Who is he? Strange user in server admin access AFP
Who is that strange user?
Tnx Gijs (NL)
It's probably a deleted user.
Although you know users by their short name, or even their real name, the OS/directory tracks them via a UUID and that's what you're seeing here.
If the UUID doesn't map back to a current user in the directory then you're going to see the UUID since there's no longer an associated user record. The most likely scenario is that the account has been deleted.
Similar Messages
-
I have a user who had full remote admin access to her Mac Server from her Mac desktop. We recently changed out her desktop for a new iMac. She no longer has full admin remote access to the server. Did I miss something on the setup of the new machine? She can walk to the server and log in with full admin access, but the remote session does not allow for full admin rights. Any help would be appreciated.
Remote access via what? Server.app? Server Admin.app? Remote Desktop?
What OS(es) were running previously, what OS(es) are running now?
What admin rights are unavailable (i.e. what can't she do?) -
Server Admin "Access" Section and groups
Hi all,
I read some posts about using the ACL in the server manager to control who can do what and I found exactly what I need...letting blog people have an account but not be allowed to log into my AFP share to do damage.
My problem is that when I go to put in my "admin" and "HTTP users groups" into the ACL allowed list, they won't show up. I know in Server Admin and Workgroup Manager you have to turn on hidden system users/groups to see them, and I have them on, but I can't see them in this particular view. Does anyone have a work around so I can set up these lists?
Thanks!Spoke with our Apple rep and found a solution here:
http://www.bombich.com/mactips/scripts.html
The last script on the page allows for setting ACLs to groups.
What it actually seems to do is to create a new group called "* access" where ** is the service in question (afp, ftp, loginwindow, etc). It gets an ID from 500 forward, which makes it a user level group, which the server can see. It also gains a name like com.apple.access_*.
From there, it places the users/groups you define in the script into the group membership, and then applies it to the ACL.
All in all, it works very well, and I highly suggest it.
X Serve Mac OS X (10.4.7) -
I need access to the hotmail server admin account for my company's domain. We hired someone to set up our domain email accounts [email protected] and now that the person is no longer with the company we don't have any way of logging into the admin to manage/delete/add
new email addresses to the company's domain. PLEASE HELP!!!Hi Lee,
i guess you mean Office365 and not hotmail?
If its Officve365 you should post your questions here:
https://community.office365.com/nb-no/f/default.aspx
If its Hotmail then you should check here:
http://windows.microsoft.com/en-us/hotmail/hotmail-help
For Office365 administration login is: https://portal.office.com/
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2work -
Can't add new users in Server Admin console in Server 10.1.4.
I've run into an issue with an older OS X Server 10.1.4 running on a G4 platform. It functions as a shared file repository and I need to add new users. However, it would appear that I've developed a problem.
When trying to add new users I get the following error:
An error occurred in the Users & Groups module in entry point "RACMMenuItemSelected".
A program error has occurred.
1004
Now, my best guess is it's a corruption somewhere. But, I don't want to go poking around the production server taking it down and up until I've got some idea where I'm going. Any suggestions on where my troubles might be? Or has anyone had this issue before, and how was it corrected? (Hopefully not by a full software reload.)
I'd like to replace/upgrade this server, but until there's money in the budget, that's just a dream, I need to try to figure out how to fix what's here.
Help, please?
PowerBook G4 17 Mac OS X (10.3.9) 1.5G RAMNo answer was found for this issue. I've finally removed the server from production and will likely reformat and reinstall for use in other production areas. Hopefully we'll be upgrading the OS at the same time.
-
Server admin gives workgroup generic name
In Realms (in Server Admin) I have added a realm and given access to a group as defined in Workgroup Manager. However, Server Admin refuses to give that group the name I gave it in Workgroup Manager, instead simply calling it 'workgroup', which is not very helpful.
Also, if I add a user who also has a home folder, Server Admin makes a double entry, once of the short name, and once of the short name @LKDC:SHA1.{long string of alphanumerical characters}. Should these both be given the same permissions, or can I delete one of the two entries, and if so, which?
