Samba share problem with OSX client
hi all,
I've a well know problem with samba server, in my case linux samba server.
In my network 4 client Mac OSx with different OS version everyday are usually connect to samba share with smb or network finder, normaly without specifics configuration or other.
NOW, I've 3 macbook air client with different OS version that do not connect never.
Server log write WRONG PASSWORD but is not TRUE.
I've tried every solution without success.
There is a patch to be applied to client?
it's just a coincidence that only AIR does not work?
Thanks in advance
Regards
I'm noticing this in the job info as well:
Session setup failed: NT_STATUS_LOGON_FAILURE
and the logs show it trying to login as root when I am supplying my domain credentials.
If I add the printer by IP address it works fine. I tried to delete keychain keys but that didn't work for me.
Similar Messages
-
UAG problems with OSX - same problem with Mac Mail and Outlook 2011 (via EWS)
Hi folks,
I'm trying to fix the last snagging issue I have with OSX clients in a UAG / Exchange 2010 deployment:
When trying to connect Mac Mail or Outlook 2011 the connections are very slow to start up, both at initial config and thereafter.
On connection I see lots of the same error re Session Cookies in UAG and no connection in the mail client. If I leave it for a few minutes, sometime many minutes, the errors stop and I eventually get a working connection.
The error is:
"Sesson Attempted to Access Restricted Application"
User with source IP address x.x.x.x tried to access application Exchange EWS that was restricted that was restricted for the session. This might indicate an intrusion attempt by misusing the session cookie.
Has anyone got any suggestions on how to fix this ?
Many thanks
SteveRuud, no, we didn't find a solution, or rather our solution (so far) is to tell users not to use Mac Mail and to use Outlook 2011 instead, which seems to work fine (after some Office updates!)...and we haven't upset anyone with that requirement
(yet).
There are some very long discussions on Apple support forums about the whole Mavericks / Mac Mail / Exchange 2010 issues.
I do hope to have another go at this problem sometime soon, I'm sure there must be a solution (and my money says it relates our hardware load balancers).
Steve -
After spending several hours sorting out Canon Pixma OSX problems here are my thoughts:
Canon 860 Series (Pixma 868) Printer Problems with OSX 10.8 (Mountain Lion) – links to Canon Support Site with Drivers and Software with install tips
Problem:
- New imac and MacBook Pro 2012 (OSX 10.8.2) had a problem using Canon Pixma 868 printer on network and would not scan or print using Canon Pixma software (Pixma MP Navigator 2.1 & Photo Print), which has advanced scanning and photo printing functions.
- When I connected the canon printer to my imac, OSX 10.8.2 automatically downloaded and installed drivers for Canon 860 series printer. I could then add the new printer (select ‘apple menu’ / ‘system preferences’ / ‘print and scan’ / “+”) and printer would work while connected via USB but could not get to print or scan over network wifi.
- The original Canon 860 Series CD does not work with 10.8 and the manual / online instructions did not make sense (as based on CD install).
Solution:
1) Install Canon Printer Drivers and Software (from official Canon site)
Go to canon support site, review FAQ, then download and install following Pixma 860 Series software & drivers for OSX 10.8 (links see below). The version I downloaded is in brackets but check for updated version. Full instructions are below.
Canon 860 Series Drivers & Software for OSX 10.8 Mountain Lion:
The base software and drivers needed for using Canon 860 Series on Mac OS X 10.8 (USB) are
1 Printer Driver
(Canon MX860 series CUPS Printer Driver Ver. 10.67.1.0 (03-Aug-2012))
2 Scanner Driver
(Canon MX860 series Scanner Driver Ver. 14.11.4a (03-Aug-2012))
3 Network Tool
(Canon IJ Network Tool Ver. 4.1.0 for Intel Mac (27-Dec-2012)
Canon Software for using advanced printing and scanning functions (while connected to network)
4 Solution Menu
(Canon Solution Menu Ver. 1.4.1 (27-Jul-2012 ))
5 MP Navigator EX
(Canon MP Nav EX Ver. 2.1.3 (02-Auf-2012))
6 Easy-PhotoPrint EX
(Canon Easy-PhotoPrint EX Ver. 4.1.6 (21-Jan-2013 ))
Canon Support (HK) – check your local site
http://www.canon.com.hk/en/download/main/index.do
Select Product and drivers from support site eg http://support-hk.canon-asia.com/
1. Choose a product category
Multifunctional Printers
2. Choose a product series
Pixma
3. Choose a product model
Pixma MX868
4. Choose type of document
Downloads or FAQ
If you have problems installing the software under 10.8, see the FAQ on Canon site. You will need to allow software installs from “unidentified developers by using “Control” Key or by changing your system preferences)
2) Check Canon Printer and Software Working while connected via USB
Once you have downloaded and installed drivers and software and restarted computer, check that the printer and Canon Pixma software (Pixma MP Navigator 2.1 & Photo Print) are working via USB. Open the Canon IJ Network Tool App (Applications / Canon Utilities /IJ Network Tool / Canon IJ Network Tool App) and make sure you can see the Canon MX 860 series (xx.xx.xx.xx.xx.xx) and that it shows the correct SSID Wifi settings (under the Canon IJ Network Tool App ‘Setup menu’). This is normally done as part of the automatic install but worth double checking
3) Add new network printer using ‘apple menu’ / ‘system preferences’ / ‘print and scan’ / “+”).
After you have checked USB printing turn off printer, unplug the USB cable and shutdown the Canon IJ Network Tool App.
