Server Admin 10.6 bug: Realms are completely messed up

After upgrading Server Admin to 10.6, I completely lost control over the Realm configuration with Server Admin. This happens regardless if the Server is 10.5 or 10.6.
Example: For a given Realm the permissions for "Everyone" should read "None" instead nothing is displayed (the field is empty). The permissions for a given Group should read "Browse and Read WebDAV", instead "None" is displayed.
If I try to change permissions, or give permissions to a new Realm, the popup menu shows the following choice:
*Browse Only*
*Browse Only*
None
Normally it should look like this:
*Browse Only*
*Browse and Read WebDAV*
*Browse and Read/Write WebDAV*
None
I can't say for sure if this has consequences for the actual access rights. I found this problem after upgrading to 10.6 and tested it by connecting from a 10.6 client computer via WebDAV as Guest. The Server gave me full access instead of none. Later I found in the logfile, that I have been connected with my current user name instead of being a Guest, with I explicitly choose to be, in the Finders connect dialog on a 10.6 client.
After that I lost all trust into 10.6 Server so far. Also it was late yesterday, so I decided to restart the Server as 10.5 from a backup disk. I'll give 10.6 a second try if I got some answers first.
Remark: I'm using Server Admin in German Language. I have translated the menu items above for this post. Is this a localization bug? Could anyone confirm, this behavior of Server Admin in other language versions?
_Further question:_ Is this "choose to be a Guest, and be connected as the curred user" behavior a bug in 10.6 Finder?
Message was edited by: root 66

This appears to be a problem with the German-language strings present in SnowLeopard Server. You can try fixing them yourself as a workaround. As an administrative user, make a backup copy of the following file (just in case), and open the file with a text editor:
"/Applications/Server/Server Admin.app/Contents/PlugIns/Web.bundle/Contents/Resources/German.lproj/Localizab le.strings"
That file contains lines that map user interface items to displayed strings. For the popup values of the Permissions section of the Realms display, you will find the following incorrect lines:
"kBrowseOnly" = "Ansehen";
"kBrowseAndReadWebDAV" = "Ansehen ";
"kBrowseAndReadWriteWebDAV" = "Ansehen ";
Change each "Ansehen" to a more meaningful German string - I think you can infer a correct string from the context - and save the changes, and then relaunch Server Admin.

Similar Messages

Keychains are Completely Messed Up

Hey there all. So, my friends computer's keychains are completely messed up, and it is the System keychain. 3 months ago it was the login keychain. I, at this point, think that we should just redownload Mavericks and run the installation like a upgrade. Would that fix it, or would something else?
Thanks in Advance,
Christopher
Mavericks 10.9.4
rMBP 13", mid 2013 (????), i5 and 16GB RAM

Try Keychain First Aid first. If that doesn't work, you can reset Keychain completely: Resetting your keychain in Mac OS X
(Resetting a keychain sets aside the original default keychain file and creates a new one.)

DHCP Clients Not showing in Server Admin....but are there

Hi,
DHCP has just recently stopped showing me the MAC addresses of connected clients. It always says 0 though I know through the logs that DHCP is working. Any ideas? I will give more info if needed but wondering if it's maybe a bug or something?
Thanks.

try if this helps:
_*Music Folder Files Not Added v2.0*_
This application will list the file paths of the files in your designated "iTunes Media" folder which are not in iTunes' library. Additionally, you can select a different parent folder and its contents will be compared to the iTunes library. Options to Add a selection of found files to iTunes or move them to the Trash.
JGG

"Pages" and "Sheets" columns in Server Admin Print Service Jobs

I've been using Print Service for a while now and it's been working reasonably well.
When I'm monitoring queues in Server Admin, I've noticed there are columns for "Pages" and "Sheets." These columns are always blank for every print job in every print queue.
I am not using Print Quotas, but I am managing Preferences for Printing in Workgroup Manager.
I have two questions:
1) Any idea why these columns are blank? Does the client-side and/or server-side printer driver have to support this feature? I'm using HP's latest Laserjet drivers for each queue on both the clients and the server. Perhaps these columns are only applicable when using Print Quotas?
2) If these columns did show something, what would be the difference between "Pages" and "Sheets?" Apple's own documentation offers no description. All their Print Service manual says is:
"Jobs are listed in priority order, and include the name of the user who submitted each job, the name of the job, its size, the number of sheets to be printed, the current status of the job, and the number of pages in the job (you might need to scroll to see the page column)."
Pretty vague...
-- Steve

Is there anyone using printing services on a Mac server at all that could comment on whether or not you see the print jobs listed in the queue when printing?

