Strange behaviour 10.7.1 Lion Server

My Macbook Pro (5,1) has been setup as a Lion Server (I have the issue of keepoing the thing awake but can live with that).
Two issues I am experiencing which I can not work out:
1) Wake on LAN (WOL) will not work via the Internet. I have a Time Capsule as my router and the Mac is hardwired over gigabit ethernet. It works fine on my LAN but will not wake the MBP over the WAN?
2) The local desktop keeps freezing when left running for any period of time. I am not sure if it is Lion or my setup.
The MBP is "docked" in a Henge dock it has all connections utilised (FW/USB etc).
I have an external display Dell U2410 connected via Mini Display Port and I am using the Magic Mouse (on Bluetooth) and allow this device to wake on Bluetooth is also enabled.
The Firewire is connected to a WD My Book Studio Edition II for Time Machine backups (as the Time Capsule is used by my MacBook Air for Time Machine Backups)
When I have finished on the machine I always log off the active user and power off the monitor.
I leave the machine running until it sleeps (where I can WOL if I need it while still working on LAN).
When I return after a period of time the local desktop (menu bar, dock etc) are totally unresponsive, I cannot do anything at all locally on the machine.
However if I log in via my MacBook Air using screen sharing I can drive the desktop totally normally?
I usually have to reboot the MacBook Pro in order to get the local desktop to be responsive again?
Has anyone else seen this or have any idea what may be causing these issues?
Many thanks in advance.......

I have solved 1) and I can now WOL over WAN but I am still experiencing issues with 2).
Has no-one else experienced issues with the local desktop becomning unresponsive?
If I leave the MBP up and running for any extended period of time I repeatably have this issue and it is driving me nuts.
I can find no particular thing that triggers this from what I can see.
The only way to resolve is to log in remotely via screen sharing and restart it!
Anyone? Please.......

Similar Messages

Strange Sleep behaviour on OS X Lion Server

Hi Guys,
I have a Mac Mini Server, For some reason even though i have told my Mini not to sleep under the Energy Saving settings in system preferences it will sleep after 15 mins of inactivity and can only be woken up by pressing the power button.
This is a server so i do not have any input devices installed and it is operated remote using screen sharing. there is however a monitor attached.
I have noticed when it goes into this sleep mode Screen Sharing goes off and just displays "connecting" message and the current image on being output on the monitor will just freeze.
if i hit the power button and then all is ok, the monitor will refresh to display the current image and screen sharing will suddenly connect.
Please can some one help, this is so frustrating.
Thanks

This has happened since the install, I remember installing the OS and it froze well at leat I thought it had, as the progress bar would not progress. However when I moved the mouse it woke up and the screen refreshed.
When I had Snow leopard running I didn't have this issue.
I will try this SMC reset though
Thanks

Lion Server hangs

I have a mini server that I updated to Lion Server and it seems like if someone is logged in, and then it goes into screen saver mode, then I can't log back into the machine. It's pretty much hung.
I'm really thinking about reverting back to Snow Leopard Server.

I have exactly the same issue! Do you have the system on a RAID or just on one single internal disk?
We have a Lion Server on a Mac Mini, with the system on a Promise RAID.
It worked fine for 3 months. Then suddenly it started to when I restarted the machine, everything seemed fine. For 2 minutes, then whatever application you start hangs up and ballooning forever. SSH works fine, but we really need to get into the GUI.
Strangely enough, all services the Lion Server is providing works fine and our users don't notice anything.
Tried repair permissions, start in safe mode and Disk Warrior. Nothing. Also checked the log for something weid, but nothing.
Anyone??

Slow Logon to Lion Server from Snow Leopard Machines

Hi Everyone,
I am usually okay with computers however something has been baffling me for a while now!
We have recently updated our server from an ageing Tiger server to a Lion server. (Mac Mini Server)
We have a suite of Mac minis that are running 10.7.4 and have no trouble connecting to the server in fact they sign a relatively quickly.
We also have a set of MacBooks that are currently all updated to Snow Leopard (10.6)
The issue we are having is with those MacBooks:
When the user attempts to access their network share from any of those MacBooks running Snow Leopard the login works however it can take up to 2 min to login. This does happen over the wireless network, however I have also checked it by plugging them in with an ethernet cable and they exhibit the same behaviour.
This is obviously quite frustrating for all the people using the MacBooks.
I got strange feeling that the check box somewhere that I've missed.
Any help would be greatly appreciated.

A Little bit more information:
All of the Users are Open Directory Users
I'm guessing that this may be an issue with the authentication process and for some reason it is taking longer on the Snow Leopard Clients?