Thanks for your help!
AdriaanhIn Realms (in Server Admin) I have added a realm and given access to a group as defined in Workgroup Manager. However, Server Admin refuses to give that group the name I gave it in Workgroup Manager, instead simply calling it 'workgroup', which is not very helpful.
Also, if I add a user who also has a home folder, Server Admin makes a double entry, once of the short name, and once of the short name @LKDC:SHA1.{long string of alphanumerical characters}. Should these both be given the same permissions, or can I delete one of the two entries, and if so, which?
Thanks for your help!
Adriaanh -
Server Admin 10.6.5 running very slowly
Hi All,
New strange thing!
Server Admin has started running very slowly. If I run SA on each of my 3 servers it runs fine quick as a bell. If I run it on a client machine crawls to snails pace, sometimes have to force quite.
Done the usual things deleted plist, re-install et-al. I tried on a fresh iMac install, ran fine for five mins then crapped out!
Any ideas on where to start looking, or is anyone else having a similar problem?
Ta!Hi All,
Thanks for your comments so far, i had also suspected DNS. However with my limited knowledge DNS seems to be working okay.
Big thanks to Mr Hoffman, I hope DNS is working as I followed your instructions to set it up! While i am at it, I must say a big "thank you" to you for your website. An excellent resource that is really well written and helped me an awful lot. My thanks.
So in response here are the response to the digs, I can't see anything there but I am less experienced.
Client Side:
iMac:~ toby$ dig server.tjtw.co.uk
; <<>> DiG 9.6.0-APPLE-P2 <<>> server.tjtw.co.uk
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54249
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;server.tjtw.co.uk. IN A
;; ANSWER SECTION:
server.tjtw.co.uk. 10800 IN A 10.0.100.2
;; AUTHORITY SECTION:
tjtw.co.uk. 10800 IN NS server.tjtw.co.uk.
;; Query time: 1 msec
;; SERVER: 10.0.100.2#53(10.0.100.2)
;; WHEN: Tue Dec 7 18:15:50 2010
;; MSG SIZE rcvd: 65
iMac:~ toby$ dig -x 10.0.100.2
; <<>> DiG 9.6.0-APPLE-P2 <<>> -x 10.0.100.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48454
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; QUESTION SECTION:
;2.100.0.10.in-addr.arpa. IN PTR
;; ANSWER SECTION:
2.100.0.10.in-addr.arpa. 10800 IN PTR server.tjtw.co.uk.
;; AUTHORITY SECTION:
100.0.10.in-addr.arpa. 10800 IN NS server.tjtw.co.uk.
;; ADDITIONAL SECTION:
server.tjtw.co.uk. 10800 IN A 10.0.100.2
;; Query time: 0 msec
;; SERVER: 10.0.100.2#53(10.0.100.2)
;; WHEN: Tue Dec 7 18:17:15 2010
;; MSG SIZE rcvd: 102
Server Side
Last login: Sun Dec 5 22:00:45 2010 from 10.0.100.10
server:~ toby$ dig server.tjtw.co.uk
; <<>> DiG 9.6.0-APPLE-P2 <<>> server.tjtw.co.uk
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36457
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;server.tjtw.co.uk. IN A
;; ANSWER SECTION:
server.tjtw.co.uk. 10800 IN A 10.0.100.2
;; AUTHORITY SECTION:
tjtw.co.uk. 10800 IN NS server.tjtw.co.uk.
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Dec 7 18:19:37 2010
;; MSG SIZE rcvd: 65
server:~ toby$ dig -x 10.0.100.2
; <<>> DiG 9.6.0-APPLE-P2 <<>> -x 10.0.100.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65191
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; QUESTION SECTION:
;2.100.0.10.in-addr.arpa. IN PTR
;; ANSWER SECTION:
2.100.0.10.in-addr.arpa. 10800 IN PTR server.tjtw.co.uk.