Then turn the printer back on and wait 30s. Then add a new printer using ‘apple menu’ / ‘system preferences’ / ‘print and scan’ / “+”). Once you select “+” (add new printer), wait 10-30s for the Wifi Networked Canon MX 860 Series printer to appear in the new window eg Canon MX 860 series (xx.xx.xx.xx.xx.xx) (Kind: “Canon IJ Network”)
DO NOT ADD THE MX 860 SERIES BONJOUR SCANNER (the Bonjour Scanner is the built-in software, is not needed and often appears first on the add printer list). The Canon scanner can be accessed used through the MP Nav EX Ver. 2.1.3 software (which has much better functions)
You will now have two Printer Canon MX860 (USB) and Canon MX860 (Wifi / Network). Set the Canon MX860 (Wifi / Network) as default and test print and scan
If the Wifi Networked Canon MX 860 Series printer does not appear, check the printer and make sure that the printer can see the wifi network. On the printer select Menu / Settings / Device Settings / Lan Settings / WLAN Setting List. It should say WLAN Active, identify the SSID and have an IP address
If the printer can not see the Wifi Network, plug the USB cable back in, then open the Canon IJ Network Tool App (Applications / Canon Utilities /IJ Network Tool / Canon IJ Network Tool App). Make sure you can see the Canon MX 860 series (xx.xx.xx.xx.xx.xx) and that it has your SSID settings (under setup), if it has this info, restart the computer and the printer and try againHi, thaks for response, meant to post as a discussion (not question), wanted to save others time if they get the same problem
-
Problem with Variable Client Support
Hello,
I work with Labview 8.5 and Crio 9014.
I have a problem with Variable Client Support. When I try to compile my project I have the following error:
"The Network Variable Engine and Variable Client Support must be installed on the RT target for this application to function properly..."
I have read that we have to install the Variable Client Support in Measurement and Automation by right-clicking on the software and then choosing add/remove software but I can't install the appropriate shared variable components because I can't see neither Network Variable Engine and Variable Client Support. So what can I do?
Can somebody help me?
ThanksI have exactly the same problem. I wanted go through the "Getting Started with the LabVIEW RT module" and when I use wizard for generating new project I get same notification in my VI...
The Network Variable Engine and Variable Client Support must be installed on the RT target
for this application to function properly. If the Network Variable Engine is not supported on
the target (e.g. FP-2000 with <32MB of RAM), open the project and move the variable library
to My Computer in the project. Doing this will deploy the variables to localhost but
will still require that Variable Client Support be installed on the RT target.
Could someone help please ?
Attachments:
ni.png 95 KB -
Hello,
I experiance problems with QuickVPN client (version 1.4.1.2). I'm trying to connect to router SA520 with 1.1.65 firmware,
vpn tunell is established, but client says "The remote gateway is not responding. Do you want to wait?"
in case i click no, it drops vpn tunell
QuickVPN client log looks like this:
2010/08/18 12:13:27 [STATUS]OS Version: Windows 7
2010/08/18 12:13:27 [STATUS]Windows Firewall Domain Profile Settings: ON
2010/08/18 12:13:27 [STATUS]Windows Firewall Private Profile Settings: ON
2010/08/18 12:13:27 [STATUS]Windows Firewall Private Profile Settings: ON
2010/08/18 12:13:27 [STATUS]One network interface detected with IP address 192.168.1.100
2010/08/18 12:13:27 [STATUS]Connecting...
2010/08/18 12:13:27 [DEBUG]Input VPN Server Address = vpn.in-volv.lv
2010/08/18 12:13:28 [STATUS]Connecting to remote gateway with IP address: 78.28.223.10
2010/08/18 12:13:28 [WARNING]Server's certificate doesn't exist on your local computer.
2010/08/18 12:13:30 [STATUS]Remote gateway was reached by https ...
2010/08/18 12:13:30 [STATUS]Provisioning...
2010/08/18 12:13:39 [STATUS]Success to connect.
2010/08/18 12:13:39 [STATUS]Tunnel is configured. Ping test is about to start.
2010/08/18 12:13:39 [STATUS]Verifying Network...
2010/08/18 12:13:44 [WARNING]Failed to ping remote VPN Router!
2010/08/18 12:13:47 [WARNING]Failed to ping remote VPN Router!
2010/08/18 12:13:50 [WARNING]Failed to ping remote VPN Router!
2010/08/18 12:13:53 [WARNING]Failed to ping remote VPN Router!
2010/08/18 12:13:56 [WARNING]Failed to ping remote VPN Router!
2010/08/18 12:14:08 [WARNING]Ping was blocked, which can be caused by an unexpected disconnect.
2010/08/18 12:14:12 [STATUS]Disconnecting...
2010/08/18 12:14:15 [STATUS]Success to disconnect.
Server logs look like this:
2010-08-18 12:28:49: INFO: Adding IPSec configuration with identifier "arvils"
2010-08-18 12:29:02: INFO: Configuration found for 83.243.93.200[500].
2010-08-18 12:29:02: INFO: Received request for new phase 1 negotiation: 78.28.223.10[500]<=>83.243.93.200[500]
2010-08-18 12:29:02: INFO: Beginning Identity Protection mode.
2010-08-18 12:29:02: INFO: Received Vendor ID: MS NT5 ISAKMPOAKLEY
2010-08-18 12:29:02: INFO: Received Vendor ID: RFC 3947
2010-08-18 12:29:02: INFO: Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
2010-08-18 12:29:02: INFO: Received unknown Vendor ID
2010-08-18 12:29:02: INFO: Received unknown Vendor ID
2010-08-18 12:29:02: INFO: Received unknown Vendor ID
2010-08-18 12:29:02: INFO: Received unknown Vendor ID
2010-08-18 12:29:02: INFO: For 83.243.93.200[500], Selected NAT-T version: RFC 3947
2010-08-18 12:29:02: INFO: NAT-D payload matches for 78.28.223.10[500]
2010-08-18 12:29:02: INFO: NAT-D payload does not match for 83.243.93.200[500]
2010-08-18 12:29:02: INFO: NAT detected: PEER
2010-08-18 12:29:02: INFO: Floating ports for NAT-T with peer 83.243.93.200[4500]
2010-08-18 12:29:02: INFO: ISAKMP-SA established for 78.28.223.10[4500]-83.243.93.200[4500] with spi:e2cd855a75fc0887:6dc3b2e025152444
2010-08-18 12:29:02: INFO: Sending Informational Exchange: notify payload[INITIAL-CONTACT]
2010-08-18 12:29:02: INFO: Responding to new phase 2 negotiation: 78.28.223.10[0]<=>83.243.93.200[0]
2010-08-18 12:29:02: INFO: Using IPsec SA configuration: 192.168.75.0/24<->192.168.1.100/32
2010-08-18 12:29:02: INFO: Adjusting peer's encmode 3(3)->Tunnel(1)
2010-08-18 12:29:02: INFO: IPsec-SA established[UDP encap 4500->4500]: ESP/Tunnel 83.243.93.200->78.28.223.10 with spi=47693803(0x2d7bfeb)
2010-08-18 12:29:02: INFO: IPsec-SA established[UDP encap 4500->4500]: ESP/Tunnel 78.28.223.10->83.243.93.200 with spi=1079189482(0x40531fea)
2010-08-18 12:35:57: INFO: an undead schedule has been deleted: 'pk_recvupdate'.
