be available.
Also be careful with some backup utilities and third-party disk repair utilities. Disk Warrior, TechTool Pro , SuperDuper , and Drive Genius work properly on Intel-Macs with Leopard. The same caution may apply to the many "maintenance" utilities that have not yet been converted to universal binaries. Leopard Cache Cleaner, Onyx, TinkerTool System, and Cocktail are now compatible with Leopard.
Before migrating or installing software on your Intel-Mac check MacFixit's Rosetta Compatibility Index.
Additional links that will be helpful to new Intel-Mac users:
Intel In Macs
Apple Guide to Universal Applications
MacInTouch List of Compatible Universal Binaries
MacInTouch List of Rosetta Compatible Applications
MacUpdate List of Intel-Compatible Software
Transferring data with Setup Assistant - Migration Assistant FAQ
Because Migration Assistant isn't the ideal way to migrate from PowerPC to Intel Macs, using Target Disk Mode, copying the critical contents to CD and DVD, an external hard drive, or networking will work better when moving from PowerPC to Intel Macs. The initial section below discusses Target Disk Mode. It is then followed by a section which discusses networking with Macs that lack Firewire.
If both computers support the use of Firewire then you can use the following instructions:
1. Repair the hard drive and permissions using Disk Utility.
2. Backup your data. This is vitally important in case you make a mistake or there's some other problem.
3. Connect a Firewire cable between your old Mac and your new Intel Mac.
4. Startup your old Mac in Transferring files between two computers using FireWire.
5. Startup your new Mac for the first time, go through the setup and registration screens, but do NOT migrate data over. Get to your desktop on the new Mac without migrating any new data over.
If you are not able to use a Firewire connection (for example you have a Late 2008 MacBook that only supports USB:)
1. Set up a local home network: Creating a small Ethernet Network.
2. If you have a MacBook Air or Late 2008 MacBook see the following:
MacBook (13-inch, Aluminum, Late 2008) and MacBook Pro (15-inch, Late 2008)- What to do if migration is unsuccessful;
MacBook Air- Migration Tips and Tricks;
MacBook Air- Remote Disc, Migration, or Remote Install Mac OS X and wireless 802.11n networks.
Copy the following items from your old Mac to the new Mac:
In your /Home/ folder: Documents, Movies, Music, Pictures, and Sites folders.
In your /Home/Library/ folder:
/Home/Library/Application Support/AddressBook (copy the whole folder) /Home/Library/Application Support/iCal (copy the whole folder)
Also in /Home/Library/Application Support (copy whatever else you need including folders for any third-party applications)
/Home/Library/Keychains (copy the whole folder) /Home/Library/Mail (copy the whole folder) /Home/Library/Preferences/ (copy the whole folder) /Home /Library/Calendars (copy the whole folder) /Home /Library/iTunes (copy the whole folder) /Home /Library/Safari (copy the whole folder)
If you want cookies:
/Home/Library/Cookies/Cookies.plist /Home/Library/Application Support/WebFoundation/HTTPCookies.plist
For Entourage users:
Entourage is in /Home/Documents/Microsoft User Data Also in /Home/Library/Preferences/Microsoft.
Credit goes to Macjack for this information.
If you need to transfer data for other applications please ask the vendor or ask in the Discussions where specific applications store their data.
5. Once you have transferred what you need restart the new Mac and test to make sure the contents are there for each of the applications.
Written by Kappy with additional contributions from a brody.Revised 5/21/2011

Which Privilege needed to create a new Package and Stored procedure usage(in HANA studio)

Hello Friends,
In my company I have access to SYSTEM user(i.e. having all required permissions) ,I wish to create new " USER(s) " for trainees thus which "System privilege" or other privileges is/are needed for the following requirements -
1>To allow the "new user" to create new Packages(and the columnar views inside it and be able to execute,edit them)
2>Create Procedures inside their schema and execute using "call " command
I have given the following privileges as suggested by an ebook (SAP certified author).
The SELECT privilege on the _SYS_BI schema
The SELECT privilege on the _SYS_REPO schema
The EXECUTE privilege on the REPOSITORY_REST procedure
According to my knowledge "create schema" should be given for new schema creation.For my other requirements which all privileges are needed.
Thanx.

