User Passwords Rejected on AFP share mounts?

User Passwords Rejected on AFP share mounts?
(OK, my last post got buried, and perhaps too long), try again. Very brief
Issue:
After so many days, a User's AFP share password is rejected? What gives.
If you reset it, several days later, same thing, rejected.
Is Netinfo Database corrupted, what can / should be done?
- Stand Alone server (with AFP and FTP services running, all other services off, not running.
Summary Info for user having issue:
Location: 192.168.0.50/NetInfo/DefualtLocalNode
Home: No Home Directory
Primary Group: Users (20)
Password: Shadow Password
I have deleted that troublesome user name and created a new name (for that user), just in case, in the re-creation of the same user name (after deletion) some corruption gets inherited.
thanks,
macguitarman
Power Mac G5 Dual 2.0 Mac OS X (10.4.7)

Using Tiger Server, I have found that enabling ACLs, or Access Control Lists on the volume, and then specifying users and/or groups into the specific ACLs for the share point has been very helpful. Also note that 10.4.10 server seems to work better than 10.4.11, so if you haven't upgraded, don't go beyond 10.4.10. .11 seems to have some permissions issues and other problems.
I assume you are connecting to the server via AFS (i.e. Go > Connect to Server > ip address) and not SMB? SMB sometimes is more problematic about ownership. But either way, Mac or PC clients, it seems ACLs are the way to go.
Crazy as it seems, on my server, even if the owner is, say, admin, and the group with r/w permissions is, say, Prepress, it helps to specifically add the Prepress group to the ACL for that share. Then be sure to propagate the permissions down (unless you don't want to, for some reason). To do this, click the little gear icon and propagate all the permissions -- owner, group, acl, etc. down. This will take a bit of time depending on how much stuff you have. I also find that a server reboot can be helpful.
[[ All this said, 10.5.1 seems to do some crazy things, and I hope 10.5.2 addresses them. I have one machine (not user ID) that always creates a folder on a share with no permissions for anyone. Only from that Mac; the same login on another works just fine. Go figure]]

Similar Messages

What do I need to do to enable Active Directory users to authenticate to AFP shares in 10.8 server?

We recently upgraded from 10.6 server to 10.8 server and are having trouble with AFP shares and Active Directory. We have shares on each of our OS X servers that should be mountable by any Active Directory user at the site the server resides. In 10.6, this worked beautifully. Simply adding the appropriate AD groups with appropriate permissions to the ACL of the folder(s) being shared worked without a hitch. In 10.8 server, this is not working. Permissions are defined correctly (as far as I can tell), the server is bound to AD, but yet no AD user who should have access can mount the share. When attempting to mount the share on a 10.6 client, the user gets the short and simple "You entered an invalid username or password. Please try again." On a 10.7 client, the window shakes.
What confuses me even more is that no local users can mount the share as well. I try as our admin account, I receive the following error message on our 10.6 clients:
Actually, as I was forumulating this post, logging in as the server administrator account is now working...???!!!
This was the error message we were receiving on 10.7 clients before it magically started working:
In any case, authenticating as an AD user is still no go. Any ideas?

I had something similar to this. In the name field put in DOMAIN\username rather than just the name.

User can't access afp shares

About once every other day one of my users losses the ability to log onto afp shares on the server.
In the Server App under Users his "Allow user to log in" tick box has become unticked. If I tick that and save, everything is fine for a day or so then it becomes unticked on its own again. As usual with computers in generally becomes unticked at a crucial point when everyone is busy !!
Any help would be appreciated. I can see nothing unusual in the logs and I have tried reseting his password.

I just went from 10.8.5 to 10.9.2 and have this same problem. I first noticed in DNS 127.0.0.1 was removed during install and not put back. From there I got everyhting working except afp.
Error message is:
Kerberos fail: gss_acquire_cred major status_value <458752> minor status_value <0>
major error <1>: No credentials were supplied, or the credentials were unavailable or inaccessible.
minor error <1>: unknown mech-code 0 for mech unknown
Trying:
sudo sso_util configure -r REALM_NAME -a diradmin afp
/Local/Default
/LDAPv3/127.0.0.1
Creating the service list
Creating the service principals
OSStatus CreateKerberosPrincipals(CFStringRef, CFStringRef, const char *, CFMutableDictionaryRef, Boolean): unable to find admin record: -1
Creating the keytab file
Configuring services
Any solutions out there? This is pretty critical for TM backups around the office.

