GoToMyPC - Access Your PC from Anywhere
Control a PC from a Mac over the Internet


MacWindows News Archives

News from January 2005 through June 2005


 

 

 

 

Most recent news first.

June 2005

June 29

Microsoft updates Virtual PC for Tiger. June 29, 2005 -- Yesterday Microsoft released Virtual PC 7.0.2, a free update to the PC emulator aimed at compatibility with Mac OS X 10.4 Tiger. The company said that the update fixes the three compatibility problems with when running in Tiger:

Microsoft also said that it was offering a $30 rebate for new purchases of Virtual PC 7 before September 30, 2005.

See our Tiger Reports page for previous reports and suggestions for Tiger compatibility problems.

TIP: Fix for "garbage printing" from LPR/LPD or IP. June 29, 2005 -- Yvan Rodrigues sent us a link to an article he wrote about a problem with Macs printing to non-AppleTalk printers.

I have put a lot of work into this problem. I support about a dozen Apple clients in a heterogeneous environment with a Windows 2000 server. I have written an article on the problem and have several solutions, including a print processor that I have written that installs on the server and transparently converts the binary to ASCII.

He describes the problem in his article:

When printing from a Macintosh to a printer using any AppleTalk method such as LPR/LPD, IPP, Rendezvous, USB, etc., certain files will result in many "garbage" pages being printed, each one usually having a line or several lines of random characters.

Rodrigues saw a description of the problem in our old archived pages, Windows NT Unsolved Mysteries. The problem report was called LPR (TCP/IP) Printing problem from Mac OS through an NT Queue, and dates from December of 1998. My how time flies...

TIP: fix for Cisco VPN "firewall mismatch" errors. June 29, 2005 -- An anonymous reader sent in a type about an error he fixed with the Cisco VPN client and Mac OS X 10.3 Panther:

I couldn’t use Cisco because I kept getting ‘firewall policy mismatch’ errors preventing connection with Cisco VPN Client 4.0.2 to a corporate network.

It turned out that this error is a fairly common error, according to a Cisco engineer. This occures with the Mac client and the VPN concentrator when the concentrator group is set to "Require Firewall" on the connecting host.

This function (“require firewall”) is available on the Windows VPN client software, but not the Mac client! The VPN concentrator setting (if you’re a network Admin, configuring your VPN concentrator) is located here:

Configuration/user management/groups <edit>
Client FW tab
Firewall setting

Ways Admins can fix this:
1. DO NOT require the VPN group to "Require Firewall"
2. Create a new group for your Mac users (this is the most popular answer)

I asked the Cisco engineer if he would recommend adding the function to the Mac client software; he (himself a Mac user) replied sympathetically that it was WAY down on their list of priorities; all we can do is hope for some future release.

Partial workaround startup problem with AD, OD and Tiger. June 29, 2005 -- Brad Anderson has the same startup problems we reported last week regarding clients using both Active directory and Tiger Server's Open Directory. He told us how he is dealing with it:

I too am having the same issue, I can not bind any Macs running Tiger to AD and OD. I’ve tried 3 separate Macs with clean installs and they all stop while trying to boot. One of them being my PowerBook! To fix the problem, I had to unhook the machine from the network, boot, (they will when not connected to the network) then log into the local administrator’s account and then delete the contents of the /Library/Preferences/DirectoryService folder, then restart. This allowed the machines to boot and use ONLY the local user accounts.

If you've seen this issue

See our Active Directory Support page for previously reported problems and workarounds reguarding Macs and Active Directory.

Tiger AD issue: reader unable to change domain password. June 29, 2005 -- Matt Sullivan reports a problem with an inability to change his Active Directory domain account password:

I'm running a new install of Tiger on my laptop which is bound to our Active Directory. I'm a domain admin and my credentials were not properly set. My account was not set up as an admin account. That's minor compared to my next issue. I seem to be unable to change my password for my domain account.

We have security policies which require us to periodically change our passwords. I am given the warning from the Kerberos Agent that I have so many days before my password expires. That is a nice new feature.

10.4.1 did not fix this problem. I let my domain password expire and was able to log on to my Mac with the old one. I am also unable to change my domain password using the Accounts system preference. This is consistently repeatable. I can change my domain password with the Kerberos utility, however the change is not recognized by my Mac for local log in. The only way I was able to change my AD bound local password was the command line.

If you've seen this issue

Thinkfree Office, MS-compatible suite, goes web and free. June 29, 2005 -- ThinkFree, Inc. announced yesterday that it was beta testing an online version of its ThinkFree Office for Windows (US $50), a Microsoft Office-compatible suite. The new online site, called ThinkFree Office Online, will be a free cross-platfrom service available to Windows 98/2000/XP, Mac OS X 10.3/10.4, Linux Fedora Core 3, Redhat Linux 9, and Haansoft Linux Workstation 2005. The service will enable users to edit any Word, Excel or PowerPoint file and will provide 30 MB of storage, with more available for purchase.





June 24

CodeWeavers will help developers port Win apps to Intel Macs. June 24, 2005 -- CodeWeavers Inc. announced on Wednesday that it will offer software porting products to help developers bring Windows applications to next year's Intel-based Macs. CodeWeavers CrossOver technology provides Windows-to-Linux porting software for developers and allows Linux/Intel users to run Windows applications natively on Linux. The company said that users of x86-based Macs who use CrossOver Office will be able to run a wide range of Windows software, including games, which generally don't run in emulators such as Virtual PC.

Earlier this week, we reported that Apple won't prevent Windows from running on its x86-based Macs.

Reader says iEmulator 1.7.6 is slow going. June 24, 2005 -- Kenneth Conrad D' Souzas sent in a report about iEmulator 1.7.6, an x86 emulator for Mac OS X.

I am absolutely baffled with what I saw on my iMacG5/1.8Ghz/2GB memory compared to what they say on their web site. It's as if they are exaggerating through the roof about it's performance...

Windows 2000 is so slow it's utterly unusable, and that's after allotting 1Gbyte of RAM to Windows 2000. I have written to them asking them to explain the disparity between their great comments/description on their site and what I see on my Mac.

You can find previous reports on iEmulator and other x86 emulators on our Virtual PC Alternatives page.

Reader verifies, clarifies fix for Tiger SMB printing. June 24, 2005 -- Chuck White verified a solution we posted earlier in the week regarding problems printing to SMB printers on Active Directory:

Your article today called One more workaround for Tiger/AD/SMB printing problem has finally solved my Tiger printing problem! I have a dual G5 running Tiger and I’ve been trying to print to a Xerox 8160 large format printer which is being shared on a workstation running Win XP Pro. I re-added the printer using the suggested smb://DOMAIN\User:Password@Servername/Printqueuename and the print job worked fine.

A couple of small clarifications on the instructions: My Mac doesn't have an Alt key, I held down the Option key when clicking the Add button and then also Option clicked the More Printers.... button on the next screen. The posted instructions omitted that next you need to pull down the top menu to Advanced, set the Device menu to Windows Printer via SAMBA, I set the Device Name: to 8160 and entered the Device URL: as instructed by your article and finally specify the Printer Model. This worked well and should eliminate my need to boot on a 10.3 partition.

Solution to smb.conf issue with SMB. June 24, 2005 -- Randy Syester responded to a report earlier in the week about altering the smb.conf file on the Windows server to get SMB file sharing to work with Tiger:

At the beginning of the smb.conf file, add an include line that points to a separate file. Not sure if you can do something like this for each file share, but we do it in the local section. Below is a snippet of something we do here. The changes in my_smb.conf aren't touched by the workgroup manager, and WM doesn't touch the include line.

top of the smb.conf file
[global]
include = /private/etc/my_smb.conf
/etc/my_smb.conf
[global]
restrict anonymous = 1
local master = no

Win 2003 Server SMB. June 24, 2005 -- Matthew Egan of Australia describes how he connects his Tiger Mac to a Windows 2003 Server via SMB:

When trying to connect to a Windows 2003 Server via a Mac running 10.4.1 using SMB - you might get the following error message: "The alias [SERVERNAME] could not be opened, because the original item cannot be found."

Connecting to a Macintosh share on the server works fine and printing to any print queues on the server works OK - it's just not able to connect to any shared folders via SMB.

If you have a look at your system log you will see the following error message:

Jun 22 14:42:39 PowerBook kernel[0]: smb_smb_negotiate: server configuration requires packet signing, which we don't support

Jun 22 14:42:39 PowerBook kernel[0]: smb_smb_negotiate: server configuration requires packet signing, which we don't support

The issue is that a Windows 2003 Server by default makes clients attempting to authenticate to them, use SMB packet and secure channel signing. Unfortunately Samba under 10.4 does not support this. You will need to turn off this feature on the Windows 2003 server. I had to restart the Windows Server for the digital signing setting to take affect.

You can find a Microsoft tech article on how to change this.

