Time Capsule Security: which one?
I seem to remember reading that there are certain problems one may encounter when using the Time Capsule's security levels, but I can't remember which security levels and what the issues were.
I know the security levels are:
1. password on a per disk basis, or
2. password on an account basis on Time Capsule
Hmm... The time capsule is a generic 'disk pool' however have you tried to access the data from within a different mac's sparse bundle directly?
I would expect the unix file permissions to kick in and at least prevent you from opening those files such as documents etc.
If you want something more secure, you're going to have to go for a dedicated NAS box or look at a PC solution such as FreeNAS to share out disk to servers/users and locked down, or use OpenSolaris and use iSCSI sparse bundles, I have a friend who does this and the security is such that he has four different disks shared out via iscsi to 3 macs and a PC, which use Time machine to backup to the 'chunk' of disk shared out via open Solaris's iscsi initiator.. A more elegant solution but one which requires some technical know how. The Mac's see that disk via the iSCSI connection on his lan using iscsi mac software-
this is basically how to do it : http://www.kamiogi.net/Kamiogi/FrameDragging/Entries/2009/5/25_OpenSolaris_ZFS_iSCSI_Time_Machine_in_20_Minutes_orLess.html
hth
D
Similar Messages
-
Hi
I just brought home a mac book pro 13" with retina and the airport time capsule . What one should I turn on/ hook up first? We have an existing router in the home and an old PC.
Suggestions?Turn off you cable/DSL modem, your computer, and the old router. Disconnect the computer's Ethernet cable from the old router. Replace the old router with the Time Capsule. Connect the Ethernet cable from the modem to the WAN port on the Time Capsule. Connect the computer's Ethernet port to one of the LAN ports on the Time Capsule using an Ethernet cable.
Turn on the modem and wait until the status lights indicate connection with the ISP. Turn on the Time Capsule and wait for the amber light to begin flashing. Open Airport Utility in your Utilities folder to configure the Time Capsule.
If a user guide came with the Time Capsule I suggest you follow it's instructions. -
I have a Time Capsule on which I back up 2 MacBooks and on my wife's machine she keeps having Airport Utility popping up all the time with a yellow button flashing on the left and a Red button on the right side with a "1" in the middle of it. Can any one tell me what is wrong. I read where when the yellow light was flashing there was a problem, but I am a novice at this and have no idea where to turn. It seems to be backing up on a regular basis.
On the Mac......
Open up Macintosh HD > Applicatons > Utilities > AirPort Utility
Click on the Time Capsule icon, then click Edit in the small window that appears
Click the Network tab at the top of the next window
Change the setting for Router Mode from the current DHCP and NAT to read Off (Bridge Mode), then click Update at the lower right of the window, and wait a full minute for the Time Capsule to restart to a green light.
Then.....very important
Power off the Time Capsule and your Arris modem/router for a few minutes
Start up the Arris first, and let it run a few minutes by itself
Start up the Time Capsule next the same way
Your network will now be correct, and your printing capabilities will improve.
If Time Machine backups do not occur now, post back and we will tackle that next. -
HT1175 How do you back up additional hard disks to time capsule? Which disks etc. to you choose?
How do you back up additional hard disks to time capsule? Which disks etc. to you choose?
I can read your question a number of ways.
If you mean a disk plugged into your computer you wish to include in Time Machine backup.. just make sure it is HFS+ formatted and remove it from the exclusion list in the TM preferences.
If you mean a disk plugged into your TC for backup,
You can plug a USB disk into a Time Capsule as long as it is compatible.. and the disk is formatted HFS+, ie Mac OS extended Journaled.
You need a USB powered hub if you want to use multiple hard disks and even one might still need a hub.
Not all external drives are recogised but for example the Touro Deskpro works fine.
You can buy them up to 4TB.. how much added space do you want.
Also notice that USB 2 on a TC or AE is slow.. I mean half the speed of the same disk plugged into your computer so consider if speed is relevant to you.
You cannot use TM to backup network disks.. again I am not 100% sure what the question means. -
I'm trying to connect a LAN printer, HP Color Laser Jet 3800dn, through a Time Capsule but no one on the network can see it. The printer works fine if I connect it directly to my iMac. Any suggestions?
Hi Clark
There is a good chance the printer is just getting auto IP internally..
Plug it into your TC. And then set to dhcp via the controls on the printer.
If you know the name of the printer it should be immediately available to the network.. but anyway, you can find its IP by printing out the test page. That will also give you the network name.