Change user password , when DB is in mount state

Hello,
1. How to check user status , when database is in MOUNT stage. ? (Locked/Expired)
2. Is it possible to change the password of the user SYSTEM , while database is in mount state.?
If DB is open , we can query DBA_USERS table and can get the details of users (username, account_status,lock_date,expiry_date, etc...)
But , is it possible to query these data, when the DB is in MOUNT state.
3. Im having SYS authority. I want to change the password of SYSTEM user, and make SYSTEM unlock in the Standby Database. (Which is in mount state).
How can i do this?
regards,
Zerandib

How to check user status , when database is in MOUNT stage. ? (Locked/Expired)You cannot check the user status when the database is in mount stage. You need to have the database is open mode to check the status of the users.
Is it possible to change the password of the user SYSTEM , while database is in mount state.?It is not possible to change the password of any user when the database is in mount state. Open the database and then change the password.
If DB is open , we can query DBA_USERS table and can get the details of users (username, account_status,lock_date,expiry_date, etc...)
But , is it possible to query these data, when the DB is in MOUNT state.No. Not possible.
3. Im having SYS authority. I want to change the password of SYSTEM user, and make SYSTEM unlock in the Standby >Database. (Which is in mount state).
How can i do this?Answer to this question was given in your previous thread created nearly 12 hours back. It makes no sense to change the password on the standby database. It a mirrored copy of your primary database.
Change the password of the user in primary database and perform a log switch. The password would be changed on the standby as soon as the log is applied on the standby database.
Whenever you try to change the password of a user in mount stage,you get an error message saying "shutdown is in progress". So change it only when the database is open

Problems with AD users to connecting to AFP share...

Hi,
I have Mountain Lion Server binded with Windows Active Directory. I have an active FileSharing too. The AD users can log to the comupter from client macs or directly on server, but can't connect AFP Sharing.
I have create a group where I put the AD users, and give the group full RW permissions to that shared folder over AFP.
Can anybody help me to eliminate my problem?

Make sure your AD users have the AFP SACL enabled. Go into Server.app/Accounts/Users for your AD user. Select menuItem 'Edit Access to Services...' and check the service checkboxes of the services you want your AD users to access.

Automounting AFP shares... no seriously

I simply cannot get my head around the file sharing capabilities of Leopard/Snow Leopard. Sure it has NFS support, but from time to time it dies and one have to reboot in order to remount. So I (try to) switch to native AFP. Again I cannot mount manually using mount_afp nor can I mount using auto_master file syntax.
I have checked several tutorials and they do it exactly the same way I do it. I can mount my shares from "Connect to server..." no problemo, but automounting is never working.
I just can't understand why Apple has made it so difficult to get a basic file sharing up and running AND to make it automatic. Why on earth it this so problematic all the time. Ridiculous.
If anyone at all has SL running with automatic AFP shares mounted on boot (not using Login items, I don't want them in my face every time I boot) please tell me your syntax. And Apple, come on... why make it so difficult?

I agree that the lack of documentation and of GUI options to do this is quite puzzling and frustrating.
I guess they want you do it using login items.
I'm not an expert on the issue (I wish somebody who IS one would pop in) but I sort of managed to do it using /etc/fstab as described here
http://blogs.sun.com/lowbit/entry/easyafp_autmount_onos
It works but I'm not sure if did it completely correctly because I have to drill in quite deep before i get to the actual share when I start on "All" in the sidebar. also, the mounted share does not show up on the desktop even when I have the option to do so checked in finder preferences.

Auto_master, mounting afp shares without username/password in plain text?

