Sharing Fonts to Network Users

Server : Xserve running 10.6.8
Clients : Mixed bag, 10.6.8 / 10.7.4
I need my network only users to be able to access some fonts. Here is my set up so far
I enabled guest access for AFP
I have created a folder on the server called "Library"
I created a share point from the "Library" folder
I set the permissions to rw for everyone
I set the sharepoint to appear in Network/Library
I enabled guest access for the sharepoint itself
I created a folder inside "Library" called "Fonts"
I placed all my fonts inside that folder
The problem
When I log on as a network user, I see Network/Library/Fonts/<fonts are in there>
When I open Fontbook while logged in as that network user, under the Network location, no fonts are listed.
What else could I be doing wrong here? Any suggestions would be greatly appreciated.

See Font Management in OS X

Similar Messages

  • How can I allow network users to use File Sharing on 10.8 Server?

    I am in the process of setting up a new OS X 10.8 Server. I have exported/imported the network users from my previous OS X 10.6.8 Server using Workspace Manager. I have re-entered the passwords of the users. I have existing clients running (stil logged in).
    I have set up the File Sharing service in Server.app. I have several mount points. I have made the Users mount point available for home directories over AFP.
    Now, the system administrator can connect to the server and get access to the file shares. So the basic file sharing system works.
    Also: the users on a client can get there password verified (e.g. when unlocking screen protection) by the server. It is just AFP they can't get access to, while the system administrator account (OD /Local on the server) can be used. So, the password in the server is OK too. It seems to be a matter of privileges.
    But no network user (OD user in directory /LDAPv3/127.0.0.1 on the server) can get access. Where can I give network users privileges for File Sharing on the server?
    I did try to add either the "Open Directory Users" group or a specific user that was imported into com.apple.access_afp. If I do that, there is partial success. I can connect to the server from the client with a user account other than system administrator from the server (but connecting is slow). But Mobile Home Sync does not work:
    1:: [13/04/05 16:11:10.379] Scheduling next sync of "HomeSync_Mirror" at 2013-04-05 14:11:20 +0000
    1:: [13/04/05 16:11:20.782] ==========================================================
    0:: [13/04/05 16:11:20.782] Starting automatic sync of "HomeSync_Mirror".
    1:: [13/04/05 16:11:20.786] Peer "network" reports changes since last sync.
    1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:alias:]: isRemote = NO
    1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: peer = <SPeer_FS:0x7fd5a5009520> = local, optionalStoreID = (null), peer.storeIDString = *
    1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: rootPath        = /Users/gerben
    1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: storePath       = /Users/gerben/.FileSync/store.filesyncstatetree
    1:: [13/04/05 16:11:20.787] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: rootAlias       = {path='/Users/gerben', targetName='gerben', volumeName='Macintosh HD', type=DIR, volumeCreateDate=2010-08-10-12:58:16, targetCreateDate=2011-08-28-18:39:13, parentDirID=37638, nodeID=3003598, filesystemID=0000 ('0000'), signature=0x482b ('H+'), isBootVolume=YES, isAutomounted=NO, isEjectable=NO, hasPersistentFileIDs=YES, mounted=YES, url='file://localhost/'}
    0:: [13/04/05 16:11:20.789] -[SPeer_FS _mountServerCallbackShares:status:]: received error 64
    0:: [13/04/05 16:11:20.790] EXCEPTION: _mountServerCallbackShares:status: (Host is down) <-[SPeer_FS mountPeerVolumeWithURLString:] (Peer-FS.m:446): "'(-1)' error 64">
    0:: [13/04/05 16:11:20.790] USERINFO: {
    0:: [13/04/05 16:11:20.790]     NSLocalizedDescription = "Host is down";
    0:: [13/04/05 16:11:20.790] }
    0:: [13/04/05 16:11:20.790] BACKTRACE: {
    0:: [13/04/05 16:11:20.790] ? | 0x105cb79b7  
    0:: [13/04/05 16:11:20.790] ? | 0x105cbf0e5  
    0:: [13/04/05 16:11:20.790] ? | 0x105c2c866  
    0:: [13/04/05 16:11:20.790] ? | 0x105c2babd  
    0:: [13/04/05 16:11:20.790] ? | 0x105c2acb4  
    0:: [13/04/05 16:11:20.790] ? | 0x7fff858bb72a
    0:: [13/04/05 16:11:20.790] ? | 0x7fff858bb6a2
    0:: [13/04/05 16:11:20.790] ? | 0x7fff874cf8bf
    0:: [13/04/05 16:11:20.790] ? | 0x7fff874d2b75
    0:: [13/04/05 16:11:20.790] }
    1:: [13/04/05 16:11:20.790] Peer "network" is unable to sync. (-[SPeer_FS mountPeerVolumeWithURLString:] (Peer-FS.m:446): "'(-1)' error 64")
    0:: [13/04/05 16:11:20.790] Peer "network" is unable to sync. Not enough peers will be available to continue syncing.
    0:: [13/04/05 16:11:20.790] Aborting sync of "HomeSync_Mirror".
    1:: [13/04/05 16:11:20.790] -[SPeer abortSync] "local"
    1:: [13/04/05 16:11:20.797] -[SStore_FS setupWithAlias:andRef:] (Store-FS.m:447): unlink('/Users/gerben/.FileSync/.fstemp.QW1Gh-bhvgEhVwmG3.noindex')
    0:: [13/04/05 16:11:20.798] EXCEPTION: !IF <-[SPeer(protected) doPrepareForSyncWithResolvedConflicts:] (Peer.m:1149): "'(([self checkAbort]))'">
    0:: [13/04/05 16:11:20.798] BACKTRACE: {
    0:: [13/04/05 16:11:20.798] ? | 0x105c2bb66  
    0:: [13/04/05 16:11:20.798] ? | 0x105c2acb4  
    0:: [13/04/05 16:11:20.798] ? | 0x7fff858bb72a
    0:: [13/04/05 16:11:20.798] ? | 0x7fff858bb6a2
    0:: [13/04/05 16:11:20.798] ? | 0x7fff874cf8bf
    0:: [13/04/05 16:11:20.798] ? | 0x7fff874d2b75
    0:: [13/04/05 16:11:20.798] }
    1:: [13/04/05 16:11:20.798] -[SStore_FS deleteStateTreeTurdFile] (Store-FS.m:476): unlink('/Users/gerben/.FileSync/store.filesyncstatetree.statetree_dirty')
    1:: [13/04/05 16:11:20.798] Peer "local" is unable to sync. (-[SPeer(protected) doPrepareForSyncWithResolvedConflicts:] (Peer.m:1149): "'(([self checkAbort]))'")
    0:: [13/04/05 16:11:20.798] Peer "local" is unable to sync. Not enough peers will be available to continue syncing.
    1:: [13/04/05 16:11:20.798] EXCEPTION: SFAbortedException <-[SSyncEngine _waitForPeers:] (SyncEngine.m:1922): "'(_abort)'">
    1:: [13/04/05 16:11:20.798] -[SSyncEngine threadMain_SyncEngine_sync:]: sync failed with exception "-[SSyncEngine _waitForPeers:] (SyncEngine.m:1922): "'(_abort)'"".
    0:: [13/04/05 16:11:21.066] Sync of "HomeSync_Mirror" encountered errors. (_mountServerCallbackShares:status: (Host is down))
    0:: [13/04/05 16:11:21.067] Last successful sync completed at 2013-04-04 20:17:15 +0000.
    0:: [13/04/05 16:11:21.067] Finished sync of "HomeSync_Mirror".
    1:: [13/04/05 16:11:21.067] Scheduling next sync of "HomeSync_Mirror" at 2013-04-05 14:31:21 +0000
    1:: [13/04/05 16:11:21.284] 1-pass sync of "HomeSync_Mirror" took 0.02 seconds

    Hi Gerben,
    Try creating a brand new user, that's not imported and see if that works. Every user/group has a little gear in the Server.app/Users or Groups which allows specific access to specific services, perhaps filesharing is off in that section?
    Is your DNS setup properly? Can you verify that clients can see the FQDN of your server?
    After setting up the Users folder for mobilehomes, did you check whether the group and the separate users have access to filesharing? I am able to select the correct homefolder /Users and restrict the homefolder size.
    Goodluck!
    Jeffrey

  • Network User appearing twice in connection tab under file sharing

    I have one of my network users that appears twice under the connected Users tab in the File Sharing service (Lion Server).
    It only appears to be happening with one of the users.  When they log in they get shown twice with the same IP address although they can have different idle time.
    I can not seem to work out what is going on.
    Any thoughts/suggestions would be welcome.