Most later HP printers have web access to the print servers.. just type the ip into your browser and see if it comes up.
From the Mac, you should then be able to set it up via the printer preferences. Most HP will just appear.. but if not you should perhaps delete the local version and then check again for network printers. -
Prior to problem: All 5 devices (iMac, Mac Air, iPad and (2) iPhone 4) were surfing wirelessly on Airport express.
Replaced AE with Time Capsule.
Problem: Wife's iPhone could not connect to T.C. Other 4 devices connect without problem. Wife's iPhone can surf other wireless networks. After doing a total shut down of all devices and restart of each, starting with 3rd party router, then T.C., then each device one at a time... wife's iPhone can connect, but Mac Air can not. Observed that in each case, the one that can't connect is the last one to be restarted and attempt to connect. Did this a 3rd time. I chose my iPhone to be the last to try to connect . My iPhone can't connect but all other devices are connected. Every case: last to connect can't connect.
Steps taken before realizing it was the "last device to try connecting" (back when I thought it was simply my wife's iPhone): Wifi Off/On. "Forget Network." Reset Network Settings. Power iPhone Off/On. Power T.C. Off/On. Turned T.C. wireless security Off/On. All these were done multiple times.
It appears there is no hardware issue since all are capable of connecting to T.C., just not at the same time. I don't know much about protocols and addresses. Could it be that T.C. is fouling up the assignment of an address or channel or route or whatever to the 5th device that tries to connect? Is the 5th device left without a address, channel or route to the T.C.?
My security is WPA2 Personal. It's on. The password is alphanumeric 9 characters. On my iPhone that can't connect, the satus wheel is spinning continuously beside my network's name. Tapping the blue arrow for more info shows the window that has "Forget this network" at the top, followed by DHCP, BootP and Static. DHCP is selected. The following fields are listed: IP Address, Subnet Mask, Router, DNS, Search Domain and Client ID. Most times, all of these fields are blank. Right now, the first two fields are filled in. IP address starts with 169 and subnet mask is 255.255.0.0
Please help.Right now, the first two fields are filled in. IP address starts with 169 and subnet mask is 255.255.0.0
That is auto IP and means the device was not able to pick up an IP from the dhcp server.
I am scratching my head.. it is not one I have seen with Mac stuff or on these columns since I started answering questions.. it is seen in mixed environments fairly often that stuff doesn't play nice with each other. But Mac - Apple has shown fairly consistent wireless functionality.
Is the TC brand new? Did you ring Apple and ask if they can sort it?
When you are using 100% apple environment, to me that is their job to figure out.
For what you can do, I would try and flash the TC back to 7.5.2 firmware. I have heard people say the latest TC that is not allowed but have a go.. if you run Lion certainly download and use exclusively 5.6 airport utility.
Is the TC set to router or bridge? Is the TC the only router?
Could you bypass at least the issue for now using the airport express plugged into the TC as an AP?? -
I've just had my time capsule for a couple of days now, and ignoring problems with the fan being on constantly which I am tackling seperately, I have a questions about security and how I wish to use the shared HD.
I wish to have the drive set up so that various users can back up with time machine to the drive, as well as using some of the space as extended storage for my computer (I'm out of HD space), so I would like this space to be only accessible by me. I would also like to have a section of the drive to be used as a shared storage space for music and general files that everyone can access. If the accounts option on the TC has a shared account then that would probably suffice.
The other option is perhaps partitions? Can i set the access up separately on different partitions so that one partition is shared and then each user has a folder on the other partition?No, Setting up user accounts just sets permissions to a folder in the name of the account created. It does not create accounts in exactly the same way OSX creates them. e.g. with drop box, shared, public etc..
TC sets up a 'virtual' partition.. i.e. does not divide up the drive in a conventional sense with partition mapping, but sets rules to folders. This a is more flexible way of managing users and files as it does not automatically restrict users to a particular amount of data (disk quota), it just allows all users to use the amount of space available until the physical drive is full.
Setting up an account with the name John Doe (for example) will create a folder on the TC with that name. When you mount the folder it appears like a Hard Disk on the desktop. You can set permissions on accounts to allow everyone to access. Worth setting up a new account and calling it 'Shared Items' or 'Exchange' or something like that, then allowing everyone to read & write to it. This will give folks the option to mount that virtual partition when they log into their own account. -
I have been using Time Capsule in combination with Time Machine for a while now, but recently found out that the data on it, is not protected with the same security level as it is on the Mac itself.
