Server Admin permissions

Hi, where do I change the permissions to allow certain users to edit server settings (e.g. NetBoot settings) in Server Admin?

A user needs to be in the Administrator group in order to run Server Admin and configure a server.
Note that this can have other consequences - since it makes the user an admin they can change any element of the server, not just the components exposed by Server Admin.

Similar Messages

  • Setting workgroup backup permissions for server admin user

    I apologize in advance for what is probably a trivial question. At school I have set up a Tiger server on a PPC desktop. Open directory is implemented and managed remotely on my personal desktop machine using Workgroup manager. The local server admin account is different from the remote workgroup manager account. I have been backing up using rsync from my machine by logging in with ssh and the Workgroup manager account. Now I want to use ChronoSync on the server machine to set up a simple incremental backup routine. The problem is that ChronoSync runs under the server admin account which does not have permissions to access the group accounts. What is the best way for me to give the server admin account "global" permissions so it can backup the files and directories that were set up using Workgroup manager?
    iMac Intel Mac OS X (10.4.9)
    iMac Intel   Mac OS X (10.4.9)  

    Hi,
    User Account Control treats members of the Administrators group as standard users.
    With UAC enabled, members of the local Administrators group run with the same access token as standard users. Only when a member of the local Administrators group gives approval can a process use the administrator’s full access token. This process is the
    basis of the principle of Admin Approval Mode.
    When an administrator logs on to Windows Vista or newer, the Local Security Authority (LSA) creates two access tokens. If LSA is notified that the user is a member of the Administrators group, LSA creates the second logon that has the administrator rights
    removed (filtered).
    To work around this issue, use the net use command together with a UNC name to access the network location.
    Programs may be unable to access some network locations after you turn on User Account Control in Windows Vista or newer operating systems
    http://support.microsoft.com/kb/937624
    Regards,
    Mandy
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Propagate permissions with Server Admin?

    Can someone help me change permissions using Server Admin under Mac OS X10.5.7?
    I am able to set permissions to a single file or folder, but when I go to propagate the permissions to sub folders and files server admin just hangs. The status bar pops down and spins until I force quit. The permissions never propagate.... This is driving me nuts! ( I could do it by file by file, folder by folder but I have thousands to change.)
    Am I doing something wrong? This seemed to work fine in past versions of the OS....
    Thanks,
    Robert
    Message was edited by: Robert LaRocca

    A better way to propagate permissions is to use chmod to set your ACL. See the following post for a basic example that resets ACLs and adds a new one granting read/write access for a group:
    http://discussions.apple.com/thread.jspa?messageID=9488313&#9488313
    As mentioned, you could simply change the POSIX permissions to 0777 (which grants read and write for the POSIX owner, POSIX group, and POSIX everyone fields). This solution will not apply the same permissions to newly-created files or folders and copied items, however.
    This means that you'll have to continue propagating permissions (chmod -R 0777 /example) each time a new file or folder is created or copied. Not fun.
    Using an ACL entry that has file_inherit and directory_inherit controls will ensure that the particular ACL entry is inherited to a newly-created or copied file or folder.
    See my other posts for a detailed explanation of how new, copied, or moved items get their permissions:
    http://discussions.apple.com/message.jspa?messageID=9209840#9209840
    and
    http://discussions.apple.com/message.jspa?messageID=9134807
    Hope this helps!
    --Gerrit

  • Problem in Server Admin: cpu and network graphs not updated or empty after lion server update

    Hi!
    Just for archive purpouses because i've already solved that!
    After upgrading from OSX Server 10.7 to 10.7.1 my CPU and Network graphs in Server Admin stop being updated.
    In 24h the graphs where blank (disk usage graph seem to keep working).
    First i read about "what is the application responsible for this"; it's called ServerPerfLog, and you can see if it's running that way:
         # ps ax | grep ServerPerf
    If you don't see anything else than your own "grep", that means that no application is running, no data is being collected.
         41324 s000  R+     0:00.00 grep ServerPerf
    A positive response for this (meaning that the service is running) should be something like that (2 lines: your grep and the service app itself):
         94   ??  Ss     0:04.71 /usr/libexec/ServerPerfLog
         41344 s000  R+     0:00.00 grep ServerPerf
    Later i read about "where is the config file for this service app", and you can find it here:
         /System/Library/LaunchDaemons/com.apple.ServerPerfLog.plist
    If you edit this config file, check that the "Key > Disabled" is set to "False"
         # vi /System/Library/LaunchDaemons/com.apple.ServerPerfLog.plist
            <key>Disabled</key>
            <false/>
    After that, i try to launch the service that updates this graphs again, by hand, performing the following command:
         # sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.ServerPerfLog.plist
    And the service got launch!!! yeeeepa!! i see a first update in graph data.
    Also the "ps" query reply that the service was running!!
    The bad things came a day after, when i saw that the graphs stop again....
    I check if the service was running executing again the "ps" command, and that show me that the service was stopped again; no ServerPerfLog process was running.
    But r e l a x, because the process hang because of a permissions problem.
    You should know, I run "Repair permissions" within "Disk Utilities" over the running system disk, eeee... voila!
    I hope that helps someone to get his fancy graphs back!
    Regards,
    t