    After a little bit of mucking around I have discovered the duplicate user appears when I mount a network volume (which is also a share) during login using a "mount drive" script.  I can disconnect the duplicate user which unmounts the network volume.
    Same thing happens when I connect to the server machine through the SHARED listing in Finder as it is set up to use my network account to connect.  ONce again I can disconnect which simply umounts the shared access.

  • File Sharing (Read & Write) with a Network User - "Network User" Not Listed

    My boyfriend and I both have Macs, running 10.6.3. Both Macs are connected to the internet via Apple Wireless Express. I have a MacBook Pro, and my boyfriend has an iMac with a big fancy screen, so I like to use for my own work when I'm at home and he isn't - it's just easier and more comfortable to use than a laptop.
    I would like to find a way to use his computer to access a shared folder on my laptop with read & write access (so that I can modify the files on my laptop while using his computer). I have gotten to the point where I have a folder on my laptop with the files I want shared with his computer, and can access this folder from his computer. However, doing it this way (accessing my files on my laptop from his computer) only allows read-only access. I would like to be able to edit the files that are on my laptop using his computer, so I think I would need read and write access.
    It seems the easiest way to do this would be to add a user (the boyfriend) on my laptop and give him read/write access to this specific folder that is located on my laptop. I found instructions on how to do this, and it says that I need to add a "network user". These instructions seem to indicate that when I add a user, there should be options for accounts on my laptop, my personal address book, a new account on my laptop, and network users. I see the first 3 options...but no option to add a network user.
    Why is that? How would I make it so that from my laptop, I can add a network user...specifically my boyfriend's computer, who also uses the same internet network that I use?
    Thank you so much for any help!

    Also found this behavior:
    While logged into the Mac Pro as MPUser1, I connect to the MacBook Pro file sharing as MBPUser1.
    Then I "disconnect".
    Then I log out of the Mac Pro MPUser1, and login as MPUser2.
    The connection to MBP as MBPUser1 is still active!
    This means that MPUser2 can access whatever MBPUser1 can access WITHOUT knowing MBPUser1's login password !
    This seems WRONG! Anybody else seen this?

