OD network user accounts with radius secured wireless

ok.
i'd like to use radius security on my wireless network.
i also have 300+ OD users, who log on using both wired desktops and wireless laptops.
however, once radius is up and running, i no longer can access the "other..." user login option on the laptops, as the laptops can't conenct to the network to get the OD user info.
how to i work around this? do i add the OD bound laptops themselves to the allowed users?
ta

Well, folks, it turns out that the network user list is in fact displayed, but there's a slight catch that had me fooled. I've got a single local account set up. This local admin account is selected by default and displays the password field. When I hit ESC to clear it, that local account only is displayed for about 15-20 seconds. This fairly long delay made me think it would never happen... whoops. AFTER about 15-20 seconds, the full login list is displayed. Unless you clear that pwd prompt by hitting ESC or clicking Back, the list is never displayed.
Now that I've created a second local user account for other reasons, the pwd prompt does NOT automatically appear, and the network user list is displayed after 15-20 seconds, despite WPA.
Problem solved. Now we'll just see if 26 users can log in simultaneously over wireless... I won't hold my breath for too long!
Thanks for your time.

Similar Messages

Need help with network user accounts on Mac server App on Yosemite, any tips?

I've been trying to set up a small network with the Server app on Yosemite. I don't want to do anything crazy with the server, I'd just like to know how I can set up network user accounts so that they can login from other Mac computers on the same network. I already have Open directory set up, the Macs that will be used on the network with the server have already been joined to the server under login options. I have created the network user account, I have also joined the user account to a group that I created. When I try to login to the network account from one of the Macs, it doesn't work. I'm pretty rookie with Mac server, can anyway give me any pointers of what I should be doing? Or if I am doing something wrong. Thanks guys.

The most important step, once you've got Open Directory and DNS set up, with Local Network Users set up in Server.app, is to make sure that all client Macs are using the server's IP address as the primary DNS server in System Preferences > Network, and that they have joined the Network server in System Preferences > Users and Groups > Login Options.
Having said all that, I have just spent hours setting this all up only to find out that Mail doesn't currently work with Network Homes in 10.10.3 / Server.app 4.1.
I will be hoping that Apple recognise the bug, and put out a fix soon.

Lost Mail on Network User Accounts

This problem has happened several times and I am pretty sure it relates to using Network User accounts. We're running Tiger server and all user accounts are stored on the server. We are using POP mail that is hosted externally.
A user logs in to his account. There are unread messages and the user starts to read them and reply to email. An hour or two goes by and when the user tries to read an unread email, the email disappears in the list when clicked, along with all the emails that had been received or sent since the last time he had logged into his user account.
There is no trace of the lost mail in the library on the server. If this isn't weird enough, the incoming mail on the ISP host account when accessed by webmail, is either gone or when you try to read it disappears when clicked along with all mail back to the same time that is missing on the user account stored on the server.
This has happened on different users and from different workstations. The only constant appears to be that these accounts are stored in network user accounts.
We are planning to bring mail in-house and switch to IMAP. But would like to know if anyone else has ever seen this.
Any ideas?
Thanks,
Bob

Having the same problem here. I think its to do with the network home having a different database file from the local home and when the background sync happens the local home database is being replaced by the network home.
There is nowhere to set that during a background sync the local home should always be considered the newest and be pushed to the network. Sounds like it should be logical, but it doesn't seem to work like that.
I have users complaining that there machines are ok when they start, they have mail arrive during the day and then disappear and their mail box reverts back to the state it was when they logged in.
There is also the problem that when they move they don't always get the latest version of their mail box.

Small office (5 users) - Accounting - wanting to secure ingress/egress of docs..

Small office (5 users) - Accounting - wanting to secure ingress/egress of docs..I haven't seen this answered for an office of this size.I have the need for a relatively cheap software package or guidelines (I'll still keep the search active) for how to block, or at least alert, of sensitive data from leaving the company.I know that I'll have challenges on:1. Blocking certain attachment types from being sent, via webmail, web site attach, email. I am sure someone's written a how-to but I'm darned if I can find it. Suggestions?
2. Blocking certain programs from running (whitelist/blacklist) - not really wanting to be deep in their pockets every time the application is updated, so not sure if a hash list would be a good idea based on a GPO security policy, or if black/white lists are best?3. Web blocking - I'm thinking I am wanting to...
This topic first appeared in the Spiceworks Community

Hi guys,First, I've done a lot of searching on the weband read a few different threads on Spiceworks regarding HIPPA compliance and encrypting hard drives.Specifically these two threads:http://community.spiceworks.com/topic/596465-encryption-for-hipaa-compliancehttp://community.spiceworks.com/topic/320759-how-are-you-handling-hipaa-s-latest-data-at-rest-rulesSo I have a new client that's in the medical field. He has a server that's about two-three years old that looks as ifit was built with budget at the forefront. It's a whitebox with an Asus P8H77-v motherboard, 16 GB of ram, an i3 processor& two 1 TBSATA drives using raid 1 right off the motherboard. The roles it has: DNS/DHCP/File server/AD. Side note - eventhough it's been setup for AD none of the computers are on the domain.Their EMR software is Tracknet & the datais being stored...