;; AUTHORITY SECTION:
100.0.10.in-addr.arpa. 10800 IN NS server.tjtw.co.uk.
;; ADDITIONAL SECTION:
server.tjtw.co.uk. 10800 IN A 10.0.100.2
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Dec 7 18:20:40 2010
;; MSG SIZE rcvd: 102
server:~ toby$ sudo changeip -checkhostname
Password:
Primary address = 10.0.100.2
Current HostName = server.tjtw.co.uk
DNS HostName = server.tjtw.co.uk
The names match. There is nothing to change.
dirserv:success = "success"
Any feedback gratefully received! -
Server Admin Tools 10.5.5 not within Software Update routine
Server Admin Tools 10.5.5
<http://support.apple.com/kb/HT2667>
available as a download but not appearing within Software Update.
I find that a little odd, as it includes updates for users of Server Admin Tools 10.5.3.
Maybe the update package(s) will appear separately in due course…Pity Apple couldn't be bothered to change the version number of the SA tool. After installation, mine still says 10.5.3. Apple's quality control over the server product line continues to deteriorate. One wonders when they'll actually either hire some additional staff to bring the product up to snuff, or abandon its advancement like the XRAID. How many folks are left on the server development team or have they all been poached for the iPhone/iPod shiny stuff?
Man, there was so much promise in the OSXS package. But it's not even half-cooked compared to the butt-ugly-but-functional alternatives. My clients aren't at all impressed with the stability nor the lack of fine-grain feature management -- and it will be a tough sell to keep them with the Fruit if Apple doesn't fix and enhance THIS cat. Waiting for 'Snow Leopard' to fix everything seems like a stalling tactic. Waiting for Godot. -
Folders Not Showing in Server Admin AFP Share Point?
Hello all,
My problem is I can make a folder in Server Admin under AFP Share Point, But the Folder wont actually be made on the HD.
Under Server Admin AFP Share Point it will tell me that it doesn't exist?
So I thought I'll go to that point on the HD and make the folder then set the permissions to it... nope I can make the folder I can see it in finder and in terminal, But not in Server Admin AFP Share Point.
I have never seen this before any help is greatly welcomed.Hi Kristoffer,
I have seen an attribute for folder object which could control SharePoint folder hide or show in webdav explorer view, you can use PowerShell to output the problematic folder property, see if it the case, then use the PowerShell code to set it's property
with blank value to make it show in explorer view,
Use the PowerShell to get the folder object and then check the property value with this code line $folder.Properties["vti_winfileattribs"]
#folder can be site, library level and folder level
$folder = (Get-SPWeb http://sp).Folders["shared documents"].SubFolders["folder1"]
#hide folder
$folder.Properties["vti_winfileattribs"]="00000016"
#show folder
####$folder.Properties["vti_winfileattribs"]=""
$folder.Update()
https://social.technet.microsoft.com/Forums/lync/en-US/9ceafb38-24dc-466c-b497-2cee062b81cf/explorer-view-hidden-folder-attribute?forum=sharepointgeneral
Thanks
Daniel Yang
TechNet Community Support -
Can connect via VPN, but can't access AFP server on same Xserve
Hi:
I've set up our XServe with MacOS X Server 10.5.2 to do AFP and VPN (L2TP only; PPTP is disabled). The XServe is a standalone server, not connected to any other direstory server.
I can connect to the XServe's AFP server from my Mac over our wired and wireless network. The AFP server shows up in the sidebar of Finder windows. So far, so good.
I am able to successfully connect to our network via the VPN with Mac OS X 10.5.2 client (on two different machines) using L2TP through our network's firewall (on a Netopia T1 router; UDF ports 500 and 4500 and IP Protocol 50 and 51 are open) using a shared secret.
But I cannot connect to the XServe itself to use Server Admin or AFP (using afp://server.company.com or afp://xxx.xxx.xxx.xxx via the Go > Connect to Server command).