In addition to Krishna if you don't want to expose all the package to the trainee, then create a new role keeping everything same as default MODELING role (open it and have a look) but in "PACKAGE PRIVILEGES" add only those package that you want to expose to the end users.
Regards
Kumar

New files and folders on a Linux client mounting a Windows 2012 Server for NFS share do not inherit Owner and Group when SetGID bit set

Problem statement
When I mount a Windows NFS service file share using UUUA and set the Owner and Group, and set the SetGID bit on the parent folder in a hierarchy. New Files and folders inside and underneath the parent folder do not inherit the Owner and Group permissions
of the parent.
I am given to understand from this Microsoft KnowledgeBase article (http://support.microsoft.com/kb/951716/en-gb) the problem is due to the Windows implmentation of NFS Services not supporting the Solaris SystemV or BSD grpid "Semantics"
However the article says the same functionality can acheived by using ACE Inheritance in conjunction with changing the Registry setting for "KeepInheritance" to enable Inheritance propagation of the Permissions by the Windows NFS Services.
1. The Precise location of the "KeepInheritance" DWORD key appears to have "moved" in Windows Server 2012 from a Services path to a Software path, is this documented somewhere? And after enabling it, (or creating it in the previous
location) the feature seems non-functional. Is there a method to file a Bug with Microsoft for this Feature?
2. All of the references on demonstrating how to set an ACE to achieve the same result "currently" either lead to broken links on Microsoft technical websites, or are not explicit they are vague or circumreferential. There are no plain Examples.
Can an Example be provided?
3. Is UUUA compatible with the method of setting ACE to acheive this result, or must the Linux client mount be "Mapped" using an Authentication source. And could that be with the new Flat File passwd and group files in c:\windows\system32\drivers\etc
and is there an Example available.
Scenario:
Windows Server 2012 Standard
File Server (Role)
+- Server for NFS (Role) << -- installed
General --
Folder path: F:\Shares\raid-6-array
Remote path: fs4:/raid-6-array
Protocol: NFS
Authentication --
No server authentication
+- No server authentication (AUTH_SYS)
++- Enable unmapped user access
+++- Allow unmapped user access by UID/GID
Share Permissions --
Name: linux_nfs_client.host.edu
Permissions: Read/Write
Root Access: Allowed
Encoding: ANSI
NTFS Permissions --
Type: Allow
Principal: BUILTIN\Administrators
Access: Full Control
Applies to: This folder only
Type: Allow
Principal: NT AUTHORITY\SYSTEM
Access: Full Control
Applies to: This folder only
-- John Willis, Facebook: John-Willis, Skype: john.willis7416

