From luttgens at fusl.ac.be Tue Apr 1 01:09:20 2008 From: luttgens at fusl.ac.be (Axel Luttgens) Date: Tue Apr 1 01:19:14 2008 Subject: rsyncd.conf In-Reply-To: References: Message-ID: <167B578C-CC5E-4EE5-AC5B-FEE4B7CFFED1@fusl.ac.be> Le 30 mars 08 ? 19:01, LuKreme a ?crit : > I have the following in rsyncd.conf (on 'server'): > > [backup] > path = /backup/ > comment = Backup > readonly = no > auth users = root > secrets file = /usr/local/etc/rsyncd.secrets > > I tried to connect to it from www2 > > rsync -av --password-file=/var/rsync.passwd --link- > dest=server::backup/www2 / server::backup/www2.daily.0 > > and get the following error: > > building file list ... done > rsync: mkdir "www2.daily.0" (in backup) failed: Permission denied (13) > rsync error: error in file IO (code 11) at main.c(529) > [receiver=2.6.9] > rsync: connection unexpectedly closed (4 bytes received so far) > [sender] > > Since the auth user for the rsync is 'root' why am I getting a > permission failure? > > And even though the current www2 folder is owned by root (in fact, > has the same permissions as /backup), I AM able to run the following > command with no error: > > rsync -av --password-file=/var/rsync.passwd / server::backup/www2 > > $ ls -lsa /backup/ > 2 drwxr-xr-x 13 root wheel 512 Mar 30 10:33 . > 2 drwxr-xr-x 24 root wheel 1024 Feb 16 13:58 .. > 2 drwxr-xr-x 21 root wheel 512 Jun 10 2007 www2 So, anybody may read/traverse folder www2, but only a process running as root may write within it. In the above, assuming you are running your rsync commands as root, you have authenticated as an rsync user named "root" against the rsync server. An rsync user is just a name defined in the server's secrets file, and has no relationship to system users. So, the question is: does the rsync server process run as root, ie with UID 0, while handling the client's request? For this to happen, rsync must be launched as root and must be instructed to stay running as root (not to switch to another user). Perhaps do you just need to add this line to the [backup] section: uid = 0 provided the daemon itself is launched as root. HTH, Axel From gsslist+osxadmin at anthropohedron.net Wed Apr 2 12:18:50 2008 From: gsslist+osxadmin at anthropohedron.net (Gregory Seidman) Date: Wed Apr 2 12:25:23 2008 Subject: Leopard, home on NFS, and Trash Message-ID: <20080402191848.GA19057@anthropohedron.net> I keep my mother's home directory on a RAID running on a Linux server, and this has been working beautifully for years under Tiger. Her logic board died and she got a new machine; of course, it came with Leopard installed. With a little bit of looking around I discovered the Directory Utility. I set up her home directory's NFS mount, fixed her UID and GID to match what it had been, made sure she owned the mountpoint, etc. When she logs in her home directory mounts automatically and everything works great. Well, almost. The Finder doesn't see anything in the Trash, even though her .Trash directory is full of stuff. Dragging a file to the Trash warns that it will be deleted immediately instead of being moved to the Trash and, indeed, that's what happened. I moved .Trash aside, restarted the Finder, and it correctly created a new .Trash directory. The problem with nothing appearing in it (even when I move something in from the commandline) and the warning (and behavior) about deleting immediately remains, multiple Finder restarts notwithstanding. Any ideas on how to fix that? --Greg From rhicks41 at tampabay.rr.com Wed Apr 2 12:35:57 2008 From: rhicks41 at tampabay.rr.com (Randal Hicks) Date: Wed Apr 2 12:36:02 2008 Subject: Fwd: Leopard, home on NFS, and Trash References: <187C9084-BF45-40EE-91F9-51813EE8F011@tampabay.rr.com> Message-ID: <8FCCB371-8FBB-4713-AA2F-07F67B66B98D@tampabay.rr.com> oops. Begin forwarded message: > From: Randal Hicks > Date: April 2, 2008 3:32:49 PM EDT > To: gsslist+osxadmin@anthropohedron.net > Subject: Re: Leopard, home on NFS, and Trash > Mime-Version: 1.0 (Apple Message framework v753) > In-Reply-To: <20080402191848.GA19057@anthropohedron.net> > References: <20080402191848.GA19057@anthropohedron.net> > Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed > Message-Id: <187C9084-BF45-40EE-91F9-51813EE8F011@tampabay.rr.com> > Content-Transfer-Encoding: 7bit > X-Pgp-Agent: GPGMail 1.1.2 (Tiger) > X-Gpgmail-State: signed > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > On Apr 2, 2008, at 3:18 PM, Gregory Seidman wrote: > . > . > . >> >> The Finder doesn't see anything in the Trash, even though her .Trash >> directory is full of stuff. Dragging a file to the Trash warns >> that it will >> be deleted immediately instead of being moved to the Trash and, >> indeed, >> that's what happened. I moved .Trash aside, restarted the Finder, >> and it >> correctly created a new .Trash directory. The problem with nothing >> appearing in it (even when I move something in from the >> commandline) and >> the warning (and behavior) about deleting immediately remains, >> multiple >> Finder restarts notwithstanding. >> > . > . > . > Greg, > Doublecheck the permissions and ownership on ~/.Trash as it sounds > like she > no longer owns the 'the trashcan'. Warnings of immediate deletion > would > indicate that this is your problem. > > regards, > Randal > > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.8 (Darwin) > > iEYEARECAAYFAkfz32EACgkQHXnD0tz+/vzH7wCggNqrhBZ+XdPdm/TfNguwDoov > c6oAnRMNls0rbuS51ui5eVmBxzwagwHT > =zv3Q > -----END PGP SIGNATURE----- From gsslist+osxadmin at anthropohedron.net Wed Apr 2 12:44:10 2008 From: gsslist+osxadmin at anthropohedron.net (Gregory Seidman) Date: Wed Apr 2 12:50:49 2008 Subject: Fwd: Leopard, home on NFS, and Trash In-Reply-To: <8FCCB371-8FBB-4713-AA2F-07F67B66B98D@tampabay.rr.com> References: <187C9084-BF45-40EE-91F9-51813EE8F011@tampabay.rr.com> <8FCCB371-8FBB-4713-AA2F-07F67B66B98D@tampabay.rr.com> Message-ID: <20080402194407.GA20327@anthropohedron.net> On Wed, Apr 02, 2008 at 03:35:57PM -0400, Randal Hicks wrote: > On Apr 2, 2008, at 3:18 PM, Gregory Seidman wrote: > . > . > . >> The Finder doesn't see anything in the Trash, even though her .Trash >> directory is full of stuff. Dragging a file to the Trash warns that it >> will be deleted immediately instead of being moved to the Trash and, >> indeed, that's what happened. I moved .Trash aside, restarted the >> Finder, and it correctly created a new .Trash directory. The problem >> with nothing appearing in it (even when I move something in from the >> commandline) and the warning (and behavior) about deleting immediately >> remains, multiple Finder restarts notwithstanding. > . > . > . > Greg, > Doublecheck the permissions and ownership on ~/.Trash as it sounds like > she no longer owns the 'the trashcan'. Warnings of immediate deletion > would indicate that this is your problem. As I mentioned, the Finder happily created a new .Trash directory. One would assume that it has correct permissions as a result, but: drwx------ 2 mseidman users 4096 Apr 2 14:02 .Trash I believe those are the correct permissions. The problem persists. > regards, > Randal --Greg From mikecap at mac.com Wed Apr 2 12:53:37 2008 From: mikecap at mac.com (mikecap@mac.com) Date: Wed Apr 2 12:53:51 2008 Subject: Leopard, home on NFS, and Trash In-Reply-To: <20080402194407.GA20327@anthropohedron.net> References: <187C9084-BF45-40EE-91F9-51813EE8F011@tampabay.rr.com> <8FCCB371-8FBB-4713-AA2F-07F67B66B98D@tampabay.rr.com> <20080402194407.GA20327@anthropohedron.net> Message-ID: <42EE6FFC-44A7-4A9D-A6E2-7A8CDA56B773@mac.com> On Apr 2, 2008, at 3:44 PM, Gregory Seidman wrote: > As I mentioned, the Finder happily created a new .Trash directory. One > would assume that it has correct permissions as a result, but: > > drwx------ 2 mseidman users 4096 Apr 2 14:02 .Trash > > I believe those are the correct permissions. The problem persists. Have you tried trashing (or moving) the Finder preferences? That seems like the next thing I'd try. Mike From brendan.mahony at dsto.defence.gov.au Wed Apr 2 18:01:53 2008 From: brendan.mahony at dsto.defence.gov.au (Dr. Brendan Patrick Mahony) Date: Wed Apr 2 18:14:28 2008 Subject: Leopard, home on NFS, and Trash In-Reply-To: <42EE6FFC-44A7-4A9D-A6E2-7A8CDA56B773@mac.com> References: <187C9084-BF45-40EE-91F9-51813EE8F011@tampabay.rr.com> <8FCCB371-8FBB-4713-AA2F-07F67B66B98D@tampabay.rr.com> <20080402194407.GA20327@anthropohedron.net> <42EE6FFC-44A7-4A9D-A6E2-7A8CDA56B773@mac.com> Message-ID: <27429A5A-518B-447A-85FF-DFD769787678@dsto.defence.gov.au> I've had this behaviour for years and years. I just thought it was part of using NFS. Following this thread I looked at ~/.Trashes and discovered is was a dead sym link. I removing this and finder preferences, then restarted finder. Trying to trash a file still gave me the "delete immediately" box, but now finder has also recreated the ~/.Trash folder. Obviously it thinks this is where to put it, it can create the folder, but it won't put things into it! Associately with a trashing failure, I also get a console message: Apr 3 11:14:47 xxxxxxxx com.apple.launchd[145] (0x110b90.Locum[44292]): Exited: Terminated Hope this rings a bell with someone. Brendan Brendan Mahony email: brendanm@adam.com.au phone: 83676918 IMPORTANT: This email remains the property of the Australian Defence Organisation and is subject to the jurisdiction of section 70 of the CRIMES ACT 1914. If you have received this email in error, you are requested to contact the sender and delete the email. From rhicks41 at tampabay.rr.com Wed Apr 2 19:57:07 2008 From: rhicks41 at tampabay.rr.com (Randal Hicks) Date: Wed Apr 2 19:57:31 2008 Subject: Leopard, home on NFS, and Trash In-Reply-To: <27429A5A-518B-447A-85FF-DFD769787678@dsto.defence.gov.au> References: <187C9084-BF45-40EE-91F9-51813EE8F011@tampabay.rr.com> <8FCCB371-8FBB-4713-AA2F-07F67B66B98D@tampabay.rr.com> <20080402194407.GA20327@anthropohedron.net> <42EE6FFC-44A7-4A9D-A6E2-7A8CDA56B773@mac.com> <27429A5A-518B-447A-85FF-DFD769787678@dsto.defence.gov.au> Message-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 All managed users have a directory for their preferences @ /Library/Managed Preferences/SomeManagedUser They are plists; doubleclick opens the associated app: Property List Editor. This is worth exploring. One of the niftiest things that I've learned is that even default settings that appear nowhere else can be changed @ the command line. I found a reference that may prove useful to the group: http://rixstep.com/2/20060901,00.shtml Though I know there are others out there... anyway, Within Terminal.app, one can also type the following to display their Global settings: defaults read ~/Library/Preferences/.GlobalPreferences (There's another in system library preferences as well) And though I don't know how ProhibitEmptyTrash would have been written there in the first place, it wouldn't hurt to try the following at the command line: defaults delete com.apple.finder ProhibitEmptyTrash ... and then restart finder So we've tried permissions, symlinks, and now associated plists and defaults. Have we left anything out? Oh. Maybe Access Control Lists? ( http://aplawrence.com/MacOSX/acl.html ) Hope this helps, Randal -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) iEYEARECAAYFAkf0R4QACgkQHXnD0tz+/vyVPACcDc2jlXGFKEBMEShCrT31JCZv V9AAn2RUE0mLWwHeGtPEueMK+E4Sx/Qo =yEoW -----END PGP SIGNATURE----- From kremels at kreme.com Thu Apr 3 07:21:03 2008 From: kremels at kreme.com (LuKreme) Date: Thu Apr 3 07:21:08 2008 Subject: rsyncd.conf In-Reply-To: <167B578C-CC5E-4EE5-AC5B-FEE4B7CFFED1@fusl.ac.be> References: <167B578C-CC5E-4EE5-AC5B-FEE4B7CFFED1@fusl.ac.be> Message-ID: <7BEAF792-6EB0-4395-B9EB-4B495241A974@kreme.com> On 1-Apr-2008, at 02:09, Axel Luttgens wrote: > Le 30 mars 08 ? 19:01, LuKreme a ?crit : >> I have the following in rsyncd.conf (on 'server'): >> >> [backup] >> path = /backup/ >> comment = Backup >> readonly = no >> auth users = root >> secrets file = /usr/local/etc/rsyncd.secrets >> >> I tried to connect to it from www2 >> >> rsync -av --password-file=/var/rsync.passwd --link- >> dest=server::backup/www2 / server::backup/www2.daily.0 >> >> and get the following error: >> >> building file list ... done >> rsync: mkdir "www2.daily.0" (in backup) failed: Permission denied >> (13) >> rsync error: error in file IO (code 11) at main.c(529) >> [receiver=2.6.9] >> rsync: connection unexpectedly closed (4 bytes received so far) >> [sender] >> >> Since the auth user for the rsync is 'root' why am I getting a >> permission failure? >> >> And even though the current www2 folder is owned by root (in fact, >> has the same permissions as /backup), I AM able to run the >> following command with no error: >> >> rsync -av --password-file=/var/rsync.passwd / server::backup/www2 >> >> $ ls -lsa /backup/ >> 2 drwxr-xr-x 13 root wheel 512 Mar 30 10:33 . >> 2 drwxr-xr-x 24 root wheel 1024 Feb 16 13:58 .. >> 2 drwxr-xr-x 21 root wheel 512 Jun 10 2007 www2 > > So, anybody may read/traverse folder www2, but only a process > running as root may write within it. > > In the above, assuming you are running your rsync commands as root, > you have authenticated as an rsync user named "root" against the > rsync server. > An rsync user is just a name defined in the server's secrets file, > and has no relationship to system users. Right, good point. > So, the question is: does the rsync server process run as root, ie > with UID 0, while handling the client's request? Yes, the daemon runs as root: $ psa rsync root 996 0.0 0.0 1548 284 ?? Is 21Mar08 1:15.45 /usr/ local/bin/rsync --daemon > For this to happen, rsync must be launched as root and must be > instructed to stay running as root (not to switch to another user). Ah, that could be. > Perhaps do you just need to add this line to the [backup] section: > uid = 0 > provided the daemon itself is launched as root. Ahah, yes, that should do it. Thanks much. -- Well boys, we got three engines out, we got more holes in us than a horse trader's mule, the radio is gone and we're leaking fuel and if we was flying any lower why we'd need sleigh bells on this thing... but we got one little budge on those Roosskies. At this height why they might harpoon us but they dang sure ain't gonna spot us on no radar screen! From IT at chrisking.com Thu Apr 3 12:25:40 2008 From: IT at chrisking.com (Alex Morken) Date: Thu Apr 3 12:47:29 2008 Subject: automountd, afp and file touching Message-ID: Hello, Yesterday, on my home directory server, automountd crashed (dual g5 xserve, running 10.4.9) and all the files in 3 people's home directories have modification dates of about the time it crashed (actually a number of minutes after it happened). It looks like every file was touched at a specific time. The times are all within 10 minutes of each other and correlate directly to the time automountd crashed. Also, everyone lost connection to their