I search high and low on the net for any info like this and found nothing.





June 21

Apple won't prevent Win from running on Intel Macs. June 21, 2005 -- eWeek quoted an Apple executive say that Apple will not prevent Windows from running on it's upcoming Intel-based Mac hardware. Developers had been speculation on whether Apple would block Windows from running. The eWeek story also quotes the Apple spokesperson saying that the company would not sell Windows or provide support.

MacTech offers free samples of cross-platform and tech info. June 21, 2005 -- MacTech magazine is providing a free PDF file with 167 pages of technical information, including some cross-platform articles. The MacTech Sampler contains articles with such titles as Active Directory, Integrating Entourage and Mail with Exchange Server, Terminal.app Tricks, and articles on programming techniques.

MacTech Magazine covers topics for IT professionals, enterprise network administrators, Mac developers/programmers, and technically inclined users. It was founded in 1984 shortly after Apple launched the 128k Macintosh.

Problems with Win client access to Tiger Server via AD. June 21, 2005 -- Two readers report problems with Windows clients, Tiger Server, and Active Directory.

Win clients locked out of Tiger Server/AD

Gavin Walsh has workaround to a problem with Windows clients accessing Mac OS X 10.4 Server. Unfortunately, the workaround needs to be repeated often:

I have a Tiger Server with Windows and Mac clients authenticating their access to it via an Active Directory. Every time I use the Workgroup Manager to change permissions and save it, our Windows computers can no longer access the share points on the server. The work around for this is to comment out "auth methods = guest opendirectory" and restart windows file services. Users can then access their share points on the server.

This is a problem as every time you change a permission on the server via the Workgroup Manager you need to go back in to the smb.conf file and re-comment out the line as the server overwrites it when you save your changes from the workgroup manager and restart windows file services (users then get disconnected from the server).

Is there any way to keep the commented line in the smb.conf file?

If you know an answer

Startup problem with AD and Open Directory

Justin Andrews reports problems with clients using both Active directory and Tiger Server's Open Directory:

We're having startup problems with clients that are connected to both Microsoft Active Directory and Mac OS 10.4 Tiger Server Open Directory. If a client is configured to connect to both it has startup problems and won't startup (stays at blue screen with grey loading circle).

I configured 3 computers to connect to the Open Directory only, 3 computers to connect to the Active Directory, and 3 computers connected to both.

The 6 computers connected to only one directory worked and started up fine, the other 3 had random startup problems.

If you've seen this issue

Macs hang while searching Win 2003 Server SP1. June 21, 2005 -- Matthias Wengenroth reports that since upgrading Windows 2003 Server to Service Pack 1, the Macs lock up when searchin the server:

We have a Windows 2003 Server with 1TB HDD and all project files on it. Clients run Windows XP SP2, Mac OS 9 and OS X. All works fine using file and print services for Mac (provided by Win2003). Users can search the share and access the files.

Since updating Win 2003 Server to Service Pack 1, all of the Macs, but OS X and OS 9, crash or hang while searching a share with Sherlock or Spotlight.

Access of files is OK (Win and Mac). Searching the share with Win XP is also works.

Uninstalling SP1 solves the problem. But this is not a long time
solution.

If you've seen this issue

One more workaround for Tiger/AD/SMB printing problem. June 21, 2005 -- Dirk Maas found another workaround for the Mac OS X 10.4 Problems printing to SMB printers on Active Directory.

We have several Tiger 10.4.1 Macs in our SBS 2003 Windows 2000 Domain using Kyocera KM2030 and JetDirect attached HP LaserJet 6P.

Following the "SBSMacDoc" guidline helped a lot successfully joining the domain and accessing Exchange Server with Mail.

We too, have an "NT_STATUS_ACCESS_DENIED" Error. I tried setting up Domain Printers manually (holding Alt before clicking on "Adding more printer") using the Authentication that works for SMB Shares:

smb://DOMAIN\User:Password@Servername/Printqueuename

The job now leave the clients and printers even wake from sleep, but still, they do not print.

I'm not sure, what did the trick. We installed Unix Printing Services on the Server and set up Windows Printing on the Mac Clients, which brings up the Authentication Box after choosing the PC. One then can access the list of installed Printers on that Box. This is still not AD Printing, but it is a workaround until Apple fixes the problem.

Mac Explorer upgraded for Tiger. June 21, 2005 -- Rage software has released a maintenance upgrade to its Windows-like tabbed file browser/manager, Macintosh Explorer 4.3.5(US $16, free upgrade). The update improves compatibility with Mac OS X 10.4 (Tiger) and includes bug fixes.

PDF2Office 2.0 updates conversion utility. June 21, 2005 -- Recosoft Corporation has released PDF2Office Personal v2.0 for Mac OS X ( US$59), a plugin for Microsoft Word X and Word 2004 that will open and convert PDF documents to editable Word files. The company says that the plugin recreates the formatting of the original PDF document, including columns, styles, placement of graphics, tables, and headers/footers.





June 16

Another Cisco VPN Client update for Tiger. June 16, 2005 -- Cisco has release it's second post-Tiger client, version 4.6.04. The update address these issues:

  • CSCeh90822 unity Mac dual proc panic in 10.4
  • CSCeh92574 unity Mac 10.4 AFP panics kernel
  • CSCeh93569 unity Mac will not quit or disconnect on 10.4 no traffic
  • CSCeh93719 unity Mac profile name rejects spaces
  • CSCeh95185 unity Mac help file not found
  • CSCeh96683 unity Mac 10.4 quit disconnect with no default domain name

There are still some problems:

  • Unresolved Issues

    CSCeh90939 unity Mac rekey failure with 10.4
  • CSCei00630 unity Mac switching networks prevents client connect 10.4
  • CSCei11378 unity Mac error 47: failed to load ipseclog.exe
  • CSCeh93891 unity Mac GUI many split tunnels will not pass traffic 10.4
  • User must have SmartNET login with Encryption entitlement to access software.

VPN Tracker 4.0.2. June 16, 2005 -- Equinux has released VPN Tracker 4.0.2, an update to the VPN client for Mac OS X. Among the improvements:

  • Improved keychain handling for XAUTH
  • Fixed and improved several Remote DNS issues
  • Allow certificate signing requests to have an unlimited validity in demo mode
  • Fixed several Smart VPN issues

e2Sync, Entourage syncer, updates for Tiger. June 16, 2005 -- e2Sync Tiger is now available for syncing Entourage contacts, events, and tasks with iCal, AddressBook and all iSync compatible mobile devices. The new version addresses compatibility issues with Mac OS X 10.4 and provides syncing by category or by individual contacts.

Entourage Email Archive adds Tiger features. June 16, 2005 -- Softhing has released Entourage Email Archive X 2.2 (EEAX), a new version of the utility for archiving Entourage X emails and attachments. New features include:

  • Tiger compatibility
  • Searching from Spotlight
  • Fixed tab text file export under Tiger.

Reader: SMB fix for 10.4.1 works--almost. June 16, 2005 -- Amelia Lacenski tried the password workaround for Tiger's SMB problem but was only partially successful.

I am one of many who can no longer connect to a Windows server via Samba. I tried the Apple Knowledge Base fix at and read the advice of many MacWindows readers. I'm writing in response to Travis MacDonald's question: we have had some partial success getting to my school department's file server, but haven't successfully logged in yet.

Previously I connected to the server by getting onto the department's VPN and connecting to smb://share.server.domainname.edu, then supplying the username and password.

After "upgrading" to 10.4.1, I took the following steps:

  1. Set up the /etc/nsmb.conf file as in the knowledge base article
  2. Log on to the VPN as usual
  3. Connect to smb://server.domainname.edu/share via the Finder's Connect to Server window

This gets me as far as the SMB/CIFS File System Authentication dialog box, which is a big improvement over the infamous "Error code -36." The correct domain was already supplied in the Workgroup/Domain field. I then tried supplying the usual username and password, and the error returned is "Could not connect to the server because the name or password is not correct." I tried it several times to rule out typos, but it still insists that the username/pass are incorrect.

Hopefully someone who reads MacWindows knows the problem behind this new behavior.

If you are one of them





June 15

PC-Mac-Net 4.6 handles resource forks for Internet file sharing. June 15, 2005 -- Reports PC-Mac-Net FileShare v4.6 offers enhanced Internet file sharing

Lava Software has released PC-Mac-Net FileShare v4.6 (US $25, free upgrade), a new version of the cross-platform file sharing software that works with Mac OS X, Windows, and Linux on local networks and the Internet. Amoung the new features include:

  • You can now transfer Mac resource forks to and from Windows and Linux
  • Faster and more reliable connections for Internet file sharing
  • An automatic firewall test
  • Now displays the amount of free disk space available for incoming files

CADs move toward Mac. June 15, 2005 -- Ten years ago, IMSI discontinued TurboCAD for the Mac. The company has now announced a return with a new version for Mac OS X. A Publish story describes why the company decided to reenter the Mac market.

