Lion: prompted for lpadmin group when printer pauses (and Apple's permissions mess)

I didn't have a problem with Snow Leopard and my prior printer, but our elder MacBook (plastic, dual USB, no ML support) running Lion is having repeated problems with our Brother HL-6180DW. The printer keeps going into a paused state (sleep / wake bug?), and users are prompted to "Type the name and password of a user in the lpadmin group to allow...". Of course the kids don't know what to type -- and this is a very awkward prompt in any case. Something is broken.

Of course a lot of things are broken with OS X and printing - even in Mavericks. So this isn't a great surprise. It is annoying though.

There are lots of online tips on this mostly focusing on terminal commands for adding users to lpadmin manually or disabling printer queue password requirements. Sometimes they seem to work, sometimes not. [1]. 

The only Apple doc on this covers 10.5 (Leopard) to 10.6 (Snow Leopard). It's weirdly written, and suggests some intersection with parental controls  "Limit printer administration" (which makes sense). Then it talks about toggling admin privileges for the admin user, even though one assumes that only non-admin users would see the prompt.

FWIW even after I created a new admin account on the Lion machine OS X 10.7 wouldn't let me toggle admin status for my primary admin account. It merely said it couldn't. Seems there was something odd about that admin account. So I deleted it (my admin accounts are all disposable, I only use them for admin tasks). I'll see if fixing that makes any difference. If not I'll play around with toggling parental controls and exploring Workgroup Manager and those terminal commands.

- fn -

[1] If you don't like Terminal Commands took a look at Workgroup Manager. Lion’s Server Admin Tools includes Workgroup Manager, I used Workgroup Manager downloads to get the Mountain Lion version (see also). You need to select “Show System Records” to see the “system” users and groups (thank you Google).

In Mountain Lion the lpadmin group is _lpadmin and the Name is Print Administrators. All Administrators were members of lpadmin, and so was ONE of the FIVE non-admin accounts on that machine. Interestingly the ONLY non-admin member of lpadmin on my ML box has parental controls enabled. By Darwin, Apple made such a mess of permissions in OS X.

See also:

• 10.5: Disable printer queue password requirements - Mac OS X Hints: first seen in 10.5, Leopard.
• Mac OS X - Print Job “On Hold (Authentication required)” - Authentication problem with print servers, suggests I might try changing his password.
• osx - How to Resume a Paused Network Printer with non-Admin credentials?: “_lpoperator should suffice, talks about adding Staff to _lpoperator

Update 4/5/2014

Most of the problems were with one user’s account. With Workgroup Manager I found he was NOT a member of Staff, but all other Lion user accounts were. He was a member of a Group that had the same name as his User Name, probably due to the horrid User/Group/Staff mess of 10.3 to 10.7. I deleted that Group and assigned him to Staff. I’ll see if that works.

There’s also a recent Brother printer driver update to try, and a firmware update. The latter requires Java, which is essentially obsolete on the Mac. I was able to perform the update using an old Lion machine. Shame on Brother for not supporting firmware updates via the web app. (They used to.)

Is my Apple refurb GSM iPhone really factory unlocked and ready for Virgin Mobile Canada?

Last year I discovered that Virgin Mobile Canada's [1] prepaid service worked quite well with an AT&T (GSM) post-contract unlocked iPhone 4S. It looked like for about $15-$20/month I could buy enough data to support email, iMessage and Facebook (with video autoplay disabled) [2].

That made me think about a battered AT&T iPhone 4 unlocked refurb phone with an old battery and balky Home button [4] we've been using as a backup. My Canadian sister has no computer or net access -- maybe I could set her up on Virgin with the iPhone 4. 

A bit of research [2] suggests that the American GSM iPhone 4 should work on Virgin's network -- though at a slower rate than the 4S. (Virgin's SIM card FAQ IMEI lookup didn't recognize my IMEI, but I think I ran into that with the 4s too.) So the plan looked doable, but I wanted to give her a phone that would last -- and I didn't want to try my own repairs [5].