home directories at this time and AFP appeared not to be working. Below is the report from the CrashReporter. It appears to be caused by a memory access instruction per the technical note http:// developer.apple.com/technotes/tn2004/tn2123.html. My questions are - a) has anyone seen this situation where files get touched after automountd crashes? b) Anyone have any idea why files modification dates would be updated? c) anything else that I can check out (I have looked at all the logs in /var/log and /Library/Logs) to find out what caused this? Command: automountPath: /usr/sbin/automountParent: launchd [1] Version: ??? (???) PID: 234Thread: 3 Exception: EXC_BAD_ACCESS (0x0001)Codes: KERN_PROTECTION_FAILURE (0x0002) at 0x0000002c Thread 0:0 libSystem.B.dylib 0x9001fc2c select + 121 automount 0x000135b8 0x1000 + 751922 automount 0x000137e4 0x1000 + 757483 automount 0x000158d4 0x1000 + 841804 automount 0x00002a08 0x1000 + 66645 automount 0x000028b0 0x1000 + 6320 Thread 1:0 libSystem.B.dylib 0x9000b6e8 mach_msg_trap + 81 libSystem.B.dylib 0x9000b63c mach_msg + 602 com.apple.CoreFoundation 0x907deba8 __CFRunLoopRun + 8323 com.apple.CoreFoundation 0x907de4ac CFRunLoopRunSpecific + 2684 com.apple.CoreFoundation 0x907ed90c CFRunLoopRun + 525 automount 0x00014bfc 0x1000 + 808926 libSystem.B.dylib 0x9002c0a8 _pthread_body + 96 Thread 2:0 libSystem.B.dylib 0x9002f42c kevent + 121 automount 0x0001e82c 0x1000 + 1208762 automount 0x000138d0 0x1000 + 759843 libSystem.B.dylib 0x9002c0a8 _pthread_body + 96 Thread 3 Crashed:0 ...ple.CoreServices.OSServices 0x90ef2010 NSLXRequestMgr::NSLXRequestCachedPortionOfLookupFinished (NSLXRequest*) + 881 ...ple.CoreServices.OSServices 0x90f040d8 BrowserCallBack(__CFNetServiceBrowser*, unsigned long, void const*, CFStreamError*, void*) + 5162 com.apple.CFNetwork 0x90fa92f8 _BrowseReply + 9123 libSystem.B.dylib 0x9008aa98 handle_browse_response + 2204 libSystem.B.dylib 0x9008a948 DNSServiceProcessResult + 2565 com.apple.CFNetwork 0x90fc6c34 _SocketCallBack + 366 com.apple.CoreFoundation 0x907f23dc __CFSocketDoCallback + 5327 com.apple.CoreFoundation 0x907f2100 __CFSocketPerformV0 + 2888 com.apple.CoreFoundation 0x907df4fc __CFRunLoopDoSources0 + 3849 com.apple.CoreFoundation 0x907dea2c __CFRunLoopRun + 45210 com.apple.CoreFoundation 0x907de4ac CFRunLoopRunSpecific + 26811 com.apple.CoreFoundation 0x907ed90c CFRunLoopRun + 5212 ...ple.CoreServices.OSServices 0x90eea4fc NSLXRequestMgrThread::Run() + 32013 ...ple.CoreServices.OSServices 0x90eea350 LThread::_RunWrapper(void*) + 16814 libSystem.B.dylib 0x9002c0a8 _pthread_body + 96 Thread 4:0 libSystem.B.dylib 0x9001fc2c select + 121 com.apple.CoreFoundation 0x907f1434 __CFSocketManager + 4722 libSystem.B.dylib 0x9002c0a8 _pthread_body + 96 Thread 3 crashed with PPC Thread State 64: srr0: 0x0000000090ef2010 srr1: 0x100000000000f030 vrsave: 0x0000000000000000 cr: 0x44024424 xer: 0x0000000020000000 lr: 0x0000000090ef2004 ctr: 0x00000000907d6a24 r0: 0x0000000090ef2004 r1: 0x00000000f0202a20 r2: 0xfffffffffffffffc r3: 0x0000000000000001 r4: 0x000000000030ada0 r5: 0x00000000000003e8 r6: 0xffffffffffffffff r7: 0x0000000047f3b260 r8: 0x0000000000000001 r9: 0x000000000030ada0 r10: 0x0000000000000004 r11: 0x00000000a0ec9368 r12: 0x0000000000000000 r13: 0x0000000000000000 r14: 0x0000000000000000 r15: 0x0000000000000001 r16: 0x0000000000000000 r17: 0x0000000000000000 r18: 0x0000000000004403 r19: 0x0000000000000000 r20: 0x0000000000000002 r21: 0x000000000030ada0 r22: 0x0000000000000001 r23: 0x0000000090f03ed4 r24: 0x0000000000000000 r25: 0x00000000003108f0 r26: 0x0000000000000000 r27: 0x0000000000307270 r28: 0x0000000000000000 r29: 0x000000000030ada0 r30: 0x000000000030ada0 r31: 0x0000000090ef1fd0 Binary Images Description: 0x1000 - 0x27fff automount / usr/sbin/automount0x8fe00000 - 0x8fe52fff dyld 46.12 /usr/lib/ dyld0x90000000 - 0x901bdfff libSystem.B.dylib /usr/lib/ libSystem.B.dylib0x90215000 - 0x9021afff libmathCommon.A.dylib /usr/ lib/system/libmathCommon.A.dylib0x907bc000 - 0x90895fff com.apple.CoreFoundation 6.4.7 (368.28) /System/Library/Frameworks/ CoreFoundation.framework/Versions/A/CoreFoundation0x908de000 - 0x908defff com.apple.CoreServices 10.4 (???) /System/Library/ Frameworks/CoreServices.framework/Versions/A/CoreServices0x908e0000 - 0x909e2fff libicucore.A.dylib /usr/lib/ libicucore.A.dylib0x90a3c000 - 0x90ac0fff libobjc.A.dylib / usr/lib/libobjc.A.dylib0x90aea000 - 0x90b5cfff com.apple.framework.IOKit 1.4 (???) /System/Library/Frameworks/ IOKit.framework/Versions/A/IOKit0x90b72000 - 0x90b84fff libauto.dylib /usr/lib/libauto.dylib0x90b8b000 - 0x90e62fff com.apple.CoreServices.CarbonCore 681.10 /System/Library/ Frameworks/CoreServices.framework/Versions/A/Frameworks/ CarbonCore.framework/Versions/A/CarbonCore0x90ec8000 - 0x90f48fff com.apple.CoreServices.OSServices 4.1 /System/Library/Frameworks/ CoreServices.framework/Versions/A/Frameworks/OSServices.framework/ Versions/A/OSServices0x90f92000 - 0x90fd3fff com.apple.CFNetwork 4.0 (129.20) /System/Library/Frameworks/CoreServices.framework/ Versions/A/Frameworks/CFNetwork.framework/Versions/A/ CFNetwork0x90fe8000 - 0x91000fff com.apple.WebServices 1.1.2 (1.1.0) /System/Library/Frameworks/CoreServices.framework/ Versions/A/Frameworks/WebServicesCore.framework/Versions/A/ WebServicesCore0x91010000 - 0x91091fff com.apple.SearchKit 1.0.5 /System/Library/Frameworks/CoreServices.framework/ Versions/A/Frameworks/SearchKit.framework/Versions/A/ SearchKit0x910d7000 - 0x91100fff com.apple.Metadata 10.4.4 (121.36) /System/Library/Frameworks/CoreServices.framework/ Versions/A/Frameworks/Metadata.framework/Versions/A/ Metadata0x91111000 - 0x9111ffff libz.1.dylib /usr/lib/libz. 1.dylib0x91122000 - 0x912ddfff com.apple.security 4.6 (29770) / System/Library/Frameworks/Security.framework/Versions/A/ Security0x913dc000 - 0x913e5fff com.apple.DiskArbitration 2.1 / System/Library/Frameworks/DiskArbitration.framework/Versions/A/ DiskArbitration0x913ec000 - 0x913f4fff libbsm.dylib /usr/lib/ libbsm.dylib0x913f8000 - 0x91420fff com.apple.SystemConfiguration 1.8.3 /System/Library/Frameworks/SystemConfiguration.framework/ Versions/A/SystemConfiguration0x91433000 - 0x9143efff libgcc_s. 1.dylib /usr/lib/libgcc_s.1.dylib0x936ff000 - 0x9371ffff com.apple.DirectoryService.Framework 3.3 /System/Library/ Frameworks/DirectoryService.framework/DirectoryService0x964d7000 - 0x964dcfff com.apple.URLMount 2.1.7 /System/Library/ PrivateFrameworks/URLMount.framework/Versions/A/URLMount Thank you for any insights! Alex Morken From kremels at kreme.com Fri Apr 4 08:12:40 2008 From: kremels at kreme.com (LuKreme) Date: Fri Apr 4 08:12:46 2008 Subject: Security/Preference panes and /etc/authorization In-Reply-To: References: Message-ID: <64AA49E8-6DFD-4E1D-80FD-46824837D0B2@kreme.com> On 31-Mar-2008, at 11:38, Phillip Burk wrote: > I am just beginning my 10.5 rollout where I work and I have found an > oddity that I did not expect. In the Security pane of System > Preferences the "Require password to unlock each System Preferences > pane" is unchecked yet all regular users (not admin) have all of the > preference panes locked that have a lock. Er.. yes. Non-admin users ALWAYS have certain prefs locked. That's part of being non-admin. The preference you are looking at is for ADMIN users. > I believe I can kludge my way through this by altering the /etc/ > authorization file. Why would you want to allow non-admin users to, for example, access the account pane? > -- Hamburgers. The cornerstone of any nutritious breakfast. From philburk at mac.com Sat Apr 5 19:17:54 2008 From: philburk at mac.com (Phillip Burk) Date: Sat Apr 5 19:18:16 2008 Subject: Security/Preference panes and /etc/authorization In-Reply-To: <64AA49E8-6DFD-4E1D-80FD-46824837D0B2@kreme.com> References: <64AA49E8-6DFD-4E1D-80FD-46824837D0B2@kreme.com> Message-ID: On Apr 4, 2008, at 11:12 AM, LuKreme wrote: > On 31-Mar-2008, at 11:38, Phillip Burk wrote: > >> I am just beginning my 10.5 rollout where I work and I have found >> an oddity that I did not expect. In the Security pane of System >> Preferences the "Require password to unlock each System Preferences >> pane" is unchecked yet all regular users (not admin) have all of >> the preference panes locked that have a lock. > > Er.. yes. Non-admin users ALWAYS have certain prefs locked. That's > part of being non-admin. The preference you are looking at is for > ADMIN users. Not under 10.4 they didn't. Certainly not all of them. The Network pane wasn't, neither was the Sharing pane. >> I believe I can kludge my way through this by altering the /etc/ >> authorization file. > > Why would you want to allow non-admin users to, for example, access > the account pane? Set up printers. As it is right now, in 10.5 for non-admin users the Print & Fax pane is locked. In fact, ALL of the panes with a lock are locked. The complete list: Security, Energy Saver, Print & Fax, Network, Sharing, Accounts, Date & Time, Parental Controls, Software Update, Startup Disk, and Time Machine. They all are affected by /etc/ authorization and from what I've seen it's an all-or-nothing affair. I changed the system.preferences key from: group admin to one of our Active Directory groups. Of course by doing so I have completely disabled the local administrator account from being able to authenticate System Preferences using the local account username & password. A network user/pass is required... it's only a stopgap solution. Anyhow, I verified this behavior on four separate machines: my personal Mac Book Pro which is a stock 10.5.2 install and not bound to our corporate AD, my boss' personal Mac Book Pro (same as mine) and two corporate clients both built from my 10.5 image - one is Radminded, the other wasn't. They all behave like this. From chad+macosx at objectwerks.com Sun Apr 6 23:39:06 2008 From: chad+macosx at objectwerks.com (objectwerks inc) Date: Sun Apr 6 23:39:13 2008 Subject: Parallels Desktop 3 crashes after 10.5.2 update and Leopard Graphics update Message-ID: I have the latest Parallels installed and after upgrading to 10.5.2 and the Leopard Graphics Update, Parallels crashes -- regardless of VM it is trying to boot. It seems to crash before it tries to boot the VM and never presents any window on screen or anything. Here is the crash report and HW config Process: Parallels [46193] Path: /Applications/Parallels/Parallels Desktop.app/ Contents/MacOS/Parallels Identifier: com.parallels.desktop Version: 3.0 (3.0 Build 5584.0) Code Type: X86 (Native) Parent Process: launchd [191] Date/Time: 2008-04-07 00:01:25.421 -0600 OS Version: Mac OS X 10.5.2 (9C31) Report Version: 6 Exception Type: EXC_CRASH (SIGSEGV) Exception Codes: 0x0000000000000000, 0x0000000000000000 Crashed Thread: 1 Thread 0: 0 com.apple.coreui 0x90d35f7a CUISharedArtReader::Setup() + 260 1 com.apple.coreui 0x90d36085 CUISharedArtReader::CreateImageSource(long) + 35 2 com.apple.coreui 0x90d29553 CreateImageSourceFromDisk(long, CUIContext const*, long*, unsigned char*) + 45 3 com.apple.coreui 0x90d2e1ed CUIRenderer::CreateImage(long, CUIContext const*, CGRect*, float*, long*, unsigned char*) + 463 4 com.apple.coreui 0x90d0d478 CUIRenderer::DrawWindowFrameDark(CUIContext const*) + 782 5 com.apple.coreui 0x90d221be CUIRenderer::Draw(CGRect, CGContext*, __CFDictionary const*, __CFDictionary const**) + 4638 6 com.apple.HIToolbox 0x9669d707 HIWindowFrameView::DrawDark(CGRect const&, unsigned long, CGContext*) + 917 7 com.apple.HIToolbox 0x9669d202 HIWindowFrameView::DrawSelf(short, __HIShape const*, CGContext*) + 260 8 com.apple.HIToolbox 0x9660cda5 HIView::DrawCacheOrSelf(short, __HIShape const*, CGContext*) + 95 9 com.apple.HIToolbox 0x9660cbae HIView::SendDraw(short, OpaqueGrafPtr*, __HIShape const*, CGContext*) + 108 10 com.apple.HIToolbox 0x9660c80a HIView::RecursiveDrawComposited(__HIShape const*, unsigned long, HIView*, CGContext*, unsigned char, float) + 734 11 com.apple.HIToolbox 0x9660bc08 HIView::DrawComposited(short, OpaqueGrafPtr*, __HIShape const*, unsigned long, HIView*, CGContext*) + 668 12 com.apple.HIToolbox 0x9660b91b HIView::Draw(short, OpaqueGrafPtr*, unsigned long) + 83 13 com.apple.HIToolbox 0x9660b86b HIView::Render(unsigned long, CGContext*) + 45 14 com.apple.HIToolbox 0x9660b18f WindowData::PrepareForVisibility() + 145 15 com.apple.HIToolbox 0x9660a919 _ShowHideWindows + 289 16 com.apple.HIToolbox 0x9660a7f6 ShowHide + 38 17 com.parallels.desktop 0x0041f220 0x1000 + 4317728 18 com.parallels.desktop 0x00415f8d 0x1000 + 4280205 19 com.parallels.desktop 0x00416863 0x1000 + 4282467 20 com.parallels.desktop 0x000d3af8 0x1000 + 862968 21 com.parallels.desktop 0x00044d33 0x1000 + 277811 22 com.parallels.desktop 0x00006372 0x1000 + 21362 23 com.parallels.desktop 0x00006299 0x1000 + 21145 Thread 1 Crashed: 0 libSystem.B.dylib 0x9000d9e6 mach_msg_trap + 10 1 libSystem.B.dylib 0x900151dc mach_msg + 72 2 com.apple.CoreFoundation 0x919900de CFRunLoopRunSpecific + 1806 3 com.apple.CoreFoundation 0x91990d18 CFRunLoopRunInMode + 88 4 com.apple.audio.CoreAudio 0x93827464 HALRunLoop::OwnThread(void*) + 160 5 com.apple.audio.CoreAudio 0x93827300 CAPThread::Entry(CAPThread*) + 96 6 libSystem.B.dylib 0x9003ec55 _pthread_start + 321 7 libSystem.B.dylib 0x9003eb12 thread_start + 34 Thread 2: 0 libSystem.B.dylib 0x90014bce __semwait_signal + 10 1 libSystem.B.dylib 0x9003f8cd pthread_cond_wait $UNIX2003 + 73 2 libGLProgrammability.dylib 0x96a5a432 glvmDoWork + 162 3 libSystem.B.dylib 0x9003ec55 _pthread_start + 321 4 libSystem.B.dylib 0x9003eb12 thread_start + 34 Thread 1 crashed with X86 Thread State (32-bit): eax: 0x10004005 ebx: 0x9198f9e7 ecx: 0xb0f5e8cc edx: 0x9000d9e6 edi: 0x00000000 esi: 0x00000000 ebp: 0xb0f5e908 esp: 0xb0f5e8cc ss: 0x0000001f efl: 0x00000206 eip: 0x9000d9e6 cs: 0x00000007 ds: 0x0000001f es: 0x0000001f fs: 0x0000001f gs: 0x00000037 cr2: 0xb0f5efec Binary Images: 0x1000 - 0xd10ea3 +com.parallels.desktop 3.0 (3.0 Build 5584.0) / Applications/Parallels/Parallels Desktop.app/Contents/MacOS/Parallels 0x1030000 - 0x1111ff7 libxml2.2.dylib ??? (???) <3cd4cccd4ca35dffa4688436aa0cd908> /usr/lib/libxml2.2.dylib 0x1599000 - 0x15affff libJapaneseConverter.dylib ??? (???) <1e92e348e73fc6fce723936c11e4b25c> /System/Library/CoreServices/ Encodings/libJapaneseConverter.dylib 0x15b4000 - 0x15c2feb libSimplifiedChineseConverter.dylib ??? (???) /System/Library/CoreServices/ Encodings/libSimplifiedChineseConverter.dylib 0x15c7000 - 0x15d9fff libTraditionalChineseConverter.dylib ??? (???) <62db211c07419a0432254a86fcc96587> /System/Library/CoreServices/ Encodings/libTraditionalChineseConverter.dylib 0x15dd000 - 0x15fefe2 libKoreanConverter.dylib ??? (???) <2f3be93c8c0872958b681397ee09c9f1> /System/Library/CoreServices/ Encodings/libKoreanConverter.dylib 0x86004000 - 0x86007fff com.apple.audio.AudioIPCPlugIn 1.0.4 (1.0.4) <9028f8fa35b10a573818bf4600d90fdf> /System/Library/Extensions/ AudioIPCDriver.kext/Contents/Resources/AudioIPCPlugIn.bundle/Contents/ MacOS/AudioIPCPlugIn 0x8600d000 - 0x86012fff com.apple.audio.AppleHDAHALPlugIn 1.5.6 (1.5.6a19) /System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/ AppleHDAHALPlugIn.bundle/Contents/MacOS/AppleHDAHALPlugIn 0x8c2cf000 - 0x8c2ebff7 GLRendererFloat ??? (???) /System/Library/Frameworks/ OpenGL.framework/Versions/A/Resources/GLRendererFloat.bundle/ GLRendererFloat 0x8fe00000 - 0x8fe2da53 dyld 96.2 (???) <7af47d3b00b2268947563c7fa8c59a07> /usr/lib/dyld 0x90003000 - 0x9000cfff com.apple.speech.recognition.framework 3.7.24 (3.7.24) /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/ Versions/A/SpeechRecognition 0x9000d000 - 0x9016cff3 libSystem.B.dylib ??? (???) <4899376234e55593b22fc370935f8cdf> /usr/lib/libSystem.B.dylib 0x9020c000 - 0x9029fff3 com.apple.ApplicationServices.ATS 3.2 (???) /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/ Versions/A/ATS 0x90386000 - 0x9038dfe9 libgcc_s.1.dylib ??? (???) /usr/lib/libgcc_s.1.dylib 0x905e2000 - 0x905eefe7 com.apple.opengl 1.5.6 (1.5.6) /System/Library/Frameworks/ OpenGL.framework/Versions/A/OpenGL 0x905ef000 - 0x9064cffb libstdc++.6.dylib ??? (???) <04b812dcec670daa8b7d2852ab14be60> /usr/lib/libstdc++.6.dylib 0x90698000 - 0x906c5feb libvDSP.dylib ??? (???) /System/Library/Frameworks/ Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/ libvDSP.dylib 0x907ff000 - 0x908b1ffb libcrypto.0.9.7.dylib ??? (???) <330b0e48e67faffc8c22dfc069ca7a47> /usr/lib/libcrypto.0.9.7.dylib 0x908b5000 - 0x90a80ff7 com.apple.security 5.0.2 (33001) <0788969ffe7961153219be10786da436> /System/Library/Frameworks/ Security.framework/Versions/A/Security 0x90d04000 - 0x90d3efff com.apple.coreui 1.1 (61) /System/Library/ PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI 0x90d3f000 - 0x90e1efff libobjc.A.dylib ??? (???) /usr/lib/libobjc.A.dylib 0x90e1f000 - 0x90e9eff5 com.apple.SearchKit 1.2.0 (1.2.0) <277b460da86bc222785159fe77e2e2ed> /System/Library/Frameworks/ CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/ Versions/A/SearchKit 0x90e9f000 - 0x90eaaff9 com.apple.helpdata 1.0 (14) /System/Library/ PrivateFrameworks/HelpData.framework/Versions/A/HelpData 0x90eab000 - 0x90ebfff3 com.apple.ImageCapture 4.0 (5.0.0) /System/ Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ ImageCapture.framework/Versions/A/ImageCapture 0x90ec0000 - 0x90f53fff com.apple.ink.framework 101.3 (86) /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink 0x90f54000 - 0x91078fe3 com.apple.audio.toolbox.AudioToolbox 1.5.1 (1.5.1) /System/Library/Frameworks/AudioToolbox.framework/Versions/A/ AudioToolbox 0x910b3000 - 0x910b3ffb com.apple.installserver.framework 1.0 (8) / System/Library/PrivateFrameworks/InstallServer.framework/Versions/A/ InstallServer 0x910b4000 - 0x910dcfff libcups.2.dylib ??? (???) <2f0a710a9128882efb2ed92ad139b58c> /usr/lib/libcups.2.dylib 0x91187000 - 0x911c8fe7 libRIP.A.dylib ??? (???) <9d42e83d860433f9126c4871d1fe0ce8> /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib 0x911c9000 - 0x911c9ffd com.apple.Accelerate.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/ Frameworks/vecLib.framework/Versions/A/vecLib 0x911ca000 - 0x91226ff7 com.apple.htmlrendering 68 (1.1.3) /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/ Versions/A/HTMLRendering 0x91234000 - 0x91548fe2 com.apple.QuickTime 7.4.1 (14) <1a4838d29e0804a2a102f03c053600f0> /System/Library/Frameworks/ QuickTime.framework/Versions/A/QuickTime 0x9154e000 - 0x91615ff2 com.apple.vImage 3.0 (3.0) /System/Library/ Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/ Versions/A/vImage 0x91616000 - 0x91616fff com.apple.Carbon 136 (136) <9961570a497d79f13b8ea159826af42d> /System/Library/Frameworks/ Carbon.framework/Versions/A/Carbon 0x91617000 - 0x91625ffd libz.1.dylib ??? (???) <5ddd8539ae2ebfd8e7cc1c57525385c7> /usr/lib/libz.1.dylib 0x918c4000 - 0x918ecff7 com.apple.shortcut 1 (1.0) <057783867138902b52bc0941fedb74d1> /System/Library/PrivateFrameworks/ Shortcut.framework/Versions/A/Shortcut 0x9191e000 - 0x91a50fef com.apple.CoreFoundation 6.5.1 (476.10) /System/Library/Frameworks/ CoreFoundation.framework/Versions/A/CoreFoundation 0x91a51000 - 0x91a6ffff libresolv.9.dylib ??? (???) <0629b6dcd71f4aac6a891cbe26253e85> /usr/lib/libresolv.9.dylib 0x91a70000 - 0x91a74fff libGIF.dylib ??? (???) /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/ Versions/A/Resources/libGIF.dylib 0x91a75000 - 0x91a99fff libxslt.1.dylib ??? (???) <4933ddc7f6618743197aadc85b33b5ab> /usr/lib/libxslt.1.dylib 0x91a9a000 - 0x92133fff com.apple.CoreGraphics 1.351.21 (???) <6c93fd21149f389129fe47fa6ef71880> /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ CoreGraphics.framework/Versions/A/CoreGraphics 0x921a1000 - 0x921fbff7 com.apple.CoreText 2.0.1 (???) <07494945ad1e3f5395599f42748457cc> /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/ Versions/A/CoreText 0x921fc000 - 0x92279fef libvMisc.dylib ??? (???) /System/Library/ Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/ Versions/A/libvMisc.dylib 0x9227a000 - 0x92321feb com.apple.QD 3.11.52 (???) /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/QD.framework/ Versions/A/QD 0x92322000 - 0x923dcfe3 com.apple.CoreServices.OSServices 224.4 (224.4) /System/Library/Frameworks/ CoreServices.framework/Versions/A/Frameworks/OSServices.framework/ Versions/A/OSServices 0x923dd000 - 0x923e4ff7 libCGATS.A.dylib ??? (???) /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib 0x923e5000 - 0x924b0fff com.apple.ColorSync 4.5.0 (4.5.0) /System/ Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ColorSync.framework/Versions/A/ColorSync 0x924b7000 - 0x924fcfef com.apple.Metadata 10.5.2 (398.7) <73a6424c06effc474e699cde6883de99> /System/Library/Frameworks/ CoreServices.framework/Versions/A/Frameworks/Metadata.framework/ Versions/A/Metadata 0x924fd000 - 0x92502fff com.apple.CommonPanels 1.2.4 (85) /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/ A/CommonPanels 0x92503000 - 0x927dcff3 com.apple.CoreServices.CarbonCore 785.8 (785.8) <827c228e7d717b397cdb4941eba69553> /System/Library/Frameworks/ CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/ Versions/A/CarbonCore 0x927dd000 - 0x927f3fff com.apple.DictionaryServices 1.0.0 (1.0.0) /System/Library/Frameworks/ CoreServices.framework/Versions/A/Frameworks/ DictionaryServices.framework/Versions/A/DictionaryServices 0x92e55000 - 0x92e5bfff com.apple.print.framework.Print 218.0.2 (220.1) <8bf7ef71216376d12fcd5ec17e43742c> /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print 0x92e5c000 - 0x92e5efff com.apple.securityhi 3.0 (30817) /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/ SecurityHI 0x92e5f000 - 0x92e6fffc com.apple.LangAnalysis 1.6.4 (1.6.4) /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ LangAnalysis.framework/Versions/A/LangAnalysis 0x92ea0000 - 0x92ea0ffc com.apple.audio.units.AudioUnit 1.5 (1.5) / System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit 0x92ea1000 - 0x92ea1ff8 com.apple.ApplicationServices 34 (34) <8f910fa65f01d401ad8d04cc933cf887> /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/ApplicationServices 0x92ea2000 - 0x92fe7ff7 com.apple.ImageIO.framework 2.0.1 (2.0.1) <68ba11e689a9ca30f8310935cd1e02d6> /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/ Versions/A/ImageIO 0x92fe8000 - 0x93262fe7 com.apple.Foundation 6.5.4 (677.15) <6216196287f98a65ddb654d04d773e7b> /System/Library/Frameworks/ Foundation.framework/Versions/C/Foundation 0x93263000 - 0x9339bff7 libicucore.A.dylib ??? (???) /usr/lib/libicucore.A.dylib 0x9339c000 - 0x933c7fe7 libauto.dylib ??? (???) <42d8422dc23a18071869fdf7b5d8fab5> /usr/lib/libauto.dylib 0x933c9000 - 0x93452fe3 com.apple.DesktopServices 1.4.5 (1.4.5) <8b264cd6abbbd750928c637e1247269d> /System/Library/PrivateFrameworks/ DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv 0x93453000 - 0x937e9ff7 com.apple.QuartzCore 1.5.1 (1.5.1) <665c80f6e28555b303020c8007c36b8b> /System/Library/Frameworks/ QuartzCore.framework/Versions/A/QuartzCore 0x937ea000 - 0x93809ffa libJPEG.dylib ??? (???) <0dd7e9d7fb22174b78205a944144f9c3> /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/ Versions/A/Resources/libJPEG.dylib 0x9380a000 - 0x93886feb com.apple.audio.CoreAudio 3.1.0 (3.1) <483e0d3879d52ba9ac10b4bcfb0728d6> /System/Library/Frameworks/ CoreAudio.framework/Versions/A/CoreAudio 0x93897000 - 0x93897ffd com.apple.Accelerate 1.4.2 (Accelerate 1.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/ Accelerate 0x9394f000 - 0x93959feb com.apple.audio.SoundManager 3.9.2 (3.9.2) <0f2ba6e891d3761212cf5a5e6134d683> /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/ A/CarbonSound 0x939a8000 - 0x939a8ff8 com.apple.Cocoa 6.5 (???) /System/Library/Frameworks/ Cocoa.framework/Versions/A/Cocoa 0x939d4000 - 0x93a0bfff com.apple.SystemConfiguration 1.9.1 (1.9.1) <8a76e429301afe4eba1330bfeaabd9f2> /System/Library/Frameworks/ SystemConfiguration.framework/Versions/A/SystemConfiguration 0x93a0c000 - 0x93a0ffff com.apple.help 1.1 (36) /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help 0x93a10000 - 0x93a11ffc libffi.dylib ??? (???) /usr/lib/libffi.dylib 0x93a12000 - 0x93a16fff libmathCommon.A.dylib ??? (???) /usr/lib/ system/libmathCommon.A.dylib 0x93a17000 - 0x93a1ffff com.apple.DiskArbitration 2.2.1 (2.2.1) <75b0c8d8940a8a27816961dddcac8e0f> /System/Library/Frameworks/ DiskArbitration.framework/Versions/A/DiskArbitration 0x93adc000 - 0x93b2cff7 com.apple.HIServices 1.7.0 (???) /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ HIServices.framework/Versions/A/HIServices 0x93b4a000 - 0x93b8cfef com.apple.NavigationServices 3.5.1 (161) /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/ Versions/A/NavigationServices 0x93c55000 - 0x93cccfe3 com.apple.CFNetwork 221.5 (221.5) <5474cdd7d2a8b2e8059de249c702df9e> /System/Library/Frameworks/ CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/ Versions/A/CFNetwork 0x93cdb000 - 0x93d1afef libTIFF.dylib ??? (???) <76301b3506f310fb454b58897c8d0a9f> /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/ Versions/A/Resources/libTIFF.dylib 0x94ca3000 - 0x94cb3fff com.apple.speech.synthesis.framework 3.6.59 (3.6.59) <4ffef145fad3d4d787e0c33eab26b336> /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ SpeechSynthesis.framework/Versions/A/SpeechSynthesis 0x94cb4000 - 0x94ccafe7 com.apple.CoreVideo 1.5.0 (1.5.0) <7e010557527a0e6d49147c297d16850a> /System/Library/Frameworks/ CoreVideo.framework/Versions/A/CoreVideo 0x94ccb000 - 0x94d52ff7 libsqlite3.0.dylib ??? (???) <6978bbcca4277d6ae9f042beff643f7d> /usr/lib/libsqlite3.0.dylib 0x94f46000 - 0x94f4dffe libbsm.dylib ??? (???) /usr/lib/libbsm.dylib 0x94f92000 - 0x9500cff8 com.apple.print.framework.PrintCore 5.5.2 (245.1) <3c9de512e95fbd838694ee5008d56a28> /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ PrintCore.framework/Versions/A/PrintCore 0x95070000 - 0x95070ffd com.apple.vecLib 3.4.2 (vecLib 3.4.2) /System/ Library/Frameworks/vecLib.framework/Versions/A/vecLib 0x950c0000 - 0x958bdfef com.apple.AppKit 6.5.2 (949.26) /System/Library/Frameworks/ AppKit.framework/Versions/C/AppKit 0x958be000 - 0x958c5fff com.apple.agl 3.0.9 (AGL-3.0.9) <7dac4a7cb0de2f6d08ae71c1249379e3> /System/Library/Frameworks/ AGL.framework/Versions/A/AGL 0x958c6000 - 0x958c6ffa com.apple.CoreServices 32 (32) <2fcc8f3bd5bbfc000b476cad8e6a3dd2> /System/Library/Frameworks/ CoreServices.framework/Versions/A/CoreServices 0x958c7000 - 0x95953ff7 com.apple.LaunchServices 286.5 (286.5) <33c3ae54abb276b61a99d4c764d883e2> /System/Library/Frameworks/ CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/ Versions/A/LaunchServices 0x95954000 - 0x959adff7 libGLU.dylib ??? (???) /System/Library/ Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib 0x959ae000 - 0x95a93ff3 com.apple.CoreData 100.1 (186) <8e28162ef2288692615b52acc01f8b54> /System/Library/Frameworks/ CoreData.framework/Versions/A/CoreData 0x95a94000 - 0x95aafffb libPng.dylib ??? (???) <85ca18172d7a4b5a5be3574e4e879880> /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/ Versions/A/Resources/libPng.dylib 0x95c09000 - 0x95c14fe7 libCSync.A.dylib ??? (???) <482d16ba55f91a5dc05f78cc9db707a7> /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib 0x95c15000 - 0x95c53ff7 libGLImage.dylib ??? (???) <090de775838db03ddc710f57abbf6218> /System/Library/Frameworks/ OpenGL.framework/Versions/A/Libraries/libGLImage.dylib 0x95c54000 - 0x96064fef libBLAS.dylib ??? (???) /System/Library/ Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/ Versions/A/libBLAS.dylib 0x96065000 - 0x9607dfff com.apple.openscripting 1.2.6 (???) /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/ Versions/A/OpenScripting 0x9607e000 - 0x9643cfea libLAPACK.dylib ??? (???) /System/Library/ Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/ Versions/A/libLAPACK.dylib 0x9643d000 - 0x964c8fff com.apple.framework.IOKit 1.5.1 (???) /System/Library/Frameworks/ IOKit.framework/Versions/A/IOKit 0x965e2000 - 0x968eafff com.apple.HIToolbox 1.5.2 (???) <7449d6f2da33ded6936243a92e307459> /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/ HIToolbox 0x968eb000 - 0x9691afe3 com.apple.AE 402.2 (402.2) /System/Library/Frameworks/ CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE 0x9691b000 - 0x9691dff5 libRadiance.dylib ??? (???) /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/ Versions/A/Resources/libRadiance.dylib 0x96961000 - 0x96a11fff edu.mit.Kerberos 6.0.12 (6.0.12) <3dd13466876a8fe4549cfc1354233ec3> /System/Library/Frameworks/ Kerberos.framework/Versions/A/Kerberos 0x96a12000 - 0x96a32ff2 libGL.dylib ??? (???) /System/Library/ Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib 0x96a33000 - 0x96f06fde libGLProgrammability.dylib ??? (???) /System/Library/Frameworks/ OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib 0xb4205000 - 0xb4387fef GLEngine ??? (???) /System/Library/Frameworks/ OpenGL.framework/Resources/GLEngine.bundle/GLEngine 0xb4564000 - 0xb46ebfeb com.apple.GeForceFXGLDriver 1.5.24 (5.2.4) <772533634e5b6870e8f6248277ed0e5d> /System/Library/Extensions/ GeForceFXGLDriver.bundle/Contents/MacOS/GeForceFXGLDriver 0xfffe8000 - 0xfffebfff libobjc.A.dylib ??? (???) /usr/lib/ libobjc.A.dylib 0xffff0000 - 0xffff1780 libSystem.B.dylib ??? (???) /usr/lib/ libSystem.B.dylib Model: MacPro2,1, BootROM MP21.007F.B08, 8 processors, Quad-Core Intel Xeon, 3 GHz, 16 GB Graphics: kHW_NVidiaGeForce7300GTItem, NVIDIA GeForce 7300 GT, spdisplays_pcie_device, 256 MB Graphics: kHW_NVidiaQuadroFX4500Item, NVIDIA Quadro FX 4500, spdisplays_pcie_device, 512 MB Memory Module: DIMM Riser A/DIMM 1, 2 GB, DDR2 FB-DIMM, 667 MHz Memory Module: DIMM Riser A/DIMM 2, 2 GB, DDR2 FB-DIMM, 667 MHz Memory Module: DIMM Riser B/DIMM 1, 2 GB, DDR2 FB-DIMM, 667 MHz Memory Module: DIMM Riser B/DIMM 2, 2 GB, DDR2 FB-DIMM, 667 MHz Memory Module: DIMM Riser A/DIMM 3, 2 GB, DDR2 FB-DIMM, 667 MHz Memory Module: DIMM Riser A/DIMM 4, 2 GB, DDR2 FB-DIMM, 667 MHz Memory Module: DIMM Riser B/DIMM 3, 2 GB, DDR2 FB-DIMM, 667 MHz Memory