Problems with Workgroup Manager

I just took over computer support for a local school. They have a Mac 10.5.6 server that I log in as <admin>. Unfortunately, when I go to Workgroup Manager. I can't add or change any accounts. Obviously, the <admin> user doesn't have permission to make these changes. How do I give admin user the right permission to work in workgroup manager? The guy that set this up is now with a different company, and he is nearly impossible to contact.

The Apple manual is correct regarding how ACLs interact with POSIX permissions. If you haven't already, please see my ACL Tips post, which gives you some more detail: http://discussions.apple.com/thread.jspa?messageID=1696702.
And, here's my answer to a question regarding how permissions for new/copied/moved files are assigned: http://discussions.apple.com/thread.jspa?messageID=3188259&#3188259.
According to your post, I see two possibilites: One, you've recently enabled ACLs without restarting your server. If that's the case, a restart will work.
Or:
I fire up the Effective Permissions Inspector, drag over a production member and find all the write attributes are off except for delete.So the everyone posix field definitley overrides my ACL settings. Now I can set the Posix everyone field to read and write but I don't want everyone to have access.
Do you mean that all write attributes are ON except for delete? If so, then there's the second possibility:
The Finder and some other applications are not yet fully ACL-aware. For example, if all write permissions are granted except for delete_child and delete, then the Finder will treat the folder/file as read-only. This is also a problem for applications that employ saving routines like TextEdit. Basically, this situation cannot presently be resolved without further application improvements. Yes, the filesystem and core OS are ACL-aware, and effective permissions are being calculated correctly, but Finder/TextEdit represent a set of applications that depend on POSIX-like ACL mixdowns. This means that, even though ACLs offer fine-grained read and write permissions, some applications don't respect them when they're told.
So why even have ACLs? Well, right now they fix several problems with POSIX-only: (1) nesting groups, (2) defining new/copied file/folder inheritance, and (3) the ability to define permissions for more than just one group (POSIX group) or user (POSIX owner) at a time.
Hope this helps.
--Gerrit

Similar Messages

Manage 10.8 clients with workgroup manager

Previously using Mac OS X 10.6.8 server with workgroup manager to manage clients.
Installed new server running 10.8.
I downloaded and am using the Workgroup Manager application for 10.8.
I set up a client running 10.7. Used the "Users and Groups" pref pane to join my directory server, and was able to then add that computer to a new group in wgm and manage the preferences.
I set up another client running 10.8. Used the "Users and Groups" pref pain to join my directory server, and it does not appear in my list of available clients when I browse for it to add it to the computer group.
Does this functionality no longer work with 10.8 clients? Was hoping to avoid profile manager for one more year....
Thanks for any help,
Chris

I'm curious to know if you're still having this issue, I'm seeing the same thing here in our setup. We have no problems with any of these users actually logging in, but we're certainly seeing a lot of them show up as "not found" ... and once they have been "lost" they seem to be lost for good!
I'm not sure if it's something stuck in cache or if our overworked AD server doesn't respond properly and breaks something ...

Logon problem with oracle management server

I have problem with Oracle Management Server when I connect to the OMS message comes
The exception (java.lang.NullPointerException) occurred.
if any body have any idea pls tell us

Hi,
Oracle has changed the Enterprise Manager from version 1.5 to 2.0 .
With the new Oracle8i dataase server another service has been added.
If you want to user the OEM you have to install The Managment Server.
The Managment server has its own user and privileges and is recommended when using OEM.

Problem with discovering Managed Servers

Hi,
I got problem with discovering managed servers, when I restart only administration
server while managed servers are running. During restart of admin server everything
seems to be ok (the directive: Starting discovery of managed server... appears
on the screen).
However when I start admin console through http, I cannot monitor performance,
browse logs etc. I can only shutdown managed server and I can see in a server
tag that particular managed servers are running.
I'm looking forward for any clues
Michal

Sorry,
i cannot stop those managed server - in Control tab I have active only option
to start those server but they are running. In logging tab when I want to browse
the log the message that probably this server is not running appear. However in
the tab when all servers are listened there is a message that they are running
"Michal" <[email protected]> wrote:
>
Hi,
I got problem with discovering managed servers, when I restart only administration
server while managed servers are running. During restart of admin server
everything
seems to be ok (the directive: Starting discovery of managed server...
appears
on the screen).
However when I start admin console through http, I cannot monitor performance,
browse logs etc. I can only shutdown managed server and I can see in
a server
tag that particular managed servers are running.
I'm looking forward for any clues
Michal