Missing features in Server Admin

I have been administrating OS X servers for a couple of years, in my opinion there are a couple of things missing from the Server Admin Application:
*Fetchmail setup*
It's very easy setting it up using the command line (once you know how to do it). So why not make a GUI option for it? It's an excellent feature when a server is installed on a location where the power and/or internet connection is not reliable enough. In fact one of the (very) few things I like on a Windows server is the POP3 Connection Manager, it's very easy to set up.
*Site 2 Site VPN*
An excellent feature, once again, simple to set up once you know how to do it using the command line. It's an excellent option for connection networks. But it feels like a hidden feature.
*Windows version*
The Server Admin and Workgroup manager apps are great, but I think that a Windows version would make a Mac OS X Server more attractive for Windows user. Both apps are relatively simple, so why not?
That's all...

Click here and fill out the form to send feature requests to the Mac OS X Server engineers.
(24959)

My songs are fine on iTunes but completely messed up on my iPod

hey, ive gotta problem. when i listen to my songs on iTunes, not the store, but my library, they are fine. when i listen on my iPod, they are completely messed up! what i mean is that when played on my ipod, the beat (or rest of music besides the lyrics) is louder than normal, and i can barely hear the lyrics. whats going on and how do i fix it?
thnx alot for the help

Please set the EQ setting on you iPod to "flat". It does not help, please restore your iPod to factory settings
http://docs.info.apple.com/article.html?artnum=60983
Once completed, update your iPod with your iTunes

Server Admin completely Useless for advanced apache configurations?

If you are doing things like rewrites with mod_rewrite Server Admin messes up the config e.g. by removing duplicate but necessary rewrite conditions. Further the site edit thing at all has some very strange bugs I can't really describe - it does some weird renaming and so on. Realms and Webdav seems to be problematic to as soon as you need to modify something by hand.
In short - Server Admin is still not usable for productive Apache deployment. Apple should have a look on Tenon iTools or other tools out there which don't mess with your config so much.
For myself I decided not to use Server Admin for apache Administration anymore cause I am frightened.
Maybe I am wrong - If yes try to tell me how to get things right with it.

Server Admin provides a simple front-end for many common tasks. If you need more flexibility, then you may find that you need to edit the configuration file yourself.
There is a config file which is included into httpd.conf but which Server Admin never touches, and you should put your custom configuration directives into that. You shouldn't modify the file which Server Admin is responsible for
I forget what the different files are called, I don't have access to an installation of Server at the moment; however there are useful comments in httpd.conf which explain it IIRC.

Server Admin GUI not displaying complete information

Recently, the Server Admin GUI stopped displaying complete information for one of our servers. It works fine for the other.
All servers are set up very much the same, other than one is an Xserve and one is a G5 tower. The one giving the grief is the G5 tower.
Server Admin is version 10.4.7 and was working fine until a few days ago.
When I click on the computer name (or IP) in the "Computers and Services" list, then look at any of the tabs > "Overview" "Logs" "System" "Graphs" or "Update" no information is retrieved. With the exception of Hard Drive capacity.
All other services (Web, VPN, Mail) report all info without problems.
Weird, hey? Any thoughts appreciated.
Message was edited by: mebs2

Well it pretty easy. I've taken out the code that is unused so you can see what is going on.
import javax.swing.* ;
public class Shareddilog extends JDialog
public static void main(String[] args)
Shareddilog s=new Shareddilog();
s.show();
}This is the only code that is executed in your program. It created a JDialog and then shows it. What you want to do, I imagine, is to put all the GUI stuff in your constructor and make sure you call pack() on it before you are done.