Can not make network user accounts

After upgrading from 10.6.8 Server to 10.8 and installing server tools, I can not make network user accounts. All of my old network user accounts migrated to the new OS and work properly, I just can not seem to make new accounts under 10.8.
Under 10.6.8 I would log into Workgroup Manager as diradmin and I could pretty easily make new users.
Under 10.8.2 I launch the server app and click on "users". The addition (+) symbol in greed out for making new users. I can make local users via System Preferences, but I can not see any way to change local users to network users via either System Preferences or the Server app.
I have logged into the server app using a local administrator account, the diradmin account, and the root account. None of the accounts allow access to create new network users (addition symbol is greed out).
Is there a trick to making network users in 10.8 that I am missing?
(as an aside, I have noticed I can log into Directory Utility as diradmin and can view the node with all my network accounts. It seems like I might be able to manually create a user account this way, but I'm not quite sure how to make the user record)

Open Directory service is started and functional for all the pre-existing network user accounts that were made under 10.6.8 and earlier. I just can not seem to create new netowork user accounts.
I followed the steps on this page and managed to make a user record that appeared as a network user in the Server app, but I still can not seem to log in under the user I made in this fashion (dscl command via terminal).
http://www.deadmarshes.com/Blog/20111105010130.html

Where is the MailAccounts.plist stored for a network user account using Apple Mail on Snow Lion?

Where is the MailAccounts.plist file stored for a network user using Apple Mail on Snow Leopard? It appears one of my users has managed to do something to their mail account as Apple Mail will no longer close once opened and the Sent Folder has a perpetual spinning pinwheel.

They would have to be logged in as separate users in order not to see your account in Mail. Whatever accounts put in Mail under your account will show up. All mail accounts usually have there own user and password. The only thing you can do is to remove the password from Keychain and take the account offline so you don't keep getting prompts for passwords each time it checks for mail.
Not a great solution.
Best way is to give the other user their own user account with their own mail and enable fast user swithcing to log between the different users if all access the computer frequently.

Network User Accounts

Hello,
I have a little (or big ;)) Problem with the Network User Accounts on Leopard Server.
I created the Networkshare for the Networkhome Directories und selected them in the Workgroupmanager, also I connected the mac Clients via the Directory Util to the Server.
But no Networked Home User can login from the Clients (the Client says at the Login Window "Network Accounts aviable".

You can use a static LDAP mapping on the client computer here to accomplish this.
Using Directory Utility, you want to edit your LDAP plugin settings for your OpenDirectory server. (Directory Utility -> Show Advanced Settings -> Services -> LDAPv3 -> Edit your Config -> Search & Mappings)
Expand users, and go to NFSHomeDirectory. Here you can enter in:
#/Users/$RealName$
This will create a local home directory in users with the directory name called whatever value is in RealName.
Randy

New iMac 21.5". How can I set up a new user account with access to all the files of the original user account?

Running Mavericks on a 2013 iMac 21.5". I want to set up a second user account with different settings that meet the requirements of specific software. I need the files to be accessible by both users. I have made both the main and secondary accounts administrators. I have also enabled file sharing for both. Neither account can see the other's files in Finder.
How can I make all files accessible to both accounts? I read that administrator accounts automatically can see all files on the computer, but it is not working out that way. I have restarted the computer, to no avail.

Comcast only offers POP accounts, and one way to set up the account and enter all the settings before it connects to the mail server, might be to do it Offline:
https://support.mozilla.org/en-US/questions/991539#answer-547878
The server settings are given [http://customer.comcast.com/help-and-support/internet/setting-up-thunderbird/ here], but the method is for Online account setup.

I have windows vista user account with administrator privilege. I am unable to update mozilla firefox to the latest version. It is saying "do not have required privileges". I already uninstalled the previous version :(

I am unable to update mozilla firefox. I have user account with administrator privilege.

Try to run the installer as Administrator via the right-click context menu (Run as Administrator).

User Account with different languages

Dear Friends,
I need to have one user account with a different langauge, i.e. I need that when a partucular user log-in, the system swithch to spanish, and when one other user log-in the system goes back to english.
Is ti possible? and How?
Thanks for your help.
Federico.

is GREEK just not a supported language
You can see exactly what languages are supported in the OS X tech specs:
http://www.apple.com/macosx/techspecs/
In addition, the Tiger that comes with Intel Macs has Russian.
A Greek add-on is only available via Rainbow and 3rd party patches. One is mentioned here, I don't know if it works right or causes problems.
http://betabug.ch/blogs/ch-athens/124

Create run-as-account with less secure option in C#

Hi all,
Is there any way I can create run-as-account using C# code with less secure option.
I have referred this code.
ManagementGroup managementGroup = ManagementGroup.Connect(System.Environment.MachineName);
Microsoft.EnterpriseManagement.Security.SimpleCredentialSecureData runAsAccount = new Microsoft.EnterpriseManagement.Security.SimpleCredentialSecureData();
runAsAccount.Data = ConvertToSecureString("sample");
runAsAccount.Description = "Sample run_as_account_description";
runAsAccount.Name = "Run_as_account";
runAsAccount.UserName = "sample@abc";
managementGroup.Security.InsertSecureData(runAsAccount);
But it creates account with more secure option.