Autodesk Inc., has released Autodesk DWF Toolkit, a software development kit that enables developers to create applications that read, write, view, print and query DWF files. For the first time, this version supports multiple operating including the Mac OS X and Linux.

The Tiger SMB problem under 10.4.1. June 15, 2005 -- We have several more reports on Tiger's problem accessing SMB servers, this time with version 10.4.1. Previously, readers offered workarounds, including one stating that the problem is related to password encryption.

John H Fallavollita reports that he can connect by using the NETBIOS name:

My SMB issue was resolved based on how I put the name in. If I fully qualified the DNS name it did NOT work. However if I use the NETBIOS name it works fine. For example SMB://server.domain.com/share wouldn't work but SMB://server/share works fine. This is after clearing the keychain (though I had nothing stored in the keychain.)

I've only tested this in 10.4.1.

Pedro Gelabert found the problem with Win 2003 Server:

Well, I have followed your site's workaround to get SMB mounting on Tiger. I have found that using 10.4.1, the drives I can connect are all in Windows 2000 servers. The drives I cannot connect are in Windows 2003 servers. The failure lies in the authentication of the password:

> spnego_parse_auth_response failed at 9
> Failed to parse auth response
> SPNEGO login failed: Unexpected information received
> session setup failed: SUCCESS - 0

Apparently a bug in Windows 2003 servers prevents the correct handling the request of spnego encrypted passwords, and defaults to kerberos. .

Use the command:
smbclient //shared/directory -W workgroup -U username -d4
The -d4 prints logs of the steps of the connection

In one case, I was able to mount on the terminal using smbclient to a Windows 2000 server shared drive, but not in the Finder. I am not sure if this drive is in a Windows 2003 server but with a flag of Windows 2000 server compatibility.

A co-worker in the Windows 2000 server workgroup can mount the same drives that I cannot mount. So this problem must be dependent on the version of the server (2003 vs 2000) and the encryption method.

Do I have to build kerberos and add this to my settings? I spent quite some time with AppleCare. They were very nice and tried to help, but it was way beyond their scope. They even pointed me to that samba.org web site and this problem.

I have unsucessfully tried
smb://WORKGROUP;USERID@server/share
smb://WORKGROUP@server/share
smb://server/share

What's weird is that some mount on terminal, but not on Finder, and vice-versa. Sometimes, one will mount one day, but not another day.





June 7

Apple Goes Intel
Jobs says OS X has been bi-platform from the start

By John Rizzo
June 7, 2005 -- Apple CEO Steve Jobs has put to rest years of speculation: Apple will put Intel processors inside Macs.

Addressing developers at Apple's annual Worldwide Developers Conference, Jobs said that Intel-based Macs running Tiger will appear within a year, and that the transition from Power PC to Pentium 4 would be complete within two years. He indicated that performance, particularly for PowerBooks, was a big factor.

Jobs also said that was that for every version of Mac OS X from version 1.0 to Tiger, Apple has had a working Intel-based version. (The fact that Apple was able to kept this secret since 2001 is almost as surprising.) Jobs said he ran all of his WWDC demos with Tiger compiled for a 3.6 GHz Pentium 4.

Intel CEO Paul Otellini referred to Apple as "the world's most innovative computer company," a statement that seemed to take Apple's rivalry with Microsoft and Dell.

MacIntels and emulators

A technology called Rosetta will run PowerPC apps on Intel-based Macs. Apple said that Rosetta won't be like Classic; users won't notice they are running Rosetta.

After the Jobs keynote, an Apple engineer told MacWindows that Rosetta is not an emulator, but is rather an "emulating dynamic translator." The difference is that Rosseta doesn't emulate a PowerPC processor, but translates only those parts need by PowerPC Mac software, and only when needed.

Intel-based Macs won't run Windows software natively, so Microsoft's Virtual PC will still be required for users who need to run Windows software on a Mac. But Apple's move to Intel could eventually help VPC users. Without the need to emulate an Intel processor, Virtual PC could theoretically be rewritten to run quite a bit faster than it does today, using the Mac's native Intel processor and graphics hardware.

Tiger on Dell?

The flip side to Windows on a MacIntel is the concept of running Tiger on a Dell or other PC. Presumably, Apple would want to prevent this to protect Mac hardware sales, but it was not known from attendees and Apple engineers how this would be accomplished.

One technical barrier could be the so-called Endian, or byte-order problem, which refers to the fact that Intel and Macs traditionally arrange bytes in opposite orders.

The Endian problem is also an issue for Mac software developers. To address the problem, Tiger is shipping with SQLite. Bertrand Serlet, Apple's Senior Vice President of Software Engineering, said that use of SQLite solves the Endian problem.

Platform-independant Mac Apps

Developers will be able to create platform-independent software that will run on both Intel-based Macs and PowerPC Macs. (Apple is referring to platform-independence of Mac OS X applications as being "universal.") Developers of Cocoa applications will be easier to become universal than Carbon applications. Apple said that Cocoa apps will only require minor tweaks and a recompile.

Carbon applications will require more substantial changes to become Universal. The two biggest sets of Mac software, Microsoft Office and Adobe Creative Suite, are made up entirely of Carbon applications. Both companies expressed support for Apple's decision, but Intel-based Macs could mean big changes for Microsoft's Macintosh Business Unit. Does this mean that Mac BU will add native Exchange support to Entourage? Microsoft was not available for comment.

Developer reaction

Although the audience of 3500 developers at the WWDC keynote cheered Jobs when he came on stage, the initial announcement that Apple would abandon the PowerPC was met with silence.

Afterwards, the reaction was mixed. Many developers thought that the use of Intel processor would bring down the cost of Macs, and therefore sell more of their software.

Others were annoyed that Apple is requiring another major development transition only 4 years after Mac OS X was introduced.

"This will help Apple, but at great cost to developers, and little benefit to our customers," said one developer of cross-platform software who wished to remain anonymous.

"We won't know what's in it for developers for three years," said Mark Alldritt of Late Night software. "The worse part is that I'll be dragged kicking and screaming from Code Warrior."

Ports to Mac-Intel platform will require Apple's Xcode 2.1 and later; Metroworks code Warrior will no longer work.

Apple to release OS X 10.5 at Longhorn release. June 7, 2005 -- Apple announced yesterday that it would release Mac OS X 10.5, code named Leopard, at the end of 2006. Apple CEO Steve Jobs indicated that the release would coincide with the release of Microsoft's Longhorn, the long-awaited next generation of Windows.

Apple releases QuickTime 7 for Windows preview. June 7, 2005 -- At WWDC yesterday, Apple announced that is shipping preview releases of Quicktime 7 Player for Windows (free) and QuickTime 7 Pro for Windows (US $30). Apple will release final versions this summer. Like QuickTime Pro for Mac, the Windows version supports the H.264 high-quality video standard, as well as 24 channels of audio.





June 2

Microsoft will support new Office file formats on Mac OS X . June 2, 2005 -- Microsoft's Mac Business Unit said that it will support the new Office for Windows XML file formats in a future version of Office for Mac. Today, Microsoft announced that new Office XML Open Formats will be the default formats for Office 12.

A Microsoft spokesperson said "the Mac BU continues to partner closely with Windows Office to ensure seamless cross-platform compatibility. The Mac BU will support the new file formats and work to enable forward compatibility with future Office releases."

An eWeek report describes the new Office XML Open Format as requiring converters for the current .doc, .xls, and .ppt formats.

The Microsoft spokesperson described the new formats:

The Microsoft Office XML Open Format is based on an open standard with a
royalty-free license that is broadly accessible to any technology provider.
The Mac BU will provide Office for Mac users with the ability to take advantage of benefits of the new file format and container technology, which will include easier recovery of corrupted documents, improved security and smaller file sizes.

Apple acknowledged Tiger SMB problem while denying it. June 2, 2005 -- Garrett Kline points out that Apple posted a Knowledge Base article describing the problem of Mac OS X 10.4.x not being able to access SMB servers. The article is dated May 5, the same day that an Apple spokesperson told us that none of their customers had reported the problem.

The Apple article describes the -36 error and states that the cause of the problem is related to password encryption, as reported by MacWindows readers.

This error can occur if your Mac OS X 10.4 client is trying to connect to a Samba or Windows (SMB/CIFS) server that only supports plain text passwords...Unlike Mac OS X 10.3, the Mac OS X 10.4 SMB/CIFS client by default only supports encrypted passwords.

The article also explains how to set Mac OS X to use plain text passwords. The procedure involves shell commands in the Terminal application.

Fix for Cisco VPN and Tiger 10.4.1. June 2, 2005 -- Laurent Taupin of France offers a fix for the Citrix VPN problem with Mac OS X 10.4:

I had the same problem after an upgrade to 10.4.1 from MacOS 10.3.9.

