OS X multiple login scripts - sendlogon and NHR

So, after having NHR running for quite a while, it looks like we also need to have sendlogon running at login. This isn't the first time I've had to have multiple login scripts. I remember doing this for BootPicker back when it wasn't included in the operating system.

So to do this I will use the system already in place thanks to NHR. At the moment, at login, the file /etc/login.hook runs. This runs any scripts within the /etc/hooks folder which begin with "Li". The same thing happens for logout but with any files beginning with "Lo". So, all I have to do is to rename the "login.sh" script something like "Lisendlogon.hook" and it will run at login.

Now, this "lisendlogon.hook" script simply contains the command to run the "sendlogon" program plus the right syntax to put after it. i.e. the server and the current users credentials. This is how it looks:

#!/bin/tcsh

/usr/bin/sendLogon dns.name.of.server.com 3898 $1

The sendLogon is in the /usr/bin folder, as this is where their tutorial says it should be.


After testing this, I need to make an install pkg file to run from the task server. I like using IceBerg.


So, here's some screenshots from it:

Iceberg - fix NHR and sendlogon settings page

postflight installation scripts.

writeloginhook.sh contains:

#!/bin/tcsh

sudo defaults write com.apple.loginwindow LoginHook /etc/login.hook

which tells the operating system to run /etc/login.hook at login. 

iceberg - files section. Later found the default destination needs to be "/"

I got slightly confused as to which folder to make the default destination?

I'll test it out on a computer suite machine to see if it works.

After a little testing, it looks like it didn't put sendLogon into /usr/bin! After trying a few things it turns out it was down to the "Default Destination". After setting this as "/" it worked. It looks like this is basically the folder which all installation folders have in common.

Iceberg - files section with the correct "default destination" as the lowest common folder.

Tested and works fine.

Cheers

Password for printing on OS X 10.6 and changing every day

Here's some info:

The need a password tickbox in mcxprinting has limiting effects. It appears in Photoshop that it only prompts for a password if you change the print settings for the printer! Seems to only stop you if you're using the OS X printer interface. Any other interface might get around the password facility.

I suppose one option is to see if the CUPS printing facility has an admin password thingy.

Alternatively, you could just have one user which can log into the machine.

One thing we need to do is to get something automatic in place which automatically changes the password depending on the day.

Found this which describes the use of passwd command line utility to change a users password. We could set up something automatic which would change the administrators password every day and loop.

Another thought I had was to share the printer with the server, but call the instance on the machine something miscellaneous like -error-, and have another printer set up which connects to the server. That way we can use it like any other! I think this is the best solution yet.

So, I tried to setup a network printer:

1. I set up the printer on the machine and called it "-error1-" so no-one would use it
2. ticked the "printer sharing" box in system preferences
1. also ticked the windows sharing box
3. I read somewhere it was best to turn the firewall on, so I did. I checked to see the exceptions and printing and smb were listed
4. Next I went to the windows 2000 server added a 'local port' printer
1. using port "\\123.45.67.89\-error1-" and used the right windows driver for it so papercut would be able to work out paper size etc.
2. I shared this printer with the name "n239-Ep7600"
5. I did a test print from the windows server and it came out fine, although it wanted the roll paper instead of sheet paper feed.
6. On the Mac I set up the networked printer, using LPR, the ip address of the server and the queue name "N239-Ep7600"
1. gave it the correct print driver
7. I performed a test print from the OS X machine and it came up with some sort of "rasterize" error.

/Library/Printers/EPSON/InkjetPrinter2/Filter/rastertoescpII.app/Contents/MacOS/rastertoescpII failed

I can only assume that the print driver cannot cope with being sent through a network, and has to "rasterize" it on the fly?

Another option is to have the print queue paused for every printjob which requires an administrator to unpause it. Found this post which is for os x 10.5 and involves CUPs config file.

Canon LiDE 60 on OS X 10.6.6 and Active Directory probs

So, after installing the scanner (heres the notes) I then thought all would be fine. It turns out that students logging in through active directory would not be able to scan. It would not provide a preview of what was in the scanner, nor would it let you press the scan button.

On looking in the logs I found this entry:
28/03/2012 12:56:47 /System/Library/CoreServices/coreservicesd[48] removing dropped transaction for -114,_mac_bind/Library/Preferences/CanoScan LiDE 60/~SGCheck.tmp

It appears the program cannot gain the right access privilages to this folder, as it is on a Windows SMB share (I think) through active directory.

On trying to create an alias to this using OS X finder I saw this error:
28/03/2012 13:02:29 kernel smb_maperr32: no direct map for 32 bit server error (0xc0000279)

As I have NHR installed, which redirects certain folders, I thought I'd try and redirect this /Library/Preferences/CanoScan LiDE 60/ folder.

