From: Greg Ercolano <erco@(email surpressed)> Subject: [Q+A] Using After Effects on OSX Date: Mon, 18 Apr 2005 09:56:54 -0700 |
Msg# 888 View Complete Thread (10 articles) | All Threads Last Next |
> I have a Mac network that uses: > > - Domain logins every where > - No chnages to rush.conf > - Home dirs local only with no roaming profiles > > Every time I ran Rush, the process would run as the user submitting the job. > However this error would occur in /var/log/system.log; > > "aerender: kCGErrorRangeCheck : Window Server communication from outsode of session allowed for root and console user only" Yes, this is essentially the same error as the one described here on the "After Effects Issues" page: http://www.seriss.com/rush-current/ae6/index.html#OSX ..you might want to check that whole page for other AE related stuff. After Effects is unusual in that its network renderer still invokes the GUI, which means it must have permission to access the machine's window manager. The Adobe engineers have configured After Effects in 6.5 so that it opens the GUI in such a way that it isn't seen by the user of the window manager, but AE still needs permission to the window mananger to run correctly. This means using the setuid tweak on the aerender executable to make things work. > So I chose to chmod u+s aerender and chown it to root as well. Yes, should solve the problem. > I then got this error in rush logs for that particular frame; > > "After Effects error: finding preferences folder N no such volume (-35)" > "aerender ERROR -600: GetProcessForPID failed at line 847" > > So I created a home dir local on that render node that was the same as the user submitting the job. Not sure how you created the user's account without their home directory being created, but yes, the user the render runs as needs to have a home directory. Most programs (AE, Maya, etc) assume the user has a home directory so that it can load/save preference files, create tmp files, etc. Without that, the apps won't run, and often give obscure error messages like the above. (Maya does this too) To allow users to render on the nodes, the nodes must have valid accounts on each node (ie. same account names with same uid/gid values, and home dirs chowned/chmoded correctly). The only exception would be if you're using 'forceuid/forcegid' to force all renders to run under a single user account, in which case you only need to make sure /that/ account exists on all the nodes. The forceuid/gid stuff is useful if you want to just have everything render under a single user account, so you don't have to add new user accounts to all the machines. > I guess there is no real elegant way around the OSX window issue and > is something I should be well versed in for doing correct installs. Yes; Apple provides no permission mechanism workaround for this problem. The ball is really in Adobe's court; they need to make the command line renderer avoid doing anything to the Window Manager, so that it is more like other command line apps (maya, shake, etc). Adobe's engineers are aware of the problem, and working on it. |
From: Jeff Yana <240vac@(email surpressed)> Subject: Re: [Q+A] Using After Effects on OSX Date: Sat, 03 Dec 2005 01:27:25 -0800 |
Msg# 1127 View Complete Thread (10 articles) | All Threads Last Next |
So, in conclusion to this thread, it's not incorrect to say that before
an After Effects render job will launch under Mac OS X (10.x.x), the
following must be true:
a) WindowServer, launched via a valid user's logon (loginwindow), must be running (in order to enable the AE GUI to launch) b) and that that user (with the current logon) should be the (designated) Rush user (or at least should be a member of the same user group)? However, would "b)" still be even after "aerender" has been setuid'd to root? Greg Ercolano wrote: > I have a Mac network that uses: > > - Domain logins every where > - No chnages to rush.conf > - Home dirs local only with no roaming profiles >> Every time I ran Rush, the process would run as the user submitting the job.> However this error would occur in /var/log/system.log; >> "aerender: kCGErrorRangeCheck : Window Server communication from outsode of session allowed for root and console user only" |
