GoToMyPC - Access Your PC from Anywhere
Control a PC from a Mac over the Internet

MacWindows News Archives

News from July 2005 through December 2005






Most recent news first.

December 2005

Dec. 28

PC-Mac-Net FileShare adds remote media control. December 28, 2005 -- Lava Software has released PC-Mac-Net FileShare v5.4 (free upgrade) a new version of its cross-platform file sharing software for Mac OS X, Windows and Linux. PC-Mac-Net FileShare can also play movies and music over local networks and the Internet.

This new version includes remote media player capabilities and searching of remote files and folders. It also includes the open-source VLC player which supports a variety of media formats.

Pricing starts at US $15. A free Lite Edition has file size limits of 10 MB download and 2 MB upload file size limits, as well as other limits.

QuickSynergy for keyboard sharing over a network. December 28, 2005 -- QuickSynergy is a free application for Mac OS X and Linux that allows multiple computers to share a keyboard and mouse without a KVM box. It's a graphical front end that uses Synergy2 to share a keyboard and mouse between Windows, Mac, and Linux computers over an IP network.

Readers says Cisco 4.8 client doesn't fix DNS issue. December 28, 2005 -- Duncan Crawford says that the Cisco VPN Client 4.8 update does not fix the DNS problem with Tiger, as reported last week:

I see no improvement from the 4.8 client. Home machine is a new dual-core 2.3 GHz G5, Mac OS X 10.4.3, no Airport/Bluetooth, on a DSL connection serviced by a Westell 2200 modem that NATs and provides a 192.168.x address to the Mac. A Cisco 4.7.x client on this machine would connect to a Cisco 3000-series concentrator properly, but would not provide any DNS, regardless of 'local' or explicit server IP entries in the name server/domain fields of the Network control panel.

The 4.8 client exhibits exactly the same behavior-- I can authenticate to the concentrator, then get no visibility into the remote network. A previous machine, a G4 2002 Quicksilver with assorted mods and CPU upgrade, same OS version and network connection, worked just fine with the 4.6.x and 4.7.x clients. Can't test it with the 4.8 client as the logic board failed (hence new machine).

PGP Desktop 9.0.4 Ships. December 28, 2005 -- PGP Corporation has released PGP Desktop 9.0.4, an update to the encryption software for Mac OS X. The new version includes a fix for SSL connections that were creating multiple messaging services with changes to account settings.

Advice Mac Active Directory binding problems. December 28, 2005 -- Nick Vrtis describes a problem with Active Directory binding and how he got around the issue:

I ran across your nice list of Active Directory/10.3.3/Bind problems. I was having something similar. I had Macs in remote offices that would work fine. People could authenticate with Active Directory and do their work fine. Then the clocks would drift far enough apart that Kerberos would complain and we would have to fix the clock and hope that get things back working. Sometimes it would. Sometimes we still couldn't get them logged in. What we needed to do was Unbind from Active Directory, then Bind again.

This would work fine with the machines in the local office. But all the ones in the remote office would hang during Step 5 of the bind process. If we unplugged the machines, carried them to the local office, plugged them in, did the bind at the local office, unplug and carry them back to the remote office. Things were fine and everybody was happy (except yours truly who was the guy who did the carting back and forth).

I must have Googled for a couple of days trying to find out what was going on. Tried all the suggestions... Looked at firewall logs (the remote Macs were connected through a VPN/firewall), even installed a firewall in our local office with just about everything turned off. It still worked.

To make a long story short, I finally looked at the complete network trace and noticed that the VPN router was returning an ICMP "The datagram is too big. Packet fragmentation is required but the DF bit in the IP header is set."

Both the router and the Mac had the MTU at 1500. and for the stuff that was headed out over the non-VPN path, that worked fine... but the VPN path could not handle the full 1500 byes (somewhere around 143x it dies). So the router pitched the packet and told the Mac. Unfortunately, the Mac ignored it and just kept trying to resend the packet and waiting for a response. The Active Directory plugin would look like it was hung and about the only thing you could do with it was Force Quit.

I manually configured the Ethernet port to an MTU of 1400, and both the Mac and the VPN were happy campers... FYI.. the Sonic firewall/router/VPN also had a "Ignore Do not fragment" setting that also seemed to fix the problem (not sure what else is going to fall out from that yet).

This might help others figure out why it works "sometimes" or "some places" and not others. Or even why it might depend on the computer name (which I assume would contribute to longer packets).

Dec. 20

Kerio MailServer update supports Entourage SP2 features. December 20, 2005 -- Kerio Technologies released Kerio MailServer 6.1.2 (US $499 and up), an update to the email/groupware server for Windows 2000/XP/2003, Mac OS X, and Linux servers, supporting Entourage and Outlook clients. Kerio refers to MailServer as an alternative to Microsoft Exchange.

The new version adds support for the added collaboration capabilities of Microsoft's Entourage 2004 Service Pack 2 (SP2), including support for multiple calendars, support of Global Address List (GAL), and folder delegation.

Kerio Technologies says of the updated server "Now Entourage users can view and share calendars in their workgroup without having to open a second application like iCal or our WebMail client."

Cisco VPN 3000 client 4.8 fixes DNS issue. December 20, 2005 -- Micah Cox reports that Cisco has fixed the DNS issues of the Cisco VPN Client 4.7 and Tiger:

On your site there is a post concerning name resolution with Cisco's VPN client version 4.7. The problem is fixed in Cisco's client version 4.8 released December 9, 2005. I have tested it and it fixes the problem.

If you can verify or refute this fix

Meanwhile, Adam Grant verified a suggested workaround we reported last month that adds an explicit DNS server and search domain. Grant said:

I added "local" to the "search domains" field in networking and now my DNS works on Cisco VPN ver 7.0.

VPC vs GuestPC vs iEmulator. December 20, 2005 -- Al Fasoldt has a short report comparing the performance three PC emulators for Mac OS X: Virtual PC, GuestPC, and iEmulator. He concludes that Virtual PC was the fastest, followed by GuestPC, with iEmulator coming in last. Fasoldt also makes some other comparisons of the emulators.

Tiger Server 10.4: Group members can't save to a CIFS share. December 20, 2005 -- Apple Support has published an article called Mac OS X Server 10.4: Group members can't save to a CIFS share.

When using certain applications, group members cannot save to a CIFS share; they get a permissions error.

This happens on volumes that don't have ACLs enabled. The solution is to either enable ACLs or to disable the ACLs in /etc/smb.conf. Follow the steps below to disable the ACL support for the shares in question.

The article describes how to do this.

MS will stop offering IE at Mactopia. December 20, 2005 -- Microsoft announced that as of January 31, 2006, it will no longer offer Internet Explorer for Mac at its Mactopia web site. (Microsoft currently offers Internet Explorer 5.2.3 for Mac OS X and Internet Explorer 5.1.7 for Mac OS 8.1 to 9.x.) Microsoft also said that it will end support for IE for Mac on December 31, 2005.

MS release new Longhorn Server beta. December 20, 2005 -- Yesterday, Microsoft released new beta code for Longhorn Server, the eventual successor to Windows 2003 Server. (See this eWeek report.) The company also released updated beta code for Windows Vista, the next version of the Windows client, scheduled for shipping a year from now.

Dec. 16

Virtual PC network setup & troubleshooting. December 16, 2005 -- Microsoft has an article called Virtual PC Internet connection setup and troubleshooting. It provides a detailed account of setting up networking in Virtual PC as well as troubleshooting and testing.

VPC 7 disk corruption, crashing in Tiger 10.4.3. December 16, 2005 -- Erik Scheirer reports a strange problem with Virtual PC 7.0.2 and Mac OS X 10.4.3. The strange bit are the conditions under which the problems occur:

I am having all sorts of problems with 'disk' corruption, and often it crashes my Mac as well. Seems to happen any time that I 'empty the recycling' or heavy-duty file transfer.

I have found the pattern that crashes my Power Mac dual G5:

  • VPC is running and one of the 'machines' must be Windows. This doesn't happen when running freeBSD, for example.
  • Another mac on the local net is sleeping and is sharing its printer.
  • VPC is in foreground on non-printer Power Mac G5. The printer Mac wakes, and bang! the PowerPC forces restart. This, even though I have removed all shared printer entries from the Power Mac G5.

Happens every time. Only when running VPC with Windows.

If you've seen this problem

More on the Tiger AD/SMB folder-copy problem. December 16, 2005 -- Dan Ball is experience the previously reported SMB folder copy problem with Mac OS X 10.4.3 and Windows server and has more details on the problem:

Logging in as an Active Directory user and saving to an SMB Windows share on Windows Server 2003 has a bug.

When trying to copy a folder with files in it, the folder is created on the file server, but it is empty.

When trying to copy multiple files, only the first one is copied and you get the permission denied error again.

You get a permission denied error: "The operation cannot be completed because you do not have sufficient privileges for some of the items."

The issue isn't a permissions issue, well with Security Permissions anyway. The problem is the Share Level Permissions.

We have our shares setup with the groups that should have access to the shares, but with only Change and Read access, which should be enough access. Works fine with Windows and 10.3 clients.

With 10.4 you have to give the group or everyone Full Control, then everything works as expected. So I think its a bug in Mac OS X10.4.

But that seems to be the problem is the share level permissions on the Windows share.

If you've seen this problem or know how to fix it

Logging into remote servers. December 16, 2005 -- Big Nerd Ranch has an article on configuring Windows and Mac remote servers and having Mac and Windows clients log into them.

More suggestions for Tiger Server "100's of processes" problem. December 16, 2005 -- Galen Sprague offered some more suggestions for the problem of Tiger Server spawning hundreds of processes, which slows server performance:

Do you have a maximum client connection limit set on your Windows Services? I have had problems with this and had to set it to unlimited. Also could you have PC clients running an app that is calling the server or running an App off of the server?

More on IE spinning beach balls with December 16, 2005 -- Dozens of reader have confirmed last week's report of Internet Explorer in Tiger being frozen with a spinning beach ball when trying to access

If you have set as your home page, the only way to use IE is to set the home page to something else. When you first open IE, immediately close the window. Go to Preferences and change the home page to anything other then, or set it to no home page.

Ryan Steckert has another way to do it:

An easier solution is to disconnect the network cable, open up Internet Explorer, change the default home page, and then reconnect the network cable.

Teun de Boer see the problem with Mac OS X 10.4.3, and with another web site:

Same here, I got a beach ball when starting IE after updating to 10.4.3. But I'm not so sure the problem lies with In my situation I had another site set as home page ( which gave the same problem. After reinstalling IE the problem persisted. When I disconnect AirPort and start IE, there's no problem, only a message that the server can't be found. In the end, I de-selected "open this home page in every new window" in Preferences, which kind of solved the problem because IE now starts as usual.

Dec. 12

Workaround for Tiger Sever 100's of processes. December 12, 2005 -- Douglas DiBella offers a workaround for the problem of Tiger Server spawning hundreds of processes, slowing server performance:

I've seen this problem and it really sucks! I can write a ton about the problem and would be glad to share the details. I noticed two problems.

1. SMBD log would grow and fill the entire system volume overnight and crash the system

2. SMBD spawning... to eventually halt the system.

I narrowed it down to unnecessary login attempts, my solution was to use firewall service to block samba/cifs access from external sources. This has resolved the problem, but I still don't consider it solved.

Better workaround for Cisco VPN 4.7 DNS problems. December 12, 2005 -- Stephen Gilardi has a new-and-improved workaround for the problem with DNS issues and the Cisco VPN Client 4.7. He says it is better than the previous workaround he shared with us:

I have some more info on the VPN 4.7 DNS problem and a method of debugging it.

The domain name resolver's operation is based on entries in the configuration file "/etc/resolv.conf". It's useful to view the contents of that file both before and after connecting to the VPN.

The contents of that file are normally controlled by Apple's "Network" System Preference (under the TCP/IP tab for the interface in question). If "Configure IPv4: Using DHCP" is selected there, the contents of the configuration file are a combination of static entries in Network System Preference UI and information gathered by DHCP.

The configuration file is changed by the VPN software when it makes a connection and restored when it disconnects. Specifically, the VPN replaces the "DNS Servers" with those appropriate for the remote network and adds the "Search Domains" for the remote network to the static entries in the System Preference.

There appears to be a bug in the addition of Search Domains in Cisco VPN 4.7: If the "Search Domains" entry in the Network System Preference is empty, there will be no search domains listed in "/etc/resolv.conf" after connecting to the VPN. Only fully qualified domain names will be resolved. If "Search Domains" entry is not empty, the VPN client correctly changes the configuration file to add the search domains appropriate for the remote network.

The workaround is to make sure the "Search Domains" entry is not blank. I believe that entering "local" as a "Search Domain" is harmless and correct both for the VPN and non-VPN case. In my case, after adding "local" to "Search Domains", the VPN client software correctly adds the search domain for the remote network to /etc/resolv.conf when it connects and I am able to work with simple machine names on the remote network as I have with prior versions of the VPN client.

This workaround is an improvement on the one I gave previously because it doesn't include any static nameservers or search domains for the remote network in the local network configuration. I had noticed delays in resolving names when using the previous workaround because the name resolver was trying (and failing) to reach the remote network's nameservers before trying the correct one that was now third on the list. The combination of two timeouts led to noticeable delays in resolving.

RDC file transfer problem. December 12, 2005 -- John Critzos is having a problem moving files to the Mac using Remote Desktop Client:

When using my Mac with Microsoft's Remote Desktop Client, I can easily control my office computer remotely. I am also able to transfer files from the Mac to the windows office computer. I cannot, however, transfer from the office to my Mac. I get an error message that says "the parameter is incorrect" and "could not copy."

If you've seen this problem or know how to fix it

Price discount on e2Sync for Entourage syncing. December 12, 2005 -- e2Sync, Inc. has lowered the price of e2Sync until December 26th. e2sync enables Entourage to sync with iSync-compatible devices. The sale price is now US$27.30, which is 30 precent lower than the regular $39. This discount can only be obtained using the discount code TASIB05.

Dec. 8

TIP: Fixing Entourage, Exchange and Shared Calendars. December 8, 2005 -- Jason Meyer reports a problem with Entourage and the Exchange LockDown tool. He also provided a fix:

Not sure if you have posted about this yet but for those out there (or their exchange admins) that have run the IIS LockDown tool on their Exchange/OWA server will probably discover that they can't access other users shared folders even though they followed the directions here to the letter.

The problem is that urlscan, the meat of the LockDown tool, has a list of allowed verbs. If you look in the urlscan logs you will find that BPROPFIND is being used by the clients trying to connect. Just add the verb to the allowed list and then restart the w3svc on your server. Obviously, if you aren't the admin of the server you have to convince your admins to make the changes for you.

IE problem with Tiger 10.4.3. December 8, 2005 -- A couple of readers reported that Internet Explorer has problems with the Mac OS X 10.4.3 update. Thomas Low:

After the update was installed Internet Explorer for Mac will not open. Continuing beach ball.

Carrie Sherman also saw the problem, though in a specific circumstance, and tracked down the cause:

I have tried reinstalling. The home page was set to I did get it working. Here's what I did. I have debug activated on Safari so I went to the site and then went to the debug menu and asked it to open in Explorer, it opened in Explorer just fine, then I reset the home page to be, now it opens just fine. For some reason it had a problem with, though opens fine in Safari.

We haven't seen this problem, but if you have

Update on Safari's problem with Yahoo. December 8, 2005 --A reader named Siglo responded to our report earlier this week of Safari crashing when the user tries to access Yahoo email. Siglo said:

Perhaps with 10.2.8 and older safari versions, but not with 10.4.3 and newer safari versions. Yahoo mail works fine. I wonder if the 10.2.8 users could try turning off Javascript and accessing the 'old' yahoo mail that way.

Sheepshaver PPC emulator for Windows updated. December 8, 2005 -- Gwenolé Beauchesne has released a new version of SheepShaver, a PowerPC Open Source PowerPC Mac OS run-time environment for x86 PCs and also Mac hardware. (When running in Mac OS X, Sheepshaver functions similarly to Classic.) Sheepshaver runs Mac OS 7.5.2 through Mac OS 9.0.4 on these systems.

Another unhappy iEmulator/Tiger user. December 8, 2005 -- Dick Sampson echoes our report earlier this week about the iEmulator, a x86 emulator for Mac OS X:

I have a G5 1.28 single processor with 10.4.3 installed and iEmulator is exactly that, unusable.

Dec. 6

TIP: MS page on Entourage maintenance. December 6, 2005 -- A Microsoft web page called Configuring Entourage X provides procedures for maintaining and fixing Entourage problems. For instance, it describes how to rebuild the database to fix slow performance (spinning beach balls) and other problems. There's also information several topics related to setting up Entourage, with explanation of protocols and technical terms.

More on Entourage delegates and deleting email. December 6, 2005 -- Steven Deutsch is having the previously reported problem with Entourage 11.2.1 problem with deleting email in delegate mailboxes:

I have the same issue of being unable to delete email in a delegate box. That said, sometimes I can delete email in the delegate box, sometimes I can't. And I cannot find anything consistent as to when I can and when I can't. All I know is that when I can, I try to take advantage of the window and clear out as much as I can.

If you know of a fix

Reader verifies fix for firewall, AD binding issue. December 6, 2005 -- Steve Kimberley verified a fix for the Firewall problem with Active Directory, where OS X gives an "unknown error" at step five of the binding process:

I found the same problems as others: OS-X 10.4 client would not connect to a Windows 2003 server which had the firewall up, although it connected OK without the firewall.

