Public Folders not accessible as Guest

Question

Level 2

152 points

Public Folders not accessible as Guest

Having a problem connecting to Public folders as Guest on certain Mavericks iMacs [10.9.2] over the company LAN.

The network has no problems, no IP conflicts. There are other 10.9.2 Macs that can have their Public Folders accessed. There is no discernable difference between the computers, some are older that have been upgraded to Mav, others are new and came with Mav installed.

I've created different user accounts on the problem Macs and the result is the same. Changed the IP addresses, nothing.

I can connect to these Macs with admin user credentials and access the Public Folders that way, but it's kind of contradictory. This for me points away from the network and to the Macs themselves. Any ideas would be helpful.

Regards.

iMac, OS X Mountain Lion (10.8.4), 2.7 Ghz i5, 8GB Ram

Posted on Apr 1, 2014 3:59 AM

Reply

Answer 1

Best reply

sterling r

Community Specialist

Apr 3, 2014 9:13 AM in response to Neilo

Hello Neilo,

It sounds like your guest users arent able to access shared folders. This is a toggleable setting in the System Preferences:

OS X allows guests to access shared folders on your Mac. To turn off guest access, deselect “Allow guests to connect to shared folders” in the Guest Account pane of User & Groups preferences.

From: OS X Mavericks: Share your files

http://support.apple.com/kb/PH14189

Thank you for using Apple Support Communities.

Take care,

Sterling

Reply

Answer 2

Neilo Author

Level 2

152 points

Apr 4, 2014 2:14 AM in response to sterling r

Thanks for the reply Sterling, I should have stated that all our Macs are set with File Sharing 'On' to allow all users access to each others' Drop Boxes.

The screen grab above is from this user:

This issue has only arrived with Mavericks but is not affecting all Mavericks computers. Only AFP is set not SMB. Is there something beyond the Sharing Prefs that can affect Public Folder access?

Reply

Answer 3

sterling r

Community Specialist

Apr 6, 2014 12:03 PM in response to Neilo

Thank you for the update. I would next repair the disk permissions on all computers that are having the issue with the following article:

Disk Utility 12.x: Repair disk permissions

http://support.apple.com/kb/ph5821

Open Disk Utility, in the Utilities folder in Launchpad.

Select the disk you want to check.You can verify or repair permissions only on a disk with Mac OS X v10.7 Lion installed.

Click First Aid.

Do one of the following:

Click Verify Disk Permissions to test permissions.

Click Repair Disk Permissions to test and repair permissions.

Disk Utility repairs the permissions for files installed by the Mac OS X Installer, Software Update, or an Apple software installer. It doesn’t repair permissions for your documents, your home folder, or third-party applications.

If the issue persists, I would like to thank you for using the Apple Support Community. Due to the nature of your issue you may find more information by using another one of Apple's support resources - https://getsupport.apple.com/GetproductgroupList.action.

Reply

Answer 4

Neilo Author

Level 2

152 points

Apr 15, 2014 1:33 AM in response to sterling r

Thanks again Sterling, is there anyone near you who is familiar with Kerberos? Here is some Console details from the computer I am trying to access as guest:

14/04/2014 18:07:47.823 digest-service[320]: digest-request: od failed with 2 proto=ntlmv2

14/04/2014 18:07:47.823 digest-service[320]: digest-request: user=\GUEST

14/04/2014 18:07:47.824 digest-service[320]: digest-request: kdc failed with 36150275 proto=unknown

14/04/2014 18:07:47.824 digest-service[320]: digest-request guest: ok user=DAVE-MORRISSEY\GUEST proto=ntlmv2 flags: NEG_KEYEX, ENC_128, NEG_VERSION, NEG_TARGET_INFO, NEG_NTLM2, NEG_NTLM, NEG_TARGET, NEG_UNICODE

14/04/2014 18:07:54.454 digest-service[320]: digest-request: uid=0

14/04/2014 18:07:54.454 digest-service[320]: digest-request: init request

14/04/2014 18:07:54.456 digest-service[320]: digest-request: init return domain: DAVE-MORRISSEY server: DAVE-MORRISSEY indomain was: <NULL>

14/04/2014 18:08:02.468 kdc[93]: Got a canonicalize request for a LKDC realm from local-ipc

14/04/2014 18:08:02.468 kdc[93]: LKDC referral to the real LKDC realm name

14/04/2014 18:08:02.469 kdc[93]: AS-REQ davemorrissey@LKDC:SHA1.4FD5C7E5DC3FDB1A8E6B55B1AD6DF4B577C2CCE9 from local-ipc for krbtgt/LKDC:SHA1.4FD5C7E5DC3FDB1A8E6B55B1AD6DF4B577C2CCE9@LKDC:SHA1.4FD5C7E5DC3 FDB1A8E6B55B1AD6DF4B577C2CCE9

There are many Apple Discussions dating back to OS Tiger about LKDC and SMB issues, none that I read refer to guest logins, but they are centred around authentication.

When I guest access my own Mac [Mav upgrade] from the above machine [Mav out of the box] it is successful and there are no Console entries.

Reply

Answer 5

Neilo Author

Level 2

152 points

Apr 15, 2014 8:12 AM in response to sterling r

For the love of Thor!

Firstly, thanks Sterling for pointing out the obvious.

Secondly, thanks Apple for changing something that didn't need changing, or for not telling us you changed it. Guest sharing has been on by default for as long as I can remember, why change that?

Thirdly, I have a headache from reading up on Kerberos and not seeing the obvious.

Reply