After redirecting it to the local drive, I found it still not working. I found another error:

3/28/12 1:07:52 PM /System/Library/Image Capture/Devices/TWAINBridge.app/Contents/MacOS/TWAINBridge[4423] Allocator race detected: transaction is not verified for -114/2 - _mac_bind/Library/Preferences/~SGCheck.tmp
3/28/12 1:07:55 PM /System/Library/CoreServices/coreservicesd[48] removing dropped transaction for -114,_mac_bind/Library/Preferences/~SGCheck.tmp
3/28/12 1:07:59 PM /System/Library/CoreServices/coreservicesd[48] removing dropped transaction for -114,_mac_bind/Library/Preferences/~SGCheck.tmp
3/28/12 1:07:59 PM /System/Library/CoreServices/coreservicesd[48] removing dropped transaction for -114,_mac_bind/Library/Preferences/~SGRot.tmp

It looks like it needs to write two files to the ~/Library/Preferences folder:
~SGCheck.tmp
~SGRot.tmp

I regigged the LIclean.hook to delete the Preferences folder, create it in the tmp folder on the local drive, and to create a symlink in the users Library folder.

Having done this, it worked like a dream. I would preferably have it so that it just had a symlink to these files it needs, but they are probably deleted as soon as they're not needed any more, and that would be the end of the symlink until the next login.

Anyway, for reference, here are the lines I added to the LIclean.hook file:
rm -rf "$home_loc"/Library/Preferences
mkdir /tmp/$1/Preferences
ln -s /tmp/$1/Preferences/ "$home_loc"/Library/Preferences


Thinking about it I'll also need to sort the LOcleanupclean.hook file. Here's what I need to add:
rm -rf "$home_loc"/Library/Preferences

Thats a good days work.

Adobe CS 5 updates for Deployment through ARD - Adobe Application Manager

So, I want to update Camera RAW on all the apple macs. How do I do this as the installer is a stupid .app file and not a nice PKG file. Well, you use the "Adobe Application Manager" of course!

So I just downloaded version 2.1. Interestingly their installer for it is also an .app file!!

Well, I can't believe it but it is unbelievably easy to make a pkg file. My only thought is why they need to give you the application to do it. Can't they host it on their site?

Anyway, I took some screenshots, although it is very self-explanitory:

A little note:
I came back to this recently and found Adobe Application Manager had trouble loading up. I later found the correct Application Manager to load up is in Directory:

/Library/Application\ Support/Adobe/OOBE/PDApp/core/Adobe\ Application\ Manager.app, which might not be very obvious!!

Problems with HP Scan Pro app with Scanjet 4370

Well, we have a computer suite with OS X 10.6.6, and 4 x HP Scanjet 4370. Just recently we've been having random troubles. It seems sometimes, when an active Directory user logs in and tries to use the HP Scan Pro App, when the scanner has scanned and is about to save the scan, it crashes!

After this point the scanner needs to be switched off and back on again.

I initially thought it was a problem with saving to an SMB share and did actually find an entry in the logs:
smb_maperr32: no direct map for 32 bit server error 10.6

I found a few forums which mentioned changing the file smb.conf but this was for OS X 10.5 and below.

I finally gave up and found the latest HP Scanner application -> HP Scan 2.4.4

This looks a lot different, but I didn't have any trouble with it. One annoying point is that it the install file isn't a standard pkg or mpkg file, but does contain them! As it was only 9 machines to install, I just did it the 'old school' way.

Here's the tutorial I made for it

Scanning using HP Scan 2.4.4 and HP Scanjet 4370

In ‘Finder’ go to Applications > Hewlett-Packard > HP Scan

The first time you run the software, it will ask you which scanner to use.

1. Choose the scanner and press Continue

2. Choose the most relevant option

3. Click Scan

4. Select the most relevant

5. Check the resolution (more than 300dpi if you are enlarging your image)

6. Click Save

Windows Vista Laptop dwmredir.dll error on login

A staff member brought their laptop in. Upon booting it up it auto logs in but before it can load the desktop or anything it comes up with the error:


"C:\Windows\system32\dwmredir.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support.


Found this microsoft tech forum which suggests:

1. restore to just before this happened - unfortunately there is no restore points!!
2. try a clean boot
1. goto -> run -> msconfig
2. disable startups
3. disable non microsoft startups
4. try and rule out which one is causing it
3. tryed these to no avail. Still no desktop

Found this forum which says to run some error checking thing called "System File Checker". From command line type:

sfc /scannow

............

