Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Login Screen/Process has changed. Is there another user?

I had left the MacMini in sleep mode last night and had to login from scratch this morning. The login screens (File vault is locked) were again very different from the last self-shutdown (I usually just put it to sleep). Today it needed me to to unlock then enter Username (I'm the only user - this field had always been filled in) and PW. Checked the login keychain to find myself identified as "718". Kind: PPP Password, Account: Mine, Where: F48888D8-842C-4BD0-A0E3-E1C984A51042, and modified 10/14 8:00 p.m. Is this coming from System Network preferences??

I looked for hints of why the login process changed yet once more. I had made minor changes hoping to secure sharing. Usually when I logged on the sharing preferences were either unlocked, or bluetooth serial ports were on and locked. (Not by me). Please help me to reset the Mini to how the login and sharing preferences are supposed to be.

Here are selected lines from the Sync Services system log at about the time I turned it on. I've googled most of the entries and "remote controller" and "multiple devices" don't sound right. One thing I wonder is why it turns on through macvanagas.gateway.2wire.net, a networking address.


Oct 17 11:26:55 MacVanagas kernel[0]: Ethernet [AppleBCM5701Ethernet]: Link up on en0, 100-Megabit, Full-duplex, Symmetric flow-control, Debug [796d,2301,0de1,0300,45e1,0000

Oct 17 11:26:57 macvanagas.gateway.2wire.net configd[16]: setting hostname to "macvanagas.gateway.2wire.net"

dbname: od:/Local/Default

mkey_file: /var/db/krb5kdc/m-ke

acl_file: /var/db/krb5kdc/kadmind.acl

macvanagas.gateway.2wire.net digest-service[812]: digest-request: uid=0

macvanagas kernel[0]: IOBluetoothUSBDFU::probe My bluetooth is disabled

macvanagas kernel[0]: IOBluetoothUSBDFU::probe ProductID - 0x828A FirmwareVersion - 0x0066

macvanagas kernel[0]: **** [BroadcomBluetoothHostControllerUSBTransport][start] -- Completed -- this = 0xffffff8014a2b000 ****

macvanagas kernel[0]: [IOBluetoothHCIController][staticBluetoothHCIControllerTransportShowsUp] -- Received Bluetooth Controller register service notification -- controller = 0xffffff8014a2b000

Oct 17 11:27:05 macvanagas.gateway.2wire.net rpcsvchost[818]: sandbox_init: com.apple.msrpc.netlogon.sb succeeded

Oct 17 11:27:05 macvanagas.gateway.2wire.net digest-service[812]: digest-request: init return domain: MACVANAGAS server: MACVANAGAS

CGXDisableUpdate: UI updates were forcibly disabled by application "universalaccessd" for over 1.00 seconds. Server has re-enabled them.

Oct 17 11:27:05 macvanagas.gateway.2wire.net digest-service[812]: digest-request: uid=0

macvanagas.gateway.2wire.net digest-service[812]: digest-request: init return domain: MACVANAGAS server: MACVANAGAS

Oct 17 11:42:56 macvanagas.gateway.2wire.net mdwrite[952]: [ERROR] [0.001s] com.apple. UBItemStatusNotification.c:805 _do_UBItemStatusNotificationRegisterURLs() can't find realpath for "/Users/anerismithe/Library/Mobile Documents/com~apple~system~spotlight/mdlabels", was blocked at "/Users/anerismithe/Library/Mobile Documents": 2

No alternate URLs found for packageId MobileDevice

It is scary that a Mobile Device is trying to join me.

In software installations there are two new 3rd Party PlugIns installed last night and this morning. No other information. It's possible that one is an NPR piece that just now showed up in the software list.

A concern is that firewall, system and UUCP logs are now of .bz2 activity. For example, system.log.0.bz2

There is a warmd user named "nobody" sending and receiving msgs @ port 38.


In the most recent shutdown log there is a good bit of shared and anonymous activity. For example,

30575 com.apple.launchd.peruser.501 133 com.apple.mdworker.single.08000000-0000-0000-0000-000000000000 0 Mach service deleted:

30596 com.apple.launchd.peruser.501 133 com.apple.mdworker.shared.04000000-0000-0000-0000-000000000000 0 Mach service deleted:


30991 com.apple.launchd.peruser.501 133 0x7ff4e251c760.anonymous.com.apple.Notes 480 Reaping

30998 com.apple.launchd.peruser.501 133 0x7ff4e251c760.anonymous.com.apple.Notes 0 Removed


554038 com.apple.launchd.peruser.501 133 0x7ff4e24039f0.anonymous.loginwindow 53 Mach service deleted (port died): com.apple.coredrag

560772 com.apple.launchd.peruser.501 133 0x7ff4e24039f0.anonymous.loginwindow 0 Removed


I apologize for putting up all these logs pieces. I don't haved the vocabulary to convey it in words.

Should I take the Mini to the genius bar, have it wiped clean and start over?

Mac mini, OS X Mountain Lion (10.8.5)

Posted on Oct 17, 2013 6:25 PM

Reply
Question marked as Best reply

Posted on Oct 18, 2013 5:42 PM

Hi, do you know who "anerismithe" might be?


Could someone have plugged in a device via USB?


Is your Mac set to wake for administrative purposes?


Wake for WLAN or Wifi access?

23 replies

Oct 24, 2013 8:10 PM in response to BDAqua

Finder "Go to" only User: anerismithe, which is also the home folder.

In Pref Users & Groups Current and only User: Aneri Sanesur which is somewhat gray and pink checkmark remains.

I'm guessing the "Allow to administer" field is grayed out because unchecking it would leave no administration.

Apparently anerismithe is the short name for fast user switching. The full name option restores Aneri Sanesur.

Wonder why booted from sleep login frequently shows the checked red circle...


~ is shorthand for your user name. Thank you! 😀

You're allowed to laugh: I was using finder by entering info into the search field, like spotlight. Didn't think to look up at the menu.


Oh, one more thanks - learned a bit about USB3.

Oct 24, 2013 9:07 PM in response to BDAqua

Sharing and permissions: anerismithe has read&write, staff read only, everyone read only privileges. she has "custom access"

In anerismithe info pull down, Users&Groups, Administrators under which Aneri Sanesur is in pale gray.


I'm going to close tabs, log out Aneri, shut down, and see what happens tomorrow. Thanks.

Oct 25, 2013 7:58 AM in response to BDAqua

Ok. On next boot. Need to step away for a bit. Using iPad on which every app has crashed and it has not produced an awdd or metric log in weeks. Have no way to tell if the issues are related. Only thing in common is 2-wire modem/router. Unless you say otherwise, plan to take iPad to apple store, have geniuses wipe it clean and reinstall OS. Have saved crash reports etc. Oh. Same thing happened with previous iPad. Will check in within a day or so. Thanks again.

Login Screen/Process has changed. Is there another user?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.