Sample Header Ad - 728x90

Ask Different (Apple)

Q&A for power users of Apple hardware and software

Latest Questions

13 votes
3 answers
2823 views
How do you stop Safari from offering passwords from all subdomains of a domain?
So I have these few websites in the same domain (i.e. example1.domain.com and example2.domain.com) that have a different subdomain and Safari offers me passwords from all of them when I enter just one of them. Is there a way to disable Safari offering passwords if the subdomain is different?
So I have these few websites in the same domain (i.e. example1.domain.com and example2.domain.com) that have a different subdomain and Safari offers me passwords from all of them when I enter just one of them. Is there a way to disable Safari offering passwords if the subdomain is different?
Arthmost (373 rep)
Aug 11, 2016, 12:29 PM • Last activity: Mar 12, 2024, 09:02 AM
1 votes
1 answers
277 views
.io .xyz and other less popular TLDs cannot be resolved
I bought a new MacBook Pro 2021 M1, and I can't access URLs ending with `.io`, `.xyz`, and other less popular TLDs. The issue does not come from the browser. I tried many browsers and the terminal commands `ping` and `curl`. The error message I'm getting depends on which program I'm using to call th...
I bought a new MacBook Pro 2021 M1, and I can't access URLs ending with .io, .xyz, and other less popular TLDs. The issue does not come from the browser. I tried many browsers and the terminal commands ping and curl. The error message I'm getting depends on which program I'm using to call the URLs. But basically, this is the message I'm getting: "Could not resolve host". The URLs are all valid because I can open them from my phone, which is connected to the same WiFi network as my MacBook. I'm sure the problem concerns the firewall (or DNS?). What can I do to fix this problem? Edit: I used the following command: sudo dscacheutil -flushcache;sudo killall -HUP mDNSResponder It worked for a day and now it stopped working again. I didn't change any DNS or Firewall settings in the meantime.
BonisTech (91 rep)
Jun 15, 2023, 10:26 AM • Last activity: Jul 7, 2023, 11:17 AM
1 votes
1 answers
4499 views
Block Parallels Desktop from connecting to domain without using `/etc/hosts`
I have the following lines in my `/etc/hosts`. Parallels Desktop keeps commenting lines which as it needs to connect to that domain. I tried changing access of `/etc/hosts` to 444 but it suddenly changed to 644. It seems like Parallels Desktop needs to edit `/etc/hosts` to define hosts on its local...
I have the following lines in my /etc/hosts. Parallels Desktop keeps commenting lines which as it needs to connect to that domain. I tried changing access of /etc/hosts to 444 but it suddenly changed to 644. It seems like Parallels Desktop needs to edit /etc/hosts to define hosts on its local network. How can block access of Parallels Desktop from these domains without changing /etc/hosts?
Parsa Noori (111 rep)
Sep 27, 2022, 07:58 AM • Last activity: Oct 10, 2022, 07:25 AM
1 votes
0 answers
323 views
Multi level defaults write value as integer instead of string
From https://apple.stackexchange.com/questions/423115/macos-defaults-write-data/441755 I'm looking to add as above. Basically, trying to achieve https://support.google.com/chrome/a/answer/7591084#updatepolicysettings&zippy=%2Cturn-off-updates%2Csample-property-list I managed to add it like `defaults...
From https://apple.stackexchange.com/questions/423115/macos-defaults-write-data/441755 I'm looking to add as above. Basically, trying to achieve https://support.google.com/chrome/a/answer/7591084#updatepolicysettings&zippy=%2Cturn-off-updates%2Csample-property-list I managed to add it like defaults write /Users/samson/Library/Preferences/com.google.Keystone.Agent.plist '{"updatePolicies" = {global = {UpdateDefault = 4;};};}' But the value 4 adds it as a string instead of integer like below. updatePolicies global UpdateDefault 3 How do I add it as an integer instead ? Also, this erases the existing plist contents and adds only what I added in above command? How do I add the above, in addition to what is already in the plist ? Thanks for the help in advance!
Arun Chatterjee (11 rep)
May 30, 2022, 08:47 PM • Last activity: May 30, 2022, 08:51 PM
1 votes
0 answers
181 views
How could the domain in different areas resolve to a different IP address?
