GoldenWonder

On our 10.9.4 OSX server we use Workgroup Manager to deploy preferences. One requirement is a few shortcuts to various folders in the dock. This works fine, but only for up to 3 items, whenever I try to add the fourth item I get the error: "Error wile saving record " Connection failed to the directory server (com.apple.OpenDirectory:2100) Out of the 4 links, 3 are to NAS boxes and 1 to a windows server. It doesn't matter what order you try and add them - but when you add the fourth you get the error! I've searched for this problem, but I seem to be alone in this one

Cheers, I'm running a few tests with DelProf2 as that seems to have the flexibility we need.

Yes, but we wanted to have a more controlled approach (like we did on XP) where for example students profiles would be removed more frequently than staff. And administrators logins would be left alone. The profile worked when I tried it (IIRC, it was a while ago) but it deletes the lot as it just matches on date.

We run a vbscript by GPO on machine boot to delete older profiles (the date varies, from 14 days to several weeks) as we use local (no roaming) profiles across the network. This doesn't seem to be working - lots of old profiles are left behind. When we run the script manually with debug messages we can see the profiles are 'selected' correctly, but a delete of one can take a long time (30 seconds or more!) and I'm guessing this might be causing the script to timeout. The script is below. We leave a few local profiles alone (local ones,admins etc) Can anyone see where I'm going wrong with this? When I run it directly, with the debug messages on I can see the profiles are being correctly identified as ones to delete, the delete part just seems to take ages, and the local profiles are small (<50mb) I reformat the date to make sure that the dates are matched exactly, although this probably isn't necessary it does work. On Error Resume Next Dim objFSO, objWMIService, strComputer, strFilter, intMaxProfileAge, colProfiles, objProfile, dtmLastUseTime strComputer = "." strFilter = "SID Like ""S-1-5-21%"" And Not LocalPath Like ""%Administrator%""" ' Maximum Age of profile intMaxProfileAge = 14 Set objFSO = CreateObject("Scripting.FileSystemObject") Set objWMIService = GetObject("Winmgmts:\\" & strComputer & "\root\cimv2") Set colProfiles = objWMIService.ExecQuery("Select * From Win32_UserProfile Where " & strFilter) If Not colProfiles Is Nothing Then For Each objProfile in colProfiles dtmLastUseTime = CDate(Mid(objProfile.LastUseTime, 7, 2) & "/" & Mid(objProfile.LastUseTime, 5, 2) & "/" & Left(objProfile.LastUseTime, 4) & " " & Mid (objProfile.LastUseTime, 9, 2) & ":" & _ Mid(objProfile.LastUseTime, 11,2) & ":" & Mid(objProfile.LastUseTime, 13, 2)) If DateDiff("d", dtmLastUseTime, Date) > intMaxProfileAge Then Err.Clear 'MsgBox objprofile.localpath & " datediff= " & DateDiff("d", dtmLastUseTime, Date) objProfile.Delete_ 'msgbox err.number End If Next End If Either the VB method of profile deleting is just very slow by nature, or I'm doing this the wrong way!

I've got a TMG 2010 box here that acts as our firewall. Basically all web access goes through a smoothwall box and out to the LEA and the TMG box is the default gateway for the other access (local LEA and similar) We mainly use this to allow access to specific sites on the LEA's subnets (websites that are effectively internal but not on our network) The primary rule to do this is to Allow access for the internal network to the specified subnets (the LEAs) for HTTP/S and PING etc. This works fine and as expected. However when I run the Traffic Simulator and test whether it would allow access to http://www.madeupsite.com or any actual website it says the above rule matches the packet and allows it! Am I missing something here? With this one rule the destinations are explicitly set to the LEAs server addresses, yet any website 'passes' on this rule! This is the only rule in place as the next rule is the default 'Deny All', the logging actually shows my Allow rule is allowing the access based on a packet match: "The rule Allow local Bypass matches the packet. The packet is allowed." So TMG is saying it would allow access based on the fact it matches on HTTP, even though the destination does not match? I thought the rule had to match everything to be allowed? EDIT: After staring at this for hours I've realised it was all down to a typo!!!

Well I've found a fix, sort of. Removing the LDAP and AD settings in the Directoru utility (and rebooting) and everything works OK. I know these macbooks get their preferences (including proxy) from the xserver when in school, but offline a seperate login is used. Not sure why the ica client is reading proxy settings that aren't applied to that user?

I'm wondering whether I need to create a customised .ica file then? Is that possible, to link to this site and make sure no proxy is used.

Yeah we can get to the site, and login successfully! Just not run any apps

Checking the CAG logs doesn't seem to show anything different for the failed sessions than the sucessful sessions. Nothing obvious anyway. Sessions where the apps have started OK (from a windows PC for example) are showing the same message pattern as the failed Mac sessions.

Our system uses a Citrix Access gateway.

The proxy isn't relevant in this case as its external Macbooks accessing our internal Citrix server - i.e there is no proxy at the user end. The users can login and see the applications list correctly (and browsing is fine)

Does the same thing in Safari and Firefox - latest version of FF as well. In Windows it works with IE and FF, and Ubuntu works with FF

We don't seem to get to that stage. The 'Launching' part appears and then hangs at approx 50% on the progress bar. After about 30 seconds or so the error appears. I've tested this on several Macs and a couple of different test sites - all fail the same way. PCs and Linux boxes work fine on both test sites?

We have a XenApp Citrix system to allow staff to login from home. This works fine with all Windows PCs but recently we have noticed no Mac (Imac or Macbook) will work. They can login and get the applications list, but running any of the Apps always comes up with the error: SSL Error 4: Proxy Connection Failed: The configured proxy server does not answer Error number 183 Annoyingly, Citrix don't even seem to have any knowledge of this error, despite it having a number! If there was a configuration error then the Windows machines wouldn't work. I seem to remember the Macs worked originally, so I'm not sure whats changed! And the proxy error is odd as these are home computers with no Proxy! The error only affects Macs and is on 10.6.2 and 10.6.5 (that I've found so far) Any ideas on this one before I really go off Macs! Edit: Tested on Ubuntu and all working fine there too! Obviously Citrix Client and Macs no longer work for some obscure reason!

We're slightly different in our setup. OD just dishes out preferences (basic server) and clients use AD for authentication. The problem comes when we set clients to map their home directory to their AD share name. It works - but we get these complete system hangs. If we force the home directory to the local drive, no hangs. But as we wanted the macs to integrate properly and not have manual file copying this isn't a good solution. Obviously SMB is the problem, but what part of it is causing the problem I'll never know! Anyone got a smb.conf file I can compare ours against?