Start TLS on LDAP and iDAR

Can Directory Server, stand-alone and in conjunction with iDAR, respond to Start-TLS requests?

Directory Server standalone 5.1 and later on unix platforms (not Windows) can respond to the Start TLS control. Not sure about iDAR.

Similar Messages

  • Sql server service wont start after disabling TLS 1.0 and SSL 3.0 on windows

    We have been hardening our servers for some time now and recently we disabled SSL 3.0 because of the poodle attack. When I did this on one of our test servers SQL Server failed to start up after the restart.
    I have been able to reproduce this on Windows Server 2012 and Windows 7 by disabling TLS 1.0 and SSL 3.0 through the registry. I am using SQL Server 2012 on the server machine. On my windows 7 machine sql server 2012 and sql server 2005 will not start with
    those disabled.
    These are the event log errors I get: 
    Application Logs: 
    (28/10/2014 8:38:54 AM) SQL Server could not spawn FRunCM thread. Check the SQL Server error log and the Windows event logs for information about possible related problems. 
    (28/10/2014 8:38:54 AM) Could not start the network library because of an internal error in the network library. To determine the cause, review the errors immediately preceding this one in the error log. 
    (28/10/2014 8:38:54 AM) TDSSNIClient initialization failed with error 0x80090331, status code 0x1. 
    (28/10/2014 8:38:54 AM) TDSSNIClient initialization failed with error 0x80090331, status code 0x80. 
    System Logs: 
    (28/10/2014 8:38:54 AM) The SQL Server (MSSQLSERVER) service terminated with service-specific error %%-2146893007. 
    (28/10/2014 8:38:54 AM) A fatal error occurred while creating an SSL server credential. The internal error state is 10013. 
    Done anyone know have we can keep SSL 3.0 and TLS 1.0 disabled and get SQLServer server to start?

    Hi Don,
    I already have TLS 1.0 Disabled to prevent the BEAST exploit. So the values I have for:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 
    1.0\Server
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 
    1.0\Client
    Both have enabled set to ("Enabled"=dword:00000000).
    If change both of these back to ("Enabled"=dword:00000001)
    to enable TLS 1.0, and restart then SQLServer is able to start again. But we are now vulnerable to the BEAST attack once again.
    If I keep server enabled and disable the client or vice versa and restart. Then SQLServer starts but I
    am unable to connect to it. When I check the Event logs I get the same errors as my original past.
    With your last post, do you mean to backup SCHANNEL and delete it so it gets recreated? If that is the case it will probably work because if I re enable SSL 3.0 or TLS 1.0 from here it fix's the issue,  but I then I won't have the exploits patched and
    we need this for some of our customers.
    This is my SCHANNEL Export:
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols]
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0]
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client]
    "DisabledByDefault"=dword:00000001
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0]
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client]
    "DisabledByDefault"=dword:00000001
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server]
    "Enabled"=dword:00000000
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0]
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client]
    "Enabled"=dword:00000000
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server]
    "Enabled"=dword:00000000

  • How to disable SSLv3 and keep only TLS for LDAP connection.

    Hi,
    I'm planning to keep only TLSv1.2 for LDAP connections.
    I tried to set LDAP_OPT_SSL_INFO in LDAP Session Options using a SecPkgContext_ConnectionInfo Structure with dwProtocol SP_PROT_TLS1_2_CLIENT(as described here -  https://social.msdn.microsoft.com/Forums/en-US/7544226d-97e1-4dae-a377-e382c2281e91/how-to-set-up-tls-in-ldap-connection?forum=vcgeneral),
    but it returns LDAP_PARAM_ERROR.
    I tried to call this function directly after ldap_sslinit/ldap_init and before ldap_connect() - without success, I tried to use other parameters with default values, I tried to initialize them by 0/other possible values - and also no success.
    How I can do this?
    Thanks for your advices.

    LDAP_PARAM_ERROR
    https://msdn.microsoft.com/en-us/library/aa367026(v=vs.85).aspx

  • LDAP and OID

    FYI: I am new to Oracle (<1 month), and new to APEX (<3 weeks) so forgive me if I am asking the obvious.
    I would like to have APEX authenticate against LDAP (active directory), and went about trying to set that up. Got all AD settings from our sys admin, and then tried them in the LDAP test tool. I kept getting " Authentication failed!" no matter what I did. Due to the detailed nature of that error message, I started trying to track down every possible avenue so I talked to one of our DBA's about DBMS_LDAP.SIMPLE_BIND_S. The answer I got back was that we don't have access to it because it is part of OIN which we would have to pay outrageous amounts of money for if we wanted to use it. Not likely to happen, so I was hoping that there was another way to authenticate APEX via LDAP.
    Any suggestions would be most helpful.