2010-08-18 12:35:57: INFO: Purged IPsec-SA with proto_id=ESP and spi=1079189482(0x40531fea).
2010-08-18 12:40:46: INFO: Configuration found for 83.243.93.200[500].
2010-08-18 12:40:46: INFO: Received request for new phase 1 negotiation: 78.28.223.10[500]<=>83.243.93.200[500]
2010-08-18 12:40:46: INFO: Beginning Identity Protection mode.
2010-08-18 12:40:46: INFO: Received Vendor ID: MS NT5 ISAKMPOAKLEY
2010-08-18 12:40:46: INFO: Received Vendor ID: RFC 3947
2010-08-18 12:40:46: INFO: Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
2010-08-18 12:40:46: INFO: Received unknown Vendor ID
2010-08-18 12:40:46: INFO: Received unknown Vendor ID
2010-08-18 12:40:46: INFO: Received unknown Vendor ID
2010-08-18 12:40:46: INFO: For 83.243.93.200[500], Selected NAT-T version: RFC 3947
2010-08-18 12:40:46: INFO: NAT-D payload matches for 78.28.223.10[500]
2010-08-18 12:40:46: INFO: NAT-D payload does not match for 83.243.93.200[500]
2010-08-18 12:40:46: INFO: NAT detected: PEER
2010-08-18 12:40:46: INFO: Floating ports for NAT-T with peer 83.243.93.200[4500]
2010-08-18 12:40:46: INFO: ISAKMP-SA established for 78.28.223.10[4500]-83.243.93.200[4500] with spi:28447d39874689f9:a2b7da19d8d86413
2010-08-18 12:40:46: INFO: Responding to new phase 2 negotiation: 78.28.223.10[0]<=>83.243.93.200[0]
2010-08-18 12:40:46: INFO: Using IPsec SA configuration: 192.168.75.0/24<->192.168.1.100/32
2010-08-18 12:40:46: INFO: Adjusting peer's encmode 3(3)->Tunnel(1)
2010-08-18 12:40:47: INFO: IPsec-SA established[UDP encap 4500->4500]: ESP/Tunnel 83.243.93.200->78.28.223.10 with spi=259246202(0xf73c87a)
2010-08-18 12:40:47: INFO: IPsec-SA established[UDP encap 4500->4500]: ESP/Tunnel 78.28.223.10->83.243.93.200 with spi=3642234214(0xd9181566)
2010-08-18 12:43:27: INFO: IPsec-SA expired: ESP/Tunnel 83.243.93.200->78.28.223.10 with spi=33356156(0x1fcf97c)
2010-08-18 12:45:47: INFO: an undead schedule has been deleted: 'pk_recvupdate'.
2010-08-18 12:45:47: INFO: Purged IPsec-SA with proto_id=ESP and spi=3642234214(0xd9181566).
The most interesting thing is that sometimes this message appears, sometimes not (with the same configuration).
Please help!Hi,
I have some problem. I am using Windows 7 Entreprice x64. I use SA520 Firmware 1.1.65 and QuickVPN 1.4.1.2 port 60443.
"The remote gateway is not responding. Do you want to wait"
2010-08-18 17:25:51: INFO: Adding IPSec configuration with identifier "username"
2010-08-18 17:25:51: INFO: Adding IKE configuration with identifer "username"
2010-08-18 17:26:04: INFO: Configuration found for xxx.xxx.xxx.xxx[235].
2010-08-18 17:26:04: INFO: Received request for new phase 1 negotiation: 172.22.5.10[500]<=>xxx.xxx.xxx.xxx[235]
2010-08-18 17:26:04: INFO: Beginning Identity Protection mode.
2010-08-18 17:26:04: INFO: Received Vendor ID: MS NT5 ISAKMPOAKLEY
2010-08-18 17:26:04: INFO: Received Vendor ID: RFC 3947
2010-08-18 17:26:04: INFO: Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
2010-08-18 17:26:04: INFO: Received unknown Vendor ID
2010-08-18 17:26:04: INFO: Received unknown Vendor ID
2010-08-18 17:26:04: INFO: Received unknown Vendor ID
2010-08-18 17:26:04: INFO: Received unknown Vendor ID
2010-08-18 17:26:04: INFO: For xxx.xxx.xxx.xxx[235], Selected NAT-T version: RFC 3947
2010-08-18 17:26:04: INFO: NAT-D payload does not match for 172.22.5.10[500]
2010-08-18 17:26:04: INFO: NAT-D payload does not match for xxx.xxx.xxx.xxx[235]
2010-08-18 17:26:04: INFO: NAT detected: ME PEER
2010-08-18 17:26:04: INFO: Floating ports for NAT-T with peer xxx.xxx.xxx.xxx[48540]
2010-08-18 17:26:04: INFO: ISAKMP-SA established for 172.22.5.10[4500]- xxx.xxx.xxx.xxx[48540] with spi:ed4f291c71c1b688:7e6a8a0968f878fb
2010-08-18 17:26:04: INFO: Sending Informational Exchange: notify payload[INITIAL-CONTACT]
2010-08-18 17:26:04: INFO: Responding to new phase 2 negotiation: 172.22.5.10[0]<=> xxx.xxx.xxx.xxx[0]
2010-08-18 17:26:04: INFO: Using IPsec SA configuration: 192.168.75.0/24<->192.168.170.224/32
2010-08-18 17:26:04: INFO: Adjusting peer's encmode 3(3)->Tunnel(1)
2010-08-18 17:26:05: INFO: IPsec-SA established[UDP encap 48540->4500]: ESP/Tunnel xxx.xxx.xxx.xxx->172.22.5.10 with spi=239099274(0xe405d8a)
2010-08-18 17:26:05: INFO: IPsec-SA established[UDP encap 4500->48540]: ESP/Tunnel 172.22.5.10-> xxx.xxx.xxx.xxx with spi=3886848189(0xe7ac98bd)
2010-08-18 17:26:07: INFO: Configuration found for xxx.xxx.xxx.xxx[235].