Cut to the chase: I found the suggested fix by Scott Dungan (November 28, 2005), tried it and it worked! I now have a firewalled 2003 Server allowing kpasswd through on UDP 464 and no more connection hangups. Thanks, Scott!

Reader reports on latest iEmulator performance. December 6, 2005 -- Kiran Madabhushi is having problems with the recently released iEmulator 1.7.8, the latest version of the x86 emulator for Mac OS X:

I used iEmulator 1.7.8 on a PowerBook 15" 1.5 GHz 1GB RAM. Installed Windows 2000 on it and its almost unusable. This was with Panther.

If you've tried this version of iEmulator how performance is for you.

For reports on previous versions of iEmulator, see our Alternative PC Emulator Reports page.

More on 100s of SMBD processes on OS X Server. December 6, 2005 -- Steve Fair reports having the previously reported problem of Tiger Server spawning hundreds of processes when only a few Windows clients are connected.

We are also having the problem of hundreds of SMBD processes bringing our print server to a screeching halt. The print server is a Tiger 10.4.3 client fully patched and updated. It has been running great for months until about a week ago when I noticed the complete unresponsiveness of the machine. I tracked down the spawning of SMBD through Activity Monitor. As soon as the machine was rebooted, the processes would take down the computer within 2 minutes.

Once Windows sharing was disabled, everything works fine. I have created another 10.4.3 client with Windows sharing enabled that currently works fine. No solution has been found, yet.

If you have a solution

Safari incompatible with Yahoo email. December 6, 2005 -- User forums around the web are reporting an incompatibility with Safari and Yahoo Mail that doesn't seem to affect other browsers.

Clayton Mansfield believes that Safari's handling of JavaScript is involved:

For the past two days Safari crashed every time I tried opening Yahoo Mail. Thanks to Google I found out I wasn't the only one. (See this thread.) Seems Yahoo made a change in its JavaScript that freaks out the browser. I had to disable Java to get into email tonight.

Dec. 2

Tip: preventing dot-underscore files. December 2, 2005 -- Earlier this week, we posted some tips on deleting the dot-underscore files that are created on the server when Macs copy files to SMB servers. A couple of readers sent in suggestions on how to prevent Mac OS X from creating the files in the first place.

Readers Arve Knudsen and Ben Roche both told us about a System Preferences plugin for Panther and Tiger called BlueHarvest that prevents Mac OS X from creating resource fork (._) files in specific locations. It can also delete existing dot-underscore files.

Developer Ross Tulloch asks for a voluntary donation for using BlueHarvest.

Tip: moving Entourage data to PC & vice versa. December 2, 2005 -- A web site called the Entourage Help Page has directions on questions that readers frequently ask us. One page describes how to copy messages or contacts from Entourage to Outlook for Windows.

Another page at this site describes several methods of moving mail from Outlook for Windows to Entourage.

A third page on cross-platform Entourage issues describes these tasks:

For our previously reported tips and reader reports, see our Entourage and Exchange page.

Guest PC 1.7 emulator adds shared networking. December 2, 2005 -- Lismore Software Systems yesterday released Guest PC 1.7 (US$ 70, free update) a new version of the x86 emulator for Mac OS X. New features include:

For more information on Guest PC and other alternatives to Virtual PC, see our Alternative PC Emulators page.

CDFinder update. December 2, 2005 -- West-Forest-Systems has released CDFinder 4.5.1, (US $30), a disk cataloging tool for Mac OS X. CDFinder can work together with CDWinder for Windows as a cross-platform, network solution to catalog disks and CDs and DVDs on a Mac and a PC. CDFinder can also catalog the contents of archive files, including, StuffIt, Compact Pro, ZIP, TAR, .rar, and Apple Installer files.

Among the improvements in version 4.5.1:

Tiger-compatible Palm Desktop. December 2, 2005 -- Palm Desktop was incompatible with Mac OS 10.4 until September, when Palm released Palm Desktop 4.2.1 Rev D.

November 2005

Nov. 28

Tip: deleting d0t-underscore files. November 28, 2005 -- We often get email asking how to delete the dot-underscore files that are created on the server when Macs copy files to SMB servers.

These are the resource forks of Mac files. For most files, they only store type, creator and Finder information, among other data. Windows can't see the files because of the dot at the begining.

There are several Mac utilities that can delete all of these files at once. WinFSCleanser a free utility for Mac OS X that can delete these files.

The Macs can delete the files from the Unix command line in Terminal. There's a page at Mac OS X Hints that describes scripts for doing this.

Fix for AD binding problem (unknown error) with firewall . November 28, 2005 -- Scott Dungan believes he has a fix for the Mac OS X problem of binding to Active Directory with a firewall, which causes a problem at Step 5 of the binding process. His fix:

I have seen this behavior as well and I believe I have a fix.

Microsoft has a Knowledge Base article that discusses exactly which ports to open on a firewall to allow for, among other things, clients to join and authenticate with the domain. After setting up the firewall and the needed ports, all our Windows clients joined to the domain and authenticate fine. Any Mac OS X 10.4 client (we have not tried any down level clients like 10.3 yet) will begin to bind (join) to the domain as the previous reports explain, but it will crash on Step 5 of 5.

After setting up a test environment and a packet sniffer, I noticed that the OS X 10.4 client was requesting kpasswd on UDP port 464. This port was not specified in the Microsoft KB as needing to be open. I opened the port on the firewall and it worked! The 10.4 client bound to the domain and continued to authenticate just fine.

If you've tried this

Alvin Bridges describes the problem:

We have been battling this unknown error in binding our Tiger workstations. It has really prominent since the implementation of 10.4.3.

During step 5 of the binding process in the directory access utility you receive the error "unknown error". The machine is not bound at to AD at this point. But if you go through the process one more time right after that. The process goes twice as fast and succeeds. But it is hit or miss if the machine is actually bound completely or not.

Workaround, reports of Cisco VPN 4.7 DNS problems. November 28, 2005 -- Several readers verified having the problem we reported last week with DNS issues and the Cisco VPN Client 4.7.

Stephen Gilardi has a workaround:

I'm seeing the same issue. As a workaround, I added an explicit DNS server and search domain (for my work network) to my "System Preferences/Network/AirPort/TCP/IP" configuration. The previous versions of the VPN client that I've used haven't required this workaround.

If you've tried this

A reader who wishes to remain anonymous also describes the issue:

I too have seen DNS issues with 4.7 under Tiger, but it is not consistent. Some times I get a connection and local DNS services for Safari seem to work.

Remote DNS usually needs fully qualified names but this is not consistent either.

Can't really explain what conditions cause the failure but I can totally understand how beta testing could miss this because I've had some connections to the same firewall that works like a charm.

Michael Murphy has seen it:

Yep, I see this as well. I am running 10.4.3 with Cisco VPN client 4.7.00 Build 0510. I have tried changing the settings for the DNS server in networking but it does not seem to help.

Fix for VPC 6.1/Tiger 10.4.3 problem. November 28 , 2005 -- Mardi Kennedy reports that the old Virtual PC stopped working when the Mac was updated to Tiger 10.4.3. Kennedy fixed the problem by installing the VPC 6.1.1 updater, which is still available from Microsoft.

Virtual PC 6.1 has been working well for me from OS X 10.3.x to 10.4.2. I installed 10.4.3 and lost all useful VPC/ XP functionality.

Got to the XP desktop and clicked my shortcut to Windows Explorer. Nothing. Went to the Start menu to access My Computer. Nothing. In other words, I have an initial display but no actual functionality. Can't get into other Control Panel items etc.

I solved the problem by installing the VPC 6.1.1 updater.

For our archive of VPC 6 problems and fixes, see our Virtual PC 6 Reports page.

More on SMB/AD Finder file copy problem . November 28, 2005 -- James Robertson in Australia reports seeing the Finder copy problem with SMB files servers in Active Directory:

You wanted to know if others had seen this - Yes, we have. Assorted Linux servers running Samba 3. Same symptoms as the original poster, copies using terminal work fine, etc.

One of our clients is actually a Mac shop, and they have not been able to give any help either.

This occurs with OS X 10.3 and 10.4, but does not fail all the time. It does seem to be dependant on the files/filenames though.

If you've seen this

Theories on Windows users locked out of Tiger Server. November 28, 2005 -- Bob Sneidar has some theories about the problem of Windows clients locked out of Tiger Server. (We have a suggestion posted on our Mac OS X Server page). Sneidar also reports on the response from Apple:

Concerning the problem of Windows Users getting locked out of SMB, I too am experiencing this. I believe it's a bug in the server. I do not have to reconfigure anything. I just stop and start the server and all is well.

It should be noted that when browsing the network neighborhood the server does not show up for Windows Users until after I restart the Windows service. Once I do that the server is browsable again. I have to think the Windows stack is crashing somehow.

I contacted Apple tech about this problem. They are aware there is a problem but they have so little feedback on the issue that they have nothing to work from as yet. I would suggest encouraging those in the discussion to contact Apple especially if they can reproduce the problem, or if the problem occurs frequently.

One of the things that seems to be a part of the problem is that numerous SMBD processes are spawned and stranded, that is there are no logged in SMB users to account for them. One theory is that when users disconnect the processes are not terminated, however when I try to reproduce this the processes terminate normally.

Another theory is that a Windows virus or worm that attacks Windows servers may be using aggressive brute force tactics to gain access to the server from a PC on the same LAN as the server. The repeated attempts to log in to the server may be overwhelming it. What would be especially useful is to know if the problem goes away for anyone right after patching their PC's or running a virus sweep that detects a virus or worm infection.

Basilisk II JIT, 680x0 emulator for Windows, updated. November 28 , 2005 -- Gwenolé Beauchesne has posted an updated version of Basilisk II JIT, a 680x0 (pre-PowerPC) Mac emulator for Windows. Basilisk JIT is a performance-enhanced version of Basilisk II is an open Source 680x0 by Christian Bauer.

Maintenance update for Slide Show. November 28 , 2005 -- Apimac has released version 7.0.2 of Slide Show for Mac and Windows, a cross-platform slide show create for Mac OS X and Windows. The update fixes a couple of bugs and improves presentations on in Windows.

Nov. 21

iEmulator update adds audio playback. November 21, 2005 -- Today, released iEmulator 1.7.8 (US $24, free update), an update to the Windows-PC emulator for Mac OS X 10.3 and 10.4.

The update adds the ability to play audio from within Windows on the emulated PC. The update also improves iEmulator's ability to import PC profiles from Virtual PC 7, and improves the way the emulator handles CD-ROMs.

If you've tried this new version,

For more on iEmulator and other altenratives to Virtual PC, see our VPC Alternatives page.

A fix for binding and home folders. November 21, 2005 -- James Doty has a fix for the problem reported with Active Directory binding and home folders in Tiger 10.4.3:

I wrote last week about home folder issues and logging Mac Tiger clients into a Windows Server 2003 Active Directory. I've come upon a fix that works for us.

I did some research and discovered that our Tech Director had turned off NetBIOS on the server we use for home folders. We turned NetBIOS back on for the home folder server and on the Mac clients enabled UNC path from AD to derive network home location and set it to SMB.

So far I've logged on with a teacher account, a student account and an admin account and all were successful.

The Macs will not properly authenticate at logon to a server who's port 139 is not active.

To test this theory I created a dummy account and set it's home folder up on a server we have that did have port 139 active. This worked great and gave me the info I needed to bring to our Tech Director to get permission to turn NetBIOS over TCP/IP turned back on.

Cisco VPN Client 4.7 works better on Tiger . November 21, 2005 -- A couple of readers report that a new Cisco VPN Client 4.7 solves some problems with the previous version and Tiger.

Phil Truesdale said the newer version is better in a solution we reported last week:

I had to do the same thing under the Cisco 4.6 client. Cisco, however, has a newer 4.7 client that does not require restarting the VPN service to resuscitate the GUI.

Another reader reports success:

I am using cisco VPN client 4.7 on Mac OS X 10.4.2 without issue. I connect to a Cisco concentrator with Remote Desktop to my Windows XP box at work--no issues.

Another reader, however, has a problem with DNS, as reported in the next item.

DNS issue with Cisco VPN 4.7. November 21, 2005 -- A reader named Colomb is having trouble with DNS with the new Cisco VPN Client:

I'm having some DNS resolution issues using 10.4 and version 4.7 of the Cisco VPN client. Everything works fine when using the fully qualified server name, but as soon I try and use other names, I get a host not found error. I've read through a lot of the literature regarding this on your site and I've tried turning hardware checksum off and UDP checksums off, but it still doesn't work correctly.

If you've seen this

Entourage 11.2.1, new problem with delegation option. November 21, 2005 -- Aaron Kirkland reports this problem with the most recent Entourage update and delegation:

We are seeing the same problem here I have verified that on pre 11.2.1Entourage clients I can delete mail in Delegated mailboxes but not with thenew update. I am using the webmail client to delete items until I find a better solution.

Nov. 17

MassTransit updated for Tiger, Safari and Firefox for web-based file transfer. November 17, 2005 -- Group announced that its MassTransit file and print server software for Mac and Windows clients now supports the features of Safari, Firefox and Tiger. This enables Mac users to transfer files using Safari and Firefox. Mass Transit includes a web client plugin for these browsers. Previously, MassTransit supported only Internet Explorer for web-based file transfers. MassTransit is designed as a solution for enterprise businesses.

The Mass Transit servers run on Windows, Mac OS X, and Mac OS 9.

Helios "Unbreakable Server" includes Web-based file sharing. November 17, 2005 -- Helios Software has shipped the next generation of its cross-platform enterprise servers. It is now calling the product line Helios UB Unbreakable Server Solutions. The product line includes web-based file transfer, file sharing for Mac and Windows clients, and print and prepress servers. The software runs on Unix-based servers, including Mac OS X, Linux, Sun Solaris, HP-UX, IBM AIX, and others.

The Unbreakable Server Solutions line includes the following:

TIP: Using Cisco VPN Client for Mac 4.6.03 in Tiger. November 17, 2005 -- Clinton Fisher describes how he got around a problem with the Cisco VPN client in Tiger:

After installing the Cisco VPN client 4.6.03 and getting it to work twice, again it failed to start by clicking the GUI. I get the same messages about kernel module not loaded, similar to other reports.

I ran these two commands in Mac OS X 10.4.1:

sudo /System/Library/StartupItems/CiscoVPN/CiscoVPN restart

sudo /usr/local/bin/vpnclient autoinit

After that, I was able to click the VPN GUI in my Applications folder and connect successfully again.

If you've tried this

See our Tiger Reports page for previous report so Cisco problems with Tiger.

10.4.3 update fixed cascading ACL permissions problem. November 17, 2005 -- Michael O'Lear reports that the Tiger 10.4.3 update fixed a problem caused by the Tiger 10.4.2 update with access control lists (ACL) not cascading:

Back when 10.4.2 was released, I reported to your site that our XServe (acting as a member server attached to a Windows 2000 Active Directory Domain) was not cascading permissions from the ACLs on its SMB shares.

I am happy to report that on updating to 10.4.3, ACLs now work for our Windows users accessing the XServe's SMB shares. I am also happy to report that the network services no longer go unresponsive every 24 hours. The XServe has stayed up since Saturday. My hope has returned.

Active Directory tutorial describes single sign-on. November 17, 2005 -- Big Nerd Ranch, Inc. has posted a tutorial called Mac OS/Linux/Windows Single Sign-On. It describers how to use Active Directory to handle logins on Mac OS X, Windows, and Linux. There are three pages, each with directions and screenshots for each of the operating systems.

TIP: Use Panther Classic to run Outlook 2001 on Tiger. November 17, 2005 -- Manuel Hernandez from Spain recommends using the Panther's Classic to run Outlook 2001 in Tiger:

I had the same reported problem when I attempt run Outlook 2001 over iMacs G5 with Tiger.

My solution: Install again Tiger erasing the disk, and install the version of Classic from Panther, Mac OS X 10.3.x.

It was not necessary to do with the last version of Tiger (10.4.2) is not necesary that.

If you've tried this

Duplicate Junk Mail Folder in Entourage. November 17, 2005 -- Michael Wilmar now has two Entourage junk mail folders; he'd like get rid of one of them:

I have picked up a duplicate Junk Mail folder in my folder list which is supposed to replicate my folders on our Exchange Server. It’s just there; it doesn’t synchronize with the Exchange Server; all junk mail goes to the other Junk Mail folder. So I would like to get rid of it without doing a complete rebuild of my database, which takes forever.

If you've seen this

Nov. 11

Fix for running Outlook 2001 on Panther/Tiger. November 11, 2005 -- Jeff Pollard passed along a solution for running Outlook 2001 (in Classic) on Mac OS X 10.3 and 10.4:

Someone named Tilmon Wooden posted what I have found to be THE fix for folks who haven't been able to run Outlook 2001 since Jaguar. Many of us have been struggling with trying to even log in once since upgrading. Error messages about "folders cannot be opened", duplicate login screens, and the inability to use the GAL have plagued those of us still clinging on to Outlook 2001. Like many other administrators, I've spent countless hours troubleshooting permissions and preference files, only to find that running Outlook 2001 from a disk image (or another partition) was the best fix. Until now. Here's the fix that Tilmon posted to the Microsoft Outlook newsgroup:

  1. Clear all of the Outlook/Exchange preferences from the System Folder. (You want to start from scratch)
  2. Launch "Outlook Settings" from Control Panels or inside of "Outlook Files"
  3. Set up the user account and check name.
  4. Copy the Exchange Preferences and Outlook Services file from the Outlook Files folder into the Preference folder of the System Folder
  5. Launch Outlook and you are done.

