HodgeHi

I did a few dinner time classes with some year 6 pupils. I got them into teams of about 4-5 and then got some oldish PCs out of the cupboard. I then let them take them apart and as we re-built them together we learnt about the parts, what they're called, how they go together etc. I thought about what the pupils would need as they move to secondary school and i thought that skills to allow them to repair their computer at home would outweigh any learning of word-processing /spreadsheeting (they should learn this in lessons anyway) since it means the parents don't have to trundle off down to PC world and get ripped off for a simple job. We finished to classes with a re-install of XP and how to configure the machine to boot from CD. What was interesting though was how many girls i had in the classes. They were also genuinely interested.

Not quite what i meant. I have entered the email addresses in the email field for the users in server 2003. But there is only room for one. IIRC when exchange is installed additional tabs are added where you can specify aliases for the users. But since we aren't using Exchange then we cannot do it this way. But the aliases file worked great. The secretary now receives the enquiries post

I missed this reply. Thanks for this. It just seems easier to read than the OS X Server manual or maybe i have learnt a little more since then???

Hmmm. To be honest mate i am not entirely sure where to go next. Everything seems to be pointing correctly. There are no logs being created for errors on the Server? What about error logs for clients? Is it just this share or are all other shares the same? Is DNS working correctly for the Server? I assume it is since users can log in.

What version of OS X Server and clients are you using?

Is your Xserve an OD master too? If so try and create a user in the OD and test the shares with that user.

I used the MySQL GUI tools to do mine. I found it be be a lot easier using the tools. Possibly because i am totally naff at scripting

This is the correct procedure. This is also what i get when accessing Windows shares. Tried stopping and restarting the AFP service? The SACLs are set in server admin. Click on the Xserve in the server list on the left. Then click on the settings > access. My AFP service has all users and groups allowed.

My AFP service is set up as follows General tab Enable Bonjour: ticked Encoding: Roman Login greeting: whatever you want Access Authentication: Any method (when the AD user are created after the share-points i have found that the users fail to login when the auth type is set to kerberos only) enable masquerade: ticked unlimited client connections selected Now also don't forget the SACLs. If you have set up SACLs on the service make sure that the users you are trying to connect with have access to the services

This is how i have one of mine set up: AFP Service: ticked AFP Guest Access: unticked SMB Service: ticked SMB Guest access: unticked enable oplocks: ticked enable strict locking: ticked inherit permissions from parent selected. FTP and NFS disabled. Enable automount: unticked spotlight: ticked time backup: unticked Permissions: ACLs AD Staff users group read and write AD Pupils group read only Posix AD administrator: read and write staff none others: none

Kerberos must be working since you had been granted a ticket. To test if you use a machine that is bound to the Xserve and authenticating using AD. Log on as an AD user. Open the Kerberos client .app Now try to open the share. This should then give you a ticket for the service used to open the share. By the way what service is being used to mount the share? AFP or SMB? Is guest access turned on for the shares? If so try removing guest access.

What permissions do you have set on the share in server admin?

Try mounting by using Finder > Go > Connect to Server (⌘K) I have found issues when trying to use the Finder window to do this, especially if you try and create a mounting share on login in this way. It seems to mess up the UNC path by sticking in TCP% stuff.

If HORBURY.INTERNAL is the same as your AD kerberos realm then the services have been kerberised. The AFP service is a funy one as it still utilises the local KDC realm of the OS X Server. You can check that authentication is set to kerberos by using Server admin. For AFP go to the AFP service and then go to the access tab. Under here should be authentication. Now if this is set to any method, the client "should" try to use kerberos first. If set to standard, you will have to auth using a dialog box. For SMB go to the SMB service, go to settings and then access. NTMLv2 and kerberos should be ticked. You could also try and use the kerberos.app found in /system/library/coreservices/kerberos.app Open this app and try and mount the share. See if you automatically get a kerberos ticket for the server the share is located. Running dsconfigad -enableSSO should try and kerberise all running services, but after checking my server smb isn't listed either. Remember to also check the time and also have the console open when trying to mount the share. This may give a little more insight to what is happening. Also you may wish to have the server logs available when mounting the share.