After a call to Cisco support, a workaround is available with this command (in this case, PIX firewall is tunnel terminating):

vpngroup <group_name> default-domain <domain_name>

With this command, all it's okay.

If you've tried this fix

iEmulator 1.7.6 accesses Mac files from Windows. June 2, 2005 -- iEmulator has released version 1.7.6 (US $24, free upgrade) of its PC emulator for Mac OS X as a free upgrade. The new version allows users to access Mac OS X volumes, folders, and files from Windows.

See our Alternative PC Emulators page for our previous reports on non-Microsoft PC emulators for Mac OS X.

Readers verify that VPC 5 works with Tiger. June 2, 2005 -- Two readers verified last week's report that Virtual PC 5 will run in Mac OS X 10.4, despite it having serious incompatibilities with Panther.

Vince Cammarata:

Virtual PC 5.04 indeed does work on Tiger. After having to boot into OS 9 for the few times I needed to convert some embedded Kaleidagraph files in Word docs, I find that I no longer need an OS 9 boot volume. Tiger runs VPC just fine. I wonder what got "fixed?"

Rob Rohan:

Yes, VPC 5.0.4 works well in Tiger. I run XP, 98 and Debian on it and it works surprisingly well. I've also just got VPC7 which works too (aside from the non Virtual Switch, which is a pain).

If you've tried to run Virtual PC 5.0.4 in Tiger





May 2005

May 26

Lismore releases Tiger update for Guest PC. May 26, 2005 -- Lismore Software Systems has released Guest PC 1.4 (US $70, free upgrade), a new version of the x86 emulator for Mac OS X that adds compatibility with Apple's Tiger operating system. In addition to the ability to run Windows, the new version enhances the Setup Assistant with help in installing Linux and Unix. Guest PC 1.4 also includes localizations for German, French and Italian.

Lismore said that version 1.4 also includes some bug fixes, including networking and printing in Tiger, handing of DVD images, and Ethernet card and video output problem in Linux.

For more on Guest PC and other alternatives to Virtual PC, see our Alternative PC Emulators page.

what you think of the new version.

Tiger SMB workaround verified; another is offered. May 26, 2005 -- We've had further verification that turning off encrypted passwords allows SMB volumes to mount in Mac OS X 10.4.1 as well as in 10.4.0. We've also had reports that not using a domain controller also works around the problem.

Mark Barton verified the password encryption workaround:

I had problems logging onto the SMB server at work with 10.4. 10.4.1 didn't fix it but the following recipe from MacOSXHints did:

Briefly, cd to /etc, then using sudo and your favorite text editor create a file nsmb.conf with the following two lines in:

[default]
minauth=none

This causes Samba to use plain text passwords.

Bob Nicol agrees:

On 10.4.1 I still have problems connecting to Unisys MCP servers. Creating a file /etc/ nsmb.conf containing:

[default]
minauth=none

detours the problem.

John Ajao offers another workaround regarding the domain controller which is probably related to the encrypted passwords issue:

Just a quick note, the drive mapping (SMB/CIFS filesharing) works between Mac clients running OS 10.4.1 and any resource on a windows server 2000/2003 (Not Domain Controllers) in an AD domain but does not connect to resource on Domain Controller. Example, if you have file sharing on a AD Domain
Controller you will not be able to connect to it form OS 10.4.1 with the error (could not connect to the server because the name or password is not correct) but if it is a share on a Windows server it should work.

So the work around for this till there is a fix is not to have your shares on a sdomain controller.

Peter Scordamaglia had a comment that relates the two approaches in Mac OS X 10.4.1:

I cannot use my Recent Servers links (from CONNECT TO SERVER) if they contain the domain or a password (e.g. smb://domain;user:password@computer/share) but it does work fine if they contain only the userid or nothing at all (e.g. smb://user@computer/ share or smb://computer/share).

Brad Price discovered some interesting clues to the problem in the packet traffic:

No change from 10.4.0. We still cannot connect via SMB in 10.4.1 to our Windows 2003 Server. Panther 10.3.9 connects fine. I was so hopeful when I read "improvements to SMB filesharing" as one of the main features of the 10.4.1 update!

In examining the packet traffic I notice that when negotiating the SMB protocol, Panther uses "Dialect=Samba" where Tiger replaces this with "Dialect=LANMAN2.1" (no change to the seven other dialects.) The other difference I notice is Panther uses "CaseSensitivePasswordLength=24 (0x18)" whereas Tiger uses "CaseSensitivePasswordLength=80 (0x50)".

Unfortunately these don't mean anything to me as I'm not a network analyst. Anyone?

Meanwhile, other readers are reporting that the 10.4.1 solved the problem. For Matt Widener, the update did the trick:

I have a Buffalo Terastation NAS box that I could logon to with SMB on 10.3.8 that became inaccessible on 10.4.0. I'm happy to report that I can login again via SMB since I applied the 10.4.1 update.





May 23

MacWindows Tiger page now up. May 23, 2005 -- We've consolidated most of our previous Mac OS X reports on a new Tiger Reports page.

ShareWay IP adds AFP-over-AppleTalk for Tiger. May 23, 2005 -- OpenDoor mentions that its ShareWay IP software is the only solution that restores AFP-over-AppleTalk access for Tiger. (Tiger only supports AFP over IP, and dropped AppleTalk.) ShareWay IP allows Macs running Tiger to access Macs running System 7 and 8. It also allows Tiger to access Windows NT Server Services for Mac, which runs AppleTalk.

Readers verify password encryption tip for Tiger SMB. May 23, 2005 -- Several readers verified a previous suggestion that encrypted passwords were causing Tiger's SMB problems. Matt Harrigan:

Ronald Jore's tip on encrypted SMB passwords was very helpful. I had just got done telling everyone how happy I was that everything in Tiger "just worked," when I came across the issue of having to integrate the Mac with a Windows/Linux environment. I thought I was going to toss the mac through the window.

Glenn Lebumfacil gives some more detail:

Just wanted to let you know that I was able to get 10.4.1 to talk to a Samba v2 server that was giving me the exact same errors that have been listed in so many web sites. It was a little bit confusing because I didn't even have Active Directory turned on in my Directory Access Utility. Anyways, I was able to finally connect to my Samba server by adding the following to my smb.conf:

encrypt passwords = yes

This is an old fix from back in my Linux days when Win2k started forcing encryption of passwords. Apparently, the Finder SMB access is now being forced to encrypted mode. Found the info on macosx.com.

Reader says Tiger fixes VPC 5. May 23, 2005 -- With Mac OS X 10.4 causing incompatibilies with so much third-party software, it is surprising to hear a reader (identified as "Red Shift") say that Tiger actually fixes the old Virtual PC 5.0.4:

On my 2 G4s (an iMac and eMac) I had given up with VPC 5.04. It had worked under 10.2 Jaguar but under 10.3 Panther it was clearly broken beyond redemption: ultra-slow with frequent crashes.

However once I had installed 10.4 Tiger on a whim I decided to give it another go. To my surprise apart from an initial moan that the Virtual Switch kernel extension could not be loaded (and therefore Virtual Switch networking was unavailable), it has run flawlessly. Windows 2000 Pro is booting in under 90 seconds on a G4 1.25GHz. I am really impressed!

If you've tried to run Virtual PC 5.0.4 in Tiger

We've previously reported that the Virtual Switch networking feature of VPC 6 and 7 does not work under Tiger.

Readers on Cisco VPN and Tiger 10.4.1. May 23, 2005 -- Last week we reported that the new Cisco virtual private network client worked with Mac OS 10.4.1 for some, and did not for others. Today, an anonymous reader can connect, but not disconnects:

I've installed 4.6.3 (0160) on both 10.4 and 10.4.1 and it still has issues (no previous VPN installs). It installs ok and appears to connect BUT a) it will not disconnect (( have to force quit) and b) when it appears to be connect I can't connect to my host; it just times out after a period of time.

Lee Calamaio has a different sort of problem with printing:

It also appears that if you do get Citrix Client on the Mac [Tiger] working (version 7.0.XXX) the printing system hangs up and completely locks up the Citrix session. No workaround yet that I’ve found except save my work and access from my Powerbook G4 running 10.3.9.





May 18

Tiger patch aimed at AD, SMB, VPN and other compatibility issues; readers say problems persist. May 18, 2005 -- Less than a month after shipping Tiger, Apple has released the first patch, the Mac OS X 10.4.1 Update. Apple says that among a long list of bug fixes, the update deals with problems regarding SMB/CIFS filesharing, logon to Active Directory and LDAP servers, as well as incompatibilities with third-party software and hardware. Some developers of virtual private network clients are saying that Apple's patch will work with new updates to their own software. Some MacWindows readers, however, are saying that the new update does not solve their problems with Tiger in these areas. (See stories below.)