I'm making some "major" progress on this problem.
1. Apparently the "semantics" issue to honor SGID or grpid in NFS on the server side or the client side has been debated for some time. It also existed as of 2009 between Solaris nfs server and Linux nfs clients. The Linux community defaulted to declaring
it a "Server" side issue to avoid "Race" conditions between simultaneous access users and the local file system daemons. The client would have to "check" for the SGID and reformulate its CREATE request to specify the Secondary group it would have to "notice"
by which time it could have changed on the server. SUN declined to fix it.. even though there were reports it did not behave the same between nfs3 vs nfs4 daemons.. which might be because nfs4 servers have local ACL or ACE entries to process.. and a new local/nfs
"inheritance" scheme to worry about honoring.. that could place it in conflict with remote access.. and push the responsibility "outwards" to the nfs client.. introducing a race condition, necessitating "locking" semantics.
This article covers that discovery and no resolution - http://thr3ads.net/zfs-discuss/2009/10/569334-CR6894234-improved-sgid-directory-compatibility-with-non-Solaris-NFS-clients
2. A much Older Microsoft Knowledge Based article had explicit examples of using Windows ACEs and Inheritance to "mitigate" the issue.. basically the nfs client "cannot" update an ACE to make it "Inheritable" [-but-] a Windows side Admin or Windows User
[-can-] update or promote an existing ACE to "Inheritable"
Here are the pertinent statements -
"In Windows Services for UNIX 2.3, you can use the KeepInheritance registry value to set inheritable ACEs and to make sure that these ACEs apply to newly created files and folders on NFS shares."
"Note About the Permissions That Are Set by NFS Clients
The KeepInheritance option only applies ACEs that have inheritance enabled. Any permissions that are set by an NFS client will
only apply to that file or folder, so the resulting ACEs created by an NFS client will
not have inheritance set."
"So
If you want a folder's permissions to be inherited to new subfolders and files, you must set its permissions from the Windows NFS server because the permissions that are set by NFS clients only apply to the folder itself."
http://support.microsoft.com/default.aspx?scid=kb;en-us;321049
3. I have set up a Windows 2008r2 NFS server and mounted it with a Redhat Enteprise Linux 5 release 10 x86_64 server [Oct 31, 2013] and so far this does appear to be the case.
4. In order to mount and then switch user to a non-root user to create subdirectories and files, I had to mount the NFS share (after enabling Anonymous AUTH_SYS mapping) this is not a good thing, but it was because I have been using UUUA - Unmapped Unix
User Access Mapping, which makes no attempt to "map" a Unix UID/GID set by the NFS client to a Windows User account.
To verify the Inheritance of additional ACEs on new subdirectories and files created by a non-root Unix user, on the Windows NFS server I used the right click properties, security tab context menu, then Advanced to list all the ACEs and looked at the far
Column reflecting if it applied to [This folder only, or This folder and Subdirectories, or This folder and subdirectories and files]
5. All new Subdirectories and files createdby the non-root user had a [Non-Inheritance] ACE created for them.
6. I turned a [Non-Inheritance] ACE into an [Inheritance] ACE by selecting it then clicking [Edit] and using the Drop down to select [This folder, subdirs and files] then I went back to the NFS client and created more subdirs and files. Then back to the
Windows NFS server and checked the new subdirs and folders and they did Inherit the Windows NFS server ACE! - However the UID/GID of the subdirs and folders remained unchanged, they did not reflect the new "Effective" ownership or group membership.
7. I "believe" because I was using UUUA and working "behind" the UID/GID presentation layer for the NFS client, it did not update that presentation layer. It might do that "if" I were using a Mapping mechanism and mapped UID/GID to Windows User SIDs and
Group SIDs. Windows 2008r2 no longer has a "simple" Mapping server, it does not accept flat text files and requires a Schema extension to Active Directory just to MAP a windows account to a UID/GID.. a lot of overhead. Windows Server 2012 accepts flat text
files like /etc/passwd and /etc/group to perform this function and is next on my list of things to see if that will update the UID/GID based on the Windows ACE entries. Since the Local ACE take precedence "over" Inherited ACEs there could be a problem. The
Inheritance appears to be intended [only] to retain Administrative rights over user created subdirs and files by adding an additional ACE at the time of creation.
8. I did verify from the NFS client side in Linux that "Even though" the UID/GID seem to reflect the local non-root user should not have the ability to traverse or create new files, the "phantom" NFS Server ACEs are in place and do permit the function..
reconciling the "view" with "reality" appears problematic, unless the User Mapping will update "effective" rights and ownership in the "view"
-- John Willis, Facebook: John-Willis, Skype: john.willis7416

