latest TELA yosemite laptops getting errors that require re-installation of OS

[Ict Manager]

Anyone else having this problem?

users are getting "you do not have permission to" errors. permissions fix, recovery-resetpassword fix both fail, only answer is to do those then a complete re-install of the OS.

It appears to happen after an OS update. And its getting quite annoying. its a two hour repair and i've 25 laptops just in.

[Stephen Moran]

Does the standard Admin login work OK? 

Do a ls -le /Users/ in terminal and check what the permissions are on the home folders, maybe the latest TELA login hook has broken.  A simple chmod -RN /Users/ might fix it.

Stephen

 

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.
To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[flow in]

it seems to be something broken in the group handling - the users lose their membership in the staff group and it cannot be restored. Not a disk permission issue, but rather an OS issue

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

--
You received this message because you are subscribed to a topic in the Google Groups "Techies for schools" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/techies-for-schools/ZK9_29kiDqE/unsubscribe.
To unsubscribe from this group and all its topics, send an email to techies-for-sch...@googlegroups.com.

[Stephen Moran]

Thats quite fascinating, I wonder how they’ve done that.  You’ve looked in the Advanced Options in Users & Groups I take it?

[flow in]

yes. :)

i'm thinking perhaps local dscl database corruption

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

[Keith Craig]

Sometimes reinstalling the latest “Combo” OS update can help fix things if there is an OS problem without resorting to a full OS reinstall.

Are the machines bound to AD?

Use the Directory services command line to check group membership:

In the terminal

dscl localhost 

cd /Local/Default/Groups

read staff ;now note down PrimaryGroupID

Cd /Local/Default/Users

Read <username>

Check group membership here (PrimaryGroupID) compare this to the group ID for staff

Keith Craig BCom PGDipBus(IS) CNE
Systems Administrator 

Phone +64 9 5231060 x843 Mobile +64 (0) 21541549

From: flow in <i...@westlandhigh.school.nz>
Reply-To: "techies-f...@googlegroups.com" <techies-f...@googlegroups.com>
Date: Friday, 6 March 2015 1:45 pm
To: "techies-f...@googlegroups.com" <techies-f...@googlegroups.com>
Subject: Re: [techies-for-schools] latest TELA yosemite laptops getting errors that require re-installation of OS

it seems to be something broken in the group handling - the users lose their membership in the staff group and it cannot be restored. Not a disk permission issue, but rather an OS issue

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I ? T?TOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

On 6 March 2015 at 13:27, Stephen Moran <ti....@ihug.co.nz> wrote:

Does the standard Admin login work OK? 

Do a ls -le /Users/ in terminal and check what the permissions are on the home folders, maybe the latest TELA login hook has broken.  A simple chmod -RN /Users/ might fix it.

Stephen

 

On 6/03/2015, at 1:19 pm, Ict Manager <i...@westlandhigh.school.nz> wrote:

Anyone else having this problem?

users are getting "you do not have permission to" errors. permissions fix, recovery-resetpassword fix both fail, only answer is to do those then a complete re-install of the OS.

It appears to happen after an OS update. And its getting quite annoying. its a two hour repair and i've 25 laptops just in.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.
To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to a topic in the Google Groups "Techies for schools" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/techies-for-schools/ZK9_29kiDqE/unsubscribe.
To unsubscribe from this group and all its topics, send an email to techies-for-sch...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Alistair Baird]

Are you trying to install it on a domain? Have just configured up 4 new Tela Apple Mac Air's no problems, but we don't try and join a domain.

Alistair Baird

IT Manager

St Peters College 

p 06 354 4198

m 021 990 259

e bai...@stpeterspn.school.nz

[flow in]

ok.

the user was not in the staff group. i used dseditgroup to add them but it didn't help. my working admin user is not in the staff group either, so its not that.

the users are OD network users - not AD. i think that might have something to do with it. Next step is deleting the user and trying to re-create them

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

On 6 March 2015 at 14:02, Keith Craig <kei...@dilworth.school.nz> wrote:

[Keith Craig]

Try running dscl against the LDAP directory from the client machine – compare the group settings for the staff group.

Keith Craig BCom PGDipBus(IS) CNE
Systems Administrator 

Phone +64 9 5231060 x843 Mobile +64 (0) 21541549

From: flow in <i...@westlandhigh.school.nz>
Reply-To: "techies-f...@googlegroups.com" <techies-f...@googlegroups.com>
Date: Friday, 6 March 2015 3:40 pm
To: "techies-f...@googlegroups.com" <techies-f...@googlegroups.com>
Subject: Re: [techies-for-schools] latest TELA yosemite laptops getting errors that require re-installation of OS

ok.

the user was not in the staff group. i used dseditgroup to add them but it didn't help. my working admin user is not in the staff group either, so its not that.

the users are OD network users - not AD. i think that might have something to do with it. Next step is deleting the user and trying to re-create them

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I ? T?TOU HAERENGA - NAVIGATING OUR JOURNEYS

[flow in]

the user appears normal.

i've noticed that "enable parental controls" is ticked, and will not stay unticked. 
trying deleting user, disconnecting from directory, reconnecting and re-creating.

On 6 March 2015 at 15:55, Keith Craig <kei...@dilworth.school.nz> wrote:

PGDipBus

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

[Kevin Whelan]

Ive had it and it was always because the user home folder permissions get screwed up in yosemite

There is a home folder reset routine if you boot into Recovery.

Once booted, Open Terminal from the Utilities menu.

Type resetpassword and hit return.

Select your hard disk, then the user.

Click the Reset Home Folder Permissions and ACLs button.

Quit the utility and restart.

this has always fixed it for me,And once I also had to delete their logon keychain and let the system remake it fresh

definitely yosemite bug, and gets really confused if your using any sort of network home folder but does happen on the local home too

[flow in]

tried the resetpassword trick. no luck

it was parental controls. The (network) user had ended up with parental controls turned on, which could not be turned off, to start with. By changing the controls, then rebooting, The option to disable them then re-activated. A really simple fix. 

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

--