  • Customized User Profiles not loading for Network Users

    I manage Macs in public computer labs and classrooms at a university. My general set up is as follows:
    Clients are running 10.8.5, OD Masters are running 10.7.5. Open Directory Master to manage client preferences for Login window and screen saver. Clients bind to Active Directory for authentication purposes only. Networked users home directories are stored locally then deleted at log out. Using Deploy Studio to image and restore clients.
    My customized user profiles are stored in /User Templates/Non_Localized.lproj.(I also update English.lproj for any local users that may need to be created for various reasons).
    Recently I have come across a situation where, randomly, my customized user profile does not load at Login, and I am given the out-of-the-box default Apple profile. This is happening in 11 of my 14 labs. I have three labs that seem to not be affected by this.
    On some labs I manage the DHCP, some labs I do not, and rely on our Networking group to supply DHCP and DNS. Because of this setup I have six different DNS server that may be in the mix. Two are Unix boxes, the other four are the Active Directory Domain Control servers. I did create a spreadsheet of all the AD/OD settings for each lab to see if I could find some kind of pattern, but don't see a way to upload it.
    The one thing I do notice is that when I do a mass login using a shell script via Apple Remote Desktop, when the profile fails to build correctly, the user login is quick, much quicker than when the correct profile loads. Almost as if a packet is sent the the OD server, it's rejected, and bam, Apple's default profile loads.
    I have flushed the DNS cache of the local clients using killall --HUP mDNSResponder
    I've got one week to figure this out before classes start, so if you have a clue as to what's going on, I sure would be grateful.
    Here are logs from both the admin's account and the user's account when the default profile fails to build:
    ADMIN log:
    8/20/14 1:31:03.366 PM  CVMServer[109]  Check-in to the service com.apple.cvmsCompAgent_x86_64 failed. This is likely because you have either unloaded the job or the MachService has the ResetAtClose attribute specified in the launchd.plist. If present, this attribute should be removed.
    8/20/14 1:31:03.389 PM  loginwindow[44] Login Window - Returned from Security Agent
    8/20/14 1:31:03.491 PM  loginwindow[44] USER_PROCESS: 44 console
    8/20/14 1:31:04.084 PM  WindowServer[75]    **DMPROXY** (2) Found `/System/Library/CoreServices/DMProxy'.
    8/20/14 1:31:06.307 PM  locationd[563]  NOTICE,Location icon should now be in state 0
    8/20/14 1:31:06.478 PM  coreaudiod[560] Enabled automatic stack shots because audio IO is inactive
    8/20/14 1:31:06.621 PM  UserEventAgent[548] cannot find fw daemon port 1102
    8/20/14 1:31:08.530 PM  WindowServer[75]    Display 0x04280480: MappedDisplay Unit 0; ColorProfile { 2, "iMac"}; TransferFormula (1.000000, 1.000000, 1.000000)
    8/20/14 1:31:09.707 PM  NetworkBrowserAgent[591]    Starting NetworkBrowserAgent
    8/20/14 1:31:10.393 PM  apsd[593]   Certificate doesn't match host
    8/20/14 1:31:11.499 PM  com.apple.SecurityServer[15]    Session 100010 created
    8/20/14 1:31:13.561 PM  genatsdb[608]   ########## genatsdb Sandboxed. ##########
    8/20/14 1:31:13.562 PM  apsd[593]   Certificate doesn't match host
    8/20/14 1:31:13.740 PM  com.apple.time[548] Interval maximum value is 946100000 seconds (specified value: 9223372036854775807).
    8/20/14 1:31:14.555 PM  apsd[593]   Certificate doesn't match host
    8/20/14 1:31:45.040 PM  genatsdb[608]   *GENATSDB* FontObjects generated = 1113
    8/20/14 1:31:55.663 PM  com.apple.time[548] Interval maximum value is 946100000 seconds (specified value: 9223372036854775807).
    8/20/14 1:32:20.627 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.627 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.627 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.627 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.628 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.628 PM  WindowServer[75]    dict count after removing entry for window 0x2a is 0
    8/20/14 1:32:20.641 PM  com.apple.launchd[1]    (com.apple.quicklook.satellite.4D0B4319-944D-49A6-A515-02F31AE3C235[628]) Could not terminate job: 3: No such process
    8/20/14 1:32:20.641 PM  com.apple.launchd[1]    (com.apple.quicklook.satellite.4D0B4319-944D-49A6-A515-02F31AE3C235[628]) Using fallback option to terminate job...
    8/20/14 1:32:20.645 PM  coreservicesd[65]   SendFlattenedData, got error #268435459 (ipc/send) invalid destination port from ::mach_msg(), sending notification kLSNotifyApplicationDeath to notificationID=188
    8/20/14 1:32:20.647 PM  coreservicesd[65]   SendFlattenedData, got error #268435460 (ipc/send) timed out from ::mach_msg(), sending notification kLSNotifyApplicationDeath to notificationID=147
    8/20/14 1:32:20.647 PM  coreservicesd[65]   SendFlattenedData, got error #268435460 (ipc/send) timed out from ::mach_msg(), sending notification kLSNotifyApplicationDeath to notificationID=194
    8/20/14 1:32:20.648 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.648 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.648 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.648 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.648 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.716 PM  loginwindow[44] DEAD_PROCESS: 44 console
    8/20/14 1:32:20.891 PM  com.apple.time[548] Interval maximum value is 946100000 seconds (specified value: 9223372036854775807).
    8/20/14 1:32:20.929 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.929 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.929 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.929 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.929 PM  WindowServer[75]    CGXGetConnectionProperty: Invalid connection 32023
    8/20/14 1:32:20.930 PM  coreservicesd[65]   SendFlattenedData, got error #268435459 (ipc/send) invalid destination port from ::mach_msg(), sending notification kLSNotifyApplicationDeath to notificationID=158
    8/20/14 1:32:22.259 PM  WindowServer[75]    CGXRestartSessionWorkspace: session workspace exited for session 256 (on console)
    8/20/14 1:32:22.259 PM  WindowServer[75]    Session 256 released (1 references)
    8/20/14 1:32:22.259 PM  WindowServer[75]    Session 256 released (0 references)
    8/20/14 1:32:22.259 PM  WindowServer[75]    loginwindow connection closed; closing server.
    8/20/14 1:32:22.268 PM  apsd[593]   CGSLookupServerRootPort: Failed to look up the port for "com.apple.windowserver.active" (1102)
    8/20/14 1:32:22.285 PM  loginwindow[653]    Login Window Application Started
    8/20/14 1:32:22.299 PM  UserEventAgent[11]  Captive: [UserAgentDied:139] User Agent @port=45319 Died
    8/20/14 1:32:22.310 PM  ARDAgent[574]   CGSGetNextEventRecord (Inline) connection 0xb903, 16384 bytes
    8/20/14 1:32:22.310 PM  ARDAgent[574]   CGSShutdownServerConnections: Detaching application from window server
