Mac OS X Lion Server :: Use Mobile Accounts Locally (on Server) As Well As On A Laptop Connected To It?
Jun 5, 2012
The girlfriend and I are consolidating machines and want to try a software based approach instead of a plug and swap approach. My goal is to have only a Desktop + iPad and she have her MacBook. The issue is that we also want to keep it limited to one monitor, etc. on the desk but she is in grad school and will have need for the larger screen and keyboard. My question is can I set up her laptop to use a Mobile Account and assuming she logs off on that before going onto the Server, can she then log in to the Server desktop and use that Mobile Account locally there? So sometimes use the Mobile Account on the laptop, Sometimes on the Desktop. From my days managing a small network, this seems plausible but could also be fraught with problems.
I have a mac mini running lion server.I have a couple of mac clients (notebooks). I have to enable mobile accounts so notebooks will work when traveling.However, I want family to logged into server as well. I am still in testing, and I think I have client side working ok (sync on demand, sync logging in and out)However, when user now logs directly into server (or anything else that would cause a sync, manual sync or logging off), it causes errors. It appears it isn't smart enough to know it is trying to sync back to itself.Â
I work remotely a lot. After I upgraded to Lion server, I am unable to connect to the VPN service remotely unless I physically go over to the server (mac pro) and log into the desktop manually.Â
Previously, if my Snow Leopard server restarted (due to power failure, etc) and it re-booted up to the login screen, I could still logon to the VPN remotely as the VPN service would always startup (at the login screen) without a user having to be logging in. Â
Now, with Lion Server (10.7.4), if the server restarts, I cannot login back to the VPN. I have to get someone to go over to the server and manually login, then I can access VPN just fine. (I do not, and will not turn automatic login on on my server due to the huge security risk.)Â Â
How do I get the Lion Server VPN service to startup before or at the logon screen even if no user is logged in?
I have a brand new iMac running 10.7.4 bound to AD with mobile accounts to be created at login. We've had dozens of users log into this Mac with their AD credentials with no problems. Login proceeds as expected, home folders are created, etc. One user cannot log in. The login window will freeze (spinning beach ball) after he enters his credentials and the computer has to be manually shut down. After a restart you can see that his home directory has been created, with proper permissions, but he still cannot log in (spinning beach ball). However, he CAN log onto other AD bound Macs, just not this one. And he CAN log onto a bound Windows machine, so apparently there's nothing wrong with his account. There is no OD server in the mix. The computer is bound to our AD domain only. The system log shows the proper UID but indicates that the user name can't be found. But then the user folder (with the correct name) is created anyway. Later there is an entrry that the UID can't be found.
last month our Xserve G5 with Leopard Server which controlled user accounts in our computer labs died. We replaced it with a Mac mini server (that includes Lion Server) –by the way, this is the first server that I ever setup–.During initial configuration, the server was fully updated to Lion server 10.7.3, and stablished as an OD Master. I didn't import anything from the old server, so all accounts and groups and preferences and everything have been defined from scratch.Everything was working good until I finish the setup and try to connect from one of our Leopard client machines. I configure that machine with Directory Utility with settings from the server, and the server responds just fine, the client sets everything up automatically for authentication and contacts. Everything seems to be normal until I log out and try to connect with one of the network accounts.The account will not login, the login window just shakes and does nothing. Odd enough, the login window tells that network accounts are available (captures are in Spanish). When I login again as a local admin account, I check Directory Utility and when I look at the LDAP configuration, in the search & maps tab of the window, I find these two red registers (UserAuthenticationData and OLCLDIFConfig). I don't know if this is related to the problem, but this is where I get stuck and don't know where else to go.
I've just added the macbook pros that were recently purchased, (NOT retina Displays) boo i know.. THey are in AD able to place them and moved them around into different groups. I'm able to sign in when i'm on the network. WHEN I'M OFF THE NETWORK IT DOES NOT ALLOW ME TO SIGN IN. In windows it builds a profile for you so i checked that it does create a profile folder under users but still not able to sign in (locally)? not really locally?
Info: MacBook Pro, Mac OS X (10.7.3), Able to Bind, NO offline signin.
I am running into an issue where AD users can no longer connect to AFP file shares. If you attempt to authenticate with one of our Lion server's local accounts, you connect without any issues, but if you put network credentials in then you get the window shake denial. This issue just came up this morning. I attempted unbinding and rebinding the machine, updating from 10.7.2 to 10.7.3, removing and re-adding share point permissions, turning file sharing off then on, and still no network account authentication.Â
how to get network credential authentication to AFP filesharing working again?