Let me try to explain myself:
Our home config consists out of one main Imac with 4 user profiles, and two macbooks all running 10.6.5 and a time capsule at 7.4.2
Time capsule is used to backup the data ( User dataset and subsets ) of the iMac and the two macbooks.
When I access the sparsebundle of the Imac on TimeCapsule through the Finder on the Imac, one gets access to Backups.backupdb and finally can browse through the different versions of the backup. Drilling down further to the individual file is possible, however if one is logged on as user1 on the Imac he will only have access rights to the files of user1, Files of all other users are blocked with the typical 'no access' sign. This is as expected.
The problem occurs if I access the same sparsebundle of the iMac, but this time through Finder on one of the Macbooks. To our big surprise any user on the Macbook has full access to all files of all four iMac users when drilling down up to the file level. The typical 'no access' sign never appears.
Same happens when iMac is used to access a sparsebundle from one of the Macbooks, which will give full visibility to all files on the Macbook.
I can't find any configuration options to remedy this.
All suggestion are welcome as I am very uncomfortable with this situation.Hmm... The time capsule is a generic 'disk pool' however have you tried to access the data from within a different mac's sparse bundle directly?
I would expect the unix file permissions to kick in and at least prevent you from opening those files such as documents etc.
If you want something more secure, you're going to have to go for a dedicated NAS box or look at a PC solution such as FreeNAS to share out disk to servers/users and locked down, or use OpenSolaris and use iSCSI sparse bundles, I have a friend who does this and the security is such that he has four different disks shared out via iscsi to 3 macs and a PC, which use Time machine to backup to the 'chunk' of disk shared out via open Solaris's iscsi initiator.. A more elegant solution but one which requires some technical know how. The Mac's see that disk via the iSCSI connection on his lan using iscsi mac software-
this is basically how to do it : http://www.kamiogi.net/Kamiogi/FrameDragging/Entries/2009/5/25_OpenSolaris_ZFS_iSCSI_Time_Machine_in_20_Minutes_orLess.html
hth
D -
I have a 1T Time Capsule and love it. It works just as advertised. But I have what is likely a rookie question. Since my cable modem is plugged directly into the time capsule, can others reach that drive over the internet? OS X has a firewall, I know, but it would seem to me that the time capsule is 'upstream' of my laptop; that the drive in the time capsule is on the other side of the firewall.
Please lay my mind to rest: there is some security to keep outsiders out of my backup data. Right?All,
I agree that "No one asked for it..." isn't a very compelling reason and that the average or even above average user isn't going know what SPI is or why they would want or need it. Someone in a NetGear forum did point out however that, unless you’re running commercial websites from your location behind this router, you probably don’t need SPI, which is used to defeat DOS attacks like PING and SYN floods.
I just purchased a NetGear WNR3500 router. It has SPI and 2 levels of NAT firewall security. The problem is that iChat won't connect with SPI enabled. So even though I have it I can't use it. It appears to be specifically an iChat issue with this router’s SPI because with SPI enabled a Windows XP PC with the AIM client connects without problem. I’m certainly not happy disabling a major component of my firewall as a workaround.
The other thing that makes me long for a Time Capsule is that I also just bought an Iomega MiniMax 500GB drive. If you're not familiar with it, it has the same design and footprint as the Mini, so a natural fit, right? The only problem is that it doesn't mount when the Mac boots. I have to power cycle the drive for it to mount. At this point, I'm considering it defective pending a resolution from Iomega.
So the question is - return both the router and the drive and get a Time Capsule? Operationally, how does everyone find the TC? Glitches, reliability, etc? -
Time Capsule only allows one Macbook be on the internet at a time!
So far no one even at Apple Care has been able to solve this problem.
My wife and i have brand new Macbooks. Mine, the latest 2.4Ghz black model bought in the UK and her's the 2.1Ghz bought in the US.
We both used the Orange livebox as our wireless router and it worked seamlessly (albeit only when security was turned off) until i purchased a 1TB Time Capsule.
I managed to get the TC up as our wireless router with the Livebox as the modem, but, bizarrely, it will only allow ONE computer to be on the internet at a time - and giving preference to mine. Basically, the second i turn my airport on - she loses connection! It's like my computer ***** the internet away from hers.
If hers is the only computer on in the house then it works perfectly.
I have spent hours on the phone to Apple Care and changed a number of the settings within Airport Utility, but the longest we got both computer running on the internet together was for about 20 minutes when i switched to Radio Mode 802.11n only (5 Ghz). For a moment we thought the problem was solved until i put the phone down and low an behold, she lost her connection once more.