The error I get while connecting to the 10.5.2 AFP server is Some data in apf://server.mycompany.com could not be read or written (Error Code -36 ). I saw this error associated with a SMB problem in 10.4.x, but SMB is not running.
Other iChat users in my office also do not automatically show up in the Bonjour list when I connect to the network. Other computers on our network do not appear in the sidebar of a Finder window. (I'm told these are to be expected, as Bonjour isn't supported (in the "local area Bonjour" over a WAN link - it's purely a multicast feature on the network in the office, and won't be routed across the VPN link. True?)
Now, here's the odd part. There is a second server (v10.4.11) on our network running AFP. I can connect to it (using afp://server.company.com via the Go > Connect to Server command) and mount its various sharepoints via the VPN.
The only thing I see in the VPN log that seems amiss is this (but I have no idea what it means):
Tue Mar 11 23:09:27 2008 : Unsupported protocol 0x8057 received
--Both the 10.5.2 and the 10.4.11 servers have DNS properly configured (though our ISP; we're not running our own DNS).
--Both servers and the client have public IP addresses and have the same subnet mask. Network Utility confirms this while connected to the VPN.
--NAT is not running. The ISP is responding with public IPs for the servers.
--The firewall for the 10.5.2 server is not running (but will be once I get this all working).
--The IP address range for the VPN server doesn't overlap our DHCP pool (which also currently uses public IP addresses).
--Any user can access any service.
--No network routing definitions have been set up.
--In essence, I've followed the steps on Pages 141-142 of the Network Services Admin Guide.
One other note: After I connect, the Network Preferences > VPN > Advanced > TCP/IP window shows the IP address for the client just fine (assigned from the VPN pool), but lists the router as having the IP address of the XServe (rather than the router on the network). Is that normal?
I'm hoping I don't need to have the XServe run DNS as an internal LAN DNS server.... And I'm not sure why I would have to if I can already successfully connect to the 10.4.11 AFP server .
What simple step am I missing?
TIA,
mm"I am able to successfully connect to our network via the VPN with Mac OS X 10.5.2 client (on two different machines) using L2TP through our network's firewall (on a Netopia T1 router; UDF ports 500 and 4500 and IP Protocol 50 and 51 are open) using a shared secret."
I suspect you mean UDP ports and you might need UDP port 1701 open too.
You only need IP protocol 50 (ESP), protocol 51 (AH) isn't used. And ESP is only used when client and server isn't behind NAT (when NAT is used only the UDP ports are used).
"Unsupported protocol 0x8057 received"
This is usually seen when you can't get GRE through but since you don't use PPTP I can't be sure why this is registered in the logs. Sometimes when connecting using PPTP you have to disconnect and then reconnect for everything to work - you might try this for L2TP too.
But if you already can reach services on any LAN nodes through the VPN I wouldn't bother with it.
As you have a firewall in front of the server you need a second alias IP on the server that you can use to get at the services running on the server through the VPN. The firewall blocks all ports protocols not opened - that's why you can't use the server main IP even if the VPN is up.
The netmask is used by all nodes to determine how big your subnet is: what part of the IP number is the network number and what range the node number is in => really: should traffic be directed to a node on the same LAN or sent directly to the gw/router for forwarding.
What you can't do is connect from a NATed network to another NATed network that both are using the same network number. (That's why people should stay away from using the "default" 192.168.0.0/24 and 192.168.1.0/24 networks for VPN server LANs).
Try your settings at http://www.jodies.de/ipcalc to see what I mean.
"...lists the router as having the IP address of the XServe (rather than the router on the network). Is that normal?"
Yes. The VPN server is the VPN gw/router.
"The firewall for the 10.5.2 server is not running (but will be once I get this all working)."
If you already have a firewall in front of your servers that is a bit redundant.
"--No network routing definitions have been set up."
"I'm hoping I don't need to have the XServe run DNS as an internal LAN DNS server"
You need routing definitions if you want to setup a split tunnel VPN or all traffic is routed through the VPN when connected. The VPN becomes the default gw.