    8/20/14 1:32:22.310 PM  ARDAgent[574]   CGSDisplayServerShutdown: Detaching display subsystem from window server
    8/20/14 1:32:22.311 PM  blued[58]   -[CBManager init] init returning self:0x7ff6a3b04990
    8/20/14 1:32:22.329 PM  WindowServer[654]   Server is starting up
    8/20/14 1:32:22.330 PM  WindowServer[654]   Session 256 retained (2 references)
    8/20/14 1:32:22.330 PM  WindowServer[654]   Session 256 released (1 references)
    8/20/14 1:32:22.333 PM  WindowServer[654]   Session 256 retained (2 references)
    8/20/14 1:32:22.333 PM  WindowServer[654]   init_page_flip: page flip mode is on
    8/20/14 1:32:22.357 PM  WindowServer[654]   mux_initialize: Couldn't find any matches
    8/20/14 1:32:22.367 PM  WindowServer[654]   GLCompositor enabled for tile size [256 x 256]
    8/20/14 1:32:22.367 PM  WindowServer[654]   CGXGLInitMipMap: mip map mode is on
    8/20/14 1:32:22.424 PM  WindowServer[654]   WSMachineUsesNewStyleMirroring: true
    8/20/14 1:32:22.425 PM  WindowServer[654]   Display 0x04280480: GL mask 0x1; bounds (0, 0)[1920 x 1080], 30 modes available
    Main, Active, on-line, enabled, built-in, boot, Vendor 610, Model a012, S/N 0, Unit 0, Rotation 0
    UUID 0x000006100000a0120000000004280480
    8/20/14 1:32:22.425 PM  WindowServer[654]   Display 0x003f003e: GL mask 0x4; bounds (0, 0)[0 x 0], 1 modes available
    off-line, enabled, Vendor ffffffff, Model ffffffff, S/N ffffffff, Unit 2, Rotation 0
    UUID 0xffffffffffffffffffffffff003f003e
    8/20/14 1:32:22.425 PM  WindowServer[654]   Display 0x003f003d: GL mask 0x2; bounds (0, 0)[0 x 0], 1 modes available
    off-line, enabled, Vendor ffffffff, Model ffffffff, S/N ffffffff, Unit 1, Rotation 0
    UUID 0xffffffffffffffffffffffff003f003d
    8/20/14 1:32:22.429 PM  WindowServer[654]   Created shield window 0x4 for display 0x04280480
    8/20/14 1:32:22.429 PM  WindowServer[654]   Created shield window 0x5 for display 0x003f003e
    8/20/14 1:32:22.429 PM  WindowServer[654]   Created shield window 0x6 for display 0x003f003d
    8/20/14 1:32:22.431 PM  WindowServer[654]   Display 0x04280480: GL mask 0x1; bounds (0, 0)[1920 x 1080], 30 modes available
    Main, Active, on-line, enabled, built-in, boot, Vendor 610, Model a012, S/N 0, Unit 0, Rotation 0
    UUID 0x000006100000a0120000000004280480
    8/20/14 1:32:22.431 PM  WindowServer[654]   Display 0x003f003e: GL mask 0x4; bounds (2944, 0)[1 x 1], 1 modes available
    off-line, enabled, Vendor ffffffff, Model ffffffff, S/N ffffffff, Unit 2, Rotation 0
    UUID 0xffffffffffffffffffffffff003f003e
    8/20/14 1:32:22.431 PM  WindowServer[654]   Display 0x003f003d: GL mask 0x2; bounds (2945, 0)[1 x 1], 1 modes available
    off-line, enabled, Vendor ffffffff, Model ffffffff, S/N ffffffff, Unit 1, Rotation 0
    UUID 0xffffffffffffffffffffffff003f003d
    8/20/14 1:32:22.431 PM  WindowServer[654]   CGXPerformInitialDisplayConfiguration
    8/20/14 1:32:22.431 PM  WindowServer[654]     Display 0x04280480: MappedDisplay Unit 0; Vendor 0x610 Model 0xa012 S/N 0 Dimensions 18.70 x 10.51; online enabled built-in, Bounds (0,0)[1920 x 1080], Rotation 0, Resolution 1
    8/20/14 1:32:22.431 PM  WindowServer[654]     Display 0x003f003e: MappedDisplay Unit 2; Vendor 0xffffffff Model 0xffffffff S/N -1 Dimensions 0.00 x 0.00; offline enabled, Bounds (2944,0)[1 x 1], Rotation 0, Resolution 1
    8/20/14 1:32:22.431 PM  WindowServer[654]     Display 0x003f003d: MappedDisplay Unit 1; Vendor 0xffffffff Model 0xffffffff S/N -1 Dimensions 0.00 x 0.00; offline enabled, Bounds (2945,0)[1 x 1], Rotation 0, Resolution 1
    8/20/14 1:32:22.522 PM  WindowServer[654]   GLCompositor: GL renderer id 0x01022647, GL mask 0x00000007, accelerator 0x00003fab, unit 0, caps QEX|QGL|MIPMAP, vram 512 MB
    8/20/14 1:32:22.527 PM  WindowServer[654]   GLCompositor: GL renderer id 0x01022647, GL mask 0x00000007, texture units 8, texture max 16384, viewport max {16384, 16384}, extensions FPRG|NPOT|GLSL|FLOAT
    8/20/14 1:32:22.530 PM  loginwindow[653]    **DMPROXY** Found `/System/Library/CoreServices/DMProxy'.
    8/20/14 1:32:22.557 PM  WindowServer[654]   Created shield window 0x7 for display 0x04280480
    8/20/14 1:32:22.557 PM  WindowServer[654]   Display 0x04280480: MappedDisplay Unit 0; ColorProfile { 2, "iMac"}; TransferFormula (1.000000, 1.000000, 1.000000)
    8/20/14 1:32:22.609 PM  launchctl[657]  com.apple.findmymacmessenger: Already loaded
    8/20/14 1:32:22.613 PM  hidd[49]    CGSShutdownServerConnections: Detaching application from window server
    8/20/14 1:32:22.613 PM  hidd[49]    CGSDisplayServerShutdown: Detaching display subsystem from window server
    8/20/14 1:32:22.621 PM  com.apple.SecurityServer[15]    Session 100012 created
    8/20/14 1:32:22.622 PM  loginwindow[653]    Login Window Started Security Agent
    8/20/14 1:32:22.666 PM  com.apple.dock.extra[644]   Our bootstrap port disappeared out from under us: 0x1507 { urefs = 32774, rights = 0x1507: dead name }
    8/20/14 1:32:22.667 PM  com.apple.dock.extra[644]   Bug: 12F45: libxpc.dylib + 36100 [70BC645B-6952-3264-930C-C835010CCEF9]: 0x10000003
    8/20/14 1:32:22.681 PM  UserEventAgent[659] cannot find useragent 1102
    8/20/14 1:32:22.686 PM  com.apple.dock.extra[644]   Check-in to the service com.apple.imagent.desktop.auth failed. This is likely because you have either unloaded the job or the MachService has the ResetAtClose attribute specified in the launchd.plist. If present, this attribute should be removed.
    8/20/14 1:32:22.693 PM  SecurityAgent[665]  MacBuddy was run = 0
    8/20/14 1:32:22.695 PM  com.apple.dock.extra[644]   CGSGetNextEventRecord (Inline) connection 0xc917, 16384 bytes
    8/20/14 1:32:22.695 PM  com.apple.dock.extra[644]   CGSShutdownServerConnections: Detaching application from window server
    8/20/14 1:32:22.695 PM  com.apple.dock.extra[644]   CGSReleaseShmem : Cannot release shared memory
    8/20/14 1:32:22.695 PM  com.apple.dock.extra[644]   CGSDisplayServerShutdown: Detaching display subsystem from window server
    8/20/14 1:32:22.696 PM  com.apple.dock.extra[644]   Our bootstrap port disappeared out from under us: 0x1507 { urefs = 32774, rights = 0x1507: dead name }
    8/20/14 1:32:22.696 PM  com.apple.dock.extra[644]   Bug: 12F45: libxpc.dylib + 36100 [70BC645B-6952-3264-930C-C835010CCEF9]: 0x10000003
    8/20/14 1:32:22.696 PM  com.apple.dock.extra[644]   [Warning] Bad response from daemon for setup info
    8/20/14 1:32:22.704 PM  WindowServer[654]   MPAccessSurfaceForDisplayDevice: Set up page flip mode on display 0x04280480 device: 0x106d8d110  isBackBuffered: 1 numComp: 3 numDisp: 3
    8/20/14 1:32:24.429 PM  WindowServer[654]   **DMPROXY** (2) Found /System/Library/CoreServices/DMProxy'.
    8/20/14 1:32:24.459 PM  WindowServer[654]   Display 0x04280480: MappedDisplay Unit 0; ColorProfile { 2, "iMac"}; TransferFormula (1.000000, 1.000000, 1.000000)
    8/20/14 1:32:24.500 PM  WindowServer[654]   Display 0x04280480: MappedDisplay Unit 0; ColorProfile { 2, "iMac"}; TransferFormula (1.000000, 1.000000, 1.000000)