Server Admin refuses to connect, servermgrd runs but no ports are open

Server Admin refuses to connect to server when run locally or remotely. Upon investigating, servermgrd seems to run but when I run network utilities and port scan the server, neither port 311 or 687 are open. All other services appear to be running fine. No firewall is running. Server Monitor also has the same problems but WorkGroup Manager seems to work fine.
About 3 weeks ago, I had the problem and after trying many things, I did a clean install but the problem has reappeared after a few days/weeks.
At some point, servermgrd was crashing with a message about NSURL.... (lost and forgot the exact message).
-Tried to remove all the files in /private/var/servermgrd/
This solved the crashes but it now runs without opening the ports. After starting, it doesn't run away and consume any CPU.
Could not locate in system.log, console.log and servermgr.log any error messages indicatind something is wrong with servermgrd.
The log does show that server names are coherent.
Apr 18 23:06:31 server-1 servermgrd: servermgr_dns: hostname and DNS entries for this server are synchronized
- Tried rebooting.
- Tried running servermgrd with various flags, including alternate port but nothing happen. In fact the alternate ports do noot seem to get open. Even passing faulty options, it runs without complaining !
- Tried to reinstall the admin tools
- Tried to remove keychain paswords entries
- Tried Disk Utilities repair permissions.
Searching the posts, found somebody talkingabout servermgr_ctl
I'm starting to suspect some hardware failure (RAM).
Any suggestion how to test the ram.
Running out of idea.
Desperate for solution.
Background
OS X Server 10.4.9
Server Admin version Version 10.4.7 (157.8)
Xserve Dual G4 with 2 GB ram. Mac OS X (10.4.9)

Ok, I ran memtest 4.2 and discovered the ram was failing, In replacing the dimm, they started working again so it may have been a mis-seated dimm module or some oxidation on the contact. My file system was already corrupt despite it being a fresh install. Then I checked and notice that the file com.apple.servermgrd.plist in Library preferences was gone. Either I stuppidly deleted it trying to fix the problem or it was hosed by the memory/file system corruption. Anyway, I copied it from another server and Both Server Admin and Server Monitor are now working.
SOLVED.
PS: in view of this event, once I'm satisfied the memory issues is solved, I'll do again a clean install. Who know what else was corrupted.

Leopard Server Admin bugs

Is it just me or:
Gateway Setup Assistant creates setting that I can't do manually.
Specifically:
1. Network Address/Range styles invalid in Firewall
under Server Admin - Firewall - Settings
under Address Groups,
there are groups 192.168.1-net 192.168.1.1:255.255.255.0
and VPN-net 192.168.1.1:255.255.255.0
BUT if you try to create a new group using this pattern of
network address, such as 172.16.0.1:255.255.255.0
it says this is an invalid network.
The style that is accepted is 172.16.0.1/24, but
I have to say, I'm not sure that is working as an address group.
2. DHCP-> DNS "search domain" not allowed empty
Again after Gateway Setup Assistant
under Server Admin - DHCP - Settings
under DNS
Gateway Setup sets the DNS server to 192.168.1.1
and leaves the "search domain" empty
If I try to create an other DHCP range, it doesn't
allow an empty "search domain"
Anyone make any sense of these?

Same for me with all of them. If you really don't want anything in the 'search domain' box for DHCP you can always enter something like 'fake.com', go to /etc/bootpd.plist and remove 'fake.com' from the file. Then restart DHCP from Server Admin and you'll be fine.
For the firewall I've just been using the 192.168.0.0/16 style of addressing, but it is likely just to be misreporting rather than unable to use other methods. That's my guess, anyway.
Andy.

Server Admin relay host field bug?

I noticed something curious when attempting to specify a relay host via Server Admin 10.4.3 (157.5) application.
If I specify xxx.com in "Relay outgoing mail through host" field, the value will appear as entered in MailServicesOther.plist. However, it will NOT appear in main.cf, there is only a line 'relay='.
When I manually edited main.cf to add 'relay=xxx.com' then relaying started working...however, if I use Server Admin after that to edit the value, it reverts back to an empty value again. Rather annoying, really.
Is this a known bug?