    You are God like!!! Wooo hooo! Thanks bud!

  • Server Admin refuses to connect, servermgrd runs but no ports are open

    Server Admin refuses to connect to server when run locally or remotely. Upon investigating, servermgrd seems to run but when I run network utilities and port scan the server, neither port 311 or 687 are open. All other services appear to be running fine. No firewall is running. Server Monitor also has the same problems but WorkGroup Manager seems to work fine.
    About 3 weeks ago, I had the problem and after trying many things, I did a clean install but the problem has reappeared after a few days/weeks.
    At some point, servermgrd was crashing with a message about NSURL.... (lost and forgot the exact message).
    -Tried to remove all the files in /private/var/servermgrd/
    This solved the crashes but it now runs without opening the ports. After starting, it doesn't run away and consume any CPU.
    Could not locate in system.log, console.log and servermgr.log any error messages indicatind something is wrong with servermgrd.
    The log does show that server names are coherent.
    Apr 18 23:06:31 server-1 servermgrd: servermgr_dns: hostname and DNS entries for this server are synchronized
    - Tried rebooting.
    - Tried running servermgrd with various flags, including alternate port but nothing happen. In fact the alternate ports do noot seem to get open. Even passing faulty options, it runs without complaining !
    - Tried to reinstall the admin tools
    - Tried to remove keychain paswords entries
    - Tried Disk Utilities repair permissions.
    Searching the posts, found somebody talkingabout servermgr_ctl
    I'm starting to suspect some hardware failure (RAM).
    Any suggestion how to test the ram.
    Running out of idea.
    Desperate for solution.
    Background
    OS X Server 10.4.9
    Server Admin version Version 10.4.7 (157.8)
    Xserve Dual G4 with 2 GB ram.   Mac OS X (10.4.9)  

    Ok, I ran memtest 4.2 and discovered the ram was failing, In replacing the dimm, they started working again so it may have been a mis-seated dimm module or some oxidation on the contact. My file system was already corrupt despite it being a fresh install. Then I checked and notice that the file com.apple.servermgrd.plist in Library preferences was gone. Either I stuppidly deleted it trying to fix the problem or it was hosed by the memory/file system corruption. Anyway, I copied it from another server and Both Server Admin and Server Monitor are now working.
    SOLVED.
    PS: in view of this event, once I'm satisfied the memory issues is solved, I'll do again a clean install. Who know what else was corrupted.

  • Server admin not showing network traffic graph

    This topic was posted a while ago with no solution, and it has been [archived|http://discussions.apple.com/thread.jspa?messageID=6953359]. I have just experienced the same problem with Leopard Server Admin (SA). It seems to be a problem on the server, not in the client admin, since it occurs both when I use SA on the server itself and a client, and deleting client prefs. has not helped. I'm presuming that there is a corrupted database or prefs. file for this graph.
    All the other SA graphs show just fine. Fixing permissions has not helped, either.
    Anyone have any idea where to look on the server? Thanks.
    Message was edited by: Trevor Jacques

    I'm pretty sure I have since I have a few Mac Mini's on the network with their home directory residing on the server and my Windows users are sharing a few daily use files on the server including a MYOB data file, also our intranet web site is hosting on the same server, not to mention I have 3 print queues there and all the outgoing mails from both of our all-in-one scan to email machines are using the same server. All of these services and users are using their computer as if nothing is wrong, so I have to assume that there is network traffic unless server admin interprets the term "network traffic" differently.