Module: DIMM Riser B/DIMM 4, 2 GB, DDR2 FB-DIMM, 667 MHz AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x87), Broadcom BCM43xx 1.0 (4.170.46.3) Bluetooth: Version 2.1.0f14, 2 service, 1 devices, 1 incoming serial ports Network Service: Ethernet 1, Ethernet, en0 Network Service: Parallels Host-Guest, Ethernet, en4 Network Service: Parallels NAT, Ethernet, en3 PCI Card: NVIDIA GeForce 7300 GT, display, Slot-3 PCI Card: NVIDIA Quadro FX 4500, display, Slot-1 Serial ATA Device: Hitachi HUA721075KLA330, 698.64 GB Serial ATA Device: Hitachi HUA721075KLA330, 698.64 GB Serial ATA Device: Hitachi HUA721075KLA330, 698.64 GB Serial ATA Device: Hitachi HUA721075KLA330, 698.64 GB Parallel ATA Device: PIONEER DVD-RW DVR-112D, 7.65 GB Parallel ATA Device: PIONEER DVD-RW DVR-112D, 684.5 MB USB Device: hub_device, high_speed, 500 mA USB Device: Apple Cinema HD Display, Apple Computer, Inc., full_speed, 500 mA USB Device: hub_device, high_speed, 500 mA USB Device: Keyboard Hub, Apple, Inc., high_speed, 500 mA USB Device: Apple Keyboard, Apple, Inc, low_speed, 100 mA USB Device: Apple Cinema HD Display, Apple Computer, Inc., full_speed, 500 mA USB Device: hub_device, high_speed, 500 mA USB Device: Apple Cinema HD Display, Apple Computer, Inc., full_speed, 500 mA USB Device: Bluetooth USB Host Controller, Apple, Inc., full_speed, 500 mA USB Device: Apple Optical USB Mouse, Mitsumi Electric, low_speed, 500 mA FireWire Device: built-in_hub, unknown_value, unknown_speed FireWire Device: unknown_device, unknown_value, unknown_speed FireWire Device: unknown_device, unknown_value, unknown_speed FireWire Device: unknown_device, unknown_value, unknown_speed From newslists at autonomy.caltech.edu Tue Apr 8 09:29:30 2008 From: newslists at autonomy.caltech.edu (R.L. Grigg) Date: Tue Apr 8 09:34:51 2008 Subject: Runaway coreservicesd process Message-ID: One of our systems (2xG5 PPC 10.5.2 OSX) has one CPU fully taken up by the 'coreservicesd' process. It is running at about 98.4% CPU bpound and has been for weeks even when the system is otherwise totally unused. What could cause it to do this? Is there a log file someplace that might tell me more info? The console and system logs dont show anything out of thfe ordinary. Russ From brett.dikeman at gmail.com Tue Apr 8 12:29:11 2008 From: brett.dikeman at gmail.com (Brett Dikeman) Date: Tue Apr 8 12:29:17 2008 Subject: Parallels Desktop 3 crashes after 10.5.2 update and Leopard Graphics update In-Reply-To: References: Message-ID: <9d9c4a330804081229n209db577r4229653629eeab35@mail.gmail.com> On Mon, Apr 7, 2008 at 2:39 AM, objectwerks inc wrote: > I have the latest Parallels installed and after upgrading to 10.5.2 and the > Leopard Graphics Update, Parallels crashes -- regardless of VM it is trying > to boot. It seems to crash before it tries to boot the VM and never > presents any window on screen or anything. > > Here is the crash report and HW config Parallels has user forums ( and support for paid customers.) I'd suggest sharing that information with them... Brett From chad+macosx at objectwerks.com Tue Apr 8 13:02:49 2008 From: chad+macosx at objectwerks.com (objectwerks inc) Date: Tue Apr 8 13:02:56 2008 Subject: Parallels Desktop 3 crashes after 10.5.2 update and Leopard Graphics update In-Reply-To: <9d9c4a330804081229n209db577r4229653629eeab35@mail.gmail.com> References: <9d9c4a330804081229n209db577r4229653629eeab35@mail.gmail.com> Message-ID: On Apr 8, 2008, at 1:29 PM, Brett Dikeman wrote: > On Mon, Apr 7, 2008 at 2:39 AM, objectwerks inc > wrote: >> I have the latest Parallels installed and after upgrading to 10.5.2 >> and the >> Leopard Graphics Update, Parallels crashes -- regardless of VM it >> is trying >> to boot. It seems to crash before it tries to boot the VM and never >> presents any window on screen or anything. >> >> Here is the crash report and HW config > > Parallels has user forums ( and support for paid customers.) I'd > suggest sharing that information with them... Yes, I have a support call in to them as well. First thing they wanted me to try didn't work... I have not posted yet to the forums. Was wondering if other have seen the same or similar issues. Thanks best Chad > > > Brett From zpamaral at gmail.com Wed Apr 9 19:14:16 2008 From: zpamaral at gmail.com (=?ISO-8859-1?Q?Jos=E9_Pedro_do_Amaral?=) Date: Wed Apr 9 19:14:23 2008 Subject: Darwin Streaming Server Message-ID: Hi, I recently compiled and install Darwin Streaming Server 5.5.5 without major problem on Solaris 10. However, I neither can install nor compile successfully the same package on an Intel Core2 Duo Mac Book Pro with Leopard 10.5.2 (latest developer tools). On the one hand, if I download the installer, then all packages are installed, but the executable /usr/sbin/QuickTimeStreamingServer will not execute with the error: unable to execute /usr/sbin/QuickTimeStreamingServer: Bad executable (or shared library) On the other hand, whenever I compiled the package with BuildOSXInstallerPkg dss, I would get a statement of ** BUILD SUCCEEDED **, but the executable QuickTimeStreamingServer would not be compiled (the other executables and scripts were compiled, though). Anybody knows what the problem might be? On Google I found a few cases like this with no answers. Thank you. Cordially, ZP -- Jos? Pedro Sousa do Amaral The White Rabbit put on his spectacles. 'Where shall I begin, please your Majesty ?' he asked. 'Begin at the beginning,', the King said, very gravely, 'and go on till you come to the end: then stop.' -- Lewis Carroll From PERBIX at lmsd.org Fri Apr 11 08:02:32 2008 From: PERBIX at lmsd.org (Perbix, Michael) Date: Fri Apr 11 08:06:05 2008 Subject: Darwin Streaming Server In-Reply-To: References: Message-ID: <06A81E8192910B41B2B3FFD57535BCF75B22A2C41D@MS1.lmsd.org> You may wish to try the Streaming Server Dev list at Apple http://lists.apple.com/mailman/listinfo/streaming-server-dev You might get more of a response. -Mike ________________________________________ From: macosx-admin-bounces@omnigroup.com [macosx-admin-bounces@omnigroup.com] On Behalf Of Jos? Pedro do Amaral [zpamaral@gmail.com] Sent: Wednesday, April 09, 2008 10:14 PM To: osxa Subject: Darwin Streaming Server Hi, I recently compiled and install Darwin Streaming Server 5.5.5 without major problem on Solaris 10. However, I neither can install nor compile successfully the same package on an Intel Core2 Duo Mac Book Pro with Leopard 10.5.2 (latest developer tools). On the one hand, if I download the installer, then all packages are installed, but the executable /usr/sbin/QuickTimeStreamingServer will not execute with the error: unable to execute /usr/sbin/QuickTimeStreamingServer: Bad executable (or shared library) On the other hand, whenever I compiled the package with BuildOSXInstallerPkg dss, I would get a statement of ** BUILD SUCCEEDED **, but the executable QuickTimeStreamingServer would not be compiled (the other executables and scripts were compiled, though). Anybody knows what the problem might be? On Google I found a few cases like this with no answers. Thank you. Cordially, ZP -- Jos? Pedro Sousa do Amaral The White Rabbit put on his spectacles. 'Where shall I begin, please your Majesty ?' he asked. 'Begin at the beginning,', the King said, very gravely, 'and go on till you come to the end: then stop.' -- Lewis Carroll From PERBIX at lmsd.org Sun Apr 13 14:25:47 2008 From: PERBIX at lmsd.org (Perbix, Michael) Date: Sun Apr 13 14:26:24 2008 Subject: Mobile Account mounting Network Home in AD Message-ID: <06A81E8192910B41B2B3FFD57535BCF75B22A2C440@MS1.lmsd.org> I have a mobile account and I am able to use my laptop, MCX and AD account info is being cached, and all it great when in the office. At home, I can log in, but 10.5 is trying to mount my network home via the AD plugin and AFP. Is there a quicker way to time this out, and NOT have a message pop up saying it couldn't connect etc etc...just have it silently fail and not cause any probelms? -Mike From magicmiles at gmail.com Mon Apr 14 11:56:06 2008 From: magicmiles at gmail.com (m i l e s) Date: Mon Apr 14 11:56:18 2008 Subject: Can't Get Into MySQL Message-ID: Hi, I just opened the box of a NEW XServe, was checking out MySQL to see if I needed to update the version that its running and I see its been made part of the install. That's great. However I turned it on as a service, tried to login with Navicat, and a host of other tools. No go. The response I get back from Navicat (and every other tool) is that I can't connect to the host on 127.0.0.1 (61). Ummm, that's a standard loopback address. I should be able to connect on that IP. Furthermore, when I change the IP to IP of the machine, no go either. And yes I'm connected to the 1st Ethernet Port, not the 2nd. Ethernet1 is up and running. Firewall is allowing ALL connections. So what am I missing ? Miles. PS: Asked this same question on the apple boards over the weekend, got no response. Posting here in hopes that someone can direct me to what's up with my XServe in relation to MySQL. Thanks ahead of time... From magicmiles at gmail.com Mon Apr 14 12:11:49 2008 From: magicmiles at gmail.com (m i l e s) Date: Mon Apr 14 12:12:17 2008 Subject: Can't Get Into MySQL In-Reply-To: References: Message-ID: <1ff20e220804141211v615410d4q43860c4ca484839a@mail.gmail.com> Hi, Sorry forgot to mention that this is LEOPARD 10.5.1 on the new XServe. Also as you would expect got plenty of RAM on this new toy...so memory is not an issue nor is drive space. Any suggestions would be helpful... Miles. From dp at toshoklabs.com Mon Apr 14 12:09:39 2008 From: dp at toshoklabs.com (Chad Harrison) Date: Mon Apr 14 12:17:23 2008 Subject: Can't Get Into MySQL In-Reply-To: <20080414190047.83B38150486@forums.omnigroup.com> References: <20080414190047.83B38150486@forums.omnigroup.com> Message-ID: On Apr 14, 2008, at 3:00 PM, macosx-admin-request@omnigroup.com wrote: > Message: 2 > Date: Mon, 14 Apr 2008 11:56:06 -0700 > From: m i l e s > Subject: Can't Get Into MySQL > To: macosx-admin@omnigroup.com > Message-ID: > Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes > > Hi, > > I just opened the box of a NEW XServe, was checking out MySQL to see > if I needed to update the version that its running and I see its been > made part of the install. That's great. However I turned it on as a > service, tried to login with Navicat, and a host of other tools. No > go. The response I get back from Navicat (and every other tool) is > that I can't connect to the host on 127.0.0.1 (61). Ummm, that's a > standard loopback address. I should be able to connect on that IP. > Furthermore, when I change the IP to IP of the machine, no go either. > And yes I'm connected to the 1st Ethernet Port, not the 2nd. Ethernet1 > is up and running. > > Firewall is allowing ALL connections. > > So what am I missing ? > > Miles. > > PS: Asked this same question on the apple boards over the weekend, got > no response. > > Posting here in hopes that someone can direct me to what's up with my > XServe in relation to MySQL. Thanks ahead of time... The MySQL permissions table (mysql.user) my not contain an entry for 127.0.0.1 - try localhost or the .local From sroebuck at bltomato.com Tue Apr 15 10:12:11 2008 From: sroebuck at bltomato.com (Scott Roebuck) Date: Tue Apr 15 10:27:22 2008 Subject: Mac Clone??? Message-ID: Any thoughts? http://www.psystar.com/index.php? &page=shop.product_details&flypage=flypage_images.tpl&product_id=1&categ ory_id=3&manufacturer_id=4&option=com_virtuemart&Itemid=72 Or this? http://www.psystar.com/index.php? &page=shop.product_details&flypage=flypage_images.tpl&product_id=19&cate gory_id=3&option=com_virtuemart&Itemid=72 Do you think Apple will put the kibosh on this? ____________ This e-mail (including attachments) is covered by the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521 and is intended only for the use of the individual or entity named above and may contain information that is privileged, confidential and exempt from disclosure under applicable laws. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering this electronic message to the intended recipient, you are notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this transmission in error, please notify us immediately by reply e-mail or by telephone (323-860-4000), and destroy the original transmission and its attachments without reading them or saving them to disk or otherwise. Thank you. From larkost at softhome.net Tue Apr 15 10:57:43 2008 From: larkost at softhome.net (Karl Kuehn) Date: Tue Apr 15 10:57:56 2008 Subject: Mac Clone??? In-Reply-To: References: Message-ID: On Apr 15, 2008, at 10:12 AM, Scott Roebuck wrote: > Any thoughts? Pystar's "Open Computer" is a bit of a nockoff. There are a large number of caviets that you have to accept that I would not be comfortable with: - they are not really running an EFI system, so they have it faked, this is going to come back and bite people (no NetBooting or NetRestore) - they don't guarantee that this will work with any system updates, and seem inclined to think that general system updates will break the machine. I expect that they are just using the information from the OSx86 project, and my understanding is that they need to re-do things for almost every update. - by accepting this machine with MacOS X on it you are definitely breaking the EULA, since this is not "Apple Branded Hardware". The company is talking up how they are going to stand up to Apple in court, but I don't think that is going to last very long. - their definition of "equivalent computer" needs a lot of work. - FireWire is optional (for a fee), and I am betting that you don't have target-disk mode. There are going to be a lot more "little" things along this line. - they keep making comparisons against the Mac mini, but conveniently forget that the biggest advantage of the mini is that it is small, which a "mini-tower" is not. Re-do the comparisons against an iMac and make sure that you are including an OS and the equation starts to alter. > Do you think Apple will put the kibosh on this? Definitely. Apple seems not to care if people do this as a hobby, but they take exception to people making money through it. It will be interesting to see the EULA in court, but the companies' argument that anti-trust law is going to fall flat in the face of Apple's market-share. Most anti-trust laws only come into effect once you have Monopoly status, not before. -- Karl Kuehn larkost@softhome.net From mah at jump-ing.de Tue Apr 15 13:31:46 2008 From: mah at jump-ing.de (Markus Hitter) Date: Tue Apr 15 13:31:13 2008 Subject: Mac Clone??? In-Reply-To: References: Message-ID: <208B65F0-D7AC-46CC-8982-DF5D0F5D3B21@jump-ing.de> Am 15.04.2008 um 19:12 schrieb Scott Roebuck: > Any thoughts? Probably pretty much generic PC hardware with all the advantages as usual: cheap, upgradeable, separate monitor. Not the best stuff, though. Others have