So far, this has worked for me on all five of the machines I've tried it on. It's simply amazing to finally have a solution to such a frustrating problem. My hat's off to Tilmon Wooden for figuring this one out.

Here's a link to the original post.

Insights into Tiger AD binding problems. November 11, 2005 -- James Doty has some insights into problems with Active Directory binding from Tiger:

I've been having issues with Tiger 10.4.3 and Active Directory on a Windows NAS File Server 2003 SP1. I'm able to bind the client computers to our Active Directory domain without issue. Here's where I run into trouble.

If I set up Active Directory on the Tiger client computers to use UNC path from AD to derive network home location and set it to SMB the Tiger users can not log onto the network. If I leave that box unchecked they can, but then have to select the Go menu and connect to the server from there to find their home folder.

Panther 10.3.9 ignores this error and will log the user in, but not give the AD home folder.

Also, on Tiger, if I select SMB in the Directory Access application and select the drop down I do not see our domain listed. But in Panther I do.

I still haven't solved this issue, but it may be what's causing other people here AD connectivity grief.

WebDrive gives Win drive letter access iDisk. November 11, 2005 -- South River Technologies has a product called WebDrive, a utility that allows Windows users to map their iDisk storage to a standard windows drive letter. Apple's Windows iDisk utility does not enable mapping of the iDisk volume.

With WebDrive, users can upload, download, edit, and even stream video from their iDisk account on to a Windows box.

Build a Google Earth overlay on a Mac. November 11, 2005 -- And a Software 4 Free article describes how Mac users can build an overlay for Google Earth, which is not yet available for Mac. The method uses a web application called CommunityWalk.

Nov. 9

Binding issue with AD. November 7, 2005 -- Chris Windham ran into Active Directory binding problems with Tiger:

We've seen the same problem where our G5 just quits allowing anyone to authenticate from AD. This originally surfaced in 10.3 after applying an 'Active Directory' enhancement update. After getting nowhere with Apple's support, I reinstalled 10.3 without updates and it worked again. After the release, we tested 10.4 and had no issues so we upgraded. After several months, it quit authenticating out of the blue again. The first time I resolved by setting it to be a standalone server and then going back to the domain member role. This did not work the second time. I had to unbind and re-bind to Active Directory before getting it back online again.

Apple doesn't mention it on their website and their 'Premium' support doesn't cover this. They consider it to be 3rd party integration and want $700 to fix. Wow! Microsoft will resolve all kinds of issues for $250. Look for a G5 Xserve on Ebay soon. I am not a fan.

VPC Quicken Medical Manager incompatible. November 7, 2005 -- Stuart Berwick reports that Quicken Medical Manager will not on Virtual PC 7:

Quicken has come out with a new program for tracking medical expenses and it works great on my Windows machines but I get nowhere in VPC 7.02 I keep trying it and it worked only once immediately after install. I keep my data on a thumb drive and plug into the machine I am using at the time. I have an iMac G5 2.0 ghz and 1 gig of RAM, 250 gig hard drive.

If you've tried running this program in VPC

Bug fix update for Missing Sync for Win Mobile. November 7, 2005 -- Mark/Space has released The Missing Sync for Windows Mobile 2.0.2, an upgrade to the Mac OS X utility that syncs Macs with Pocket PC and Smartphone devices. The 2.0.2 update is a free download and includes the several fixes:

Mark/Space noted that this update does not add compatibility with Windows Mobile 5.0, but the company will supply a free update in the future.

TIP: Fix for Slow Windows Logon to a OS X Server Acting as a PDC. November 7, 2005 -- Louis Gephardt found the cause and fix for the problem of slow authentication of Win clients to OS X Server:

I ran into this same issue, the issue was bad DNS resolution. Make sure you server has a DNS entry and that it will resolve the hostname and IP address BEFORE promoting your server to an Open Directory Master. If DNS is not working correctly, you will have ALL sorts of problems and will likely have to rebuild the LDAP. Once I got DNS running correctly and rebuilt the LDAP, the login time dropped to less than a second.

If you've tried this approach

AD home directories with ExtremeZ-IP. November 7, 2005 -- Dedrick Allen solved his Mac file sharing problems on Active Directory/Open Directory by using Group Logic's ExtremeZ-IP on the servers:

I have been reading about the SMB issues people have been having with OS X since SMB support was added in Jaguar.

We recently deployed 150 Mac's running Tiger and decided to use Open Directory+Active Directory integration with network home folders stored on our Windows domain controller. We knew Windows Services for Macintosh would not support network home directories because it does not support AFP 3.1 and we did not want to use SMB because of all the problems with data loss, file locking etc...

We even had issues with Windows Services for Macintosh and OS X clients on stand-alone file servers. Many times opening files from the server would lock up apps and other strange issues like files disappearing etc...

We finally broke down and purchased ExtremeZ-IP 4 and those problems went away for good. ExtremeZ-IP is a great for server based storage with Mac OS X and OS 9 clients.

NOTE: Group Logic has an article called Creating Active Directory Integrated Home Directories.

Work around (sort of) for Entourage 11.2.1, problem with delegation option. November 9, 2005 -- Jay Christianson a bit of a "temporary and flaky" workaround for the problem with Entourage 11.2.1 delegation:

We've seen this problem too. Currently, I only have one person and myself set up to use delegated mail accounts (we were the guinea pigs).

Anyway, by default, while the Exchange admins have us set for proper permissions (that work in Windows Outlook and old Mac Outlook for OS 9), we can not delete mail from these delegated accounts.

We have found, though, that if you log in to a Windows machine, and open the account from there, you can get properties of the mailbox and change yourself to owner, or whatever and then you can deleted files, etc.

BUT, we've found the effect is very temporary and flaky. The other person we have testing the delegated folder has to reset the permissions from the PC fairly often because they keep reverting to not letting him in. I, on the other hand, have been able to set the permissions once from Mac Outlook, and then once my permissions reverted, I can't get them to change to allow me to delete again. Oh, this applies to individual emails in there. I've noticed that it appears I can create and delete folders from within the mailbox at will.

Hotfix fixes Macs hanging while searching Win 2003 SP1 . November 7, 2005 -- Frederic Pognant verified that the Microsoft hotfix does indeed address the problem of Macs hang while searching Win 2003 SP1, reported on our Windows 2003 reports page:

I had the same case when I migrated file servers using Windows NT4.0SP6/MAc Server IP to Windows 2003 Server SP1 without any add-ons for now. Searching files from Mac resulted in crashes at any time. Contacted Microsoft: they sent a hot-fix which you can't download from their sites ( a beta patch created on October 06). Works fine!

Nov. 7

Tiger 10.4.3 fixes AD, LDAP problems. November 7, 2005 -- A pair of readers report that last week's Tiger 10.4.3 Update fixes two problems with Active Directory. Dedrick Allen has two:

Active Directory lockout with password change:

When an Active Directory user's account has been flagged by an admin to force the user to change their password at next login previously, the user could successfully change their AD password but it would leave the keychain password out of sync with the new AD password and the user would be locked out. This has been fixed in 10.4.3 update.

Power Mac G5 problem logging into Open Directory:

Power Mac G5's (I think it's just the Power Mac G5's with this issue not sure) had a problem connecting to the Open Directory LDAP Server at startup and would display the empty blue screen for up to 10 minutes or more in some cases before it eventually continued and the login window was displayed. This has been fixed in 10.4.3.

Adrian Cooke said that 10.4.3 fixes an account locking problem:

The account locking problem when a Windows UNC path SMB home folder is automatically mounted has been resolved. However, there is a problem accessing Login Items. This is caused by use Windows UNC path for home with SMB as the path is added into the login items in Systems Preferences / Account. When login items is selected, Systems preferences crashes. I think that this has something to do with the path name which is "SMB//server.domain/share$" as it generates entries in the Console with "[NSUL initFileURLWithPath:] nil string parameter."

If you can comment on these fixes

Reader verifies 10.4.3 fix of InDesign bug. November 7, 2005 -- Luis Menoyo as verified that the Mac OS X 10.4.3 Update fixes the problem of Adobe InDesign Crashing in Tiger 10.4.2 on Windows networks:

The problem in OS-X 10.4.2, of InDesign crashing when opening a file on an SMB server, have been resolved in OS-X 10.4.3. Now I can work on InDesign files residing on a Windows server.

We first reported the fix last week from another source.

Reader reports 10.4.3 still has SMB/AD Finder file copy problem. November 7, 2005 -- After upgrading to the Tiger 10.4.3 Update, Hory Fabien is still seeing a problem with SMB file coping from the Finder, but not from, Terminal with Active Directory users, and only in some logon conditions:

The 10.4.3 version still doesn't solve the following problem for us. With an Active Directory user logged on the Mac and a Windows 2003 share mounted via SMB, if I try to a Finder copy of files to the SMB share, only the first file is copied. A message says there are not enough permissions to write the file. (The permissions on the Windows 2003 server are read/write and not 'total control' for the user.) If I copy files with the Terminal, there are no problems.

If I login with the local administrator of the Mac and mount the Windows 2003 share with the active directory user, I can copy files with the Finder.

If you've seen this problem

Reader says AD binding problem remains in 10.4.3. November 7, 2005 -- Adrian Cooke of the U. K. reports that a problem with Active Directory binding that began with Tiger is still not fixed in 10.4.3:

There are still problems with and generated by the Active Directory Plug-in with 10.4.3. I get an error "An Unknown Error Occurred" when I bind to Active Directory. On a second attempt it binds without any errors.

The "Allow admin groups" doesn't work. This was the same in 10.4.2. This has always worked fine with 10.3 with our network.

TIP: Importing Outlook for Win email into Entourage. November 7, 2005 -- A reader posting at the O'Reilly web site describes how to move Outlook for Windows email messages to Entourage.

Entourage permission problem not fixed in 11.2.1. November 7, 2005 -- Terry Brink reports that the most recent Entourage 11.2.1 update does not fix a problem with permissions caused by Service Pack 2:

My Entourage problem sounds familiar.

Last week the auto updater for Office 2004 ran in the middle of the day upgrading to 11.2.1. When I restarted Entourage it began constantly asking me to re enter the password. Even if I check the box to remember the password it will ask again a few minutes later. I can get new mail by quitting and restarting entourage, but within a few minutes it will start asking for the password again.

Am I stuck with removing it and reinstalling and not upgrading, or is there a way to fix it?

Entourage 11.2.1, new problem with delegation option. November 7, 2005 -- Brad Boots found a new problem with delegating mailboxes caused by the Entourage 11.2.1 update:

Many people in our organization used the delegate option to access shared email accounts. We are a magazine publisher and these mail boxes are an important tool for filtering mail coming into the various titles. Many editors will monitor the same mailbox on the Exchange server for stories or feedback that relates to their work.

After upgrading to Entourage 11.2.1, these people can no longer delete mail in the delegate mailboxes. This is a huge problem. I have not found a workable solution.

I did open a shared mailbox as a stand alone account and set several users with the new delegated mailbox user option. This works fine for the mail that existed up until I closed the mailbox but any new mail that arrives is not available to manage.

If you've seen this problem

Nov. 3

Long list of cross-platform fixes in OS X 10.4.3 Update; bugs still remain. November 3, 2005 -- The long-awaited Mac OS X 10.4.3 Update that Apple released this week has a long list of dozens of bug fixes and improvements, including several related to cross-platform issues. Apple's bug fix list includes these cross-platform topics:

Readers are reporting that while some problems are fixed, others remain, including some problems that began with Mac OS X 10.4.0.

Win Server-based Adobe InDesign incompatibility fixed

A reader who wishes to remain anonymous reports that Tiger incompatibility with Adobe InDesign has been fixed:

The InDesign crash problem (when using SMB/CIFS) seems to be fixed in the upcoming 10.4.3 update of Tiger. At least it works OK in the recent beta.

SMB Issues/ Active Directory

Jay Christianson said that the update did not fix one SMB problem:

10.4.3 does not solve SMB access problem to W2K3 servers. On our first, quickie tests, it appears that 10.4.3 does not solve the problems we've seen trying to utilize SMB shares on our w2k3 server.

Eric Stewart reports that Tiger problem with Active Directory is not fixed in 10.4.3:

From 10.4 - 10.4.3, the "Allow Administration by ..." check box has not worked. I've gone as far as to open a call with Apple, and they still haven't fixed it.

The only workaround I've discovered so far is manually granting the account admin status in the account properties, validating as another (i.e. local) admin user.

Brad Price reports that the Updated fixed an SMB bug, but that it still has an Active Directory issue:

10.4.3 appears to fix a six-month bug in mounting SMB shares that required port 137 on the Windows server.

As previously reported, Mac OS X Tiger introduced a change from Panther in that ports 139 (netbios-ssn) AND 137 (netbios-ns) were required to mount via SMB in the Finder. Panther required only port 139.

(Interestingly, Windows has been able to "direct-hosted" SMB over port 445 for many years. I'm not sure why Apple won't modernize this critical cross-platform aspect of Mac OS X.) So this is good news for folks at institutions that have firewalled port 137 on their server (for whatever reason...)

The AD Plugin for Directory Access still requires port 137 in order to use an SMB share for the login home directory, via unchecking the "Force local home directory on startup disk" box in the AD Plugin configuration GUI (This is the same as the "dsconfidad -localhome disable" parameter.)

Price also said that 10.4.3 fixes one problem with the Active Directory plugin:

Coincidentally, the AD plugin doesn't require port 137 for a simple automatic mounting of the SMB share. This is the "Use UNC path from AD to derive network home location", or "dsconfigad -useuncpath enable -protocol smb". So if your Mac lab is using local homes but you want the logged in AD user's LAN drive to be mounted automatically, 10.4.3 does the trick!

Virtual PC 7

Loren Olson reports that the update fixed one VPC bug but not another:

I can confirm absolutely that Virtual Switch does work and works just fine. Why, I have no idea. One thing that has never worked with Virtual PC 7 and continues to not work is Palm Syncing.

Mac OS X Server 10.4.3 problem

Loren Olson is not happy with the Server, with new problems:

The Server version of 10.4.3 is the worst of the two and actually for me it's the pits. I appear to have to reinstall everything which is not one of my favorite subject.

One thing this turkey had the nerve to do that it has never done before is trash all my mail.

Microsoft Exchange Server

Jay Christianson reports on a problem with Mail and Exchange Server:

We've just run a quick test to see if Mail 2.0.5 has resolved the issue where when Mail connects to an Exchange server, things appear fine on the client side and mail downloads/syncs/etc., but on the server, millions of error messages flood the event logs.

Apple was aware of this problem with the last version of Mail... and may need to be made aware that it still is not resolved.

Dave Brady has a problem with OWA & Safari 2.0.x that the upgrade didn't fix:

We're using Microsoft Exchange with Outlook Web Access for email throughout the district. We haven't had a serious problem until Tiger and Safari 2.0.x Users are required to re-authenticate to open mail, close mail, send mail, open folders, save messages, attach files, etc.

I must say it happens on MOST (1000+) machines. There are a couple where something has happened that the issue doesn't exist. Unfortunately, we can't figure out what that is.

I just upgraded to Safari 2.0.2 this morning (fresh yesterday with OS 10.4.3) and the issue is still there.

Does 10.4.3 fix cross-platform problems for you?

October 2005

Oct. 27

ExtremeZ-IP 4.1 speeds file searches. October 27, 2005 -- Group Logic released ExtremeZ-IP 4.1 Update for its file server and printer server lines, which install AFP servers on Windows PCs. The update adds performance enhancements for file name searches on servers from Mac clients. The company said that the searches are now up to 150 times faster than Microsoft Services for Macintosh and up to 600 times faster than the Mac OS X SMB Client.

Other improvements include:

Reader verifies AdMitMac cure or Tiger/InDesign problem. October 27, 2005 -- Micah Tremain verified that the current version of ADmitMac 3 from Thursby software fixes the problem of Adobe InDesign for Mac crashing when users access a file on a Windows server from Mac OS X 10.4.2. Apple still has not issued a fix.

Apple's cross-platform file sharing tutorial. October 27, 2005 --- Several readers asked us recently how Windows users could access files on a Mac. Apple has an article that describes setting up OS X to enable Windows users to access files.

Saving files to apps via SMB not keeping network path. October 27, 2005 -- Scott Norman reports a problem with Tiger and saving files from within applications to SMB servers:

With Mac OS X 10.4.x, I connect to a network drive using SMB, when I run Dreamweaver (and some other apps), when I try to do as a Save or Save As with a new file, the file will get saved to the Documents folder. I've had this problem a two months or so now. Didn't have this problem before, not sure if was an update to 10.4.2, or something else when I first ran across the problem. If I open up a site in Dreamweaver on my laptop, saving a new file or file save as saves to the right folder, but connecting to network no longer saves to right folder/directory.

If you've seen this problem

Prosoft 1.3.1 improves NetWare access. October 27, 2005 -- Michael Campbell reports that the recent Prosoft Engineering Netware Client for Mac OS X 1.3.1 improves access to NetWare:

Just a note to say that the new client 1.3.1 works well with 10.4.2, most noticeable difference is that it is faster at logging in and mount/eject volumes.

Slide Show 7 for Mac and Windows released. October 27, 2005 -- Apimac has released SlideShow 7, cross-platform software to create presentations and slide shows for Mac and Windows. The software is available for both platforms, produces files that are cross-platform, and supports movies and images.

