File Sharing Difficulties Frustrate Tiger Admins 334
rmallico wrote in to mention a story currently running on Eweek about technical difficulties sites running Tiger are experiencing. From the article: "A number of sites running Apple's new 'Tiger' operating system are experiencing problems with SMB file sharing and authentication with Microsoft's Active Directory, Ziff Davis Internet News has learned. Although Apple Computer Inc.'s Tiger increases support for Server Message Block file sharing and Active Directory, several sources say that the Finder fails to log on to Windows and Linux Samba file servers."
Oh, right, error code -36! (Score:5, Insightful)
Re:Oh, right, error code -36! (Score:5, Informative)
http://www.appleerrorcodes.com/ [appleerrorcodes.com]
Re:Oh, right, error code -36! (Score:5, Interesting)
-36 ioErr I/O error
It'll point you in the right direction I guess, but it's by no means a definitive description of the error.
I must admit that I'm a little baffled as to why Apple don't include better error reporting and descriptions in OSX. It is because they are still assuming these kind of errors will only be seen by techs that know what they mean, or are they still living in a world where they refuse to acknowledge that Macs do throw up the occasional message to the user?
Re:Oh, right, error code -36! (Score:5, Interesting)
Re:Oh, right, error code -36! (Score:5, Informative)
It does give a more detailed output. for example when i try to connect to my existant SMB share it gives me I would have given an example of the error output from the specific problem , but i am doing some work on the linux comp that runs my nfs and samba shares right now
Re:Oh, right, error code -36! (Score:3, Informative)
I think this is the case. Ultimately, they'll be right -- there are only a few places where the Mac shows obscure error codes. Actually, file sharing is aobut it now. Prior to Tiger, you could also get obscure error messages for dropped connections, but Tiger introduces a pretty neat Network Diagnostic tool that it offers instead.
Considering that SMB file sharing has been a
Re:Oh, right, error code -36! (Score:3, Funny)
Re:Oh, right, error code -36! (Score:2)
Re:Oh, right, error code -36! (Score:2)
Re:Oh, right, error code -36! (Score:2)
0x0000005C: HAL_INITIALIZATION_FAILED
But, if you check it in the MSDN [microsoft.com], you'll be really, really upset. The whole documentation is:
(the entire MSDN article lifted from Microsoft without authorization -- but AFAIK data of this length is ineligible for copyright)
Re:Oh, right, error code -36! (Score:5, Funny)
Re:Oh, right, error code -36! (Score:2, Informative)
I've seen this with SMB filesharing, Mail.app, and sometimes Safari. They've all given me frustratingly useless error messages. Anyone frustrated by this should open an Apple Developer Connection account and submit a bug report to Apple's bug tracker [apple.com]. Maybe if enough people do, they'll realize this is
Re:Oh, right, error code -36! (Score:2, Insightful)
Really, it's probably part of their 'Keep the UI as SIMPLE as possible' ideals. If they don't think a standard user will be able to do anything with that information, don't even bother telling them.
Re:Oh, right, error code -36! (Score:3, Interesting)
I seem to remember the slow booting thing was the cause of the infamous 'throwing the prototype Mac down the stairs' Steve incident, although it's even more likely that I'm wrong on that one.
Re:Oh, right, error code -36! (Score:4, Interesting)
As a programmer I will often give me error numbers because when I need to fix it the error numbers help me find it in the code quicker. And when I give more detailed error messages. The users will try to analysis my message outside of the context of my code and try to fix it them self. So if I put an error message "Out of Allocated Memory" except for error 49112, the user will go out and buy some more ram hoping it will fix the problem except for going to me and saying hey I have an error 49112 where I will know that I will need to change my code to either be more memory efficient in an area or allocate more ram.
It is not a situation that the User is an idiot it is that they may not have the context of how things are running in the programming level. So when they see an IO error they will go trying to fix there network cards, reinstall their printers and other drivers before reporting the problem with the program.