I have a problem with session manager session files because of the invalid json storage data submited by firefox

Hi, i have problem with session manager's session files. The problem is: the submitted storage data from firefox which is put between "storage":{ and its matching closing brace } But in some of my session files there is non equal { and } under storage's braces. I need to get storage data but in my case it is very hard to do. My question is there any char put before or after { and } like /{ or \{ to avoid confusion? If there is not such thing, i think there could be different solution but i am not sure: i look couple of my session files; after "storage":{...} there is ,_"formDataSaved" so i can get storage data in this example ... by looking between "storage":{ and ,"_formDataSaved" easily. Is there every time ,"_formDataSaved" after "storage":{ ? Thank you.

Well, it seems waiting is not my strong suit..! I renamed a javascript file called recovery to sessionstore. This file was in the folder sessionstore-backups I had copied from mozilla 3 days ago, when my tabs were still in place. I replaced the sessionstore in mozilla's default folder with the renamed file and then started mozilla. And the tabs reappeared as they were 3 days ago!
So there goes the tab problem. But again when I started mozilla the window saying "a script has stopped responding" appeared, this time the script being: chrome//browser/contenttabbrowser.xml2542
If someone knows how to fix this and make firefox launch normally, please reply! Thank you

Java applet crashing with Workgroup Managed machines

Hi,
One of my clients uses a Java-based online proofing system for their publications which consistently crashes. We have narrowed the problem to machines that are or have been under Workgroup Management (the problem persists even after machines are unbound). We have eliminated other culprits such as Netinstall, Radmind, browser and Java versions and so on. The applet consistently gives the following output in console log (where the reference to the display profile is specific to that machine):
2008-11-10 13:54:03.239 Safari[672] * _NSAutoreleaseNoPool(): Object 0x55a68c0 of class NSView autoreleased with no pool in place - just leaking
2008-11-10 13:54:03.239 Safari[672] * _NSAutoreleaseNoPool(): Object 0x67d13f0 of class NSConcreteValue autoreleased with no pool in place - just leaking
2008-11-10 13:54:03.240 Safari[672] * _NSAutoreleaseNoPool(): Object 0x40c140 of class NSCFNumber autoreleased with no pool in place - just leaking
2008-11-10 13:54:03.240 Safari[672] * _NSAutoreleaseNoPool(): Object 0x4ee7e0 of class NSConcreteValue autoreleased with no pool in place - just leaking
2008-11-10 13:54:03.240 Safari[672] * _NSAutoreleaseNoPool(): Object 0x6727190 of class NSCFDictionary autoreleased with no pool in place - just leaking
2008-11-10 13:54:03.243 Safari[672] Path /Library/ColorSync/Profiles/GENDISP7.icm
And when the applet finally crashes we get this:
2008-11-10 13:44:43.004 Safari[672] * Assertion failure in -[NSViewHierarchyLock unlockTopMostReader], AppKit.subproj/NSViewHierarchyLock.m:444
The most conclusive test I performed was taking a machine that had never been bound to the server. The applet worked fine with no console log output. As soon as I bound it to the server, the above started happening. I have also found the problem in Tiger and Leopard networks. I have tried obvious stuff like re-creating the display profile.
Has anyone else seen anything like this? Or can anyone suggest where to look?
Thanks,

Java Preferences should be in Applications > Utilities.
Check the boxes to enable.
I'll refer you back to the earlier posts of that thread for restting the browser plug-ins.