Apple said that AFP file sharing and using DHCP in wireless networks were also improved.

Reader says 10.4.1 doesn't fix SMB problem. May 18, 2005 -- Travis MacDonald reports that Mac OS X 10.4.1 does not fix the problem mounting SMB volumes in Tiger:

Just inquiring if anyone you are in contact with has had any luck with the just released 10.4.1 in regards to the SMB issues?

I did the 10.4.1 update in the past half hour and am still unable to connect to several boxes. I had such high hopes when I saw 10.4.1 listed SMB and network fixes as one of its first point.

If you've tried SMB access with the 10.4.1 update please

Readers say 10.4.1 update does not fix AD problems; one offers a fix. May 18, 2005 -- Several readers report that the Tiger update 10.4.1 does not fix the problem with login into Active Directory, despite Apple claim to the contrary. Several reader report that new version made matters worse:

Santino Rizzo:

The 10.4.1 update has not resolved my problems. AD users cannot login when not attached to the network. In fact Apple has made the problems worse. In 10.4, I could at least open a login shell or su to my AD account in Terminal from a local account. Now that no longer works.

Sean Lynch also thought 10.4.1 made matters worse, but has a suggestion to fix it:

I get the same "unknown error" during stage 5 of the Bind with Active Directory 1.5.1. The correct computer object is created in our mixed-mode AD with a PDC and multiple BDCs.

I did a fresh load of 10.4.0 on a G3-400MHz and the bind worked OK. A new iMac G5 10.4.0 and 10.4.1 has the problem
Now I've GOT IT!

1. Trash all files in the /Library/Preferences/DirectoryService (then restart).

2. Config SMB to have your domain name (not FQDN) in the workgroup section (PRINTCORP in my case). I also added this to my WINS server.

This is the only combo I tried, maybe just trashing the files would do it. (The G3 Mac still had Workgroup and a blank for WINS.)

Don Wolff:

I can confirm that creating Mobile User Accounts in Tiger does not correctly cache the users password and will not allow login when disconnected from the AD domain.

This is a huge bummer, and would love to find a fix for it. Apple is saying that the just-released 10.4.1 update is supposed to fix issues with the Active Directory plugin. Does it help in your situation? Not at all. Upgraded first thing this AM and tried to connect with the new install, no go.

Funny thing about all of this, I contact Apple support after my testing and the guy on the phone sounded completely unaware of the issue at all. I suggested that he go and take a look at their discussion boards.

Cisco updates VPN client for Tiger; still no go for dual processors. May 18, 2005 -- Cisco has released a version 4.6.03 (.0160) of it's Mac OS X virtual private network client, which the company says is at least compatible with Tiger on single-processor Macs, but not on dual-processor Macs. The new version will run on dual-processor Macs with Mac OS X 10.2.x and 10.3.x. On dual-processor Macs with Tiger, the new client can cause a kernel panic. Users with a password can download the new version at the Cisco web site.

Howard Moftich said the Cisco VPN client 4.6.03 worked:

Cisco released a Tiger-compatible VPN client, version 4.6.03. I've already installed and tested it, and it seems to work fine. Also, they decided to put everything in either /opt or /etc/opt.

Tony Sze said it worked with the new Apple patch:

I'm using Cisco Systems VPN client 4.6.03 (0160) and Mac OS X 10.4.1. After reinstalling the VPN client on Tiger, I can now connect to the network successfully.

Alexander Kohr, however, said that the new version didn't work on either 10.4.0 or 10.4.1:

Just thought i would update you with the information that the update for tiger of the Cisco VPN for 10.4 software is not working for any of 4 tiger systems that we have tested it with. However it works just fine in 10.3.

Two were tested with just 10.4.0 and three of the systems were tested with 10.4.1. It seems to be some kind of DNS issue. It claims it can't resolve the host names under 10.4.1 however if you put in the machines numerical IP address, that doesn't work either.

Tiger 10.4.1 and VPN Tracker patch fix problem. May 18, 2005 -- Equinux has announced that the combination of Apple's Mac OS X 10.4.1 and a new VPN Tracker 4.0.1 patch released yesterday make the two completely compatible.

Equinux said that a problem with the Tiger kernel produced slow performance over virtual private network connections, a claim echoed by other VPN client developers. With Tiger 10.4.1, the company said the speed of VPN Tracker 4.0.1 in Tiger 10.4.1 is faster than in Mac OS X 10.3 Panther. The new version also fixes other bugs as well.

Broken Entourage rules in Tiger; a fix. May 18, 2005 -- Theo Nicolakis verified our prevous report (below) that Entourage's rules are lost when running Entourage:

Can’t tell you why, but yes, my Rules are working only sporadically in Entourage.

DL Byron, who first reported the problem, fixed it:

I got those to work again, by installing the Entourage Spam update. I'm not sure what that did at all, if it was permissions or what. It's still slow.





May 16

Entourage in Tiger: readers verify Spotlight tip for spinning beach ball. May 16, 2005 -- Readers have verified that Spotlight is the cause of the eternally spinning beach ball with Entourage in Tiger. Not all readers are having the problem, but many are reporting that setting Spotlight to ignore Entourage fixes the problem.

Success with beach ball, but broken rules

DL Byron had success, but reports another problem:

Telling Spotlight to not index Entourage helped, but the rules in Entourage no longer work, which is just absolutely terrible.

If you've seen this problem,

Reports of success with Spotlight tip

Kenneth J. Gorelick describes how it's done:

I went to the System Prefs/spotlight, then to privacy, and added my Entourage users (it wouldn't just let me lock out the database). Since then it reads mail just like it used to!

Bill Vader:

I put my Microsoft User Date folder in the Privacy area in the Spotlight preference pane and I immediately noticed Entourage started running much better. Before I had done that, I had the previously mentioned spinning beach balls every minute or two while using Entourage.

Martin Kelly found an improvement with Tiger after the fix:

I followed Joe’s advice and excluded the folder from the spotlight search parameters and found it resolved the spinning ball problem. Strangely, I have found an big improvement in Entourage's search times since loading Tiger.

Greg Pinelo also saw an improvement:

The Spotlight/Entourage fix seems to have helped a lot for me. A lot less drive activity, better response from Entourage.

Pastor Steve Bauer:

Just wanted to thank you for your tip about adding the Microsoft database to the spotlight private folders. My slowdown instantly stopped.

Ed Bascom:

I upgraded to Tiger on 5/9 and the Selvaggi solution to the Spotlight/Entourage problem seems to work.

I use my Mac (G4) in a corporate environment (MS Office) and the only issue I still have is the hot sync function no longer works with Entourage -> Palm. I have not tried re-installing the Palm software yet. (Love the Widgets.)

Steven Pipes:

Joe Selvaggi’s solution seems to have worked for me. I found that it occurred whenever Entourage was updating information from the Exchange server.

Guido van Nispen

I've done exactly as described and suggested by Joe Selvaggi and indeed the beach ball of death is gone!

Reports of failure of the Spotlight tip

Philip Hack

I've tried the fix of not having Spotlight index the mail database but it doesn't seem to help. Entourage does not finish downloading messages. I don't get the beach ball, it just stops trying.

Readers who are not seeing the problem

Jeremy Matthews:

I've had no problems among our test Macs with Tiger and Entourage (v 11.1.1/2004 with all updates).

However, I did a "clean install" instead of upgrading our machines; personal policy. Originally, the Macs we "upgraded" from 10.3 to 10.4 experienced some odd problems, especially with Office 2004 and v. X.

Myron Jones

I use Entourage everyday. I did an Archive and Install of Mac OS X. I've not had any difficulty with Entourage. I did notice sluggish behavior of my entire system on Day 1 (during the initial indexing), but after letting my PowerBook G4 sit overnight everything was fine on Day 2. My database is about 1.3 GB.

I know however MS apps can be problematic at times. I have all the latest updates installed. Early versions of Entourage gave me more problems than this version has.

David Lockwood:

No issues with Entourage (Office 2004) and Tiger. I have 45,000 archived emails and haven't had one spinning ball issue or notice a slow down.

Michael Holve:

No problem here, running the latest of Entourage on two machines.

Entourage and Mail in Tiger issue: inconsistent syncing. May 16, 2005 -- Greg DeMichillie reports another Tiger-caused Entourage problem that also affects Mail:

I'm seeing inconsistent syncing of Mail with Exchange now that I've updated to Tiger. Several times now I've seen Mail connect, sync and show nothing new in my Exchange inbox when I know there is new mail because I've seen it with Outlook.  I can make Mail find the messages by firing up Entourage and touching the message in question, then the next time Mail syncs it will mysteriously find the mail.