Any suggestions?
Thanks in advance.Don't know what an Orange livebox is, but I will treat it as a DSL modem and assume the ISP uses a DHCP server. Make sure you have connected the modem to the TC WAN port.
Open AirPort Utility, select the TC, click on Manual Setup, click on the Internet tab.
- is 'Connect Using:' set to 'Ethernet' - set to this if not.
- is 'Configure IPv4:' set to 'Using DHCP' - set to this if not.
- is 'Ethernet WAN Port:' set to 'Automatic (Default)' - set to this if not.
- is 'Connection Sharing:' set to 'Share a public IP address' - set to this if not (if set to Bridge Mode then only one computer will be able to use the internet).
Click 'Update and wait for TC to restart.
Check the network settings on the client computers. Go to System Preferences/Network/AirPort:
- click on the 'Network Name:' roll-button, select 'Join Other Network...', enter 'Network Name and select the security type you are using, and finally, enter your Password and click 'Join'.
If ISP uses DHCP:
- click on 'Advanced', TCP/IP and confirm that 'Configure IPv4:' is set to 'Using DHCP', click 'OK'.
- click the 'Apply' button and exit System Preferences.
May also be wise to Repair Permissions using Disk Utility and to reboot your network hardware:
1. Turn power off to ISP modem and the TC, and shutdown computer - leave power off for 10 minutes.
2. Turn on modem and wait for it to complete its test cycle. Then turn on the TC.
3. Turn on computer and check your internet connection. -
Time Capsule: How can one limit size of Time Machine Backup?
So there appears to be no easy way of partitioning the hard drive in Time Capsule. If this is so how does one limit the size of the Time Machine backups folders?
I want to use the hard drive to act as a normal storage device for various files but I understand that Time Machine will keep on increasing the size of the backups folder until it eventually runs out of space on the hard drive partition. Since one cannot re-partition the hard drive how can Time Machine be allotted only a specific portion of the hard drive? I don't want the hard drive to be filled with Time Machine backup folders.Thanks BSP. Yes I am aware of the ability to limit the folders that TM backs up. I use this capability, But that certainly is not the solution I want.
I have not bought Time Capsule and probably will not buy it unless Apple fix this 'problem' and make the hard drive in TC behave like any other hard drive.
Why is it that Apple comes up with innovative designs which are let down by being 'crippled' in some way? Apple TV is another good example; can you steam from DVD Player? No. Can one steam a presentation directly from Keynote? No. With a little more thought Apple's products would be great. But, alas, this is not the case. -
Time Capsule - Secured Shared Disk anomaly
Hi,
Something quite worrying just happened and I'm unsure whether I can trust the TC to continue using it or whether I should just replace it. The TC is almost 2 years old and until now has reliably served as my DHCP router and Shared Disk with account. From Finder I attempted to mount my private shared folder as normal but the login details were refused. "Connect As" was showing in Finder which shouldn't appear when the account details are stored in Keychain. But sure enough in Keychain the connection details had vanished too. In Airport Utility the Shared Disk Account was nowhere to be found either with only the usual Data folder for Time Machine still visible. I mounted the Data folder and found inside a Users folder containing my missing files - around 400GB of my life's treasure! Thank the lord I seem to be able to access my files and am presently copying everything over to an internal disk on the Mac pro. Oddly enough what was once a restricted access folder requiring username and password now seems to be totally unsecured.
I share the TC over MobileMe so I can access it on the move. Could there have been a MobileMe event which caused this anomaly? I can't understand how the account data could have been lost, indeed moved inside the Data folder and the keychains appear to have been deleted on all the Macs in the house which use the same MobileMe account.ibosie wrote:
containing my missing files - around 400GB of my life's treasure!
Are you saying that was the only copy you have?
If so, count yourself as extremely lucky. Do yourself a favor and begin doing regular backups immediately. At the very least, back up your important, irreplaceable stuff. But do yourself another favor and back up your entire system.
That may be a bit tricky, as many backup apps (including Time Machine) won't back up a network drive, such as a Time Capsule. See Kappy's post on Basic Backup, complete with links to the web sites of each product. One or more of those will likely work for that.