Re:Oh, right, error code -36! (Score:5, Insightful)
And -36 doesn't help even if you know what it means, because it's just a generic "I/O error". Originally it was for media problems (like an unreadable floppy), usually accompanied by strange sounds from your disk drive, but for a network file system it's kind of silly. So even the old-timers say "yeah, that sure tells me a lot".
Other -3x range errors include file not found (-34?), end of file (-39?), and file name too long. Another good one is -50, parameter error. Well, duuuuuuh, which parameter? What's wrong with it?
The worst one to see is -127. That one means your file system data structures are in deep doodoo.
But seriously, the days of 400K floppy disks are long gone. It's total laziness that nobody bothers to print a text error message along with the number. I've been doing that in my own code since the days of 800K floppies. Even printing out the ten most common error messages as text helps most of the time.
Re:Oh, right, error code -36! (Score:2, Troll)
this goes hand in hand with the concept that most "programmers" do it to impress people with their "intelligence" and "skillz", if you see a BSOD and pretend its usefull, you get extra auntie-impress points.
There is no use telling something to the user if what you tell him has no use...
Re:Oh, right, error code -36! (Score:2)
Re:Oh, right, error code -36! (Score:2)
The useful error messages I've seen have been from BSODs during bootup. If memory serves, you want the hexadecimal codes on the first lines.
yeah man why can't macs say something useful (Score:2)
Re:Oh, right, error code -36! (Score:2)
Horrible interface decisions in an otherwise pretty good UI.
Re:Oh, right, error code -36! (Score:5, Informative)
Admittedly this is an esoteric implementation detail. It's not really meant to communicate anything to the user other than "I'm waiting."
The Mac OS X 'wait cursor' (Score:3, Informative)
You can still switch to another application. Swinging the cursor over a window of a background app that was unresponsive will give you quick feedback in the form of the wait cursor if that app is still unresponsive.
Re:Oh, right, error code -36! (Score:5, Funny)
"Oh, yeah, -36, that's an I/O Error. Check the logs, then sacrafice a pure white chicken under the full moon and pour its blood into the NT server."
They're just trying to rope in the Geeks along with their artsy-fartsy core fanbase, with the hope that some will mate, producing a new generation of geeksy-farts ultracustomers who will be irresistably drawn to Apple's unique blend of superior design and industrial strength Unix aracana.
Here's a bet: (Score:3, Insightful)
Re:Here's a bet: (Score:2, Insightful)
Re:Here's a bet: (Score:2, Interesting)
but THIS? Has nobody there ever tried to connect to a SMB sever? It's kinda strange. Annoying. Every OS has this, everyone.
But I can imagine how this is, I can imagine this very good. The coders will say, we need to the test, the managers say, we need to release, and of course the managers are right, they get their bonus, because the release in time, and the c
Re:Here's a bet: (Score:2, Funny)
Re:Here's a bet: (Score:3, Insightful)
Re:Here's a bet: (Score:5, Insightful)
Your car analogy is flawed. New cars do have bugs when they roll off the lot. You would be really surprised at the number of real issues every car or every batch of cars has off the factory floor. Many times however these flaws and bugs don't crop up and cause a noticeable problem for a long time if ever. There are some problems that do crop up quickly however. It would be one thing if the manufacturer ignored this and went on its merry way. It is entirely another if they repair your car for you. I just had the dome light fixed in my car because of a faulty latch, should I be screaming about the manufacturer not having any QA? No.
The car analogy also falls flat when compared to something as easily changed as computer software. A patch containing the repair can be very small and be distributed to millions of affected users very quickly. If your car is in the shop for a week you're out one car. If SMB shares don't show up in Finder's Browse window properly you're not out SMB shares as you can work around the problem if need be.
Re:Here's a bet: (Score:2)
I took a known risk, new car model, in the first run of production.
I have had to general recalls. First one was a wire harness hasn't really there and the controls lines for airbag deployment could get severed preventing the airbag from going off.
The second was a poor boot cover design for the tie rods.
I owned the car for two years and they replaced the tie-rods and put in new covers.