If you've seen this problem,

Microsoft to release Longhorn Beta this summer. May 16, 2005 -- PC Magazine reports that Microsoft is getting ready to release the first beta version of it's Longhorn operating system this summer, and is now releasing details. The story describes some of the new features, including this comment: "In some ways, Longhorn will resemble the file system effects already in the Macintosh OS X."





May 12

Group Logic releases Tiger-compatible EZ-IP. May 12, 2005 -- Group Logic has released ExtremeZ-IP 4.0.4, a free upgrade that provides Mac OS X 10.4 compatibility. ExtremeZ-IP is AFP 3.1 file server software for Windows 2003/2000 servers and Windows XP workstations.

The company said that the uprade also includes performance enhancements and support for gigabit networking.

PC-Mac-Net FileShare 4.5 doubles performance. May 12, 2005 -- Lava Software has shipped PC-Mac-Net FileShare 4.5 (free upgrade), cross-platform encrypted file transfer software for Mac, Windows, and Linux. PC-Mac-Net FileShare works on local networks and the Internet.

Lava Software said that the new version doubles file transfer speeds over previous versions. It also includes new features, such as:

The company offers a free Lite Edition, which has a 3-user limit and a 10mb file size limit.

Tiger SMB mounting problem linked to password Encryption? May 12, 2005 -- Ronald Jore believes that the Tiger's problems with mounting SMB volumes is caused by an inability to sendunencrypted passwords:

I do have the SMB-mounting problem as well, and it goes away when I reconfigure the server to use encrypted passwords.

So it seems that SMB smb client in Tiger is unable to send unencrypted passwords for SMB authentication.

I could not find much information on the software involved but as I understand it mount_smbfs uses NSMB, for which password encryption seems to be a compile-time option.

I have filed a bug (#4108992) with Apple at the 5th of May which is still marked as open.

P.S.: I noticed another bug. Try dragging a text selection into an open mail.app message window: doesn't work. I've logged this one on the 6th (#4110490) and it has been marked "Duplicate" which I take to mean that they know about it.

Workaround for Tiger SMB printing problem. May 12, 2005 -- A reader who wishes to be anonymous has discovered a workaround to the problem of SMB printing with Mac OS X 10.4:

Tiger clients "clean installed" (ie not upgraded from an already configured 10.3 client) are not able to print on a Windows printer if:
  • Users are on one domain
  • Printer belong to another domain

You can declare the printer OK, but ...when you try to print to a printer connected to Windows, you get the following error message:

Connection Failed with error
Nt_Status_Logon_Failure
Samba unable to connect to host

I have found out that this issue is specific to a printer you create in 10.4. It does not happen for printer created first in 10.3.x if you selected to upgrade over your existing system.

It looks like there might be a problem with the way 10.4 is building the smb:// access string to your printer when following the screen flow process.

Creating a printer in advance more (holding Alt before clicking on "Adding more printer") and typing in the smb:// string yourself does the trick.

If you've tried these suggestions

Win can't access Mac printers under Tiger. May 12, 2005 -- Dr. Ronald Weiss is seeing the problem that is oposite to the one above, in that Windows PC's can no longer access Macs after upgrading to Mac OS X 10.4:

I used to be able to share my Mac printer with the Windows machines onmy peer-to-peer network. Since installing Tiger, all I get when trying to print to the Mac printer (Brother MFC-6800) from a Windows box is something like "Unable to print...a portion of the file is locked by another process.". I can see and share files on the MAC from Windows computers on the network. When I try and "re-install" the shared printer on the Windows machine it does not help. I can print from the MAC on the Brother MFC-6800. Just can't share the Mac printer as I used to.

Mac Explorer 4.3.1 adds OS X 1.4 support. May 12 -- Rage Software has released Macintosh Explorer 4.3.1 (US $16), a Tiger-compatiblility update for the software that provides a Windows-Explorer like file manager for Mac OS 9 and OS X. The new version also adds performance gains fixes bugs.





May 5

Spotlight cripples Entourage in Tiger: a fix is offered. May 5, 2005 -- Several readers verified the problem of Entourage in Tiger getting stuck in "spinning beach ball" mode, which we reported on Tuesday.

Joe Selvaggi blames it on Spotlight and has a suggestion:

I am experiencing the spinning ball problem in Entourage since upgrading to Tiger. There a corresponding sound (like frantic memory/ disk swapping activity) coming from my PowerBook.

Apparently it's Spotlight trying to index the Entourage Mail DB. Tell Spotlight to ignore the Microsoft User Data folder (Users > Documents > Microsoft User Data) should do the trick, or at least it appears to work.

John Orwin also sees the problem:

I upgraded to Tiger 5/1, and have found that Entourage locks up: spinning ball. Requires force quit. This appears to be random.

Mark Allen: I'm getting the same annoying beach-ball spins in Entourage.

Daniel Golding: Having very slow, spinning beach ball issues with Entourage and Tiger.

Sean Spicer: Entourage unstable using WebDAV under Tiger...beachballin' it.

If you've tried Selvaggi's suggestion

A VPN client that works in Tiger. May 5, 2005 -- Rob Dandrea says that Gracion's DigiTunnel, a PPTP virtual private network client, works with Mac OS X 10.4:

I have been using the DigiTunnel VPN client with Tiger all weekend long with out any problems. Just thought I'd pass this info along to give others an alternative solution.

VPN Tracker 4 adds support for Cisco PIX, VPN. May 5, 2005 -- Equinux has released VPN Tracker 4 (US $89 Personal Edition, $179 Pro), a new version of it's virtual private network client for Mac OS X. VPN Tracker 4 adds support for Cisco PIX and Cisco VPN Concentrator, offering an alternative to Cisco's client. (It does not support the older model 5000 concentrator.) VPN Tracker is now compatible with over 250 major commercial firewalls/gateways.

The company says that the new version is compatible with Mac OS X Tiger, but runs 25 percent slower than it does in Mac OS X 10.3. The reason according to Equinux:

The issue is in the Tiger kernel itself and Equinux is not able to fix it; however, we are working closely with Apple to deliver a fix soon.

Other new features include:

Citrix problems with Tiger. May 5, 2005 -- Rick Nooner had a problem installing the Citrix client, but found a fix:

It looks like the Citrix ICA client version 7.00.402 for OS X will not install on Tiger. I used this same client successfully on Panther for the past few months. This client is used to connect to the Citrix MetaFrame environment.

Turns out that the installer for the OS X Citrix installer throws up an error message making it look like the installation fails.

Actually the error can be ignored since the installation really succeeds. The client works fine.

Victor Mora has less luck, saying "Citrix Client does not work."

Groupcal incompatible with Tiger. May 5, 2005 -- Snerdware says that it's Groupcal is incompatible with Mac OS X 10.4. It will install successfully, but will not launch.

Groupcal enables you to work with a Microsoft Exchange calendar from Apple's iCal. It can synchronize events and tasks, schedule people and resources for meetings, and respond to meeting requests, among other things.

(Thanks to Douglas Bergere.)

PGP Desktop Beta available for Tiger. May 5, 2005 -- PGP has issued PGP Desktop 9.0 beta (prerelease) that is compatible with Mac OS X 10.4.

(Thanks to Patrick Best.)

More reports of SMB problems in Tiger; suggestions for client and server. May 5, 2005 -- We've had many reports of SMB problems in Mac OS X 10.4. We have three categories of reports today:

Chris Millet connected to SMB after he cleared Keychain:

I too am having problems connecting to machines running Windows Server 2003 and Active Directory. There's nothing special about our setup. I didn't have any problems up to OS X 10.3.x.

I believe I have a fix... Fortunately it's very simple. Once I cleared my Keychain of any references to the shares I was having problems connecting to, I was suddenly able to connect again. I found the fix on Apple's support boards.

Gilles Pelletier can access SMB from Terminal:

I can't connect anymore from the desktop (using the Connect to Server option) to a Windows server. However, I found that I can connect from the Terminal using the smbclient command. In a nutshell, the command is:
smbclient //server/drive -W workgroup -U username. More info on the man page.

Bobby Gaza can also access from Terminal:

Samba is broken in Tiger also (i.e., connect to server smb://yadda). While cmdline smbclient works, mount_smbfs (connect to server) does not work. I've tried mounting Windows servers (2000) and Samba servers (2.2 - 3.0) all with the dreaded error code 36.

Martin Burns reports some details of the log:

So, Tiger won't act as an SMB client to SAMBA or real Win XP shares. I was getting error code -36 (the I/O error) whenever I tried to connect. I could see the workgroup in the network browser (although now that seems to have gone too). Ethereal suggested that there was no SMB or NetBIOS traffic at all.

Eventually I dive into console logs and found this:

skye:/Library/Logs/Console/501 root# tail console.log
mount_smbfs: session setup phase failed: syserr = Authentication error
mount_smbfs: session setup phase failed: syserr = Socket is not connectedmount_smbfs: could not login to server COLONSAY: syserr = Socket is not connected
Also from before the workgroup disappeared, was getting a lot of:
May 2 23:12:24 skye automount[220]: Cannot mount URL 'smb://MARTIN;abc-TEGGB123456' for /Network/Martin/abc-Teggb1235456 (UI not allowed).
which is me trying to mount a share on my work XP lappie (details obfuscated for not getting fired reasons).

