Lion: Connecting to legacy AFP services - and Mac OS X (server)

[Glenndk]

After upgrading to MacOS X Lion, it was discovered that it was not possible to logon to Novell-shares and NAS-boxes (e.g. Qnap).

Here is a recipe that has been tested OK with the following combinations:
* Mac OS X Lion -> Novell shares
* Mac OS X Lion -> Mac OS X 10.5 server
* Mac OS X Lion -> Mac OS X Lion
* Mac OS X Lion -> Qnap (NAS via AFP)

Please note that the command-lines themselves must not have CR/NL-characters. Copy the commands to a text-editor and remove format-inserted CR/NL-characters.

Another note: Your logon will be less secure with these changes. Later when e.g. Novell and/or your NAS-box support native Lion-logon, then please remove the AppleShareClient-parameter changes again with the first block.

-

Recipe:

The following block can be skipped if you have not previously changed AppleShareClient-parameters.
In the terminal.app the following commands are applied:

sudo -s
chmod o+w /Library/Preferences
cd  /Library/Preferences/
rm com.apple.AppleShareClient.plist*
! Restart

The following block makes it possible to logon to: (1) Novell-shares (2) Pre Lion Mac-OS-X-volumes - and possibly non-native Lion logon NAS-shares:

sudo -s
chmod o+w /Library/Preferences
defaults write /Library/Preferences/com.apple.AppleShareClient afp_host_prefs_version -int 1
! Restart

You now (might) have to logon a real account (non-guest) on another Mac OS X Lion volume
to catalyst a creation of AppleShareClient-files. (See Apple-support-link) (Is this necessary?)

chmod o+w /Library/Preferences
defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array "Cleartxt Passwrd" "MS2.0" "2-Way Randnum exchange"
defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array "DHX2"
defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array "DHCAST128"

chmod o-w /Library/Preferences

PS:

Possibly all volume-links may be deletes and recreated to use the new logon-parameters?

-

Sources for command-bricks:

OS X Lion: Connecting to legacy AFP services:
http://support.apple.com/kb/HT4700

AFP changes in OSX Lion:
http://www.novell.com/communities/no...anges-osx-lion

AFP support for DHX2 authentication mechanism on OES:
http://www.novell.com/support/search...eID=DT_TID_1_1

-

Example:

bash-3.2# chmod o+w /Library/Preferences
bash-3.2# cd  /Library/Preferences/
bash-3.2# rm /Library/Preferences/com.apple.AppleShareClient.plist*
bash-3.2# chmod o-w /Library/Preferences
bash-3.2#
! Restart
Last login: Fri Aug 12 14:41:58 on console
$ sudo -s
Password:
bash-3.2# chmod o+w /Library/Preferences
bash-3.2# defaults read /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams
2011-08-12 14:42:31.172 defaults[188:707]
The domain/default pair of (com.apple.AppleShareClient, afp_disabled_uams) does not exist
bash-3.2#
! Restart
Last login: Fri Aug 12 14:47:31 on console
$ sudo -s
Password:
bash-3.2# chmod o+w /Library/Preferences
bash-3.2# defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array "Cleartxt Passwrd" "MS2.0" "2-Way Randnum exchange"
bash-3.2# defaults read /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams(
    "Cleartxt Passwrd",
    "MS2.0",
    "2-Way Randnum exchange"
)
bash-3.2# defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array "DHX2"
bash-3.2# defaults read /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams
(
    DHX2
)
bash-3.2# defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array "DHCAST128"
bash-3.2# defaults read /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams
(
    DHCAST128
)
bash-3.2# chmod o-w /Library/Preferences
bash-3.2#

Also submitted here:

Lion: Connecting to legacy AFP services - and Mac OS X (server)
http://forum.qnap.com/viewtopic.php?f=30&t=48143
https://discussions.apple.com/thread/3258472

[CustomShoebox]

I work at a University where we support primarily Windows machines. We have some Mac machines, primarily in the Art and Music departments. We run Snow Leopard and some Leopard. We just purchased a new iMac and a replacement Mac Book Pro - both with Lion. We would prefer to stay with Snow Leopard for the rest of this year - but not sure that is an option. Also we use Novell for our network; and I have read and studied this post - on this forum and via Google.

I am attempting to access a server using the "Go" command in Finder. If i use a Mac Mini with 10.6.8, I have no problems. But Lion is not so cooperative.

So far, I cannot get this to work. I am using root and follow the steps but each time I still get the same error. When I tried to run this command:
rm com.apple.AppleShareClient.plist*

the system could not find this file. I did remove the first "apple." and could run the command. But I can not still run the program.

I have drilled down to the Preferences and cannot find a file named
com.apple.AppleShareClient.plist* or
com.AppleShareClient.plist*

Can someone give me any idea what I need to do? Or tell me if I am doing something wrong.

Thank you very much.