From: Greg Ercolano <erco@(email surpressed)> Subject: Re: [Q+A] Using After Effects on OSX Date: Sat, 03 Dec 2005 03:23:05 -0800 |
Msg# 1128 View Complete Thread (10 articles) | All Threads Last Next |
Jeff Yana wrote: So, in conclusion to this thread, it's [correct] to say that before an After Effects render job will launch under Mac OS X (10.x.x), the following must be true:a) WindowServer, launched via a valid user's logon (loginwindow), must be running (in order to enable the AE GUI to launch) b) and that that user (with the current logon) should be the (designated) Rush user (or at least should be a member of the same user group)?However, would "b)" still be even after "aerender" has been setuid'd to root? With aerender configured setuid root, I've found I can render regardless of a) and b) under OSX. ie. I'm able to get AE to render even if /no one/ is logged in, and regardless of who's logged in if someone is. For instance, I have a 10.4.3 box with no one currently logged in (the login window is up, and there's no other logins on the box) and I just rendered this scene on the box: ### ### ontario.158: 0001 ### --------------- Rush 102.42 -------------- -- Host: tower -- Pid: 7642 -- Title: spiro_ae6 -- Jobid: ontario.158 -- Frame: 0001 -- Tries: 0 -- Owner: erco (1000/1000) -- RunningAs: erco (1000/1000) -- Priority: 1 -- Nice: 0 -- Tmpdir: /var/tmp/.RUSH_TMP.3 -- LogFile: //meade/net/tmp/ae6/spiro_ae6.aep.log/0001 -- Command: perl //meade/net/rushscripts/submit-afterfx.pl -render - //meade/net/tmp/ae6/spiro_ae6.aep Spiro //meade/net/tmp/images/foo.[####].png 1 0 3 Fail 0 off -- Started: Sat Dec 3 03:21:09 2005 ------------------------------------------ SCENEPATH: //meade/net/tmp/ae6/spiro_ae6.aep COMP: Spiro OUTPUTDIR: //meade/net/tmp/images/foo.[####].png AEVERSION: - RENDERFLAGS: BATCHFRAMES: 1 (1-1) RETRIES: 3 (Fail after 3 retries) PATH: /Applications/Adobe After Effects 6.5:/usr/local/rush/bin:/usr/local/rush/bin:/usr/local/rush/bin:/usr/libexec:/bin:/sbin:/usr/bin:/usr/sbin:/usr/libexec:/System/Library/CoreServices Executing: aerender -project "//meade/net/tmp/ae6/spiro_ae6.aep" -output "//meade/net/tmp/images/foo.[####].png" -comp "Spiro" -s 1 -e 1 PROGRESS: 12/3/05 3:21:12 AM: Starting composition Spiro . PROGRESS: Render Settings: Best Settings PROGRESS: Quality: Best PROGRESS: Resolution: Full PROGRESS: Size: 320 x 240 PROGRESS: Proxy Use: Use No Proxies PROGRESS: Effects: Current Settings PROGRESS: Disk Cache: Read Only PROGRESS: Frame Blending: On For Checked Layers PROGRESS: Field Render: Off PROGRESS: Pulldown: Off PROGRESS: Motion Blur: On For Checked Layers PROGRESS: Shutter Angle: (From Comp) PROGRESS: Solos: Current Settings PROGRESS: Time Span: Custom PROGRESS: Start: 0:00:00:01 PROGRESS: End: 0:00:00:01 PROGRESS: Duration: 0:00:00:01 PROGRESS: Frame Rate: 30.00 (comp) PROGRESS: Guide Layers: All Off PROGRESS: Storage Overflow: On PROGRESS: Skip Existing Files: Off PROGRESS: PROGRESS: Output Module: Lossless PROGRESS: Output To: net:tmp:images:foo.[####].png PROGRESS: Format: PNG PROGRESS: Output Info: - PROGRESS: Start Frame: 1 PROGRESS: Output Audio: - PROGRESS: Channels: RGB PROGRESS: Depth: Millions of Colors PROGRESS: Color: Premultiplied PROGRESS: Stretch: - PROGRESS: Crop: - PROGRESS: Final Size: 320 x 240 PROGRESS: Post-Render Action: None PROGRESS: PROGRESS: 0:00:00:01 (1): 0 Seconds PROGRESS: 12/3/05 3:21:12 AM: Finished composition Spiro . PROGRESS: Total Time Elapsed: 0 Seconds PROGRESS: Launching After Effects... PROGRESS: ...After Effects successfully launched AERENDER SUCCEEDS -- Greg Ercolano, erco@(email surpressed) Rush Render Queue, http://seriss.com/rush/ Tel: (Tel# suppressed) Cel: (Tel# suppressed) Fax: (Tel# suppressed) |
From: Jeff Yana <240vac@(email surpressed)> Subject: Re: [Q+A] Using After Effects on OSX Date: Sat, 03 Dec 2005 11:56:35 -0800 |
Msg# 1129 View Complete Thread (10 articles) | All Threads Last Next |
That's interesting because on my test machine, even with aerender
setuid'd root, I cannot get it to render. I must first login.