Honestly, I've had trouble with ServerAdmin and Postfix's main.cf from the beginning of 10.3.x I've given up on using SA for anything to do with the mail. I've tried everything from having someone send me a default main.cf and reseting everything in SA.
I can't get it back into sync, and since my backup MX server is running Postfix on FC3 I learned the CLI and got over the SA. I still use SA for looking at Account Quotas under the Maintenance tab, everything else is dorked anyway now.
Xserve G4 1ghz Mac OS X (10.4.3) OSXS 10.4.3

Server Admin's proxy configuration... whacked? (Doesn't seem to work)

I just upgraded to Apache2 so that I could, sensibly, use the Server Admin app to manage all my web sites. Previously, my various httpd conf files were too complicated and I had resorted to hand coding them.
The good news is Server Admin and Apache2 are much closer to functional.
One bit of bad news: I can't get the reverse proxies to work consistently. Once set up, I get the most peculiar mix of success and failure -- almost at random. For example, some URIs load; others don't; sometimes a page loads, but it's style sheet doesn't.
What I want is simply this:
*/confluence (proxy to) localhost:8081/confluence
Using hand-edited config files, I'd usually do something along these lines (and this works great, by the way, if I stick it into 0000any_80www.mydomain.com.conf:
ProxyRequests Off
ProxyPassReverse /confluence http://localhost:8081/confluence
ProxyPass /confluence http://localhost:8081/confluence
So, off to Server Admin to make this work. I tried checking "Enable Reverse Proxy" and specifying a Proxy Path of "/confluence" and a Worker URL of http://localhost:8081/confluence. This ended up created the following entry in my 0000_...conf file:
<IfModule modproxybalancer.c>
ProxyPass /confluence balancer://balancer-group/
ProxyPassReverse /confluence balancer://balancer-group/
<Proxy "balancer://balancer-group">
BalancerMember http://localhost:8081/confluence
</Proxy>
</IfModule>
I wasn't able to figure out what a Sticky Session Identifier, Route or Load Factor would be used for... so I left those blank. Perhaps that's why it's not working... sure would be nice if there was some help in Server Admin...
Hm. Anyhow, Ok, looks alright. I'm not totally sure about the balancer bits (like why they are there), but I don't see why it wouldn't work. But... IT DOES NOT. I get totally inconsistent results. Some pages load, some don't. Sometimes I get some page assets, while others don't come through. Bah. However, if I get rid of the above, and simply put this in:
ProxyRequests Off
ProxyPassReverse /confluence http://localhost:8081/confluence
ProxyPass /confluence http://localhost:8081/confluence
It works great. Only problem is, anytime I edit a server configuration, Server Admin goes and deletes those lines! I think I've found a way around it though. I put the above lines into a "0000.proxy" file (in /etc/apache2/sites/0000.proxy) and now I've added this line:
Include "/etc/apache2/sites/0000.proxy"
At the bottom of my 0000_...conf file. So far, Server Admin hasn't deleted that line... and it seems to be working.
BUT, I'd just LOVE it if someone could tell me how to make this work without hacking around in the command line! Very annoying -- and of course, my proxies are showing up in Server Admin, and I really wish that would work.

Hi there
For the benefit of anyone looking at this thread, what is meant here is that if you choose to open the help for RoboHelp, you have an abiliity to add a comment. That comment may be kept private or shared with others. If you elect to share it with others, it is generally added as a comment into the pages that provide the help. If approved, Adobe may amend the help topic to reflect the new information.
@Jared - Was that information missing in your file? I thought when you elected to use this file that it was automatically populated with all available settings. And unfortunately (IMNSHO) the settings don't immediately reflect the settings in the dialog. (I think they should, as a starting point. At least, that's the behavior *I* expected the first time I played with the feature. I was admittedly taken aback when it didn't work that way.)
Assuming the setting was missing, how did you manage to sort what setting should be added?
Cheers... Rick
Helpful and Handy Links
RoboHelp Wish Form/Bug Reporting Form
Begin learning RoboHelp HTML 7, 8 or 9 within the day!
Adobe Certified RoboHelp HTML Training
SorcerStone Blog
RoboHelp eBooks