There are two options for refreshing an old iPhone 4 with a known defect (I don't know of any equivalent service for Android). You can pay about $170 for an Express Replacement or you can see what the local Apple store will do. If you do the Express Replacement or a typical Apple store refresh you'll probably get an AT&T locked iPhone back, and have to beg AT&T for help.

This time I tried my local Apple store -- and got a top notch "Genius". She decided to give me a refurb for $155, so I saved on the ERS fee. Even better, she said, I'd be getting an Apple unlocked refurb [6]. The entire process took about 15 minutes. Nice deal - looks good as new, fresh battery, home button should work for a while.

Except ... how could I tell it was really unlocked? I tried the erase/restore procedure for AT&T unlocks, but iTunes didn't show me the nice "Congratulations, your iPhone has been unlocked" message. I tried IMEI.info (surrendering more personal data), but it didn't recognize the IMEI. I think Factory Unlocks are different.

In the end I found two techniques. One is to inspect the Settings screens, there I found a "Carrier" menu I'm not used to seeing. It showed up with an old (inactive) AT&T SIM card inserted.

The Carrier menu let me select two carriers (after I turned off 3G data [7], I think T-Mobile only does EDGE data for the 4/4s though maybe a carrier settings update would help):

 

I had an old (inactive) T-Mobile SIM in my desk, so I tried that and got some more menus of interest:

and with the old T-Mobile SIM my carrier changed (though I still had no service)

So Apple delivered as promised. I think the Carrier options by themselves are a pretty good indicator of an Apple factory unlocked GSM phone.

- footnotes -

[1] A Bell Wireless Affiliate, 

[2] Voice is 40 cents/min, so strictly for emergency. This strategy is a pure data play.

[3] Radios:

Bell Affiliates like Virgin use 850 and 1900MHz GSM frequencies (and some CDMA). 

iPhone 4s

• GSM 850, 900, 1800, 1900 MHz
• HSDPA 14.4 Mbit/s, HSUPA 5.76 Mbit/s, UMTS, EDGE, EV-DO Rev.A

iPhone 4

• GSM 850, 900, 1800, 1900 MHz
• HSDPA 7.2 Mbit/s, HSUPA 5.76 Mbit/s, UMTS, EDGE

[4] Achilles heel of the iPhone 4. They all fail.

 

[5] I've done that -- it's a mug's game. It's difficult to find genuine parts, and it takes most of us a few phones to get good at these repairs.

[6] Maybe improved policies since Nov 2013?

 

[7] At some point in my experiments I got a No Service - Restricted Network message. Turning off 3G and cellular data let me connect to T-Mobile.

GrandView Outliner and Information Manager: Scanned manual from 1990 - and a DOS Emulator

Before the Omni Group created OmniOutliner, there was Symantec MORE 3.1 (Mac) and GrandView 2.0 (DOS) [1]. I was a heavy user of MORE, but I also owned GrandView. Like OmniOutliner, GrandView combined features of a traditional outliner with a spreadsheet (columnar metadata).

Recently Jim W and Daniel G scanned the GrandView Reference Manual. It's a bit of history, both of an innovative software app and of a time when floppy disks shipped with lovingly prepared paper manuals. Grab it while it's hot!

(I'll eventually move the files to my personal site and fix up the above link, but it should work for the moment.)

[1] OmniOutliner 3 imported MORE 3.1 outlines. I don't know if that's true of version 4, I haven't upgraded. I wouldn't blame them for dropping that feature!

Update 4/21/2014: I’ve yet to update my old web page, and I’ve more files from Jim and Daniel to post, but life is hectic. In the meantime I’ll share here a note from Gregory J on running GV in a DOS emulator on Win64:

Just wanted to follow up with you to let you know that I found a pretty easy way to run Grandview inside 64-bit Windows 8.1. I downloaded the "DOSBox-0.74" DOS Emulator Program and install it (the 32-bit works fine under my 64-bit Win8)

http://www.dosbox.com/information.php?page=0

Next, I put my Grandview Program Files and Data Files into a subdirectory c:\GV

I navigated to C:\Program Files (x86)\DOSBox-0.74 and I Run "DOSBox.exe"
At the Z prompt type MOUNT C C:\GV
then c:\
then GV.EXE

At this point I'm able to run Grandview perfectly. More importantly I'm able to EXPORT my Outline contents into an ASCII File (a/k/a a Text File) into the c:\GV subdirectory. Then I'm able to cut N' Paste text in this text file to use elsewhere inside of Windows 8. My goal is to find OLD data I have stuck inside Grandview and get it copied so I can use that Data in new programs under Win8.