    8/20/14 1:32:24.695 PM  com.apple.dock.extra[644]   Our bootstrap port disappeared out from under us: 0x1507 { urefs = 32774, rights = 0x1507: dead name }
    8/20/14 1:32:24.696 PM  com.apple.dock.extra[644]   Bug: 12F45: libxpc.dylib + 36100 [70BC645B-6952-3264-930C-C835010CCEF9]: 0x10000003
    8/20/14 1:32:24.696 PM  com.apple.dock.extra[644]   [Warning] Bad response from daemon for setup info
    8/20/14 1:32:40.928 PM  com.apple.launchd[1]    (com.apple.dock.extra[644]) Exit timeout elapsed (20 seconds). Killing
    8/20/14 1:32:40.928 PM  coreservicesd[65]   SendFlattenedData, got error #268435459 (ipc/send) invalid destination port from ::mach_msg(), sending notification kLSNotifyApplicationDeath to notificationID=202
    8/20/14 1:33:35.215 PM  SecurityAgent[665]  User info context values set for jsuny
    8/20/14 1:33:35.297 PM  SecurityAgent[665]  Login Window login proceeding
    8/20/14 1:33:36.387 PM  loginwindow[653]    Login Window - Returned from Security Agent
    8/20/14 1:33:36.000 PM  kernel[0]   Sandbox: kcm(695) deny mach-lookup com.apple.networkd
    8/20/14 1:33:36.453 PM  loginwindow[653]    USER_PROCESS: 653 console
    8/20/14 1:33:37.052 PM  locationd[708]  NOTICE,Location icon should now be in state 0
    8/20/14 1:33:37.107 PM  UserEventAgent[700] cannot find fw daemon port 1102
    8/20/14 1:33:37.683 PM  xpcd[611]   MiniLauncher[711]: registration request failed: (0x12, 0xd) process failed sandbox check
    8/20/14 1:33:37.907 PM  WindowServer[654]   **DMPROXY** (2) Found `/System/Library/CoreServices/DMProxy'.
    8/20/14 1:33:38.011 PM  coreservicesd[65]   SendFlattenedData, got error #268435460 (ipc/send) timed out from ::mach_msg(), sending notification kLSNotifyApplicationReady to notificationID=237
    8/20/14 1:33:38.114 PM  WindowServer[654]   Display 0x04280480: MappedDisplay Unit 0; ColorProfile { 2, "iMac"}; TransferFormula (1.000000, 1.000000, 1.000000)
    8/20/14 1:33:38.395 PM  imagent[737]    [Warning] Setting up a new messages database.
    8/20/14 1:33:38.428 PM  NetworkBrowserAgent[747]    Starting NetworkBrowserAgent
    8/20/14 1:33:40.068 PM  com.apple.time[700] Interval maximum value is 946100000 seconds (specified value: 9223372036854775807).
    8/20/14 1:33:40.069 PM  com.apple.time[700] Interval maximum value is 946100000 seconds (specified value: 9223372036854775807).
    8/20/14 1:33:43.910 PM  netbiosd[89]    name servers down?
    8/20/14 1:33:56.635 PM  netbiosd[89]    notify name "self.mdns.disconnection" has been registered 20 times - this may be a leak
    8/20/14 1:33:56.639 PM  netbiosd[89]    notify name "self.mdns.disconnection" has been registered 40 times - this may be a leak
    8/20/14 1:34:49.927 PM  netbiosd[89]    name servers down?
    8/20/14 1:35:54.977 PM  netbiosd[89]    name servers down?
    USER LOG:
    8/20/14 1:31:03.956 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.gamed) Ignored this key: UserName
    8/20/14 1:31:03.956 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.gamed) Ignored this key: GroupName
    8/20/14 1:31:03.957 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.ReportCrash) Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self
    8/20/14 1:31:03.961 PM  loginwindow[44] Connection with distnoted server was invalidated
    8/20/14 1:31:04.013 PM  distnoted[549]  # distnote server agent  absolute time: 799.097924175   civil time: Wed Aug 20 13:31:04 2014   pid: 549 uid: 1467285364  root: no
    8/20/14 1:31:08.954 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.afpstat-qfa[588]) Job failed to exec(3). Setting up event to tell us when to try again: 2: No such file or directory
    8/20/14 1:31:08.955 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.afpstat-qfa[588]) Job failed to exec(3) for weird reason: 2
    8/20/14 1:31:08.958 PM  com.apple.launchd.peruser.1467285364[536]   (com.google.keystone.user.agent[590]) Job failed to exec(3). Setting up event to tell us when to try again: 2: No such file or directory
    8/20/14 1:31:08.958 PM  com.apple.launchd.peruser.1467285364[536]   (com.google.keystone.user.agent[590]) Job failed to exec(3) for weird reason: 2
    8/20/14 1:31:12.394 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.mrt.uiagent[578]) Exited with code: 255
    8/20/14 1:31:15.132 PM  SystemUIServer[557] Could not load menu extra NSBundle </System/Library/CoreServices/Menu Extras/User.menu> (loaded) for Class AppleUser
    8/20/14 1:32:20.642 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.quicklook[626]) Exited: Killed: 9
    8/20/14 1:32:20.647 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.mdworker.single.08000000-0000-0000-0000-000000000000[641]) Exited: Killed: 9
    8/20/14 1:32:20.647 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.mdworker.shared.04000000-0000-0000-0000-000000000000[635]) Exited: Killed: 9
    8/20/14 1:32:20.783 PM  Dock[556]   could not open iterator, -43, for directory <ECDirectory: 0x7fd8ac846970> {path=/Users/jsuny/Documents/} (directory changed)
    8/20/14 1:32:20.783 PM  Dock[556]   problem iterating directory, -43, for directory <ECDirectory: 0x7fd8ac846970> {path=/Users/jsuny/Documents/} (directory changed)
    8/20/14 1:32:22.310 PM  ARDAgent[574]   HIToolbox: received notification of WindowServer event port death.
    8/20/14 1:32:22.311 PM  ARDAgent[574]   port matched the WindowServer port created in BindCGSToRunLoop
    8/20/14 1:32:22.694 PM  com.apple.dock.extra[644]   HIToolbox: received notification of WindowServer event port death.
    8/20/14 1:32:22.694 PM  com.apple.dock.extra[644]   port matched the WindowServer port created in BindCGSToRunLoop
    8/20/14 1:33:36.504 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.gamed) Ignored this key: UserName
    8/20/14 1:33:36.504 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.gamed) Ignored this key: GroupName
    8/20/14 1:33:36.505 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.ReportCrash) Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self
    8/20/14 1:33:36.517 PM  loginwindow[653]    Connection with distnoted server was invalidated
    8/20/14 1:33:37.429 PM  MiniLauncher[711]   Skipping Setup Assistant for user 1467285364
    8/20/14 1:33:37.464 PM  transition[714] INFO: Not signed into MobileMe, nothing to do. Reason: 3
    8/20/14 1:33:37.506 PM  MiniLauncher[711]   INFO: MMAccountMgr_Private: finishedSetup called.
    8/20/14 1:33:38.180 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.afpstat-qfa[744]) Job failed to exec(3). Setting up event to tell us when to try again: 2: No such file or directory
    8/20/14 1:33:38.180 PM  com.apple.launchd.peruser.1467285364[536]   (com.apple.afpstat-qfa[744]) Job failed to exec(3) for weird reason: 2
    8/20/14 1:33:38.489 PM  CalendarAgent[741]  Could not find Meta Data for persistent Store
    8/20/14 1:33:38.877 PM  fontd[716]  FontWorker failed to return directory info (IPC failure?) for file://localhost/Users/jsuny/Library/Fonts/
    8/20/14 1:34:48.723 PM  migCacheCleanup[719]    Cache cleanup: cleanup for user 1467285364 took 0.43 seconds
    8/20/14 1:37:15.114 PM  Dock[723]   no information back from LS about running process