Php mysql integration with workgroup manager

Hello,
I run a non-profit arts organization. We have active and inactive members that are tracked with a php mysql web app that I wrote. I was wondering how I could query the workgroup manager from php to make the inactive members not be able to login to our computers. Also, it would be great if we could just add new members into the php web app and then send that new member's info to the workgroup manager.
Is this possible?
Thanks
Alex

Yes, I have an OS X 10.4.3 server - which is also integrated in the AD. If i log on locally on the server with an account from the AD, then the workgroup manager works perfectly.
Guess my main problem is that i don't know where in the process things goes wrong.
- Is it on the client, that it is not able to sent the right requests
- Is it on the OS X Server, where something is misconfigured
- Is it security settings in the AD that prevents the server and client from getting the right information
I have the possibility on both the server and client to do ldap requests through the address book - this tells me that i do have some sort of connection. And that is also verified by actually being able to login with AD accounts.
Is there any logs i should pay special attention to? All the logs i can see through server admin doesn't contain usefull information. The logs on the client located in /var/log only tells me about some minor issues with mcxd (something about the uid being 1325883267 - which confuses me a bit - i thought uid's on unix was between 1 and 65535 :/ )
/Martin

Can't re-enable accounts with workgroup manager

Morning,
We have had cause to disable approximately 100 student accounts earlier this week, and we are now finding that we can not re-enable them. This is a major problem as it's coming to the end of term and they all need to be able to login!
The server is running 10.4.6 and the accounts were disabled using Workgroup Manager by selecting the account, unticking the 'access account' box and then saving.
I am trying to re-enable the accounts by simply reversing the process, i.e. ticking 'access account' and then clicking save, however every time I try this the following error pops up:
"Got unexpected error
Error of type eMemoryAllocError (-14901) on line 3318 of /SourceCache/ServerManagerUserGeneral/ServerManagerUserGeneral-193.2.5/UserAdva ncedPluginView.mm"
I have tried this with various of the disabled users on various different machines (including the server itself) and the same error comes up universally. I've had a poke about on Google but I can't find any reference to this happening anywhere else.
My inital thought was that the admin tools were out of date but looking we have version 10.4.4 of Workgroup Manager which is what is available on the apple site; is this the latest version?
I thought the point releases for admin tools ran in parallel with the server versions, i.e. the latest server admin tools would be of version 10.4.6?
Any help/ideas appreciated...!
Ian Atkinson

Additionally, I have come up with a fudge:
I have turned on the advanced view in Workgroup Manager so that I can see the LDAP inspector for each user. If I delete the two attributes 'AuthenticationAuthority ;DisabledUser;' and 'dsAttrTypeNative:authAuthor ;DisabledUser;' and then save, I can then go on to tick 'access account' and save with no problem (which does in fact re-enable the account).
I don't know if this sheds any light on the subject, but it's working for now at least...
Ian.

LDAPv3 not working with Workgroup Manager

Hello,
I recently started at a new job, and it appears the previous guy did not know how to set things up properly so I have been fixing all of his mistakes. But this one has me pulling out my hair.
Anytime I try to set the Workgroup local directory to LDAPv3 I get this message in the console
10/09/08 9:00:40 AM Workgroup Manager[219] Got unexpected error of type ePlugInNotActive (-14278) on line 3873 of /SourceCache/WorkgroupManager/WorkgroupManager-319/PMMUGMainView.mm
10/09/08 9:00:40 AM [0x0-0x23023].com.apple.WorkgroupManager[219] dsOpenDirNode failed with error of type -14278
I know there is a problem but just can't find it, and I can't find any information on resolving the ePlugInNotActive -14278 error
Can anyone help or steer me in the right direction.
Thank you,
Any other info you need just ask
Message was edited by: SoMuchSoul

No There isn't a page that would show that it was turned off other than the services list. But my point in all that was this is their device, and the guy knew that it used a dial up connection. So, knowing how your hardware works, you would assume that they would check to make sure it is running. Considering that most "Optimization" programs turn this off because no one uses a dial up connection anymore. I would think this just falls under the trouble shooting diagnosis train of thought. And I'm not saying that they guy didn't try, nor that he wasn't nice on the phone. I was just frustrated that something so simple seems to have a lot of people saying that verizon isn't thinking any more. LIKE MY INCREDIBLE THAT STILL ISN'T HERE. But don't get me started on that rant. I mean how can you finally advertise that you have a phone that is better than apple, and not know there is going to be a rush on the bank so to speak?

