Unable to secure websites with network groups (OD)

i wanted to secure a single website to a group of people and was happy to see i could use Access Group in the websiteconfig screen in Server.app.
when i add a group you are presented besides the local groups, also the network groups (server is OD Master).
but when i choose a network group the website doesn't allow people to log in?
when i choose a local group the website does allow?
what i don't understand is the Realm ID??
i do find that back in the conf file of the website but why this number ?? i don't know
</IfDefine>
AuthType Digest
AuthName "Realm ID 43356412"
<Limit PUT DELETE PROPPATCH PROPFIND MKCOL COPY MOVE LOCK UNLOCK>
hope that this makes sense to someone and give me some pointers where to look to make this work
(btw this did work before upgrading to Yosemite and Server 4 i only can't remember if there was also a strange RealmID)

PART 2:
Did a complete reinstall and now I'm not even getting an error--login window simply shakes.
-Running AFP (for user home folders), DHCP, DNS, OD, and Software Update.
-DNS appears functioning (host, dig, etc all work from my client machine). It is set in the Network Sys prefs.
-OD lists LDAP server, PW server, and Kerberos are all running, LDAP search base and Kerberos realm are correct. The Kerberize... button does appear in the settings tab (not sure if it should on 10.6...it wasn't there once I Kerberized in 10.5). If I click it and enter the credentials, it doesn't give any confirmation and just comes back up with the credentials box until I hit cancel.
I have one user in my WGM, besides the admin called "TestStudent". On my client machine, I go to the Login options and just allow specific network users and TestStudent appears in the list, so I'm able to see the directory in some way. It just isn't accepting it as a valid login.
What other things do I need to check, since it appears to me that everything essential is running properly... I can provide logs if needed.

Similar Messages

I can't access this secure website with the new fireforx upgrade but I could before the upgrade.

As above. What can I say-I have tried everything listed on the support forum website. I had no problem accessing this secure website, which is my work email, before I upgraded to Firefox 4.0. I would prefer not have to go back to the previous version if possible. I don't like IE because it is just too slow, but right now I have to use it to access this website. I have windows firewall and have allowed firefox.exe as an exception. Any suggestions as this is very frustrating. Thanks

You should be able to use the OpenVPN Connect app running on your iPad to connect your iPad to the VPN directly. It is an official OpenVPN client for iOS devices.
In what way is it "not compatible"? Have you tried it? Tunnelblick is an OpenVPN client, so your school's VPN is using the OpenVPN protocol. That means any OpenVPN client should be able to access it. (It is possible, but unlikely, that your school uses encryption that is not available on the iPad, but that would be very unusual.)
Otherwise, a remote control app on your iPad would let you control your Mac at home. "Back to My Mac", for example, would allow you to control your Mac remotely. The tricky part of this is that usually a VPN is set up to send all Internet traffic via the VPN server, and I'm not sure how that would work with "Back to My Mac".

Open File - Security Warning with Network-based Silent Install of CS4

I am attempting to run an enterprise deployment of CS4 Design Standard Edition onto a pool of WinXP Pro workstations. I placed all of the install files on a networked server running Windows 2003, and generated from there all of the requisite .xml files (install, uninstall, and override files). From this network share, I can successfully run a silent install.
HOWEVER. Multiple times (two or three) during the course of the silent install, I receive the same pop-up security warning from Windows XP (definitely an OS message, not anti-virus or other) that reads as follows:
Open File - Security Warning
Do you want to run this file?
Name: AIRApplicationRunner.exe
Publisher: Adobe Systems Incorporated
Type: Application
From: (server IP address)
I have tried excluding Adobe Air from the installation package, but I still receive the same security prompt. This is sufficiently a hassle to have to click through these prompts in a silent install. But more importantly I am unable to run the silent install as part of a logoff script because for all intents & purposes it is no longer a silent install (i.e. it requires user intervention). To top it off, I found when testing the logoff script the prompts are suppressed and the installation fails prior to the bulk of the installation (Photoshop, Illustrator, & InDesign).
I'm sure that I could run the install by copying all of the files to each local workstation, but again that would defeat the purpose of an easy, network-based install. In the past I was able to install CS3 in this fashion with no troubles, which of course did not include Adobe Air.
Can anybody offer a suggestion as to how to disable these security messages, or alternately, how to entirely exclude Adobe Air from the install package? I have found a VB script that is supposed to address the security warnings issue, but to run the script also requires the user to accept it at a security prompt.
Thanks in advance for any assistance!
-Dan

I'm now able to deploy design suite premium cs4 successfully.
The issue for me was that the AirapplicationRunner installs some useless software. I worked around the issue with the Airapplicationrunner prompt by removing any apps that are installed using that method. By "removing" I mean marking that app as "donotinstall" in the deployment file. The apps I removed are these adobe codes for adobe media player, adobe.com, adobeair itself. The below is from my deploy.xml file used for the silent workflow:
donotinstall
donotinstall
donotinstall
If you mark those three adobe codes as "donotinstall" the prompt never appears and the real apps get installed just fine.