better hardware (e.g. X3100 graphics) for a similar price. What you get is a Hackintosh-proof box. No more guessing "will it work or will it not" ... obviously even with all the Hackintosh snippets already collected and installed. I'd expect a computer of similar stability as an Apple Mac. As the Mac OS X EULA requires an "Apple-labeled Computer", they might run out of biten apple stickers soon. ;-) Markus - - - - - - - - - - - - - - - - - - - Dipl. Ing. Markus Hitter http://www.jump-ing.de/ From brett.dikeman at gmail.com Tue Apr 15 13:56:52 2008 From: brett.dikeman at gmail.com (Brett Dikeman) Date: Tue Apr 15 14:08:33 2008 Subject: Mac Clone??? In-Reply-To: References: Message-ID: <9d9c4a330804151356n22925428o9dc3504edf7b35e@mail.gmail.com> On Tue, Apr 15, 2008 at 1:12 PM, Scott Roebuck wrote: > Any thoughts? Yep, I think it's the greatest late April Fool's joke, tthe largest internet troll in quite some time, or a brilliant guerrilla marketing ploy. Who'd ever heard of these guys before? The old joke was, "It came into my inbox, it must be true!", and it's still quite true in the age of "bloggers." Brett From garrison at zeta.org.au Tue Apr 15 18:46:36 2008 From: garrison at zeta.org.au (Charlie Garrison) Date: Tue Apr 15 18:51:46 2008 Subject: Can't Get Into MySQL Message-ID: Good morning, On 14/4/08 at 11:56 AM -0700, m i l e s wrote: >So what am I missing ? Have you enabled 'Allow network connections' in the Settings pane? Charlie -- Charlie Garrison PO Box 141, Windsor, NSW 2756, Australia O< ascii ribbon campaign - stop html mail - www.asciiribbon.org http://www.ietf.org/rfc/rfc1855.txt From grail at goldweb.com.au Tue Apr 15 19:06:03 2008 From: grail at goldweb.com.au (Alex Satrapa) Date: Tue Apr 15 19:06:12 2008 Subject: Mac Clone??? In-Reply-To: References: Message-ID: <8C1019DA-286D-4392-AABA-7CAA67C3DCED@goldweb.com.au> On 16/04/2008, at 03:12 , Scott Roebuck wrote: > Any thoughts? It's a crappy PC in an ugly white mini-tower box. It's certainly not a Mac. > Do you think Apple will put the kibosh on this? They won't need to. The product will hang itself on it's own crappiness. Though perhaps I'm underestimating the average Windows user's tolerance for random crashes and systems refusing to boot after a software update. Alex From jwelch at bynkii.com Wed Apr 16 04:23:34 2008 From: jwelch at bynkii.com (John C. Welch) Date: Wed Apr 16 04:23:42 2008 Subject: Mac Clone??? In-Reply-To: <8C1019DA-286D-4392-AABA-7CAA67C3DCED@goldweb.com.au> Message-ID: On 4/15/08 10:06 PM, "Alex Satrapa" wrote: > On 16/04/2008, at 03:12 , Scott Roebuck wrote: >> Any thoughts? > > It's a crappy PC in an ugly white mini-tower box. It's certainly not > a Mac. > >> Do you think Apple will put the kibosh on this? > > They won't need to. The product will hang itself on it's own > crappiness. Though perhaps I'm underestimating the average Windows > user's tolerance for random crashes and systems refusing to boot > after a software update. Apple will have to, since their EULA explicitly forbids it, (Spare me the sophistry about writing "Apple Inc." on the computer, silliness with stickers, or stupidity about monopoly positions that show a complete misunderstanding about what a monopoly is). If they don't, then that creates a "Xerox" issue. -- John C. Welch Writer/Analyst Bynkii.com Mac and other opinions jwelch@bynkii.com From gsslist+osxadmin at anthropohedron.net Wed Apr 16 05:27:50 2008 From: gsslist+osxadmin at anthropohedron.net (Gregory Seidman) Date: Wed Apr 16 05:29:09 2008 Subject: Mac Clone??? In-Reply-To: References: <8C1019DA-286D-4392-AABA-7CAA67C3DCED@goldweb.com.au> Message-ID: <20080416122749.GA15343@anthropohedron.net> On Wed, Apr 16, 2008 at 07:23:34AM -0400, John C. Welch wrote: > On 4/15/08 10:06 PM, "Alex Satrapa" wrote: > > > On 16/04/2008, at 03:12 , Scott Roebuck wrote: > >> Any thoughts? > > > > It's a crappy PC in an ugly white mini-tower box. It's certainly not > > a Mac. > > > >> Do you think Apple will put the kibosh on this? > > > > They won't need to. The product will hang itself on it's own > > crappiness. Though perhaps I'm underestimating the average Windows > > user's tolerance for random crashes and systems refusing to boot > > after a software update. > > Apple will have to, since their EULA explicitly forbids it, (Spare me the > sophistry about writing "Apple Inc." on the computer, silliness with > stickers, or stupidity about monopoly positions that show a complete > misunderstanding about what a monopoly is). If they don't, then that creates > a "Xerox" issue. You're confusing copyright law with trademark law. A trademark owner is obligated to protect its trademark in every case in order to have legal standing to protect it in any case. (It's obviously a bit more complicated than that, but that's the most basic level.) Apple, however, has a copyright on MacOS X and the EULA is a copyright license. Copyrights can be defended or not arbitrarily, and no failure to defend a copyright is precedent for weakening that copyright claim. For the record, IANAL. Now, it's a different story if this company attempts to claim that its computers are "Apple-branded" and therefore do not violate the MacOS X EULA. In that case, it can be argued that it has become a trademark issue and Apple is obligated to bring suit or lose the Apple trademark. Given the "gotcha!" aspect of trademark law, it may be in Apple's best interests to kill it if there is even a whiff of possibility that it could be considered trademark infringement. I believe this is why Sun Microsystems went and sued a bunch of newspapers with the word "sun" in their titles some time ago. > John C. Welch Writer/Analyst --Greg From jwelch at bynkii.com Wed Apr 16 06:08:13 2008 From: jwelch at bynkii.com (John C. Welch) Date: Wed Apr 16 06:08:21 2008 Subject: Mac Clone??? In-Reply-To: <20080416122749.GA15343@anthropohedron.net> Message-ID: On 4/16/08 8:27 AM, "Gregory Seidman" wrote: >>> They won't need to. The product will hang itself on it's own >>> crappiness. Though perhaps I'm underestimating the average Windows >>> user's tolerance for random crashes and systems refusing to boot >>> after a software update. >> >> Apple will have to, since their EULA explicitly forbids it, (Spare me the >> sophistry about writing "Apple Inc." on the computer, silliness with >> stickers, or stupidity about monopoly positions that show a complete >> misunderstanding about what a monopoly is). If they don't, then that creates >> a "Xerox" issue. > > You're confusing copyright law with trademark law. A trademark owner is > obligated to protect its trademark in every case in order to have legal > standing to protect it in any case. (It's obviously a bit more complicated > than that, but that's the most basic level.) Apple, however, has a > copyright on MacOS X and the EULA is a copyright license. Copyrights can be > defended or not arbitrarily, and no failure to defend a copyright is > precedent for weakening that copyright claim. For the record, IANAL. No, it's not exactly the same as trademark law. However, should Apple say, ignore this, even though it is common knowledge for say, a couple years, and then try to go after them, Apple will have a hell of a time convincing anyone that they suffered any damages over this. If they can't show any real damages, then the delay hurts their case. -- John C. Welch Writer/Analyst Bynkii.com Mac and other opinions jwelch@bynkii.com From bsilver at chrononomicon.com Wed Apr 16 06:39:45 2008 From: bsilver at chrononomicon.com (Bart Silverstrim) Date: Wed Apr 16 06:54:59 2008 Subject: Spam:****, Mac Clone??? In-Reply-To: References: Message-ID: <480601A1.1060207@chrononomicon.com> Scott Roebuck wrote: > Any thoughts? If you like something for the "cool neat geek" factor but don't want to put it together yourself, there you go. Then again, you may also be potentially on a list of customers you don't want to be on if they go to court and Apple decides to play RIAA. It's not a Mac, though, since the Mac is more than just the operating system. Updates won't work. Future support is going to be iffy. Future OS's probably won't work at all. I doubt the hardware is using an EFI and that means it's running with a PC's BIOS. Integration/hardware support for other Mac-supported things will be iffy. You'd be a fool to get it as your primary work machine if you want the Mac, in my opinion. You're better off tinkering with doing it yourself as a project than buying it. From newslists at autonomy.caltech.edu Wed Apr 16 08:54:31 2008 From: newslists at autonomy.caltech.edu (R.L. Grigg) Date: Wed Apr 16 08:54:38 2008 Subject: Mac Clone??? In-Reply-To: References: Message-ID: <1CE303AE-53E7-4708-9AD8-2AD65D695CF5@autonomy.caltech.edu> On Apr 16, 2008, at 6:08 AM, John C. Welch wrote: > No, it's not exactly the same as trademark law. However, should > Apple say, > ignore this, even though it is common knowledge for say, a couple > years, and > then try to go after them, Apple will have a hell of a time convincing > anyone that they suffered any damages over this. If they can't show > any real > damages, then the delay hurts their case. So how can Apple go after them *before* they've suffered damages? I thought it was more or less standard procedure to let someone violate a trademark, copyright, etc. for a few years so that there would be a provable financial impact. Then you go after every penny they made, and then some. And if there is none, why waste the time and money going after them? Russ From jwelch at bynkii.com Wed Apr 16 11:58:16 2008 From: jwelch at bynkii.com (John C. Welch) Date: Wed Apr 16 11:58:35 2008 Subject: Mac Clone??? In-Reply-To: <1CE303AE-53E7-4708-9AD8-2AD65D695CF5@autonomy.caltech.edu> Message-ID: On 4/16/08 11:54 AM, "R.L. Grigg" wrote: >> No, it's not exactly the same as trademark law. However, should >> Apple say, >> ignore this, even though it is common knowledge for say, a couple >> years, and >> then try to go after them, Apple will have a hell of a time convincing >> anyone that they suffered any damages over this. If they can't show >> any real >> damages, then the delay hurts their case. > > So how can Apple go after them *before* they've suffered damages? I > thought it was more or less standard procedure to let someone violate > a trademark, copyright, etc. for a few years so that there would be a > provable financial impact. Then you go after every penny they made, > and then some. And if there is none, why waste the time and money > going after them? They can go after them at any time. But making it hurt more is easier when you do it sooner, and it's in Apple's best interests as a hardware maker to make it VERY painful to do this. -- John C. Welch Writer/Analyst Bynkii.com Mac and other opinions jwelch@bynkii.com From kremels at kreme.com Thu Apr 17 08:14:58 2008 From: kremels at kreme.com (LuKreme) Date: Thu Apr 17 08:15:02 2008 Subject: Mac Clone??? In-Reply-To: References: Message-ID: <33808AE1-EBCE-4E88-8E84-E7E5C44C4936@kreme.com> On 15-Apr-2008, at 11:12, Scott Roebuck wrote: > Do you think Apple will put the kibosh on this? Oh hell yeah. Install a hacked OS X on the machine? They will implode under the weight of lawyers riding their asses. -- Why live in the world when you can live in your head? From bill at cheeseman.name Sat Apr 19 06:33:33 2008 From: bill at cheeseman.name (Bill Cheeseman) Date: Sat Apr 19 06:41:46 2008 Subject: Wrong name for Public folder Message-ID: When I connect to most of the Macs on my home network as "guest," I see that I have access to "Bill Cheeseman's Public Folder." However, when I connect as guest to one particular machine, it tells me that I have access to "Public". The actual folder on each machine, including the problem machine, appears in the Finder as "Public," as it should. And it has the Public folder badge on it. And it and the Drop Box folder in it have the correct permissions, and the whole thing works correctly. Why the name difference when I connect as guest on this one machine? Is there anything I can do to make the Public folder on the problem machine show up as "Bill Cheeseman's Public Folder" when I connect to it as guest? (For anybody who has seen my other post today, the problem machine here is a different machine from the "rogue machine" I mentioned there. I therefore believe this problem is unrelated to that problem.) -- Bill Cheeseman - bill@cheeseman.name Quechee Software, Quechee, Vermont, USA www.quecheesoftware.com PreFab Software - www.prefabsoftware.com From bill at cheeseman.name Sat Apr 19 06:41:32 2008 From: bill at cheeseman.name (Bill Cheeseman) Date: Sat Apr 19 06:41:47 2008 Subject: Wrong user name for network connection Message-ID: I have several Macs on my home network. All of them appear in the "Shared" section of the Finder sidebar on every other machine, and my keychain contains the password for each. So, when I click once on a machine in the sidebar, the "Connecting as..." legend appars, and a moment later it changes to "Connected as: " without presenting a dialog to enter the password. Great! That's just as it should be. However, one machine always connects as my .Mac email address ("myusername@mac.com") instead of connecting as the machine's short username ("myusername"). This happens when I am connecting from any other machine on the network. I can disconnect the rogue machine and click it again in the sidebar, then enter my short username manually in the connection dialog that comes up, and that works -- I am connected as my short username. But if I disconnect again, then click that machine in the sidebar again, it once more connects as my .Mac email address. What can I change so that a click will automatically connect to the rogue machine using my short username? I've checked all the keychain entries using Keychain Access on all machines, and I don't see the .Mac email address in any of them. I've checked the Accounts prefpane in System Preferences on all machines, and the long and short user names are correct (i.e., they contain no reference to the .Mac email address). Connecting to the rogue machine as my .Mac email address works perfectly well. But I see this as an esthetic problem. It disturbs my sense of the order of the universe. Even worse, it keeps reminding me that I don't understand how this works. -- Bill Cheeseman - bill@cheeseman.name Quechee Software, Quechee, Vermont, USA www.quecheesoftware.com PreFab Software - www.prefabsoftware.com From luttgens at fusl.ac.be Sat Apr 19 09:27:37 2008 From: luttgens at fusl.ac.be (Axel Luttgens) Date: Sat Apr 19 09:27:41 2008 Subject: Wrong name for Public folder In-Reply-To: References: Message-ID: <0169BC1E-99EE-4C6F-9756-E447284E9377@fusl.ac.be> Le 19 avr. 08 ? 