Dallas Hockley:

I can confirm that mounting an SMB share from Tiger seems to have gone kaput vs. 10.3.x. I continually and consistently get the following error:
The Finder cannot complete the operation because some data in "smb:// foo.company.internal.corp" could not be read or written. (Error code -36).

Robert Froom had an interesting experience:

I installed Tiger on a dual 1.8 G5 and I am not able to connect to the office Linux server. It presents an authentication screen. I type in the password without effect. After many many tries I have gotten through to another screen which claims that some of the data is unreadable.

Total waste of time. No help from Apple. Help line claimed that it must be a problem with the server and suggested that I reformat my hard drive. Great, even I know that reformatting is the LAST THING TO TRY.

Dana Pero tried and AppleScript, without success:

I used to be able to connect to Windows servers and workstations either via the GUI interface "connect to server" or through an AppleScript I wrote. Neither works now with Tiger. I get two different error messages - either an error code -36 or could not connect to the server because the name or password is incorrect. The errors seem to vary based upon the machine I'm trying to connect to.

Funny thing is I've been able to connect to one server - one that I know is very old and probably hasn't been updated in quite awhile...

Santino Rizzo is one reader who is NOT having a problem with accessing SMB servers:

While there seems to big major problems with Directory Services, I have absolutely no problems connecting to SMB servers on W2K and W2K3, in fact I would say file transfer speeds are much faster, though I have not done any real benchmarks yet. I've done nothing special to the servers other than the usual encryption modification in Group Policy.

Windows clients connection to Macs

Mike Goggin:

I've had problems with using SMB in Tiger since I upgraded the other day. I can connect to SMB shares on Windows boxes but that those same Windows machines can't connect to my Tiger box and access the shares on my Mac. I've also not had a problem with shared SMB printers (connecting to a shared printer on a Windows box).

I was able to restore SMB functionality on my network to 100 percent. I reverted to using the default Tiger smb.conf template. Once I verified that the template worked, I tailored it to suit my needs on my network. Below is my smb.conf that works:

=========
; Template configuration file for smbd.
=========
; For the format of this file and comprehensive descriptions of all the
; configuration option, please refer to the man page for smb.conf(5).
;
; The following configuration should suit most systems for basic usage and
; initial testing. It gives all clients access to their home directories and
; allows access to all printers specified in /etc/printcap. It also provides
; a public share point for generally exporting stuff.
;
; Some things to check out:
;
; 1: Make sure that the user specified in "guest account" exists. Typically
; this will be a user that cannot log in and has minimal privileges.
; Often the "nobody" account doesn't work (very system dependent).
;
; 2: You should consider the "security =" option. See a full description
; in the main documentation and the smb.conf(5) manual page
;
; 3: Look at the "hosts allow" option, unless you want everyone on the Internet
; to be able to access the shares you export here.
;
; 4: If you want to support printers, add/uncomment the relevant entries.
;
[global]
guest account = unknown
encrypt passwords = yes
auth methods = guest opendirectory
passdb backend = opendirectorysam guest
printer admin = @admin, @staff
server string = Mac OS X
unix charset = UTF-8-MAC
display charset = UTF-8-MAC
dos charset = 437
use spnego = yes
client ntlmv2 auth = no
os level = 8
defer sharing violations = no
vfs objects = darwin_acls
brlm = yes
[homes]
comment = User Home Directories
browseable = no
read only = no
;[public]
; path = /tmp
; public = yes
; only guest = yes
; writable = yes
; printable = no
[printers]
path = /tmp
printable = yes
[root]
path = /
browseable = yes
writeable = yes
valid users = @admin
Samba printing problem with Tiger

Jay Gibb:

With Panther, I had my EPSON Stylus C84 mounted via Samba. The printer is plugged into a Windows 2000 machine (via USB) and shared normally. It was working fine with Panther with the smb://username:password@group/server/sharename syntax. Immediately after upgrading to Tiger it stopped working.





May 3

Developers verify Tiger incompatibilities. May 3, 2005 -- Reports of incompatibilities with Mac OS X 10.4 (Tiger) and cross-platform network software continue to pour in. Readers are verifying yesterday's reports, as are vendors. Another developer, Equinux, is saying that there is a bug in Tiger's kernel. (An eWeek report has additional info.)

Readers have also sent in new reports of Tiger problems, including incompatibility with other products and those with standard file sharing.

Steven Palm gives a technical description of some of the changes in the Tiger kernel:

[Tiger] requires rewriting any kernel extensions and related bits so that they conform to the new standard KPI interfaces, but the upshot is that this sort of thing need not happen again because now we have a supported set of API's to write against. Apple is now free to make any backend changes they'd like to the kernel as long as their published KPI API set still functions the same way. This is a huge step.

John Siracusa covers this quite well in his review, section 4.

Most of these manufacturers are advising customers not to upgrade to Tiger until the problems are worked out.

Microsoft verifies VPC 7 Virtual Switch bug;
Readers say VPC 6 also affected.
May 3, 2005 -- Microsoft verified yesterday's report of Virtual PC 7's Virtual Switch option not working in Tiger. A spokesperson said that it would be fixed in a free patch from Microsoft in 2-to-3 months.

Thanks to all of the readers who wrote in to verify the problem. Two readers also reported that the problem occurs in Virtual PC 6 as well.

Phil Ershler:

I have noticed the same issue with Virtual Switch in VPC 6 and Tiger. Shared Networking seems to work OK.

Douglas Stroud:

I upgraded to Tiger over the weekend and all went pretty well. However, with VPC 6 I am having the same problem as mentioned in the article with the Virtual Switch being broken.

VPN Vendors verify Tiger incompatibles;
several more clients added to the broken list.
May 3, 2005 -- VPN software seems to be affected across the board. We have these reports added to yesterday's.

Check Point incompatibility confirmed

Check Point verified yesterday's reader reports that it's VPN-1 SecureClient is incompatible with Tiger. Check Point expects to have a fix this month.

Equinux VPN Track is incompatible

Mark Dadgar notes that Equinux is telling customers that VPN Tracker is incompatible with Tiger, with the same slow performance as other VPN clients:

FYI, the Equinux VPN Tracker client (which is exceptional, BTW) broke as well. Same symptoms as IPSecuritas and the others. Did this thing get any QA before it went out the door?

Like Thursby and Lobomoto, Equinux says that Apple will need to fix a kernel bug before it can complete the update of its product.

Reader reports problem with OpenVPN

Steven Palm reports:

I use the OpenVPN software for establishing a VPN to my workplace, and the tun/tap device drivers are of course broken by Tiger, so I am trying to rework them on my own, even though the author probably will have a fix done before I do. :-) It's a fun exercise.

Problem with built-in VPN client

Ed Coye says Tiger's built-in VPN client won't work with the Cisco PIX:

The built in VPN will not work with Cisco PIX. Not only can't you use the Cisco client, you can't use the built in Apple client anymore to reach a Cisco PIX.

Prosoft Client incompatible with Tiger. May 3, 2005 -- Michael Campbell in Australia reports about the Prosoft NetWare client for Mac OS X:

Just to let you know that 10.4 is NOT compatible with Prosoft's client for OS X, apparently they are working on an update but as yet there is nothing on their beta site.

Mac OS X 10.4 Server halts on reboot after configuring directory services. May 3, 2005 -- Greg Priglmeier is having problems rebooting Tiger Server and Active Directory and Open Directory:

After performing several clean installs and upgrades of 10.4 Server on machines that are bound to AD and OD, I have found that the servers will fail to reboot and will hang.

Users can't log into the machine with local accounts.

We are using Apple's built-in tools. This seems very consistent to me. If I remove the /Library/DirectoryService folder I can reboot OK.

Problems with Tiger SMB file sharing. May 3, 2005 -- Several readers reported problems connecting using the SMB file sharing protocol:

Tim Koss's Windows clients are having problems access Tiger Server:

I just installed Tiger on my file server in my mixed environment office. The network access on my Windows machines went from excellent in 10.3.x to BRUTAL in Tiger.

Brad Price says SMB mounting is broken in Tiger:

We have Windows Server 2003 with Active Directory here and departments share space on the LAN. We wrote a little AppleScript to mount the server volume using essentially the Finder "Connect to Server" functionality, with smb://server.domain/share. Clients must authenticate at mount time with their AD username and password.

This was working fine in Panther through 10.3.9, but in Tiger it's broken. I have no idea where to begin. We're not doing anything complicated like AD binding or really ANYTHING on the Mac side of things.