  • "Settings" has disappeared in Server Admin

    After upgrading both of my Xserve G4's from OS X Server 10.4.8 to 10.4.9, I noticed when Server Admin is connected to one of the servers, the "Settings" button when you select the server does not appear. I also don't get information back about the system version, computer name, system start time, etc. The rest of Server Admin appears to work correctly, though. I was wondering if anyone else had this problem.
    Regardless of which system I run Server Admin from, when I select the "working" server in Server Admin I see tabs for Overview / Logs / System / Graphs / Update / Settings, for the "unhealthy" server I only see tabs for Overview / Logs / System / Graphs / Update. In addition, no valid information is shown in the Overview tab (as shown below).
    Luckily, I do have a workaround. Although the Server Admin GUI doesn't appear to be functioning correctly, the serveradmin CLI tool works fine. I'm wondering what the 10.4.9 update might have clobbered. Disk Verify / Repair Permissions haven't turned up any problems.
    HEALTHY Overview:
    System Version: Mac OS X 10.4.9 (Build 8P135)
    Server Version: Mac OS X Server 10.4.9 (Build 8P135)
    Computer Name: xxxx
    Local Hostname: xxxx.local
    Default AppleTalk Zone: Unspecified
    License Type: Unlimited-client license
    System Start Time: Sunday April 1, 2007 9:51:12 AM America/Phoenix
    UNHEALTHY Overview:
    System Version: Not available
    Server Version: Not available
    Computer Name: Not available
    Local Hostname: Not available
    Default AppleTalk Zone: Not available
    License Type: Not available
    System Start Time: Date and time not available

    Yes, in many cases you can still use commands via the Terminal, see Apple's Command-Line Administration guide
    http://www.apple.com/server/documentation/
    I would look through your logs. If you launch /Applications/Utilities/Console , it should open the last log written to.
    See about enabling the debugging menu in Server Admin. Quit out of SA, and in the Terminal enter:
    defaults write com.apple.serveradmin UseDebugMenu YES

  • Server Admin iCal Overview shows info as "Not Available"

    Next to each topic (Accounts, Calendars, Groups, Locations, Resources, Events & Todo Lists) Server Admin displays "Not Available". The iCal server is running and users are interacting with it OK. The disk usage is 0.0B, there are about 10,000 events.
    Since this happened there have been problems accessing calendars via the web (hardly used so not sure what others are seeing).
    I've checked & fixed the POSIX permissions for the /Library/CalendarServer hierarchy. I tried deleting the .db.sqlite files & letting iCal repopulate them.
    All the settings are intact and haven't changed. The logs show no culprit entries, just the usual. /etc/caldavd/caldavd.plist does not appear to be corrupted.
    Ideas?

    A hard drive started having RAID errors around 5/1, so the server is being rebuilt from scratch.
    I'm still curious if anyone knows the how & why of this issue.

  • Server Admin won't let me view Share Points

    I had a server crash while editing a user in Workgroup Manager that forced a restart. Since then Workgroup Manager works fine, but I cannot see the Share Points in Server Admin. I select File Sharing then Share Points, and just get a spinning indicator on the lower right. I can browse the volumes, but clicking on a user's folder does nothing. The Share/Unshare button never becomes active and I can't view the permissions. Other functions of the Server Admin seem to be OK, except the Web settings take forever to show up. This happens whether I run Server Admin locally or remotely.
    I get this from the Console when I launch Server Admin but it makes no sense:
    12/28/07 5:48:48 PM /Applications/Server/Server Admin.app/Contents/MacOS/Server Admin[632] ATS AutoActivation: MDQueryExecute failed! (params: queryString = {comapple_ats_namepostscript == "ArialMS" && kMDItemContentTypeTree != com.adobe.postscript-lwfn-font}, valueListAttrs = {<CFArray 0x10092ba0 [0x12321a0]>{type = immutable, count = 1, values = (
    0 : <CFString 0x2ea09d8 [0x12321a0]>{contents = "kMDItemContentType"}
    )}}, sortingAttrs = {<CFArray 0x10092bc0 [0x12321a0]>{type = immutable, count = 1, values = (
    0 : <CFString 0x2ea0908 [0x12321a0]>{contents = "kMDItemContentModificationDate"}
    )}}, scopeList = {<CFArray 0x10092be0 [0x12321a0]>{type = immutable, count = 1, values = (
    0 : <CFString 0x2ea1b28 [0x12321a0]>{contents = "kMDQueryScopeComputer"}
    because I get the something similar when I launch FileMaker from the same machine:
    12/28/07 5:48:42 PM /Applications/FileMaker Pro 9/FileMaker Pro.app/Contents/MacOS/FileMaker Pro[628] ATS AutoActivation: MDQueryExecute failed! (params: queryString = {comapple_ats_namefond=="B773B2D3A9FAC5E9"}, valueListAttrs = {<CFArray 0xb2ba910 [0x51de1a0]>{type = immutable, count = 1, values = (
    0 : <CFString 0x67e09d8 [0x51de1a0]>{contents = "kMDItemContentType"}
    )}}, sortingAttrs = {<CFArray 0xb2babb0 [0x51de1a0]>{type = immutable, count = 1, values = (
    0 : <CFString 0x67e0908 [0x51de1a0]>{contents = "kMDItemContentModificationDate"}
    )}}, scopeList = {<CFArray 0xb2bacb0 [0x51de1a0]>{type = immutable, count = 1, values = (
    0 : <CFString 0x67e1b28 [0x51de1a0]>{contents = "kMDQueryScopeComputer"}
    Any ideas where to look?
    10.5.1 on dual-core intel XServe 4GB RAM