I've just found this post under "drafts". Looks like I didn't finish the post. From what I remember, I think I booted in Safe Mode, turned on the installation service (see previous post), installed Tune Up Utilities and ran "One Stop Maintenance". I think this is how I fixed it.


Simple.

Adobe Creative Suite 5 - keeps asking for serial number

I recently installed Adobe CS 5 on a Windows Vista laptop. During the initial stage of the installation it did ask for a serial for which I put in the correct numbers. It told me everything was fine and installed.

I then tried opening Adobe Photoshop and it came up with the a dialogue box asking for the serial. I put it in, it gave me the green tick and told me everything was fine. The dialogue box disappeared and then reappeared wanting me to put in the serial, in a continual loop.

I tried serveral logins' including the administrators but none worked. I also tried a reboot.

I must mention that this laptop had Adobe CS3 installed previously which had stopped working due to a licensing error.

After trawling through the internet I initially found this post, and he posts again to say he has found a forum and found the only fix was to delete a database file. He failed to say which file, or even which post he had found!!

After some more looking, specifically for Adobe CS databases, I found this post. It mentions deleting:
C:\Program Files (x86)\Common Files\Adobe\Adobe PCD\cache\cache.db



I found the file, renamed it and tried Adobe again. Put in the serial and it works beautifully.


My conclusion was that this file had either gotten corrupt or had the wrong permissions.

Adobe InDesign - The Adobe Print Engine has failed - AuthDialog.nib

Having a slight problem with InDesign. Just tried printing a file from InDesign to an Epson Stylus Pro 7600 and came up with this error:

Printing Error. The Adobe Print Enine has failed to output your data due to an unknown problem

Looking in the log files I found this entry:

19/03/2012 12:32:57 Adobe InDesign CS5[421] -[AuthWindowController loadWindow]: failed to load window nib file '/Library/Application Support/Adobe/APE/3.1/adbeapecore.framework/Versions/A/Resources/AdobeSWFL.bundle/Contents/Resources/AuthDialog.nib'.

 Couldn't find anything on it on the internet.

I did a bit of testing. Tried:

• printing a new document - printed
• printed a new document with the same images in - printed
• printed a new document with the same text (was foreign text) - error

Thus I have concluded that it is to do with the unusual text in the document. It was a piece of text translated using Google Translate and pasted, using the Arial font.

The funny thing was that I was unable to export it as a pdf file from that machine, but was able to export it using another machine? As it's just a one off print I thought I'd leave it there.

Anyway, printed it from the pdf file, created on another machine, through Preview. Worked!

testing MatchMover 2012 and Maya with camera tracking

So, i've been testing MatchMover to see how good it is with camera tracking. I've just done the tutorial, but with some footage taken in the garden.

After my first two tries with "automatic tracking" it didn't work too well. It can't seem to handle the HD footage with the compression on it. The amount of pixels per compressed block seems to put the tracking points off a little. One idea might be to make the resolution smaller, with the idea that this will make the compressed areas pixels themselves, and so not cause any confusion.

On exporting to Maya I noticed it did not put the image in the background of the camera. It came up with this error:

// Error: Unable to load the image file, '/Users/monkey/Desktop/Movies/DSCF0.AVI', for rzImagePlane1

For a start, the movie file was named: DSCF01525.AVI, and not DSCF0.AVI. Second of all it is a movie file! So, to fix:

1. In the Viewport, select Panels > Perspective > rzCamera1
2. Select the camera
3. Go to the rxImagePlane1
4. Change Type to "Movie"

Done.

I noticed when put into Maya the image slips a lot, certainly a lot more then in MatchMover. The only reason I can see for this is the fact I'm using a widescreen movie file, and the camera setup might not be the same.

The first thing I tried was to increase the frame offset. I changed it to '1' and it made a little difference, but still wasn't perfect. My next thing to try is to change the AVI into an image sequence. Thirdly, I'll have to look into the 'pixel aspect ratio'.

Now, the question of how to convert to an image sequence?

Answer: use MPEGstreamclip 1.9 and upwards. Cheers.

After converting to a sequence, I matchmover'd it and put it into maya. Perfect. It looked as good as it did in MatchMover. I can only assume it was to do with things like 'pixel ratio' and frames per second? Anyway, from now on I shall only use image sequences.

MatchMover 2012 OS X A valid license could not be obtained

Just got the free student version of Maya 2012 which comes with MatchMover 2012! Yay.


Maya is working fine, but MatchMover comes up with:

A valid license could not be obtained by the network license manager - error -1.359.2 (????)