Oct. 25

MacWindows updates Cluster Server page. October 25, 2005 -- We've updated our old Macs and MS Cluster Server Report page.

If you'd like to share a tip or problem with Macs and MSCS

Reader reports on Entourage 11.2.1 update. October 25, 2005 -- Two readers have reported their experience with the Entourage 11.2.1 Update that Microsoft released last week.

Robert Greenhood had a problem:

After upgrade to 11.2.1, I have lost all connectivity with my Exchange Server.

Allyn Martin reports success with the update, and has a suggestion:

Since running the update I have had nothing but good experiences. I don't get a lot of help so its my monster to take care of some VIPs at the company who choose to use Macs still in a XP/AD2003 environment. I must say I love making use finally of the Exchange Server and calendaring and delegating Permissions.

Good practice for all who update or have been running versions of Entourage (X, 2004, etc.) Run the Rebuild Entourage Main ID (Launching Entourage with the "option" button down. This helped a user's experiences' run faster and better.

NOTE: I ran it after each upgrade (2004, SP2, and 11.2.1)

I bet many problems may lie within Upgrading from Outlook for Mac to Entourage. I always had hiccups with that. I converted and stayed since upping to v2004. Stayed away from heavy Calendaring-- if need be jumped on a co-workers PC if I had to do that. Now I don't have to anymore.

if the 11.2.1 Update fixes your Entourage SP2 problems, or causes new ones.

e2Sync 2.6 compatible with Entourage SP2. October 25, 2005 -- has released e2Sync 2.6, an update to the Address Book-to-Entourage connectivity tool for Mac OS X. The update makes the software compatible with the Entourage Service Pack 2 that Microsoft released last month. The developer describes the e2Sync update:

When Microsoft recently broke our iSync conduit, e2Sync, after radically changing the database with the Service Pack 2 update, we discovered they had also fixed lots of bugs, and so v2.6 of e2Sync rolls out some serious bug fixes. Most importantly, alarms are now fixed and .Mac syncing now works again.

With e2Sync installed, iSync moves Entourage contact info into Mac OS X Address Book, and moves Entourage events into iCal. This also makes the contacts and events searchable by Spotlight.

Cross-platform clipboards sharing over network. October 25, 2005 -- Stretched Out Software has released CrossClip, software for Mac OS X and Windows 2000/XP that allows Mac OS X and Windows to share clipboard contents over a network. Users do not need to create files to move information. CrossClip runs in the background on each computer. It can be configure to send data automatically or manually from the CrossClip menu. The new so

PC-Mac-Net improves speed, checks integrity. October 25, 2005 -- Today, Lava Software released PC-Mac-Net FileShare v5.1, a (free upgrade) new version of the cross-platform file sharing and data synchronization software for Mac OS, Windows, and Linux. The new version adds file integrity checking and transfer speeds that are two-to-ten times faster. Users can now start a transfer by dragging files and folders between file lists, now available in contextual menus.

A free Lite version restricts the size of file transfers.

Oct. 21

MS Office patch aimed at fixing Entourage SP2. October 21, 2005 -- Yesterday, Microsoft released Office 2004 for Mac 11.2.1 Update to fix problems with the recently released Entourage SP2, which we've previously reported. Microsoft "strongly recommends" that all Entourage SP2 users install the new update.

The company said that the 11.2.1 Update fixes a bug that could cause data loss when Entourage SP2 tries to synchronize with an Exchange mailbox that was moved to a different Exchange server. It also fixes problems with setting Exchange server permissions and with printing calendars.

Brian J. Little describes these problems with SP2, and notes that Microsoft advised users against further SP2 upgrades:

Everything was basically fine until our primary Exchange server went down. All Entourage SP2 users saw problems ranging from a disappearance of mail (fixed by a resynchronization) to duplication of folders (also easily fixed) to outright loss of data (fixed only by restoring from backup, a painful process). After I spent three days fixing these issues, we moved back to the repaired primary server, only to have the problems resurface, with the instances of actual data loss approximately doubled.

Two days later, MS pulled the update from AutoUpdate and issued their recommendation against further upgrades. Unfortunately, my users who already have it installed are hosed, as there is no retrograde tool (not that I would expect one, mind you).

While SP2 appears to provide some nicely improved functionality, and to repair a couple of fairly serious problems some users were experiencing, I have to say that my testing has been disastrous. Where my users were just starting to develop real confidence in Entourage, vs. the old Outlook they were accustomed to (and which, frankly, offered a lot of features still missing from Entourage), many are now actively concerned about the safety of their data. While I recognize that my situation was mostly the result of a “perfect storm” of bad timing, I have to wonder how such an apparently big bug managed to get past QC.

This incident has given our IT organization a big fat black eye that will take weeks or months to smooth over, and has made me very wary of future Microsoft product upgrades — a state of mind I had recently managed to get past.

if the 11.2.1 Update fixes your Entourage SP2 problems.

Firefox doesn't have problem with proxy and Entourage. October 21, 2005 -- Several readers report that Firefox does not have the problem with proxy settings, Entourage and Safari.

A reader writes:

There are 2 ways around the proxy setting and Entourage. The easiest is to use Firefox as the browser and set the proxy manually. The second and the one we use is authoxy and set the proxy to a local address and then all the other web access apps work also.

A reader named Ju also can work with FireFox:

Firefox lets you manually configure your proxy settings where Safari does not. Go to Firefox Preferences/Connection settings/ then tick Manual proxy configuration.

New X11 based remote control for running XP on Mac. October 21, 2005 -- Yesterday Daystar announced that it is the Mac reseller and support agent for My InternetPC from True North Technology. My InternetPC is an Internet-based subscription service that allows Mac users to operate Windows XP applications. Similar to a thin-client system, the service is described by Daystar as combining "Microsoft Server, Apple X11 and Sun's Java." Daystar say that the server is actually a hundreds of Windows-based supercomputers.

The Base subscription fee starts at US $25 per month with 5 GB of storage; an Office subscription fee of US $45 per month includes Microsoft Office.

Oct. 11

Permissions problems with Entourage SP2 and Exchange. October 11, 2005 -- Two readers reported permissions problems with the recent Service Pack 2 upgrade to Microsoft Entourage. We point out that Microsoft released an update for Exchange that when along with the Entourage update.

Jeremy Matthews reports:

Our biggest headache is that Entourage “forgets” permissions granted on public folders (of which our accounts definitely have correct permissions). Some folks cannot delete, move, copy emails, etc. Under the previous version (without SP2), it works as it should. We've done account removal and addition from the exchange and client, both resulting in limited success. Only after repeatedly emptying the cache on certain folders to items begin to respond.

In addition, we have had to remove all previously subscribed-to public folders and re-add, so permissions would “hold”. Afterwards, we see the same problem each new day: permissions on public folders go nuts.

Michael Wilmar pointed us to an article about the problem and reported a similar problem:

I recently installed Entourage SP2 on my Mac, which interfaces with our Exchange Servers. One of our IT people who has been helpful to me in the past contacted me shortly after I had installed it to let me know that it was available. I told him that I had already installed it. Less than 24 hours later, he got back in touch with me and asked me to stop using it until he had been able to patch the Exchange Servers to fix a bug, which he did right away.

He took the potential problem very seriously. The need to patch the servers also elicited the ritual squeals from the network supervisor about the tribulations he is subjected to as the result of my firms “acquiescing to users' demands of using non-standard equipment and unsupported operating systems.”

Whatever time was spent correcting this potential problem caused by Microsoft software engineering has been dwarfed by the time the IT department spends fixing Windows/Exchange glitches.

In any event, I don't think anyone should upgrade to Entourage SP2 without discussing this potential problem with their IT department. Apparently, it can cause serious problems with Exchange Servers.

If you've seen this problem

Suggestion for Entourage proxy settings. October 11, 2005 -- Steven Lindsay has a suggestion for the Entourage problem with proxies that a reader reported:

The Exchange Server has to be listed in the bypass field (either exclusively or exclude the local domain which the client and server belong to) in the proxy prefs pane.

iEmulator adds CD access, import VPC machines. October 11, 2005 has released iEmulator 1.7.7 (US $24, free update), a new version of the PC emulator for Mac OS X. The new version includes several important improvements:

PC-Mac-Net FileShare 5.0. October 11, 2005 -- Lava Software has released PC-Mac-Net FileShare 5.0 (free upgrade) a cross-platform, peer-to-peer file sharing and folder synchronization product that operates over LANs and the Internet. PC-Mac-Net FileShare is available for Windows, Mac OS X, Mac OS 9, and Linux. New features include:

There are two versions of PC-Mac-Net FileShare. A free Lite Edition has allows downloads up to 10 MB and uploads of up to 2 MB uploads, and supports workgroups with up to 3 users. The Standard Edition (US $25) and Professional Edition (US $40) do not have the file size limitations. Lavasoft is currently running a 2-for-1 promotion for licences.

September 2005

Sept. 26

More Entourage SP2 reports and tips. September 26, 2005 -- We continue to receive reports on Entourage Service Pack 2, which has gone a long way towards making the Mac a good Exchange client. Chris Jasper reports has some advice:

Its fixed a lot of outstanding issues, but not everything yet.

GAL browsing does work, although the refresh can be a little slow, it helps if you have no custom search base set up in Tools>Accounts>YourExchangeAccount>Advanced>Directory Settings. Also make sure you have the This server requires me to login box ticked or unticked according to your domains settings.

Thus far it all seems pretty good, haven't been able to test yet wether the dreaded 10068 error occurs when using network home directories, and the Tasks indeed do not work yet.

John Curran had a big problem with the upgrade:

It killed me. Did the SP install and it wiped out all of my calendar events on the exchange server so that my assistant (or my PC running Outlook 2003) could see nothing. Strangely, they all still are in Entourage (I assume it is a cache). The only way to get them back into Exchange is to open each event, make a small change and to save - then I can see them again. Very weird.

Big problem is that I am an "unauthorized" Mac user so no internal tech support.

Dan Foshee sent in some links and tips:

Three resources I found invaluable:

For Jason's problem, have him check to see if he has a custom search base set (Tools>Accounts>Your Exchange Account>Advanced: Search base). If so, try blanking it out and see what happens. This freed up the GAL for me. This great info came from the entourage weblog, but both it and the bynkii site responded with minutes of me posting. Props to Andrew Ruff and John Welch!

Overall, I find minor irritation with the update, but being able to view the Public Calendars and being able to view the Address Book is fantastic. FINALLY!! I can start specify a standard OS X mail client for the company (right now we're mostly still on Outlook 2001, then, then Entourage 2004).

I do wish I could see our Mail Code field but that may be a custom field that our company has. I like being able to double-click on someone in the address book and in the summary it shows their free/busy info for the day. The map and directions are questionable value to me, but I can see it being pretty cool for others. goes to mappoint, shocker! It would be nice to be able to define the map/directions service like Yahoo or Google.

Another minor gripe--and it is minor for me, since I usually know who I'm looking for, I just can't remember the contact info--is the inconsistency of how you can find things in the Address Books, that is, Personal vs. the GAL.

Click on the Address Book icon. You get a list of address books, one On My Computer, the others for the GCL (Global Contact List), though you may just see a GAL. In the personal one it will search for "(search parameter, like Name or Company) contains". For some inexplicable reason when I choose one of the GALs or the GCL, the search tab changes to "(search parameter, like Name or Company) starts with". There is no way to change this that I have found, and I wish I could, or have two drop-down tabs with the search parameter (Name, Company, etc.) then a further limiter (contains, is, etc.). You know, like you can in the Mail section of Entourage 2004 SP2.

Another irritation is the lack of integration or sync-ability with Apple's Address Book, but I'm sure there's a script out there somewhere for that.

These gripes aside, like Entourage 2004 SP1, I think it's a must-do upgrade from previous versions, or if you're waiting to get rid of Outlook 2001. (Okay, you probably won't be able to totally get rid of it, but you can reduce your dependence on its Address Book tie-ins.)

of the Office 2004 SP2 update.

Entourage problem with proxies. September 26, 2005 -- Andy Beaven has a problem with proxy settings and Entourage:

I have a Windows Network (Server 2003) but also have a small number of Macs connected to the domain. I have no network integration issues, I can pick up roaming profiles with ease. We have an Exchange server (exchange 2003) and a Proxy server (ISA) running on the same server unit.

The Mac users use Entourage to connect to the Exchange, this works well. But in the Network prefs I have to leave the http proxy blank so that entourage will sync. The problem now occurs that those users cannot access the internet, as Safari and Explorer take the proxy setting from the Network prefs and I can’t seem to manually assign it the machine for just the browser.

Is there a way that I can get around this?

If you've seen this problem

Installing Network Discovery Suite for Cisco. September 26, 2005 -- Mark Duling has a web page on installing Network Discover Suite, an open source discovery, management, and inventory system for Cisco. He described it like this:

There is an amazing open source app called NeDi that I just discovered that might be called a "CiscoWorks light" for network management.. It is an amazingly useful and easy to use tool in a Cisco environment that learns your network automatically and builds a list of your switches and routers including software versions, modules, and configuration options, and also tracks your hosts and lets you search for them by MAC address, IP address, and other criteria. It is something any network administrator in a small to medium size organization would be interested in. I did a write up on the NeDi install on OS X on my .Mac page that makes it easy.

Sept. 23

Office SP2 fills holes in Entourage/Exchange functionality. September 23, 2005 -- Microsoft has released Office 2004 Service Pack 2 for Mac OS X, a free update that focuses on improving Entourage's functionality as an Exchange client. Microsoft also issued an update for Exchange Server to support Entourage. Word, Excel, and PowerPoint received bug fixes and minor improvements.

Among the improvement in Entourage 2004 SP2:

See this eWeek report for more.

Jason Meyer considers this version to be comparable in features to Outlook 2001 for OS 9:

The MS update that greatly improves the use of Entourage with Exchange. From my initial looks, access to Public Folders is very usable, the same can be said with using the Global Address List. The GAL still comes up blank when selected. However, it auto-finds users as you type in names, but beware it searches by display name so if your Exchange/AD admin have changed the display name to be Lastname, Firstname (like I have) you have to search by lastname. Customized Address lists are still be bit weird as it doesn't auto-find. Accessing the GAL from Calendars and inviting people is very easy, as are creating Distribution lists. With this update Entourage has almost the same basic functionality as Outlook for the PC, and its not clunky at all.

Needless to say, Entourage maybe be a better option than running Outlook2001 in classic with this update.

Pete Priel has high praise:

Wow. The Entourage update in conjunction with the server-side updates make Entourage integrate, seamlessly, with the corporate Exchange server. Prior to the update, performance was very slow. Right now I'm writing this email on Entourage running on a Mac mini while 3 other users' calendars and in boxes are synchronizing--and I can actually type! Before, even typing an email on a single user identity was frustrating.

Sharing not only is supported, now, but works great. In order to see other users calendars and contacts and email one had to create a new identity and switch between identities. This is a royal pain. Now, presuming the other users have shared an Exchange folder (inbox, calendar or contact) you can open them easily from the File menu (Open Other User's Folder...). And of course you can share your Exchange folders, easily, as well, by control clicking on them. Also, you can delegate other users to act on your behalf.

One feature that's not integrated with Exchange, yet, is Tasks. In otherwords, one cannot assign tasks and one cannot open someone else's tasks.

But wow, what a dramatic improvement.

of the Office 2004 SP2 update.

Reader reports problem with Excel SP2. September 23, 2005 -- Ed Coye reports a sporadic problem with Excel 2004 Service Pack 2:

After installing Service Pack 2 for Office 2004 Mac some Excel files do not open. Doesn’t seem to be a consistent pattern but I am now having a problem where it acts like it will open but no spreadsheet window appears. No error messages.

If you've seen this problem with Excel SP2

VPN Tracker 4.5 supports SonicWall DHCP/IPsec. September 23, 2005 -- Equinux announced VPN Tracker 4.5 (free update), a new version of the universal VPN-Client for Mac OS X. The new version adds support SonicWall’s DHCP over IPsec.

The SonicWALL support includes “client provisioning,” the enabling a direct download of the VPN-configuration from the SonicWALL VPN-gateway, eliminating the need to manually configure each users' computer.

VPN Tracker 4.5 can also support client provisioning via “Mode-Config,” used in Cisco and Juniper VPN gateways.

Equinux said that "both methods serve to automatically distribute the needed configuration-parameters, such as IP address, DNS-information, etc., from the VPN Gateway to the client.

If you've tried VPN Tracker 4.5

Readers give impressions of DAVE 6. September 23, 2005 -- A couple of readers commented on the new DAVE 6.0 the recently released new version of the SMB file and print sharing solution for Mac OS 9 and X.

Jubart Igig is bullish on Thursby Software's DAVE 6.0:

Dave 6 is awesome! We run a multiple Windows 2003 server environment with about 250 Macs and a 100 PCs and it works perfect. That other "fix" from Apple stinks. Now it's time to write a report to corporate to purchase the $17,500 license...

Scott McDonald had problem with Windows 2003 Server SBS:

I upgraded to DAVE 6 from DAVE 5.1 solely so I could upgrade to OS X Tiger. I decided to install DAVE 6 on my Mac (a white iBook 800 MHz) running OS X 10.3.9 first before upgrading to Tiger to see how it worked.

At first, all seemed to go well. I was able to access files on my firm's Windows 2003 Server just as with DAVE 5.1 with no problems. But then my firm upgraded (laterally switched) to Windows 2003 Server SBS (Small Business Server?). The system administrator also implemented passwords (no passwords were required before). I immediately had problems: inability to connect to the server, or connection, but inability to open folders on the server (Finder would appear to lock up or folders would "disappear" from the Finder).