Minor problems should be expected. If you buy say a Ford Taurus you
Re:Here's a bet: (Score:2)
A new car built by my company leaves somewhere traveling at 60 mph. The rear differential locks up. The car crashes and burns with everyone trapped inside. Now, should we initiate a recall? Take the number of vehicles in the field, A, multiply by the probable rate of failure, B, multiply by the average out-of-court settlement, C. A times B times C equals X. If X is less than the cost of a recall, we don't do one.
Sorry, couldn't resist. :)
Re:Here's a bet: (Score:2)
The problem is when you underestimate either B or C. So X begins to approach the total cost of a recall and management thinks "hmmm... maybe we should go ahead with the recall". Only now your total cost is approaching 2x. If you had just done the recall immeadiately (the honora
Re:Here's a bet: (Score:2)
Re:Here's a bet: (Score:2)
And many of them don't cause the vehicle to go out of control or even fail to operate. Like the wonderful paint GM used in the '90s which had a bad habit of flaking off after a few years. My old Chevy Blazer had that paint, but I didn't really care because I bought it used.
Re:Here's a bet: (Score:5, Insightful)
Should all new software have bugs? (Score:5, Interesting)
I think the car analogy is (for once : ) a good one. We have come to expect failure from Software, and that shouldn't be the case - it should be very rare, not inevitable with each new release. They did rush the release of Tiger, and certain things suffered for it. Yes they will probably fix it quickly, but it'd be nice if they had a more extensive testing program, with sufficient time alllotted to do the QA work, for catching regressions like this.
An addendum to this (Score:2)
I did application development for a while in my past life, and I can't tell you how many times I fully tested a system on 3 different computers without a hitch. Then when I rolled it out to the remainder of the company, other computers simply couldn't run it as intended without me sitting down at their machines and troubleshooting.
Part of that is I'm simply not a computer scientist and most of my programming work is. . . infantile compared to t
Re:Here's a bet: (Score:3, Insightful)
fanboys... pfffff
The myth of perfection (Score:3, Informative)
This is a common complaint heard about all kinds of products from cars to drugs. What it reflects is ignorance of the statistics of testing. By necessity, testing must be done on a pool of people that is orders of magnitude small
A typical slashdot response. (Score:2, Insightful)
I've said it before, and I guess I'll have to say it once again -- zealotry should have no place on slashdot. If Microsoft turned around and released a perfect, bug free
Re:A typical slashdot response. (Score:3, Interesting)
The fault here is in interoperability with a Microsoft SMB share (no such problem with NFS) and there is an easy work around (you just point to the share directly).
Had this been about microsoft products not connecting to a SAMBA share properly
Re:A typical slashdot response. (Score:2)
There's no location bar in Finder so you have to rely on the links in 'Network', but they don't work (actually it's wierd.. they work for the ADC and one other machine but none of the others).
There's also a wierd file called 'Library' sat in my networks folder that's undeletable. Doesn't appear to do anything (another bad link, which OSX offers to 'fix' but the 'fix' brings up a file selector and I'm kinda lost at that po
Re:A typical slashdot response. (Score:2)
on finder select Go from the top bar then "connect to server" to then you can just adress it like smb://*IPaddy-or-server name*/*Share-directory*/ (or you can press command+k to open up the screen then do the same)
You can also use samba on the command line if your more comfertable there.
Re:A typical slashdot response. (Score:2)
I guess I'll have to do it manually until they fix it.
Re:A typical slashdot response. (Score:2)
Fair enough i could have said menu bar , but if he is more fammilar with windows or even a DE like KDE ( i know you can have KDE put the menu bar at the top aswell) he may have been looking at a finder window trying to see where it was.
A little system literacy is always good , but it never hurts to try and simplfy things for people.
Re:? troll (Score:2)
Though i was honestly not trying to troll in the grandparent , i do apoligise if it seems that way.