APEX Listener and EPG - strange behaviour

Hi
For some years, I've used EPG for APEX but have struggled with performance particularly as I can have up to 150 student developers using at any one time.
I do a fair amount of work using ORDImage and have successfully developed APEX applications to upload image files and display full-size and thumbnail images.
After upgrading to APEX 4.1 (from 4.0), I decided to install APEX Listener standalone.
Before I did so I checked that my applications still worked in 4.1 and they did.
However, just installing APEX Listener but not configuring it (yet) has meant that my image display in a report using a procedure based on wpg_docload.download_file( l_ordimage_image.source.localData ) no longer works in EPG - the images are not displayed.
Configuring APEX Listener and running the same application through that DOES display the images.
So this part of the application works under APEX Listener but not under EPG.
My application also allows users to upload images from APEX_APPLICATION_FILES using standard code. Under APEX Listener after uploading, I'm left with a blank page with a wwv_flow.accept URL although the image does indeed upload. Under EPG it works as expected and I get a success confirmation.
So this part of the application works under EPG but not under APEX Listener.
Has anyone else come across different behaviour depending on the mode of connection?
Thanks
Brian
[Oracle EE 11gR2, Windows Server 2008R2, APEX 4.1, APEX Listener 1.1.3]

Hi Brian,
it sounds like you have both EPG and APEX Listener running on the same machine, so your problem might result from a port conflict. Note that both services use TCP port 8080 as default.
At least a port conflict would explain the strange behaviour in your case, some things working on one web server and some on the other.
Some parts of your initial post hint to that direction, e.g.
However, just installing APEX Listener but not configuring it (yet) has meant that my image display in a report using a procedure based on >wpg_docload.download_file( l_ordimage_image.source.localData ) no longer works in EPG - the images are not displayed.... because the APEX Listener only interfere with the EPG if it is at least running on the same machine as your database and furthermore, if it is unconfigured in terms of ist database connection, a port conflict might be the only way it could cause anything like that.
However, if you are sure that's not the issue, please check if you see any error in the APEX Listener's log for the following action you performed:
My application also allows users to upload images from APEX_APPLICATION_FILES using standard code. Under APEX Listener after uploading, I'm left with a blank >page with a wwv_flow.accept URL although the image does indeed uploadIf you actually see just a blank screen, something very bad must have happened and you should see some kind of stack trace there.
For further investigations, if necessary, it would be helpful to know how you deployed or started your APEX Listener and which JDK version you use.
For the moment, I still think the port conflict is my best guess.
You could avoid it by either changing the port for EPG (I'd not recommend that if you have other users still using it) or by changing the port for your APEX Listener.
-Udo

Strange behaviour of Runtime.getRuntime().exec(command)

hello guys,
i wrote a program which executes some commands in commandline (actually tried multiple stuff.)
what did i try?
open "cmd.exe" manually (administrator)
type "echo %PROCESSOR_ARCHITECTURE%" and hit enter, which returns me
"AMD64"
type "java -version" and hit enter, which returns me:
"java version "1.6.0_10-beta"
Java(TM) SE Runtime Environment (build 1.6.0_10-beta-b25)
Java HotSpot(TM) 64-Bit Server VM (build 11.0-b12, mixed mode)"
type "reg query "HKLM\SOFTWARE\7-zip"" returns me:
HKEY_LOCAL_MACHINE\SOFTWARE\7-zip
Path REG_SZ C:\Program Files\7-Zip\
i wrote two functions to execute an command
1) simply calls exec and reads errin and stdout from the process started:
public static String execute(String command) {
          String result = "";
          try {
               // Execute a command
               Process child = Runtime.getRuntime().exec(command);
               // Read from an input stream
               InputStream in = child.getInputStream();
               int c;
               while ((c = in.read()) != -1) {
                    result += ((char) c);
               in.close();
               in = child.getErrorStream();
               while ((c = in.read()) != -1) {
                    result += ((char) c);
               in.close();
          } catch (IOException e) {
          return result;
     }the second function allows me to send multiple commands to the cmd
public static String exec(String[] commands) {
          String line;
          String result = "";
          OutputStream stdin = null;
          InputStream stderr = null;
          InputStream stdout = null;
          // launch EXE and grab stdin/stdout and stderr
          try {
               Process process;
               process = Runtime.getRuntime().exec("cmd.exe");
               stdin = process.getOutputStream();
               stderr = process.getErrorStream();
               stdout = process.getInputStream();
               // "write" the parms into stdin
               for (int i = 0; i < commands.length; i++) {
                    line = commands[i] + "\n";
                    stdin.write(line.getBytes());
                    stdin.flush();
               stdin.close();
               // clean up if any output in stdout
               BufferedReader brCleanUp = new BufferedReader(
                         new InputStreamReader(stdout));
               while ((line = brCleanUp.readLine()) != null) {
                    result += line + "\n";
               brCleanUp.close();
               // clean up if any output in stderr
               brCleanUp = new BufferedReader(new InputStreamReader(stderr));
               while ((line = brCleanUp.readLine()) != null) {
                    result += "ERR: " + line + "\n";
               brCleanUp.close();
          } catch (IOException e) {
               // TODO Auto-generated catch block
               e.printStackTrace();
          return result;
     }so i try to execute the commands from above (yes, i am using \\ and \" in java)
(1) "echo %PROCESSOR_ARCHITECTURE%"
(2) "java -version"
(3) "reg query "HKLM\SOFTWARE\7-zip""
the first function returns me (note that ALL results are different from the stuff above!):
(1) "" <-- empty ?!
(2) java version "1.6.0_11"
Java(TM) SE Runtime Environment (build 1.6.0_11-b03)
Java HotSpot(TM) Client VM (build 11.0-b16, mixed mode, sharing)
(3) ERROR: The system was unable to find the specified registry key or value.
the second function returns me:
(1) x86 <-- huh? i have AMD64
(2) java version "1.6.0_11"
Java(TM) SE Runtime Environment (build 1.6.0_11-b03)
Java HotSpot(TM) Client VM (build 11.0-b16, mixed mode, sharing)
(3) ERROR: The system was unable to find the specified registry key or value.
horray! in this version the java version is correct! processor architecture is not empty but totally incorrect and the reg query is still err.
any help is wellcome
note: i only put stuff here, which returns me strange behaviour, most things are working correct with my functions (using the Runtime.getRuntime().exec(command); code)
note2: "reg query "HKLM\HARDWARE\DESCRIPTION\System\CentralProcessor\0" /t REG_SZ" IS working, so why are "some" queries result in ERR, while they are working if typed by hand in cmd.exe?