2010-08-18 17:26:07: INFO: Received request for new phase 1 negotiation: 172.22.5.10[500]<=> xxx.xxx.xxx.xxx[235]
2010-08-18 17:26:07: INFO: Beginning Identity Protection mode.
2010-08-18 17:26:07: INFO: Received Vendor ID: MS NT5 ISAKMPOAKLEY
2010-08-18 17:26:07: INFO: Received Vendor ID: RFC 3947
2010-08-18 17:26:07: INFO: Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
2010-08-18 17:26:07: INFO: Received unknown Vendor ID
2010-08-18 17:26:07: INFO: Received unknown Vendor ID
2010-08-18 17:26:07: INFO: Received unknown Vendor ID
2010-08-18 17:26:07: INFO: For xxx.xxx.xxx.xxx[235], Selected NAT-T version: RFC 3947
2010-08-18 17:26:07: INFO: NAT-D payload does not match for 172.22.5.10[500]
2010-08-18 17:26:07: INFO: NAT-D payload does not match for xxx.xxx.xxx.xxx[235]
2010-08-18 17:26:07: INFO: NAT detected: ME PEER
2010-08-18 17:26:07: INFO: Floating ports for NAT-T with peer xxx.xxx.xxx.xxx[48540]
2010-08-18 17:26:07: INFO: ISAKMP-SA established for 172.22.5.10[4500]- xxx.xxx.xxx.xxx[48540] with spi:699f34b434d4318c:df4adca414787d36
2010-08-18 17:27:14: INFO: Purged ISAKMP-SA with proto_id=ISAKMP and spi=699f34b434d4318c:df4adca414787d36.
2010-08-18 17:27:14: INFO: Configuration found for xxx.xxx.xxx.xxx[235].
2010-08-18 17:27:14: INFO: Received request for new phase 1 negotiation: 172.22.5.10[500]<=> xxx.xxx.xxx.xxx[235]
2010-08-18 17:27:14: INFO: Beginning Identity Protection mode.
2010-08-18 17:27:14: INFO: Received Vendor ID: MS NT5 ISAKMPOAKLEY
2010-08-18 17:27:14: INFO: Received Vendor ID: RFC 3947
2010-08-18 17:27:14: INFO: Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
2010-08-18 17:27:14: INFO: Received unknown Vendor ID
2010-08-18 17:27:14: INFO: Received unknown Vendor ID
2010-08-18 17:27:14: INFO: Received unknown Vendor ID
2010-08-18 17:27:14: INFO: For xxx.xxx.xxx.xxx[235], Selected NAT-T version: RFC 3947
2010-08-18 17:27:14: INFO: NAT-D payload does not match for 172.22.5.10[500]
2010-08-18 17:27:14: INFO: NAT-D payload does not match for xxx.xxx.xxx.xxx[235]
2010-08-18 17:27:14: INFO: NAT detected: ME PEER
2010-08-18 17:27:15: INFO: ISAKMP-SA deleted for 172.22.5.10[4500]- xxx.xxx.xxx.xxx[48540] with spi:699f34b434d4318c:df4adca414787d36
2010-08-18 17:27:15: INFO: Floating ports for NAT-T with peer xxx.xxx.xxx.xxx[48540]
2010-08-18 17:27:15: INFO: ISAKMP-SA established for 172.22.5.10[4500]- xxx.xxx.xxx.xxx[48540] with spi:3fe5eb0bddbf2b9a:f5c11d7f813ca74a
2010-08-18 17:27:15: INFO: Sending Informational Exchange: notify payload[INITIAL-CONTACT]
2010-08-18 17:28:20: INFO: Purged ISAKMP-SA with proto_id=ISAKMP and spi=3fe5eb0bddbf2b9a:f5c11d7f813ca74a.
2010-08-18 17:28:21: INFO: ISAKMP-SA deleted for 172.22.5.10[4500]- xxx.xxx.xxx.xxx[48540] with spi:3fe5eb0bddbf2b9a:f5c11d7f813ca74a
With windows XP Pro i dont have this problem.
Is there a detailed configuration guide?
10x -
Graphic problem with OSX Lion - freezing all windows
I try to define my graphic problem with OSX Lion. Simply if you have set for example hot cornes and switch between desktop, all windows etc. the move of switchng windows i chopping and freezing. I dont idea why, but it hapennig since I installed Windows 7 via bootcamp. But the problem is still here after I remove Windows. Cleaning cash doesnt work. Can anybody help me please?
No, it's not Lion. It may be something you installed. If you just bought it you could also take it back to the Apple Store and they may be able to help.
-
Having problems with OSX and mail with the servers?
Having problems with OSX and the mail servers? Seems to be happening more and more?
Hello,
Who is your eMail provider, the part after the @ sign?
In Mail's Window Menu, choose Connection Doctor, any red dots for status, if so what is the message?