License was not obtained - tried maya 2012 (657D1 2012.0.0.f), error 20
License method : environment variable Maya_License_method=’network’
Product choice : environment variable Maya_License=’unlimited’
License file override : environment variable Maya_alt_en is not set

This is the maya 2012 license.env

MAYA_LICENSE=Unlimited
MAYA_LICENSE_METHOD=Standalone

This is the adlminfo from matchmover…

type=Standalone
serial=xxxxxxxxxxxxx
prodkey=657D1
configuration=Unlimited

Just had a quick search and found this forum. Just a quicky really. Just have to copy the license.env from:

/Applications/Autodesk/Maya 2012/Maya.app/Contents/license.env

to:

/Applications/Autodesk/MatchMover2012/MatchMover2012.app/Contents/license.env

Works a charm. Must just be a bug with the Mac OS X version

Mac OS X 10.6.6 Active Directory Login issues

A while after updating all the Apple Suites to 10.6.6 I started getting a few Apple Macs which would not let anybody log in. I had a look at the system log and found this:


07/03/2012 15:44:22    kernel    Ethernet [AppleBCM5701Ethernet]: Link up on en0, 100-Megabit, Full-duplex, No flow-control, Debug [796d,0300,0de1,0300,41e1,0000]
07/03/2012 15:44:25    configd[13]    setting hostname to "n240-11904.local"
07/03/2012 15:44:25    configd[13]    network configuration changed.
07/03/2012 15:44:26    configd[13]    network configuration changed.
07/03/2012 15:44:26    configd[13]    setting hostname to "n240-11904.ictservicestest.somewhere.ac.uk"
07/03/2012 15:44:27    com.apple.DirectoryServices[15]    Enter machine password:
07/03/2012 15:44:28    com.apple.DirectoryServices[15]    [2012/03/07 15:44:28, 0, pid=466] /SourceCache/samba/samba-235.5/samba/source/libads/kerberos.c:ads_kinit_password(228)
07/03/2012 15:44:28    com.apple.DirectoryServices[15]      kerberos_kinit_password N240-11904$@STUDENTS.somewhere.AC.UK failed: Preauthentication failed
07/03/2012 15:44:28    com.apple.DirectoryServices[15]    [2012/03/07 15:44:28, 0, pid=466] /SourceCache/samba/samba-235.5/samba/source/libads/kerberos.c:ads_kinit_password(228)
07/03/2012 15:44:28    com.apple.DirectoryServices[15]      kerberos_kinit_password N240-11904$@STUDENTS.somewhere.AC.UK failed: Preauthentication failed
07/03/2012 15:44:29    mDNSResponder[31]    RegisterInterface: Frequent transitions for interface en0 (FE80:0000:0000:0000:CA2A:14FF:FE0B:B63D)
07/03/2012 15:44:33    com.apple.DirectoryServices[15]    Enter machine password:
07/03/2012 15:44:33    com.apple.DirectoryServices[15]    [2012/03/07 15:44:33, 0, pid=474] /SourceCache/samba/samba-235.5/samba/source/libads/kerberos.c:ads_kinit_password(228)
07/03/2012 15:44:33    com.apple.DirectoryServices[15]      kerberos_kinit_password N240-11904$@STUDENTS.somewhere.AC.UK failed: Preauthentication failed
07/03/2012 15:44:33    com.apple.DirectoryServices[15]    [2012/03/07 15:44:33, 0, pid=474] /SourceCache/samba/samba-235.5/samba/source/libads/kerberos.c:ads_kinit_password(228)
07/03/2012 15:44:33    com.apple.DirectoryServices[15]      kerberos_kinit_password N240-11904$@STUDENTS.somewhere.AC.UK failed: Preauthentication failed
07/03/2012 15:44:33    com.apple.DirectoryServices[15]    Enter machine password:
07/03/2012 15:44:33    DirectoryService[15]    Failed to changed computer password in Active Directory domain students.somewhere.ac.uk
07/03/2012 15:44:33    com.apple.DirectoryServices[15]    [2012/03/07 15:44:33, 0, pid=479] /SourceCache/samba/samba-235.5/samba/source/libads/kerberos.c:ads_kinit_password(228)
07/03/2012 15:44:33    com.apple.DirectoryServices[15]      kerberos_kinit_password N240-11904$@STUDENTS.somewhere.AC.UK failed: Preauthentication failed
07/03/2012 15:44:34    com.apple.DirectoryServices[15]    [2012/03/07 15:44:34, 0, pid=479] /SourceCache/samba/samba-235.5/samba/source/libads/kerberos.c:ads_kinit_password(228)
07/03/2012 15:44:34    com.apple.DirectoryServices[15]      kerberos_kinit_password N240-11904$@STUDENTS.somewhere.AC.UK failed: Preauthentication failed
07/03/2012 15:44:34    com.apple.DirectoryServices[15]    Enter machine password:
07/03/2012 15:44:34    com.apple.DirectoryServices[15]    [2012/03/07 15:44:34, 0, pid=484] /SourceCache/samba/samba-235.5/samba/source/libads/kerberos.c:ads_kinit_password(228)
07/03/2012 15:44:34    com.apple.DirectoryServices[15]      kerberos_kinit_password N240-11904$@STUDENTS.somewhere.AC.UK failed: Preauthentication failed
07/03/2012 15:44:34    com.apple.DirectoryServices[15]    [2012/03/07 15:44:34, 0, pid=484] /SourceCache/samba/samba-235.5/samba/source/libads/kerberos.c:ads_kinit_password(228)
07/03/2012 15:44:34    com.apple.DirectoryServices[15]      kerberos_kinit_password N240-11904$@STUDENTS.somewhere.AC.UK failed: Preauthentication failed
07/03/2012 15:44:36    ntpd[20]    time reset +0.717779 s
07/03/2012 15:45:01    /System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer[91]    CGSKeyTranslateInitialize: KLGetCurrentKeyboardLayout or KLGetKeyboardLayoutProperty is not available, fall back to USA keymap
07/03/2012 15:45:09    SecurityAgent[96]    Could not get the user record for '_mac_bind' from Directory Services
07/03/2012 15:45:09    SecurityAgent[96]    User info context values set for _mac_bind
07/03/2012 15:45:09    SecurityAgent[96]    unknown-user (_mac_bind) login attempt PASSED for auditing
07/03/2012 15:45:13    SecurityAgent[96]    Could not get the user record for '_mac_bind' from Directory Services
07/03/2012 15:45:13    SecurityAgent[96]    User info context values set for _mac_bind
07/03/2012 15:45:13    SecurityAgent[96]    unknown-user (_mac_bind) login attempt PASSED for auditing