    John - DBMS_LDAP is not part of OID so you can use it as part of your existing database product installation. Search this forum for LDAP and AD and you'll find lots of discussions about what you are trying to do.
    Also, just to clarify, you're not trying to authenticate Application Express using AD, you'll be authenticating users to your application (essentially a PL/SQL application in the database) using account information stored in AD. The authentication code that gets executed will belong to your application.
    Scott

  • DSEE 6.3 - LDAP and netgroup problem

    All
    I need your assistance or guidance with regards to my current situation with ldap and netgroups
    Let me explain
    I have configure ldap user authentication and need to group the user with netgroup
    The problem I'm having is that when netgroup is disabled (client /etc/passwd and /etc/nsswitch.conf change back to normal) I can login with the ldap user but as soon as I enable netgroup restart the nscd I cannot login
    The weird thing is I have gone through all the docs that was suggested in this forum with regards to ldap and netgroup but I'm still having a problem
    The netgroup behavior is, I can do a # getent passwd username with success, # id username successful and I can even # su to that user with success but when I want to login as that user I get permission denied BTW I cannot do # passwd -r ldap username - Permission denied
    See below My config
    Hope this wil help as I,m sure that I have missed something small
    Regards
    *# /etc/nsswitch.ldap*
    # An example file that could be copied over to /etc/nsswitch.conf; it
    # uses LDAP in conjunction with files.
    # "hosts:" and "services:" in this file are used only if the
    # /etc/netconfig file has a "-" for nametoaddr_libs of "inet" transports.
    # LDAP service requires that svc:/network/ldap/client:default be enabled
    # and online.
    # the following two lines obviate the "+" entry in /etc/passwd and /etc/group.
    #passwd: ldap files
    #group: ldap files
    passwd: compat
    passwd_compat: ldap
    group: compat
    group_compat: ldap
    more /etc/pam.conf
    # Authentication management
    # login service (explicit because of pam_dial_auth)
    login auth requisite pam_authtok_get.so.1
    login auth required pam_dhkeys.so.1
    login auth required pam_unix_cred.so.1
    login auth required pam_dial_auth.so.1
    login auth binding pam_unix_auth.so.1 server_policy
    login auth required pam_ldap.so.1
    tail -1 /etc/passwd
    +@nidgroup:x:::::
    more /var/ldap/ldap_client_cred
    # Do not edit this file manually; your changes will be lost.Please use ldapclien
    t (1M) instead.
    NS_LDAP_BINDDN= cn=proxyagent,ou=profile,dc=nid,dc=domain,dc=co,dc=za
    NS_LDAP_BINDPASSWD= {NS1}a10952b9857c6016
    more /var/ldap/ldap_client_file
    # Do not edit this file manually; your changes will be lost.Please use ldapclien
    t (1M) instead.
    NS_LDAP_FILE_VERSION= 2.0
    NS_LDAP_SERVERS= nisldap01.domain.co.za
    NS_LDAP_SEARCH_BASEDN= dc=nid,dc=domain,dc=co,dc=za
    NS_LDAP_AUTH= simple
    NS_LDAP_SEARCH_REF= FALSE
    NS_LDAP_SEARCH_SCOPE= one
    NS_LDAP_SEARCH_TIME= 30
    NS_LDAP_SERVER_PREF= nisldap01.domain.co.za
    NS_LDAP_CACHETTL= 43200
    NS_LDAP_PROFILE= kobus
    NS_LDAP_CREDENTIAL_LEVEL= proxy
    NS_LDAP_SERVICE_SEARCH_DESC= passwd:ou=people,dc=nid,dc=domain,dc=co,dc=za?one
    NS_LDAP_SERVICE_SEARCH_DESC= shadow:ou=people,dc=nid,dc=domain,dc=co,dc=za?one
    NS_LDAP_SERVICE_SEARCH_DESC= group:ou=Group,dc=nid,dc=domain,dc=co,dc=za?one
    NS_LDAP_SERVICE_SEARCH_DESC= netgroup:ou=netgroup,dc=nid,dc=domain,dc=co,dc=za?one
    NS_LDAP_BIND_TIME= 10
    NS_LDAP_SERVICE_AUTH_METHOD= pam_ldap:tls:simple
    NS_LDAP_SERVICE_AUTH_METHOD= keyserv:tls:simple
    NS_LDAP_SERVICE_AUTH_METHOD= passwd-cmd:tls:simpl
    ldaplist -l netgroup
    dn: cn=linuxgroup,ou=netgroup,dc=nid,dc=domain,dc=co,dc=za
    nisNetgroupTriple: (,kobusj,)
    objectClass: nisNetgroup
    objectClass: top
    cn: linuxgroup
    dn: cn=nidgroup,ou=netgroup,dc=nid,dc=domain,dc=co,dc=za
    nisNetgroupTriple: (,kobusj,)
    objectClass: nisNetgroup
    objectClass: top
    cn: nidgroup
    ldaplist -l passwd kobusj
    dn: uid=kobusj,ou=People,dc=nid,dc=domain,dc=co,dc=za
    givenName: kobus
    sn: kobusj
    loginShell: /usr/bin/bash
    uidNumber: 130
    gidNumber: 100
    objectClass: top
    objectClass: person
    objectClass: organizationalPerson
    objectClass: inetOrgPerson
    objectClass: posixAccount
    objectClass: shadowAccount
    uid: kobusj
    cn: kobusj
    homeDirectory: /home/kobusj
    userPassword: {crypt}rnR9/Cv1oV1l6
    *# getent passwd kobusj*
    kobusj:x:130:100::/home/kobusj:/usr/bin/bash
    *# id kobusj*
    uid=130(kobusj) gid=100(nis)
    *# passwd -r ldap kobusj*
    Enter kobusj's password:
    New Password:
    Re-enter new Password:
    Permission denied