Cannot login with a account created with workgroup manager on local box

Hi my name is richard and i recentgly acqquired from one of ,y friends a macbook pro with leopard 10.5.7 and I downloaded the server tools to it because workgroup manager gives me more control over user creation and the like.there are three issues that i am facing right now:
1) I create an account for a user "VERONICA MARS" short name vmars with a password of apple. when I try to login using that account the login window just sits there and shakes its head at me like no no no wrong cridentials.
2) using the same account vmars i try to reset her password using wgm and it says that it cannot reset the password.
3) when i try to create the account it tells me that the home directory cannot be created.
oh and heres a bonus one:
most of the time in wgm it takes forever to get from one tab to the next and ill have to do a force quit to restore my mkac back to normal.
if anyone can help with these issues please respond
thanks in advanced
richard johnson
mac fan for life

Please let us know the username of the account that is giving you trouble.

Problem with Connection Manager. Can't change connection string / Server name

p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0cm;margin-right:0cm;margin-bottom:10.0pt;margin-left:0cm;line-height:115%;font-size:11.0pt;font-family:'Calibri','sans-serif';}
.MsoChpDefault
{font-size:10.0pt;}
.MsoPapDefault
{line-height:115%;}
@page Section1
{size:612.0pt 792.0pt;margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
{page:Section1;}
Hi,
I have copied a number of SSID packages from a live server to my test server and am trying to get them up and running but I have a problem with the connection. The only thing that is different is the server name. I decided to keep the same connection in the connection manager as it is referenced in a dtsConfig file. I changed the dtsConfig file to reference the new servername [Data Source= new test server name]. I also check my paths and they are pointing to the correct config locations etc.
I found this post which was similar to my problem but I still get problems with the connection
http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=1319961&SiteID=1
I updated the connection by changing the server name in the actual connection. I did this from the data flow tab in the Connection Managers sections (MS Visual Studio). Right clicked - Edit - changed the name of the server name to my test server and selected the database. Test connection was fine, and saved this.
Once I saved this, the connection string changed to my current test server in the properties of the connection. However when I run the package I get the following error:
Error: 0xC0202009 at ReportsImport, Connection manager "myconnectionstring": SSIS Error Code DTS_E_OLEDBERROR.  An OLE DB error has occurred. Error code: 0x80004005.
An OLE DB record is available.  Source: "Microsoft SQL Native Client"  Hresult: 0x80004005  Description: "Login timeout expired".
An OLE DB record is available.  Source: "Microsoft SQL Native Client"  Hresult: 0x80004005  Description: "An error has occurred while establishing a connection to the server. When connecting to SQL Server 2005, this failure may be caused by the fact that under the default settings SQL Server does not allow remote connections.".
An OLE DB record is available.  Source: "Microsoft SQL Native Client"  Hresult: 0x80004005  Description: "Named Pipes Provider: Could not open a connection to SQL Server [53]. ".
Error: 0xC020801C at Myprocess import from file, BuyAtReportsImport [79]: SSIS Error Code DTS_E_CANNOTACQUIRECONNECTIONFROMCONNECTIONMANAGER.  The AcquireConnection method call to the connection manager "myconnectionstring" failed with error code 0xC0202009.  There may be error messages posted before this with more information on why the AcquireConnection method call failed.
Error: 0xC0047017 at Myprocess import from file, DTS.Pipeline: component "ReportsImport" (79) failed validation and returned error code 0xC020801C.
Error: 0xC004700C at Myprocess import from file, DTS.Pipeline: One or more component failed validation.
Error: 0xC0024107 at Myprocess import from file: There were errors during task validation.
So even if I change the existing connection properties and save and Build my package again, my connection properties (connectionstring, servername etc) all revert back to its original data source when I re-open the package. Simply it does not seem to be saving the connection properties i put in.
What am I doing wrong or how can I change the existing connection manager to look at the new server. The database is the same and I have full admin privilege on the server.
I don't want to recreate my packages as there are alot and they are not simple.
After changing the connection properties, saving and reloading I get a connection error. But this is because it is not retaining the new connection manger setting i entered.
Incidentally - I created a new SSID to perform a simple connection and write to the the server and it was OK so there is no problem with actually seeing the my test server.
Thanks in advance