Unable to use scan with networked HP LaserJet M1536dnf MFP using Mac OSX, but able to print.

Thanks for any help.
I'm using an HP LaserJet M1536dnf MFP.
It is networked wirelessly via an Apple Extreme and prints just fine over the network but will not scan.
Yet, it scans just fine when I move the printer's USB cable from the Extreme directly to the MacBook Pro (a bit of a hassel).
When I try to scan over the wireless network, I'm able to go through the scan driver interface and see the printer, but when I click on "Scan", I recieve this error message:
"Scanner communication cannot be established."
"HP LaserJet M1536dnf MFP is currently unavailabe. Ensure cables are connected.. etc."
I'm running OSX 10.8.3 on an old MacBook Pro (2008)
MacBookPro3,1
Processor Name:   Intel Core 2 Duo
Processor Speed:   2.4 GHz
Number of Processors:   1
Total Number of Cores:   2
L2 Cache:   4 MB
Memory:   4 GB
Bus Speed:   800 MHz

Hello, DP Photo, sounds like a scanning issue with the software. To start I want you to completely remove the software and then reinstall the programming from the packages available on the website I am going to link you to below. Use the full-feature software if available.
http://h10025.www1.hp.com/ewfrf/wc/softwareCategory?cc=us&lc=en&dlc=en&product=3974279
Try that and let me know how it goes!
-Spencer
PS I hope you are having a wonderful day!

Security Issue with Network Home Directories

We are currently trying to solve an issue with some user accounts whereby students can see teacher's user files. We have x1 as authentication, x2 as elementary file share, x3 as high school and teacher file share. All are Snow Leopard Server.
Here is the problem:
If a student is in the Finder and goes to the top menu bar and clicks Go > Network, they can see a listing of servers and computers.
When the student opens Server, the see the x1, x2, x3 servers. The continue to open folders, digging through Volumes, then the data volume and see the alias for Users. The open that folder and see all the Users.
At that point, if they click on Documents or Desktop of a teacher user, they see everything and are not prevented from accessing the files.
The permissions for the teacher user folder is:
ACL:
Group - Everyone Deny Custom This folder
User - Administrator Allow Full Control This folder, Child folders, Child files, All descendants
POSIX:
User - _unknown Allow Read&Write This folder
Group - _unknown Allow Read Only This folder
World - Others Allow Read Only This folder
I would appreciate any thoughts.

Do you know where the _unknown user permissions are from?
Have the servers been upgraded from Tiger/Leopard?
Also, in your group ACL permissions what are the custom settings you have? I'm guessing you're denying access to all admin/read/write?

I am getting an error message unable to cummunicate with network device. It was working

I have a desktop and laptop on a netgear wireless router. I just got my new Office jet Pro 8500 A910. it all worked when I got my new printer

Download and run this utility: http://h20180.www2.hp.com/apps/Nav?h_pagetype=s-926&h_lang=en&h_client=s-h-e17-1&h_keyword=dg-NDU&ju...
Say thanks by clicking "Kudos" "thumbs up" in the post that helped you.
I am employed by HP

Websites with Flash Not Loading

My browser is IE7, after installing Macromedia Flash Player I
am still unable to view websites with flash, I have checked add ons
in the browser settings and it shows that flash is enabled, in
addition I use McAfee Security Suite.
Any assistance as to solutions or settings I can try,/change
would be appreciated.
Regards
Simon Ward

You're welcome.
I'll be backing up to a 1TB ext. drive, so I'm going to set up Time Machine and maintain regular backups.
Time Machine is great for recovering specific files/folders. I find a clone backup much more effective for going back to a previous HD state. I think both are essential. The latter is created with SuperDuper or CarbonCopyCloner.
I have Time Machine and a bootable backup on a 750 MB HD. One partition matches the size of my iMac HD (297 mb); the rest if for Time Machine. Works well together. I create a bootable clone every few weeks or so, or just prior to a significant update to the OS, such as an incremental update, eg 10.5.6 to 10.5.7, or any Apple update requiring a "restart". This way, if something goes awry I simply can start-up from the clone and copy it back in a few minutes to the HD (only those files that have changed in the update are copied).