    Hi,
    can anybody show whole /etc/pam.conf with working pam_list?
    The configuration below doesn't work:
    cat /etc/pam.conf
    +#+
    +# Authentication management+
    +#+
    +# login service (explicit because of pam_dial_auth)+
    +#+
    login   auth requisite        pam_authtok_get.so.1
    login   auth required         pam_dhkeys.so.1
    login   auth required         pam_unix_cred.so.1
    login   auth required         pam_dial_auth.so.1
    login   auth binding          pam_unix_auth.so.1 server_policy
    login   auth required         pam_ldap.so.1
    login   auth requisite       pam_list.so.1 allow=/etc/user.allow debug
    +#+
    +# rlogin service (explicit because of pam_rhost_auth)+
    +#+
    +# rlogin auth sufficient pam_rhosts_auth.so.1+
    rlogin  auth requisite        pam_authtok_get.so.1
    rlogin  auth required         pam_dhkeys.so.1
    rlogin  auth required         pam_unix_cred.so.1
    rlogin  auth binding          pam_unix_auth.so.1 server_policy
    rlogin  auth required         pam_ldap.so.1
    +#+
    +# rsh service (explicit because of pam_rhost_auth,+
    +# and pam_unix_auth for meaningful pam_setcred)+
    +#+
    +# rsh auth sufficient pam_rhosts_auth.so.1+
    rsh     auth required         pam_unix_cred.so.1
    rsh     auth binding          pam_unix_auth.so.1 server_policy
    rsh     auth required         pam_ldap.so.1
    +#+
    +# PPP service (explicit because of pam_dial_auth)+
    +#+
    ppp     auth requisite        pam_authtok_get.so.1
    ppp     auth required         pam_dhkeys.so.1
    ppp     auth required         pam_dial_auth.so.1
    ppp     auth binding          pam_unix_auth.so.1 server_policy
    ppp     auth required         pam_ldap.so.1
    +#+
    +# Default definitions for Authentication management+
    +# Used when service name is not explicitly mentioned for authentication+
    +#+
    other   auth requisite        pam_authtok_get.so.1
    other   auth required         pam_dhkeys.so.1
    other   auth required         pam_unix_cred.so.1
    other   auth binding          pam_unix_auth.so.1 server_policy
    other   auth required         pam_ldap.so.1
    +#+
    +# passwd command (explicit because of a different authentication module)+
    +#+
    passwd  auth binding          pam_passwd_auth.so.1 server_policy
    passwd  auth required         pam_ldap.so.1
    +#+
    +# cron service (explicit because of non-usage of pam_roles.so.1)+
    +#+
    cron    account required      pam_unix_account.so.1
    +#+
    +# Default definition for Account management+
    +# Used when service name is not explicitly mentioned for account management+
    +#+
    other   account requisite     pam_roles.so.1
    other   account binding       pam_unix_account.so.1
    other   account required      pam_ldap.so.1
    other   account requisite   pam_list.so.1 allow=/etc/user.allow debug
    +#+
    +# Default definition for Session management+
    +# Used when service name is not explicitly mentioned for session management+
    +#+
    other   session required      pam_unix_session.so.1
    +#+
    +# Default definition for Password management+
    +# Used when service name is not explicitly mentioned for password management+
    +#+
    other   password required     pam_dhkeys.so.1
    other   password requisite    pam_authtok_get.so.1
    other   password requisite    pam_authtok_check.so.1
    other   password required     pam_authtok_store.so.1 server_policy
    +#+
    +# Support for Kerberos V5 authentication and example configurations can+
    +# be found in the pam_krb5(5) man page under the "EXAMPLES" section.+
    +#+
    Thanks!
    Edited by: ffffffffff356dfd on 14 ??? 2009 16:25
    Edited by: ffffffffff356dfd on 14 ??? 2009 16:30