When I nslookup the domain in area1, it get `103.61.39.86` ``` [root@localhost ~]# nslookup demo.com Server: 8.8.8.8 Address: 8.8.8.8#53 Non-authoritative answer: Name: demo.com Address: 103.61.39.86 ``` but when I nslookup the domain in area2, it get `47.94.236.96` ``` [root@localhost ~]# nslookup...
When I nslookup the domain in area1, it get 103.61.39.86
[root@localhost ~]# nslookup demo.com
Server:		8.8.8.8
Address:	8.8.8.8#53

Non-authoritative answer:
Name:	demo.com
Address: 	103.61.39.86
but when I nslookup the domain in area2, it get 47.94.236.96
[root@localhost ~]# nslookup demo.com
Server:		8.8.8.8
Address:	8.8.8.8#53

Non-authoritative answer:
Name:	demo.com
Address: 	103.61.39.86
--- if using CDN, in general, the nslookup should resolve to a CNAME, so can judge the www.demo.com case is not using CDN?
[root@localhost ~]# nslookup otafsg-cost-az.demo.com
Server:		8.8.8.8
Address:	8.8.8.8#53

Non-authoritative answer:
Name:	otafsg-cost-az.demo.com
Address: 184.87.193.87
Name:	otafsg-cost-az.demo.com
Address: 184.87.193.77
Name:	otafsg-cost-az.demo.com
Address: 2600:140b:a00:c::b81b:b945
Name:	otafsg-cost-az.demo.com
Address: 2600:140b:a00:c::b81b:b957
> Server:		8.8.8.8
Address:	8.8.8.8#53

Non-authoritative answer:
Name:	otafsg-cost-az.demo.com
Address: 184.87.193.77
Name:	otafsg-cost-az.demo.com
Address: 184.87.193.87
Name:	otafsg-cost-az.demo.com
Address: 2600:140b:a00:c::b81b:b957
Name:	otafsg-cost-az.demo.com
Address: 2600:140b:a00:c::b81b:b945
What is going on here?
244boy (591 rep)
May 23, 2022, 12:58 AM • Last activity: May 23, 2022, 05:59 AM
0 votes
0 answers
373 views
How do I assign my iCloud hosted domain email address to its own mailbox?
I have a domain work email address I transferred over to iCloud a few months ago. Since then all new email addressed to it arrives in my iCloud.com email address box. Is there a way of setting up the mail app to put my domain email address in its own mailbox and have it synched across devices?
I have a domain work email address I transferred over to iCloud a few months ago. Since then all new email addressed to it arrives in my iCloud.com email address box. Is there a way of setting up the mail app to put my domain email address in its own mailbox and have it synched across devices?
ATL_DEV (371 rep)
Feb 1, 2022, 08:25 PM
2 votes
3 answers
3952 views
Catalina cannot resolve servers in the .local domain without the domain being specified
---------- ---------- **tl;dr** In the Catalina terminal *ping lan-services.local* works but *ping lan-services* does not ---------- ---------- I have a 2012 Mac mini that I just installed Catalina on from scratch (i.e. blank SSD and USB install) connected to a home network via Ethernet that cannot...