Hi,
i'm trying to mount afp-shares from a Synology Diskststation and an Airport Time Capsule via the automountd.
I've modified the /etc/auto_master as follows:
# Automounter master map
+auto_master            # Use directory service
/net                    -hosts          -nobrowse,hidefromfinder,nosuid
/home                   auto_home       -nobrowse,hidefromfinder
/Network/Servers        -fstab
/-                      -static
/Synology               /etc/auto_afp   -nosuid
I've created the /etc/auto_afp:
iTunes -fstype=afp afp://"Username":"Password"@DiskStation.local/iTunes
Data -fstype=afp afp://"Username":"Password"@AirPort.local/Data
Providing Username and Password works fine, but is there a way to make this work without the Username and Password in plain text?
Thank you.

An applescript application set as a user login item should be a better choice.
I'm just about to work this out for an SMB mount of a users Windows home (augmented AFP homes are breaking preventing the 'Mount UNC path' option in the AD plugin).
Post back if you still want info.
D

Mount network volume: different users same credentials, see different shares

A set of network volumes on a NAS need to periodically be backed up to a local USB disk. Manually, I can mount most shares (from a Finder window). In a shell script I can list all files due (find) and use that list for backing up to a local USB volume (cpio). So far so good. However, I need to mount these network volumes first. The mount command doesn't seem to work for me.
How do I mount a network volume in a shell script?
Also I noticed that if under fast user switching user A logs in with credentials uName and uPassword, the NAS shows 6 shares to choose from. When user B on the same machine logs in with the same credentials uName and uPassword, only 5 shares are visible and one is not shown. It looks as if the credentials do not uniquely determine the volumes offered for mounting. Also, when user B mounts a share, it appears to be owned by user A (who is logged in but has not mounted any share on the NAS) rather than owned by B or by uName...
How do I mount this volume as user uName rather than A or B?
How can one uniquely determine the identity of the volume? Network volumes don't show UUIDs and the name given in the /Volume/ folder can change, as is discussed in message 11871367.

eljonco wrote:
I just checked: after a reboot, user A logs in (automatic login enabled), user A logs out, user B logs in, ls -a /Volumes only shows local HD and a USB HD. No network mounts there.
In the finder window, the NAS shows up on the left. Clicking it and entering credentials uName, uPassword, a list of five, not 6, items is offered for mounting. So your options 1 and 4 are then ruled out, unless an alias made by user A and copied to user B's home folder would still link to user A's mounting options.
Actually, only option 1 is ruled out. That Finder list is simply not reliable. It is likely cached somewhere and could be restored by deleting some hidden preference file. It regularly causes people to freak out when they see some sharepoint listed on a network that they have long since left.
If you did Go > Connect to Server in the Finder and typed in the location, you could still create an alias.
Once mounted one of 5 shares as uName with uPassword, an ls -al /Volumes shows the local drives and
drwx------@ 11 B staff <date> sharename
and all folders in sharename also show B:staff as user:group. I find that strange, as I did not log in to the share with credentials B, but with credentials uName. Anyhow.
The uName user is for the network share. When MacOS X mounts that, it gives it permissions appropriate for the user who did the mounting. If you did an NFS mount as root, the server would handle permissions via UNIX uid and gid. I'm really not familiar with the details of AFP.
As I read in a post about autoFS that 'cd /Volume/theHiddenShare' should magically mount that share, I gave it a shot. Alas, '/Volumes/theHiddenShare: No such file or directory'. Same long shot in the dark in the 'Go/Connect to' dialog gave 'The folder cannot be found'. Not surprisingly, I suppose.
Yes. That has to be setup
Here is what I've done to my /etc/auto_home:
# Automounter map for /home
#+auto_home # Use directory service
# Get /home records synthesized from user records
#+/usr/libexec/od_user_homes
myserver.org -allow_other,reconnect,fstype=sshfs [email protected]:/home/me_remote
I'm not on a big network, so I've disabled the system functionality by commenting out "+auto_home" and "+/usr/libexec/od_user_homes". Now, the system doesn't manage /home and I am free to do with it what I want. This will mount the path "/home/myserver.org" connected to the "me_remote" user on "myserver.org". I'm using the funky MacFUSE sshfs filesystem. Your AFP file system should work much better. Your line would look something like this:
drive5 -fstype=afp uUser@MyLocalServer:/theHiddenShare
Run "automount -vc" to reset your automount system.
Next use Finder Go > Connect to Server and type in "afp://uUser@MyLocalServer:/theHiddenShare".
You want to mount the drive once so that you can store uPassword in your keychain.
Now unmount the drive.
The Finder mounts all go into /Volumes and, as you have discovered, can get themselves confused. This automount will be at "/home/drive5". All you have to do is enter that folder in the Finder and it will be automatically mounted. If you haven't used it for a while, it will be unmounted automatically.
You may have to play around with this a little. I don't have any network AFP share that I need to mount on a regular basis, so those parameters may need to be adjusted somewhat.