  • JNDI, LDAP, and Weblogic 6.0

    Hi-
    We are encountering an issue with JNDI and spurious "socket closed"
    exceptions. The players in our environment are Weblogic 6.0, Netscape
    Directory Server 4.1, (both running on Solaris 2.8) and JNDI as of JDK 1.3.
    We do JNDI lookups to connect to LDAP and most of the time everything works
    fine. Occasionally we get the following exception.
    java.lang.NullPointerException
    at com.sun.jndi.ldap.Connection.run(Connection.java:568)
    at java.lang.Thread.run(Thread.java:484)
    Exception encountered: Socket closed
    javax.naming.CommunicationException: Socket closed. Root exception is
    java.net.SocketException: Socket closed
    at java.net.SocketOutputStream.socketWrite(Native Method)
    at java.net.SocketOutputStream.write(SocketOutputStream.java:83)
    at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:72)
    at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:130)
    at com.sun.jndi.ldap.Connection.writeRequest(Connection.java:210)
    at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:497)
    at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1720)
    at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1584)
    at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1509)
    at
    com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.ja
    va:371)
    at
    com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeD
    irContext.java:331)
    at
    com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeD
    irContext.java:316)
    at
    javax.naming.directory.InitialDirContext.search(InitialDirContext.java:241)
    at adpsis.posse.ldap.LDAPReader.find(LDAPReader.java:37)
    at adpsis.posse.prfpos.PreferencesEJB.getUserName(PreferencesEJB.java:589)
    at
    adpsis.posse.prfpos.PreferencesEJB.getColorAttributes(PreferencesEJB.java:39
    1)
    at
    adpsis.posse.prfpos.PreferencesEJB.getColorPreferences(PreferencesEJB.java:3
    02)
    at
    adpsis.posse.prfpos.PreferencesEJBImpl.getColorPreferences(PreferencesEJBImp
    l.java:250)
    at
    adpsis.posse.prfpos.PreferencesEJBEOImpl.getColorPreferences(PreferencesEJBE
    OImpl.java:287)
    at
    adpsis.posse.prfpos.PreferencesEJBEOImpl_WLSkel.invoke(PreferencesEJBEOImpl_
    WLSkel.java:116)
    at
    weblogic.rmi.internal.BasicServerAdapter.invoke(BasicServerAdapter.java:373)
    at
    weblogic.rmi.cluster.ReplicaAwareServerRef.invoke(ReplicaAwareServerRef.java
    :128)
    at
    weblogic.rmi.internal.BasicServerAdapter.invoke(BasicServerAdapter.java:237)
    at
    weblogic.rmi.internal.BasicRequestHandler.handleRequest(BasicRequestHandler.
    java:118)
    at
    weblogic.rmi.internal.BasicRequestDispatcher.dispatch(BasicRequestDispatcher
    .java:115)
    at weblogic.rmi.internal.ServerRequest.sendOneWayRaw(ServerRequest.java:88)
    at weblogic.rmi.internal.ServerRequest.sendReceive(ServerRequest.java:108)
    at
    weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteRef.java
    :247)
    at
    weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteRef.java
    :225)
    at
    adpsis.posse.prfpos.PreferencesEJBEOImpl_WLStub.getColorPreferences(Preferen
    cesEJBEOImpl_WLStub.java:221)
    at adpsis.posse.transformer.CSSServlet.doPost(CSSServlet.java:86)
    at adpsis.posse.transformer.CSSServlet.doGet(CSSServlet.java:214)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:748)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
    at
    weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java
    :213)
    at
    weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletCo
    ntext.java:1265)
    at
    weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java
    :1631)
    at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137)
    at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
    The only way to recover is to restart the Weblogic server. The LDAP server
    appears to be running normally and continues to service other instances of
    Weblogic. No errors are logged in the LDAP server, the JNDI lookup that
    establishes the DirContext works fine on restart and is used multiple times
    with no issues until..poof..socket closed. I'm not certain which part is at
    issue, Weblogic, LDAP, or JNDI.
    Any ideas?
    Regards,
    Brett Schmoll
    ADP/SIS