15:33, Bill Cheeseman a ?crit : > When I connect to most of the Macs on my home network as "guest," I > see that > I have access to "Bill Cheeseman's Public Folder." However, when I > connect > as guest to one particular machine, it tells me that I have access to > "Public". > > [...] > > Why the name difference when I connect as guest on this one machine? > Is > there anything I can do to make the Public folder on the problem > machine > show up as "Bill Cheeseman's Public Folder" when I connect to it as > guest? Hello Bill, Perhaps have you once upon a time deleted (through the sharing preference pane) the share point created by default on that particular machine, then recreated it yourself? If this hypothesis is correct, you could see what happened by executing: dscl . read /SharePoints/Public on the "particular" box, and contrast its output to the one provided by: dscl . read '/SharePoints/Bill Cheeseman's Public Folder' on a "regular" box. HTH, Axel From bill at cheeseman.name Sat Apr 19 10:50:26 2008 From: bill at cheeseman.name (Bill Cheeseman) Date: Sat Apr 19 10:50:40 2008 Subject: Wrong name for Public folder In-Reply-To: <0169BC1E-99EE-4C6F-9756-E447284E9377@fusl.ac.be> Message-ID: on 2008-04-19 12:27 PM, Axel Luttgens at luttgens@fusl.ac.be wrote: > Perhaps have you once upon a time deleted (through the sharing > preference pane) the share point created by default on that particular > machine, then recreated it yourself? Yes, probably. > If this hypothesis is correct, you could see what happened by executing: > > dscl . read /SharePoints/Public > > on the "particular" box, Gives me a nice record showing, among other fields, dsAttrTypeNative:afp_name: Public dsAttrTypeNative:ftp_name: Public dsAttrTypeNative:smb_name: Public RecordName: Public > and contrast its output to the one provided by: > > dscl . read '/SharePoints/Bill Cheeseman's Public Folder' > > on a "regular" box. Either gives no response at all, or error -14136 (eDSRecordNotFound), depending on the machine. So, I don't know what this tells me, and I don't know how to fix it. Any thoughts? The dscl man page is a little opaque. -- Bill Cheeseman - bill@cheeseman.name Quechee Software, Quechee, Vermont, USA www.quecheesoftware.com PreFab Software - www.prefabsoftware.com From bill at cheeseman.name Sat Apr 19 11:10:18 2008 From: bill at cheeseman.name (Bill Cheeseman) Date: Sat Apr 19 11:10:32 2008 Subject: Wrong name for Public folder In-Reply-To: Message-ID: on 2008-04-19 1:50 PM, Bill Cheeseman at bill@cheeseman.name wrote: >> and contrast its output to the one provided by: >> >> dscl . read '/SharePoints/Bill Cheeseman's Public Folder' >> >> on a "regular" box. > > Either gives no response at all, or error -14136 (eDSRecordNotFound), > depending on the machine. I tried dscl . -list /SharePoints on the problem machine and got Public and on a good machine I got Public Folder But dscl . read '/SharePoints/Public Folder' returns the record not found error. AHA! The apostrophe in "Cheeseman's" is messing up the quoting. So this on a good machine dscl. read "/SharePoints/Bill Cheeseman's Public Folder" returns a good record where all the name fields are Bill Cheeseman's Public Folder instead of Public on the bad machine. I'm really not clear about how to change the record on the bad machine. -change record_path key old_val new_val looks promising, but there's the little problem of the sharepoints having different names on different machines, "Pubic" vs. "Public Folder", according the -list command. I assume "Public Folder" is correct, but I don't see how to change "Public" to "Public Folder" on the bad machine. -- Bill Cheeseman - bill@cheeseman.name Quechee Software, Quechee, Vermont, USA www.quecheesoftware.com PreFab Software - www.prefabsoftware.com From bill at cheeseman.name Sat Apr 19 13:17:26 2008 From: bill at cheeseman.name (Bill Cheeseman) Date: Sat Apr 19 13:17:39 2008 Subject: Wrong name for Public folder SOLVED In-Reply-To: Message-ID: on 2008-04-19 2:10 PM, Bill Cheeseman at bill@cheeseman.name wrote: > I'm really not clear about how to change the record on the bad machine. > > -change record_path key old_val new_val > > looks promising, but there's the little problem of the sharepoints having > different names on different machines, "Pubic" vs. "Public Folder", > according the -list command. I assume "Public Folder" is correct, but I > don't see how to change "Public" to "Public Folder" on the bad machine. I've fixed the problem, albeit in a somewhat roundabout manner. I'll spell it out here for the archives, should anybody else ever fall into this problem and care enough to do something about it. Axel got me started, for which I thank him, and I found additional clues here: The most important thing was to know that the Directory Service plist files for sharepoints are located at /var/db/dslocal/nodes/Default/SharePoints. I used a combination of 'cp' and 'mv' with 'sudo' in Terminal, and my favorite tool to change permissions, Path Finder, because I can never remember how to use chown. I was able to copy Public.plist into a working folder; to change its privileges so that I could edit it; using Property List Editor, to change every string value "Public" to "Bill Cheeseman's Public Folder"; change its privileges back to their original values; copy it back into the SharePoints folder replacing the original; and change its name to "Public Folder.plist". It would undoubtedly have been easier for a more knowledgeable shell scripter to do it with a simple script in Terminal. Probably just the 'dscl' command to 'change' the share name in several places in the plist file, together with the 'mv' command to change the plist file's name. After logging out and back in, System Preferences now shows my Public Folder as "Bill Cheeseman's Public Folder" when I log on to the problem machine as guest on my home network. -- Bill Cheeseman - bill@cheeseman.name Quechee Software, Quechee, Vermont, USA www.quecheesoftware.com PreFab Software - www.prefabsoftware.com From luttgens at fusl.ac.be Sat Apr 19 13:42:27 2008 From: luttgens at fusl.ac.be (Axel Luttgens) Date: Sat Apr 19 13:42:34 2008 Subject: Wrong name for Public folder In-Reply-To: References: Message-ID: <283B7575-9EC9-4EED-A7A8-C3D06776EAC7@fusl.ac.be> Le 19 avr. 08 ? 20:10, Bill Cheeseman a ?crit : > [...] > > AHA! The apostrophe in "Cheeseman's" is messing up the quoting. Ooops... sorry: I missed the apostrophe too. Please agree my apologies for the time you may have lost with this, Axel From luttgens at fusl.ac.be Sat Apr 19 14:17:34 2008 From: luttgens at fusl.ac.be (Axel Luttgens) Date: Sat Apr 19 14:17:38 2008 Subject: Wrong name for Public folder SOLVED In-Reply-To: References: Message-ID: Le 19 avr. 08 ? 22:17, Bill Cheeseman a ?crit : > on 2008-04-19 2:10 PM, Bill Cheeseman at bill@cheeseman.name wrote: > >> I'm really not clear about how to change the record on the bad >> machine. >> >> -change record_path key old_val new_val >> >> looks promising, but there's the little problem of the sharepoints >> having >> different names on different machines, "Pubic" vs. "Public Folder", >> according the -list command. I assume "Public Folder" is correct, >> but I >> don't see how to change "Public" to "Public Folder" on the bad >> machine. > > I've fixed the problem, albeit in a somewhat roundabout manner. I'll > spell > it out here for the archives, should anybody else ever fall into this > problem and care enough to do something about it. > > [...] If you allow, I'll complete your approach with a dscl-based one, here through an interactive dscl session. To have something to work upon, I've (re)created a share point for my "Public" folder in the "Sharing" preference pane. I then concentrated on the "afp_name" key -for the name shown to AFP clients- and on the record's name -for the name shown in the Sharing preference pane- : luttgens$ sudo dscl . Password: > cd /SharePoints /SharePoints > list Public /SharePoints > cd Public /SharePoints/Public > read dsAttrTypeNative:afp_guestaccess: 1 dsAttrTypeNative:afp_name: Public dsAttrTypeNative:afp_shared: 1 dsAttrTypeNative:directory_path: /Users/luttgens/Public dsAttrTypeNative:ftp_name: Public dsAttrTypeNative:sharepoint_group_id: 1372EF2E-7EC1-4A5C-83FE- DFEAF8F159B6 dsAttrTypeNative:smb_createmask: 644 dsAttrTypeNative:smb_directorymask: 755 dsAttrTypeNative:smb_guestaccess: 1 dsAttrTypeNative:smb_name: Public dsAttrTypeNative:smb_shared: 1 AppleMetaNodeLocation: /Local/Default RecordName: Public RecordType: dsRecTypeStandard:SharePoints /SharePoints/Public > create . afp_name Axel\'s\ public\ folder /SharePoints/Public > change . RecordName Public Axel\'s\ public\ folder /SharePoints/Public > cd /SharePoints /SharePoints > list Axel's public folder /SharePoints > read Axel's\ public\ folder dsAttrTypeNative:afp_guestaccess: 1 dsAttrTypeNative:afp_name: Axel's public folder dsAttrTypeNative:afp_shared: 1 dsAttrTypeNative:directory_path: /Users/luttgens/Public dsAttrTypeNative:ftp_name: Public dsAttrTypeNative:sharepoint_group_id: 1372EF2E-7EC1-4A5C-83FE- DFEAF8F159B6 dsAttrTypeNative:smb_createmask: 644 dsAttrTypeNative:smb_directorymask: 755 dsAttrTypeNative:smb_guestaccess: 1 dsAttrTypeNative:smb_name: Public dsAttrTypeNative:smb_shared: 1 AppleMetaNodeLocation: /Local/Default RecordName: Axel's public folder RecordType: dsRecTypeStandard:SharePoints /SharePoints > quit Goodbye Axel From luttgens at fusl.ac.be Sun Apr 20 02:47:01 2008 From: luttgens at fusl.ac.be (Axel Luttgens) Date: Sun Apr 20 02:47:07 2008 Subject: Wrong user name for network connection In-Reply-To: References: Message-ID: <9ECC3905-C3E0-4D18-99BF-52F4FAA78417@fusl.ac.be> Le 19 avr. 08 ? 15:41, Bill Cheeseman a ?crit : > I have several Macs on my home network. All of them appear in the > "Shared" > section of the Finder sidebar on every other machine, and my keychain > contains the password for each. So, when I click once on a machine > in the > sidebar, the "Connecting as..." legend appars, and a moment later it > changes > to "Connected as: " without presenting a dialog to enter the > password. Great! That's just as it should be. > > However, one machine always connects as my .Mac email address > ("myusername@mac.com") instead of connecting as the machine's short > username > ("myusername"). This happens when I am connecting from any other > machine on > the network. I can disconnect the rogue machine and click it again > in the > sidebar, then enter my short username manually in the connection > dialog that > comes up, and that works -- I am connected as my short username. But > if I > disconnect again, then click that machine in the sidebar again, it > once more > connects as my .Mac email address. > > What can I change so that a click will automatically connect to the > rogue > machine using my short username? I've checked all the keychain > entries using > Keychain Access on all machines, and I don't see the .Mac email > address in > any of them. I've checked the Accounts prefpane in System > Preferences on all > machines, and the long and short user names are correct (i.e., they > contain > no reference to the .Mac email address). > > Connecting to the rogue machine as my .Mac email address works > perfectly > well. But I see this as an esthetic problem. It disturbs my sense of > the > order of the universe. Even worse, it keeps reminding me that I don't > understand how this works. Hello Bill, From your description, it seems one could infer that all boxes on your home network are standalone ones (i.e., not bound to an OD server)? In which case accounts involved in the above are all local ones? Before going further with (very) rough guesses, I'll have to confess that I never had a .Mac account, so that I don't have the slightest idea on how such an account may be integrated into the OS. When writing "Connecting to the rogue machine as my .Mac email address works perfectly well", do you mean that you may enter "myusername@mac.com " and corresponding password in the login window on the rogue computer? As well as make use of that "myusername@mac.com" name when connecting through AFP? Out of curiosity, could you show the user record of that user (yes, who would have guessed, with something like dscl . read /Users/ myshortname) on the rogue box? On the machine that "always connects as my .Mac email address", does the "rogue" machine appear in the Apple/Recent Items/Servers menu item (not sure of the translation)? If yes, perhaps could you try to get rid of it, either by clearing the whole menu, or by deleting the corresponding entry in the ~/Library/ Preferences/com.apple.recentitems.plist file. Unless I'm wrong, the alias information stores the user name to be used for the connection. In the hope this is not just plain noise, Axel From bill at cheeseman.name Mon Apr 21 04:46:32 2008 From: bill at cheeseman.name (Bill Cheeseman) Date: Mon Apr 21 04:52:15 2008 Subject: Wrong user name for network connection In-Reply-To: <9ECC3905-C3E0-4D18-99BF-52F4FAA78417@fusl.ac.be> Message-ID: on 2008-04-20 5:47 AM, Axel Luttgens at luttgens@fusl.ac.be wrote: > From your description, it seems one could infer that all boxes on > your home network are standalone ones (i.e., not bound to an OD server)? > In which case accounts involved in the above are all local ones? Correct. > When writing "Connecting to the rogue machine as my .Mac email address > works perfectly well", do you mean that you may enter "myusername@mac.com > " and corresponding password in the login window on the rogue > computer? That is NOT what I meant, but By Golly I can. What a surprise! This suggests that some data file somewhere on the rogue machine itself identifies two short user names. Maybe that's what I need to fix, but where is it? > As well as make use of that "myusername@mac.com" name when > connecting through AFP? Correct. This is what I had meant in my original post. > Out of curiosity, could you show the user record of that user (yes, > who would have guessed, with something like dscl . read /Users/ > myshortname) on the rogue box? On the "rogue" machine, substituting "cheeseb" for "myshortname" in the dscl command, I get a record with 5 fields, including: RealName: Bill Cheeseman RecordName: cheeseb cheeseb@mac.com UniqueID: 501 But I get exactly the same record on a "good" machine that does NOT exhibit the "connect as: cheeseb@mac.com" problem. > On the machine that "always connects as my .Mac email address", does > the "rogue" machine appear in the Apple/Recent Items/Servers menu item > (not sure of the translation)? "Machines" do not appear in that menu item, only hard drives and shared folders that have been mounted. For example, from a "good" machine I see the "rogue" machine's startup disk as "G4" (which is the disk's name), but I do not see the "rogue" machine's computer name (which is "BillCheesemanG4"). > If yes, perhaps could you try to get rid of it, either by clearing the > whole menu, or by deleting the corresponding entry in the ~/Library/ > Preferences/com.apple.recentitems.plist file. Clearing the menu does not change