Without ipforwarding ON in the server you can only reach nodes on the server LAN - not Internet.
DNS is needed for your servers forward and reverse names/IPs for advanced services but doesn't need to run in any of your own servers.
If you decide to do a split tunnel VPN config (adding public and private routing definitions) a reachable DNS IP for VPN clients (in VPN config on server) is needed for VPN clients or they can't use names to find anything. To reach this DNS IP if public/not on your server LAN, you need your server to forward IP DNS lookups and have a routing definition for it.
A split tunnel VPN only send traffic for your server LAN through the VPN and all other traffic directly to the local gw/router (Internet). -
Server Admin user and group limit
Just noticed today with 10.6.7 that there is a limit of 100 users being displayed in Server Admin. I guess the sames goes for Groups as well.
As soon as i deleted some old accounts the users i had created recently appeared in Server Admin.
Is there a fix for this?
ThanksAs you mentioned, it is a display limit in WM, the accounts are still there. A quick workaround is to type part of the object name in the search box at the top of the list.
That 100 object display limit was probably the result of countless meetings between middle-managers. I'm guessing it went something like this:
"Why don't we just show them all?"
"Some deployments could have tens of thousands... that won't work... it'll take forever to load and even longer for somebody to skim through the list."
"Okay, how about we do 1000?"
"No, that won't work either. Still too many to skim through and, even worse, they'll spend years with 999 objects in there then add a few more and think it's broken..."
"Fine... then 100. Short enough to load reasonably quickly and long enough that the average person could eyeball it."
"But there will still be some admins who think it's broken and want to change it."
Steve Jobs walks in, "Give 'em a search box."
Middle-managers in unison, "Brilliant!"
Sorry. It's early, and I'm a bit punchy. -
Setting workgroup backup permissions for server admin user
I apologize in advance for what is probably a trivial question. At school I have set up a Tiger server on a PPC desktop. Open directory is implemented and managed remotely on my personal desktop machine using Workgroup manager. The local server admin account is different from the remote workgroup manager account. I have been backing up using rsync from my machine by logging in with ssh and the Workgroup manager account. Now I want to use ChronoSync on the server machine to set up a simple incremental backup routine. The problem is that ChronoSync runs under the server admin account which does not have permissions to access the group accounts. What is the best way for me to give the server admin account "global" permissions so it can backup the files and directories that were set up using Workgroup manager?
iMac Intel Mac OS X (10.4.9)
iMac Intel Mac OS X (10.4.9)Hi,
User Account Control treats members of the Administrators group as standard users.
With UAC enabled, members of the local Administrators group run with the same access token as standard users. Only when a member of the local Administrators group gives approval can a process use the administrator’s full access token. This process is the
basis of the principle of Admin Approval Mode.
When an administrator logs on to Windows Vista or newer, the Local Security Authority (LSA) creates two access tokens. If LSA is notified that the user is a member of the Administrators group, LSA creates the second logon that has the administrator rights
removed (filtered).
To work around this issue, use the net use command together with a UNC name to access the network location.
Programs may be unable to access some network locations after you turn on User Account Control in Windows Vista or newer operating systems
http://support.microsoft.com/kb/937624
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
Server Admin can't see hard drive with user's Sites folder
I have a G5 XServer with two hard drives running 10.4.10 co-located at an ISP. I had recently brought it home and did a clean install of the OS and put new accounts (mainly to host multiple web sites) on it that were different than before, and this time I installed the operating system on the second hard drive leaving the original in place.
Everything works fine EXCEPT that when using +Server Admin+ to set the Web Sites to point to the various home directories (click web, click settings, click Site, Click 'plus' to add a new site or 'pencil' to edit one, then click '...' to select the folder), +Server Admin+ *cannot see the new home directories* on the hard disk I am currently using. It can only see the old directories on the old hard drive.
(Note: I observed the same issue when trying to set the FTP root directory.)
