Lion: Connecting to legacy AFP services - and Mac OS X (server)

After upgrading to MacOS X Lion, it was discovered that it was not possible to logon to Novell-shares and NAS-boxes (e.g. Qnap).

Here is a recipe that has been tested OK with the following combinations:
* Mac OS X Lion -> Novell shares
* Mac OS X Lion -> Mac OS X 10.5 server
* Mac OS X Lion -> Mac OS X Lion
* Mac OS X Lion -> Qnap (NAS via AFP)

Please note that the command-lines themselves must not have CR/NL-characters. Copy the commands to a text-editor and remove format-inserted CR/NL-characters.

Another note: Your logon will be less secure with these changes. Later when e.g. Novell and/or your NAS-box support native Lion-logon, then please remove the AppleShareClient-parameter changes again with the first block.

-

Recipe:

The following block can be skipped if you have not previously changed AppleShareClient-parameters.
In the terminal.app the following commands are applied:

Code:

sudo -s
chmod o+w /Library/Preferences
cd  /Library/Preferences/
rm com.apple.AppleShareClient.plist*
! Restart

The following block makes it possible to logon to: (1) Novell-shares (2) Pre Lion Mac-OS-X-volumes - and possibly non-native Lion logon NAS-shares:

Code:

sudo -s
chmod o+w /Library/Preferences
defaults write /Library/Preferences/com.apple.AppleShareClient afp_host_prefs_version -int 1
! Restart

You now (might) have to logon a real account (non-guest) on another Mac OS X Lion volume
to catalyst a creation of AppleShareClient-files. (See Apple-support-link) (Is this necessary?)

Code:

chmod o+w /Library/Preferences
defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array "Cleartxt Passwrd" "MS2.0" "2-Way Randnum exchange"
defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array "DHX2"
defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array "DHCAST128"

chmod o-w /Library/Preferences

PS:

Possibly all volume-links may be deletes and recreated to use the new logon-parameters?

-

Sources for command-bricks:

OS X Lion: Connecting to legacy AFP services:
http://support.apple.com/kb/HT4700

AFP changes in OSX Lion:
http://www.novell.com/communities/node/13155/afp-changes-osx-lion

AFP support for DHX2 authentication mechanism on OES:
http://www.novell.com/support/searc...rnalId=7008683&sliceId=1&docTypeID=DT_TID_1_1

-

Example:

Code:

bash-3.2# chmod o+w /Library/Preferences
bash-3.2# cd  /Library/Preferences/
bash-3.2# rm /Library/Preferences/com.apple.AppleShareClient.plist*
bash-3.2# chmod o-w /Library/Preferences
bash-3.2#
! Restart
Last login: Fri Aug 12 14:41:58 on console
$ sudo -s
Password:
bash-3.2# chmod o+w /Library/Preferences
bash-3.2# defaults read /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams
2011-08-12 14:42:31.172 defaults[188:707]
The domain/default pair of (com.apple.AppleShareClient, afp_disabled_uams) does not exist
bash-3.2#
! Restart
Last login: Fri Aug 12 14:47:31 on console
$ sudo -s
Password:
bash-3.2# chmod o+w /Library/Preferences
bash-3.2# defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array "Cleartxt Passwrd" "MS2.0" "2-Way Randnum exchange"
bash-3.2# defaults read /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams(
    "Cleartxt Passwrd",
    "MS2.0",
    "2-Way Randnum exchange"
)
bash-3.2# defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array "DHX2"
bash-3.2# defaults read /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams
(
    DHX2
)
bash-3.2# defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array "DHCAST128"
bash-3.2# defaults read /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams
(
    DHCAST128
)
bash-3.2# chmod o-w /Library/Preferences
bash-3.2#

Also submitted here:

Lion: Connecting to legacy AFP services - and Mac OS X (server)
http://forum.qnap.com/viewtopic.php?f=30&t=48143
https://discussions.apple.com/thread/3258472