As an apple user (partly
Its natural to defend something you spend a great deal of time on
So perhaps im not a zelout , perhaps i was just annoy
Re:? troll (Score:2)
Re:A typical slashdot response. (Score:2)
But the problem has been that Windows has never had a perfect release whereas Apple has had a wonderful track-record in most of their releases. [insert long tirade about security here[ [insert monopolistic p
Re:A typical slashdot response. (Score:4, Insightful)
Re:A typical slashdot response. (Score:2)
conversely, does anyone really think MS could give a shit about the end-users' experience? does anyone bother with the "send report" feature? when has anyone at MS made something better just for the hell of it? for example why, after probably almost a decade, is it still necessary to run disk cleanup for every
Re:A typical slashdot response. (Score:2)
Maybe you should change your reading preferences. I surf at 1+ and so far your post is the most extreme I've seen. The parent of yours is at 3, but I would hardly call his post "zealotry". Perhaps unsubstantiated opinion, but not "zealotry"... You post, OTOH, looks 10 times as long to go on and on about zealotry... And I'm assuming your use of 'iPOS' is a typo and not an insult or else your post would be entirely self-contradictory.
Re:Here's a bet: (Score:2)
Work-around (Score:5, Informative)
Command-K to bring up the connect menu and type in the full address INCLUDING THE SHARE NAME:
smb://SERVER/folder
Re:Work-around (Score:5, Informative)
$ mount_smbfs -W workgroup
Re:Work-around (Score:2, Informative)
Re:Work-around (Score:2, Informative)
We've changed the way filesystem events are propagated through the system in Tiger, so this is no longer necessary. Command-line mounts work just like Finder mounts now.
Re: (Score:2)
Re:Work-around (Score:3, Informative)
More like Apple wants all data on an OS X client machine to be somewhere in a user's folder rather than placed arbitrarily elsewhere on the drive. I have to agree with this stance-- in the pre-OS X days people would put their files wherever they wanted them (and frequently, accident
Re:Work-around (Score:3, Informative)
There's a lot to be said for having a location bar.
Opposite Experience (Score:4, Interesting)
Re:Opposite Experience (Score:2)
Re:Opposite Experience (Score:2)
Good to know at least ONE thing about the work network is going to suck less...
Anecdotal... (Score:4, Informative)
I'm not sure whether he had to turn on the encrypted passwords at the Mac end or the PC end, but I seem to recall thinking "gosh, imagine that, doing something the secure way."
Re:Anecdotal... (Score:3, Informative)
Re:Anecdotal... (Score:2)
Re:Anecdotal... (Score:3, Informative)
Not sure if it's this... (Score:5, Informative)
I got this solution from here [allinthehead.com] by the way. Thanks to Drew McLelland.
I fixed my problems (Score:4, Informative)
Connecting for SMB works better for me (Score:2)
I do have some sympathy for apple regarding this. Anyone who uses Windows shares frequently will know that even different versions of Windows can have difficulty operating together.
Re:Connecting for SMB works better for me (Score:2)
"different versions"? Hey, to get "difficulties" you need to stay at least within the same major version. Otherwise, you'll need to resort to tricks like copying files via a Samba box.
Finder and Linux Sambda shares (Score:5, Interesting)
Re:Finder and Linux Samba shares (Score:2)
Re:Finder and Linux Sambda shares (Score:2)
Re:Finder and Linux Sambda shares (Score:2, Interesting)
Cheers,
--
Arkan
Re:Finder and Linux Sambda shares (Score:2, Informative)
Finder will not be able to write files into places it thinks it can't - apparently without checking if it really is the case.
Conversely, Finder will attempt to write into places it thinks it can, but it can't, only to fail with a somewhat weird error message.
I don't know if this has been fixed under Tiger.
Re:Finder and Linux Sambda shares (Score:2, Informative)
Oh, you mean, another problem? (Score:2)
And, to be specific, this was definitely a Finder issue: I could use "cp ~/Documents/somefile.txt
I don't use samba anymore (Score:5, Interesting)
I also was annoyed the fact when I turned my powerbook on after it went to sleep it would give me a lot of errors about unmounting a network drive. This also was the case with tiger. With nfs, those problems are gone an nfs mount will stay active after the powerbook comes back from sleep.
Re:I don't use samba anymore (Score:2)
It always gets complicated when security is added to the equation. Its not a simple matter, but its assumed you are a sys admin with a degree. I am not.