How can I get +Server Admin+ to look at files on the other hard drive (the one I am booting from)?Camelot wrote:
Who cares?
Just type in the path to the directory you want to use. You don't have to select it via the File dialog.
Just type in the path to the directory you want to use. You don't have to select it via the File dialog.
That didn't work either.
It turns out that both hard disks were named the same (I don't know how I screwed that up), so I went in with Disk Utility and changed one of the names.
Message was edited by: Todd Heberlein1 -
Server admin not seeing directory users from workgroup manager
I am setting up a new Xserve with Snow Leopard (get 'em while we can). We have eight other XServes running Leopard or Snow Leopard server. On those machines we have set up file sharing over AFP. The machines are connected to our Active Directory server and our users authenticate using their domain passwords. All of our other servers were setup in Leopard and were upgraded to Snow Leopard. We have not had any issues authenticating to those boxes.
This is the first one that we have actually setup new-out-of-the-box in Snow Leopard. I can set Workgroup Manager up to connect to our AD, and can see and search my domain users and groups in Workgroup Manager. When I try to set up my File Shares in Server Admin, none of my domain users show up-only local accounts.
What have I missed? In Leopard, when I connected to the domain, the users immediately became available in Server Admin. Not so in SL, at least on this box.
Help?Hi
The first thing to check is if you've bound the Server to the AD Domain. The second thing is if the /Active Directory/All Domains is in the Search Policy. If you don't do either of these WorkGroup Manager won't display anything coming from the AD Schema.
In 10.6 Apple moved the Directory Utility from where it used to be in /Applications/Utilities and made it part of the Accounts Preferences Pane. Perhaps it's this change that's confusing you? I would not advise doing this but it's also possible you used the Server Setup Assistant to do most of the configuration? If you did maybe something went wrong at that stage (won't be the first time) and you need to manually bind the Server instead?
As ever make sure this server is using the same NTP Server as the others.
Tony -
Server Admin is not showing all users in "Show Users
I've discovered that a previous upgrade from Tiger to Leopard in 2009 has lead to newer users not be displayed Server Admin 'Show Users and Groups'. New groups display fine.
We upgraded again to Snow Leopard a couple of months back and so are running the latest admin tools.
I really can't pick why these accounts aren't showing so any points would be appreciated.
Thanks.After numerous reinstalls failed to solve this problem, I discovered that on my system, it has to do with using an external monitor (via DVI port). When I drag the Firefox window from my laptop screen to an external monitor, "Show All Bookmarks" is suddenly empty. Dragging the browser window back to the original display (laptop) does NOT fix it. Firefox must be RESTARTED on the original display. When Firefox re-opens, "Show All Bookmarks" functions normally again.
WORK AROUND: the only way I can view "Show All Bookmarks" on my external monitor is to first open both the browser and "Show All Bookmarks" windows on the original display, drag BOTH windows to the other monitor and be sure to leave the "Show All Bookmarks" library window open in the background. If I forget and close it by accident, the problem happens all over again.
Maybe you are looking for
-
My iPod isn't recognized by my computers...
I own an iPod Shuffle and ever since iTunes 7, my iPod isn't even recognized by my computer...however, I can listen to my iPod, but I can't charge it at all so I have left it alone. Is this happening to anyone else...Is this what everyone else is tal
-
I saved back-up info on a separate drive, then erased my G5 for resale. Is it possible for me to recover that date to my new MacBook now? Presently, it tells me that I "do not have permission."
-
I'm in the process of transitioning to a new PC (Win 7). I have so many files in my library, I've been keeping them on an external drive for a while now. I thought the iTunes transition would be as simple as signing in with my account, authorizing t
-
HT1904 Apple ID I can't use in iTunes store
What I can? If I haven't master card for support apple ID
-
Help! Pictures lost on my site
I hope you are able to help me out. Yesterday I was looking back to postings that I made in my blog during February. I was looking into my site from the internet. I discovered, that some blogs were showing a big cross, instead of the picture that I p