Org.clamav.freshclam and permissions error on freshclam.log

This is an adjunct to a branched discussion in this thread regarding org.clamav.freshclam continually generating error reports in the system log.
After enabling, but not starting, Mail service on my server (XServe Dual-G5, 10.5.8 Server) my system log began filling with the error as per the referenced thread. The first entry when the error cropped up was:
Nov 5 15:23:20 xserve1 com.apple.launchd[1] (org.clamav.freshclam): Unknown key for integer: Iterations
Nov 5 15:23:20 xserve1 org.clamav.freshclam[40472]: ERROR: Incorrect argument format for option --checks (-c)
Nov 5 15:23:20 xserve1 org.clamav.freshclam[40472]: ERROR: Can't parse command line options
Nov 5 15:23:20 xserve1 com.apple.launchd[1] (org.clamav.freshclam[40472]): Exited with exit code: 1
Nov 5 15:23:20 xserve1 com.apple.launchd[1] (org.clamav.freshclam): Throttling respawn: Will start in 10 seconds
Per the instructions in the referenced thread, I ran
launchctl unload /System/Library/LaunchDaemons/org.clamav.freshclam.plist
I then used pico to edit the org.clamav.freshclamplist file, removing the space between the '-c' and value in the line:
<string>-c 4</string>
I also edited the /etc/freshclam.conf file to change the value:
#DatabaseMirror db.XY.clamav.net
to
DatabaseMirror db.us.clamav.net
I then ran
freshclam -v
followed by
launchctl load /System/Library/LaunchDaemons/org.clamav.freshclam.plist
Checking the log again, not only had the original error continued whilst I was editing, but also on the relaunch of freshclam a new error cropped up:
Nov 7 08:35:39 xserve1 com.apple.launchd[127] (org.clamav.freshclam): Unknown key for integer: Iterations
Nov 7 08:35:39 xserve1 com.apple.launchd[127] (org.clamav.freshclam): Ignored this key: UserName
*Nov 7 08:35:39 xserve1 org.clamav.freshclam[474]: ERROR: Problem with internal logger (UpdateLogFile = /var/log/freshclam.log).*
*Nov 7 08:35:39 xserve1 org.clamav.freshclam[474]: ERROR: Can't open /var/log/freshclam.log in append mode (check permissions!).*
Nov 7 08:35:39 xserve1 com.apple.launchd[127] (org.clamav.freshclam[474]): Exited with exit code: 62
Nov 7 08:35:39 xserve1 com.apple.launchd[127] (org.clamav.freshclam): Throttling respawn: Will start in 10 seconds
Nov 7 08:35:48 xserve1 org.clamav.freshclam[475]: ERROR: Incorrect argument format for option --checks (-c)
Nov 7 08:35:48 xserve1 org.clamav.freshclam[475]: ERROR: Can't parse command line options
Nov 7 08:35:48 xserve1 com.apple.launchd[1] (org.clamav.freshclam[475]): Exited with exit code: 1
Nov 7 08:35:48 xserve1 com.apple.launchd[1] (org.clamav.freshclam): Throttling respawn: Will start in 10 seconds
Nov 7 08:35:49 xserve1 org.clamav.freshclam[476]: ERROR: Problem with internal logger (UpdateLogFile = /var/log/freshclam.log).
Nov 7 08:35:49 xserve1 org.clamav.freshclam[476]: ERROR: Can't open /var/log/freshclam.log in append mode (check permissions!).
Nov 7 08:35:49 xserve1 com.apple.launchd[127] (org.clamav.freshclam[476]): Exited with exit code: 62
Nov 7 08:35:49 xserve1 com.apple.launchd[127] (org.clamav.freshclam): Throttling respawn: Will start in 10 seconds
(Note: after the first 'Exited with exit code: 1' entry, it only repeated the last four lines as above as it respawned.)
Checking the ownership / permissions on the freshclam.log file showed that the owner/goup was _clamav:admin and the permisions were -rw-r----- which is proper and in line with the other clamav files in the directory. Thinking that perhaps the logfile was corrupted, I deleted it and made a new one, setting the owner, group and permissions as per the original. The log errors continued.
Finally, in desparation, I ran
chmod 660 /var/log/freshclam.log
setting the permissions to -rw-rw---- and the errors ceased!
Now, this is not proper file permissions nor does it explain why freshclam suddenly could not append the logfile, but freshclam is now happily churning away without generating continuous log error entries. For the moment, I am not going to argue with successful results!
-Doug

Hi Fred,
interesting.. but I'm of the mind "If it ain't broke.." and it has been running without problem since applying the fix. I may end up having to migrate Mail services to a different server soon though, so I'll keep it in mind if the error crops up again. Thanks for the tip!
-Doug

How to create a new variant and a job sheduled to use it for the ......