ok, i exported a jar file and execute it from cmd:
java -jar myjar.jar
now the output is:
(1) "" if called by version 1, possible to retrieve by version 2 (no clue why!)
(2) "java version "1.6.0_10-beta"
Java(TM) SE Runtime Environment (build 1.6.0_10-beta-b25)
Java HotSpot(TM) 64-Bit Server VM (build 11.0-b12, mixed mode)"
(3) C:\Program Files\7-Zip\
so all three problems are gone! (but its a hard way, as i need both functions and parse a lot of text... :/ )
thanks for the tip, that eclipse changes variables (i really did not knew this one...)

What to do when SLS - Lion Server Upgrade & Migration Fail

Hi everyone,
I've had a tough time over the past week trying to updating my SLS to LS. (It was a slow week at the office so despite the warnings in these discussions I wasn't disturbing anyone, so I thought I'd try...) Both an upgrade to the current running system and a clean install on a wipe of that hard drive stall at the "Configuring Services" "Upgrading services" screen of the set up process. The migration path eventually fails, and as far as I can tell, it seems that the upgrade path just stays there forever.
Don't worry - I'm doing this all on a Super Duper! clone of my primary drive, so I can go back to SLS whenever I need to.
BUT, I can tell that the server's status is at least partially okay, even in this stalled setup state - iChat seems to work on various clients, and I can use Server Admin to see stats and services, etc.
So despite the discomfort of a failed install, part of me feels like I'll be fine with the LS if I can just figure out how to move my old data into the right places for the new system to use it. But I can't find any guidance for that. I'm looking to migrate OD (seems to have migrated fine), iCal, iChat, Address Book, Wikis, Time Machine, and File Sharing (which should be trivial to set up, I reckon).
Can anyone point me in the right direction?
Thanks very much,
Willhaus