    Check these out:
    http://images.apple.com/server/macosx/docs/UserManagementv10.5.mnl.pdf
    http://clc.its.psu.edu/Labs/Mac/Resources/blastimageconfig/
    
http://blog.macadmincorner.com/

  • A stranger is showing up under "Shared" in my network

    A stranger is showing up under "Shared" in my network. "Frank's Macbook Pro."  I don't know anyone named Frank and my internet connection (comcast) is secured.  I looked under "preferences/sharing" and didn't find a way to "Frank's Macbook Pro" from showing up. Advice? I'm a newbie. Please explain simply. Amy

    1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.
    2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.
    There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
    3. Below are instructions to run a UNIX shell script, a type of program. All it does is to collect information about the state of the computer. That information goes nowhere unless you choose to share it. However, you should be cautious about running any kind of program (not just a shell script) at the request of a stranger. If you have doubts, search this site for other discussions in which this procedure has been followed without any report of ill effects. If you can't satisfy yourself that the instructions are safe, don't follow them. Ask for other options.
    Here's a summary of what you need to do, if you choose to proceed:
    ☞ Copy a line of text in this window to the Clipboard.
    ☞ Paste into the window of another application.
    ☞ Wait for the test to run. It usually takes a few minutes.
    ☞ Paste the results, which will have been copied automatically, back into a reply on this page.
    The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.
    4. You may have started the computer in "safe" mode. Preferably, these steps should be taken in “normal” mode, under the conditions in which the problem is reproduced. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.
    5. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.
    6. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.
    Triple-click anywhere in the line of text below on this page to select it:
    PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(Software Hardware Memory Diagnostics Power FireWire Thunderbolt USB Fonts 51 4 300 25 5120 KiB/s 1024 85 \\b% 20480 1 MB/s 25000 ports 'com.autodesk.AutoCad com.evenflow.dropbox com.google.GoogleDrive' DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH -86 ` route -n get default|awk '/e:/{print $2}' ` 25 N\\/A down up 102400 25600 recvfrom sendto CFBundleIdentifier 25 25 );N5=${#p[@]};p[N5]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^\([0-9]+\) /,"");n=$0;getline;} $NF=="'${p[45]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=('\n%s: %s\n' '\n%s\n\n%s\n' '\nRAM details\n%s\n' %s\ %s '%s\n\t(%s)\n' );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}')printf("%s (UID %s) is using %s '${p[$2]}'\n",$0,u,q);} ';};s=(' /^ *$|CSConfigDot/d;s/^ */   /;s/[-0-9A-Fa-f]{22,}/UUID/g;s/(ochat)\.[^.]+(\..+)/\1\2/;/Shared/!s/\/Users\/[^/]+/~/g ' ' s/^ +//;5p;6p;8p;12p ' ' {sub(/^ +/,"")};NR==6;NR==13&&$2<'${p[10]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: [^EO]|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[11]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ s/ *:$//;x;s/\n//;/Apple|Genesy|Intel|SMSC/d;s/\n.*//;/\)/p;};/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;} ' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' '/(sh|ng|ic)$/p' ' $3~/[0-9]:[0-9]{2}$/ { $4="";gsub("  "," ");gsub(/:[0-9:a-f]{14}/,"");} { print|"tail -n'${p[12]}'";} ' ' NR==2&&$4<='${p[13]}' { print $4;} ' ' END { $2/=256;if($2>='${p[15]}')print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 21 22`" 'NR==2'"`S0 37 17`" ' NR!=5||$8!~/[RW]/{next};{ $(NF-1)=$1;$NF=int($NF/10000000);for(i=1;i<=3;i++){$i="";$(NF-1-i)="";};};'"`S0 19 20`" 's:^:/:p' '/\.kext\/(Contents\/)?Info\.plist$/p' ' s/^.{52}//;s/ .+//p ' ' /Launch[AD].+\.plist$/;END{if(NR<100)print "/System/";} ' '/\.xpc\/(Contents\/)?Info\.plist$/p' ' NR>1&&!/0x|\.[0-9]+$|com\.apple\.launchctl\.(Aqua|Background|System)$/ { print $3;} ' '/\.(framew|lproj)/d;/plist:|:.+(M.+exec|scrip)/s/:[^:]+//p' '/root/p' ' !/\/Contents\/.+\/Contents|Applic|Autom|Frameworks/&&/Lib.+\/Info.plist$/;END{if(NR<100)print "/System/"};' '/^\/usr\/lib\/.+dylib$/p' '/\/etc\/(auto_m|hosts[^.]|peri)/s/^\.\/[^/]+//p' ' /\/(Contents\/.+\/Contents|Frameworks)\//d;p;' 's/\/(Contents\/)?Info.plist$//;p' ' { gsub("^| ","||kMDItem'${p[35]}'=");sub("^.."," ") };1 ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[9]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/ { next;} /%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a)print "CPU: "a;if(b)print "I/O: "b;if(c)print "Net: "c" (KiB/s)";if(d)print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/ )||(/v6:/&&$2!~/A/ ) ' ' /lR/ { if($2<='${p[25]}')print $2;} ' ' BEGIN { FS=":";} { n=split($3,a,".");sub(/_2.+/,"",a[n-1]);b=b"\n"$2" "a[n-1]" "a[n]" "$1;c=c$1;} END { d="sort";print b|d;close(d);if(c)print("\n\t* Code injection");} ' ' NR!=4{next} {$NF=int($NF/10240)} '"`S0 27 14`" ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L)f=f"\n\t"$0;} END { F=FILENAME;if(!F)exit;if(!f) f="\n\t[N/A]";"file -b "F|getline T;if(T!~/^(A.+ E.+ text$|POSIX sh.+ text ex)/) F=F" ("T")";printf("\nContents of %s\n%s\n",F,f);if(l>L) printf("\n\t...and %s more line(s)\n",l-L);} ' ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ +B/{ s/.+= |(-[0-9]+)?\.s.+//g;p;} ' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' '/:/!p' ' /:/{$0="'"${p[28]}"'"};1;' ' $0;END { if(NR<100)print "com.apple.";} ' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps sudo\ crontab sudo\ iotop top pkgutil PlistBuddy whoami cksum kextstat launchctl sudo\ launchctl crontab 'sudo defaults read' stat lsbom mdfind ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' defaults\ read scutil sudo\ dtrace sudo\ profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup );c2=(com.apple.loginwindow\ LoginHook '-c Print /L*/P*/loginw*' '-c Print L*/P*/*loginit*' '-c Print L*/Saf*/*/E*.plist' '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' '.??* -path .Trash -prune -o -type d -name *.app -print -prune' '-c Print\ :'${p[35]}' 2>&1' '-c Print\ :Label 2>&1' '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status '-F bsd -k Sender kernel -k Message CReq "Beac|caug|dead[^l]|GPU |hfs: Ru|inval|jnl:|last value [1-9]|n Cause: -|NVDA\(|pagin|proc: t|Roamed|rror|ssert|Thrott|timed? ?o|WARN" -k Message Rne "Goog|SMC:" -o -k Sender fseventsd -k Message CReq "SL"' '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' '-t1 10 1' '-f -pfc /var/db/*/*.{BS,Bas,Es,OSXU,Rem}*.bom' '{/,}L*/Lo*/Diag* -type f \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f:%Sc:%N -t%F {} \;' '-L {/{S*/,},}L*/Lau* -type f' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' '-L /S*/L*/{C*/Sec*A,E}* {/,}L*/{A*d,Compon,Ex,In,iTu,Keyb,Mail/B,P*P,Qu*T,Scripti,Sec,Servi,Spo}* -type f -name Info.plist' '/usr/lib -type f -name *.dylib' `awk "${s[31]}"<<<${p[23]}` "/e*/{auto_master,{cron,fs}tab,hosts,{launchd,sysctl}.conf} /usr/local/etc/periodic/*/* .launchd.conf" list getenv /Library/Preferences/com.apple.alf\ globalstate --proxy '-n get default' -I --dns -getdnsservers -getinfo\ "${p[N5]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --only-files --files com.apple.pkg.*|sort|uniq' -kl -l );N1=${#c2[@]};for j in {0..8};do c2[N1+j]=SP${p[j]}DataType;done;N2=${#c2[@]};for j in 0 1;do c2[N2+j]="-n 'syscall::'${p[33+j]}':return {@out[execname,uid]=sum(arg0)} tick-10sec {trunc(@out,1);exit(0)}'";done;l=(Restricted\ files Hidden\ apps 'Elapsed time (s)' POST Battery Safari\ extensions Bad\ plists 'High file counts' User Heat System\ load boot\ args FileVault Diagnostic\ reports Log 'Free space (MiB)' 'Swap (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports kexts Daemons Agents launchd Startup\ items Admin\ access Root\ access Bundles dylibs Apps Font\ issues Inserted\ dylibs Firewall Proxies DNS TCP/IP RSSI Profiles Root\ crontab User\ crontab 'Global login items' 'User login items' );N3=${#l[@]};for i in 0 1 2;do l[N3+i]=${p[5+i]};done;N4=${#l[@]};for j in 0 1;do l[N4+j]="Current ${p[29+j]}stream data";done;A0() { id -G|grep -qw 80;v[1]=$?;((v[1]==0))&&sudo true;v[2]=$?;v[3]=`date +%s`;clear;};for i in 0 1;do eval ' A'$((1+i))'() { v[0]=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "${v[0]}" ]];};A'$((3+i))'() { v[0]=` while read i;do eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "${v[0]}" ]];};A'$((5+i))'() { v[0]=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "${v[0]}" ]];};';done;A7(){ v[0]=$((`date +%s`-v[3]));};B2(){ v[$1]="${v[0]}";};for i in 0 1;do eval ' B'$i'() { unset v[0];((v['$((i+1))']==0))||{ v[0]=No;false;};};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v[0]=` paste -d: <(echo "${v[$1]}") <(echo "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v[0]=`grep -Fv "${v[$1]}"<<<"${v[0]}"`;};C0(){ test "${v[0]}"&&echo "$_";};C1() { [[ "${v[0]}" ]]&&printf "${f[$1]}" "${l[$2]}" "${v[0]}";};C2() { v[0]=`echo ${v[0]}`;[[ "${v[0]}" != 0 ]]&&C1 0 $1;};C3() { v[0]=`sed -E "${s[0]}"<<<"${v[0]}"`&&C1 1 $1;};for i in 1 2;do for j in 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;A0;{ A2 0 $((N1+1)) 2;C0;A1 0 $N1 1;C0;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 8;A1 0 $((N1+2)) 3;C0;D13 0 $((N1+3)) 4 3;D22 0 $((N1+4)) 5 4;for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 1 10 7 9;D13 1 11 8 10;D22 2 12 9 11;D12 3 13 10 12;A1 4 19 11;B4 0 0 44;C3 13;D23 5 14 12 14;D22 6 36 13 15;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;B1&&D22 11 17 17 20;D22 12 39 15 21;A1 13 40 18;B2 4;B3 4 0 19;A3 14 6 52 0;B4 0 5 54;A1 17 41 20;B7 5;C3 22;B4 4 6 21;A3 14 7 52 6;B4 0 7 54;B3 4 0 22;A3 14 6 52 0;B4 0 8 54;B5 7 8;B1&&{ A2 19 26 23;B7 7;C3 23;};A2 18 26 23;B7 7;C3 24;A2 4 20 21;B7 6;B2 9;A4 14 7 53 9;B2 10;B6 9 10 4;C3 25;D13 4 21 24 26;B4 4 12 26;B3 4 13 27;A1 4 22 29;B7 12;B2 14;A4 14 6 53 14;B2 15;B6 14 15 4;B3 0 0 30;C3 29;A1 4 23 27;B7 13;C3 30;D13 24 24 32 31;A1 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;B1&&D13 21 0 32 19;D23 14 1 48 42;D23 14 2 48 43;D13 14 3 49 5;D22 4 4 50 0;D13 4 5 32 1;D22 0 $((N1+8)) 51 32;D13 4 8 41 6;D23 22 9 37 7;B1&&D13 10 42 32 40;D23 20 42 32 41;D13 25 37 32 33;D12 26 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 33 34 42 37;D22 32 31 43 38;B1&&for i in 0 1;do D22 28 $((N2+i)) 45 $((N4+i));done;B1&&D22 29 35 46 39;A7;C2 2;} 2>/dev/null|pbcopy;exit 2>&-  
    Copy the selected text to the Clipboard by pressing the key combination command-C.
    7. Launch the built-in Terminal application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
    Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.
    8. If you see an error message in the Terminal window such as "syntax error," enter
    exec bash
    and press return. Then paste the script again.
    9. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, press the key combination control-C or just press return three times at the password prompt. Again, the script will still run.
    If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.
    10. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, there will be nothing in the Terminal window and no indication of progress. Wait for the line
    [Process completed]
    to appear. If you don't see it within half an hour or so, the test probably won't complete in a reasonable time. In that case, close the Terminal window and report the results. No harm will be done.
    11. When the test is complete, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.
    At or near the top of the results, there will be a line that begins with "System Version." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.
    If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.
    12. When you post the results, you might see the message, "You have included content in your post that is not permitted." It means that the forum software has misidentified something in the post as a violation of the rules. If that happens, please post the test results on Pastebin, then post a link here to the page you created.
    Note: This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I don't necessarily agree with them.
    Copyright © 2014 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

  • Sharing Library with Multiple Users on  SAME COMPUTER

    My wife and I use Windows XP Pro. We imported all of our CDs to the iTunes on her user account. How do I access or import the library to the iTunes on my account? I want to avoid logging into her account to listen to the music.
    The help index has info on sharing music for multiple computers on a network but I didn't see an answer for sharing music between multiple user accounts in XP on one computer. PLEASE HELP!!!!

    Use tweakUI, google on it to get it and install it.
    More details are here or do a search discussions for "TweakUI" if you need more.
    http://discussions.apple.com/thread.jspa?messageID=1175181&#1175181

  • Can I have a network user with the same name as a local user?!

    I have just set up Mac OS X 10.8 SErver with Open Directory.  I have about 20 machines that I will be setting up, some which have mainly been used localy and just used to tap into Shared Files, [historically], but am wanting to use network users for better backup and support.
    However some of the legacy accounts were not used on off the server...  What I have is the following :-
    a)    [Person A]  - They are a network user with Password [Password A]
    b)    The computer is [Person A], they have a Password [Password Old] (so it is different)
    I have Network Account Users turned on, with a green dot! (have domain all set up)
    However How do I connect using either a or b.  depending on what i feel like that day!
    ? Help any ideas.
    Ultimately I will have set up all my client machines with a client admin user and standard password... but I am not there yet!