How to create a new variant and a job sheduled to use it for the exisisting programs

Hi
1. The ALV Grid Control is a tool with which you can output non-hierarchical lists in a
standardized format. The list data is displayed as a table on the screen.
The ALV Grid Control offers a range of interactive standard list functions that users need
frequently (find, sort, filter, calculate totals and subtotals, print, print preview, send list,
export list (in different formats), and so on. These functions are implemented in the
proxy object class. You as the programmer have the possibility to turn off functions not
needed. In most cases the implementations of the standard functions provided by the
control are sufficient. However, if required, you can adjust these implementations to
meet application-specific needs.
You can add self-defined functions to the toolbar, if necessary.
The ALV Grid Control allows users to adjust the layout of lists to meet their individual
requirements (for example, they can swap columns, hide columns, set filters for the
data to be displayed, calculate totals, and so on). The settings (list customizing) made
by a specific user are called a display variant. Display variants can be saved on a userspecific
or on a global basis. If such display variants exist for a list, they can be offered
to the user for selection. If a display variant is set as the default variant, the associated
list is always displayed based on the settings of this variant.
2. REUSE_ALV_LIST_DISPLAY
REUSE_ALV_GRID_DISPLAY
REUSE_ALV_FIELDCATALOG_MERGE
REUSE_ALV_COMMENTARY_WRITE
3. Use of Field Catalog is to determines the technical properties & add formating information of the column.
6. all the definition of internal table, structure, constants are declared in a type-pool called SLIS.
7.fieldcat-fieldname
fieldcat-ref_fieldname
fieldcat-tabname
fieldcat-seltext_m
5. Form user_command using r_ucomm like sy-ucomm rs_selfield type slis_selfield.
Sap provides a set of ALV (ABAP LIST VIEWER) function modules which can be put into use to embellish the output of a report. This set of ALV functions is used to enhance the readability and functionality of any report output. Cases arise in sap when the output of a report contains columns extending more than 255 characters in length.
In such cases, this set of ALV functions can help choose selected columns and arrange the different columns from a report output and also save different variants for report display. This is a very efficient tool for dynamically sorting and arranging the columns from a report output.
The report output can contain up to 90 columns in the display with the wide array of display options.
<b>The commonly used ALV functions used for this purpose are;</b>
1. REUSE_ALV_VARIANT_DEFAULT_GET
2. REUSE_ALV_VARIANT_F4
3. REUSE_ALV_VARIANT_EXISTENCE
4. REUSE_ALV_EVENTS_GET
5. REUSE_ALV_COMMENTARY_WRITE
6. REUSE_ALV_FIELDCATALOG_MERGE
7. REUSE_ALV_LIST_DISPLAY
8. REUSE_ALV_GRID_DISPLAY
9. REUSE_ALV_POPUP_TO_SELECT
Purpose of the above Functions are differ not all the functions are required in all the ALV Report.
But either no.7 or No.8 is there in the Program.
<b>
How you call this function in your report?</b>
After completion of all the data fetching from the database and append this data into an Internal Table. say I_ITAB.
Then use follwing function module.
CALL FUNCTION 'REUSE_ALV_GRID_DISPLAY'
EXPORTING
I_CALLBACK_PROGRAM = 'Prog.name'
I_STRUCTURE_NAME = 'I_ITAB'
I_DEFAULT = 'X'
I_SAVE = 'A'
TABLES
T_OUTTAB = I_ITAB.
IF SY-SUBRC <> 0.
WRITE: 'SY-SUBRC: ', SY-SUBRC .
ENDIF.
ENDFORM. " GET_FINAL_DATA
The object F_IT_ALV has a field, the activity ACTVT, which can
contain four permitted values: 01, 02, 03 and 70. Each of the
activities 01, 02 and 70 controls the availability of particular
functions (in the menu and the toolbar) of the ALV line item list:
a) 01: "Settings -> Display variant -> Save..."
b) 02: "Settings -> Display variant -> Current..." and
"Settings -> Display variant -> Current header rows "
c) 70: "Settings -> Display variant -> Administration..."
Activity 03 corresponds to the minimum authorization, which is the
most restricted one: The user can only select layouts which have
been configured already. In particular, all of the other functions
named above are inactive with activity 03.
Now if you want to permit a user to change the column selection and
the headers as well as to save the layout thus created, for example,
but if you do not want to permit the user to administrate the
layouts, you grant him or her the authorization for activities 01
and 02.
Check this link it will be mosty usefull for u
http://www.sap-img.com/fu017.htm
Reward all helpfull answers
Regards
Pavan