This is what happened after I woke the machine up and then tried to log in as a user called "_mac_bind". It happens with any Active Directory user.

After trying all the standard things:

1. reset PR-RAM
2. /sbin/fsck -yf
3. unbind and bind again

I finally resorted to re-imaging, which actually fixed the problem, although I am not sure why.

I came back to the problem after finding it happen quite a few times and tried binding it to Active Directory with a different name (although I had my doubts). This fixed the problem.

I conclude to say that there must have been a problem on the server side. Perhaps the mac had been placed in the wrong list. My next thing to try would be to delete any instance of it on the servers and try binding it under it's old name.

After this, I would either assume someone had done something to the instance on the server, or the server had not liked the machine at one point and disallowed it.

.......

Well, I've come back to this some time later. It appears one of the Staff iMacs is now exhibiting the same behavour, but changing its Active Directory bound name does not fix it this time. So, before I re-image hopefully the Network Administrator can have a look. Here's the log for the one exhibiting this behavour:

13/03/2012 09:36:28 SecurityAgent[95] Showing Login Window

13/03/2012 09:36:28 kernel Ethernet [AppleBCM5701Ethernet]: Link up on en0, 100-Megabit, Full-duplex, No flow-control, Debug [796d,2300,0de1,0300,41e1,0000]

13/03/2012 09:36:34 configd[13] network configuration changed.

13/03/2012 09:36:36 configd[13] setting hostname to "n214a-11905.ictservicestest.somewhere.ac.uk"

13/03/2012 09:36:50 com.apple.DirectoryServices[15] Enter machine password: 

13/03/2012 09:36:52 com.apple.DirectoryServices[15] DNS update failed!

13/03/2012 09:36:56 DirectoryService[15] GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Cannot find KDC for requested realm)

13/03/2012 09:36:56 DirectoryService[15] GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Cannot find KDC for requested realm)

13/03/2012 09:36:57 DirectoryService[15] GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Cannot find KDC for requested realm)

13/03/2012 09:36:57 com.apple.DirectoryServices[15] Enter machine password: 

13/03/2012 09:36:58 com.apple.DirectoryServices[15] DNS update failed!

13/03/2012 09:36:58 SecurityAgent[95] Could not get the user record for _mac_bind from DirectoryServices.

13/03/2012 09:36:58 SecurityAgent[95] Will sleep 1 seconds and try again (retryCount = 4)

13/03/2012 09:36:59 SecurityAgent[95] Could not get the user record for _mac_bind from DirectoryServices.

13/03/2012 09:36:59 SecurityAgent[95] Will sleep 2 seconds and try again (retryCount = 3)

13/03/2012 09:37:01 SecurityAgent[95] Could not get the user record for _mac_bind from DirectoryServices.

13/03/2012 09:37:01 SecurityAgent[95] Will sleep 4 seconds and try again (retryCount = 2)

13/03/2012 09:37:05 SecurityAgent[95] Could not get the user record for _mac_bind from DirectoryServices.