---------- ---------- **tl;dr** In the Catalina terminal *ping lan-services.local* works but *ping lan-services* does not ---------- ---------- I have a 2012 Mac mini that I just installed Catalina on from scratch (i.e. blank SSD and USB install) connected to a home network via Ethernet that cannot find servers / devices on the LAN without appending '.local' to the name. This was not needed before Catalina on the same LAN set-up (i.e. the only thing I can think of that's changed is the OS on the Mac). e.g. ~% ping lan-services ping: cannot resolve lan-services: Unknown host ~ % ping lan-services.local PING lan-services.local (192.168.1.10): 56 data bytes 64 bytes from 192.168.1.10: icmp_seq=0 ttl=64 time=5.480 ms ... ^C ### Network Config for Ethernet ### - IPv4 configured *Using DHCP* - IPv6 configured *Link-local only* - DNS set to *1.1.1.1* and *208.67.220.220* (set by router) - Advanced / DNS / Search Domains is *local* (no dot as per help examples) - Mac Firewall is *OFF* - Everything else has not been changed (i.e. default to Catalina) ### /etc/hosts file ### No entries have been added (where not needed on Mojave) ## # Host Database # # localhost is used to configure the loopback interface # when the system is booting. Do not change this entry. ## 127.0.0.1 localhost 255.255.255.255 broadcasthost ::1 localhost ### VPN and Anti-Virus ### - VPN software installed BUT **NOT** active - this is the same as the previous Mojave install - Two VPNs Windscribe and Bitdefender (I could not load Bitdefender without its VPN software) - Disabling Bitdefender 'Shield' does not help ### Target servers / devices ### - Internet router is DNS server with a default domain as *local* - Some set up as static IPv4 in their config files - some dynamic - Internet router has static IPv4 assignments for the servers / devices - ISP does not support IPv6 so the router is set to RADVD (link-local) but NOT bound to an external interface - Finder correctly shows the server I am trying to PING - Finder opens the server shares fine (it is a Pi using Netatalk / AFP for file sharing **NOT** SMB) - Some devices have IPv4 only, some have IPv4 and IPv6 stacks loaded - No devices has any firewall settings that would stop PING or SSH ### scutil --dns output ### DNS configuration resolver #1 search domain : local nameserver : 1.1.1.1 nameserver[1] : 208.67.220.220 if_index : 5 (en1) flags : Request A records reach : 0x00000002 (Reachable) resolver #2 domain : local options : mdns timeout : 5 flags : Request A records reach : 0x00000000 (Not Reachable) order : 300000 resolver #3 domain : 254.169.in-addr.arpa options : mdns timeout : 5 flags : Request A records reach : 0x00000000 (Not Reachable) order : 300200 resolver #4 domain : 8.e.f.ip6.arpa options : mdns timeout : 5 flags : Request A records reach : 0x00000000 (Not Reachable) order : 300400 resolver #5 domain : 9.e.f.ip6.arpa options : mdns timeout : 5 flags : Request A records reach : 0x00000000 (Not Reachable) order : 300600 resolver #6 domain : a.e.f.ip6.arpa options : mdns timeout : 5 flags : Request A records reach : 0x00000000 (Not Reachable) order : 300800 resolver #7 domain : b.e.f.ip6.arpa options : mdns timeout : 5 flags : Request A records reach : 0x00000000 (Not Reachable) order : 301000 DNS configuration (for scoped queries) resolver #1 search domain : local nameserver : 1.1.1.1 nameserver[1] : 208.67.220.220 if_index : 5 (en1) flags : Scoped, Request A records reach : 0x00000002 (Reachable) ### Things checked ### - A search turned up this question (though it seems to be a reverse issue) and the solution of adding *mdnsactivedirectory* via *discoveryutil* but that program seems to have been deprecated in Catalina - this was not required in Mojave. - I may not be the only one having this issue (going by this Apple Forum question ) but no domain is shown and the 'hint' is either talk to Apple or look at Active Directory (not installed here). - Turning on file sharing does not help. - Checked sons Windows 10 PC - he can reach devices without the .local as well as devices with the .local (pin lan-services checked **before** pin lan-services.local) and is running iTunes for his music. - A note from above test today I'm not running iTunes as Apple changed to iTune to the Music App - Just installed Discovery - DNS-SD Browser from eh App Store (thanks to Lily Ballard for this FOC package). This shows its picking up services from AFP over TCP and picking up all the devices on my home LAN (easier to play with): enter image description here ### Workarounds I'm trying to avoid ### 1. Adding entries into /etc/hosts 2. Adding .local to the end of each server name by hand - me being lazy (though this is what I am currently doing) 3. Installing ANOTHER DHCP / DNS server (e.g. pi-hole / pfSense etc) 4. Downgrading to Mojave 5. Moving to SMB shares - one server does not seem to support SMB without a whole series of faff for security and performance is pathetic. TBH also I do not have a great deal of practice with SAMBA security (basic shares fine) and no spare cash in project to upgrade old servers if Samba does not run on them.
user370793
Jul 4, 2020, 01:12 PM • Last activity: May 16, 2021, 07:10 PM
0 votes
0 answers
29 views
How do I publish symlinks as regular files over SMB3?