Then click the Show Details button & Check again.
Open Keychain Access in Utilities, use Keychain First Aid under the Keychain Menu item, then either check the Password under that item, change it, or delete it and start over.
You may have multiple entries.
Open Keychain Access in Utilities, enter the part after the @ sign in the search bar, hit enter
The Password rejection can confuse people since it's a catch all meaning...
This Password, Username, Authentication method... is not recognized on this Port to this Server, more than one entry in Keychain for each in/out entry, or a server end problem.
If using a browser to login via WebMail works it's not Name or Password, but one of the other ones.
The receiving email ports are:
IMAP is port 143
IMAP-SSL is port 993
POP is port 110
POP-SSL is port 995
Outgoing ports are...
SMTP and SMTP-SSL is on ports 25, 587 and 465. Port 587 has to be SSL, and port 465 is enforced TLS-wrapped and is generally used by Outlook users. -
I encountered a problem with some client machines that use Firefox version 24ESR and IE8.
Ajax requests of aspx pages from Firefox are getting the following error from the iis server (iis version 7.5):
Bad Request - Request Too Long
HTTP Error 400. The size of the request headers is too long.
From analyzing the request that was sent to the server, I saw that the request consist of only the viewstate of the aspx page.
I tried to disable the viewstate for one page and the server got the request correctly.
I do not encounter any issues on these laptops with postback requests from Firefox or when running the same application with IE8.Sometimes that means that the page address sent is loo long.
Check the link address you are using.
I can't help you further and will send for more help. -
10.4 client problem with OSX Server 10.5.8
I have an late 2009 X_server with OSX 10.5.8 running, have binding to AD and enabled system as OD master. I have added an ad user to an od group and set a prefernce in the DOC to add the Group folder to the doc.
On my MBP mostly all goes well except for a question mark for ther group folder. But on an old G4 tower I'm testing with it just prompts me about not being assigned to a group and gives the option to apply settings. but the settinsg never take place. Has any had this problem before? Thanks in advance. ArtI've got the Audiotron working again. I found some info on basically opening the entire share to guest access. Reference this thread: http://discussions.apple.com/thread.jspa?threadID=392697
I tried changing "encrypt passwords" (global section) to "no" and that didn't help. Then I added this to the music share and everything works. Probably not the best security solution, but I'm behind a firewall.
In /etc/smb.conf added for the music share:
public = yes
only guest = no
writable = no
printable = no
(I still left "encrypt passwords = no" in the global section. I'm not sure if that made a difference or not.) -
Mega problem with OSX - XP - VISTA sharing
hello.
first of all i want to say that i am not network-guru (so you could see some silly stuff here =) but also i am not /basic/ user (i know how to plug a cable properly =) and i was trying to google my problem for a few days and finally i will try to find help here...
i have few machines with various operating systems;
osx 10.5.4
windows vista home premium
windows vista ultimate
windows xp sp2
there are 10 machines and all of them share at least 1 directory or disk over the network. all windows are set up to map network drives (also one disk from osx) and osx is connecting to windows drives through standard smb:// protocol.
now... i am aware of all the problems with sharing stuff between osx and win, especially in my case, so my first question would be:
is there any GOOD tutorial how to set up such network properly??
i have seen few of them but seems that there are problems occurring again (i guess mostly because of vistas :P)
for example;
i want one of my osx to share TWO DISKS and TWO FOLDERS.
in osx preferences i set up everything correctly in sharing and users (btw, guest account is disabled on ALL machines!) but when i log in (from any machine) i can see ALL DISKS plus TWO SHARED FOLDERS plus MY USER'S FOLDER and everything is accessible and writable etc... after few restarts and trying to disable/enable file sharing, clearing caches and such stuff on osx, i tried to edit smb.conf from /etc and also from /var/db and by default option in [homes] part which says 'browseable' is set to NO... i tried to change 'read only = no' to YES and changed 'com.apple: show admin all volumes = yes' to NO and after that some strange happened... (i will not emphasize reboot points of ALL computers but it was done after each step =)
xp machines could see TWO DISKS, ONE FOLDER, MY USER'S DIR
vista machines could see TWO DISKS, ONE FOLDER (different than xp), MY USER'S DIR
osx could see ALL DISKS, TWO FOLDERS, MY USER'S DIR
EVERYTHING was writable.
if i would click to browse one of those disks on osx i could see everything inside but if i go back to the root of that computer, disk would instantly DISAPPEAR and become unaccessible from that pc. same on others.
now i left smb.conf files in default setting so everybody can see everything and everything is writable. =( after googling 'smb.conf' combinations i have seen that some people have completely different setups... how could i know which one is right for my osx?
generally my second question is: WHAT SHOULD I DO TO MAKE EVERYTHING WORKS FINE?
i hope you understood my problem because i am little bit lost in all this...
in addition there are my smb.conf files
/etc/smb.conf
; Configuration file for the Samba software suite.
; ============================================================================
; For the format of this file and comprehensive descriptions of all the
; configuration option, please refer to the man page for smb.conf(5).
; The following configuration should suit most systems for basic usage and
; initial testing. It gives all clients access to their home directories and
; allows access to all printers specified in /etc/printcap.
; BEGIN required configuration
; Parameters inside the required configuration block should not be altered.
; They may be changed at any time by upgrades or other automated processes.
; Site-specific customizations will only be preserved if they are done
; outside this block. If you choose to make customizations, it is your
; own responsibility to verify that they work correctly with the supported
; configuration tools.