13/03/2012 09:37:05 SecurityAgent[95] Will sleep 8 seconds and try again (retryCount = 1)

13/03/2012 09:37:13 SecurityAgent[95] User info context values set for _mac_bind

13/03/2012 09:37:13 SecurityAgent[95] unknown-user (_mac_bind) login attempt PASSED for auditing

13/03/2012 09:37:17 SecurityAgent[95] Could not get the user record for _mac_bind from DirectoryServices.

13/03/2012 09:37:17 SecurityAgent[95] Will sleep 1 seconds and try again (retryCount = 4)

13/03/2012 09:37:18 SecurityAgent[95] Could not get the user record for _mac_bind from DirectoryServices.

13/03/2012 09:37:18 SecurityAgent[95] Will sleep 2 seconds and try again (retryCount = 3)

13/03/2012 09:37:20 SecurityAgent[95] Could not get the user record for _mac_bind from DirectoryServices.

13/03/2012 09:37:20 SecurityAgent[95] Will sleep 4 seconds and try again (retryCount = 2)

13/03/2012 09:37:24 SecurityAgent[95] User info context values set for _mac_bind

13/03/2012 09:37:26 authorizationhost[94] k5_store_ticket_in_cache(): got -1765328243 (Matching credential not found) on /SourceCache/SecurityAgent/SecurityAgent-39574/plugins/krb5/krb5_operations.c:115

13/03/2012 09:37:26 SecurityAgent[95] Login Window Showing Progress

13/03/2012 09:37:26 authorizationhost[94] ERROR | -[HomeDirMounter mountNetworkHomeWithURL:attributes:dirPath:username:] | PremountHomeDirectoryWithAuthentication( url=smb://faraday.students.somewhere.ac.uk/FaradayStudents, homedir=/Network/Servers/faraday.students.somewhere.ac.uk/FaradayStudents/_mac_bind, name=_mac_bind ) returned 45

13/03/2012 09:37:53 DirectoryService[15] GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Cannot find KDC for requested realm)

13/03/2012 09:37:53 SecurityAgent[95] Could not get the user record for '_mac_bind' from Directory Services

13/03/2012 09:37:53 SecurityAgent[95] User info context values set for _mac_bind

13/03/2012 09:37:53 SecurityAgent[95] unknown-user (_mac_bind) login attempt PASSED for auditing

13/03/2012 09:38:04 SecurityAgent[95] Could not get the user record for _mac_bind from DirectoryServices.

13/03/2012 09:38:04 SecurityAgent[95] Will sleep 1 seconds and try again (retryCount = 4)

13/03/2012 09:38:05 SecurityAgent[95] Could not get the user record for _mac_bind from DirectoryServices.

13/03/2012 09:38:05 SecurityAgent[95] Will sleep 2 seconds and try again (retryCount = 3)

13/03/2012 09:38:07 SecurityAgent[95] Could not get the user record for _mac_bind from DirectoryServices.

13/03/2012 09:38:07 SecurityAgent[95] Will sleep 4 seconds and try again (retryCount = 2)

13/03/2012 09:38:11 SecurityAgent[95] Could not get the user record for _mac_bind from DirectoryServices.

13/03/2012 09:38:11 SecurityAgent[95] Will sleep 8 seconds and try again (retryCount = 1)

13/03/2012 09:38:19 SecurityAgent[95] User info context values set for _mac_bind

13/03/2012 09:38:19 SecurityAgent[95] unknown-user (_mac_bind) login attempt PASSED for auditing

13/03/2012 09:38:24 SecurityAgent[95] User info context values set for cove

13/03/2012 09:38:25 SecurityAgent[95] Login Window Showing Progress

13/03/2012 09:38:26 SecurityAgent[95] Login Window done

13/03/2012 09:38:26 loginwindow[31] Login Window - Returned from Security Agent

Just for comparison, here is a log for a 'normal' machine:

13/03/2012 08:30:40 configd[13] network configuration changed.

13/03/2012 08:30:40 configd[13] setting hostname to "n219-002225"

13/03/2012 08:30:41 blued[17] writeExtendedInquiryResponse returned 105

13/03/2012 08:30:41 com.apple.SystemStarter[22] Starting Qmaster services

13/03/2012 08:30:43 com.apple.DirectoryServices[15] Enter machine password: 

13/03/2012 08:30:43 com.apple.SecurityServer[25] Session 0x30a460 created

13/03/2012 08:30:43 com.apple.SecurityServer[25] Session 0x30a460 attributes 0x30

13/03/2012 08:30:44 loginwindow[31] Login Window Started Security Agent

13/03/2012 08:30:45 WindowServer[68] kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.