    WLS 6.0 will be supported in the next release of WLCS, which is due in the
    spring.
    - Ginny
    "aamerG" <[email protected]> wrote in message
    news:3a5cb774$[email protected]..
    Hi everyone,
    we are starting a new development project and would like to use Weblogic
    6.0. How soon do you think there we be a version of WLCS which works with
    6.0.
    TIA

  • Unable to uninstall Starter Editions 3.0 and 3.01

    I have previously had Starter Edition 3.0 installed on my Windows XP O.S. but it was deleted in error. Use of the "Search" facility shows that there are NO Photoshop folders or files now installed in my system. I downloaded Starter Edition 3.2. with a view to starting over again.When this program attempted to install, it soon displayed a message that it had encountered previous Starter Edition programs and would remove them. It could not do so. The "Add or Remove Programs" facility shows that Starter Editions 3.0. and 3,01 are still installed, which is not possible. When an attempt is made to either repair or remove 3.0, a message is diplayed, stating "Internal Error 2753 ADS 2 EXE", and then, when "ok" is clicked, "Fatal Error during installation". When an attempt is made to remove 3.01 it very soon shows a message "Installation interrupted,Starter Edition 3.0 is either not installed or is in need of repair" Any suggestions as to how to remove either programs from the O.S. or the whereabouts on the Adobe websites that I might find a solution would be much appreciated. I have tried downloading Starter Edition 3.0 afresh and reinstalling but it will not install and the same messages continue to be displayed. Regards - Maurice.

    Hello to those who have viewed this thread. I have now resolved my problems by downloading,installing and using a free software from a search engine. The software, Revo Uninstaller 1.5, the latest version available to me, has fulfilled it's work on each occasion and always at the first attempt. It can even clear up after itself. I hope that this info. will be of help to some of yourselves. I now regard this thread as closed and would like to thank those that have helped. Regards - Maurice Nutting.

  • Regarding Facetime on my Ipad. I get started on a call and after 10 or 15 minutes I cannot hear whom I am talking to. They can still hear me and I still have picture on the screen but my sound stops working.

    Regarding Facetime on my Ipad. I get started on a call and after 10 or 15 minutes I cannot hear whom I am talking to. They can still hear me and I still have picture on the screen but my sound stops working.

    Why can't we use Acrobat Pro for mobile devices? Save a whole lot of headaches!!! Now I have to return this subscription.

  • I have 2 itunes accounts. I can no longer use my first one for purchases so I had to start a new one and it will not sync from my new one without deleting everything on my same ipod from my previous account. How do I sync between both accounts?

    I have 2 itunes accounts. I can no longer use my first one for purchases so I had to start a new one and it will not sync from my new one without deleting everything on my same ipod from my previous account. How do I sync between both accounts?

    Wayland wrote:
    The CS.com service account has long been closed. I cannot get it to respond to my years ago password for that account. So I ask them to send me a new password and of course it goes to my years ago email number.
    Don't have it send email.
    Answer the security questions.