[global]
debug pid = yes
log level = 1
server string = Mac OS X
printcap name = cups
printing = cups
encrypt passwords = yes
use spnego = yes
passdb backend = odsam
idmap domains = default
idmap config default: default = yes
idmap config default: backend = odsam
idmap alloc backend = odsam
idmap negative cache time = 5
map to guest = Bad User
guest account = nobody
unix charset = UTF-8-MAC
display charset = UTF-8-MAC
dos charset = 437
vfs objects = darwinacl,darwin_streams
; Don't become a master browser unless absolutely necessary.
os level = 2
domain master = no
; For performance reasons, set the transmit buffer size
; to the maximum and enable sendfile support.
max xmit = 131072
use sendfile = yes
; The darwin_streams module gives us named streams support.
stream support = yes
ea support = yes
; Enable locking coherency with AFP.
darwin_streams:brlm = yes
; Core files are invariably disabled system-wide, but attempting to
; dump core will trigger a crash report, so we still want to try.
enable core files = yes
; Configure usershares for use by the synchronize-shares tool.
usershare max shares = 1000
usershare path = /var/samba/shares
usershare owner only = no
usershare allow guests = yes
usershare allow full config = yes
; Filter inaccessible shares from the browse list.
com.apple:filter shares by access = yes
; Check in with PAM to enforce SACL access policy.
obey pam restrictions = yes
; Make sure that we resolve unqualified names as NetBIOS before DNS.
name resolve order = lmhosts wins bcast host
; Pull in system-wide preference settings. These are managed by
; synchronize-preferences tool.
include = /var/db/smb.conf
[printers]
comment = All Printers
path = /tmp
printable = yes
guest ok = no
create mode = 0700
writeable = no
browseable = no
; Site-specific parameters can be added below this comment.
; END required configuration.
/var/db/smb.conf
# Configuration options for smbd(8), nmbd(8) and winbindd(8).
# This file is automatically generated, DO NOT EDIT!
# Defaults signature: a13310200e774008e7f854700000293c480000
# Preferences signature: 200e4bd28a0b1e026490000552000000
# Configuration rules: $Id: rules.cpp 32909 2007-08-17 23:07:40Z jpeach $
# Server role: Standalone
# Guest access: never
# NetBIOS browsing: not a master browser
# Services required: org.samba.smbd org.samba.nmbd
[global]
security = USER
auth methods = odsam
netbios name = Azriel
workgroup = group
dos charset = 437
server string = Azriel
ntlm auth = yes
lanman auth = no
max smbd processes = 10
log level = 1
use kerberos keytab = yes
com.apple: lkdc realm = LKDC:SHA1.5587265F45481D473800CE75CE481F5A07475F59
realm = LKDC:SHA1.5587265F45481D473800CE75CE481F5A07475F59
map to guest = Never
domain master = no
preferred master = no
enable disk services = yes
enable print services = no
wins support = no
[homes]
comment = User Home Directories
browseable = no
read only = no
create mode = 0750
guest ok = no
com.apple: show admin all volumes = yes
[global]
thanks for ANY help!somebody? something? anyhing? please! =)
-
AutoFS + Samba share problems when share not online (especially in itunes)
I'm trying to look into having some or all of my media on a server for a couple of my macs, the main one of interest right now being a mac mini working as a HTPC under a tv, being operated 99% of the time with just the apple remote and frontrow.
A friend informed me that if you have your itunes library not managed and add files from a remote share then everything works pretty well. Namely if you try to play a file it will seemingly automount the remote file and start it playing. If the remote server is not available it will quickly discover this and after a short pause start giving explanation marks next to the broken tracks. Get the remote destination connected and then try to play a broken track and it will successfully mount the track and play.
Basically perfect.
I quickly tried accessing these files via a symbolic link or alias to them on the remote drive, in doing this i can be somewhat insulated from problems of trying to move the library to other machines/shares in the future. This all works fine but you do lose the ability for itunes to automatically mount the remote drive, which is a bit of a step back, but not a big deal on my normal machine. On my HTPC machine however i'd really like front row to be able to just work, hence automatically mounting the server as required.
The only problem was that when i tried with files directly added to the itunes library from a remote location frontrow would NOT automount the tracks/videos when you attempted to play them like itunes would do.
I've just spent the last few hours following the advice here
http://rajeev.name/blog/2007/11/22/autofs-goodness-in-apples-leopard-105-part-i/
to setup autofs in the hope that this would let me get auto mounting working as it does with itunes and directly added to the library remote files.
I boiled this down to the following settings
as root
vi /etc/auto_master
and add
/smb auto_smb
then create this new config file
vi /etc/auto_smb
and add
<Mount dir under /smb folder> -fstype=smbfs ://<share user>:<share pass>@<ip address>/<share point>
ie.
testMount -fstype=smbfs ://netuser:[email protected]/remoteMount
finally tell automount to throw away its cache
automount -vc
then the mount should be setup
df -h
shows the indirect map waiting
map auto_smb 0Bi 0Bi 0Bi 100% /smb
and by triggering it
ls /smb/testMount
you should connect and get a listing, a subsequent df shows
df -h
//[email protected]/Media 466Gi 325Gi 141Gi 70% /smb/Media
Everything worked well with the share getting mounted nicely when present, frontrow could just start playing the files it needed, perfect!!
The problem came when i wanted to simulate the media server being offline, basically frontrow, a lot of the system including finder, cd commands attempting to access the share, and itunes if you tried that would all freeze for long periods of time as they tried their best to get the files they were looking for.
I tried looking into getting this to gracefully time out and think i got somewhere by trying to setup the samba share to be soft linked.. I wasn't sure in what files i could add this to, first attempts didn't seem to do anything but adding this seemed to make a difference
/etc/nsmb.conf
containing something like
#Configuration file for example.com
[default]
minauth=ntlmv2
streams=yes
soft=yes
to turn soft samba shares on. Things like cd in a terminal seemed to behave quite well with this, when no remote share present you would get empty folders and the like. Finder would also seem to be reasonable with it.
Frustratingly itunes and frontrow both still have quite massive pauses even when finder and cds in the background show that perhaps the soft links are working and failing like they should.