Can't enter login data on secure websites because cursor jumps always on begin of the line

Samsung Galaxy S2
Android 4.0.4 Recent update from Samsung
Firefox 17 App
On secure websites with the phone held horizontal Firefox doesn't allow typing of login information because the cursor always jumps to begin of the line.

The problem only occurs with the XT9 text recognition

Safari cannot create secure connection with certain websites

I have OS X 10.10 with every available updates, and Safari's currently unable to 'establish secure connection' with some site I'm trying to connect, most disturbing being the whole Steam network (store/support.steampowered.com, steamcommunity.com, etc). IE (via Bootcamp), Chrome (both standalone and integrated into Steam client) and Firefox have no problem doing so.
Considering sometime before the in Steam browser indicated the site as insecure (a red lock icon with a cross, typically used to indicate bad cert) for a short time, and hearing of certs issued to gov agencies for man in the middle, I compared the cert for store.steampowered.com/login (which, in contrary to most content on that domain, forces a secure connection) and this discussions.apple.com. Well Firefox and IE do show a normal grey lock icon without organization name, and Chrome admits the website's ownership is unverified (in details, it says ownership is verified by the CA but there's no public verification record; the secure setting of that site has outdated, too) despite having Valve's name and green lock icon. So the cert could be a fake since it's an ordinary (I guess?) cert from a EV authority (DigiCert High Assurance EV CA-1 in this case). The certificate shown from Chrome is totally fine (not a single red cross in the chain), though.
Well there're other https resources Safari fails to create a secure connection with every now and then. I just forgot/ am unable to test them with other browsers (Sometimes it's not the page itself that can't be retrieved via https, but some resource it loads. Sadly I only know how to use Inspector in Safari, though I'm sure other browsers have similar functions, too). I suspect Safari just refuses such certificates (or the AES_128_CBC method maybe) while other browsers accept it. Is there an override for this?
Weird enough, https://ev-root.digicert.com/ has grey lock on Firefox and Safari. Seems overriding is the only workaround.
As a side note, my Safari freezes upon loading PayPal, being ir-responsive for tens of seconds on every activity such as clicking a link. For most of duration of the freeze no high CPU usage is monitored, though ocspd does sometimes take 50% or so, and the web process bursts into 100% immediately before unfreezing. Guess Yosemite has some issues with TLS on the system level.

This could be a complicated problem to solve, as there are several possible causes for it.
Back up all data, then take each of the following steps that you haven't already taken. Stop when the problem is resolved.
Step 1
From the menu bar, select
           ▹ System Preferences... ▹ Date & Time
Select the Time Zone tab in the preference pane that opens and check that the time zone matches your location. Then select the Date & Time tab. Check that the data and time shown (including the year) are correct, and correct them if not.
Check the box marked
          Set date and time automatically
if it's not already checked, and select one of the Apple time servers from the menu next to it.
Step 2
Triple-click anywhere in the line below on this page to select it:
/System/Library/Keychains/SystemCACertificates.keychain
Right-click or control-click the highlighted line and select
          Services ▹ Show Info
from the contextual menu.* An Info dialog should open. The dialog should show "You can only read" in the Sharing & Permissions section.
Repeat with this line:
/System/Library/Keychains/SystemRootCertificates.keychain
If instead of the Info dialog, you get a message that either file can't be found, reinstall OS X.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. Open a TextEdit window and paste into it by pressing command-V. Select the line you just pasted and continue as above.
Step 3
Launch the Keychain Access application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Keychain Access in the icon grid.
In the upper left corner of the window, you should see a list headed Keychains. If not, click the button in the lower left corner that looks like a triangle inside a square.
In the Keychains list, there should be items named System and System Roots. If not, select
          File ▹ Add Keychain
from the menu bar and add the following items:
/Library/Keychains/System.keychain
/System/Library/Keychains/SystemRootCertificates.keychain
Open the View menu in the menu bar. If one of the items in the menu is
          Show Expired Certificates
select it. Otherwise it will show
          Hide Expired Certificates
which is what you want.
From the Category list in the lower left corner of the window, select Certificates. Look carefully at the list of certificates in the right side of the window. If any of them has a blue-and-white plus sign or a red "X" in the icon, double-click it. An inspection window will open. Click the disclosure triangle labeled Trust to disclose the trust settings for the certificate. From the menu labeled
          Secure Sockets Layer (SSL)
select
          no value specified
Close the inspection window. You'll be prompted for your administrator password to update the settings.
Now open the same inspection window again, and select
          When using this certificate: Use System Defaults
Save the change in the same way as before.
Revert all the certificates with non-default trust settings. Never again change any of those settings.
Step 4
Select My Certificates from the Category list. From the list of certificates shown, delete any that are marked with a red X as expired or invalid.
Export all remaining certificates, delete them from the keychain, and reimport. For instructions, select
          Help ▹ Keychain Access Help
from the menu bar and search for the term "export" in the help window. Export each certificate as an individual file; don't combine them into one big file.
Step 5
From the menu bar, select
          Keychain Access ▹ Preferences... ▹ Certificates
There are three menus in the window. Change the selection in the top two to Best attempt, and in the bottom one to CRL.
Step 6
Triple-click anywhere in the line of text below on this page to select it:
/var/db/crls
Copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "crls" should open. Move all the files in that folder to the Trash. You’ll be prompted for your administrator login password.
Restart the computer, empty the Trash, and test.
Step 7
Triple-click anywhere in the line below on this page to select it:
open -e /etc/hosts
Copy the selected text to the Clipboard by pressing the key combination command-C.
Launch the built-in Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Paste into the Terminal window by pressing command-V. I've tested these instructions only with the Safari web browser. If you use another browser, you may have to press the return key after pasting. A TextEdit window should open. At the top of the window, you should see this:
# Host Database
# localhost is used to configure the loopback interface
# when the system is booting. Do not change this entry.
127.0.0.1                              localhost
255.255.255.255          broadcasthost
::1                                        localhost
fe80::1%lo0                    localhost
If that's not what you see, post the contents of the window.