13/03/2012 08:30:45 com.apple.WindowServer[68] Tue Mar 13 08:30:45 n219-002225 WindowServer[68] : kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.

13/03/2012 08:30:45 TabletDriver[99] Finish launching /Library/Application Support/Tablet/PenTabletDriver.app/Contents/Resources/ConsumerTouchDriver.app

13/03/2012 08:30:45 com.wacom.pentablet[99] TabletDriver[99]: Finish launching /Library/Application Support/Tablet/PenTabletDriver.app/Contents/Resources/ConsumerTouchDriver.app

13/03/2012 08:30:45 SecurityAgent[105] Showing Login Window

13/03/2012 08:30:45 TabletDriver[99] Finish launching /Library/Application Support/Tablet/PenTabletDriver.app/Contents/Resources/TabletDriver.app

13/03/2012 08:30:45 com.wacom.pentablet[99] TabletDriver[99]: Finish launching /Library/Application Support/Tablet/PenTabletDriver.app/Contents/Resources/TabletDriver.app

13/03/2012 08:30:45 com.apple.DirectoryServices[15] DNS update failed!

13/03/2012 08:30:47 com.apple.DirectoryServices[15] Enter machine password: 

13/03/2012 08:30:48 com.apple.DirectoryServices[15] DNS update failed!

13/03/2012 08:30:55 root[125] sntp options: a=2 v=1 e=0.100 E=5.000 P=2147483647.000

13/03/2012 08:30:55 root[125]    d=15 c=5 x=0 op=1 l=/var/run/sntp.pid f= time.euro.apple.com

13/03/2012 08:30:55 root[125] sntp: not enough valid responses received in time

13/03/2012 09:46:27 /System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer[106] Authentication: SUCCEEDED :: User Name: cove :: Viewer Address: 172.25.3.128 :: Type: DH

13/03/2012 09:46:42 SecurityAgent[105] User info context values set for _mac_bind

13/03/2012 09:46:43 authorizationhost[104] k5_store_ticket_in_cache(): got -1765328243 (Matching credential not found) on /SourceCache/SecurityAgent/SecurityAgent-39574/plugins/krb5/krb5_operations.c:115

13/03/2012 09:46:43 edu.mit.Kerberos.CCacheServer[148] launchctl start error: No such process

13/03/2012 09:46:44 SecurityAgent[105] Login Window Showing Progress

13/03/2012 09:46:49 gssd-agent[153] Could not canonicalize our host name in kerberos_init

13/03/2012 09:46:55 mcxalr_agent[165] Listener client (pid: 165) entering listen mode for uid: 2069522553

13/03/2012 09:46:55 SecurityAgent[105] Login Window done

13/03/2012 09:46:55 loginwindow[31] Login Window - Returned from Security Agent

13/03/2012 09:46:55 com.apple.loginwindow[31] LoginHook: Executing /etc/hooks/LIclean.hook...

13/03/2012 09:46:55 root[173] LoginHook: Starting for _mac_bind

13/03/2012 09:46:56 kernel mcxalr{0} 32-bit  Build date: Feb  3 2010 19:02:48

13/03/2012 09:46:56 kernel mcxalr{1} Started

13/03/2012 09:46:56 kernel mcxalr{2} Management ENABLED for uid: 2069522553

13/03/2012 09:46:56 kernel calling mpo_policy_init for mcxalr

13/03/2012 09:46:56 kernel Security policy loaded: MCX App Launch (mcxalr)

13/03/2012 09:46:56 kernel mcxalr{3} Auth provider registered.  connection: 1  uid: 2069522553  version: 1

13/03/2012 09:46:56 com.apple.loginwindow[31] ls: /Network/Servers/faraday.students.somewhere.ac.uk/FaradayStudents/_mac_bind/Library/Caches: No such file or directory

13/03/2012 09:46:56 com.apple.loginwindow[31] usage: chmod [-fhv] [-R [-H | -L | -P]] [-a | +a | =a  [i][# [ n]]] mode|entry file ...

13/03/2012 09:46:56 com.apple.loginwindow[31] chmod [-fhv] [-R [-H | -L | -P]] [-E | -C | -N | -i | -I] file ...

13/03/2012 09:46:56 com.apple.loginwindow[31] ls: /Network/Servers/faraday.students.somewhere.ac.uk/FaradayStudents/_mac_bind/Library/Fonts: No such file or directory

13/03/2012 09:46:56 com.apple.loginwindow[31] usage: chmod [-fhv] [-R [-H | -L | -P]] [-a | +a | =a  [i][# [ n]]] mode|entry file ...

13/03/2012 09:46:56 com.apple.loginwindow[31] chmod [-fhv] [-R [-H | -L | -P]] [-E | -C | -N | -i | -I] file ...