I have this file that's dropped in a Mac via rsync, then Windows fetches it but it needs it to be named differently according to use, so the obvious answer, I thought, was to symlink it into all of these files, except that Windows recognizes it's a symlink and can't follow its location. How do I mod...
I have this file that's dropped in a Mac via rsync, then Windows fetches it but it needs it to be named differently according to use, so the obvious answer, I thought, was to symlink it into all of these files, except that Windows recognizes it's a symlink and can't follow its location. How do I modify Samba (I'm guessing) to serve it as independent files? i.e; hide the fact that it's a symlink from Windows…or other clients, since I suppose I can't single out a single client. *If it's relevant to anything; the Mac is domain-joined as are the Windows hosts; domain credentials are being used to set/access share permissions.*
Vita (303 rep)
Nov 6, 2020, 06:22 PM
0 votes
0 answers
59 views
iPhone 8: WiFi only connects to certain domains, resetting network settings did nothing
My WiFi is working perfectly fine throughout the house (no other device is having issues) and for some reason my phone just stopped connecting in certain apps and sites. For example it will connect to Instagram but will refuse to connect to Spotify. I can connect to any domain on cellular still. Res...
My WiFi is working perfectly fine throughout the house (no other device is having issues) and for some reason my phone just stopped connecting in certain apps and sites. For example it will connect to Instagram but will refuse to connect to Spotify. I can connect to any domain on cellular still. Resetting network settings did nothing, I tried twice, I tried hard resetting and whatever else I could think of and nothing else was doing it. I tried connecting to the multiple different networks in my house. I’m not sure what else to do on my end or if I will have to contact Apple, or if the phones adapter just suddenly stopped working?
Joey Bathje (1 rep)
Oct 10, 2020, 12:25 AM • Last activity: Oct 10, 2020, 04:36 PM
0 votes
0 answers
166 views
The easiest way to restart active directory connection (preferable from command line)
I'm currently testing my software compatibility in macOS Big Sur, and it requires connection to domain controller… Unfortunately, in this new environment (beta version) the connection goes down after going back from sleep mode. In order regain connectivity I've found a workaround, by removing and th...
I'm currently testing my software compatibility in macOS Big Sur, and it requires connection to domain controller… Unfortunately, in this new environment (beta version) the connection goes down after going back from sleep mode. In order regain connectivity I've found a workaround, by removing and than re-inserting the AD connection... However, this is very time consuming. Perhaps there's any alternative from commandline to restart the AD connection so I can use it in script automatically ?
Zohar81 (641 rep)
Jul 30, 2020, 07:58 AM • Last activity: Jul 30, 2020, 08:02 AM
0 votes
0 answers
259 views
Cannot connect to my remote IP address without a reboot, multiple pieces of software affected
I just recently switched back to Mac OS after using a Windows 10 machine for a year. I have noticed an issue that existed with my previous Macbook Pro, and is now plaguing my new machine. I have a private server sitting on my residential public/remote IP Address. When I take my new Macbook out of sl...
I just recently switched back to Mac OS after using a Windows 10 machine for a year. I have noticed an issue that existed with my previous Macbook Pro, and is now plaguing my new machine. I have a private server sitting on my residential public/remote IP Address. When I take my new Macbook out of sleep and try to ssh into it, I will occasionally get this error: ssh: connect to host *myserver*: Can't assign requested address This is the exact error that I used to receive on my old Macbook Pro. Only a restart or an ifdown / ifup of my network interface resolves the problem. This isn't just an error with ssh, either. I cannot connect my VPN to this server, or even visit the website that is hosted on it. Trying to access my domain / direct IP address in the browser (or via any other method, for that matter) fails. The only thing that solves this problem is a reset of the network interface or a hard reboot. I'm wondering if anyone else has ever run into this issue - and if so, if they have a solution for it. Any information would be greatly appreciated! Thank you everyone.