Okay, so I've had some marginal success.
After leaving the hung install for a ridiculous amount of time (24+ hours), I realized that I could click the help button, and from the help window click the "further info about Lion Server" link to launch Safari. That gave me access to Software Update from the Apple menu, which then let me install the latest Safari update which conveniently enough requires a restart.
After restart, the Server Migration Assistant kicked in again, but failed quickly in the upgrading services stage. Another restart, and the sever finally booted more or less normally.
The strange thing was that although chat services worked fine during the hung install, all OD-related services stopped working after restarting. Turns out there were no users or groups in OD. Importing them from an OD archive, though, restored them.
So now iChat works great (even the old chat longs migrated successfully), and AFP is properly sharing our volumes across our studio's network. So our server is limping along.
The other services we need that aren't up yet are Wiki and iCal. Some info about those:
Wiki: administrators can log in and see all wikis just fine. That's awesome because it means the data migrated successfully. Any non-admin users can log in, but are then get a wiki-styled page that says simply "No wikis found". It's as if they don't have permissions to see the wikis, even though in Server.app they belong to the groups that the wikis are associated with. I've tried removing and re-adding users to groups, but that doesn't seem to do it. Any ideas how to fix this?
Calendar: While I can't get this to work, it's not like it's completely lifeless. An account in a client Lion iCal configured with the proper Lion settings returns an error that reads:
"The Server is Busy or Unavailable.
"The server at myserver.com is currently unable to handle the connection for account “ Calendars” due to a temporary overloading or maintenance of the server. If this continues you should contact the server administrator.
"You may try to connect to the server again or take the account offline."
As a logged in administrator, in a wiki clicking on Calendar in the nab bar goes to the calendar style page with an unending dialogue box that reads "Getting events from server". And clicking on Calendar from Home page footer takes me to the URL https://myserver.com/webcal with an error that says:
"Service Temporarily Unavailable
The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.
Apache/2.2.20 (Unix) mod_ssl/2.2.20 OpenSSL/0.9.8r DAV/2 Server at myserver.com Port 443"
Again, at least I'm confident that the data migrated properly - I can find all the calendar data in it's proper new location - but either the service won't start or something's not configured correctly. I've tried chaining the hostname and restarting the service about a billion times. I've got no idea what to try next. Any ideas?
Thank you so much,
Willhaus

Lion Server: iOS 5 clients can't connect to Address Card Server

I have set up shared accounts on the server for Calendar and Address Book (family) sharing. Although I can add and use the Address Book shared account on OS X Lion clients, I can't get this to work on iOS 5 clients (iPhone nor iPad). I keep on getting "CardDAV account verification failed".
Calendar sharing works just fine on both OS X and iOS5 clients
Let me briefly describe my setup and observations:
Server:
Running Lion Server 10.7.2 on Mac Mini (server)
Using SSL connections with keys generated during set-up of the server
Portforwarding in router (ao) for 8008 and 8843 (iCal and Address Book)
Created shared accounts on server for Calendar ("sharedcalendar") and Address Book ("sharedcontacts")
In the DNS server I created services in my primary zone for "_caldavs._tcp." and "_carddavs._tcp." both on port 8443
OS X Client (Calendar)
Created additional CalDAV account in preferences (user "sharedcalendar")
Left the server settings untouched (server path, port "auto" and using SSL but not Kerberos)
Created in "sharedcalendar" different calendars and reminder lists for the family members which each can access from their OS X client
This account is now set-up through Profile Manager (tried this with Address Book as well but didn't make any difference)
iOS 5 Client (Calendar)
Once tested on standalone and got this working I'm now using the Profile Manager to push the definition of the shared account to all clients
Hostname with port 8443 (default)
Left Principal URL blank since it was optional
User "shared calendar" with the appropriate password
Ticked "Use SSL"
OS X client (Address Book)
Created additional CardDAV account in preferences (user "sharedcontacts").
Left the server settings untouched (port 443 using SSL)
iOS 5 client (Address Book)
In the settings add a CardDAV account (server, user "sharedcontacts", password, description).
First error message "Cannot connect Using SSL. Do you want to try setting up the account without SSL?". When I press continue I get the error "CardDAV account verification failed"
If I then save the account details still and edit the account I can access the "advanced settings". When I change to SSL I have tried port 0 (default value), 8443 (the one that's listed in the documentation) and 8843 (which is used by default if you try to set up the
account in Profile Manager). All to no avail, including Profile Manager
Observations:
Lion Server app nicely lists both Calendar and Address Book Server as active (plus Profile Manager, File Server, Web server and Wiki server)
When I access my server home page, Calendar is listed in addition to other services (Mail | Calendar | Change Password | Profile Manager) but not Address Book. Is this normal behaviour? i.e. can't Address Book entries be changed through a web interface?
Address Book on OS X client uses 443 for SSL but does not require me to define port 8443 for secure iCal or Address Book server communications
Lion Server Profile Manager specifies port 8843 as port for SSL communication. I only saw 8443 listed in documentation
The response "can't connect .." or "account verification failed" happens very quick which make me think either the verification doesn't even leave the iPad or there is something wrong in the SSL connection
Since iCal set-up works nicely using the same ports I am puzzled why it doesn't work for Address Book
Your solutions or suggestions how to investigate are most welcome,
Erik

Thanks for joining the discussion.
Although port 8443 is mosten quoted as correct port for CalDAV and CardDAV, port 8843 can be found both on Apple's website and other places:
see Technical Note 1649 to find port 8443 listed for iCal and port 8843 for Address Book
Mac OS X Lion Server for Dummies (sic) lists port 8843 on pages 236 and 238 but port 8443 in many other places
when you want to push iCal and Address Book information with Profile Manager, Profile Manager lists port 8443 for iCal but port 8843 for Address Book as default:
So I hope you understand I'm somewhat puzzled.
I did get the Address Book working for my Lion desktops with the all the necessary certificates as far as I know, just not for the iOS devices (iPhone and IpPad). iCal sharing from Lion Server works fine on both Lion and iOS devices.