Are you using AFP and smb service? What protocols are you using for these shares? Also is kerberos set up for authentication type? Run sudo klist -kt and see if the services have been kerberised by the AD kerberos realm. If not then running dsconfigad -enableSSO should do it for you.

Double-post

http://www.coolosxapps.net Lists quite a few apps on here. Most are free. Some aren't It mentions having to pay to view but i don't think you need to as i haven't and still download ??? Apple - Downloads This also a good place to find stuff. Macademia There's a few little bits here too

After watching them closely i found that most weren't holding the mice in the right place to allow them to reach the buttons properly. But this was maybe due to the size of their hands compared to the mice. I purchased some smaller sized (laptop-sized) mice. This did seem to help a little as they could reach their little fingers to the end of the buttons. Maybe something to look at.

As far as i am aware school guardian doesn't work with nested groups. I created a group for all my pupil users and then added them to it. Then i created a group in School guardian and linked it to the AD group i created.

Hello, I am looking to make my web service as secure as possible whilst allowing for the upload of data. I have installed Joomla and used 750 as the settings for the web root and applied to enclosed objects. Now i would like to allow the creation of folders and uploading of images. What permissions should the root images folder have? I have tried 770 and 757 and both fail with errors (see pic) Am i doing all of this wrong? I have tried searching for correct permissions for web folders and security for this type of stuff but can't get any definitive answers. I have tried to configure it as an FTP folder as well but it requires 777 as the permissions. Surely this results in a security risk for that folder? Sorry for such a numpty question but i have never really fully grasped the folder permissions needed for this stuff and what implications it has on the security. I have read what chmod does and how it works but not exactly sure on what effects giving 777 on a folder would cause although it isn't a critical file like the config.php

I had a similar issue where i was handed a Vista laptop that kept blue-screening on start-up. My solution was to check to see if it had Xp drivers available and then install XP. Solved all problems. User hated Vista, speed increased. An all-round winner

I have now officially given up on Apple's FTP service implementation. After some digging and some more searching and a discussion with Tony Rocco, i have come to the conclusion that the FTP service in OS X 10.5.6 is just to insecure to use out of the box and i can't see a simple way of changing that. So i have been looking around for an alternative and have found what looks to be a pretty good one. It is called Pure-FTPD Now, the version on their website seems to need compiling and i wasn't about to go into that sort of thing. So i carried on my search and came across Pure-FTPD Manager This comes with a GUI to manage the service but more importantly the service itself. Its a simple install .pkg file and looks quite good. It also has the added bonus of not using local users. It uses virtual ftp users and also comes with the possibility of SSL encryption for FTP. Check it out if you need a decent FTP service on your OS X machine.

OK i have had another bash at this. I have started the FTP service and configured a share for FTP access on one of the folders inside the web site i want to access. This in theory should allow me to access the share since the FTP service mounts the ftproot and share-points. I have added myself as a user with read-write privs to the ACL list and propagated the permissions. I am almost there except that the when i use cyberduck to authenticate against the server and share with my username it fails. Is this another half-arsed AD integration implementation? Do i need to fiddle with the auth settings on this service as well like the rest of them? i have also created a local user and get the same error. I have just authenticated as the local admin user however. Maybe FTP cannot use ACLs, only posix??? Anyone able to shed some more light?

I had a similar issue with perian. The easiest way to solve this i found was to give a user who has restricted access to the applications access to the console. Then when the user logs in filter the console logs by using the name of the app that is blocked. This "should" list the location of the application and from there you should then be able to allow the application. Some are buried inside the application itself (package contents) and some are buried inside the library/application support folder.

i am definitely an edugeeker first and then a googler. I have though referred to the server mcsce books a few times though. The main one was for the ntdsutil command