Joe DiMascio (1 rep)
May 26, 2020, 03:32 PM
1 votes
1 answers
1260 views
Can't connect as different user while accessing network share with in domain network in Mac
Can't connect as different user while accessing network share with in domain network in Mac. Through Go > Connect to server > connect as
Can't connect as different user while accessing network share with in domain network in Mac. Through Go > Connect to server > connect as
Jeevan Dilson (11 rep)
Apr 8, 2019, 11:32 AM • Last activity: Mar 13, 2020, 04:53 AM
0 votes
0 answers
1313 views
Trying to open plist file to read ShadowHashData but keep getting an error ("the domain/default pair... does not exist")
I am trying to run a command to try and look at a plist file on my computer, so I type this into terminal: cd /Volumes/"Macintosh HD" and then sudo defaults read /var/db/dslocal/nodes/Default/users/ .plist ShadowHashData However, whenever I do this, I get this result: The domain/default pair of (/va...
I am trying to run a command to try and look at a plist file on my computer, so I type this into terminal: cd /Volumes/"Macintosh HD" and then sudo defaults read /var/db/dslocal/nodes/Default/users/.plist ShadowHashData However, whenever I do this, I get this result: The domain/default pair of (/var/db/dslocal/nodes/Default/users/.plist, ShadowHashData) does not exist This might be a simple question, but I really want to run this command and I don't know how why the command doesn't work. I'd really appreciate some help.
Reina (51 rep)
Mar 8, 2020, 12:32 PM
0 votes
0 answers
29 views
Domain accounts available to use only after restart
We have issue with our OSX Catalina desktop computers and AD domain. The machines join domain with no problems, but the domain accounts are usable only after login with local account. Say there's unexpected system crash (restart) or power outage. Afterwards on the login screen the only option for lo...
We have issue with our OSX Catalina desktop computers and AD domain. The machines join domain with no problems, but the domain accounts are usable only after login with local account. Say there's unexpected system crash (restart) or power outage. Afterwards on the login screen the only option for login are local accounts. After that if I logout then I'm able to choose domain account to use. I've tried all the suggestions I could find after googling, but none of them helped.
excessive (1 rep)
Jan 9, 2020, 12:50 PM
1 votes
0 answers
185 views
Share a USB printer over Active Directory domain network
I would like to share a printer connected with the USB cable to my iMac with all the other Windows PCs that are part of a Windows Server 2016 Active Directory domain network. Of course to do so, my iMac must be part of this network. What I didn't understand is when can one say that an iMac is part o...
I would like to share a printer connected with the USB cable to my iMac with all the other Windows PCs that are part of a Windows Server 2016 Active Directory domain network. Of course to do so, my iMac must be part of this network. What I didn't understand is when can one say that an iMac is part of a domain network? On Windows it is simple, just look at the information on the network and see if there is the word "domain network". When on an iMac you go into the "network" setting and correctly insert IP, subnet, gateway (router on OS X?) and DNS (domain) can we already consider it part of the domain network? Or is it necessary to join the domain? Ultimately, to share a printer from the iMac, is it sufficient to correctly configure the "network"?
nicovon (81 rep)
Dec 4, 2019, 06:39 PM • Last activity: Dec 5, 2019, 09:37 AM
1 votes
0 answers
27 views
Put the domain user in login screen
Having done the domain binding, I need to log in with the domain user without entering the user every time. This is because I should type "domainname\user" each time and this is not very fast. Is it possible to enter only the password and have the domain user already present in the login screen as i...
Having done the domain binding, I need to log in with the domain user without entering the user every time. This is because I should type "domainname\user" each time and this is not very fast. Is it possible to enter only the password and have the domain user already present in the login screen as it already happens with local accounts?
nicovon (81 rep)
Dec 4, 2019, 07:55 PM
9 votes
1 answers
35501 views
kinit: krb5_get_init_creds: unable to reach any KDC in realm LOCAL
How I am supposed to configure Kerberos on OS X 10.8 ? I heard that this should work by default, just by calling `kinit` once. Still, I am on the corporate network (not joined any domain) and run `kinit`. All, I got was kinit: `krb5_get_init_creds: unable to reach any KDC in realm LOCAL` Note: I do...