How do I set up my Time Machine and Mac Mini with Lion Server so i have one wifi loop in the house?

HELP!
So I have had a Time Machine wifi loop at the house for approx. 6 years. I run two Macbooks, 2 iPhones, 2 iTouch and a Samsung Smart Blueray on the loop.
I just bought a Mac Mini with Lion Server. When setting it up I'm not sure what or how I managed to do, but I now have 2 wifi loops, one doesn't lock and niether will support the Samsung BlueRay. Also, each time I want to go online with one of the other Mac devices i have to relog into the wifi loop.
Can someone please walk me through the fix. The mac Mini is plugged straight into the Time Machine to recevie its internet connection.
Thanks!
John

You often see this limit of 10 clients in wireless hotspots but I have yet to see it in an adsl modem.. most strange way to pay for a service that is really irrelevant how many clients you use.
Have a go .. I recently setup a TC to help a guy run his Roku.. and this setup worked well.. I have no idea if it can work in your case.
Lets say the IP you get is 192.168.2.1-10 .. doesn't matter what it really is. And the adsl modem is 192.168.2.254
(Assuming they are private addresses.. if they are public IP you can just use the DHCP and NAT. )
But go to the airport utility.. I think you need to run v5 at least to change DNS.. but you can do the same thing in v6 using static but no dns changes.
Now you set the IP of the TC manually.. This address might need to be in the dhcp range of the modem to work. You can set the DNS to same IP as the router address.. ie home address of the modem. Or you can use another DNS.. whatever you like.
Then set DHCP for clients that will join.. this can then expand the scope of addresses..
It worked without a NAT error.. although I am not sure exactly how.. on paper it should not be able to work but did.. have a go.. otherwise there is perhaps another way.. but it is complicated.
Give us an example from a computer plugged into the modem of what IP .. subnet mask .. Gateway and DNS you get. Then I can fine tune the values for it.

Lion Server 10.7.4 VPN service not using my Active Directory domain for authentication

I have Lion Server 10.7.4 setup on a Mac Mini and I have enabled the VPN service for both L2TP and PPTP. The Mac Mini is joined to my Windows Domain at a functional level of Server 2008 R2. I have set the authentication paths to point to my domain in Directory Utility.
What I would like to have happen is for my laptop to be able to VPN into my office network remotely using domain credentials and not local account credentials on the Mac Mini itself. This is a process I have done numerous times on Windows boxes, but for some reason the only way I can get the VPN to work on this instance of Lion Server 10.7.4 is by authenticating using local accounts only.
Does Lion Server 10.7.4 only authenticate VPN users based on it's local account schema? Or can it truly authenticate against an active directory domain?
Any suggestions or help is greatly appreciated. Thanks,

Hi g-pirtle,
Yes, I had already done that a few days ago. I was able to add the desired AD group to the allowed users/groups for the VPN service. Thats exactly what is so weird about this...it allows me to search for and add an AD user or group to the list of allowed users/groups, but then when I actually try to use a domain account to authenticate to the VPN is just gives me the "cannot authenticate" error. Very strange.
I wondered if for some reason Apple is only allowing local accounts to be authenticated against. Sounds crazy, but I cannot for the life of me get this to work. I also wondered if Kerberizing the server would help, but when I go to join a Kerberos realm in Open Directory inside of Server Admin, it just has no realm listed in the drop down menu.
Other than that, all other aspects of the Mac Mini being joined to the AD domain seems to be good. I'm really stumped here...
Thanks again,

Strange behaviour: two servers on the same port

Hi!
I hope this is the right section for this post. I need help about a strange behaviour involving a ServerSocket.
For my thesis I need to write a program that receives data from a pre-existing DSMS client, filters them and then sends them to a pre-existing DSMS server. And here is my problem: if I try to create a ServerSocket on the same port of the DSMS server, my program throws no exception, and the servers seem running on the same port. This is a behaviour that I'd like to avoid, but I cannot understand what the problem is. Can you help me?
The source code of the DSMS server can be found here (it's written in C++): http://infolab.stanford.edu/stream/code/stream-0.6.0.tar.gz
The source code of my server class, instead, is this one:
import java.io.*;
import java.net.*;
public class ThreadGenerator {
     private ServerSocket server;
     public void connect(String servPort, String cHost, String cPort) {
          try {
               server = new ServerSocket(servPort);
               System.out.println("SERVER running on port "+servPort);
          } catch (BindException e) {
               System.out.println("Address already in use!");
          } catch (Exception e) {
               System.err.println(e);
          try {
               while(true){
                    Socket client = server.accept();
                    StreamThread T = new StreamThread(client, cHost, cPort);
                    T.start();
          } catch (EOFException e) {
               System.out.println("Server closed connection!");
          } catch (Exception e) {
               System.err.println(e);
}I'm programming on Mac OSX Tiger, with Java 1.5.0.
Thanks in advance for your help.