    Use the inspector in work group manager to delete /config/sharepoints.
    You will need to be in the local directory in work group manager and you will have to reshare all shares but no data will be removed. You should probably reboot after deleting the directory. This would replace the old way of doing it in the past with netinfo manager since we don't have netinfo anymore.

  • Folders Not Showing in Server Admin AFP Share Point?

    Hello all,
    My problem is I can make a folder in Server Admin under AFP Share Point, But the Folder wont actually be made on the HD.
    Under Server Admin AFP Share Point it will tell me that it doesn't exist?
    So I thought I'll go to that point on the HD and make the folder then set the permissions to it... nope I can make the folder I can see it in finder and in terminal, But not in Server Admin AFP Share Point.
    I have never seen this before any help is greatly welcomed.

    Hi Kristoffer,
    I have seen an attribute for folder object which could control SharePoint folder hide or show in webdav explorer view, you can use PowerShell to output the problematic folder property, see if it the case, then use the PowerShell code to set it's property
    with blank value to make it show in explorer view,
    Use the PowerShell to get the folder object and then check the property value with this code line $folder.Properties["vti_winfileattribs"]
    #folder can be site, library level and folder level
    $folder = (Get-SPWeb http://sp).Folders["shared documents"].SubFolders["folder1"]
    #hide folder
    $folder.Properties["vti_winfileattribs"]="00000016"
    #show folder
    ####$folder.Properties["vti_winfileattribs"]=""
    $folder.Update()
    https://social.technet.microsoft.com/Forums/lync/en-US/9ceafb38-24dc-466c-b497-2cee062b81cf/explorer-view-hidden-folder-attribute?forum=sharepointgeneral
    Thanks
    Daniel Yang
    TechNet Community Support

  • Server Admin causes servermgrd crash: "got an empty response"

    Starting a few days ago, when one OSXS system is accessed with Server Admin, the servermgrd process immediately crashes. Could there be some file that somehow got corrupted? I've run 'repair disk' and 'repair permissions', and even did a full Disk Warrior run on the boot drive to no avail. No other changes or upgrades were done to the system to prompt this.
    Server Admin[357] Server got an empty response (servermgr_info may have crashed)
    crashdump[444]: servermgrd crashed
    According to the servermgrd man page, this might mean that /etc/servermgrd/getsslpassphrase is returning a null string (which it seems to do when run manually). But it could also be that getserial_numberinfo() is returning null.
    Is there some system file I need to regenerate?
    Thx
    The crash dump has this:
    Command: servermgrd
    Path: /usr/sbin/servermgrd
    Parent: launchd [1]
    Version: ??? (???)
    PID: 424
    Thread: 4
    Exception: EXCBADACCESS (0x0001)
    Codes: KERNPROTECTIONFAILURE (0x0002) at 0x00000000
    Thread 4 Crashed:
    0 ....ServerAdmin.servermgr_info 0x0027c39c ServerSerialNumStrValidateInternal + 68
    1 ....ServerAdmin.servermgr_info 0x0027a038 getserial_numberinfo + 232
    2 ....ServerAdmin.servermgr_info 0x002695a8 getserverinfo + 132
    3 ....ServerAdmin.servermgr_info 0x00268a60 doProcessInput + 248
    4 servermgrd 0x000064e8 0x1000 + 21736
    5 servermgrd 0x00008c3c 0x1000 + 31804
    6 servermgrd 0x00008270 0x1000 + 29296
    7 servermgrd 0x00007af8 0x1000 + 27384
    8 com.apple.Foundation 0x9295d194 forkThreadForFunction + 108
    9 libSystem.B.dylib 0x9002b508 pthreadbody + 96
    Dual 2GHz PPC / 400GB / 8GB   Mac OS X (10.4.8)  
    Dual 2GHz PPC / 400GB / 8GB   Mac OS X (10.4.8)  
    Dual 2GHz PPC / 400GB / 8GB   Mac OS X (10.4.8)  