I can't authorize or deauthorize in my new Imac and I can't open my playlist

I bought an Imac for home and I transfer completely my account, my library, files, etc...But a the the moment to sync my ipod appears a message that indicates "error you permit or authorized" at the moment that I want to authorized simply I can't also I tried to Deauthorized the result the same. I saw my sidebar a there's not my playlist just my library...What Cain I do to configure the iTunes in the new mac...

If you search the web for Bluetooth issues with IOS 6, you'll find that quite a few stereo and automobile makers produced head units with bad BT programming. My understanding is that they built them to work with the existing iPhone (at that time) but did not build in full conformance with the BT standard which is fully backward-compatible. Apple went to the newer BT and these units stopped working. It's an issue that the car and stereo makers need to fix (and some are doing so with firmware updates).

I have "migrated" my Time Capsule files to my new iMac and most of the files to me "I don't have permission to view files" I am they admin....will I thought I was. What gives?

I have "migrated" my Time Capsule files to my new iMac and most of the files to me "I don't have permission to view files" I am they admin....will I thought I was. What gives?

You should be able to change the permissions on the files.. this is yet another bungle by Mavericks I suspect.
http://support.apple.com/kb/PH13799
Sometimes it is because you Migrated wrongly.
http://pondini.org/TM/E10.html
It is not up to Mavericks because sadly the guy who wrote all this great info died recently.

IPod updates 2 touch with the new software, and from the update they are not connected with Time phase. They appear calling but never they enter the calls. I make calls with other users and if one connects but in these two not from the update

iPod updates 2 touch with the new software, and from the update they are not connected with Time phase. They appear calling but never they enter the calls. I make calls with other users and if one connects but in these two not from the update

I use Firefox 95% of the time, and there's no problem with flash content (and I'm still at .55 - downloaded .64 last week but I haven't got round to making the change yet). At the rate they've been changing it recently it may well be out of date already .
I've been trying it in Safari, too with no problems apart from You Tube, but that's because I'm blocking Google cookies.
One thought does occur - if your Flash preferences are set to block all Local Storage, it may be that the problem site is trying to use Flash cookies (LSOs). I had this problem recently with the BBC iPlayer streaming content. Little Snitch notified an attempt to connect to a new URL - emp.bbci.co.uk.
If I disallowed it, no streaming; when I allowed the connection, it still wouldn't stream, so I did a bit of digging and came to the conclusion that it was trying to set a Flash cookie. When I unblocked, lo and behold - streaming resumed as normal.
I now have LSOs blocked in a more subtle way that lets the site think it's being set (but it ain't) and the streaming still works.
As for permissions repair - always repair from local; the permissions on the original disc will have been superceded by updates and new installations of Apple software.
DU needs to be reading the packages on the HD, not the (now out of date) install disc.
The recurring repair messages are normal and don't mean anything's wrong. As long as the final message is 'repair complete' there's no need to dwell on it.
http://support.apple.com/kb/TS1448 (for Leopard and Snow Leopard - Lion no doubt has it's own set).

New-MailboxFolder and permissions

Similar Messages

Maybe you are looking for