Creating Open Directory Replica fails with Server Admin Error Value 1127

Hallo,
I have seen a lot of similar threads here and they were helpful up to a certain point, but in the end, they did not solve my problem.
Currently, it comes down to this. The Server Admin Error message ist really meaningless and I could not find a single for the error value on the whole wide web. As such, I switched to the command line versions of the tools involved to geht more meaningful results. It worked. Specifically, creating a replica of an openldap master means using slapconfig.
When executing
slapconfig -createreplica master.ourdomain.com diradmin
as root on the prospective replica machine, I get the following error message:
ssh command failed with status 127
That command is not allowed with the root account via public key authentication.
That makes perfect sense to me, but how is it meant to work then?
Executing slapconfig as admin tells me that this tool is to be executed as root. On the other hand, root login via ssh is not allowed in Mac OS X by default, which seems fine to me. I even changed /etc/sshd_config on the Open Directory Master machine to "PermitRootLogin yes". However, neither reloading ssh using launchctl nor restarting the whole server made this setting operational. Trying to login from command line as root still tells me:
root login is not permitted to this machine via public key authentication.
While this is the current state where I need help urgently, I changed some other things before. I tell about to exclude these issues as possible reason of failure. I got this message for quite a while:
Replica Setup failed : This machine does not have a valid computer name
I was sure, this machine meant the target machine, the open directory master, because the domain had changed there once before I had taken over responsibility as an admin in this environment. And in fact, changeip disguised an issue there. The command proposed by changeip to fix the situation did not seem appropriate because this machine is multihomed with a public and a private IP adress. Proper name resolution is available for both interfaces including reverse lookup. I dont like this setup, but it was the only way to get mail service running smoothly. Running changeip on the machine itself using these arguments
changeip /LDAPv3/127.0.0.1 internalIP internalIP old.ours.com current.ours.com
reported success in updating password server, open directory, both interfaces, hostconfig (which in fact did not change) and samba. It reported an issue with kadmin which is related to Kerberos (we dont use Kerberos yet).
Changing the hostname of the server using changeip did not solve the issue. I then found the hint to check with scutil. This showed that the Hostname was not set on the prospective replica machine. (A question aside: in how many place is the hostname stored? The traditional /etc/hostname has gone, but seems to be replaces with several other configuration files and databases. I cant see this as an advantage). Setting the hostname using scutil worked fine. However, it did not solve the problem either. At least, slapconfig now started to complain about not being able to log in as root instead of failing from the start.
I also checked all log files on bboth machines that might have to do with openldap, as there are /var/log/slapd.log, /var/log/system.log and /Library/Log/slapconfig.log. I also checked the log of th layer on top of openldap which is /Library/Log/DirectoryService.server.log. None of them revealed anything noticeable beside a lot of of entries that I have googled in the last few hours and which all dont seem to be associated with the problem in question.
I will take a break now, but I have to fix this until tomorrow and I hope to get the ultimate hint from you, dear reader.
Thanks and bye, Christian Völker

ssh command failed with status 127
That command is not allowed with the root account via public key authentication.
Initial OD replication takes place via 'ssh'. If you have 'sshd' configured on the OD Master to authenticate with public keys then the OD replica will not be able to communicate with the OD Master via 'ssh'. You must configure the OD Master to use 'ssh' with password authentication and root login enabled.
Demote the replica back to standalone. Stop any services that you may have running on the primary network interface. Then stop any services that you may have running on the secondary network interface. In the 'Network' System Prefpane remove the IP number from the secondary interface then deactivate the secondary network interface.
Assign the private IP address and hostname that you wish to use for the replica to the primary network interface. Assign the 'public' IP number to the secondary interface. Check the DNS to see that the IP address and hostname for the primary network interface resolve both forward and reverse for the hostname of the replica that you have chosen. If it does not, fix your DNS before proceeding.
In the 'Sharing' System Prefpane, change the name of the machine to the hostname (server.domain.tld) of the replica that you have chosen. Then use 'changeip -checkhostname' to see if the IP/hostname matches. Fix it if it doesn't.
Then configure the /etc/sshd_config file on the OD master like this:
\# Authentication:
PermitRootLogin yes
PasswordAuthentication yes
PubkeyAuthentication no
and the /etc/ssh_config file on the OD replica like this:
PasswordAuthentication yes
PubkeyAuthentication no
Then from the OD replica as the 'root' user issue:
slapconfig -createreplica <ODMasterIPorFQDN> <diradmin user>
Make sure that the 'diradmin' user's password contains only alpha-numeric characters -no 'option-characters' or symbols, change it first if it does. Once the process completes, reactivate the secondary interface for the 'public' IP and check the configuration of services that will be using that IP, then start your other services. Secure the 'ssh' service on both machines to disable password authentication and 'root' logins.