Re:I don't use samba anymore (Score:2)
Re:I don't use samba anymore (Score:3, Informative)
- mounts disappear occasionally for no apparent reason, and the automounter won't remount them, forcing me to reboot.
- NFS client performance is significantly worse than Linux (~20MB/sec vs ~100MB/sec reading from the same server over the same gigabit network)
- Some (very important to us) OSX apps have significant problems dealing with NFS paths. Final Cut Pro doesn't use symlinks properly, instead it hard-codes the target of the symlink into your proj
History of SMB problems with OS X (Score:5, Informative)
The pain I had getting SMB to perform acceptably under 10.2 nearly put me off OS X. Basically, the way that 10.2 handled mounting network filesystems really sucked. It was unreliable and often left the system hanging with a spinning beachball (the Mac equivalent of an egg timer). Often, powering off was the only solution.
This was fortunately fixed later on in the 10.2 lifecycle with some networking updates. Things got much better from then on.
When I got my own iBook several months later, it arrived with 10.3. This release seemed to have a reasonably good SMB implementation, but the performance was truly sucky. File transfer speeds between the iBooks and my Linux-based Samba server were low, but at least mounting was reliable.
As 10.3 progressed, this problem went away and performance/reliability are currently both very good. It means I can use SMB between my Linux server and both iBook and Windows XP clients. All works just fine.
I am, however, considering a move to WebDAV for file sharing on the network. WebDAV is a nicely lightweight protocol and has the benefit of being an open standard. Most good implementations are open source too. There are also client libraries for most decent scripting/programming languages. The added benefit is that you can integrate the WebDAV server in to OS X to perform iSync backups of your system and do calendar sharing etc. All nice, geeky, stuff.
The only major problem I can see at the moment is that the way the WebDAV server interacts with the underlying filesystem is a bit complex, given that my server runs under Apache. The model it appears to assume is that the server will have a dedicated directory or area for WebDAV files, and not simply share out a user's home directory or a backup drive.
I do need to go and RTFM, however.
Re:History of SMB problems with OS X (Score:2)
This is normal (Score:3, Insightful)
I'm sorry, but if you are installing Tiger onto a mission-critical system, you deserve the problems you get. Give the software time to mature before rushing to employ it in your networks.
No Admin worth their salt installs a new OS (Score:5, Insightful)
Re:No Admin worth their salt installs a new OS (Score:5, Insightful)
Now that AFP support under linux is much better, I'm almost certainly going to go back to Linux for my main file servers. At least it is a known quantity.
Re:Exception (Score:3, Insightful)
1) you have no idea how much testing Sarge has actually undergone. For all we know only 5% of users are using Debian/Sarge on a regular basis. While in theory any package in Sarge should have gone through two weeks of Sid testing first, there have been bugs in Sarge packages.
2) Sarge may be the best release ever, but have you tested it in your environment? Is the new version of an application going to be able to import your existing data?
Regardless of the quality of the software a
Why SMB? (Score:2)
Wait a minute... (Score:5, Insightful)
SysAdmin Rule #1: If you depend on it, and it works fine the way it is, don't mess with it. [If it ain't broke...]
SysAdmin Rule #2: If you want to mess with it, test it before deploying it.
Why the hell did people install a
We waited to deploy WinXP until the first service pack was released--and that saved our ass. I think it's ignorant to ignore that principle on the Mac side as well--esp. with a major update.
Early adopters are unpaid beta testers. Congratulations--you found the bugs!
Apple or not... (Score:5, Insightful)
If you insist, however, do it right. Prep a build of the new OS and put it on its own hard drive in the machine of your one or two most clueful end users. Let them beat on it for a while and document their problems/questions as they try to do their work. Once in a while go through the list and address their fixable issues. If they happen upon a show-stopper, they simply boot from the drive with the old build on it and use that until the next service release appears. Then you apply it, and test again. Repeat as necessary until the number of issues is low enough that you can confidently deploy the new OS build to all end users.