Mounting AFP share under devices

Hey guys,
So this one I've been searching for an answer to for weeks on end with no success.
I have tried so many different things it's not even funny anymore.
Basically, I work at a private college where our students use InDesign CS5 on MacBook Pro's.
Our students currently have to save their work to the desktop, and then manually move it to the Student Dropbox(an afp share on the os x server) if they wish to share anything.
A temporary solution I came up for this was for them to drag the AFP link to the Devices pane in Finder, therefore allowing InDesign to see it as a device and save straight to it.
The problem with this though, is that they have to do this each and every time, and our students aren't all the most computer literate.
Is there any possible way to mount the drive on login AND have it appear under the devices pane automatically?
Cheers,
Brodie

An other solution is
create an file (you will need root-rights)
sudo nano /etc/auto_afp
and insert the following text
/Users/%username%/share -fstype=afp afp://username:[email protected]/share
but i don't know if this work in lion

Kernel Panic when Remote users disconnects from AFP share

System 1 Macbook System 2 Mac Pro both 10.4.8. On my Macbook I mount an AFP share (Not SMB but a public share) on the Mac Pro. After copying files etc if I disconnect the share the Mac Pro will throw a kernel Panic. Found it odd that the Mac Pro dies even though I'm actually on the Macbook mounting and unmounting the shares. I couldn't find anything online about this. Anybody have an idea how to fix? SMB doesn't cause this problem only MAC to MAC.
Thanks,
dave.
Panic Log:
Sun Feb 11 14:39:28 2007
panic(cpu 0 caller 0x0035BEAC): mfreemlist: m_nextpkt of m_next != NULL
Backtrace, Format - Frame : Return Address (4 potential args on stack)
0x25523768 : 0x128d1f (0x3c9540 0x2552378c 0x131df4 0x0)
0x255237a8 : 0x35beac (0x3e9cbc 0x1 0x1 0x1)
0x255237e8 : 0x7164e2 (0x3825d300 0x3825ac00 0x25523848 0xc16324)
0x25523808 : 0xc13e5b (0x3b7d800 0x3825d300 0x1 0x710876)
0x25523848 : 0xc16539 (0x3b7d800 0x0 0x3c03d9a0 0x255238f8)
0x25523918 : 0x71e37e (0x3b7d800 0x38189000 0x0 0x3825b000)
0x25523948 : 0x71e154 (0x3b7b840 0x3aa2720 0x2552396c 0x19d23a)
0x25523988 : 0x71e2b9 (0x3b7b840 0xbd1d4 0x3b3b540 0x21aead)
0x255239b8 : 0x719b77 (0x3b7b840 0x38189000 0x0 0x0)
0x255239f8 : 0x2025fe (0x41b9404 0x38189000 0x1e 0x25523a68)
0x25523a58 : 0x2675ff (0x41b9404 0x1e 0x38189000 0x874a504)
0x25523ab8 : 0x25e21f (0x41b9404 0x41b9404 0x38189000 0x4a1bedc)
0x25523bc8 : 0x239c12 (0x38189000 0x0 0x4a1bed8 0x0)
0x25523cd8 : 0x23837a (0x4a1bf48 0x0 0x0 0x3818905a)
0x25523eb8 : 0x238831 (0x38189000 0x28 0xffffffff 0x80fe)
0x25523ed8 : 0x25a750 (0x25523f60 0x25523f34 0x10 0x25523f60) Backtrace continues...
Kernel loadable modules in backtrace (with dependencies):
com.apple.driver.AppleIntel8254XEthernet(1.1.4a5)@0xc0b000
dependency: com.apple.iokit.IONetworkingFamily(1.5.1)@0x70f000
dependency: com.apple.iokit.IOPCIFamily(2.1)@0x664000
com.apple.iokit.IONetworkingFamily(1.5.1)@0x70f000
Kernel version:
Darwin Kernel Version 8.8.1: Mon Sep 25 19:42:00 PDT 2006; root:xnu-792.13.8.obj~1/RELEASE_I386
Mac Pro Mac OS X (10.4.8)