The problem is still happening to me, I tried in this very moment. The code I'm using is the one I posted, and the second server is the one that I linked. I don't think there's anything else to add.
If you're sure that the problem is not in my code, then it means that it is in the linked server, which partially solves the problem. But I'd like to know, if it's possibile, if there is any other way to check if the port is already in use.

Lion Server not reading Active Directory Groups reliably

I am trying to upgrade one of our XServes from Snow Leopard Server to Lion Server and am running into a strange issue with our Active Directory based users and Groups.
The current Snow Leopard Server serving files from a XSan volume is running fine, though we find a very long Lag time for Windows users to connect. Once a few users have connected the lag seems to go away, but it is still not nearly as fast as Mac users connecting or Windows connecting to a PC server.
So I have connected a second Xserve to the SAN and performed a clean install of Lion Server. Initially while it would find my Active Directory Groups it would not import any of the users, so obvioulsly no one could connect. In a last ditch effort I installed the beta of 10.7.4, which seemed to resolve the issue for a small group of test users. However as I expanded the test I found that some users would get a message that the were no resources available to them, or they didn't have the correct permissions. This is very strange as everyone is in the same group so should have the same permissions. As a test I took one of the user accounts and created a new share and gave him R/W permission to that share and suddenly all of the shares that he should have had permission to in the first place popped up.
The only thing that I can think of is that we have such a large Active Directory structure that the authentication is timing out or reaching some user limit and stops looking. (we have over 50,000 users and thousands of groups spread through multiple OUs in the AD structure)
The new Server.app in Lion looks nice, but it does not seem to have nearly the robustness of the previous Server Admin tools. For instance, I never needed or wanted to setup a "Golden Triangle" but with Lion it is required. Perviously I could search for AD users or groups and drag them from the search window to the share to assign permission, now even though I've imported the groups and users it needs to search the entire directory when assigning permissions - why can't it see the groups that are already there? Why can I run a dscl search and find a user or group instantly, but the Server.app hangs for 5 minutes and shows 0 results?
Has anyone found a way to make Lion Server work in an enterprise environment?

Yesterday morning I bound a 10.7.4 server to our AD, and in the afternoon I eventually saw all the AD users, groups, etc show in Workgroup Manager. Now, with dscl, I can see all the AD user and group records, and with Workgroup Manager, I can search the groups, users, and computers, but with the Server.app, when trying to create new group of the type "Imported group from another directory", the searches returned nothing. Directory Utility can show all the AD information also. Our AD has thousands of user record, and so it is reasonable that it may take some time for the Mac server to get all the info. But from the add users or groups interface, I just could not get any search results. What could be wrong then?

OS X Lion Server hangs on install ("authenticating")

I'm trying to update my headless/keyboardless/mouseless Mac Mini Server (mid-2010) running OS X 10.6.8 Snow Leopard Server. I've been able to download Server.app from the App Store without problem, but when I run it, it asks for my admin password and hangs at the "Configuring Services" dialog with an "Authenticating" message in the bottom left corner. It appears to be hanging at this authentication bit.
WHAT I DID
Installed Lion.
Downloaded Lion Server from App Store.
Launched Server.app.
WHAT I EXPECTED
Lion Server to install.
WHAT HAPPENED
Hangs at "Configuring Services" dialog with an "Authenticating" message in bottom left corner.
Eventually times out with a "The request timed out" error message.
Help?

I had the same ""The request timed out" error message", with Mac mini server 2010 version.
I'm going to crazy for this strange bug.
It still can login OS succesfully, but the server app seemed something wrong on my system.
(Now, I can't login the Server even the correct password is entried)
You can see the Server app is not "INSTALLED" situation from the following photo.
but when I click "INSTALL" server app,
It didn't have any help if I choose Software Update frim Apple menu.
So I tried to delete the server app, the click "INSTALL" again,
such texts shown,
Since both Lion & Lion Server already purchased on 19 July,
I just click "Buy Both", I remembered it seemed both apps begin re-download,
but the Server app still not work, can't login anymore(my password unrecognized),
still "not INSTALLED" on Mac app store Purchase record,
Then I got another receipt from Apple, the purchase became double-counted.
After reporting the problem to Apple, refund was done.
But My Server.app was still in a very strange situation.....
I only tried re-install server.app but without whole system re-install in the above case,
maybe I will try to click "Buy Both" again,
try to Re-install the whole system later to see if the bug disappears.