How I am supposed to configure Kerberos on OS X 10.8 ? I heard that this should work by default, just by calling kinit once. Still, I am on the corporate network (not joined any domain) and run kinit. All, I got was kinit: krb5_get_init_creds: unable to reach any KDC in realm LOCAL Note: I do want to make it work without having to join the Windows domain. /var/log/opendirectory.log shows:
2012-09-05 14:05:16.600904 BST - 81.144675 - Client: mds, UID: 0, EUID: 0, GID: 0, EGID: 0
2012-09-05 14:05:16.600904 BST - 81.144675, Module: SystemCache - Misconfiguration detected - Failed to insert key 'ABCDEFAB-CDEF-ABCD-EFAB-CDEF00000037' for entry '0x7fbf0fa01140' into hash 'UUID' as 'non-authoritative'
sorin (31160 rep)
Sep 5, 2012, 02:02 PM • Last activity: Oct 21, 2019, 06:26 PM
0 votes
1 answers
7812 views
dsconfigad returns error "authentication server could not be contacted. (5200)", but GUI domain join works without a problem
So I've built a "script", to deploy using JAMF. It is pretty much a single command. It looks like this: dsconfigad -add "SERVERNAME" -force -computer "COMPUTERNAME" -domain "SELECTED_OU" -username "ADMIN" -password "SOMEPASSWORD" When run, doesn't matter if from script in Jamf, or typed manually, it...
So I've built a "script", to deploy using JAMF. It is pretty much a single command. It looks like this: dsconfigad -add "SERVERNAME" -force -computer "COMPUTERNAME" -domain "SELECTED_OU" -username "ADMIN" -password "SOMEPASSWORD" When run, doesn't matter if from script in Jamf, or typed manually, it failes with error: > dsconfig: Authentication server could not be contacted. (5200) The weirdest thing is it works immedietaly when doing it with GUI (preferences -> Users & Groups -> Login Options -> Network Account Server). I tried to google it, but nothing seems to work (like an implication, there is some problem with time sync between server and MacOS computer). Any ideas, where to find the solution?
kjubus (153 rep)
Aug 5, 2019, 11:31 AM • Last activity: Aug 6, 2019, 10:15 AM
3 votes
0 answers
219 views
Strange domain name appears in Sharing Preferences, source unknown
First of all before anyone asks, I have already set my DNS name in the Terminal with `scutil`, which is reflected on the Terminal prompt and returned by the `hostname` command. I also understand that this is separate from my computer name, which is also set correctly at the top of the Sharing prefer...
First of all before anyone asks, I have already set my DNS name in the Terminal with scutil, which is reflected on the Terminal prompt and returned by the hostname command. I also understand that this is separate from my computer name, which is also set correctly at the top of the Sharing preference pane. However, there appears to be a _third_ name specified somewhere, and it shows up under the File Sharing and Remote Management sections. This is my work machine (A mac mini) and I inherited it from a previous employee so I don't know it's history, but I'm a Mac technician at an IT consultancy and we have seen this problem elsewhere, and it has us stumped. This rogue DNS name that hides somewhere on the system is also what our remote management software grabs to name our client's machines in our system, and since we have no known way to change it it's made reassigning machines to new users a confusing proposition on our end. Does anybody know what sets the domain names used by the remote management and file sharing services, and where it might get this value from? I have searched through so many configuration files and have come up empty handed. I assume that configd handles this assignment but I don't know how to configure or troubleshoot configd.
freeradicalx (81 rep)
Feb 8, 2013, 09:08 PM • Last activity: Aug 31, 2018, 11:35 PM
0 votes
1 answers
72 views
Mac Appstore adress
I'm trying to do a ping and a traceroute to the Mac Appstore for some testing purposes. Does anyone know the address, where the store is hosted. Thanks in advance. Max
I'm trying to do a ping and a traceroute to the Mac Appstore for some testing purposes. Does anyone know the address, where the store is hosted. Thanks in advance. Max
Max K (1 rep)
Mar 20, 2018, 03:43 PM • Last activity: Mar 20, 2018, 04:03 PM
Showing page 1 of 20 total questions