  • How can I start anew with Photos and clear the (minimal) stuff it has uploaded

    I've about had it up to here with this new Photos scheme. I reorganised my Aperture libraries on both my iMac and MBA in preparation for this, delayed turning Photos on for a couple of days until I thought everything was ready based upon the limited advice that was out there, and then got stuck in an endless loop of "uploading" and "preparing" every time I opened Photos. There are 19,975 images in my Aperture library on the iMac. I was stuck at Uploading at anywhere between that number and 19,000 with no progress after hours of waiting. I tried all the tricks mentioned here including re booting, restarting the app, repairing/rebuilding the database, killing the "cloudd" process, etc.today Today when I restarted Photos, it now said I had 23,775 images to upload- 4000
    more than I have-and of course it got stuck there, like it has for the last week.
    I copied the previous Aperture library (pre Photos migration)back to my iMac and opened it in Aperture. Thankfully, all the photos I had taken on my iPhone this week during this Photos clusterphuck transition were in the Aperture Stream so I didn't lose any of those. I'm willing to give this whole thing one more shot. So  i need some advice. How can I start anew with Photos and clear the (minimal) stuff it has uploaded (about 6000 of 19,000 images in the last 7 days) ? If I simply delete the Photos.photolibrary file will that do the trick and lt me start a new fresh library using?
    <Re-Titled By Host>

    How can I start anew with Photos and clear the (minimal) stuff it has uploaded (about 6000 of 19,000 images in the last 7 days) ? If I simply delete the Photos.photolibrary file will that do the trick and lt me start a new fresh library using?
    It is hard to say from your post, why the migration did not succeed in your case.
    by "stuck on upload" do you mean, you opened the Aperture library in Photos, and Photos converted it to a Photo Library, and then the upload to iCloud Photo Library did hang?  Or did already the upgrade to the Photo Library fail?
    If you want the Aperture library to upload to iCloud Photo Library, it needs to be on a disk formatted MacOS Extended (Journaled) and the original image files must not be referenced. Referenced originals will not upload.
    Also, the upload may hang, if you do not have enough free iCloud storage, orr if one of the videos or photos in your library is in an unsupported format or corrupted.
    To start over, try to repair and rebuild the Aperture library before opening it in Photos. Try all Aperture Library First Aid options - starting with repairing the permissions.  (Repairing and Rebuilding Your Aperture Library: Aperture 3 User Manual)
    If I simply delete the Photos.photolibrary file will that do the trick and lt me start a new fresh library using?
    You will have to delete the photos that are already in icloud too; otherwise you are risking duplicates.
    Can you launch Photos at all?  If yes, delete all photos in Photos and empty the Recently Deleted album. Wait for the deletion to sync to iCloud. Then delete the Photos.photolibrary.

  • Trying to use a new, larger external hard drive for my Time Machine backup.  However, every time I start the backup, it gets started then fails.  And, I can't delete the few files that did save on the external.  Sort of a catch 22.  Any ideas?

    Trying to use a new, larger external hard drive for my Time Machine backup.  However, every time I start the backup, it gets started then fails.  And, I can't delete the few files that did save on the external.  Sort of a catch 22.  Any ideas?

    Is it a USB hard drive?  USB hard drives have the problem of not giving full speed if they are hooked up on the same bus as keyboards and mice.  Double check your profiler to make sure that is not a problem.  If it is Firewire, make sure there aren't other firewire devices in use at the same time.  I recommend not only keeping a Time Machine backup, but also a clone, and if you do use Time Machine, to make sure the Time Machine drive or partition is at least twice the size of the original drive.

  • I have an MacBook Pro 10.6, using disk utility I tried to verify my disk, but it came up with the message, please use your start up disk, I tried this, starting the computer up and pressing C, but it ejected the disk, the same thing happened while I runni

    I have an MacBook Pro 10.6, using disk utility I tried to verify my disk, but it came up with the message, please use your start up disk, I tried this, starting the computer up and pressing C, but it ejected the disk, the same thing happened while I running the computer. Is the hard drive damaged as laptop doesn't seem to recognize the start up disk ? If so, I presume I will have to put in a new one.
    There haven't been any problems with the computer, apart from a sticky curser,I have run a permissions programme from disk utility, there were a lot of different ones, but it seem to be able to fix them.
    Any comments or ideas ?
    Thank you in anticipation.