BTW, Pressing alt-enter will switch to Full Screen (making GV highly usable) and inside GV pressing Ctrl-2 will expand everything in the outline to make for a GREAT text file export.

The DOSBox Tutorial is at http://www.dosbox.com/wiki/Basic_Setup_and_Installation_of_DosBox

Managing unwanted Mac startup apps: ScanSnap's AOUMonitor and Citrix Receiver

I replaced my despised ScanSnap S1300 with (sigh) another Fujitsu - the ScanSnap ix500. So far I like the ix500 almost as much as I disliked its predecessor. I bought it as a document scanner, but I'm using it to process several thousand prints currently stuck in a bin. The image quality is nowhere near as good as my Epson V700 [1], but it's a lot better than nothing. [2]

The next day though, my 2009 iMac (Mountain Lion)'s mouse pointer was frozen after screensaver clearance. The machine didn't respond to keyboard either; I hard to power cycle. This happened a few more times, though sometimes the keyboard worked.  I found if I unplugged the peripherals, including my Mini DisplayPort external monitor, I could get things working.

In my recent experience this kind of problem is most often hardware related -- perhaps a problem with my USB bus (7-8 devices on one old hub!) or Firewire bus. I do look for software issues though, and I realized I had two new apps running in my Menu Bar. One was called AOUMonitor and the other was Citrix Receiver.

Yikes! It's true that modern Mac issues are more often hardware than software, but those are two bad actors. AOUMonitor is Fujitsu's "ScanSnap Online Update" -- and Fujitsu is known for buggy Mac software. I only run ScanSnap Manager when I need it. Citrix is even worse -- my wife has to use it but it shouldn't be running in my account.

I needed both of them out.

AOUMonitor was easy. From my Admin account I found ScanSnap Online Update Settings.app and turned off auto-update. then I went to the Admin startup items and disabled AOUMonitor. I saw that ScanSnap Manager was also running for all users on startup, so I deleted that as well. I'll run it when I need it.

I figure AOUMonitor crept in when I uninstalled my old ScanSnap software and installed the new stuff, then updated it. I can't explain how Citrix Receiver showed up; until now I'd only seen it in my wife's account. Maybe some auto-update? Maybe I just never noticed it before. Disturbing!

Of course Citrix Receiver is an evil hack, so you don't find it Apple's User Startup Items list. I followed MacWorld's Take control of startup and login items (See also: Troubleshooting Startup and Login Items) and found several Citrix items in ~\Library\Library\LaunchAgents. I moved them to Emily's personal Library\LaunchAgents folder so they'd only run in her account.

Now we'll see if my mouse problems improve. Next thing is reducing the stress on the USB hub - and changing my screensaver away from Aperture slideshows.

- fn -

[1] Scanner tech isn't changing much -- just faster. So good photo scanners last a long time, but of course prints are going away -- so the useful lifetime of photo scanners is limited.

[2] Not the point of this post, but I just dump 30 or so photos in the feeder and scan to iPhoto at 300 dpi, color, minimal compression.  The ix500 does a batch in about 15 seconds. Then I flip over to Aperture and organize 'em. The photos go into appropriate "Events" after I fix version names and set an approximate date, but I also create albums that match the photos to a code number (S1 ... Sn) on the photo envelopes. Then when I'm done it's easy to find prints or negatives that I want to scan property. I didn't return to high quality cameras until I went digital, so for most of these prints the quick scan is good enough.

Mass archiving of thousands of Gmail messages - working around Gmail's new bugs

A family member had accumulated over 6000 messages in her Gmail inbox. No problem thought I, I'd just use the old "Select All" trick and be done with it.

