Macs Running Yosemite Freeze on Booting

We recently had some reports about Macs freeze on booting. The computers are all running the latest Yosemite. Here are the possible fixes for this problem. I listed them here with the detailed instructions on Apple’s website.

  1. Reset NVRam.
  2. Reset SMC.
  3. Boot to Safe Mode and reboot again.

On most machines, you only need to reset the NVRam. There is one machine that I used all three methods to get it to boot normally. Note that these are also the general procedures when you have problems with booting a Mac. You can try them even if the machine is not running Yosemite.

Cisco AnyConnect VPN “Failed to initialize connection subsystem” Error after Windows Update on Windows 8.1

After the recent Windows Update applied (February 2015), the Cisco AnyConnect VPN client stopped working on some of our Windows 8.1 machines. Whenever you try to connect, you get this dialog box. “Failed to initialize connection subsystem”.

ciscovpn-error

My colleague has suggested the following fix.

  1. Open Windows Explorer.
  2. Browse to C:\Program Files(x86)\Cisco\Cisco AnyConnect Secure Mobility Client on 64bit machine, or  C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client on 32bit machine.
  3. Right click on vpnui.exe and select Properties.
  4. Click on Compatibility tab.
  5. Click on Change settings for all users.
  6. Click on Run this program in compatibility mode for: and select Windows 8.
  7. Click on OK to close the dialog box, click on OK again to close vpnui.exe Properties window.
  8. Reboot the machine or restart Cisco AnyConnect Secure Mobility Agent service.

Windows could not search for new updates – Code 8024402C Windows Update encountered an unknown error

During a recent security scanning of our machines, we found several machines have not been updated for several months. These machines are running Windows 7 and set up to get updates automatically. Something was not right and caused the machine to stop receiving updates. I tried to do manually update on one computer and got this error message.

windows-update-error-01

A quick search found this article which helps me to solve the problem. The problem of my machines were caused by a registry value. Here are the steps I used to fix it.

  1. Click on the Windows logo on the task bar and type regedit.
  2. Right click on the regedit.exe program and select Run as administrator.
  3. Browser to this key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
  4. Double click on the value named UseWUServer and change the value data from 1 to 0. If you could not find this value or the value data is already 0, the cause of your problem is different. You’ll have to search for other solution.
    windows-update-error-02
  5. We have to restart the Windows Update service. In a Windows Explorer window, locate Computer. Right click on it and select Manage.
  6. Locate the Windows Update service. Right click on it and select Restart.
    windows-update-error-03

If restarting of the Windows Update service does not help, you can try to reboot the machine. I also found that after the registry change, one machine is still not able to do Windows Update correctly. I downloaded the Windows Update troubleshooter to fix that machine’s problem. Here is the link:

Open the Windows Update troubleshooter

 

How to Setup Inbox Rules for Shared Mailbox on Office 365

When my work email got migrated to Office 365, I found that the inbox rules (filters) were gone. It took me a while to find out how to set up the inbox rules. Here are the steps to get to the site to change them.

  1. Open a browser and visit this page

    https://outlook.office365.com/ecp/shared-mailbox-address/

    Replace shared-mailbox-address with your shared mailbox address.

  2. Click on organize email on the left side.
  3. Click on inbox rules on the top.
    office365-sharedmailbox-rules
  4. Click on the plus sign to add a new rule.

 

How to Install Debian Packages on Scientific Linux 6

I have been asked to install quite a few programs on a machine running Scientific Linux 6. Some of the programs do not offer rpm package or source code. The only way to install them is through apt-get. In order for me to install these programs on Scientific Linux, I need to convert the deb packages to rpm format. Before you follow the following procedures, note that this is not supported and it could break your system. Use it as the last resort and test them in a testing environment first. I will use a package called libgtkglext1 as an example.

  1. You will need a Debian based distribution to get the packages. You can install one using VitrualBox if you do not have access to a new machine.
  2. On the Debian box, install the alien package.
    sudo apt-get install alien
  3. We first need to get the deb package without installing it. Note that there might be other packages needed. Make a note of the supporting package names.
    sudo apt-get --download-only install libgtkglext1
  4. Find out the file name of the deb package. Do this for all the packages needed.
    ls /var/cache/apt/archives/libgtkglext1*
  5. Convert the deb file to rpm file. The last argument is from the output of step 4. Remember to convert the supporting packages too.
    alien --to-rpm --scripts /var/cache/apt/archives/libgtkglext1_1.2.0-2_amd64.deb
  6. Transfer the rpm file to the machine and install it.
    sudo rpm -Uvh libgtkglext1-1.2.0-3.x86_64.rpm

 

How to Setup AFP Service on Scientific Linux 6

I setup Samba service for a group of Mac users for file sharing. After a couple of months, the users are not satisfied with the performance and constant problems with permissions. I then setup AFP service and see if it works better. The setup did not take long and the users are happy with it so far. This is the first time I setup AFP service. I just want to write down the steps I used to install it so I can refer to them later.

  1. The service is provided by netatalk package. The first step is to install it if it’s not already installed.
    sudo yum install netatalk
  2. Edit netatalk.conf. On Scientific Linux 6, the configuration files are in /etc/netatalk. Make sure you have these lines.
    CNID_METAD_RUN=yes
    AFPD_RUN=yes
    ATALKD_RUN=no
    PAPD_RUN=no
    TIMELORD_RUN=no
    A2BOOT_RUN=no
    
  3. Edit afpd.conf in the same directory. Note that I want to use Kerberos, so I included them in here. Otherwise, you can remove uams_gss.so and the second line.
     - -tcp -noddp -uamlist uams_dhx.so,uams_dhx2.so,uams_gss.so -nosavepassword \
    -k5service afpserver -k5keytab /etc/krb5.keytab -k5realm MYCOMPANY.COM
  4. Edit AppleVolumes.default and have this line at the end.
    /path_to_afp_share allow:@groupname options:usedots,upriv

    replace the path_to_afp_share with the path of the directory you want to share. Replace the groupname with your group.

  5. Start the netatalk service
    sudo service netatalk start
    
  6. Test the AFP service. If it runs OK, type this command to set it to run at boot.
    sudo chkconfig netatalk on
    

How to Stop systemd-tty-ask-password-agent Wall Message on Scientific Linux 7

I was trying a new way to setup my Linux machine for Enterprise authentication. I got it to work partially. There is a message which keeps popping up in terminal window:

Broadcast message from [email protected] (Tue 2015-01-06 10:39:34 EST):

Password entry required for 'Password for user@//home.mycompany.com:' (PID 9943).
Please enter password with the systemd-tty-ask-password-agent tool!

To turn off this message, type this command in a terminal:

sudo systemctl stop systemd-ask-password-wall.service