A lot of problems with Lion Server in Mac Mini Server

I have a new Mac Mini Server and I have a lot of problems.
The server application works well for a day, then start to have problem, for example: I can not change the configuration of the share folder, I add a new user but he can not see some folders.
Then if I login the Mac Mini with another user, he can not see the starting folder and if you open a new folder you see a lot of strange documents.
Later, with administrator user, I can not login the server application, I put the user name and password but it refuses it (user name and passowrd are correct)
In the end I also can not login the computer.
I reinstalled the Lion Server 2 times but nothing change, after 2 days it doesn't work like before.
I'm very upset, this is the first time in more then 20 year I have a problem with an Apple computer.
What can I do?
Please help me
Thanks

Turribeach, Thanks for you time.
1. It was not a question
3. Yes, i have read platforms, but not supported datasources. Now i see, that BI 11g support as datasource Oracle DB 9.2.0.7 or higher. I am sorry.
4. I'm using OCI connection type
Now i recreate Database in Physical schema and answers is showing report data for me! But only from one table, when i use columns from to tables from one datasource, i geting error:
Error View Display Error Odbc driver returned an error (SQLExecDirectW). Error Details Error Codes: OPR4ONWY:U9IM8TAC:OI2DL65P State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 43113] Message returned from OBIS. [nQSError: 46008] Internal error: File server/Utility/Server/DataType/SUKeyCompare.cpp, line 875. (HY000) SQL Issued: SELECT s_0, s_1, s_2 FROM ( SELECT 0 s_0, "Ora10g"."hierarchy_obj_cust_v"."sort_order" s_1, "Ora10g"."NSI_SCHEMA"."SCHEMA_NAME" s_2 FROM "Ora10g" ) djm
Edited by: serzzzh on 03.09.2010 3:44

Strange behaviour from new 2012R2 in old domain

Hi all,
At work (education level), I'm starting to take charge of windows admin, so beiing a noob admin I'm finding strange behaviours that I hope you can help me solve them all :-)
We've one (big) domain with about 5000 computers (workers and students all together), and around 50000 users (again, workers and students all together) setup like this:
DC-DOMAIN-1:
Windows Server 2008R2
Shares NETLOGON and SYSVOL
DC-DOMAIN-2:
Windows Server 2003 R2 x64
Shares CertEnroll, NETLOGON, SMSLOGON, SYSVOL
Checking RootDSE, I see 'domainControllerFunctionaly is Windows 2003' (DC-DOMAIN-2)
So, with this setup, I've noticed these strange behaviours, hope list isn't too big (guess there will be more behaviours but these seemed too odd):
1) On DC-DOMAIN-2, WinServer 2003 eventlog, inside 'Directory Service', I found this warning event ID 1083 (Source NTDS Replication):
Active Directory could not update the following object with changes received from the domain controller at the following network address because Active Directory was busy processing information.
Object:CN=<an user name>, CN=Users, DC=DOMAIN
Usually followed by an information event (eventid 1955) which says:
ctive Directory encountered a write conflict when applying replicated changes to the following object.
Object:
<SAME USER OBJECT THAN PREVIOUS EVENT ID>
Time in seconds:
0
Event log entries preceding this entry will indicate whether or not the update was accepted.
A write conflict can be caused by simultaneous changes to the same object or simultaneous changes to other objects that have attributes referencing this object. This commonly occurs when the object represents a large group with many members, and the functional level of the forest is set to Windows 2000. This conflict triggered additional retries of the update. If the system appears slow, it could be because replication of these changes is occurring.
User Action
Use smaller groups for this operation or raise the functional level to Windows Server 2003.
And having as result that user being blocked in domain.
2) I've added a new print server based on Windows Server 2012R2 (running inside an updated ESX 5.5 with VMXNET3 ethernet adapter as recommended by vmware), and seen in the event viewer these warnings/errors:
At System log:
Error Event ID 5783, Source NETLOGON:
The session setup to the Windows NT or Windows 2000 Domain Controller \\DC-DOMAIN-2.fulldns.name for the domain DOMAIN is not responsive. The current RPC call from Netlogon on \\PRINTSERVER to \\DC-DOMAIN-2.fulldns.name has been cancelled.
I've seen Event ID 5783 with DC-DOMAIN-1 too....
Error Event ID 5719, Source NETLOGON:
This computer was not able to set up a secure session with a domain controller in domain DOMAIN due to the following:
The remote procedure call failed and did not execute.
This may lead to authentication problems. Make sure that
this computer is connected to the network. If the problem persists, please contact your domain administrator.
ADDITIONAL INFO:
If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.
At Microsoft-Windows-TerminalServices-RemoteConnectinoManager/Admin found also this warning:
Warning Event ID 20499 Source TerminalServices-RemoteConnectionManager:
Remote Desktop Services has taken too long to load the user configuration from server \\DC-DOMAIN-2.fulldns.name for user administrator
3) If I try Group Policy Modeling on DC-DOMAIN-1 (server 2008R2), everything works fine, no matter if I try it against DC-DOMAIN-1 or DC-DOMAIN-2, but if I try this from the Server 2012R2 (the one from point 2), I get this:
Simulation against DC-DOMAIN-2: Gets executed, but all GPO show as inaccessible, empty or disabled.
Simulation against DC-DOMAIN-1: Sometimes it gets executed as DC-DOMAIN-2, sometimes I get an error saying query can't be executed.
4) From server 2012R2, I usually manage printing GPO. If I click on the domain root (GPMC, forest, Domains, DOMAIN-NAME-ROOT) right pane, I get a pop up saying:
'A processing error ocurred collecting data using this base domain controller. Please change the base domain controller and try again'
After closing popup, right pane says something like 'DC-DOMAIN-2.fulldns.name' is the baseline domain controller for this domain.
No infrastructure Status information exists for this domain.
Click the Detect Now button below to gather infrastructure status from all of the domain controllers in this domain.
Pressing 'Detect Now' does nothing, and trying to select New Baseline DC shows again same pop up than before.
5) Last, but not least, I've feeling that GPO takes too much to apply. I've found scenarios in which even after executing 'gpupdate /force' correctly on client computer either local or domain admin, I can't see the new changes (gpresult says it has been
updated though). But couldn't find anything on eventlog that informs about problems with GPOs...
For all these strange behaviours I've noticed in last month that I started checking things as sys admin, I believe domain is damaged, or something is wrong there (not just my new server 2012R2, even if it's running inside an ESX, blehh), so please, any hint
on what to check, what to change, what to fix, would be highly appreciated.
Thanks in advance.

