[klombard]

i’m actually having the same difficulty. i was trying, as a test, to add CyberDuck to the exception list (“trusted application”), here’s my output:

——
bash-3.2$ sudo ./socketfilterfw -t /Applications/Cyberduck.app/Contents/MacOS/Cyberduck
Password:
adding /Applications/Cyberduck.app/Contents/MacOS/Cyberduck to the list of trusted applications
GetSignException: creator ‘BNUp’
GetSignException: creator ‘BNu2’
GetSignException: creator ‘SWar’
GetSignException: creator ‘StCm’
GetSignException: creator ‘Dbl2’
GetSignException: creator ‘PJ03’
GetSignException: creator ‘PJ07’
GetSignException: creator ‘FP98’
—-

and it just freezes, i have to ctrl+c out of it. am i missing something, like shutting down the firewall first? has anyone seen this error? it’d be super handy in my environment to be able to add firewall exceptions remotely.

[klombard]

I’m having a similar issue, actually. I go into WGM, click on the “target”, select “ComputerLists” from the drop-down, and select “create new record” and I get a “Not Authorized” error (This action failed because you are not authorized to perform the operation). I should note that I received this method from the online seminar Tim Perfitt did on managing OS X machines with AD schema extensions. I should also note that this method worked successfully in the past, with the same credentials I’m using now.

I am, however, able to create a new computer list via dscl, using the same credentials. This is in a test domain we’ve got setup (2003 functional level), and I’ve got a Windows administrator looking at it right now. He mentioned that DNS isn’t exactly working properly on the server, and is looking into it.

So I guess my question is what does WGM use that dscl doesn’t that’d make this not work through WGM? I could see if WGM was using Kerberos, and maybe certain kerberos SRV records are missing from DNS…I don’t know. Anybody see this before?

[klombard]

[QUOTE][u]Quote by: MacTroll[/u][p]Most updates get picked up fairly quickly. Are you looking for peace of mind for some way to force this? Or have you actually seen changes not take for a while?[/p][/QUOTE]

both, really…i have a user group preference, for instance, to disable cd/dvd preferences in System Preferences. it won’t update unless i logoff/login. are you saying it should just get pushed down without having to log back in?

[klombard]

it appears that there was a way to do this in tiger by restarting mxcd.app (/System/Library/CoreServices/mxcd.app -f) – but that doesn’t appear to exist in Leopard (both client and servers are 10.5.3…i should have specified that). Anybody know if / what the equivalent is in Leopard?

[Author]

Posts