I'm looking at OS X Server as a possible email server upgrade from an OLD Linux box. On our current server we have aliases setup to archive all incoming and outgoing email to another account. That one account then checks email via POP and then it is archived on another client computer for record keeping and CYA. It looks like this:Â
We are a small company that just recently started using Lion Server for a few simple services. We've been pretty happy with it and are considering trying to host our email on it as well, as we've had a little trouble lately with our hosted email being rejected as spam (since they're shared services). It seems to work correctly in a controlled environment on test email accounts that I've created, but I'm having trouble figuring out if it's possible to allow smtp relaying from a device (cell phone, tablet, computer) outside of the local network when the sending from is a virtual address.Â
Basically, it seems "user@company1.com" can send from devices off the network and authentication allows them to. However, we have two sister companies that we need email for as well. I would like them to be able to send messages from "user@company2.com" or "user@sister3.com."Â
When I try to send from one of those test accounts on an iphone outside of the local network, it says "A copy has been placed in your Outbox. The recipent "recipient@addressee.com" was rejected by the server because it does not allow relaying."Â If I add the specific IP address of that device to my allowed relay list, the message sends with no problem. Obviously, I don't want wide ranges of IP addresses allowed to use the relay service. Is there no way to allow relaying from any IP address based on an authenticated user?Â
I have a dozen of macs connected to a mac mini server. This one is programmed to automatically switch on at 8:00 am and switch off at 8:00 pm. However, if a user is still connected at time of switchng off (8:00 pm) it cannot switch off automatically and a window appears saying another user is still connected, do you still wish to disconnect. If administrator is no more there to click yes, server does not switch off and still runs all night long. On former versions (10.4 or 10.5 ?) it worked the other way, ie other users were informed that server would be disconnected in the next one minute and that they had to save their work.Â
Is there a solution to come back to a similar way of proceeding?
I have a server in our DMZ that connects to Active Directory LDAP server (non-ssl over 389) but no objects actually show up in the directory editor. I get a green light in my Network Account Server, but queries against LDAP return no results. My end goal is to be able to dictate to Profile Manager what LDAP groups are allowed to enroll devices. I tested on our internal network on a test server and get the same results. Anyone have any luck connecting a Lion Server to LDAP and actually being able to view and utilize users and groups?
I have installed Lion Server with Web and Profile Manager services. When I log into the profile manager web page I receive the message "Not Found The requested URL /wiki was not found on this server."Â
I recently updated my Server running 10.7.0 to version 10.7.3 and single-sign-on no longer works for my users. The 10.7.3 Lion Server System is bound to our Active Directory Server running on Win2003 R2 Server. I tried un-binding and rebinding the system but.. no luck. When a user now tries to login to our shares via AFP with SSO credentials they recieve the message Â
I can run the id command from terminal on the OS X server and it is seeing AD users. Unfortunately, no one can log into the server shares via AFP with an AD user.Â
I am desperate for help because whatever I do I cannot get my own certificates to work. When I first set up Lion Server a so-called Intermediate CA and a corresponding SSL server certificate was automatically installed and that works fine. Now, I wanted to create my own Certificate Authority (CA) and a leaf SSL server certificate.[URL]First I created my own CA, and then I created a new certificate with the Server App (ID type "leaf", certificate type "SSL server". (see screenshots below), and I had it signed by my own CA. When I checked the certificate it said "valid".Next, I exported the certificate from the keychain (as .p12) and then I went to Server App's "Import a certificate identity" to drag and drop the certificate onto the window. So far so good.
When I opened the list of certificates (Server App -> Hardware -> SSL -> Edit ) the new certificate showed up once, and after the Server App had tried to install the certificate it simply did not show up any more. I have copied the important parts of the certificate below (private parts have been cropped).The common name and the DNS name are "myserver.domain.private", and yes, DNS is working fine.(I stopped started services and re-booted in between creating and importing the new certificate.)Â
I don't understand how it happened, but a school I work with has had the SUS rip through 80Gig in a few days (Snow Leopard Server 10.6.8). Same as with my home server (Lion Server 10.7.3).
Since installing Filemaker Server 12 on our Lion Server 10.7.3, the Webmail is no longer working. I know with previous installations of Filemaker Server I have been asked whether I wanted to keep the system version of PHP or install PHP which comes with Filemaker Server, but I don't recall being prompted about it on this occasion. Previously I had always opted to retain the system PHP.
[code]...