    Well, servermgrd is still crashing, 100% of the time, but the crash has "morphed" a bit:
    Thread 5 Crashed:
    0 libcups.2.dylib 0x91b224e4 ippDelete + 36
    1 ...ple.S5Admin.servermgr_print 0x00437994 doidle_zerotasks + 85716
    2 ...ple.S5Admin.servermgr_print 0x004377f0 doidle_zerotasks + 85296
    3 ...ple.S5Admin.servermgr_print 0x00433c14 doidle_zerotasks + 69972
    4 ...ple.S5Admin.servermgr_print 0x0043527c doidle_zerotasks + 75708
    5 ...ple.S5Admin.servermgr_print 0x0042b6dc doidle_zerotasks + 35868
    6 ...ple.S5Admin.servermgr_print 0x0042b664 doidle_zerotasks + 35748
    7 ...ple.S5Admin.servermgr_print 0x00424238 doidle_zerotasks + 6008
    8 ...ple.S5Admin.servermgr_print 0x004290f4 doidle_zerotasks + 26164
    9 ...ple.S5Admin.servermgr_print 0x00428b5c doidle_zerotasks + 24732
    10 ...ple.S5Admin.servermgr_print 0x00428cbc doidle_zerotasks + 25084
    11 ...ple.S5Admin.servermgr_print 0x00421194 getservicestate + 224
    12 ...ple.S5Admin.servermgr_print 0x004205a8 doProcessInput + 204
    13 servermgrd 0x000064e8 0x1000 + 21736
    14 servermgrd 0x0000619c 0x1000 + 20892
    15 com.apple.Foundation 0x92940194 forkThreadForFunction + 108
    16 libSystem.B.dylib 0x9002bc28 pthreadbody + 96
    If anyone has any ideas about what I can do, if there's a file that I might check for corruption, something I might try reinstalling, etc., that would be great.

  • Server Admin & WGM not working after 10.6 upgrade

    Hi,
    I've just done a fresh install of SL Server and migrated my setup from a previous server (10.4.11). Now when i try launch Server Admin or WGM they just hang and have to be force quit. I've tried to reboot, repair permissions and delete the preferences files but still no joy. Has anybody got any ideas?
    Thank you in advance
    Dave

    Network guys had changed DNS server address, updated details in system preferences and everything works now.

  • HT1822 Mac OS X server admin tools: non-server editions of Mac OS 10.6?

    On my iMac, I am running the installation of OS X that it shipped with + updates up to 10.6.8.  I know there are server admin tools available on the Apple support website, that do stuff like manage groups.  I am looking for a GUI to look at ALL the users, groups, permissions, etc. (including hidden ones like _www for apache) on my system, without having to dig through config files in /etc and/or use the dscl command line utility.
    The referenced article says I can find the 10.6 tools on Apple support downloads:
    Mac OS X Server v10.6
    To administer Mac OS X Server v10.6, use the Server Admin Tools 10.6 on Mac OS X v10.6. You should match the version numbers of the server, tools, and admin workstation as closely as possible; for example, use Server Admin Tools version 10.6.8 on Mac OS X v10.6.8 to administer Mac OS X Server v10.6.8.
    My questions are:
    1.  Where are the 10.6 tools on the apple support website?  A search turns up versions for everything BUT 10.6.
    2.  Will the 10.6 tools work on 10.6.8 that is not a server edition of Mac OS?

    The Server Tools you can download from Apple will install and run on OS X client, but they will only connect to and monitor OS X Server boxes. 
    So that won't get you where you want.
    One command that will help you here - and which is present on OS X Server and OS X client - is dscl.
    dscl . list /users
    For details:
    info dscl
    or
    man dscl
    Or a web search, etc...