I try turning off WINS support in DAVE to see if that was part of the problem. There was no change. Desperate to get to my files, I uninstalled DAVE 6 using the included uninstaller program, then I reinstalled DAVE 5.1. DAVE 5.1 worked like a charm! No connection problems whatsoever.

But, of course, reverting to DAVE 5.1 torpedos my reason for upgrading in the first place--to be able to upgrade my system to Tiger.

If you've seen this problem or tried DAVE 6

Cannot Map to Win XP SP2 shares. September 23, 2005 -- Shahryar Jahangir has a problem with map Windows shared drives to Mac OS X:

I have the same problem as Stephen Power. I can see the Win XP host but cannot map drives to it from my OS X Jaguar. This is probably a Samba update issue.

If you've seen this problem

Sept. 16

Apple provides Intel tools for Mac developers. September 16, 2005 -- Earlier this week, Apple created a Developer Transition Resource Center to help Mac software developers make the switch to Intel-based Macs. An eWeek report describes it and reports that developers have received the first build of Mac OS X 10.4.2 for Intel.

Tip: Mail, Exchange 2003 and Multiple Users. September 16, 2005 -- John Holley pass along this advice for using with Exchange Server:

Just a heads up for anyone else out there running Mail against Exchange where more than one user may be using a machine via Multiple Users.

It seems that the Exchange 2003 IMAP function really struggles when two users are logged in on the same machine and both mail clients are checking their Exchange (IMAP) email at roughly the same time. This is certainly more problematic if you have a large Public Folders section.

What happens is the IMAP service starts chewing through lots of processor e.g. up to 100%. What then happens is that any other Mac clients struggle to get their email until one of the two users quits Mail.

So limit yourself to one IMAP client talking to Exchange per machine!

If you care to comment on this

Clarifying tip on dealing with "._" files. September 16, 2005 -- Matt Bogen provides more information about a fix posted on September 12 for the problem of "._" files left on SMB servers locking up real files, and where folders can't be moved or deleted:

I was glad to see this tip on MacWindows this morning; I actually only discovered this workaround late last week, myself.

Just to clarify what Mr. Collin had noted: The tool is called "File Server Management" (I access it by clicking the "manage this file server" link on the Manage Your Server pop-up windows that comes up by default when you log onto a Win2003 server). One of the options on the left-hand side of this tool is "Open Files (Local)." Click there, and from the resulting file list, select all ._ files that are causing problems. Click the "Close Open File" link that can be found to the left of the list of those filenames. After you do this, you can delete the ._ files, and more importantly, OS X users can then rename files, save files, and do other things they weren't able to do because of the file lock.

I've been doing this as a preventative maintenance step each morning since I found out how to do this. We have about a dozen Mac OS X users hitting a Win 2003 file server, and it saves time and stress during the day just to clear all ._ files before they even get on their workstations in the morning.

This problem is reported on our Panther Reports page.

Fix for drag/drop copying from W2K to OS X Server. September 16, 2005 -- Ken Richardson reports that Windows 2000 users were unable to to drag files to a Mac OS X Server after installing a security patch on the clients. He also provided the solution:

After the latest Windows 2000 patch for the worm that has been hyped by the media this week, the patched Windows clients can no longer copy files to the Mac OS X 10.3.4 and 10.3.9 Servers by dragging them, nor can one move files from one folder to another on the server. One can use right click, copy and paste to do a copy or do a Save As from within MS Word, but dragging doesn't work. We are running a three servers, two of which have W2K clients.

We have since figured out that if we make our servers trusted sites in the Internet Explorer settings on the PC's, they can copy files to the Mac OS X Server just fine.

PDF2Office v2.1.1 maintenance update released. September 16, 2005 -- Recosoft released PDF2Office v2.1.1 Professional (US $129, free upgrade), an update to the PDF-to-Office file format converter software for Mac OS X. The software retains the formatting of the PDF file, including tables, columns, and headers and footers. Improvements include:

September 14

Thursby ships a Tiger-compatible DAVE 6. September 14, 2005 -- Thursby Software has shipped DAVE 6.0, a new version of the SMB/CIFS file and print sharing software for Mac OS X and for Mac OS 9. The new version is compatible with Mac OS X 10.4.

DAVE has features not found in Mac OS X, including support of Distributed File System (Dfs). DAVE stores both resource and data forks of a Mac file in a single filename, just as Microsoft's services for Mac does. Tiger simply deletes resource forks, which can result in the loss of metadata.

If you've tried DAVE 6

Guest PC 1.6 adds copy/paste, drag/drop. September 14, 2005 -- Lismore Software Systems is shipping Guest PC 1.6 (US $70, free upgrade), a new version of the PC emulator for Mac OS X. The new version adds the ability to copy and paste information between Mac and Windows files and the ability to use drag and drop to copy files and folders between the Windows and Mac environments. There are also some bug fixes increased stability, according to Lismore, and localization in the Spanish and Dutch languages.

The company said that a future version of Guest PC will include features found in Microsoft Virtual PC, including support of USB devices and fast save and restore PC state functionality.

Reader Loren Olson is bullish on Guest PC:

Beautiful--that is the only way to describe drag and drop and copy and paste. They work like a champ. Now if they can install USB support and maybe one or two other things this thing will really take off.

If you've tried Guest PC 1.6

StuffIt Deluxe 10 compresses JPEG, supports Spotlight, Automator. September 14, 2005 -- Yesterday Allume Systems released StuffIt Deluxe 10, a new version of the cross-platform file compression and encoding package for Mac OS X. Among the new features:

September 12

ExtremeZ-IP 4.1 promises fast file name searches. September 12, 2005 -- Group Logic announced that in October it will release ExtremeZ-IP 4.1, an update to the AFP-over-IP file server for Windows 2000 and 2003 servers, as well as Windows XP and Windows 2000 Pro.

Group Logic said ExtremeZ-IP 4.1 will speed up file name searches of Windows from Mac OS X, with search results returned in seconds. For instance, file name searches will be up to 150 times faster than Microsoft Services for Macintosh (SFM), according to the company, and up to 600 times faster than the Mac OS X SMB Client.

The 4.1 update will also include bug fixes associated with the new architecture of the 4.0 upgrade.

Helios offers PDF-native OPI for ImageServer to help InDesign workflows. September 12, 2005 -- HELIOS Software GmbH announced HandShake UB and ImageServer UB, a new server-based PDF-Native OPI workflow for HELIOS ImageServer and PDF HandShake. The company said that server-based PDF image replacement will work with Adobe InDesign workflows. Workflow will not need to produce separate InDesign documents for different resolutions. Users will be able to submit PDF print jobs before all images are available, since the server will generate high-res PDF’s when all of the images are completed.

TIP: better fix for "._" files are locking real files. September 12, 2005 -- Branko Collin offers a workaround for the problem of "._" files left on SMB servers locking up real files, and where folders can't be moved or deleted:

I don't know if this has been solved yet, but some of your readers pointed out that the only way to solve the problem of the extraneous file locks is to reboot the Windows Server.

Windows 2003 has a tool called File Server Administration (or something similar; I translated this from its Dutch name) that will allow you to delete the file locks. No reboots necessary.

(Of course one has to be careful with this; you probably do not want to delete legitimate file locks.)

This problem is reported on our Panther Reports page.

Tiger AD plugin and deleting the computer object. September 12, 2005 -- Two readers commented on a previous report about an issue where unbinding Tiger from Active Directory deletes the computer object.

Steven Sroba confirms the previous report:

I can confirm after several instances that unbinding a Tiger computer deletes the AD computer account, which differs from unbind on Windows 4.x and higher.

Aaron Rosenblum says that this is normal behavior:

This is actually the intended behavior of the AD plugin. Unbinding a client from the domain is supposed to remove the computer object. In Windows, it doesn't delete them, but it disables them. If the poster wants to unbind his clients without removing the computer object in AD, he can delete the "ActiveDirectory.plist" in /Library/Preferences/ DirectoryService/. This will leave the computer object intact on the AD side, but the client will no longer be bound.

Panther umount problem noted under Tiger. September 12, 2005 -- A reader called Zelnok reports that Tiger has the same problem with a Unix command that Panther has:

I am having the same behavior with disconnecting network shares via umount that you described on your Panther page. I am using 10.4.2 at the moment and I experienced this with 10.4.1 also.

Along the same vein, when I connect to multiple windows machines via the admin share c$ all of the shares appear with that name in finder, regardless of the mount point. Do you know a way to distinguish them more easily?

If you've seen this problem

Reader reports Timbuktu Pro problem with Euro keyboards. September 12, 2005 -- John Lockwood from the United Kingdom reports that Netopia Timbuktu Pro, including the new version, has a problem with European keyboards. Lockwood says that the cross-platform remote control program produces the wrong keys when a Mac controls a PC or a PC controls a Mac:

Six years ago I reported a bug to Netopia affecting Timbuktu Pro when a Mac controls a PC or a PC controls a Mac. This bug means that when you type certain keys on one the wrong character is output on the other… I am aghast to discover that this bug still has not been fixed in recently issued versions (8.5 for Mac and 8.5.1 for Windows).

The FREE VNC remote control software does map these keys correctly between Mac and PC. For example, I can use Remote Desktop 2 software to control a PC running TightVNC and not suffer this problem (or at least far, far less of a problem).

This bug happens all of the time between Mac and Windows if the Mac and/or PC has a none-US keyboard layout (Manufacturer, model and operating system do not make a difference). This problem does not affect US keyboard layouts. Mac to Mac and Windows to Windows is not affected.

Here is a list of the keys that go wrong between a Mac and a PC (both with UK keyboard layouts).

Mac Controlling PC:

Key typed on Mac Result on PC
@ "
" @
\ #
| ~
~ ¬  (Mac equivalent is Option-L)
€   Nothing
±   Nothing
§  Nothing

Note: To type the '#' on a UK keyboard you actually type Option-3 and to type a British Pounds '£' symbol you type Shift-3. On a US keyboard typing Option-3 produces the '£' symbol and Shift-3 produces the '#' symbol...

PC Controlling Mac

Key typed on PC    Result on Mac
" @
@    ~
~ "
'   `

Other bugs I have reported have been fixed but they have been bugs that also affected US users. This bug which does not appear to affect US users has been ignored.

If you've seen this problem

September 3

Netopia revs Timbuktu for Mac & Win, introduces new server. September 3, 2005 -- Netopia has released Timbuktu Pro 8.5 for Mac OS X and Windows, and introduced a new server version, Timbuktu Pro Management Server. Timbuktu is a cross-platform remote control with file transfer and chat functions. Macs and Windows running Timbuktu can control each other.

The new Timbuktu Pro Management Server provides central management and installation of Timbuktu for Windows clients and other software. It also stores Timbuktu Pro log and usage information. Mac clients are not supported in this version.

The new Mac OS X version adds improvements in security and in performance, including:

Timbuktu Pro 8.5 for Windows adds security and management enhancements, including:

Fix for using Win XP to set ACLs on an Xserve Windows share. September 3, 2005 -- Philip Ershler sent a follow-up on Wednesday's report about using Windows XP to set Xserve access control lists (ACLs) for a Windows share:

I did try the experiment of adding the following line to /etc/

smb.conf in the [Share] section (that I described in my first e-mail)
nt acl support = yes

In my case I actually had to add the [Share] label. But adding this option seems to have fixed the problem.

Now comes the issues of understanding the in's and out's of ACL's.

Jason Staloff also provided a solution and a link:

I used SWAT to look at the full config for a totally vanilla SAMBA on Tiger Server. Click on the View button, then Full View, it basically dumps the whole environment.

nt acl support = yes
also maybe interesting an undefined option...
acl compatibility =

There is more info about turn on SWAT for Tiger at Mac OS X

You can find these and other similar reports on our Mac OS X Server Cross-platform Issues page.

Another suggestion for Win clients locked out of Tiger Server/AD. September 3, 2005 -- Gary Pederson has a suggestion for the problem of Windows clients locked out of Tiger Server.

Both my Windows and Mac users were locked out of SMB connections to my Tiger Server with AD authentication (My Macs are OK with AFP/AD).

Gavin mentioned that commenting out "auth methods = guest
opendirectory" in /etc/smb.conf solves the problem until a change/ restart.

I suspect /etc/smb.conf.template is being used to generate smb.conf. So I've tried commenting out "auth methods = guest opendirectory" in / etc/smb.conf.template.

I don't know if this is the solution, but I do know that I've changed the access settings of share points with and without restarting the Windows Service a few times and "auth methods = guest opendirectory" in /etc/smb.conf remains commented and SMB/AD access has been working for 24 hours.

If you can comment on this suggestion

You can find this and other similar reports on our Mac OS X Server Cross-platform Issues page.

Confirmation of slow Authentication of Win clients to OS X Server. September 3, 2005 -- Michael Cutter reports having the previously reported problem of slow authentication of Win clients to OS X Server.

I have the same problem here. It's not a big deal as we only have 3 PCs but it annoys me that I don't know how to fix it! 10.3.9 Xserve G5 (happened prior to 10.3.9) NOT running as a PDC just a standalone file server, authentication done via normal 'log in as a different user' procedure on Windows. The server is running a shared LDAP directory with a second G5 slave server.

Would love to know if you come across a solution.

Also Matt made mention of "netbind seperator = +" fix to smb.conf - any idea of where I can find an explanation of why this is a good thing?

If you can comment on this suggestion

You can find this and other similar reports on our Mac OS X Server Cross-platform Issues page.

August 2005

August 31

Tiger Server connected to AD and OD locks during boot. August 31, 2005 -- Massimo Sanna has the problem of Windows clients locked out of Tiger Server when it is connected to Active Directory and Open Directory during boot:

I run into the same problem you talk about on your web site. I've been waiting since June for a 10.4.3 to come out and solve this problem. Every time I set up the AD/OD integration on one of our Xserve, everything is fine for a couple of hours, then it loses AD connection. When I reboot it, it just locks out with a blue screen, unless I detach the Ethernet cable and restart it locally.

Until a 10.4.3 release comes out I will log-in with local users in our Tiger file servers.

Setting ACL's on an Xserve Windows share from XP. August 31, 2005 -- Phil Ershler passed along some information about access control lists with Mac Xserve and Windows clients:

According to page 58 of the "Windows Services Administration For Version 10.4 or Later" manual, "The ACLs for folders in Mac OS X Server share points are compatible with Windows XP ACL settings. A Windows XP user can use Windows Explorer to set the ACL permissions of shared folders, and the changes will affect Windows, Mac OS X and Unix clients that access the folders."

I have set the ACLs on a share point so that I have Full Control over that share point. The issue is, I cannot from an XP client, that I have logged into (with my username and password in my LDAP/OD database), figure out how to use Windows Explorer to set the ACL's. I can set ACL's on a share local to the XP machine but not on an XServe Windows share. When I do a right click on the share (on an XP machine) I cannot get find anywhere to set the ACL information.

Now I have found a tantalizing bit of information in the O'Reilly book "Using Samba" 2nd Edition (covering Samba 2.2 and 3.0). (Checking on Tiger Server reveals that it is running version 3.0.10.) On page 260 under Configuration Options for ACL's is a boolean option named "nt acl support" which says "If yes, allows users on Windows NT/2000/XP clients to modify ACL settings". It goes on to say the default is yes and the scope is Share. If I look in /etc/smb.conf I do not see an entry for "nt acl support" under the share portion of the config file. Has Apple redefined the default for this option to be no? I've got a "sandbox" 10.4.2 server. I guess I'll try adding this option to the config file and see what happens.

If you can verify any of this

AD computer object deleted when unbinding Tiger. August 31, 2005 -- Jason Stanford has another binding problem with Tiger clients:

At my University, while testing a new disk image to push out to my lab that uses Active Directory for authentication, I noticed that after unbinding, that computer's object was deleted from the Active Directory. It apparently does not occur on our campus Windows clients when they unbind, only the Tiger 10.4.2 clients.

But not home directories, as the AD plug-in does not use port 445, and the other ports are blocked on our file servers.

If you've see this

Slow Authentication of Win clients to OS X Server. August 31, 2005 -- Matt Vlasach says his Windows clients take a long time to log in:

I have a 10.3.9 Server G5 box, running as a PDC for about 24 Win XP SP 2 clients. File sharing and transfers work great (after I applied a nice 'netbind seperator = +' fix to smb.conf). However, login speeds are disappointingly slow, about 20 seconds.

This seems to be more of a Open Directory issue, not SMB. After close inspection, it uses a NET_AUTH login method, which fails within 1 second, stalls 20 seconds, then tries a LSA method (which tries and fails in < 1 second), then a SAM_NETLOGON (or something) and it works within a second. Basically, this NET_AUTH thing is not doing its job well, but the SAM_NETLOGON is. I have no idea what determines the order of these authentication methods, or if they are adjustable.

But sometimes it work within 5 seconds. I don't get it, maybe there is more to that 20 second delay than I realize (ie 20 seconds due to current system activity, number clients etc). I do know that many windows servers can authenticate users within 2 seconds, which would be ideal.

But, I would say with this login delay fixed, we will have a flawless Mac PDC to Win XP client environment.

If you've seen this problem

Tiger update for Missing Sync for Hiptop. August 31, 2005 -- Mark/Space has released the Missing Sync for hiptop 2.0 (US $30, free upgrade), Mac software that enables Mac OS X to sync to T-mobile Sidekick, and SunCom hiptop branded handheld devices. The new version adds support for Tiger and runs better under Mac PS X 10.3. Mark/Space is also offering a $20 "crossgrade."