Yes, the package is in visual studio and I have executed it. There are no errors but in the output i have the error message about my connection. My dtsConfig file is added to the project in the 'Package Configuration Organizer' and path and files are correct. This is the output error:
Error: 0xC020801C at xx import from file, xxReportsImport [79]: SSIS Error Code DTS_E_CANNOTACQUIRECONNECTIONFROMCONNECTIONMANAGER. The AcquireConnection method call to the connection manager "myconnectionname" failed with error code 0xC0202009. There may be error messages posted before this with more information on why the AcquireConnection method call failed.
I will try and run it using dtexec.exe. if I have two config files do i use
dtsexec.exe /f <packagename> /conf <configfile> /conf <secondconfigfile>

ITunes 10.6 Mac Problem with Subscriptions Management

I have my MacBook updated to the latest everything, including iTunes 10.6.
I have noticed a problem with iTunes, in that I can log in to the store with my AppleId and buy apps, music, books, magazines movies etc and everything works fine.
However some apps have an auto-renewing subscription and I have a problem here. I log in with my AppleId, go to manage account and am then presented with an endless loop of password requests.
There doesn't seem to be any way to get to the subscriptions to turn them off.
Does anyone have any helpful tips?
thanx

I just tried this also on my iPad and it doesn't work there either. Although I can get into the account settings, when I try and change a subscription I get a big black rectangle in the middle of the screen and the iPad hangs until the screen login thing kicks in and I have to enter my pincode again.
Maybe this is something to do with my AppleId, I can't actually believe this is a fundamental problem, although maybe I am optimistic.

Big Problem With Solution Manager EHP1 ?

Dear all,
I have already installed SAP Solution Manager EHP1, after the installation sucessfuly. I check the function: Project Administration ( T code : Solar_Project_Admin), then select New project button.
The program inform that:
"Runtime Errors: Message Type Unknow
What happened:
Error in ABAP Application program
The current ABAP program "SAPLSPROJECT_SYSTEM_LANDSCAPE" had to be terminated because
it has come across a statement that unfortunately cannot be excuted.
etc
Do you know about this problem, what is the errors ?
Thanks all.

Dear all.
With Solution Manager EHP1
SAP Basis: SAPKB7001-SAPKB70016, SAPKB70101-SAPKB70102
SAP ABA: SAPKA7001-SAPK70016, SAPKA70101-SAPKA70102
Detail log as below:
Runtime Errors MESSAGE_TYPE_UNKNOWN
Date and Time 28.04.2009 16:47:15
Short text
Message type " " is unknown.
What happened?
Error in the ABAP Application Program
The current ABAP program "SAPLSPROJECT_SYSTEM_LANDSCAPE" had to be terminated
because it has
come across a statement that unfortunately cannot be executed.
What can you do?
Note down which actions and inputs caused the error.
To process the problem further, contact you SAP system
administrator.
Using Transaction ST22 for ABAP Dump Analysis, you can look
at and manage termination messages, and you can also
keep them for a long time.
Error analysis
Only message types A, E, I, W, S, and X are allowed.
How to correct the error
Probably the only way to eliminate the error is to correct the program.
If the error occures in a non-modified SAP program, you may be able to
find an interim solution in an SAP Note.
If you have access to SAP Notes, carry out a search with the following
keywords:
"MESSAGE_TYPE_UNKNOWN" " "
"SAPLSPROJECT_SYSTEM_LANDSCAPE" or "LSPROJECT_SYSTEM_LANDSCAPEU28"
"SPROJECT_SYSL_CHECK_CENTRAL_SY"
If you cannot solve the problem yourself and want to send an error
notification to SAP, include the following information:
1. The description of the current problem (short dump)
To save the description, choose "System->List->Save->Local File
(Unconverted)".
2. Corresponding system log
Display the system log by calling transaction SM21.
Restrict the time interval to 10 minutes before and five minutes
after the short dump. Then choose "System->List->Save->Local File
(Unconverted)".
3. If the problem occurs in a problem of your own or a modified SAP
program: The source code of the program
In the editor, choose "Utilities->More
Utilities->Upload/Download->Download".
4. Details about the conditions under which the error occurred or which
actions and input led to the error.
Information on where terminated
Termination occurred in the ABAP program "SAPLSPROJECT_SYSTEM_LANDSCAPE" - in
"SPROJECT_SYSL_CHECK_CENTRAL_SY".
The main program was "SAPLS_IMG_TOOL_5 ".
In the source code you have the termination point in line 29
of the (Include) program "LSPROJECT_SYSTEM_LANDSCAPEU28".