13/03/2012 09:46:56 com.apple.loginwindow[31] ls: /Network/Servers/faraday.students.somewhere.ac.uk/FaradayStudents/_mac_bind/Library/Application Support/SMART Technologies Inc/Gallery: No such file or directory

13/03/2012 09:46:56 com.apple.loginwindow[31] usage: chmod [-fhv] [-R [-H | -L | -P]] [-a | +a | =a  [i][# [ n]]] mode|entry file ...

13/03/2012 09:46:56 com.apple.loginwindow[31] chmod [-fhv] [-R [-H | -L | -P]] [-E | -C | -N | -i | -I] file ...

13/03/2012 09:46:56 com.apple.loginwindow[31] cp: /Users/cove/Library/Application Support/Microsoft/Office: No such file or directory

13/03/2012 09:46:57 com.apple.loginwindow[31] mkdir: /Network/Servers/faraday.students.somewhere.ac.uk/FaradayStudents/_mac_bind/Movies/iMovie Events: File exists

13/03/2012 09:46:57 com.apple.loginwindow[31] mkdir: /Network/Servers/faraday.students.somewhere.ac.uk/FaradayStudents/_mac_bind/Movies/iMovie Projects: File exists

13/03/2012 09:46:57 com.apple.loginwindow[31] mkdir: /Network/Servers/faraday.students.somewhere.ac.uk/FaradayStudents/_mac_bind/Library/Application Support/Microsoft: File exists

13/03/2012 09:46:57 com.apple.loginwindow[31] ln: /Network/Servers/faraday.students.somewhere.ac.uk/FaradayStudents/_mac_bind/Library/Application Support/SMART Technologies Inc/Gallery

13/03/2012 09:46:57 com.apple.loginwindow[31] : No such file or directory

13/03/2012 09:46:57 root[242] - LoginHook:  Finished for _mac_bind

13/03/2012 09:46:57 loginwindow[31] USER_PROCESS: 31 console

13/03/2012 09:46:57 com.apple.UserEventAgent-LoginWindow[95] ALF error: cannot find useragent 1102

13/03/2012 09:46:57 com.apple.UserEventAgent-LoginWindow[95] plugin.UserEventAgentFactory: called with typeID=FC86416D-6164-2070-726F-70735C216EC0

13/03/2012 09:46:57 com.apple.launchd[1] ([0x0-0x5005].com.wacom.Consumer_TouchDriver[112]) Exited with exit code: 255

13/03/2012 09:46:57 com.apple.launchd.peruser.2069522553[146] (com.apple.ReportCrash) Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self

13/03/2012 09:46:57 com.apple.launchd[1] (com.wacom.pentablet[99]) Exited with exit code: 255

13/03/2012 09:46:59 mds[29] (Normal) DiskStore: Rebuilding index for /Network/Servers/faraday.students.somewhere.ac.uk/FaradayStudents/_mac_bind

13/03/2012 09:47:00 mds[29] (Normal) DiskStore: Creating index for /Network/Servers/faraday.students.somewhere.ac.uk/FaradayStudents/_mac_bind

13/03/2012 09:47:04 com.apple.launchd.peruser.2069522553[146] (com.apple.Kerberos.renew.plist[261]) Exited with exit code: 1

13/03/2012 09:47:05 ServerScanner[257] Not scanning because node /LDAPv3/xserve.somewhere.ac.uk is in searchPath

13/03/2012 09:47:07 MacClient[272] Starting UniFLOWMacClient

13/03/2012 09:47:08 Adobe Acrobat Updater Helper[267] Adobe Acrobat Updater encountered errorCode 1504

13/03/2012 09:47:09 MacClient[272] ID: 2 Request url 'http://gutenberg.students.somewhere.ac.uk/pwclient/logon/logonmacuser.asp?MachineName=_mac_bind&ClientType=1' with timeout 90.000000

13/03/2012 09:47:10 MacClient[272] ID: 2 Request url 'http://gutenberg.students.somewhere.ac.uk/pwclient/isapi/momntfy.dll?RunEventLoop?Handle=250' with timeout 90.000000

The only differences between these two machines are the fact that they are on different VLANs. The mac with the problem is on a special MAC VLAN, and the other is not.

Coincidentaly, I've only seen the problem on Mac's on this specific VLAN? Might be a coincidence as half of them are on the VLAN, soon to be all.

I shall update this. If anybody has any ideas please reply.




Update:


So, still no luck but lots more logs. Not sure if I'm going to post them all as it seems like a lot of data. Anyway, I ran out of time and had to re-image. It's working now. I shall update this when I find another machine with the same issues.