August 25

Thursby releases Tiger-ready ADmitMac 3.0. August 25, 2005 -- Thursby Software has released ADmitMac 3.0, a new Tiger-compatible version of the Active Directory integration software for Mac OS X. New features include:

ADmitMac has some features that Tiger doesn't include. For instance, ADmitMac supports NTLMv2 but without SMB signing (Tiger doesn't using signing); Kerberos is encrypted; support for distributed file systems.

ADmitMac also includes an SMB/CIFS file sharing client that does not have some of the problems of the built-Mac OS X client. For instance, the Thursby client does not create the dot-underscore (._) files due to support for NTFS.

If you've tired ADmitMac 3.0

Intel porting developer tools to OS X. August 25, 2005 -- At the Intel Developer Forum in San Francisco, the company said that it is working to port its software compilers and performance libraries to Mac OS X running on Intel-based Macs. The Intel tools will run as plug-ins from within Apple's Xcode programming environment. Intel said that its tools will provide better performance than other tools. eWeek has a report.

More on Tiger Sever smbd 100's of processes. August 25, 2005 -- Two more reader report on the problem of Tiger server spawning hundreds of processes when only a few Windows clients are connected. The large number of processes dramatically slow performance.

Matt Fulghum:

We're seeing the same thing here at the University of Alabama; about once every two hours or so, if there's any Windows activity at all, our Xserve G5 freaks out. No resolution yet, but I'm trying the limited number of client connections trick. Unfortunately, we are running a large lab, so I really need the ability to support about 250 logged in users.

Bob Buell describes what he has attempted to deal with the problem:

The server in question is an upgrade to 10.4.2 from 10.3.9. Last Friday we had 196 smbd processes that were running on one of our file servers, we did a killall and restarted Samba. This freed-up the CPUs which through the day gradually ate 100 percent of the processors. At the time we were setting up 80 XP laptops and 30 XP desktops to join the domain login server. Login server is 10.3.9 with the mount point being the problem 10.4.2 file server only running AFP and Samba. The idea is to allow people to login to a PC or a Mac and access the same files. We were using one login account located on the file server in question to setup the XP machines. We hope to test multiple users this week. Last year at this time had problems with to many people joining the domain at one time. We abandoned the domain login for an easier direct approach with a custom visual basic GUI straight to the file server for hundreds of people. With the introduction of Tiger we had hoped to get the PDC working for a larger scale than the six XP people who actually used the Panther Login server as a PCD.

Another topic, unfortunately we also tried to upgrade our Panther PDC login server to Tiger. We had issues with this and are back to 10.3.9. The problem seemed (per Apple) to be with DNS forward and reverse even though it has been working for the last five years. We will try again next month.

Bottom line is that Panther was working great.

August 23

Intel teaches Mac OS X development at conference. August 23, 2005 -- Today, the Intel Developer Forum in San Francisco will include a session called Intel Software Development Products for Mac OS X.

The session will cover Intel's plans to deliver compilers and libraries for Mac OS X on Intel architecture. The session will describe compatibility with existing Mac compilers and libraries, including MetroWerks, GNU GCC, and Apple's Xcode.

Apple demands removal of videos of OS X on generic PCs. August 23, 2005 -- eWeek reports that Apple has demanded that the French web site (English version here) remove videos of a hacked version of Mac OS X for Intel architecture running on generic, non-Apple PC hardware.

Apple has seeded developers with a prototype Intel-based Mac for testing purposes. The prototype has a version of Mac OS X that only runs on the Apple prototype, but reports around the Internet say that there are hacks for running this version of Mac OS X on non-Apple PC. A web site called OSx86 Project had posted a description of such a hack, but the page has been removed as of yesterday.

Centrify DirectControl offers AD management and Mac support. August 23, 2005 -- Centrify DirectControl for Mac OS X is software that integrates Mac OS X with Active Directory, providing single sign-on to Mac and Windows systems through the AD account. The system can be managed with the Centrify DirectControl Suite, which supports Mac OS X, Windows, and several Linux and Unix clients.

(Thanks to Jake Summers for pointing us to this solution.)

More on 100's of processes on Tiger Server. August 23, 2005 -- Chad Caswell also has the problem we reported last week (see our Mac OS X Server page) of Tiger Server having hundreds of smbd processes slow the server down when Windows clients are connected:

In response to the user have hundreds of smbd processes, I had the exact problem. No one on Apple's support pages could come up with a solution.

Our server is on a university network so I complained to the IT people. They swore up and down that it was a problem with my server.

The next day, the problem mysteriously disappeared. I didn't make any changes to the server. It's been problem free for over a month now.

I also set "max smbd processes = 10" in /etc/smb.conf, which may have helped.

Bob Buell is seeing the problem on a bigger network than the original reader report:

I had the same problem this week. We have 14 G5 xserves and one xraid, and a few g4 servers.

If you've seen this problem

August 19

Intel Tiger beta hacked to run on non-Apple PCs. August 19, 2005 -- eWeek reports that some developers have hacked the early Mac OS X Tiger for Mac-Intel so that it runs on generic PCs. Apple has seeded developers with a prototype Intel-based Mac and OS, but the Tiger version intended to run only an Apple hardware.

Instructions for Tiger and AD 2003; integrated authentication. August 19, 2005 -- Santino Rizzo offers a some tweaking of a procedure we posted for getting integrated authentication and access to shares for Mac OS X 10.4.2.

A few comments on Rob de Cleen's instructions.

The registry change is not necessary if you are going to set the Local Policy as these do the same thing. I should add that if the server is also a Domain Controller, you will have to adjust the Domain Policy as well.

"Digitally sign communications" for Network Client/Server does not need to be disabled entirely. It can (and should) be set to "if client agrees". This allows for more secure connections for the clients that support it.

The workgroup does not have to be the same as the AD Domain. This will vary from place to place, so people should check with their sysadmin to see if in fact they are the same.

Reader problem: 100's of processes on Tiger Server. August 19, 2005 -- Bill Matthews reports a problem with Tiger Server 10.4.2 that brings it to a crawl when a small number of Windows clients are connected:

We're running Mac OS X Server 10.4.2 and we've encountered a new problem recently. Our primary file server recently exhibited some serious lag, and after a bit of digging I discovered that there were 240+ smbd processes running, despite only having about a dozen Windows clients connecting to this server. Each session was using between 0.1% and 0.6% of the CPU, so it quickly ate up all of the available CPU resources. Some were owned by our Windows users (although when I checked their computers, they had only one connection open to the server), but about half were owned by root.

Once I turned off the Windows service via Server Admin, all the smbd processes quit and things went back to normal. I turned Windows service back on, and after about 30 minutes, 3 smbd processes spawned, each owned by root, and each using about 40% of the CPU resources. This only started about 2 or 3 days ago. I haven't had a chance to reboot the server as it's our primary file server and I'm currently on the road, so I'd rather do it in person.

If you've seen this problem

PDF-to-Word converter updated. August 19, 2005 -- Yesterday, Recosoft Corporation released PDF2Office Personal v2.0.1 (US $59) a free update to the Word plug-in that opens PDF files and converts them to Word Format. The update fixes compatibility issues with PDF files created with Tiger as well as other general improvements.

August 17

Installing Active Sync in VPC 7. August 17, 2005 -- Many discussion boards around the Internet are reporting that Windows in Virtual PC 7 apparently freezes when installing Active Sync (for handheld syncing). What actually occurs is that the installation takes a long time in emulation, sometimes 30 minutes or more, and only appears to stop. Additionally, when a user interrupts the Active Sync installation, it can damage Windows, causing further installation attempts to actually fail.

If you've interrupted an Active Sync installation, the best way to move forward is to reinstall Windows before installing Active Sync. Then allow the process to complete while you're a lunch.

AdMitMac beta goes public. August 17, 2005 -- Thursby Software has released a public ADmitMac 3.0 Beta, downloadable from the Thursby site. The 3.0 version of the Mac OS X Active Directory integration tool will add Tiger compatibility as well as a set of new features.

Instructions for Tiger and AD 2003; integrated authentication. August 17, 2005 -- Rob de Cleen sent a detailed procedure for getting integrated authentication and access to shares for Mac OS X 10.4.2. It involves changes to registry on the Windows server. He says:

After banging my head against the wall for a while, this is how I fixed it, and it's really much simpler than most solutions I found would suggest.

We've posted his detailed procedure on our Active Directory Reports page. You can also find older reports on AD integration with older versions of Mac OS X. We also have a page from last year that describes AD integration without schema changes using Mac OS X.

Win clients locked out of Tiger Server. August 17, 2005 -- Martin Boegner reports that Tiger Server 10.4.2 still has the problem with Tiger Server locking out Windows clients. He confirms the previously reported workaround, which must be repeated, and describes other attempts that don't work:

I am having the same problem that Gavin described above on a G5 XServe running 10.4.2, authenticating against our Active Directory. The workaround is functional. I wish I could say what could keep the commented out line in the smb.conf file, but at least I can relay what has not worked so far. I tried to restrict the permissions to read-only for all users on /etc/smb.conf, but that didn't work because it seems that the file is just getting overwritten when changes are made. I also tried commenting out the "auth methods = guest opendirectory" line in the /etc/ smb.conf.template file with a semicolon, but that didn't seem to work either after stopping and restarting the Windows File sharing service.

If you've seen this problem

Prosoft released Tiger-compatible NetWare client. August 17, 2005 -- Prosoft Engineering has released a Tiger-compliant NetWare Client for Mac OS X.

Robert Rust has tried it and reports that it has the same problem saving Excel files to the server as the native Tiger file sharing client has.

August 15

Migrating from Cisco VPN client to VPN Tracker. August 15, 2005 -- Equinux pointed us to a user's web site that describes how to migrate from the Cisco VPN client for Mac OS X to VPN Tracker, which can access Cisco concentrators. VPN Tracker does not have the problems with Tiger that the Cisco Client has. The article, dated June 14, 2005, includes screen shots and directions on moving the Cisco configuration data into the corresponding fields in VPN Tracker.

Reader verifies Tiger NTLM wrong-password as source of AD mobile account lockout problem. August 15, 2005 -- Bob Wallis, an Apple Certified Technician and developer, verified a theory from a reader last week about the cause behind the problem of Tiger being locked out of Active Directory after logging out and then in again. The theory is that Tiger's implementation of NTLM is sending the wrong password.

I can verify Hugh's assessment of the problem. I manage a 40+ network of PowerBooks and desktops that all authenticate to a Win2k domain with over 300 Windows machines. Most Macs are running Panther 10.3.9, with no problems.

The domain admins have set the password lock out at 3 attempts over a 3 hour period. I have upgraded 3 laptop users to Tiger, and their accounts were getting locked out at least once a day. At first, I suspected a Keychain problem, but after disabling the Keychain, the problem still persists.

At the first login after binding these Tiger machines to AD, the home folder would mount. On subsequent logins, the home folder would NOT mount, and the account would become locked. The temporary, yet unacceptable workaround for these three users is to turn off Authentication to AD in Directory Assistance, and since they have already created mobile accounts, they can still log in. They still can access exchange using entourage, and mount SMB shares, they just have to enter their credentials when doing so...I was hoping it would be solved in 10.4.2.

Hugh Burt's assessment is right on the money as far as I can tell.

Workaround for Invisible AFP Shares on Win 2003 Server. August 15, 2005 -- There were two new responses to our reports of files placed by Windows users on AFP shares on Win 2003 are invisible to Macs.

First , Group Logic confirmed that the problem does not occur with ExtremeZ-IP, its AFP 3.1 server for Windows servers and workstations.

Julian Poyntz John offers another workaround:

The Volume name seems to be key here to the problem. We had the symptoms described which was really frustrating until I saw the problem described on this other site (can't remember whose though !) and they implied the problem occurred with folder names. This didn't quite work for me, so I eventually renamed the volume name to be something unique (USER_DATA for example) and from then on all shares were available via AFP.

Make sure your Volume names are something obscure. I now use Server serial, then quick description 5546660k_DATA.

For previously reported workarounds, see our Windows 2003 Server Reports.

How to set up Macs for Exchange Server . August 15, 2005 -- Ron Dacy at Thursby Software sent us some links to articles at Microsoft's KnowledgeBase and another source relating to setting up Macs to connect with Exchange Server, both in general and for the old Outlook for Mac OS 9:

August 10

Suggestions for invisible Win files on Win 2003 AFP shares. August 10, 2005 -- A number of readers offered suggestions for dealing with the report on Monday that files placed by Windows users on AFP shares on Win 2003 are invisible to Macs:

Santino Rizzo notes that an old Microsoft article describes the problem:

I had this problem and determined it was a problem with the macfile index. These Microsoft TechNet articles were useful. They mention Windows NT, but it still applies to W2K and W2K3. The first article describes the problem, and if you follow a series of links, you get to the second article, which gives a protocol for fixing it.

Kyle Jones toggles permissions as a workaround:

I've seen this problem on our network as well.

The only way I can get the files to appear is to reapply permissions to the folder the files are in. In Windows 2003 Server, go to the Security Tab ->Advanced. Then check and uncheck one of the permissions boxes and hit apply. Once that is done, Macs on our network can see the files.

It's annoying, but it's the only way I could get the files to be seen. If anyone knows a solution, I'm all ears.

Malcolm Fairs found that using a small volume helped, as did removing the share and reapplying:

We also had this problem after updating to Win 2003 Sever. We found that files copied from a PC were invisible to a Mac on a large volume, but that if we created a small volume and shared it as a kind of ‘drop zone’ the files showed up immediately.

We're just using this drop zone until we can find a better solution.

We also found that removing the share and re-applying it would update the Win 2003 directory database and the files would be visible. We assumed this had something to do with the Win 2003/SFM file directories not being updated properly.


We had an issue like this, apparently this is a MS issue that they know about. We had to stop the Mac share & republish. We have this problem on average about once every 2 months.

As for the disappearing mounts I have this with Win 2000 - I have several Mac shares on a machine and if I connect to one - it will be OK. If I connect to another of the shares, the Finder appears to drop the share in favour of the new one.

I say appears as if I run "ls Volumes" in the unix, it will report it as being connected. If I retry the Mac share It may come up or it may refuse (error -50) if it does come up then "ls Volumes" displays the new share as "VolumeName-1" with the old as "VolumeName" It is very annoying I shall see if I can find the confirmation of the Windows file issue.

Randall Perry, who first reported the problem, gives us an update:

I've gotten a response from the macos-x-server list from someone with same experience who claims SFM is just old and buggy and shouldn't be used.
Though, as I said below, this problem didn't occur till the Windows 2003 upgrade.

So, I'm in the process of copying the whole SFM file system down to a FW drive on the Mac, cleaning up filenames with illegal windows characters, and copying them back to an SMB share.

Microsoft aims at enterprise with Messenger 5 . August 10, 2005 -- Yesterday, Microsoft's Macintosh Business Unit released Messenger for Mac 5.0, a new version of its cross-platform messaging client. Among the new features:

PC-Mac PasswordVault v4.3 password manager is updated. August 10, 2005 --Lava Software is now shipping PC-Mac PasswordVault v4.3 (US $20 for run two copies, US $99 for site licenses), a password manager for Windows, Mac OS and Linux, with 896-bit encryption. The portable version runs directly off USB flash drives, for access to web site user names and other Internet passwords. The software will auto-sync to a desktop computer.

The new version lets users transfer user name and password information to a web browser using drag and drop and a "Timed-Paste" mode, where user name or password is pasted automatically after the set delay time. There are also minor enhancements and bug fixes in the new version.

August 8

Theory for Tiger AD mobile accounts being locked out. August 8, 2005 -- Hugh Burt has the problem with Macs running Tiger being locked out of Active Directory after logging out and then in again, a problem we have reported before. He did some investigation, and found that Tiger's implementation of NTLM is sending the wrong password:

We have found that the machine is sending the right username with the NTLM protocol BUT the wrong password! On Panther machines, we have found that the H drive is mounted by NTLM on the first attempt. So to put it succinctly, here is the bug - Tiger using NTLM, sends the incorrect password but Panther sends it correctly...Tiger is unusable for us.

Burt provide a long account of the specifics of the problem, which we've posted on our Active Directory Reports page.

If you've can verify Burt's conclusion

New web site describes Win XP SP3. August 8, 2005 -- Ethan Allen tells about a new web site dedicated to the upcoming Windows XP Service Pack 3:

Anyway, I thought I'd let you know that Windows XP SP3 is in the works and has a ton of new fixes, some of which may affect Apple compatibility.

Windows files placed on AFP shares invisible to Macs. August 8, 2005 -- Randall Perry's Macs can't see files place an AFP server by Windows clients:

We're having the following problem with AFP shares since the Win 2000 Server was upgraded to Win 2003 (same problem from both 10.3 and 10.4 clients).

The shares mount fine. Reading/writing is fine. Windows users connecting to the same share via SMB can access everything.

But, if a Windows user creates or copies files or folders to the share these files/folders are invisible to the Macs. We checked properties on these files and they're set for read/write access to the group the Mac users belong to.

Also, SMB shares won't mount at all (they mounted fine under Win2k). We've tried the various fixes mentioned on to no avail.

So, right now, the only way to get files from windows to Mac is sneakernet.

If you've seen this problem

Vista: what's in a name? August 8, 2005 -- We couldn't resist reporting this response to the naming of Windows Vista by Dr. Joseph Awad, MD:

VISTA is the name the VA Healthcare system has used for it's clinical information system for years (Veterans Health Information System and Technology Architecture).