Unable to open a website with Safari

I am unable to open one particular website with Safari. I have OSX 10.8.2 Mountain Lion. I have been reading all the related suggestions & downloaded & installed JavaForOSX.dmg and jdk-7u9. Still I cannot open this website (http://ctalanon.org). Can anyone assist me with this problem?

Triple-click the line below to select it, then copy it to the Clipboard (command-C):
www.ctalanon.org
Launch the Network Utility application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Network Utility in the icon grid.
Step 1
Select the Lookup tab and paste (command-V) into the address field. Press return. Post the output that appears below – the text, please, not a screenshot.
Step 2
Select the Ping tab and do the same.

Unable to open https websites with Firefox 4 beta 5 after updating from beta4

I am unable to open any https websites with Firefox 4 beta 5. This is happening after I updated to beta5 from beta4 this morning. I reverted back to beta 4.
This happened to most of the secure websites including mozilla's support & add-ons, bank and gmail websites

Looking through the bug notes, it looks like there is a simple work around, switch to Private Browsing Mode.
Works for me for all https sites I have tested.

My wife's i-pad 3 was just downloaded with iOS6 and we're unable to join our wifi network at home. Can anyone help?

My wife's i-pad 3 was just downloaded with the latest iOS6 and she's now unable to join our wifi network at home. Can anyone help?