DaddyPaycheck
Thanks for helping. I'm green at this! Getting definite experience as you can see, but can you help me with an actual real live make and model of a graphics card that is known to work on the G5 Xserve?
I called ATI re: their Radeon 9200, and was told by tech support that they do not support this card on the G5 Xserve. Yet, Scott Maiden, in his post above, referenced an ATI Radeon card.
What cards are being successfully used? Can I have a list?
Apple Tech Support will not give any such list. Maybe they know of some problem with all? (When I bought the Xserve in September of 2004, Apple Tech Support recommended the VillageTronic card.) The new, yet un-released Quad-core 64-bit Intel Xeon Xserve has "built-in graphics functionality, with mini-DVI output and support for industry-standard VGA displays," according to Apple's web site. Hopefully this will eliminate this type of problem in future releases of Xserve. But for the nasty here and now...
All I need is an inexpensive graphics card to administer this Xserve. Currently I am using a 21” SuperMatch SVGA monitor.
Thank to all who have helped.
James
jamescalvin-
The only cards I have found to work reliably in the
G5 XServe are the cheap-arse PCI models. I do not use
my XServe for serious graphics work so I do not know
how it works with other cards.
Can you swap in a known compatible PCI card for
testing purposes?
Luck-
-DaddyPaycheck
DaddyPaycheck
Xserve Mac OS X (10.3.9) Need list of Compatible PCI graphics cards

Copy from AFP share to AFP share (via VPN-Connection) - stupid?

Hi there
We set up an OS X server in a remote facility and are connecting to it over a VPN connection (Netgear Firewall).
Everything works fine, there's only one annoying issue: if I want to copy a file from a mounted AFP share (share1) to another mounted AFP share (share2) - both of them residing on the same server - it seems to me that the files are being copied first to my local client and then back to the server again - instead of being copied directly from and to the server...
Is there anything I can do about this issue or am I wrong? Is this a so called "feature" of the Finder itself?
Thanks for any suggestions and regards
Roman

Thanks for your thoughts about higher vs. lower latency networking - I totally agree. It might be a quite uncommon setup; as the server is being "housed" in a datacenter with quite tough restrictions: not only do they charge us for the power consumption, but also for the traffic being generated - which is 250 GB a month. They're providing an uplink with 10mbps (guaranteed), burstable to 100mbits.
Anyway, we're interested in keeping traffic low - hard to do if we cannot let end users do "common" tasks like moving files from one folder to another (of course, its a sharepoint - but they don't care).
What I'm looking for? Well, I think it will take hours to find out which part of the setup (AFP implementation of the server, AFP on the local machines, either of them on a particular version, the Finder in general...) actually might be responsible for this behavior. And maybe there's a "solution" (if you agree that this is actually a problem" buried somewhere
Regards
Roman

AFP Shares

Hi. I am experiencing a lot of problems with MAC OSX mountain lion and network shares, maybe someone here can help me.
I have a freenas installed where I keep all my multimedia files (i.w. photos, musics, etc...) and I have 2 users on Mac that I normally fastswitch between then (my wife and mine!).
Problem is, I only could manage to give read and write permissions for bouth user over the same mount using NFS, but when I use NFS I got a lot of disconnections when using a lot of load (like browsing pictures).
I was wondering if is any way I could mount a AFP share and bouth users on make could read and write all files (even the new created ones)?
Any help or comments on the matter will be appreciated.
Thanks, Allan