I am one of a few Mac users at my VA Hospital in a Windows dominated environment. Just imagine the confusion that will ensue when we have to call IT tell them we are having a problem with VISTA.

August 2

Longhorn Server beta shipped. August 2, 2005 -- Microsoft is shipping the first beta of it's Windows Longhorn Server to developers. (eWeek has a story). The successor to Windows 2003 Server will ship in 2007. Microsoft has not named the new server, but said that it would use the same name as the Longhorn client, now called Windows Vista.

(eWeek has a comparison of Windows Vista and Tiger client.)

More on workarounds for Cisco VPN client Tiger problems. August 2, 2005 -- A pair of readers report about workarounds for fixing two different Tiger problems for the Cisco VPN client.

Patrick Scott verified that the AppleScript for fixing the Cisco VPN problem switching networks works:

I used Tiger to do the same thing for the Cisco VPN. I got tired of even flipping over to the terminal, so I just used Automator for a shell script to execute /System/Library/StartupItems/CiscoVPN/ CiscoVPN restart (if memory serves, that's the proper path). Saved it as an app, and now I have a nice little robot on my PowerBook's desktop. Works very well.

Travis Cripps uses a shell script in Terminal to fix an Error 51 problem:

I use a similar shell script that works great. Occasionally, the VPNClient application won't launch, you get an error message saying: "Error 51: IPC Socket allocation failed with error FFFFFFFFFFFFFFFCH".

Anyway, here's a simple fix:

Place the following in your .bashrc or .bash_profile:

function refreshVPN {

sudo kextunload /System/Library/Extensions/CiscoVPN.kext
sudo kextload /System/Library/Extensions/CiscoVPN.kext

Then just run the refreshVPN command in your Terminal. It's probably roughly equivalent to the AppleScript, but I know this works.

VPN Tracker 4.1 supports Cisco completely. August 2, 2005 -- Equinux has released VPN Tracker 4.1, an update to the virtual private network client for Mac OS X, including Tiger. VPN Track supports multiple VPN systems, and is an alternative to the VPN clients from Cisco and CheckPoint, among others.

The new version now fully supports the load balancing function of Cisco’s Concentrator series. Equinux also has a new Cisco Migration webpage.

The VPN Tracker 4.1 update is a free download for registered VPN Tracker 4.x users.

CheckPoint VPN update for Tiger not in the cards for this year. August 2, 2005 -- A source who wishes to remain anonymous told us that CheckPoint would not be releasing a Tiger-compatible version of its virtual private networking client this year. According to our source, CheckPoint is working on a Tiger client, but that the issue is a security issue.

(Equinux says that its VPN Tracker is compatible with CheckPoint VPN systems.)

Updates for two Mac-to-PocketPC syncing solutions. August 2, 2005 -- Two different companies have updated their Mac-to-Pocket PC (Windows Mobile) syncing solutions.

Mark/Space The Missing Sync for Windows Mobile

Mark/Space's Missing Sync for Windows Mobile 2.0 (US$40, upgrade US$20) works with Pocket PC handhelds and Smartphone devices, including Audiovox, i-Mate, Motorola, O2, Orange, Samsung and others.

New features include:

Information Appliance Associates (IAA) PocketMac

Today, IAA released updates to its PocketMac line, which upgrades its Mac-to-PocketPC syncing products for Tiger. The company is also offering a 30 percent rebate for customers who switch from competing products.

The following PocketMac products are available for download:

PGP 9.0.2 update now available. August 2, 2005 -- Yesterday, PGP Corporation released PGP Desktop 9.0.2, a maintenance update that adds support for Windows 2000 Professional, user interface localization, and fixes for a few minor Tiger issues. (PGP Desktop has been Tiger compatible since version

You can read a full list of changes here.

July 2005

July 28

AppleScript fixes Cisco VPN issue. July 28, 2005 -- Vincent Philion of Québec offers an AppleScript to deal with the Cisco virtual private network client for Mac OS X:

Hi, in reference to the CISCO client misbehaving after location switch:

This short AppleScript can avoid the hassle of typing Terminal commands. Compile and save and enjoy. (Just make sure "open application" is pointing at your client app.)

do shell script "SystemStarter restart CiscoVPN" with administrator privileges

tell application "Finder"
open application file "" of folder "Applications"
of startup disk
end tell

If you've tried this

Tiger 10.4.2/InDesign incompatibility not going away. July 28, 2005 -- The number of threads and the web are growing regarding a problem with Mac OS X 10.4.2 that cause Adobe InDesign to crash when one tries to open files on Windows servers from within the application. Apple locked the original discussion at its forums, but users created a new thread here. There is also a thread at Adobe's discussion forum (login required.) The problem does not occur with Tiger 10.4.1 or earlier. No workarounds are known at this time.

If you have any suggestions

A MacWindows reader reports below similar symptoms with the Finder.

Reader reports 10.4.2 file transfer crashes Finder. July 28, 2005 -- Nati Elinson in Israel reports that using Mac OS X Tiger 10.4.2 to copy a file to an SMB volume will crash the Finder. This is not a problem that is being widely reported, but it is interesting in that it bears a resemblance to the problem with Adobe InDesign, described above.

Elinson writes:

Try this to simulate Finder crash:

  1. Create shared folder on Win2000 (P4 1.8GHz, 512MB, Win2000 5.0.2195 + SP4).
  2. Use "Connect to server..." on the Mac (G4, OS X 10.4.2) to connect to this folder: "smb://myWin2000"...
  3. Drag any file from the Mac to this SMB share.
  4. Delete this file from this folder using the Win2000 machine.
  5. Now, if you copy using the Mac the same file again to the SMB share BEFORE the folder contents is being updated with the result of the delete action from the Win2000 machine, then when the copy will end, Finder will crash!

Note 1: This error could not be simulated using OS X 10.3.x.

Note 2: No crash will happen if you use the Terminal to copy the file.

If you've seen this

Suggestion for Tiger and AD network home folders. July 28, 2005 -- Matt Penfield shared with us away with dealing mounting home directories with Tiger using AFP:

I work in a hybrid environment (Macs, Windows, *nix), and needed to come up with a method to allow my Mac users to authenticate to our Windows 2003 domain controller and automount their network home directories. I got this to work in 10.3.9, but couldn't get it to run reliably in 10.4.

When 10.4.2 was released I took another crack at it, and this is what I figured out:

In the Active Directory Users and Computers management tool, I opened up the Properties->Profile tab for two users, one who was able to authenticate and access their network home directory, one who was not. The difference I found was in the syntax of the Home Folder->Connect To path. In the user who was working, I used the syntax \\fileserveripnumber\HOME\%username%. For the user who was not working, I was using the syntax \\fileservercname\home\%username%. When I started messing around with the syntax, I found that using either \\fileserveripnumber\HOME or \\fileserverfullyqualifiedhostname\HOME would work. The syntax for HOME was the sticking point for my environment. I think this must be because we are using AFP as the mounting protocol.

CherryOS web site vanishes, again. July 28, 2005 -- The web site for CherryOS ( has been replaced with an auto-generated page with links to fruit products. CherryOS was a Mac emulator for Windows from a Hawaiian company called Maui X-Stream. The company was the center of a controversy using code from the Open Source PearPC Mac emulator in violation of the GPL license. The CherryOS site has disappeared before, only to reappear later. (See our Mac Emulators for PC page for previous coverage of CherryOS.)

e2Sync bug-fix update for Entourage syncing. July 28, 2005 -- e2Sync Tiger 2.02 is an update for the Mac OS X software that syncs Entourage to Address Book and iCal. The update fixes several issues including:

The update can be downloaded from the developer's site.

e2xo will provide Plaxo syncing for Mac. July 28, 2005 -- Yesterday, e2Sync announced that in August it will release a free public beta of e2xo, which will provide Mac support in August for the Plaxo online contact and calendar service and syncing with Address Book and iCal and iSync-compatible devices. Plaxo updates contacts, calendar, tasks and notes automatically.

For the first time you can sync your contact and calendar info with other Macs and PCs. The company said "e2xo removes the Mac>Mac PC>PC restriction bringing Mac>PC>Mac synchronization, a boon for businesses with a multi-platform user-base."

Direct Palm-to-Exchange Server syncing. July 28, 2005 -- DataViz, Inc. is shipping RoadSync (starting at US $50), software for Palm OS handhelds and smartphones that enables users to sync directly to Exchange Server 2003, using Microsoft's Exchange ActiveSync protocol. The software enables Palm devices to send and receive email, including attachments.

July 25

It's official: Longhorn is "Windows Vista;"
First beta due next week.
July 25, 2005 -- On Friday, Microsoft announced that the next version of Windows, code named Longhorn for several years, will officially be know as Windows Vista. Microsoft also said that the first beta will be issued on August 3. Users, however, won't get their first taste until the second beta, expected some time next year.

Reader confirms fix for Tiger AD Mobile Accounts. July 25, 2005 -- Rick Russell confirmed a workaround to a Mac OS X 10.4 problem with Active Directory Mobile Accounts reported by Sean Lynch. His suggestion had to do with configure SMB with a domain name, not FQDN. Russel said:

I can confirm that this works, and solves the problem of mobile accounts losing the ability to log in locally when disconnected from the AD server.

Apple confirms Tiger ACL problem, according to reader. July 25, 2005 -- Michael O'Lear reports that Apple has confirmed the problem with Access Control Lists not cascading:

I got a response from Apple. They have confirmed the issue. Realistically, they don't anticipate a fix until the next software update.

If you can provide an further info or a workaround to this problem.

Hotfix, Macs hanging w./ Win 2003 Server SP1. July 25, 2005 -- Microsoft has issued a hotfix for the problem of Macs hang while searching Win 2003 SP1 described on our Windows 2003 Reports page. As with most Microsoft hotfixes, you'll need to contact Microsoft to get it.

Fix for AD Win 2000 and Mac OS X 10.4.2 home folder mapping Issue. July 25, 2005 -- Andy Page in the United Kingdom sent us a fix for mapping home folders in Active Directory:

I have been in contact with Apple ref this issue and we have found the solution by accident.

Our Macs are bound to our Windows 2000 Active Directory. Macs will join the domain fine but the home folder mapping would not work.

We found if the time was too far out on the Server where the home folders were, the Mac client would not map the home folder, yet it would work with OS X 10.3.9.

So be warned a lot of the mapping problems could be down to times being correct on the client and server ours was out by 10 min. My colleague Stuart had seen something like this with a windows PC accessing a file share.

We have previous suggestion on this issue on our Active Directory Reports page.

CheckPoint still not Tiger Compatible. July 25, 2005 -- While several developers of virtual private networking clients for Mac OS X Tiger have issued compatibility updates, the Checkpoint VPN client still does not work. David Koretzky reports on the progress:

I wanted to share an email I received from Checkpoint regarding Tiger compatibility. It will be a while longer.

Thank you for your questions sent into our web site. I understand that the new major release OS 10.4 has been out for a while, but at this time we can only securely offer a version for 10.3.9. We are currently testing and working to come out with a secure client for that OS, CheckPoint does not want to release a version that is not guaranteed secure.

FolderShare provides cross-platform file syncing over 'Net. July 25, 2005 -- Byte Taxi, Inc., has released FolderShare 2.5, peer-to-peer file sharing/synching software for Mac OS X, Windows, and Linux. FolderShare can provide automatic and secure folder syncing between platforms, and is aimed at small business and individuals.

FolderShare tracks the status of each files, and automatically syncs files that are changed, created, or deleted. For large files, such as video, FolderShare transmits just the changed parts of the file.

Other features include 256-bit encryption, remote access from a web browser, and support for Iomega StorCenter Network Hard Drives.

Byte Taxi licenses FolderShare 2.5 starting at US $49.95 a year for an unlimited number of computers.

July 21

Tiger-ready ADmitMac 3 now in beta;
Will support Microsoft NTFS, DFS
July 21, 2005 -- Thursby Software Systems today announced that ADmitMac 3.0 is currently in beta testing and will be released in a few weeks. ADmitMac is software for Mac OS X that integrates a Mac into a Microsoft Directory network.

Thursby said that Apple's release of Mac OS X 10.4.2 update fixes the bugs in the 10.4.0 release that had rendered incompatible.

The new version of ADmitMac adds new features, some of which are not included in Tiger, according to the company. The new features include:

InDesign crashes in Mac OS X 10.4.2 on Win networks. July 21, 2005 -- Users at Apple Discussion forums are reporting a problem with Tiger 10.4.2 and Adobe InDesign CS on Windows networks. (See also here.) Users report that InDesign crashes on Mac OS X 10.4.2 when one tries to open files on SMB servers from the application.

If you've seen this problem.

July 20

Mixed bag for 10.4.2 update
Some Tiger problems fixed, other remain. July 20, 2005 -- The Mac OS X 10.4.2 update has fixed some of Tiger's problems with Windows networks, but other remain, according to reader reports. (The problems are reported on our Tiger Reports page and our Active Directory Reports page.)

Apple listed a number of problems Active Directory and other issues as being resolved.

Today we report the following issues:

Readers say 10.4.2 update fixes problem changing AD passwords. July 20, 2005 -- Several readers report that the Tiger 10.4.2 update fixes the Tiger-specific problem of being unable to change the Active Directory password.

Matt Sullivan, who first reported the problem said "10.4.2 has resolved this problem for me. 10.4.1 did not fix this problem."

Alan Brent Stephens:

At a glance, It seems that 10.4.2 may have fixed this issue as well as the issue with cached mobile log ins.

While VPN'd to the office, I attempted to change the password. Instead of a cryptic error I received an error saying that my password did not adhere to the directory's password policies. As I don't care to change my password I left it at that, but it seems as if its actually reading the directory properly for the password information.

Also, I have been able to log in to the mobile account when not connected to the office network or VPN. Hopefully this will last.

Adrian Cooke in the United Kingdom:

I'm been testing 10.4 with our Windows 2000 AD network and I experiencing following problems with mobiles accounts. Most of the problems have been resolved with the latest 10.4.2 update.

However, the update hasn't fixed the problem where my Mac is locking my AD account. This only happens with a mobile account.

NOTE: For the locking password problem, there is a workaround on our Active Directory Reports page.

Startup problem with AD and Open Directory not quite solved. July 20, 2005 -- Brad Anderson reports that the Tiger 10.4.2 update does not completely fix the startup problem with Active Directory and Open Directory. Anderson had previously provided a partial workaround.

I can report that the 10.4.2 update hasn't totally fixed the problem outlined below. What I can say is that things are a “bit” better. I can now boot a machine that is bound to AD, while it is connected to the network, the only problem is that I can not authenticate. (Only a slight problem don't you think? Hehe) If I log in as local administrator and then use the terminal and lookupd to do a “userWithName” query to AD, I can successfully search for users contained within AD. This tells me that the machine is actually “talking” to AD, but not in the way that is needed for authentication.

SMB password error with 10.4.2. July 20, 2005 -- Jason Vaccaro says the Mac OS X 10.2.4 update has not fixes the problem connecting to SMB servers that we have reported with 10.4.0 and 10.4.1:

After installing the 10.4.2 update, I’m still unable to connect to any of the PCs on my network. I can see the Windows 98 machines, but I get a password error when I try to connect to them. My Mac won’t even see the Windows 2000 Machine on my network. When trying to connect using connect to server (smb:// it won’t even make a connection.

With 10.3.9 I never have trouble connecting to PCs. I’m not sure what fixes were applied in 10.4.2, but they didn’t help me any.

10.4.2 doesn't fix problem saving Excel files on server. July 20, 2005 -- Jack Solner can't save Excel files on a server from Tiger. Previous reports have said that an incompatibility with Virex is the problem; turning off Virex fixes the problem. (See our Windows 2003 Server Reports page.) While previous reports mention Windows Server 2003 as the target, Solner sees the problem with Novell:

We're having the same problem at our office. But, we have a Novell 6 server with Native File Access. This problem only occurs with Mac OS 10.4-10.4.2. But, with Office v.X as well as Office 2004 with all the current updates applied.

Tiger Server OD problems with Win Servers. July 20, 2005 -- Angelo Fonte tried replacing Active Directory with Open Directory, but has major problems since Mac OS X Server 10.3.9-through-10.4.2:

Apple still has major problems with OS 10.4.2 Server and integration with Windows Servers. Apple has released some major buggy Server Software in the last 6 months. It started when they released 10.3.9 Server.

Last year we changed our domain controller box from Windows 2003 Server with Active Directory to an X-Serve with Panther Server running Open Directory/PDC. We were running pretty solid on the the X-Serve with OS X 10.3.8 running AFP/SMB/PDC, DNS, and Open Directory. We had Windows 2003 Servers with Oracle DB, MS Sql, and TS, a couple of Windows 2000 Servers and Power Macs and PowerBooks as clients.

This set-up had some glitches due to the loss of Active Directory, but it was functional and virus/spam safe.

Major problems started when I upgraded the Panther Server from 10.3.8 to 10.3.9. First, we lost our Open Directory. Apparently the Apple engineering team decided to make a major Open Directory schema change with Panther Server 10.3.9. Apple even released an article regarding problems with the upgrade and how they suggested to correct it. The article was no help.

Our network was down for a few days as we tried to rebuild. We decided to do a fresh upgrade on the Xserve to 10.4.1 Tiger Server in the hopes that all of the Mac/Windows integration problems would disappear.