I wonder if Apple changed something with the way SMB authenticates? Perhaps something to do with adding NTLM2 support?

Robert Kuhling, Jr., reported a problem connecting to a printer attached to a Unix machine:

After installing Tiger update to Panther, printing broke to an HP8400 (Network connection)

Entourage almost unusable due to spinning "beach ball."

If you've seen any Tiger problems with SMB or Entourage

Tiger can't connect to old AFP server. May 3, 2005 -- Doug McNutt reports that Tiger will not connect to older Macintosh machines running OS 7. He sent us a link to a description at MacFixIt forums. McNutt also sent us a description of his situation:

The mount_afp tool fails when directed to an OS 7.5 server. It worked OK from 10.2.1 thru 10.3.9. I am told there were problems with 10.0 and 10.1.

The returned error is -1070 which is cryptic but Finder says it's an incompatible AppleTalk device and cannot be mounted. It does see the SE/30 as a server though.

I want my money back!

4 gigibytes of operating system and you can't even maintain compatibility for 10 years? I can still run Excel 4 macros with Excel 2001. Fortunately I can easily go back to Panther. I have to have my SE/30 with it's real serial ports.

It turns out that the reason is that Mac OS X 10.4 no longer supports AFP over AppleTalk. (AFP over IP is still supported.)





May 2

Tiger breaks numerous network apps; developers blame kernel bug. May 2, 2005 -- Today's news focuses on numerous reports we've received of various types of networking software that no longer work under Mac OS X 10.4, Tiger, which began shipping last Friday. We haven't heard of this much networking software breaking since Mac OS X 10.1, which was a major rewrite of the kernel and much of the BSD-based core.

Two developers, Thursby Software and Lobotomo Software, blame at least part of the problem on a bug in Tiger's kernel.

Last week we reported that Cisco announced that it's VPN client is incompatible with Tiger, and that Group Logic told users that it is hoping to release a Tiger-compatible version of ExtremeZ-IP in a few weeks. (ExtremeZ-IP runs on Windows, however, and is not as affected as Mac software.)

If you've seen other cross-platform incompatibilities with Tiger

Reader reports VPC 7 Virtual Switch broken with Tiger. May 2, 2005 -- A reader named Pete reports that the Virtual Switch networking option in Virtual PC 7 does not work after upgrading Mac OS X to version 10.4 (Tiger).

In Virtual PC, Virtual Switch networking, a virtual machine running Windows can have it'ss own network connection that is separate from the Mac's. The other VPC networking option is Shared Networking, in which the virtual machine shares the Mac's Internet connection.

If you've tried Virtual Switch networking with Tiger

Tiger not compatible with ADmitMac and DAVE. May 2, 2005 -- Thursby Software announced that its current versions of ADmitMac and DAVE are NOT compatible with Tiger. Thursby described the changes in networking:

The vastness of Apple's enhancements to critical parts of the system (both the kernel dealing with network transports and the file system) are requiring a major effort to obtain compatibility.

Thursby reports that when upgrading to Tiger when ADmitMac is installed, the Mac can fail to boot. Thursby provides a workaround at its web site.

Thursby said that part of the problem is a bug that Apple has acknowledged, and that Tiger compatible versions of ADmitMac 3.0, due on August 8, and DAVE 6.0, due in late August, were dependent on Apple's bug fix.

Lobotomo Software, makers of the IPSecuretas VPN client, also says that there is a bug in the Tiger kernel. (See the story directly below.)

The ADmitMac and DAVE upgrades will be free to customers who purchased the products on or after April 1, 2005. Thursby will notify registered customers when the new releases are available.

Cisco is not alone: Tiger breaks other VPN clients. May 2, 2005 -- Last week, we reported that Cisco said its VPN client is incompatible with Tiger. Apani (formerly Netlock) and Lobotomo Software have since followed suit, and readers also reporting incompatibles with the Check Point VPN client.

IPSecuritas

Lobotomo Software is reporting problems with its IPSecuritas VPN client at a user discussion forum. Lobotomo Software seems to agree with Thursby that there is a bug in the Mac OS X 10.4 that Apple needs to fix:

a. Tunnel establishes normal, but throughput is very bad, packet round-trip times (ping) between 500 and 1000 ms (on connections with approximately 50 ms before). This seems to be a bug in the MacOS kernel.

b. DNS replacement does not work anymore - the settings are ignored.

c. In one case, the tunnel could not be established at all.

We are working on problems b. and c., while only Apple can resolve a. At the moment we don't recommend to update to Tiger if you rely on VPN connectivity.

Lee Unks reported to MacWindows that he is seeing the first two of these problems:

Since upgrading to Tiger, IPSecuritas is extremely sluggish 40 ms pings have now turned into 1000 ms. Also, the DNS Replace function is broke as well.

Apani (Netlock) Network Contivity Client

Mark Alexander reports that the Apani support page reports an incompatibility with Tiger:

I am a customer of Apani/Nortel Contivity VPN Client for Nortel Networks. I found the following statement on the Apani Website in regards to Tiger Support:
The currently released version of the Contivity VPN Client, v3.1.1, will not support the use of Mac OS 10.4. There are changes at the kernel level that cause the Contivity VPN Client to no longer work.

We will be releasing a version of the Contivity VPN Client to add support for Mac OS 10.4. All customers with current maintenance contracts will be notified via email as soon as the release is available.

Dave Scott in Singapore received an email message from Apani:

Confirmation from Apani that their VPN client won't work either , which is a bummer since I use it for "working from home"Apani, at the moment does not have support for the Tiger (Mac OS X 10.4). We will be adding support for this in a later version, but we do not currently have an estimated release date. We will add your e-mail address on our "Feature Request" and will be the first to know once it becomes available.

A reader in Japan describes the symptoms:

I am a Mac user in Japan and I found the crash of Apani Contivity VPN Client post OS X upgrade from 10.3.9 to 10.4 Tiger. In contrast to your case, my Safari works well with Apani client with 10.3.9, however, Tiger completely denied start up to my VPN. Safari says "page http://... can not be opened".

This reader also sent a not to Apani, and received the same message as Dave Scott.

VPN-1 SecureClient from Check Point

Nordine Vandezande reports that Tiger has the same bug with the Check Point VPN SecureClient found in Mac OS X 10.3.9. The fix that we reported for 10.3.9 doesn't work for Tiger, however:

I would just like to report that I have the same problem with VPN-1 SecuRemote on Tiger as already mentioned for 10.3.9.

Unfortunately the fix which seems to work for 10.3.9 does not work for Tiger.

Marcel Lammerse discovered the same thing:

I upgraded to OS X 10.4 (Tiger) today and found that the SecuRemote client no longer starts up. I've followed the steps in Michael's workaround, but couldn't get it to work.

Morten Hersson of Norway also has the problem:

I bought the OS X 10.4 this morning and rushed home to try it all out. I experienced the problems with 10.3.9 so I wasn't too surprised when after doing a fresh install of Tiger that the Secureclient would have a few issues. I expected that it would go through the install like on 10.3.9 and then maybe not work, but it won't go through the install at all. It just quits and gives you no error message, and tells you to try install again.

I don't know what happens if you just do a OS X update.

I think it´s the latest from Check Point, SecureClient_B558000178_1.pkg

Richard Little:

Tiger also broke the Checkpoint Secure Client.

Guillaume Fiastre:

I installed Tiger. I had uninstalled Secureclient first. After upgrading to Tiger, I'm totally unable to reinstall Secureclient: installation stops with an error. That's bad...

PGP Desktop incompatible with Tiger. May 2, 2005 -- PGP Corporation alerted us that it's PGP Desktop products are incompatible with Tiger at this time.

From John Dasher, director of product management at PGP Corporation:

I wanted to send an important note regarding PGP Desktop and Apple Mac OS X 10.4 (Tiger) operating system compatibility.

PGP Desktop 8.x (including PGP Disk) on Mac OS X 10.4 (Tiger) is incompatible and unsupported.

PGP Desktop 9.0 is fully compatible and supported on Mac OS X 10.3.8 and 10.3.9.

PGP Desktop 9.0 is currently unsupported on Tiger. Although early compatibility testing has proven successful, PGP Corporation was unable to complete final Tiger certification of PGP Desktop 9.0 due to Tiger's recent release. Final testing with the shipping version of Tiger is underway, and PGP Corporation intends to fully support Mac OS X 10.4 in the near future.

Active Directory/Open Directory problems with Tiger. May 2, 2005 -- Santino Rizzo reported Tiger problems with Active Directory and Open Directory:

I'd like to know if anyone using the AD plug-in can reproduce my problems with Tiger.

1. Mobile AD accounts cannot login when disconnected from the network. Major problem for laptop users. Account info is there in NetInfo, and you can do a Terminal login to that account, but no login from Login Window.

2. Open Directory printing does not properly authenticate resulting in NT_STATUS_ACC