the connection behavior. It does remove entries from the "Servers" branch of the plist file. On the good machine, I notice that, in the "Servers" branch of the plist file, servers contain a field with the key 'Alias' and a value that is a 'Data' value that is not human readable, and a field with the key 'Name' and a value of, for example, "G4" if I just mounted the "G4" startup disk. There is no sign of a user name, since the Alias value is not human readable. But, whatever, deleting it does not change the connection behavior. In the plist file's "Hosts" branch, however, I do see every file sharing "machine" on my network, including some that are old names since abandoned. These are in fact "machines," named, for example, "BillCheesemanG4". These items do not appear in the Recent Items menu at all, and cleaning that menu does not remove them from the "Hosts" branch of the plist file. I deleted all of them referring to "BillCheesemanG4", just to see what would happen, but it made no difference in the connection behavior. (I will presumably find out later if it fouls up something else.) > Unless I'm wrong, the alias information stores the user name to be > used for the connection. Maybe so, but removing it from the plist file does not change the connection behavior. I also found a folder containing URL link files at ~/Library/Recent Items. It had lots of files in it, including at least one relating to the rogue machine. I deleted all of them and rebooted, but it made no difference in the connection behavior. On the rogue machine, I looked at the plist file and found that its contents were quite different. In the "Hosts" branch, it included Alias items named "cheeseb" and "Bill Cheeseman". I deleted both of them and rebooted the rougue machine. This did not change the connection behavior on the good machine. So, no satisfaction yet. Do you have any other ideas? -- Bill Cheeseman - bill@cheeseman.name Quechee Software, Quechee, Vermont, USA www.quecheesoftware.com PreFab Software - www.prefabsoftware.com From trash127 at free.fr Mon Apr 21 05:12:48 2008 From: trash127 at free.fr (Trash is empty) Date: Mon Apr 21 06:07:09 2008 Subject: Filtering User in Login Window Message-ID: <34B154A5-609B-49F6-B2C4-7048B48FB308@free.fr> Hi, I got an Xserv running 10.4.11, with Network accounts. Is there a way to make some user not visible in the login window (when using list name) : I got some user used for internal purpose, and I do not want anybody to see them. Related question : Some user went away, and I have disabled their account (account in WGM, mail is also disabled, and so on), but those users still appears in the login window. What make a user listed in the login window, what is the key I ned to modify in the inspector in WGM ? Regards, G. From trash127 at free.fr Mon Apr 21 08:23:19 2008 From: trash127 at free.fr (Trash is empty) Date: Mon Apr 21 08:23:25 2008 Subject: Filtering User in Login Window Message-ID: <4BFB4A7E-01C0-4167-BF5E-9BA36E3D7102@free.fr> Hi, I got an Xserv running 10.4.11, with Network accounts. Is there a way to make some user not visible in the login window (when using list name) : I got some user used for internal purpose, and I do not want anybody to see them. Related question : Some user went away, and I have disabled their account (account in WGM, mail is also disabled, and so on), but those users still appears in the login window. What make a user listed in the login window, what is the key I ned to modify in the inspector in WGM ? Regards, G. From luttgens at fusl.ac.be Mon Apr 21 08:45:47 2008 From: luttgens at fusl.ac.be (Axel Luttgens) Date: Mon Apr 21 08:45:53 2008 Subject: Wrong user name for network connection In-Reply-To: References: Message-ID: <14F0A872-D46D-4BD1-A981-360429CBD1EB@fusl.ac.be> Le 21 avr. 08 ? 13:46, Bill Cheeseman a ?crit : > on 2008-04-20 5:47 AM, Axel Luttgens at luttgens@fusl.ac.be wrote: > >> From your description, it seems one could infer that all boxes on >> your home network are standalone ones (i.e., not bound to an OD >> server)? >> In which case accounts involved in the above are all local ones? > > Correct. > >> When writing "Connecting to the rogue machine as my .Mac email >> address >> works perfectly well", do you mean that you may enter "myusername@mac.com >> " and corresponding password in the login window on the rogue >> computer? > > That is NOT what I meant, but By Golly I can. What a surprise! This > suggests > that some data file somewhere on the rogue machine itself identifies > two > short user names. Maybe that's what I need to fix, but where is it? I don't think this is the point to be fixed: as discussed hereafter, it is legitimate for a user to have more than one short name (see below). Moreover, it is very likely that it is the AFP client that has somehow stored "myusername@mac.com" as the name to be used for connecting. >> As well as make use of that "myusername@mac.com" name when >> connecting through AFP? > > Correct. This is what I had meant in my original post. > >> Out of curiosity, could you show the user record of that user (yes, >> who would have guessed, with something like dscl . read /Users/ >> myshortname) on the rogue box? > > On the "rogue" machine, substituting "cheeseb" for "myshortname" in > the dscl > command, I get a record with 5 fields, Only five fields? For a user record that has been created through the GUI? > including: > > RealName: Bill Cheeseman > RecordName: cheeseb cheeseb@mac.com uuid> > UniqueID: 501 > > But I get exactly the same record on a "good" machine that does NOT > exhibit > the "connect as: cheeseb@mac.com" problem. Thanks; so, it seems that once a .Mac account has been validated, it gets added to the list of the user's short names (as I wrote in my previous mail, I have no experience at all with .Mac accounts). BTW, this shows how multiple short names are implemented: they are just an ordered set of values for the RecordName attribute, the first one being the "main" one. But I am unable to guess what that "" could be. >> On the machine that "always connects as my .Mac email address", does >> the "rogue" machine appear in the Apple/Recent Items/Servers menu >> item >> (not sure of the translation)? > > "Machines" do not appear in that menu item, only hard drives and > shared > folders that have been mounted. Sorry, I've been too elliptic; I should indeed have spoken about volumes shared by the rogue machine... > For example, from a "good" machine I see the > "rogue" machine's startup disk as "G4" (which is the disk's name), > but I do > not see the "rogue" machine's computer name (which is > "BillCheesemanG4"). > >> If yes, perhaps could you try to get rid of it, either by clearing >> the >> whole menu, or by deleting the corresponding entry in the ~/Library/ >> Preferences/com.apple.recentitems.plist file. > > Clearing the menu does not change the connection behavior. > > It does remove entries from the "Servers" branch of the plist file. > > On the good machine, I notice that, in the "Servers" branch of the > plist > file, servers contain a field with the key 'Alias' and a value that > is a > 'Data' value that is not human readable, and a field with the key > 'Name' and > a value of, for example, "G4" if I just mounted the "G4" startup > disk. There > is no sign of a user name, since the Alias value is not human > readable. The data is just hexadecimal-encoded; part of that data consists of character strings. > But, > whatever, deleting it does not change the connection behavior. > > [...] > >> Unless I'm wrong, the alias information stores the user name to be >> used for the connection. > > Maybe so, but removing it from the plist file does not change the > connection > behavior. So far for my rogue guess. :-( > I also found a folder containing URL link files at ~/Library/Recent > Items. > It had lots of files in it, including at least one relating to the > rogue > machine. I deleted all of them and rebooted, but it made no > difference in > the connection behavior. > > On the rogue machine, I looked at the plist file and found that its > contents > were quite different. In the "Hosts" branch, it included Alias items > named > "cheeseb" and "Bill Cheeseman". I deleted both of them and rebooted > the > rougue machine. This did not change the connection behavior on the > good > machine. > > So, no satisfaction yet. Do you have any other ideas? Are the two boxes involved in the "phenomenon" running (almost) 24/24? And are they both Leopard ones? If yes, perhaps is this a kerberos thing. What does /System/Library/CoreServices/Kerberos.app show? Axel From luttgens at fusl.ac.be Mon Apr 21 08:59:06 2008 From: luttgens at fusl.ac.be (Axel Luttgens) Date: Mon Apr 21 08:59:09 2008 Subject: Wrong user name for network connection In-Reply-To: <14F0A872-D46D-4BD1-A981-360429CBD1EB@fusl.ac.be> References: <14F0A872-D46D-4BD1-A981-360429CBD1EB@fusl.ac.be> Message-ID: Le 21 avr. 08 ? 17:45, Axel Luttgens a ?crit : > [...] > What does /System/Library/CoreServices/Kerberos.app show? I meant, when run on the AFP client machine... Axel From bill at cheeseman.name Mon Apr 21 14:38:22 2008 From: bill at cheeseman.name (Bill Cheeseman) Date: Mon Apr 21 14:38:38 2008 Subject: Wrong user name for network connection In-Reply-To: <14F0A872-D46D-4BD1-A981-360429CBD1EB@fusl.ac.be> Message-ID: on 2008-04-21 11:45 AM, Axel Luttgens at luttgens@fusl.ac.be wrote: > Are the two boxes involved in the "phenomenon" running (almost) 24/24? Yes. > And are they both Leopard ones? Yes. I am fanatical about being up-to-date on all software. Here's an interesting fact: The "rogue" machine does not officially qualify to run Leopard, because its speed is only 733 MHz (a PowerPC G4 just behind the cutoff for Leopard eligibility). I installed Leopard on it using a very nice tool available on the Web, the name of which I have forgotten. The machine runs Leopard perfectly well in every respect, as far as I can tell, so I doubt this is the issue, but I thought I ought to mention it. > If yes, perhaps is this a kerberos thing. > What does /System/Library/CoreServices/Kerberos.app show? Lots of long numbers and other obscure information bearing no obvious relationship to this issue. When I click the Get Info button on the ticket, one of the things I see is "Status: Valid". I have examined every entry in the Keychain on all relevant machines, on the theory that an improper keychain entry might cause connection to use the "wrong" user. I don't see any obvious problems, though. -- Bill Cheeseman - bill@cheeseman.name Quechee Software, Quechee, Vermont, USA www.quecheesoftware.com PreFab Software - www.prefabsoftware.com From luttgens at fusl.ac.be Tue Apr 22 04:28:50 2008 From: luttgens at fusl.ac.be (Axel Luttgens) Date: Tue Apr 22 04:28:59 2008 Subject: Wrong user name for network connection In-Reply-To: References: Message-ID: <17F4A56A-2D27-42ED-8A4A-930FA26C8F0C@fusl.ac.be> Le 21 avr. 08 ? 23:38, Bill Cheeseman a ?crit : > on 2008-04-21 11:45 AM, Axel Luttgens at luttgens@fusl.ac.be wrote: > >> Are the two boxes involved in the "phenomenon" running (almost) >> 24/24? > > Yes. > >> And are they both Leopard ones? > > Yes. [...] > >> If yes, perhaps is this a kerberos thing. >> What does /System/Library/CoreServices/Kerberos.app show? > > Lots of long numbers and other obscure information bearing no obvious > relationship to this issue. When I click the Get Info button on the > ticket, > one of the things I see is "Status: Valid". Hello Bill, This definitely seems to be a kerberos thing. Thanks to your question, I've had the opportunity to get somewhat acquainted with .Mac accounts by creating one for myself and adding it to my user account. This has resulted in various pieces stored in my keychain, among them a ".Mac Sharing Certificate", as well as some data created in or appended to my user record: (new) LinkedIdentity: a plist defining the .Mac user name (new) UserCertificate: (added) AuthenticationAuthority: an additional kerberos authentication source, the principal being the above certificate's SHA1 fingerprint. (added) RecordName: the .Mac full name and the SHA1 fingerprint Moreover, a principal for the identity bound tho that fingerprint is added to the "principal.LKDC" file in /var/db/krb5kdc. Now, the interesting thing appears when adding the same .Mac account on some user account on another box, and to enable AFP on that box. The same kind of data creation/addition will happen; in particular, the same .Mac Sharing Certificate will be used to fill that user account. As a result, each box now knows about some user bearing the SHA1 fingerprint as one of its short names. Enters what seems to be a Finder built-in behavior. When clicking on the second box's icon in the sidebar, it seems that a connection will first be attempted under the .Mac identity (with the SHA1 fingerprint); then, because: that name is known by the remote box too, the .Mac password has been stored in the keychain (on both boxes), the AFP service is kerberized, a connection will succeed, and a ticked will be generated/received and displayed in Kerberos.app; the user's principal will be of the form: @LKDC:SHA1... hence those "lots of long numbers". I'm sure missing a lot of things, after only such a quick look. Anyway, could you confirm this is the kind of behavior you are facing with your "rogue" machine? Axel From bill at cheeseman.name Tue Apr 22 05:54:51 2008 From: bill at cheeseman.name (Bill Cheeseman) Date: Tue Apr 22 05:55:09 2008 Subject: Wrong user name for network connection In-Reply-To: <17F4A56A-2D27-42ED-8A4A-930FA26C8F0C@fusl.ac.be> Message-ID: on 2008-04-22 7:28 AM, Axel Luttgens at luttgens@fusl.ac.be wrote: > Thanks to your question, I've had the opportunity to get somewhat > acquainted with .Mac accounts by creating one for myself and adding it > to my user account. > This has resulted in various pieces stored in my keychain, among them > a ".Mac Sharing Certificate", ... Yes, I have a certificate named "cheeseb (.Mac Sharing Certificate) and an apparently associated private key named "cheeseb (>Mac Sharing key) - ". The same certificate and an associated key appear on all 3 of my network machines. All of my machines have several other keychain items associated with my .Mac account, too, some apparently related to specific .Mac services that I utilize, such as iChat conferencing, .Mac backups, Back to my Mac, etc. These are an "Apple .Mac Certificate Authority" certificate, my .Mac password under the name "cheeseb", and three identity preferences named "cheeseb@mac.com AIM Signing", "cheeseb@mac.com SharedServices" and "com.apple.system.DefaultSharingIdentity". Oh, and my "cheeseb@mac.com" iTunes Store password. Most of these are on all 3 machines, except for the AIM Signing and iTunes Store items (I use iChat and iTunes on only one machine). > ... as well as some data created in or > appended to my user record: > (new) LinkedIdentity: a plist defining the .Mac user name > (new) UserCertificate: Certificate"> > (added) AuthenticationAuthority: an additional kerberos authentication > source, the principal > being the above certificate's SHA1 fingerprint. > (added) RecordName: the .Mac full name and the SHA1 fingerprint > Moreover, a principal for the identity bound tho that fingerprint is > added to the "principal.LKDC" file in /var/db/krb5kdc. I was mistaken when I reported to you in another message that there were only 5 fields in my user record. I simply didn't notice that I needed to scroll back up in my Terminal window to see the beginning of the record. Sorry. My user record on both the rogue machine and a good machine appear similar, including a plist or XML item named LinkedIdentity which has a full name of cheeseb@mac.com and a name of cheeseb. And a field AuthenticationAuthority with a Kerberos fingerprint (with a different SHA number as between the two machines) > Now, the interesting thing appears when adding the same .Mac account > on some user account on another box, and to enable AFP on that box. > The same kind of data creation/addition will happen; in particular, > the same .Mac Sharing Certificate will be used to fill that user > account. Yes, same here. > As a result, each box now knows about some user bearing the SHA1 > fingerprint as one of its short names. Yes, same here. > Enters what seems to be a Finder built-in behavior. > When clicking on the second box's icon in the sidebar, it seems that a > connection will first be attempted under the .Mac identity (with the > SHA1 fingerprint); then, because: > that name is known by the remote box too, > the .Mac password has been stored in the keychain (on both boxes), > the AFP service is kerberized, > a connection will succeed, and a ticked will be generated/received and > displayed in Kerberos.app; the user's principal will be of the form: > @LKDC:SHA1... > hence those "lots of long numbers". Yes, same here. BUT ONLY when going from either good machine to the rogue machine. When I click either of the other two machines in the sidebar on the rogue machine, I connect to the good machine "as cheeseb", not "as cheeseb@mac.com. So none of this seems to account for the different behavior when connecting to the rogue machine as opposed to connecting to a good machine. I understand that there could be something on both of the good machines that controls how they connect to the rogue machine, but it "feels" more likely to me that there must be something on the rogue machine making it respond to connections differently. Note that connecting from either good machine to the other good machine always connects "as cheeseb". > I'm sure missing a lot of things, after only such a quick look. > Anyway, could you confirm this is the kind of behavior you are facing > with your "rogue" machine? Yes, as detailed above. -- Bill Cheeseman - bill@cheeseman.name Quechee Software, Quechee, Vermont, USA www.quecheesoftware.com PreFab Software - www.prefabsoftware.com From mgf at mgfconsulting.net Mon Apr 28 11:20:07 2008 From: mgf at mgfconsulting.net (Mike Friedman) Date: Mon Apr 28 15:10:03 2008 Subject: Sending Mail to AD Exchange Enabled Groups Message-ID: I have a client who is using Exchange and AD as their backend. They want to be able to send email to Exchange enabled groups from their Macs, but cannot. Has anyone else run into this? Also, any suggestions for best/most compatible/least irritating client for use with Exchange? Apple Mail's support isn't all that great (they are running into problems with email not updating). Is Entourage the way to go? ======================= Mike Friedman MGF Consulting Computers without Attitude http://www.mgfconsulting.net 415-823-9990 Instant Message AIM/Yahoo: sfmike64 From jwelch at bynkii.com Mon Apr 28 15:28:04 2008 From: jwelch at bynkii.com (John C. Welch) Date: Mon Apr 28 15:28:15 2008 Subject: Sending Mail to AD Exchange Enabled Groups In-Reply-To: Message-ID: On 4/28/08 2:20 PM, "Mike Friedman" wrote: > I have a client who is using Exchange and AD as their backend. They > want to be able to send email to Exchange enabled groups from their > Macs, but cannot. Has anyone else run into this? Do you mean distribution groups? > > Also, any suggestions for best/most compatible/least irritating client > for use with Exchange? Apple Mail's support isn't all that great (they > are running into problems with email not updating). Is Entourage the > way to go? Pretty much. E'rage 2008 is the best native Exchange client you'll find on the Mac. -- John C. Welch Writer/Analyst Bynkii.com Mac and other opinions jwelch@bynkii.com From mgf at mgfconsulting.net Mon Apr 28 18:13:25 2008 From: mgf at mgfconsulting.net (Mike Friedman) Date: Mon Apr 28 18:13:30 2008 Subject: Sending Mail to AD Exchange Enabled Groups In-Reply-To: References: Message-ID: <36FC2548-4B42-4ED7-85D7-8824307A87F9@mgfconsulting.net> On Apr 28, 2008, at 3:28 PM, John C. Welch wrote: > On 4/28/08 2:20 PM, "Mike Friedman" wrote: > >> I have a client who is using Exchange and AD as their backend. They >> want to be able to send email to Exchange enabled groups from their >> Macs, but cannot. Has anyone else run into this? > > Do you mean distribution groups? > >> >> Also, any suggestions for best/most compatible/least irritating >> client >> for use with Exchange? Apple Mail's support isn't all that great >> (they >> are running into problems with email not updating). Is Entourage the >> way to go? > > Pretty much. E'rage 2008 is the best native Exchange client you'll > find on > the Mac. Yes, I mean to distribution groups. The client claims that they do a lookup in address book, send the email and it never goes anywhere. I haven't seen this myself, but I haven't tested it extensively. It's one of these situations where the real consultant brought me in because he doesn't know much about the Mac, and kind of dumped this on me. Frankly, I wouldn't have chosen Exchange for a small mostly Mac office, but that horse has left the stable. ======================= Mike Friedman MGF Consulting Computers without Attitude http://www.mgfconsulting.net 415-823-9990 Instant Message AIM/Yahoo: sfmike64 From jwelch at bynkii.com Mon Apr 28 20:32:58 2008 From: jwelch at bynkii.com (John C. Welch) Date: Mon Apr 28 20:33:09 2008 Subject: Sending Mail to AD Exchange Enabled Groups In-Reply-To: <36FC2548-4B42-4ED7-85D7-8824307A87F9@mgfconsulting.net> Message-ID: On 4/28/08 9:13 PM, "Mike Friedman" wrote: >>> I have a client who is using Exchange and AD as their backend. They >>> want to be able to send email to Exchange enabled groups from their >>> Macs, but cannot. Has anyone else run into this? >> >> Do you mean distribution groups? >> >>> >>> Also, any suggestions for best/most compatible/least irritating >>> client >>> for use with Exchange? Apple Mail's support isn't all that great >>> (they >>> are running into problems with email not updating). Is Entourage the >>> way to go? >> >> Pretty much. E'rage 2008 is the best native Exchange client you'll >> find on >> the Mac. > > Yes, I mean to distribution groups. The client claims that they do a > lookup in address book, send the email and it never goes anywhere. I > haven't seen this myself, but I haven't tested it extensively. It's > one of these situations where the real consultant brought me in > because he doesn't know much about the Mac, and kind of dumped this on > me. Frankly, I wouldn't have chosen Exchange for a small mostly Mac > office, but that horse has left the stable. There's a LOT of variables in using AB with Active Directory. For one, do they have Active Directory in the contact paths in Directory Utility? Do they have the proper searchbase? Active Directory LDAP lookups tend to require authentication, and in AB, you tend to have to do the kerberos principal-style user names. If you can search the GAL, then the distribution lists should show up. You can't edit or create them, but you can use them. As far as exchange goes, other than costs, the biggest problem tends to be that too many exchange administrators don't know a damned thing about email. Oh, is this exchange 2003 or 2008? -- John C. Welch Writer/Analyst Bynkii.com Mac and other opinions jwelch@bynkii.com From mgf at mgfconsulting.net Mon Apr 28 21:26:39 2008 From: mgf at mgfconsulting.net (Mike Friedman) Date: Mon Apr 28 21:26:46 2008 Subject: Sending Mail to AD Exchange Enabled Groups In-Reply-To: References: Message-ID: <8BC2AFC5-D761-420D-A605-E6F28E5FA4BC@mgfconsulting.net> On Apr 28, 2008, at 8:32 PM, John C. Welch wrote: > On 4/28/08 9:13 PM, "Mike Friedman" wrote: > >>>> I have a client who is using Exchange and AD as their backend. They >>>> want to be able to send email to Exchange enabled groups from their >>>> Macs, but cannot. Has anyone else run into this? >>> >>> Do you mean distribution groups? >>> >>>> >>>> Also, any suggestions for best/most compatible/least irritating >>>> client >>>> for use with Exchange? Apple Mail's support isn't all that great >>>> (they >>>> are running into problems with email not updating). Is Entourage >>>> the >>>> way to go? >>> >>> Pretty much. E'rage 2008 is the best native Exchange client you'll >>> find on >>> the Mac. >> >> Yes, I mean to distribution groups. The client claims that they do a >> lookup in address book, send the email and it never goes anywhere. I >> haven't seen this myself, but I haven't tested it extensively. It's >> one of these situations where the real consultant brought me in >> because he doesn't know much about the Mac, and kind of dumped this >> on >> me. Frankly, I wouldn't have chosen Exchange for a small mostly Mac >> office, but that horse has left the stable. > > There's a LOT of variables in using AB with Active Directory. For > one, do > they have Active Directory in the contact paths in Directory > Utility? Do > they have the proper searchbase? Active Directory LDAP lookups tend to > require authentication, and in AB, you tend to have to do the kerberos > principal-style user names. > > If you can search the GAL, then the distribution lists should show > up. You > can't edit or create them, but you can use them. > > As far as exchange goes, other than costs, the biggest problem tends > to be > that too many exchange administrators don't know a damned thing > about email. > > Oh, is this exchange 2003 or 2008? > > It's 2003. They can do the lookups on the GAL (authenticated). Sadly, the reason that exchange was chosen was because of cost (low because they are a charity and got a license for next to nothing). As far as I remember, it's in the contact path in directory util, but that is something to check, thanks. I like to think that I'm fairly well versed in both worlds, but this has really been stumping me and annoying the client. ======================= Mike Friedman MGF Consulting Computers without Attitude http://www.mgfconsulting.net 415-823-9990 Instant Message AIM/Yahoo: sfmike64 From jwelch at bynkii.com Tue Apr 29 04:05:19 2008 From: jwelch at bynkii.com (John C. Welch) Date: Tue Apr 29 04:05:33 2008 Subject: Sending Mail to AD Exchange Enabled Groups In-Reply-To: <8BC2AFC5-D761-420D-A605-E6F28E5FA4BC@mgfconsulting.net> Message-ID: On 4/29/08 12:26 AM, "Mike Friedman" wrote: >> There's a LOT of variables in using AB with Active Directory. For >> one, do >> they have Active Directory in the contact paths in Directory >> Utility? Do >> they have the proper searchbase? Active Directory LDAP lookups tend to >> require authentication, and in AB, you tend to have to do the kerberos >> principal-style user names. >> >> If you can search the GAL, then the distribution lists should show >> up. You >> can't edit or create them, but you can use them. >> >> As far as exchange goes, other than costs, the biggest problem tends >> to be >> that too many exchange administrators don't know a damned thing >> about email. >> >> Oh, is this exchange 2003 or 2008? > >> >> > It's 2003. They can do the lookups on the GAL (authenticated). Sadly, > the reason that exchange was chosen was because of cost (low because > they are a charity and got a license for next to nothing). > > As far as I remember, it's in the contact path in directory util, but > that is something to check, thanks. I like to think that I'm fairly > well versed in both worlds, but this has really been stumping me and > annoying the client. I believe it's annoying them ;-) However, if they're using Exchange with just Apple's software, they could replace it with almost any backend and never notice. -- John C. Welch Writer/Analyst Bynkii.com Mac and other opinions jwelch@bynkii.com From PERBIX at lmsd.org Tue Apr 29 05:20:17 2008 From: PERBIX at lmsd.org (Perbix, Michael) Date: Tue Apr 29 05:20:27 2008 Subject: Sending Mail to AD Exchange Enabled Groups In-Reply-To: References: <8BC2AFC5-D761-420D-A605-E6F28E5FA4BC@mgfconsulting.net> Message-ID: <06A81E8192910B41B2B3FFD57535BCF75B3CFC61A0@MS1.lmsd.org> >From my experience, Exchange in and of itself is actually a good backend (please no flaming, I am just putting out my opinion based on my use in our environment) and we use it with our Macs using Entourage, Apple Mail Client, Blackberry's, Motorola Q with ActiveSync (and soon iPhone), Outlook Web Access and of course Outlook and everyone gets along quite merrily. The biggest issue that I see when mail refuses to be sent (and this can be verified by looking at Exchange logs) is that mail coming from unauthenticated users could look like a relay and be stopped or the user sending mail to the group does not have permissions. If the user CAN send mail to the group from Outlook or Outlook Web Acess, then they most certainly should be able to from Entourage. Make sure that Entourage is set up as an Exchange client (when you create the account in Entourage check the little box that says "My account is hosted on Exchange". Also, make sure that in the outgoing server setting in Entourage that if SMTP needs to be authenticated, that the proper settings are checked and valid account info is entered. We have a large OSX base here (about 7,000 machines) and all our faculty use OSX, so it is not something inherent in OSX with Exchange and is simply a configuration issue either at the client or on the server. But the best place to start would be trying to send mail from OWA (if enabled). -Mike ________________________________________________ Michael Perbix Lower Merion School District Network Technician > >-----Original Message----- > >From: macosx-admin-bounces@omnigroup.com [mailto:macosx-admin- > >bounces@omnigroup.com] On Behalf Of John C. Welch > >Sent: Tuesday, April 29, 2008 7:05 AM > >To: Omni List > >Subject: Re: Sending Mail to AD Exchange Enabled Groups > > > >On 4/29/08 12:26 AM, "Mike Friedman" wrote: > > > >>> There's a LOT of variables in using AB with Active Directory. For > >>> one, do > >>> th