While you're at it, make another set of backups, of the important stuff at least, and get it off-site, so you're also protected against fire, flood, theft, and direct lightning strike on your power lines. A portable hard drive is good for that, as are CDs/DVDs. Any of them can be taken to your safe deposit box, workplace, relative's house, etc. And there are services that let you do backups over the internet; since you're a MobileMe subscriber, you can use Apple's Backup app to back up some things to your iDisk automatically. -
According to Netflix, I need a "Security Key" for Time capsule so it can connect to my internet ready TV. What is that and how can I find it? I could communicate with the TV until I had to do a hard reset on the router to make the network work. My network is working fine otherwise. Thanks for any help.
You should not change the password on a wireless network unless you also change the name of the wireless network. Various devices store the network name and password information and if you change the password, the device still sees the same network name and thinks that it should use the old password.
Try changing both the name of the wireless network and the password on the Time Capsule.
Access the settings for the wireless network as follows:
Open Macintosh HD > Applications > Utilities > AirPort Utility
Click Manual Setup
Click the Wireless tab below the row of icons
Change the settings for both the Wireless Network Name and Password
Write those down
Click Update to save your new settings
Then look for the name of the new wireless network and enter the new password to connect on all wireless devices -
Airpot Time Capsule - Security Backup Postponed
I bought the 2Tb ATC less than a week ago. One of the purposes of acquiring it was for backing up two macs i've got at home. It all went smoothly at first: i managed to create a backup for the first one (not a big deal) and the next day when i started the backup for the second mac the next message appeared beneath the icon of time machine: "Security Backup Postponed".
When clicking on it, another message shows up: "The security backup disc is not available". Now, the second mac does backup every hour, but the first doesn't.
I'd really appreciate a solution. Thanks.
Note: you'll have to forgive my english since it's a foreign language to me. I've done the translation of the OS's messages myself so they're likely to be unaccurate.Reset the TC and start over..
Use all names that are short, no spaces and pure alphanumeric.. ie do not use the suggested Apple names.
So for example.. name of the TC.
MarcosTC
Wireless name. TC24ghz
and give a different name to 5ghz.. TC5ghz
Make sure the disk share name is .. data
With all names conforming to the standard.. try again with the second Mac. -
Being that Time Capsule can act as a wireless router, I'm interested in knowing more about its security or lack thereof.
Seems like most people would have a similar setup. (Cable) Modem > Time Capsule > Computer.
Being that the Time Capsule is just behind the modem, is it less secure than other drives going out FROM my computer?
Even when my computer is asleep I can hear the Time Capsule working away, sometimes late at night. I'm concerned that even though my computer is sleeping, activity and access can still be made from outside and that without my computer's firewall in the loop. I store important files on the Time Capsule, are they safe?
Does anyone know the vulnerabilities and strengths of the Time Capsule as a secure storage drive in this configuration?Being that Time Capsule can act as a wireless router, I'm interested in knowing more about its security or lack thereof.
Seems like most people would have a similar setup. (Cable) Modem > Time Capsule > Computer.
Being that the Time Capsule is just behind the modem, is it less secure than other drives going out FROM my computer?
Even when my computer is asleep I can hear the Time Capsule working away, sometimes late at night. I'm concerned that even though my computer is sleeping, activity and access can still be made from outside and that without my computer's firewall in the loop. I store important files on the Time Capsule, are they safe?
Does anyone know the vulnerabilities and strengths of the Time Capsule as a secure storage drive in this configuration?
Maybe you are looking for
-
Reg ora-12034 materialized view log on younger than last refresh
Hi, when i update my base table materialized view log shows the updated rows but when i refresh materialized view it wont show updated rows in materialized view and also there is no rows in materialzed log it shows error ora-12034: materialized view
-
OBPM process start after UCM check in
Hi People, I have a problem in my hand like this. When I check in a document in Oracle UCM a process in Oracle BPM needs to be triggered. This is not synonymous to invoking a BPEL workflow I think. Because I want to publish the document in ucm straig
-
Thinkpad W530 video to HDMI TV
I use a thinkpad w530 and would like to watch videos on TV. I do not have a docking station and I am looking to the type of cable that I need to order to connect my small DVI port to HDMI connection on TV. Found tons but they all relate to MAC's,
-
Droping temp table in after report trigger.
I am working on Oracle Report. I am trying to create a temporary table to run the report. I trigger that in 'before report' trigger. Now I want to drop this temp table after the report so I tried to drop this by using srw.DO_SQL('drop table temptable
-
Problem with imovie download from icloud drive
I recently logged into icloud.com from my windows 7 pc and selected the icloud drive icon. From there, I went into the imovies folder and then uploaded a short mp4 video (44mb) that I had saved on my hard drive. It was a video taken from an iphone a