Lion server VPN + Server Admin Tools 10.7

Hi,
I followed this guide http://macminicolo.net/lionservervpn to try to set up VPN on my lion mac mini server.
I also used Server Admin Tools 10.7 as instructed in the guide.
After completing the steps in the guide, I cannot get VPN to work, plus I have extra problems as below:
my mini cannot connected to the Internet or local network shares. I found under "Network" setting there was extra VLan created by the system automatically showing as "System Test--Connection error". After I delete this extra connection and revert my Ethernet to its original settings I can connect to the Internet again.
Server Admin Tools 10.7 seem to retains all its settings from the guide on NAT, Firewall etc. doesn't matter if I had removed the current server and created a new server in the left pane. Is there anyway I can restore the Server Admin Tools to its programme defaults? I suspect these settings are affecting my networks and I cannot get rid of them completely.
Would VPN still work if I just set it up in the server app? I haven't been able to get it work this way. I also want to find out is your guide for using the VPN to connect to the Internet off the server as a way to bypass restrictions? Do I have to set it up this way as the guide if I just to want to set up a VPN for simple fireshareing?
What did this command in the guide do to my mini? I was hopping if I cannot get VPN to work, then I should at least reverse the effects of this command. How do I undo this command please? "sudo serveradmin settings vpn:Servers:com.apple.ppp.l2tp:DNS:OfferedServerAddresses:_array_index:0 = "192.168.2.1"

Thanks BrianFL. This helps hugely. Yes, I just to set up a simple filesharing VPN not the kind of VPN that bypass Internet censorship. I use ethernet connection directly from my router yes.
1. I just need to use the server app to set up a VPN and port forwarding. That is it?
2. The setting I have made according to the guide with Server Admin Tools seems never going away, even after I deleted the server that has all the settings inside Server Admin Tools. Upon creating a new server inside Server Admin Tools, the new server inherits all the settings from the one I just deleted. Any idea how I can restore to Server Admin Tools's defaults settings?
3. Even VNC (I use RealVNC) on the mini stopped working after I made changes according to the guide and deleted all the changes I can find. What is the address format for lion's build in VNC (192.168.0.100:5800?) like? I forgot how it is.
Thanks so much!

Server Admin | Server Updates | updated to 10.5.5 WITHOUT restart?

A curious thing. I wonder whether anyone else experienced the same, or similar…
When the update to Mac OS X Server 10.5.5 was released, very soon after its announcement, I used Server Admin | Server Updates to apply the update to my Mac OS X Server 10.5.4 (PowerPC Xserve).
I expected a restart to be required.
The update completed, but no restart was required!
Amazed, I made an Apple Remote Desktop connection to the server and found that it was reporting itself as 10.5.5. Definitely, without a restart.
I lacked confidence at that point, so I did restart the server, without being asked to.
I might also try to run the combo updater. Just to be doubly sure that the whole caboodle installed as it should have.
I wonder how it apparently got from 10.5.4 to 10.5.5 without a restart; and whether anyone else has experienced such oddities.

I don't know what you've experienced
1. Mac OS X Server 10.5.4 on G4 PowerPC XServe
2. Server Admin on my Macbook Pro identified that the remote Xserve should gain an update to 10.5.5
3. I followed Server Admin's invitation.
3. An ARD view of the remote server's display (Apple menu | About This Mac) showed:
* 10.5.5
— with no invitation to restart, no log in.
I simply connected via ARD, observed, thought, "What? 10.5.5? That's impossible. I haven't restarted".
it's factually impossible for a server to go from 10.x.y to 10.x.(y+1) without a restart.
Hence my bug report to Apple

Server Admin 10.6 bug: Realms are completely messed up

Similar Messages

Maybe you are looking for