    First backup your users files off the machine to a external storage drive (not TimeMachine!)
    Most commonly used backup methods
    Next to startup from the disk, have it inserted, hold c or option/alt (wired or built in keyboard) and then boot the computer and or select the disk when it appears and click the arrow.
    Disk Utility is under the Utilities menu on the second screen.
    Step by Step to fix your Mac
    If you used the wrong 10.6 disk, it will spit it out or have issues, use the one that came with that machine or if it's defective, call Apple for a new one.

  • ¿How do I set the calendar to start week on Monday and not Sunday in my iphone?

    ¿How do I set the calendar to start week on Monday and not Sunday in my iphone?

    The jewish calendar does not have names for the days of the week. The week ends with the holy Sabbath (Saturday) and therefore the Sunday is the first days after Sabbath (Yom Rishon), the Monday the second day after Sabbath (Yom Sheini), etc.
    The Christians believe that Christ was raised on the first days of the week (Mathew 28:1, et al) AFTER the Sabbath was over. So their holy day is the Sunday and the working week starts on a Monday.
    The business days in the western world are numbered starting with the Monday as day number 1 (Timetables of Airlines, Calendars, even Microsoft Windows...).
    Unfortunately in the United States religious freedom extends to a level which is not understood easily by the rest of the world. Since the MAC OS X allows to change the first day from a Sunday to a Monday, one might wonder why Apple decided to give the iPhone a jewish touch.
    It could be supposed that this is the way of the least resistance. Only few complain about this issue, but if it were the other way around a lot of people would complain...
    PS: I agree with the others here: It is very, very annoying and more than once I entered an appointment into the wrong day...;-)

  • When I use my IPhone 4S to view the Shaw Go Movie Central App when I am at home I only use WiFi which is automatic, I start watching a show and sometimes I will get a message like "you can not use your cellular for video playback" or something close to th

    When I use my IPhone 4S to view the Shaw Go Movie Central App when I am at home I only use WiFi which is automatic, I start watching a show and sometimes I will get a message like "you can not use your cellular for video playback" or something close to that. Then I received an email from Telus saying I had used my 3G instead of Wi-Fi  using 75% of my data. How can this happen when I'm on Wi-Fi at home? If it switched to 3G for some reason I should have been disconnected and not just transferred to 3G network using up my data. What is the fix for this??

    It doesn't have to be that complicated, Verizon iPhones come unlocked, just tell VZ you're going on Holiday/Traveling and suspend the service, no need to pay for service if you're not going to be using it. Pick up local SIM cards in the countries of your choosing, pop them in, re-activate iMessage and you're set!
    I recommend getting a SIM card from the Three network in England, they have great EU roaming rates and free like-home roaming in Italy.
    Set your phone's region to match the country you're in, it'll save from some headaches when calling local/international numbers.
    To answer your questions,
    1. If you choose not to have a local SIM card, it is good to keep your phone in Airplane mode to save battery.
    2. Make sure the two iPhones have different names to reduce sync/restore issues.
    3. If husband has an iPhone also, you can chat with iMessage/Facetime, just give him heads up about the new number you'll have. Otherwise, use Whatsapp if he's got an Android. You can activate Whatsapp with your American number or the international number if you choose to get a SIM in Europe.
    Also, Get the MagicJack app and/or Google Hangouts, both of those apps provide you with free calling to the USA and Canada using any internet connection. Google Voice is another good way to SMS across the seas.
    Let me know if you need any more tips for iPhoning across the pond.

  • HT1369 Ipod touch not being recognized by itunes (but is registering as an external drive by the computer itself) have updated and reinstalled itunes, stopped/started apple mobile device and removed and mobile programs associated with my non apple cellpho

    Ipod touch not being recognized by itunes (but is registering as an external drive by the computer itself) have updated and reinstalled itunes, stopped/started apple mobile device and removed any mobile programs associated with my non apple cellphone. This seems to have started happening after the last Itunes update I did as I was able to put music on my ipod touch a month or so ago. Is there some way to go back to an older version of itunes? I really have no idea what else to do since I followed every step on the trouble shooting page for windows 8.

    I had this problem too and my roommate solved it!
    Go to 'Settings'
    'Music'
    Scroll to the bottom and enter your password to log onto your home sharing
    Then connect to iTunes and sync!

Maybe you are looking for