We were wrong. We were able to get the network back up, but our Windows Servers (mainly the Windows 2003 Servers) kept losing their connection to the Xserve (Open Directory/PDC). I recently upgraded to 10.4.2 Server and this has still NOT corrected the problem.

We have been a faithfull business supporter for Apple, but enough is enough. We are evaluating our options specifically going back to using AD on a Windows Server to run our Network. Any complex suggestions would be appreciated - we have tried the basics.

ACL problem persists with 10.4.2. July 20, 2005 -- Michael O'Lear reports a problem with Access Control Lists (ACL) not cascading with Tiger. Apple told him that the 10.4.2 update was supposed to have fixed the problem, but may not have.

We found a strange problem in Mac OS X Tiger 10.4.1 with ACL not cascading when the ACL membership is from a Windows Domain.

When a domain user (call him "cray”) and the Domain Administrator’s account are assigned full explicit permissions on the Access Control List, the permissions are cascaded down through the “cray” folder.

When the user “cray” (who is also in the “domain admin” group) copies the “Stuff” folder to the “cray” foldler, just the “Stuff” folder know has altered “Group” and “Everyone” standard permissions. They have changed to “Read Only.”

When a “domain admin” navigates to inside the “Stuff” folder, the “domain admin” know has READ ONLY rights as well. It looks like it is getting the permissions now from the standard permissions and not the Access Control List. (Our domain admin account is identical to our XServe’s local Administrator account.)

(We are trying to use a XServe/XRaid combo to provide Windows share points for our Windows client PCs. The XServe is bound to our Active Directory Windows 2000 domain).

We also found that the share points will on occasion, map to the wrong level--ie. instead of the U: drive mapping to \\XServe\userdata\cray it will map to \\XServe\userdata sometimes for the Windows clients. The share point will also periodically log the user off and on again.

Apple has escalated my issue with ACL not cascading (when the ACL membership is from a Windows Domain). So far they believe that the 10.4.2 update, which was supposed to address this, may not have.

July 18

Apple says Tiger update fixes AD, SMB problems. July 18, 2005 -- Apple says that the long-awaited Mac OS X 10.4.2 update it release last week fixes a number of problems with Active Directory integration and with SMB/CIFS file sharing. Several of the bugs are those that we have been covering.

Active Directory fixes

SMB/CIFS File Sharing

Please how the 10.4.2 update affected your Tiger problems, described on our Tiger Reports page and our Active Directory page.

Another source for the VPC 4.0.2, 5.0.4 Updaters. July 18, 2005 -- We've located another source for the old Virtual PC 4.0.2 and 5.0.4 updaters.

Our VPC 5 Reports page lists two other sources for the 5.0.4 update. The links to both sources still work. We previously reported a source for the 4.0.2 update, but the link isn't working at this time.

New e2Sync version brings Entourage syncing to Tiger. July 18, 2005 -- Last week e2Sync today shipped a Tiger-compatible version of e2Sync 2.0. The utility syncs Entourage Contacts, Events, and Tasks with iCal, Address Book and all iSync-compatible mobile devices, including Palm PDAs and iPod.

Connecting RDC Mac using dynDNS. July 18, 2005 -- Glenn Howes has a detailed, illustrated article describing setting up a home router with DynDNS to access a desktop PC from a PowerBook. He is using Microsoft's Remote Desktop Client for Mac OS X to access Windows applications.

Site Map updated. July 18, 2005 -- We've updated the MacWindows Site Map, which lists current and archival MacWindows pages.

July 9

Tiger AFP case sensitivity: a feature, not a bug. July 9, 2005 -- Todd Barber noticed that when he logged into an AFP file server using Tiger's Connect to Server command in the Go menu, his clients had trouble logging on. The problem did not occur before Tiger. With further investigation, he discovered that the path (afp://server_name/share_name) is now case-sensitive, where it was not with clients before Tiger. Baber contacted Apple about the problem:

...I have received a response back via our SE from Apple engineering that this change was intentional. This is the AFP engineer's response:

URLs have always been defined to be case sensitive. Previous AppleShare clients just were not enforcing that correct behavior until Tiger.

So it was an AFP change in Tiger related to the ability for case-sensitive shares.

This only happens when you put the full path in the URL to the share. When you don't use the proper syntax you get an error.

We remember a time when Apple called AFP case-insensitivity a feature...

Another fix for Cisco VPN connect problem from switching networks. July 9, 2005 -- Gibbons Burke sent an update to the fix he provide for a problem with switching networks with the Cisco VPN Client in Tiger:

There's an easier way to deal with the issue from the Terminal without having to re-install the VPN client, which can be accomplished in two different ways:

sudo /System/Library/StartupItems/CiscoVPN/CiscoVPN restart
sudo SystemStarter restart CiscoVPN

The 'restart' command unloads and reloads the kernel extension.

These commands are documented in the Cisco VPN client user manual.

Fix for disappearing Tiger Server in AD network. July 9, 2005 -- John Holley provided a workaround for the problem of Tiger Sever dropping off of Active Directory networks:

Yes, I have seen this problem. Looking deeper we had some time issues which seemed to screw up kerberos and authentication. In the end I unbound the server for 12 hours and rebound it back to the domain. This seemed to fix the problem.

Jay Ethridge reports seeing the problem:

We have the exact same experience running a clean install of Mac OS X 10.4 upgrade to 10.4.1. Since most users have mapped drives it doesn't make a big difference, but it's really annoying for administrators.

Helios server suite adds support for Xsan. July 9, 2005 -- HELIOS Software announced that its entire server suite, including WebShare, EtherShare, PCShare, ImageServer, PrintPreview, and PDF HandShake are now available for Mac OS X and all now support Apple Xsan. (See the press release.) Xsan is an enterprise-class storage area network (SAN).

HELIOS WebShare provides secure high-performance remote file access and management from a web browser. EtherShare and PCShare provide integrated cross-platform file and print service for Mac and Windows clients. ImageServer, PDF HandShake, and PrintPreview bring great efficiency and advanced capabilities to design, prepress and printing operations. HELIOS products run on powerful a variety of Unix/Linux operating systems.

More Tiger problems with AD permissions. July 9, 2005 -- Lisa Singh in the U. K. writes of Tiger's problem with users' permissions on Active Directory networks:

With Tiger I now have the problem of users having no write permissions on pretty much everything, and I've had to revert to using machine accounts.

Basically I have an Active Directory group called "macusers" and "allow administration by OURDOMAIN\macusers" in Directory Access, but this doesn't seem to work. On my own machine it works when I allow administration by my user account, but for our studio we had been able to hot desk using domain logins in Panther. Allowing administration by a specific account is tantamount to a machine login, really.

I am forcing local home directory on startup disk, but still no joy -- the users can't write anything, not even preferences. I'm stumped.

If you've seen this issue

Workaroud for Tiger AD password problem. July 9, 2005 -- Kirk Rheinlander has a workaround for Tiger problems trying to change an Active Directory account password:

When last the password expired (Tiger showed no forewarning), I called the help desk, and they gave me the new password. However, I could not get the login screen to accept it.

For some strange reason, when I delete the keychain item for the login, the password entry in the login screen worked. Keychain updated with the new password, and I am good for another 45 days (next password reset cycle).

Ben Skelton has some thoughts on the problem:

The first time a user logs on to the Active Directory it determines if they are using the right password and creates a mobile account (which works great when they are disconnected). The only issue is that if the password is changed on the network (through a windows box, etc) the passwords become out of sync. The old password is used to log in to the Mac, and the new password is necessary to access any network resources.

There seems to be a large password synchronization issue here.

Another report of Tiger large file copy problem. July 9, 2005 -- Marc Goodman verified a problem we reported about Tiger freezing when transfering very large files from a Windows server:

We have found that transferring anything larger then 1.25Gb cannot be done when the transfer is initiated via the Mac workstation. You can setup Sharing for windows and pull the file from the Windows workstation.

If you've seen this issue

Comparison of CherryOS and PearPC emulators. July 9, 2005 -- A reader named Tom (no last name given) sent us a report comparing two Mac emulators for Windows, CherryOS and PearPC. There have been allegations that the commercial CherryOS contains code from the open source PearPC. However, Tom says that Cherry OS has features not found in PearPC, but the later is faster:

I tried both CherryOS and PearPC. Whether or not it is true that CherryOS contains some PearPC code, it does appear that CherryOS goes beyond PearPC to some degree. CherryOS has a longer feature list, including support of G4 AltiVec emulation. PearPC does not have AltiVec support, according to its web site. CherryOS also has more integration features with Windows then PearPC.

PearPC has Altivec support since about March this year. It's pretty fast and even faster than CherryOS. Maybe the competition with CherryOS forced some developments that would have taken longer without. Since a week or so, PearPC supports G4 altivec mode with Tiger, which was a problem before due to graphics problems. Some developers working on some kind of graphics acceleration which should boost PearPC performance quite soon.

CherryOS...never such thing like cut and paste with Windows, nor did they ever had sound support... they kinda built in HFVExplorer to access the Mac-harddisk-images.

For my part I have networking up and running with PearPC, set up for filesharing between WinXP host and Mac OS in PearPC in both directions and I set up Windows printing using Samba+Cups so I can print from MacOS to a printer connected to my host-PC.

July 5

Tiger Server disappears from AD network. July 5, 2005 -- Paul Wochnick reports a problem where Tiger Server keeping dropping off of an Active Directory network:

We recently installed a new XServe/XRaid with Tiger Server 10.4.1. We have integrated the Tiger Server into our Active Directory. All users who access the tiger server are authenticated through the Active Directory. The authentication works fine for both Mac and Windows users. We are having a problem with the tiger server disappearing from the network when browsing on the windows side.

When a user browses the network on the windows side the Tiger Server doesn't appear. We can map to a share on the tiger server and also type the address within windows explorer \\tigerserver and users can access it. We have the Tiger Server pointing to our WINS server. The record is there so it appears to be working correctly.

When I restart the samba services the Tiger Server will appear when browsing. But after a few hours it will disappear again.

If you've seen this issue

Another report of Tiger problem changing AD password. July 5, 2005 -- Two more readers report having Tiger problems changing an Active Directory account password.

Alan Brent Stephens:

Same issues here. Annoying, but in our case not critical. Hopefully this will be fixed in an upcoming update, but who knows...

Tor Olsen:

I have recently installed Tiger in my Windows Server 2003 Domain using the AD Util. for testing purpose. When I tried changing the users password I ran into the exact same problem.

I do hope that Apple comes with a fix for AD integration (we do not need to be religious on OS). I also would like Apple to upgrade their AD integration so it can handle signing of communication between server and client, not forcing me to degrade my Domain security. If I were to use AD integration I would consider using some kind of signing of the communication (e.g. IPSEC), to assure not getting into a man-in-the-middle attack.

(See also previous reports of Active Directory problems with mobile accounts on our Tiger Reports page and more AD/Tiger problems on our Active Directory Reports page.)

Another take on LPR gibberish printing. July 5, 2005 -- Brian Scarborough also had problems with LPR printing from Macs. He didn't find the same answers previous readers did. Instead, he found fixes at Hewlett Packard's web site, including and article called Mac OS: Garbage Text at the Top of Multiple Pages.

I read the reports of pages of 1 line gibberish printing via LPR with binary postscript data. We've had the same problem in OS X 10.3.7 from Quark. However, the problem isn't with the protocol, or the binary data. Rather, it's with our HP printers. Basically, we were printing to the wrong queue name. If the printer gets the binary data on the wrong queue name, it doesn't know what it is or what to do with it. So setting up the queue with a binps name, as per this HP document, should work.

(In all honesty, I haven't been able to get our network guys to try this on our Windows print queues yet, but I bet it'll work.)

Yes, the problem is with the binary postscript data. For those printers that don't have a binps queue, I guess the solution is to print with asci data.

Here's an HP page which shows the workaround to go from binary to ascii. I suppose this is necessary for those HP printers that don't support a binps queue.

And there's some more info here.

As far as my $0.02 on this issue, when we are printing to a printer with true PostScript Level 3 via LPR (such as our Xerox 7300 or Canon Colorpass z5100) we never have problems with this issue. Nowadays it's very rare to find an HP printer that supports true Level 2 or 3 PostScript anymore, as they use their own PS emulation. So I suppose they don't make printers that automatically understand binary data for this same reason.

July 1

Guest PC 1.5 speeds file transfer, improves networking. July 1, 2005 -- Lismore Systems has released Guest PC 1.5 (US$70, free upgrade) aimed at improving networking, fixing bugs, improving overall stability, as well as enhancing other features. According to the company, the new version includes these and other improvements:


Windows Enhancements

Your comments on this new version

For previous reports on Guest PC and other x86 emulators for Mac OS X, see our Alternatives to Virtual PC Reports page.

Apani updates Nortel VPN client for Tiger. July 1, 2005 -- Apani has updated its Nortel Contivity VPN Client for Mac OS X (US$95), to add compatibility with Tiger. The new version new requires Tiger 10.4.0 or later.

Fix for Cisco VPN Tiger switching networks problem. July 1, 2005 -- Gibbons Burke has a fix for a problem with the Cisco VPN client running in Tiger:

I have been running into a known issue with the Cisco VPN client Version 4.6.04 (0061) as reported on your site:

• CSCei00630 unity Mac switching networks prevents client connect 10.4.

I think I may have a relatively painless workaround: Re-installing the Client application fixes the problem. I suppose it works by reloading the kext (kernel extension) from scratch. It works until the next time I hop to a new network.

The problem: When I wake the system from sleep when connected to a wireless network, or switch networks, the VPN client will not connect. If I quit it and try to reload, it will not even let the client application launch. If I try the command line I get this :

Could not attach to driver. Is kernel module loaded?
The application was unable to communicate with the VPN sub-system.

TIP" Postscript printing via LPR/LPD. July 1, 2005 -- Santino Rizzo adds to a report earlier this week regarding fixing printing problems via LPR/LPD:

Yvan left out one of the easier solutions when printing binary postscript over LPR/LPD. You can specify the printer's binary postscript LPD queue when you add the printer. For example, HP printers use the queue name BINPS for binary Postscript.

Another reader can't change AD password from Tiger. July 1, 2005 -- David Norris is also seeing the problem with changing an Active Directory account password:

I don't have much to add, other than the same thing happens to me with 10.4.1 and AD. Computer was bound, password expired, changed it on the domain controller and now local computer account only works with original password and it's cache hasn't reflected the current AD password.

If you've seen this issue

Copying large files from Windows XP Pro to Tiger. July 1, 2005 -- Doug Stringham reports that Tiger freezes when copying very large files from a Windows workstation:

We are experiencing consistent hangs when copying large files from a Windows XP Pro SP 2 box to a G5 box with Tiger 10.4.1 installed. We have been trying to move a project containing 40GB of video/animation files from one of our PC's drives.... it varies, but it usually hangs when it is anywhere from 1/4 to 1/2 the way through the task. Finder no longer responds and everything gets sluggish. It requires a reboot to get back in action. We have moved files under 10GB around in the past without any problems... but this is our first move of this size cross-platform.

Our Switch is an 8-port D-Link DGS-1008D Gigabit.

If you've seen this issue

More reports of searching problems with Win Server 2003 SP1 and a workaround. July 1, 2005 -- Several readers responded to our previous report of Macs hanging while searching Win Sever 2003 SP1. Readers report that it occurs with Mac OS X and Mac OS 9.

Robert Minch reports a workaround:

We also are experiencing this same problem with Win Server 2003 SP1. We had Find configured to search visible and invisible items. Once we upgraded, Find would either return no results or hang, in some cases causing a kernel panic on the Mac. Turning off the search parameters would stop the hangs, but searching for anything (1.5tb array) would take upwards of 2-3 minutes before any results were returned.

We have since started to search using the search field at the top of each Finder window. Change the parameter to search the selection and start searching. We found that we get better (faster) results by searching within subdirectories rather than searching from the root of the drive. It isn't perfect, but it does work.

If you've tried this approach (or a variation)

Jim Coyle:

I am currently experience a problem with OS 9 simple file find crashing when searching a Win 2003 SP1 server with 280 gig of storage.

Pekka Mäkinen of Finland isn't seeing frozen Macs but still can't search:

We are using both Mac OS X and OS 9.2 Macs connected with Windows 2003 Server. When searching files with Sherlock form Win server using OS 9.x, Macs get results we have no use. If we search for a file, the result is only a main folder in which there may be several folders and the file we
are searching is in one of those folders. Earlier when using Win 2000 Server we didn't have this kind of problem.

Bryson Arvanitis:

Recently our IT staff has switched our file server from Win 2000 to Win 2003 and now when our Mac clients go to use Sherlock to search the server volumes mapped to them, Sherlock either crashes or freezes their machines, and I have also seen the duplicate listings of the same item appear before it bombs. So I was wondering if you guys knew the problem causing this and would greatly appreciate some knowledge on how to fix it.

For older news see:

2005: | January-June |

2004: | January-March | April-June | July-December |

2003: | January-March | April-June | July-September | October-December |

2002: | January-March | April-June | July-September | October-December |

2001: | January-March | April-June | July-September | October-December |

2000: | January/February | March/April | May/June | July/August | September/October | November/December |

1999: | January/February | March/April | May/June | July/August | September/October | November/December |

1998: | December | November | October | September | August | July | June | May | April | March | February | January |

1997: | December | November | October |

Newer Archived News Page

To search MacWindows, see the MacWindows home page.


| Top of Page |

| Current News (MacWindows Home) | Product Solutions |

This site created and maintained by
Copyright 2005 John Rizzo. All rights reserved.