I'm now left wondering what i can do to fix it, and resorting to perhaps having the files added via a symbolic link, using the login items to launch the remote share every boot and then having it so that all i need to do is reboot the HTPC mac mini if the server is on for it to pick it up and let me play the files. Otherwise they'll just be unavailable and will fail gracefully without locking up itunes. The perfect solution would be to either have a crontab running, or some applescript bound somehow to whenever frontrow is ran which manually tries to tell finder to do the equivelant mount the login items setup does.
It's frustrating though as its so close, and the autofs solution if it did work better would seem to be the perfect solution. Has anyone dabbled with this and got any suggestions as to options you can setup to make things not go horribly wrong when a remote share is NOT present, preferrably within the context of itunes or front row not complaining, but to be honest any suggestions i'll be able to try out myself.
Sorry i've written so much, perhaps some of it will be helpful reference as it took me a while to decipher that link at the top into just setting up a samba autofs.
Cheers.It seems like it's not only the ArchLinux workstation that displays the norwegian letters wrong. The only machine that shows this correc is the machine that created the file/catalogue.
It seems like the windows 2000 displays the cataloge created by windows XP just fine. -
WRT610N - Samba Storage Problem with Mac OS X Leopard
Hello there,
I've set up a USB drive to be shared via the router (tried both a fat32 and an NTFS drive). When I login from a windows machine I can use the share point without any problems. When I try to use it from a Mac (mounted via smb://192.168.1.1/sharepoint) I can access the folders and download files. I can even create folders. When I try to copy a file onto the share point (normal file name, small file size) I get an error saying "The operation cannot be completed because you do not have sufficient privileges for some of the items." The console log says: "7/3/09 1:01:06 AM kernel smbfs_composeacl: smbfs_setattr 13, ignored "
If I try to copy the file directly via a terminal window I see this:
Macintosh-3:tc user $ cp ~/test.plist ./
cp: ./test.plist: fchmod failed: Permission denied
As I see it there is a problem with leopard trying to set permissions when copying and the router refusing. Any ideas of how to get this to work?I found this solution in another link on this web site, I would be curious to know if this works with NTFS also.
Routers and Access Points : Wireless Routers : WRT610 USB Harddisk and Mac osx 10.5 Finally, i got it to work.
Here is my step.
1. Format the external HD with mac with the fat format.
2. plug in the HD to the router.
3. In the storage setting>Administration, create a group named "root" with r/w permission and a user "root" with the group "root. Save the setting.
4. Last, create a share on the drive. Assign the group "root" to it.
Boom! Its work now. I can use it with time machine and share my itune library. Hope this can help someone stuck with this issue. -
Hey guys,
So I've been trying to create an unauthorized set of samba shares, I've managed to allow a guest user to connect to the drives without authentication however files that I copy from outside the shares cannot be modified by my guest. Is it possible for me to allow guests to modify files that do not belong to them? my example is below;
cp /etc/motd /home/shares/downloads
ls -l
-rw-r--r-- 1 sam users 406 Feb 16 02:29 motd
-rw-rw---- 1 guest users 0 Feb 16 02:37 test.txt
I attempt to modify the motd and it will not let me save apologies for any sheer stupidity, I'm still fairly new to this. Below is my smb.conf
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
# For a step to step guide on installing, configuring and using samba,
# read the Samba-HOWTO-Collection. This may be obtained from:
# http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf
# Many working examples of smb.conf files can be found in the
# Samba-Guide which is generated daily and can be downloaded from:
# http://www.samba.org/samba/docs/Samba-Guide.pdf
# Any line which starts with a ; (semi-colon) or a # (hash)
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
# NOTE: Whenever you modify this file you should run the command "testparm"
# to check that you have not made any basic syntactic errors.
#======================= Global Settings =====================================
[global]
# workgroup = NT-Domain-Name or Workgroup-Name, eg: MIDEARTH
workgroup = WORKGROUP
# server string is the equivalent of the NT Description field
server string = Server 1
# Security mode. Defines in which mode Samba will operate. Possible
# values are share, user, server, domain and ads. Most people will want
# user level security. See the Samba-HOWTO-Collection for details.
security = user
# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the "loopback" interface. For more examples of the syntax see
# the smb.conf man page
; hosts allow = 192.168.1. 192.168.2. 127.
# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
load printers = yes
# you may wish to override the location of the printcap file
; printcap name = /etc/printcap
# on SystemV system setting printcap name to lpstat should allow
# you to automatically obtain a printer list from the SystemV spool
# system
; printcap name = lpstat
# It should not be necessary to specify the print system type unless
# it is non-standard. Currently supported print systems include:
# bsd, cups, sysv, plp, lprng, aix, hpux, qnx
; printing = cups
# Uncomment this if you want a guest account, you must add this to /etc/passwd
# otherwise the user "nobody" is used
guest account = guest
map to guest = Bad User
# this tells Samba to use a separate log file for each machine
# that connects
log file = /var/log/samba/%m.log
# Put a capping on the size of the log files (in Kb).
max log size = 50
# Use password server option only with security = server
# The argument list may include:
# password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
# or to auto-locate the domain controller/s
# password server = *
; password server = <NT-Server-Name>
# Use the realm option only with security = ads
# Specifies the Active Directory realm the host is part of
; realm = MY_REALM
# Backend to store user information in. New installations should
# use either tdbsam or ldapsam. smbpasswd is available for backwards
# compatibility. tdbsam requires no further configuration.
passdb backend = tdbsam
# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting.