  • Every time I open Server Admin one server complains: (kNetworkError)

    Every time I open Server Admin I receive the following error:
    +The service has encountered an error. Try to refresh the view (foobar.myserver.edu/Server). Report the problem to the administrator if it persists. (kNetworkError)+
    * The error happens only with one of the 6 servers I have on my list.
    * I tried running Server Admin from multiple other machines and the issue is always reproduced.
    * The problem surfaced sometime last year, and updates 10.5.5 to 10.5.7 have not solved the issue.
    * The network is properly setup with Static IP and DNS.
    * Running changeip returns: "The names match. There is nothing to change".
    * Server runs OD, AFP, MAIL XGRID, WEB, and PCP, all systems are fully operational.
    Any ideas where to start?

    The same error appeared on my test server at home tonight. I upgraded to 10.5.7 this afternoon. server logs showing:
    May 27 22:57:52 advanced com.apple.launchd[1] (com.apple.pcastserverd): Throttling respawn: Will start in 1 seconds
    May 27 22:57:59 advanced pcastserverd[6013]: Checking permissions on /podcast
    May 27 22:57:59 advanced pcastserverd[6013]: /podcast is not read/execute by other
    May 27 22:57:59 advanced pcastserverd[6013]: Cannot launch pcastserverd -- invalid configuration
    May 27 22:58:00 advanced com.apple.launchd[1] (com.apple.pcastserverd[6013]): Exited with exit code: 1
    May 27 22:58:00 advanced com.apple.launchd[1] (com.apple.pcastserverd): Throttling respawn: Will start in 4 seconds
    May 27 22:58:20 advanced pcastserverd[6014]: Checking permissions on /podcast
    May 27 22:58:20 advanced pcastserverd[6014]: /podcast is not read/execute by other
    May 27 22:58:20 advanced pcastserverd[6014]: Cannot launch pcastserverd -- invalid configuration
    May 27 22:58:21 advanced com.apple.launchd[1] (com.apple.pcastserverd[6014]): Exited with exit code: 1
    I had had Podcast Producer and Xgrid set up on this server when testing but they have since been turned off.
    I went into Settings / Services and unchecked them. The error message has now gone and the other services come on line quickly. The log list is still occurring though. This may stop after a restart, which I have timed for the middle of the night.
    Hope this helps.

  • Send an alert when Server Admin Tool has logged in?

    Is there a way to determine if someone remotely logged in via "Server Admin.app"? The application has no own log file.
    I've managed to setup a launchd task that sends an email whenever someone establishes a vpn connection by watching the pppd log file. Can this also be done for that servermgrd process?

    The basic idea was to watch the log file of the vpnd daemon and fire a shell script that sends a mail to me, if the most recent line of the log file contains the word "progress". (That word is a unique indicator for a successful connection. Otherwise you will get mails for each status change, too.)
    To watch a file change i used Lingon: I logged in via Remote Desktop, launched "Lingon" (freeware - http://sourceforge.net/projects/lingon/) and created a user daemon named "com.myserver.vpnd_watch". Then i've chosen my shell script as the application to be called. In my case it was "/usr/sbin/vpnd_watch.sh". And finally i set the only option "Run it if this file is modified:" as "/var/log/ppp/vpnd.log".
    The shell script is quiet simple. To prevent multiple alerts for the same event, it reads a file that contains the date & time of the last login/alert, reads out the date & time of the most recent log file entry containing the word "progress" and compares both. In case of being different, it sends a mail with the log file entries of the last three connections via email and creates a new date file.
    #!/bin/bash
    *date_old=$(cat /Users/myaccount/watch_date.txt)*
    *date_new=$(cat /var/log/ppp/vpnd.log | grep progress | tail -n1 | grep -o -E "[a-zA-Z]{3} [0-9]{2} [0-9]{2}:[0-9]{2}:[0-9]{2}")*
    *if [ "$date_old" != "$date_new" ]; then*
    *cat /var/log/ppp/vpnd.log | grep progress | tail -n3 | mail -s "VPN Connection" [email protected]*
    *echo $date_new > /Users/myaccount/watch_date.txt*
    fi
    *exit 0*
    (You might have to set permissions accordingly.) The log file entry which matters is something like:
    Fri Nov 19 22:23:43 2010 : L2TP incoming call in progress from 'xxx.xxx.xx.xx'...
    This is also the message text of the email, so you can see what the connecting client's IP address is. My mobile phone provider offers a mail to SMS service. So i get an SMS on my iPhone, too. Useful when i don't have an internet connection or no time to check mails.
    Binding all administrative traffic to that vpn connection (ssh, ARD and Server Admin Tools) makes sure that you're always informed if some tries to take control and by the IP address if it's your client.

Maybe you are looking for