Problem with Path Managed property in alternate zones - also we have identified problem with Product catalog in alt zones

Hi All,
I'll start "one step back". Note we have resolved this issue but it is worth mentioning:
Yesterday we set up the product catalog. We were having a lot of inexplicable problems with it initially. After much troubleshooting, we found that it was because we were browsing the SharePoint site via the "Internet Zone" rather than the "Default
Zone" when we "Connected" our site to the product catalog. Issues experienced:
1) "Catalog Item URL Format" displayed error "Properties <Managed Property> specified by the shared catalog could not be found in the search schema" when attempting to connect to the catalog, despite that managed property being
configured correctly. The catalog would connect despite the error, and the navigation worked fine.
2) The search Result Source for the catalog would not return any results. Configuring the query and selecting "Advanced Mode" would show SPSiteURL:http://externalURL.domain.com. Changing SPSiteURL manually to
http://InternalURL resulted in results being returned as expected.
After much troubleshooting, we found that if were browsing SharePoint using the default zone (http://InternalURL) when we connected the Product Catalog, the result source then worked properly (internally and externally).
Ok, so now onto our current problem:
The Product Catalog appeared to be working properly (internally and externally) after figuring out that we needed to connect it from the Default Zone. However, we have found a remaining glitch, which doesn't appear to be Product-Catalog-specific. Consider
the following scenario:
1) We click a category in our Product Catalog, such as Electronics
2) A list of our electronic devices are presented via the "Category" display page
3) If we click on a specific item, a different URL is returned internally vs externally. We only get the friendly managed navigation URL when browsing via the Default zone. And of course totally different pages load based on which URL you get.
Internal (when browsing via Default zone):
http://InternalURL/catalog/PRODUCT-CATEGORY/PRODUCT-NAME
External (when browsing via Internet zone):
http://ExternalURL.domain.com/catalog/Lists/Products/DispForm.aspx?ID=1
We have reviewed the display template, and the "Path" managed property is simply being used to render the link. Furthermore, we have configured the Content Search web part's "Property Mappings" to show the "Path" MP, and it
displays the same (wrong) result externally.
This tells us that the Path MP is not correctly rendering "Friendly URLs" when using managed navigation.
Any help/ideas?
Our environment:
SharePoint Version: 15.0.4667.1000
Default Zone: http://InternalURL
Internet Zone: http://ExternalURL.domain.com
We are NOT using host named site collections
We ARE crawling the Default zone URL in our content source
Thanks,
Tommy

Hi,
We have now also observed the same issue with a Managed Property of type “Hyperlink/Picture”. The picture returns the wrong URL externally.
This post describes the same issue, however the poster found that setting UseAAMMapping=True doesn’t work in 2013:
http://sharepoint.stackexchange.com/questions/104806/set-the-useaammapping-property-of-a-managedproperty-object-map-an-url-of-a-h
We checked, and our Picture MP had UseAAMMapping=False. We set it to True, did a full crawl, and see no change in behavior. Path already had UseAAMMapping=True.
More info:
http://macslui.blogspot.com/2013/02/sharepoint-2010-problem-in-image-result.html
https://camerondwyer.wordpress.com/2014/08/04/beware-sharepoint-2013-search-results-and-the-listurl-property/#comment-2606
Thanks,
Tommy

Is it possible to set the default font in Pages with Workgroup Manager?

School district. We use iWorks '09 (currently) and several teachers would like the default font for all students to be a specific font (Comic Sans because of the shape of the letter 'a' and the number '4').
I know about creating the template and using the template, but that must be done for all student accounts, and must be done again for any incoming new students.
I would prefer there to be a way of setting this in WorkGroup Manager? I don't see that it is possible though. Or am I missing something?

You might also consider using color groups with Illustrator. Let me know what you think. It may help you out with projects that use the same color preferences.
Check out the tutorial here:
http://www.adobe.com/designcenter/illustrator/articles/lrvid4019_ai.html
Let me know if this helps you.
Vicente Tulliano

Problems with Workgroup Manager

Similar Messages

Maybe you are looking for