Some things to try first:
1. Turn Off your iPad. Then turn Off (disconnect power cord for 30 seconds or longer) the wireless router & then back On. Now boot your iPad. Hopefully it will see the WiFi.
2. Go to Settings>Wi-Fi and turn Off. Then while at Settings>Wi-Fi, turn back On and chose a Network.
3. Change the channel on your wireless router (Auto or Channel 6 is best). Instructions at http://macintoshhowto.com/advanced/how-to-get-a-good-range-on-your-wireless-netw ork.html
4. Go into your router security settings and change from WEP to WPA with AES.
5. Renew IP Address: (especially if you are droping internet connection)
    •    Launch Settings app
    •    Tap on Wi-Fi
    •    Tap on the blue arrow of the Wi-Fi network that you connect to from the list
    •    In the window that opens, tap on the Renew Lease button
~~~~~~~~~~~~~~~~~~~~~~~~~
iOS 6 Wifi Problems/Fixes
Fix For iOS 6 WiFi Problems?
http://tabletcrunch.com/2012/09/27/fix-ios-6-wifi-problems/
Did iOS 6 Screw Your Wi-Fi? Here’s How to Fix It
http://gizmodo.com/5944761/does-ios-6-have-a-wi+fi-bug
How To Fix Wi-Fi Connectivity Issue After Upgrading To iOS 6
http://www.iphonehacks.com/2012/09/fix-wi-fi-connectivity-issue-after-upgrading- to-ios-6.html
iOS 6 iPad 3 wi-fi "connection fix" for netgear router
http://www.youtube.com/watch?v=XsWS4ha-dn0
Apple's iOS 6 Wi-Fi problems
http://www.zdnet.com/apples-ios-6-wi-fi-problems-linger-on-7000004799/
~~~~~~~~~~~~~~~~~~~~~~~
Look at iOS Troubleshooting Wi-Fi networks and connections http://support.apple.com/kb/TS1398
iPad: Issues connecting to Wi-Fi networks http://support.apple.com/kb/ts3304
WiFi Connecting/Troubleshooting http://www.apple.com/support/ipad/wifi/
How to Fix: My iPad Won't Connect to WiFi
http://ipad.about.com/od/iPad_Troubleshooting/ss/How-To-Fix-My-Ipad-Wont-Connect -To-Wi-Fi.htm
iOS: Connecting to the Internet http://support.apple.com/kb/HT1695
iOS: Recommended settings for Wi-Fi routers and access points http://support.apple.com/kb/HT4199
How to Quickly Fix iPad 3 Wi-Fi Reception Problems
http://osxdaily.com/2012/03/21/fix-new-ipad-3-wi-fi-reception-problems/
iPad Wi-Fi Problems: Comprehensive List of Fixes
http://appletoolbox.com/2010/04/ipad-wi-fi-problems-comprehensive-list-of-fixes/
Fix iPad Wifi Connection and Signal Issues http://www.youtube.com/watch?v=uwWtIG5jUxE
Fix Slow WiFi Issue https://discussions.apple.com/thread/2398063?start=60&tstart=0
How To Fix iPhone, iPad, iPod Touch Wi-Fi Connectivity Issue http://tinyurl.com/7nvxbmz
Unable to Connect After iOS Update - saw this solution on another post.
https://discussions.apple.com/thread/4010130
Note - When troubleshooting wifi connection problems, don't hold your iPad by hand. There have been a few reports that holding the iPad by hand, seems to attenuate the wifi signal.
~~~~~~~~~~~~~~~
If any of the above solutions work, please post back what solved your problem. It will help others with the same problem.
 Cheers, Tom

How can i set Adobe to open pdf from a secure website in the browser, it just pops up and asks to open save or download. we want it to just open the PDF directly in the browser with no popups, using IE 11

Hi,
We are running Internet explorer 11 with the latest version of Adobe Reader.
have found when users login to a secure website and it has pdf links on there, it doesnt open these pdf directly in the browser, it wants to save them and then open them.
is there anything we can change to allow them to be opened directly in the browser?
Thanks,
Cam

Hi campbellk19046717,
Please refer the KB doc link mentioned below if that might help:
Acrobat Help | Display PDF in browser | Acrobat, Reader XI
Let me know.
Regards,
Anubha

Safari, chrome and firefox cannot verify identity of secure websites after upgrading to 10.7.4, apple engineers have tried multiple things including operating system with no success

safari, chrome and firefox cannot verify identity of secure websites after upgrading to 10.7.4, apple engineers have tried multiple things including operating system with no success

There are several threads about this problem, most notably one called 'Invalid Certificates' is over 4 pages long. Many of us have experienced difficulty connecting to banking and other secure sites. On my Macbook Pro, I cannot get to my banking site with any browser, however I can get there on my iMac using Safari, but get the 'Invalid Certificate' notice with FF and Chrome. The problem started after the installation of 10.7.4. I have sent a message to Apple--they will be dismayed to hear that I cannot complete an order at their online store!

Why can I connect to my home network with my iPhone 5 in one room, but when I move to another it is 'unable to connect to the network'

At home, I can connect my iPhone 5 to my home wifi network with no problems, as long as I stay downstairs.
As soon as I go upstairs my phone disconnects from the network. I can still see the home network it in the available network lists (with full signal strength), but when I try to reconnect I get an 'unable to connect to the network message'
If I move back downstairs it reconnects
This has only started happening in the past week or so
I've tried to forget and rejoin the network, but this doesn't work
I reset my network settings on the phone. This worked for a couple of hours and I could connect to the wifi upstairs, but now it won't connect again.
Does anyone have any ideas what is causing this?

Sounds like your wi-fi signal strength has degraded. Try rebooting your wi-fi router, or get it serviced.
Do you have similar issues with any other wi-fi routers?

Unable to secure websites with network groups (OD)

Similar Messages

Maybe you are looking for