    Moving from local (legacy) users to network users takes a one-time hassle of moving the contents of their local home folder contents up to the server. Using a finder copy never worked for me. What I finally found worked reliably was using rsync to copy the entire users local folder up to the server. Once on the server, move the files into place (if you didn't rsync them there directly. Finally, Chown all the files (on the server) to associate them with the correct userID on the server. If everything looks right on the server, you can test by trying to login as this user from another local Mac (but now as a network account), and hopefully their home folder looks like they expected.
    Note you will need admin access in the local machine and the server to rsync their home folder. You don't want to be logged into their account while trying to copy their files up to the server.
    If rsync is not your bag, a portable hard disk and/or disk image of their home folder is another way to move their stuff.
    Once you've verified that their network account got to the server ok, then REMOVE the local account.

  • Lion Server: All network users have disappeared

    Hi,
    A search through the forums and kbase didn't give me anything that mapped well to my problem. Here's the situation:
    Specs:
    Mac Pro (2008) 6GB RAM, SSD boot with space available, OS X Lion (latest) with Server.app
    Services:
    File Sharing
    Users: less than 15—accounts only used for file server access.
    This is the only server on the local network, all network routing is taken care of by a Meraki router.
    I went to add a new user to our fileserver, and was unable to connect to the server over Apple Remote Desktop. At the time, file sharing from the server (I *believe*) was still working. I logged in with the file server's local admin account via SSH and tried to use Kickstart to get ARD running again—something I'm well versed in. The script ran as usual, but ARD could still not connect. So, as everyone was in a meeting, I tried to use `shutdown` to reboot the fileserver from the CLI, something I've also done in the past (but not frequently). Usually that takes about a minute to work, and then my shell disconnects—but after 5 minutes, the Mac had not rebooted.
    At that point, I decided to walk to the server and manually force it down by holding the power button in. That powered off the Mac, and 30 seconds later, I booted it up.
    Back on my Mac via ARD, I was able to remotely control it and got to the Fileserver's log in screen, which featured a red dot in the use field I'd never seen before. It's tool tip read "network users are currently unavailable" (paraphrased, perhaps). I logged in with the Fileserver's local admin user (as usual) and launched the Server.app, only to find that in the `Users` section, there were no users listed, and the plus and minus buttons were greyed out.
    I tried rebooting but got the same results. I then repaired permissions and verified the boot drive. Lots of permissions repairs (as usual) but nothing improved. Another reboot after the permission repair and disk repair, just for safety's sakes… and as you can guess by me posting here… no improvement.
    I'm not heavily versed in Server. I'm not even sure if those users are stored in a database, and where that DB would live. Does server make dumps or backups of the users on its own? Should I have been? Is this LDAP? Anyone have some next steps I can try? What info would be useful?
    My first goal would be to recover a damaged DB. I only have just under 15 users, so re-creation isn't difficult. But, under the department of "I don't know a ton about Lion Server" I don't know if network users act like OS X users… where you could create a new user with the same username, but if their UID is different, then they won't have access to their owned files on the fileserver… is Server that exacting? Does it care who owns the file?
    Thanks in advance for any ideas, or resources you can point me to!

    It gets far weirder……
    Now no one, myself included can log in.
    Checking the logs, which I'll try to attach a small sample of here (Dropbox link below since you can only attach images here), I see repeated instance of both `opendirectoryd` crashing and respawning, and of server manager unable to authenticate:
    1/19/15 4:57:06.658 PM com.apple.opendirectoryd: Assertion failed: (0 == (connection->flags & eODConnectionFlagSocketValid)), function __odconnection_connect_block_invoke_2, file /SourceCache/opendirectoryd/opendirectoryd-172.17/src/odconnection.c, line 988.
    1/19/15 4:57:07.641 PM com.apple.launchd: (com.apple.opendirectoryd[13760]) Job appears to have crashed: Abort trap: 6
    1/19/15 4:57:07.641 PM com.apple.launchd: (com.apple.opendirectoryd) Throttling respawn: Will start in 9 seconds
    1/19/15 4:57:07.761 PM ReportCrash: Saved crash report for opendirectoryd[13760] version ??? (???) to /Library/Logs/DiagnosticReports/opendirectoryd_2015-01-19-165707_localhost.cras h
    1/19/15 4:57:17.276 PM PasswordService: -[AuthDBFile getPasswordRec:putItHere:unObfuscate:]: user with slot 4873a20f-0cc0-f7c3-0000-000a0000000a not found.  Result: 80 Other (e.g., implementation specific) error
    1/19/15 4:57:17.277 PM AppleFileServer: _Assert: /SourceCache/afpserver/afpserver-585.7/afpserver/AgentSession.cpp, 856 (4294952813)
    1/19/15 4:57:32.703 PM servermgrd: servermgr_accounts: got error 2100 trying to auth to local LDAP node
    https://dl.dropboxusercontent.com/u/1344045/server-sample.log.txt

  • Mountain Lion Server: add network user to remote management

    Hi,
    So recently I have upgraded from Lion Server to ML Server. A little disappointing, but whatever, I've moved on and got everything almost back to where I had it with Lion.
    My last few issues I believe are related but can't quite figure it out. In Lion I have an admin profile and then a network user profile that I used on my MBP bound with AD. I'm at the stage where my nre network user can log in on the server machine but I can't log in as the network user via screen sharing. I can't add a network user to Remote Management, and with Remote Management enabled Screen Sharing is greyed out. I'd really like this to work.
    My second problem is that I can't bind my MBP to the server but even when bound the network user account can't log in.
    Any body have  any ideas?
    Thanks!

    I had this problem on a clean install.
    The solution was incredibly simple for me, but only  after I saw Ross.M's note about opening the Users & Groups settings panel (in the OS System Prefs, not in server) and rebinding to OD server under Login Options.
    That was not the solution for me, but under Login Options I discovered a previously unnoticed pref for "Allow network users to login at login window."  I had this option set (apparently by default) to "Only these network users:"  but with an empty list.  Adding my users to the list made it work perfectly.
    Talk about KISS

  • Network Users with network homes not really working for me

    I have with great pain setup a OS X Lion server on a Mac Mini that was supposed to be my central server to have 4 network users accounts and all the users data is stored on an external disk array with mounted network homes to the 2 iMacs and 2 Macbooks I have in my home.
    I have gotten it all working and all my Macs are joined to the Open Directory and each User can login as a network users on any of the Macs and get their files via mounted home directory from the server. The home directories on the server are backed up with Time Machine.
    I have found the following items that do not work proberly:
    1) Desktop backgrounds settings are just lost sometimes for whatever reason. Desktop background goes to default and you need to manually set back to the one you have selected. This happen mostly if users have their own desktop pictures.
    2) Keychain get's screwed up. The user often get the "Keychain doesn't exist to store ..." message and need to select to reset the keychain. Anything I have tried from "Keychain First Aid" to removing and have a new one created doesn't fix the problem. It keeps on coming back.
    3) iTunes Storage and AppStore are getting confused about authorized computers. This is because a user logs in from another computer and then iTunes store would tell the user this computer hasn't been authorized to play the purchase music. Same happens with iPhone apps from the AppStore. Apparently those two stores are not setup to hanlde network users proberly.
    4) Permission issues happen sometimes in Application like iPhoto where it would complain not being able to see photos or cannot add new photos to the library. Need to run a permission repair on the Iphoto Library to fix this.
    5) One critical one is that it's not really possible to restore files from Time Machine. The Time Machine backup is done on the server by an administrator account directly backing up the user directories. When you go into Time Machine on the server even the admin can drill down into the user directories so no restore possible. The individual users have no idea that there was ever a Time Machine backup done as Time Machine is not setup in their accounts on the individual Macs. This prevents any possible restore.
    I reckon that many of the problems are related to having only one location for ~/Library as the individual Macs are writing their user related settings into this directory in a central location. So what happens is when something on iMac 1 and then I log in on iMac 2 that might not exactly match this Macs config and it get's confused throwing one of the above erors.
    Trouble is witth central network home directory the way they mounted i can't exclude the ~/Library folder. The only option I can see is mobile account because I have seen in the preferences that when they sync the handle Library items differently.
    Does anybody have any experience out there with this sort of thing and can advise what's the best way forward?
    If i can't resolve this I'll go back to have network users with local home directories on each Mac and just setup for each user a network share to which they copy files if they want them available on other Macs. Not as nice but at least it works!
    As a said note I did this to make things easier but it has up to now cost me trouble then i had before!