Not so fast. Turns out this is broken in Gmail 1/2014. Actually, it's worse than it was in Nov 2013, I added an additional correction to the Stack Exchange thread [1]. 

Google now returns only 45 messages at a time, regardless of search critera. This worked:

1. Turn off special boxes, turn off conversation mode
2. Do search: before:2014/1/1
3. Use Select All box
4. NOW, only now, I see "Select all messages that match this search". Still see only 25 results. Click archive button. See "Loading...."

The Google still needs us, but increasingly it despises the humans it once serves. We know how this ends.

Seriously [2], The Google isn't into its old web apps any more. It is an AI/robotics company now, leaving the limitations of a merely digital existence behind.

- fn -

[1] In Jan 2014 only personal blogs, Stack Exchange, and Apple Discussions are healthy information sources.

[2] Ok, I was serious on the first one too. It's not personal, it's just corporate evolution in action.

Persistent performance issues on a friend's iMac: eternally stuck spotlight indexing

A buddy of mine is more tolerant of computer problems than I am, but he's been dropping hints that he'd like me to take a look at his Mac Mini. He's an AS/400 guy, not a Mac geek.

So I dropped by and did the usual hygiene on his Snow Leopard Mini (SL is a great OS, so no rush to change that). Turned off Spotlight (make boot disk "Private"), restarted holding down D key to run hardware test, restarted holding shift key to run Apple's Safe Mode (startup volume check), ran software update, checked Flash versions, ran Onyx.

After that it seemed fast and smooth. So I restarted Spotlight and saw "Estimating Indexing Time" in the Spotlight drop down. Not just for seconds -- for minutes. Spotlight was stuck. 

One solution, is to move all 3rd Party Spotlight Importers out of /Library/Spotlight username/Library/Spotlight. He had 3: iWork, Office, and Parallels. I moved them all out and Spotlight quickly estimated remaining time and completed indexing.

I think his months/years of performance issues came from Spotlight constantly reindexing/getting stuck. Naughty Apple -- there should be a better way to deal with flawed 3rd Party products. (Maybe there is in Mavericks.) If I had to bet I'd wonder if the versions of Office docs created by Open Office somehow cause problems for Microsoft Office's mdimporter.

That's quite a bit of suffering for a bad 3rd party Spotlight indexing tool he didn't know existed. It's also illustrative of how hard it is to maintain a modern computer; what was a minor cleanup for me had stalled him for months. One reason iOS is so popular -- and so closed.

Cleaning up a Twitter account may no longer be possible

Eons ago I wrote using my TrueName. In those days the sun was brighter, the snow softer, Google was good, and unicorns danced on rainbows.

That was a long time ago, in the Second Age. (In the First Age, there was no spam.)

Now I write as John Gordon [2], and my TrueName net content is the essence of bland. Except for a forgotten TrueName Twitter account I'd used for a few months after the fall of Google Reader Social [1]. That one is a bit spicy, and fully available to curious customers and employers.

Be nice to be able to clean that up and make it a part of my corporate persona. Once upon a time I think it was possible to do that, using things like Twitwipe, delteallmytweets, tweetdelete and so on. These days, however, those Twitter App sites are infested with spam and adware. Delete All MY Tweets seemed the least bad so I tried it.

It didn't work. I don't pay much attention to Twitter, but I do know as they turned to the Dark Side they did limit use of their API. I suspect none of these services work any more - I suspect they were sold and turned to the not-good-side. It may be possible to write an AppleScript or Python script to sequentially delete tweets using the twitter web app, but even there I suspect there are limits.

The best I could do was to Protect all of the Tweets on that account. That means anyone who wants to follow it has to be granted permission. Alas, because this is Twitter, current Followers are a problem. You can't simply return them to a non-follower state, you have to Block them. I didn't mind blocking the half that were spambots, but there were a few there who followed me from our Google Social days. Most don't seem to be active on Twitter any more, so I hope they aren't offended. 

One last bit of the old net facade fades away...

[1] My John Gordon Twitter account is active, though it's largely an echo of my much appreciated app.net account.

[2] Yep, G+. I have a few G+ accounts, but my primary TrueName gmail account is G-.