Hi,
I searched the internet and found below link about SecureData type, not sure whether it can be useful for you as I am not familiar with
SimpleCredentialSecureData() method, but you may refer to it and check it.
SecureDataType Enumeration
http://msdn.microsoft.com/en-us/library/hh964361.aspx
In addition, I would liketo suggest you also post in the MSDN forum for coding issue.
Regards,
Yan Li
Regards, Yan Li

Creating user accounts with OIDDAS and use them from the OS

Hi,
I have a customer that is experiencing an error creating user accounts from OIDDAS, and use that user accounts from the operating system.
My customer is using OID/OAS4OS 10.1.4.2.0, and that version is not longer available to download, then, I will try in my own environment
with OID/OAS4OS 10.1.4.3.0.
And the question is the following: is supported to create user accounts with OIDDAS and expect that users can work with OAS4OS and be
able to authenticate in the operating system?
For the reference, SR# 7222351.993:
Thanks,
Luis Vivero.
Edited by: LV in ORCL on Dec 11, 2008 6:47 AM

Hi Jacco,
I didn't see your post before.
Nop, unfortulately I don't have a document with that. I just received that answer
from development (related to the plugin for AD that is not certified, and DAS is
not intended to work with OAS4OS).
Anyway, about the plugin to work with AD, this is working for me; at least I tested
it by configuring the plugin, I configured synchronization, the mapping file, I did
the bootstrap, and the accounts that were bootstraped now shows the OS attributes
on DAS.
Regards,
Luis Vivero.

Can't delete user account with open shopping cart

Hi all,
Is it okay to delete user account with open shopping cart? I can't delete user by users_gen, it says existing partner document. I then applied notes 1148837,report PARTNER_SET_DELETE. And this report doesn't really work. I ran it and it found zero occurrnences. Is anybody using this report?
So is it the only way to delete user from SRM is by su01 and leave some informations on Busines partner (bp)
Thanks,
Kev

Hi. You can easily lock the user and change the validity dates using SU01.
Then, I would write a program that looks through all locked users and checks their valdity dates. Table USR02 holds all this data.
Then, if the user is locked and the validity end date was 3 or 6 or whatever months ago (make this a selection parameter probably), then you know you want to delete this user.
So, go into table HRP1001 where SCLAS = US and SOBID = user name and OTYPE = CP and get field OBJID. This is the central person (CP) number.
Then, go into table HRP1001 again, this time where SCLAS = BP and OTYPE = CP and OBJID = the CP number and get field SOBID. This is the business partner (BP) number.
Now, run function BAPI_USER_DELETE to delete the SU01 user fully, then function HR_CENTRALPERSON_DELETE to delete the central person, then function BUP_BUPA_DELETE to delete the business partner.
And that should delete everything.
Regards,
Dave.

Several user account with ID=0

Hello I find I have a problem:
My OS X has several user accounts with the same ID, particularly with ID=0. This ID should belong to root user account only.
Terminal: dscl . -list /Users UniqueID
daemon                  1
diegopaniz              0
Guest                   201
KEKA                    501
nobody                  -2
root                    0
Someone know how to fix it?
TKS!!!
rickricardu

If you're using "diegopaniz," change the UID to something in the 500 range. Otherwise delete it. You seem to already know how to use dscl.

Previously i set up iphone 5 same user (account) with my brother.. Now i want to set up as my own User... but try to Erase all content n settings and plug in itunes to set up as a new iphone but it's keep sync with my brother phone ... help please ?

previously i set up iphone 5 same user (account) with my brother.. Now i want to set up as my own User... but try to Erase all content n settings and plug in itunes to set up as a new iphone but it's keep sync with my brother phone ... help please ?

I recommend that you
Create a NEW account/ID for her using these instructions. Make sure you follow the instructions. Many do not and if you do not you will not get the None option. You must use an email address that you have not used with Apple before. Make sure you specify a birthdate that results in being at least 13 years old
Creating an iTunes Store, App Store, iBookstore, and Mac App Store account without a credit card
Use the new ID on her iPod but only for:
Settings>Messages>Send and Receive
Settings>FaceTime
Settings>GameCenter
and Settings>iCloud
Continue to use the same/common Apple ID for Settings>iTunes and App stores so you can share purchases.

OD network user accounts with radius secured wireless

Similar Messages

Maybe you are looking for