Hi Paul,
Honestly, I'm still trying to figure out all broken things reported by tests :( Guess Jesper's suggestion about adding a new 2008 DC to get rid of 2003 and start checking again after that may be best option.
I'll try to summarize list of things I believe are wrong:
running
DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log for every DC, shows different errors. They show things such as:
another domain running here (not administered by us, only relationship is that our users are shared with that domain, nothing else) appear when Printing out pDsInfo (as if they were DC of our domain too, but they do not even share RootDomain). Guess it
may be for a bug old sys admin had when clonning from his 2008R2 template, that forgot to change SID... I already noticed 1 year ago our print server shared SID with those DC, guess there may be more servers sharing SID too :-(
Within Starting test: Replications, I see few messages at Replication Latency Check, such as the one for CN=Schema, CN=Configuration, DC=<ourdomain>:
Latency information for 35 entries in the vector were ignored.
35 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC)
On Services test, I see an
Invalid service type: RpcSs on DC-DOMAIN-3, current value
WIN32_OWN_PROCESS, expected value WIN32_SHARE_PROCESS
On SystemLog, I see LOTS of warnings/errors such as:
A warning event occurred. EventID: 0x80000002
Time Generated: 07/28/2014 08:21:54
(Event String (event log = System) could not be retrieved, error
0x503)
An error event occurred. EventID: 0xC0000003
Time Generated: 07/28/2014 08:22:18
(Event String (event log = System) could not be retrieved, error
0x3afc)
Missing entries on DNS (we've a static DNS)
netdiag.exe /v > c:\netdiag.log Showed again DNS problems such as our primary DNS pointing to all DC, secondary
DNS pointing just to DC with FSMO roles,...
repadmin.exe /showrepl * /verbose /all /intersite > c:\repl.txt Gave no errors, now I must check in detail
if every replica is correct
And finally,
dnslint /ad /s "ip address of your dc" gave more DNS problems:
One or more DNS servers may not be authoritative for the domain
One or more DNS servers did not respond to UDP queries
One or more zone files may have expired
SOA record data was unavailable and/or missing on one or more DNS servers
Sumarizing, guess it will be better to fix DNS problems, promote new 2008R2 DC to get rid of 2003 one, promote domain to 2008 too, check again for messages and relationship with other domain, and then come back here for support if needed
EDIT: Almost forgot to talk about SYSVOL folder. As said before, there are 426 GPO folders inside Policies. Of them, 375 have an inetres.adm files in it (smallest one 1398 KB, almost all of them 2307 or 2707 kb)....

Strange behaviour 10.7.1 Lion Server

Similar Messages

Maybe you are looking for