# Note: Consider carefully the location in the configuration file of
# this line. The included file is read at that point.
; include = /usr/local/samba/lib/smb.conf.%m
# Configure Samba to use multiple interfaces
# If you have multiple network interfaces then you must list them
# here. See the man page for details.
; interfaces = 192.168.12.2/24 192.168.13.2/24
# Browser Control Options:
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
; local master = no
# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
; os level = 33
# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
; domain master = yes
# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
; preferred master = yes
# Enable this if you want Samba to be a domain logon server for
# Windows95 workstations.
; domain logons = yes
# if you enable domain logons then you may want a per-machine or
# per user logon script
# run a specific logon batch file per workstation (machine)
; logon script = %m.bat
# run a specific logon batch file per username
; logon script = %U.bat
# Where to store roving profiles (only for Win95 and WinNT)
# %L substitutes for this servers netbios name, %U is username
# You must uncomment the [Profiles] share below
; logon path = \\%L\Profiles\%U
# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
; wins support = yes
# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
; wins server = w.x.y.z
# WINS Proxy - Tells Samba to answer name resolution queries on
# behalf of a non WINS capable client, for this to work there must be
# at least one WINS Server on the network. The default is NO.
; wins proxy = yes
# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
# via DNS nslookups. The default is NO.
dns proxy = no
# These scripts are used on a domain controller or stand-alone
# machine to add or delete corresponding unix accounts
; add user script = /usr/sbin/useradd %u
; add group script = /usr/sbin/groupadd %g
; add machine script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %u
; delete user script = /usr/sbin/userdel %u
; delete user from group script = /usr/sbin/deluser %u %g
; delete group script = /usr/sbin/groupdel %g
#============================ Share Definitions ==============================
[Music]
path = /home/shares/music
public = yes
writable = yes
printable = no
read only = no
guest ok = yes
write list = @users
directory mask = 0777
[Pictures]
path = /home/shares/pictures
public = yes
writable = yes
printable = no
read only = no
guest ok = yes
write list = @users
directory mask = 0777
[Videos]
path = /home/shares/videos
public = yes
writable = yes
printable = no
read only = no
guest ok = yes
write list = @users
directory mask = 0777
[Downloads]
path = /home/shares/downloads
public = yes
writable = yes
guest ok = yes
create mask = 0660
write list = @users
[Back-ups]
path = /home/shares/backups
public = yes
writable = yes
printable = no
read only = no
guest ok = yes
write list = @users
directory mask = 0777
Last edited by risegeek (2011-02-17 01:47:12)Hmm, seems that the linux user account and the samba account passwords need to be identical for this to work? if I define no password for the samba account sam and if it has a password on the linux box itself, it will not work :S am I missing something?
Also might be worth taking note that if a conflict exists between the password then it also renders my other account such as guest inaccessible, I've got it back to working the way it was before
EDIT: I've managed to get this working, for some reason once I needed to remove the sam account that I created within smbpasswd - once I had done this I was able to use sam as the guest account? Samba is a little bit like pissing in the dark sometimes Ahh well.
Last edited by risegeek (2011-02-17 01:46:56) -
Samba autorisation problem (with xp computer)
Hello,
I just swith my server (mac pro) from a 10.4.10 to a 10.5.1 server.
I'm new to server computing, so i stick to the standart configuration.
I'm expercing big sharing problems. I have the afp crash bug, but i'm also experiencing loads of autorisation problem with the xp clients.
I first experienced problem with windows authentification , windows side(i set up an account for each PC), so i tranform every share point from guest read only to guest read/write (apple+i on the folder, then i change the authorisation). But i experience loads of autorisation.
I finally fix the windows authentification problem, but it get worse:
Every PC trying to make a new folder can't name it. He still have autorisation, he can delete it, an make named folder in it.
Plus a lot of autorisation oddities, the autorisation don't seem to propagate properly.
I tried to swith to the advanced configuration, but i always completly screwed up the server after one or two hours.
Thanks!
Sébastien
(please excuse my english).You have the exact same problem as described here:
http://discussions.apple.com/thread.jspa?threadID=1324515&tstart=0
Several of us have noticed it, especially with Windows XP Home. I've filed a bug report with Apple, and would encourage you to do so as well.
Please follow the above link - I have a workaround that might suit your case, as well as instructions for filing the bug report.
--Gerrit -
Mailbox problems with OSX server 10.8 Any suggestions?
I am upgrading from 10.5.8 to 10.8. I am having problems getting mail to function. At start up I get the message mail cannot save information about your mail boxes because of a network problem". I suspect this is a dns problem. Any suggestions?
Things have improved some. After much ado with the app store I was able to download 10.8.2. That did indeed help. However I am still trying to get Server 2.1 so that it will download. The App store doesn't want to allow the download. I have put in a request through express lane but nothing has happened.
Currently, I am getting some downloads but am unable to upload. Both the server logs and connection doctor (client end) indicate that there is an authentication problem with pop. However, I am very sure that the user name and passwords are the same at both ends and my reading of the logs indicates that the authentication method is the same at both ends, it just won't authenticate. Is this likely a problem that will be cured with the upgrade to server 2.1. Currently I have authentication set for custom with APOP, CRAM-MD5, and Clear Text. There is an automatic setting. Would setting to automatic and then re-establishing the client end be of any value.
Thanks in advance or any assistance.
John
Maybe you are looking for
-
I received a message on my iPhone 4 that has a video attached to it. I "saved video" but don't know where. How do I find it and send it to mi MacBook Air?
-
Can my new Ipod touch 5 16GB be traded into Apple?
On Apple's website i typed in "can my new iPod touch be traded in?" and it didnt come up with any answer. I'm saving up for a new laptop. I just wanna know how much my iPod is worth at Apple HERE IS SOME BACKSGROUND INFO: It is an iPod touch 5 16GB S
-
SecretKey in keystore and on file
Hi, I understand that the SecretKey type is password based encrypted with the password a user inputs. 1) What algorithm is used for the encryption? 2) Is there an option not to encrypt the key? enabling access only with a password (math input to embe
-
How to recover a project made in Adobe Illustrator?
I made a project in my Adobe Illustrator. Today I tried to open it, next message appeared: "Can't open the illustration. The illustration contains an incomplete or garbled object description. Offending Operator: '%%End Setup.'"
-
Hi experts , I am testing the number of data for 0FI_GL_4 in source system with tcode rsa3. but it is apparently giving me a dump "no memory no paging". I want to know the number of data that should be loaded into BI. Kindly advise me is there any a