And from the WAN I get just a screen saying webmail is turned off and that I can turn it on by using the Server app on the server (It is already checked in the server app).Â
Info: Mac mini Server (Mid 2011), Mac OS X (10.7.3)
With any Unix machine, one can run at the command line:- apachectl -S This will show all virtual servers configured in Apache, and will break if there are any obvious problems in the httpd .conf files. It's very handy for testing a new configuration before restarting the server. With Mac OS X Server though, this doesn't work properly. Sure, I can run that command and see a virtual server or two, but with the introduction of the server Apache wrappers, the command line tools read a very different configuration than the `serveradmin` tool does.
e.g. Wrappers like:-<IfDefine MACOSXSERVER> .... </IfDefine> or <IfDefine WEBSERVICE_ON>
[code]....
ps. Running `sudo serveradmin stop web && sudo serveradmin start web` really compared to `apachectl graceful`; it's painfully slow and doesn't provide a way to test a custom configuration before attempting to restart.
not quite so dire if you clicked this wondering ??? And why is this bing posted on Server forum? Well it happens to be on a server and I am trying to iron out what happens when you completely trash the system and start over. This problem occured in a subdirectory on one folder. It (the triangles ->) are there for all the other folders. However, there is one folder I had on a backup (backup, meaning still being a previous version of Lion) that at one point that any group of folders I place into it. there is no browsing triangle that lets you go down furthur. Yes you can open the folder and go further in, so its not prefs that I am aware of. Â
At this level...Triangles Here Still? Triangles still here. (Must say in Cookie Monster voice if you've watched the "Cookies done yet" bit you might giggle or at least be mildly annoyed.)
If you browse from this part of the hierarchy you get the expected behavior...Triangles Here Still? Triangles still here. however if you open the folder here is what you get...Triangles Here Still? (uh oh).
[Code]...
Anyway, sorry for the "less professional" candor of this post, but I have kids and a wife, and they think I am boring at times, and I love them - and while I am struggling with this, I am thinking of them, and obviously not with them. Ok Universe, this is where I need you the most: I'm counting on you do to something or say something to make it all better. Ok...Go
I know this issue is kind of old, but there are so many flavors of it, that it is hard to find exact match. I've been having problems with single account, and it happens that this account has admin rights. Emails get pulled/deleted from user's mailbox within 10 secs after arrival. There are no other devices that may be pulling those emails, however, I've noticed something strange in the logs:
I don't know if this event is normal to run on server itself, but seems it runs only for this one account that I'm having problems with. There is no imap client setup on that server, and based on my time stamps observations I'm pretty much convinced that's what's deleting my emails.
I just used Chax to combine my AIM and Facebook accounts in iChat, but I just realized how many of my friends use the stupid mobile feature for AIM, so they all show up in my buddy list when they really arent available. Is there anyway I can hide those mobile accounts in iChat?
Running a Lion Server I have decided to move /Users and /Groups to another partition but now when I create a user or group no user or group share is created. Groups aren't that much of a problem since I can create those manually, but user homes.Â
I have in server.app pointed the new location out as sharepoint both users and groups point to the right place, but there's probaaby a terminal command to run somewhere here....
iTunes sees calendars we have set up in the office (those being shared, coming from iCal Server - Lion), but it will not sync that data to our iphones. I tried this at home where I have my personal computer's client iCal app get calendar data from our work server. It won't sync that either, though iTunes does see (in the sync list) the calendars.
I have an OS X Server 10.6 setup with iChat and it works perfectly.This Mac is connected directly to the WWW, no firewall. I have an OS X Server 10.7 setup with iChat and it works perfectly EXCEPT for File Transfers This Mac is connected directly to the WWW, with a Netgear FVS336Gv2.I have opened all the correct ports for TCP & UDP and mapped them to my OSX Server 10.7 at 192.168.2.100Â
why should JUST file transfers do not work?This iChat OSX Server 10.7 is setup for people on the same server, using the same domain. File Transfer in iChat WORKS on the internal network OK?File Transfer in iChat DOESN'T WORK on external network?
This is the error log im getting back from the addressbook server error log. I noticed that the push notification is not working for the addressbook server.
Reguarding Lion Server upgrade strategies: I have a macmini running 10.6.8 client serving Filemaker files, acting as File Server, and running a development web server. It runs as a normal non-admin user (nomad) utilizing a seprate admin account with admin privilages (guardua),for security.  I run multiple shell scripts, apple scripts and Filemaker scripts. Many of which which use hardcoded file locations. Some bash scripts run under the non priv user other under the admin account.  I also have a thrid user account which acts as rsync destination. Considering most files and programs are under the non-privileged user, I'm wondering how this user / admin account set- up will work when transitioning to Lion Server. (?) Will ther server app and scripts work with this set up?  Do I need to upgrade the non-admin user (nomad) to admin privilages? I'm user sure how users and admin users work under Lion Server.Should I upgrade to Lion then to Lion Server? --Or-- perhaps do a clean install of Lion/server then reload from timemachine? Start from scratch?
I can't seem to get the App Store to sell me Lion Server for my Snow Leopard Server.I'm trying to remain positive about this but I'm getting really that money isn't enough to make this happen.My experiencewith the App Store and Apple policies in general is its almost time to dump OS X and head back to Open Source.I put money in my iTunes account.I've done the 15 logins it takes to satisfy AppleID my account is complete and up-to-date in the store and the Support Communities.How do I buy the software and actually download and install it?
Info: Mac mini, Mac OS X (10.6.8), upgrade to Lion