I have used this technique to great effect at several of my Mac clients, though I don't even consider giving them the newest OS until the
As for OS X Server, that gets tested in my company's lab and on my bench at home from the day we get it, but it doesn't get rolled out anywhere until
~Philly
Works better than before for me (Score:3, Informative)
I'm running into the exact opposite scenario:
Under Tiger, SMB filesharing *screams* as compared to how it ran under Panther and earlier incarnations of OS X. I'm able to connect to my samba fileshare on my Linux box, and my Win XP box, without any trouble whatsoever.
In the past, I was always able to connect, but file transfers were dog-slow. They seem normal now.
Go figure.
So far I'm having the opposite experience (Score:4, Informative)
The other day a colleague of mine installed Tiger on his laptop (he never had it bound before, just connected to whatever shares with Cmd-K, etc.). He asked about using his AD credentials to log on. I told him "Sure, we just need to bind it to AD, do a few tweaks and anyone with an AD account could log in, just like Windows." Meanwhile, I was mentally crossing my fingers that there wouldn't be any new tweaks that needed to be learned.
So I pointed him to Utilities/Directory Access and had him click the Active Directory option, put in his domain (this is where I would usually start my VooDoo dances with the "advanced" options -- but I thought, "what the hell, lets give it a shot") click on Bind. It asked for a domain admin account, which I entered, and it bound without a hitch (I about fainted). I had him reboot (just to make sure) and then had him log in with his AD account. I worked beautifully, including mounting his home directory off our Win2K server. This had NEVER worked without tweaking for us under panther (although with a little tweaking under 10.2.8+ it worked fine). We transfered files, which went smoothly and quickly, and we looked around the network a bit.
Although I haven't thoroughly tested it yet, I'd say my initial experience with Tiger and SMB/AD has been great. That being said, MOST of our problems with Macs using our AD domain has been Windows-related (missing DNS entries, Sites-and-Services borked, or WINS not working/configured right, etc). Hearing about problems like this after a major change doesn't exactly surprise me, and I'm willing to cut Apple a bit of slack here. They are dealing with a reverse-engeneered protocol on networks where it is very likely that AD isn't in pristine or "best-practices" condition.
We have 35 sites using AD right now in our domain, and the migration from NT4 to Win2K/AD was a learning experience, to say the least. We've learned a lot in the process and, we've found that if you mess up something in AD in the beginning, it's damn near impossible to cleanly remove or fix it. I suspect that there are a lot of installations out there that still have AD ghosts hanging around that make 3rd-party integration a crap-shoot at best. What apple needs to work on is improving their tolerance for broken AD implementations, like windows does.
Of course, if MS would publish the full SMB/AD protocol it would be easier.
Re:Active Directory (Score:2)
Panther had it, but it was a bit busted (didn't give you a proper kerberos key for example, and didn't really integrate with the samba filesystem). Panther also had the issue that you had to practically destroy your network security to get it to work as it didn't support encrypted connections or NTLMv2.
Tiger fixes most of this (connected to my Win2003 ADC without having to tweak anything, and smbclient -k works now) - it's just that you can't actuall
Re:Samba supports it (Score:2, Interesting)
I find this interesting, because at the university where I work, the security policy requires centralized AD authentication from all computers in the network. After that I've hardly seen any Linux PCs or Macs around anymore. When I asked about it from one of our IT guys, he said that you can't authenticate non-Wind
Re:Samba supports it (Score:3, Informative)
As far as the protocol, SMB is (IIRC, I could be wrong) an IBM-designed protocol. It's been around for ages - hell, NT domains were just hopped up lan manager networks. The authentication in active directory uses a slightly modified form of kerberos - also an open protocol. They have tried to put a
Re:Samba supports it (Score:4, Informative)
Re:Samba supports it (Score:2)
AD is, amazingly enough, (almost) all standard LDAP and Kerberos. The only "extension" of weight that they have made is the use the PAC field of a Kerberos ticket to include authorization data (IIRC, this includes the group SIDs of the principal).
The thing is that while the PAC field is standardized by the Krb5 RFC, so that all clients (Microsoft o
Re:So, what! (Score:2)
Re:seen this before... (Score:3, Informative)
(Macintosh is abbreviated Mac, not MAC.)