The NFS disconnections should be related to the NAS itself. But I would like to share a mount with AFP to all my logged users. if this is possible it will be really nice.
Thanks, Allan

Afp shares dismounting

Hi all,
I've had a ReadyNAS share mount via AFP since I got my iMac and Macbook pro without issues, just using the User & Groups panel to have it load on startup. Even through screen locks and sleep cycles, the share would stay mounted (which is what I want).....until....
10.8.1 and .2. Now the Share dismounts while the computer sleeps and won't remount unless I tell it to manuall. Any ideas?

I have this problem from time to time. To get them to show, in the Finder I go to Go > Connect to Server > then click on Browse. The will not show them in the left sidebar, but will show under the Network. I know it does not solve the problem. I'd like to know a fix as well.

Anyone able to authenticate against password protected Samba/SMB shares?

With on 10.5.8, I was able to connect to my Linux server using the Samba protocol. When the Samba shares did not allow guest/anonymous logins, I was able to supply an user/password, and it worked wonderfully.
Currently, on 10.6, I'm able to mount shares with guest/anonymous access but I am not able to mount password protected shares.
In the past, there was a problem in the smb.conf setting of:
encrypt password = yes
And I've tried both "yes" and "no" values to no avail. Has something broke or changed in the way 10.6 talks Samba?
Message was edited by: rthien

Hi all,
I found the answer on my side. But it is rather strange that it worked with 10.5.8 and older. But it does not work with 10.6.
In Linux, in my smb.conf file, I had:
security = SHARE
If I change it to:
security = USER
and add the line:
user = +comma separated list of users+
To effect this new settings, I had to restart the Samba daemons. And then things started to work for me.

Trouble connecting to Lion server AFP shares after changing server's hostname

Hello everyone,
I recently changed hostname of my Lion server box (via Server application) and now my clients are having a problem when trying to connect to its AFP shares via aliases. It takes 160 seconds of "resolving alias to <sharename>" before it finally works. Aliases were created by navigating to the server, connecting with "Connect As", providing valid credentials, then navigating one level up and dragging the share icon (blue disk with three white people outlines) to the Desktop with Option-Command.
What is interesting, if I create a new account on a client machine, create an alias, and click on it - it works without any delay, as it was for the clients that are having problems now; so I'm assuming some details about the previous server name got cached somewhere.
The clients with long delay problems can access the shares quickly if they click on the server in the Finder window drawer, then "Connect As" and provide their login credentials - it works instantly then.
I've been digging around quite a bit (deleting Keychain saved Network passwords for any and all references to the server I could find), and also by looking at kerberos logs on the server. What is interesting, the newly created clients I mention above who don't have delay with connecting, don't leave any records in the kerberos log file; but the ones that have 160 second delay do - there's nothing for 160 seconds, and then there is a flurry of activity, as the connection is finally established.
When a client who has trouble connecting uses the "Connect As" method described above, entries in the Kerberos log are created instantly when client clicks connect.
Probably also worth noting that renaming of the server was related to me setting up Open Directory on it.
Any pointers would be greatly apprecited.

I experienced almost exactly the problems you described. I also found that connecting via command line using mount_afp worked right away... and once the connection is established, mounting via finder was super fast.
Tried all kinds of craziness on the client, even a full Time Machine restore.
Tried fixing Open Directory.
I was absolutely stumped by what was happening, but then thought, Hmm. I'm wondering if it's related to MobileMe going down? I noticed it started to happen after July 31...
Success! That was it! Signing out of MobileMe in System Preferences made everything work the way it should!
CDPlayer2: check if the clients are signed in to MobileMe, and if signing out fixes things - I'd appreciate it if you could post your results. Thanks.

User Passwords Rejected on AFP share mounts?

Similar Messages

Maybe you are looking for