    Haven't heard anything from anybody so probably to daunting a topic ...
    I have now moved on to try Portable Home Directories (PHD) and syncing ... what a disaster!
    First it took  me ages to get this right as the way the home directores are mounted on the clients from the server it's just weired which has to do with how AFP mounts are implemented. Since one AFP mount can't be mounted by several users on the same system they use a workaround of mounting it to a temp directory and then linking it back to where it should be. Of course this causes major problems.
    Okay it kind of worked so let's move on to syncing PHD. First of all on initial creation it only sync a small portion of the directory that should be okay but on some of my accounts it never went passed this stage. It said it's all synced but it only had synced the first 10% or so of the data. I wasn't able to make it sync anymore.
    On other accounts it correctly synced all the data down, or so I thought. Apparently a few sync session back and forth and 50-60% of the data was gone. On further investigation it turned out to be iTunes and iPhoto libraries. Turns out does don't sync probably via Home Sync!!!
    Apple product is not able to probably syncing Apple specific library files!!!!
    So here my warning to everybody: DO NOT USE PHD and HOME SYNC to sync your data as you will lose stuff if you have iTunes and/or iPhoto libraries with Lion OS X Server!!!
    The whole Lion Server experience has been a disaster for me. Now I have a server that does file sharing and time machine backup sharing. I can do the same thing with a standard Mac using those services. What's the point of Lion Sever for Home if nothing works proberly?

  • Mac OSX Lion Server Network User Login Issue

    We have in the office a server running Mac OSX Lion, and several network users who've all been running happily for quite a will.
    About a month ago I was added to the system, and initially we had a few issues relating to the home directory, but we changed 'something' and it all worked.
    Fast forward to now, and we've added a new user - Hannah - to our system.
    I've added her in the Workgroup Manager, and set her up everywhere I can find on the server. Her home directory creates on the server fine.
    She appears in the Logon list on the client machines, and here's where the trouble starts...
    Every time she tries to log on, it fails. The logon box just bounces or wobbles as though the password is incorrect. We've tried changing the password, to no avail. We've tried adding new test users - same problem.
    We've tried sudo kinet on the Terminal as a local user, with variable results.
    I'm at my wits end, and really hoping someone here can help offer some suggestions or advice we can work through to get to the bottom of this.
    Thanks in advance!

    Your problems are likely occurring because you added her to the directory with Workgroup Manager.
    You should really start avoiding WGM when at all possible as Apple is clearly moving away from it. Because of this, things don't always work as expected when using 'legacy' tools like WGM.
    My guess as to what your problem is: When you create a new user in Server.app, two things happen for you automatically that WILL NOT HAPPEN if done from WGM.
    First the user is added to the default "Workgroup" group.
    More importantly (and the source of much confusion), the user is automatically added to SACLs.
    Check the SACL for the user in Server.app, I bet you'll notice that they aren't a member of the File Sharing group like they should be. To solve this problem, you can either delete the user and recreate them in Server.app, or manually add them to the appropriate SACL.
    I would opt for recreating them in Server.app if I were you, as I don't trust user accounts that originate in WGM on Lion Server.

  • Local vs Network Users

    We have a small shop with all laptop users and a Mac Mini SLS. Once in a while I'd like to be able to sit down at the Mini and login as my network user with access to any files I have stored, etc. Like it's a local user. Is this possible?

    For remote... In shortest terms, get yourself a firewall with VPN capabilities and ask your ISP for a business-class static IP and a domain, and place that box between your LAN and whatever box your provider has set up for you, and off you go. You can use your Mac as a VPN end-point, but I've found it easier to use an outboard firewall between your LAN and your DSL or cable modem, or however you're getting your connectivity. Your remote client box will look like it's on the local network, and (when it's all plugged in right) you can connect and use disk services or remote desktop stuff, or Server Admin or otherwise. Run a few searches around the forum.
    For local... Install the Server Admin tools, and use Screen Sharing or such. You can get at Screen Sharing via Server Admin or via Finder's Connect to Server sharing-screen stuff. And yes, you can generally use Screen Sharing over a VPN...

  • ITunes on new Mac Mini does not show shared libraries on network or songs on NAS drive

    iTunes on new Mac Mini does not show shared libraries on network or songs on NAS drive
    The latest version of iTunes on a 3-month old Mac Mini (8 gig RAM, OS 10.10.2) does not see any of the shared iTunes libraries on a  MacBookPro (MBP) (OS 10.9.5) and a 14-month old Mac Mini (OS 10.9.5). And a network shared drive/media server does not appear as well. I have a Gigabite Ethernet G4 and on it, the MPB and the "old" mini I can see the various shared music libraries and NAS, but not on the new Mini.
    The little house with a music note inside it that I see on the upper left corner of the iTunes 12.1 window on my MBP does not appear on iTunes 12.1 on the new Mac Mini. I have gone through all the iTunes preferences and can not find where I can turn on this feature. The new Mac Mini is on the local network and I can reach the internet successfully.
    I have been using iTunes since its beginning (still have a PowerTower Pro with a working copy of SoundJam), so I am not a newbie, but this has me baffled.

    May I add, that I gave full rights to the user at the Mac Mini to access and change data on the server drive for ITunes Media.

  • Setting up network users using OS X Server: Is there a usable guide somewhere that fully explains how?

    I have tried reading through what I can find in Apple’s documentation for OS X Server (as downloaded from the App Store, running on a new OS X 10.9 machine - not an upgrade). And I’ve tried digging through articles on the web and discussions in the forums here.
    I still cannot get a working setup for network users hosted on my OS X Server machine.
    So, I’m hoping there’s a decent guide somewhere that folks can point me to that covers the entire process, including:
    every step involved in setting OS X Server’s various configuration parts (DNS, File Sharing, OD, Users,…),
    how to set up the accounts and their file folders on the server,
    and every step involved in getting the client machines to use the network accounts to provide user logins.
    I’m totally okay with resorting to the command-line if needed.
    Ideally, I want:
    all of my users’ files (everything in their “home” directories) to be stored on the server.
    the users’ to be able to use different machines on our LAN to login.
    their names & pictures to show up in the login screen like local users.
    From what I’ve seen so far, I’m not optimistic on that last point being doable . However, even if I have to manually add each user in the network login settings on the client machines in order to have their name & picture show up in the login screen, that’s suboptimal, but better than nothing (I have <10 user accounts to worry about, so brute-force is a tolerable option).
    Thanks for any direction/tips on this!

    I've found apple's guides to be pretty elementary. 
    OSX Server Essentials, which you can get at amazon is a better basic guide and probably will get you started.
    To do anything more advanced, you'll find that apple really has not provided any documentation, but i've found the old series
    Enterprise Mac Administrator's Guide
    Enterprise Mac Managed Preferences
    and
    Enterprise Mac Security
    to be really useful.  I really wish these guys would keep writing books!  I'm not sure buying old copies of these texts will offer any encouragement to them, but boy do I hope it does because they have answered a TON of quesions.
    For online references, I like:
    http://krypted.com/guides/mavericks-server/
    This website is at least as good (I'd say twice as good) as the documentation apple provides, and much easier to follow.
    http://yesdevnull.net/2013/10/os-x-mavericks-server-open-directory-master/
    This website has been incredibly useful for solving all kinds of problems.  I can't remember who authors it, but I ought to carry a picture of them around so that I could hug them if I ever saw them on the street.  creepy, yes, but so so deserves it.
    https://github.com/rtrouton/rtrouton_scripts/tree/master/rtrouton_scripts
    For user setup and scripting
    Anyway, hope that helps.
    I'd start with the krypted guide.  Read it twice, then have at it. 

Maybe you are looking for