How are you mounting your SMB/NFS/AFP shares without logging in first? To do this, I made a small addition to the NFS startup item so that it mounts the share as a particular user (in this case the Rush user), which seems to work well... Greg Ercolano wrote: by www.3dsite.com (8.12.8/8.12.8) with SMTP id jB3BN511011754 for <rush decimal general at seriss decimal com>; Sat, 3 Dec 2005 03:23:05 -0800 Received: (qmail 80306 invoked from network); 3 Dec 2005 11:23:39 -0000 Received: from unknown (HELO ?192.168.0.9?) (unknown) by unknown with SMTP; 3 Dec 2005 11:23:39 -0000 X-pair-Authenticated: 24.205.137.195 Organization: Seriss Inc. User-Agent: Thunderbird 1.5 (X11/20051025) MIME-Version: 1.0 To: rush decimal general at seriss decimal com In-Reply-To: <1127-rush decimal general at seriss decimal com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Path: 3dsite.com Xref: 3dsite.com rush.general:1128 NNTP-Posting-Host: localhost Jeff Yana wrote:So, in conclusion to this thread, it's [correct] to say that before an After Effects render job will launch under Mac OS X (10.x.x), the following must be true:a) WindowServer, launched via a valid user's logon (loginwindow), must be running (in order to enable the AE GUI to launch)b) and that that user (with the current logon) should be the (designated) Rush user (or at least should be a member of the same user group)?However, would "b)" still be even after "aerender" has been setuid'd to root?With aerender configured setuid root, I've found I can render regardless of a) and b) under OSX. ie. I'm able to get AE to render even if /no one/ is logged in, and regardless of who's logged in if someone is. For instance, I have a 10.4.3 box with no one currently logged in (the login window is up, and there's no other logins on the box) and I just rendered this scene on the box: ### ### ontario.158: 0001 ### --------------- Rush 102.42 -------------- -- Host: tower -- Pid: 7642 -- Title: spiro_ae6 -- Jobid: ontario.158 -- Frame: 0001 -- Tries: 0 -- Owner: erco (1000/1000) -- RunningAs: erco (1000/1000) -- Priority: 1 -- Nice: 0 -- Tmpdir: /var/tmp/.RUSH_TMP.3 -- LogFile: //meade/net/tmp/ae6/spiro_ae6.aep.log/0001 -- Command: perl //meade/net/rushscripts/submit-afterfx.pl -render - //meade/net/tmp/ae6/spiro_ae6.aep Spiro //meade/net/tmp/images/foo.[####].png 1 0 3 Fail 0 off -- Started: Sat Dec 3 03:21:09 2005 ------------------------------------------ SCENEPATH: //meade/net/tmp/ae6/spiro_ae6.aep COMP: Spiro OUTPUTDIR: //meade/net/tmp/images/foo.[####].png AEVERSION: - RENDERFLAGS: BATCHFRAMES: 1 (1-1) RETRIES: 3 (Fail after 3 retries) PATH: /Applications/Adobe After Effects 6.5:/usr/local/rush/bin:/usr/local/rush/bin:/usr/local/rush/bin:/usr/libexec:/bin:/sbin:/usr/bin:/usr/sbin:/usr/libexec:/System/Library/CoreServices Executing: aerender -project "//meade/net/tmp/ae6/spiro_ae6.aep" -output "//meade/net/tmp/images/foo.[####].png" -comp "Spiro" -s 1 -e 1 PROGRESS: 12/3/05 3:21:12 AM: Starting composition Spiro . PROGRESS: Render Settings: Best Settings PROGRESS: Quality: Best PROGRESS: Resolution: Full PROGRESS: Size: 320 x 240 PROGRESS: Proxy Use: Use No Proxies PROGRESS: Effects: Current Settings PROGRESS: Disk Cache: Read Only PROGRESS: Frame Blending: On For Checked Layers PROGRESS: Field Render: Off PROGRESS: Pulldown: Off PROGRESS: Motion Blur: On For Checked Layers PROGRESS: Shutter Angle: (From Comp) PROGRESS: Solos: Current Settings PROGRESS: Time Span: Custom PROGRESS: Start: 0:00:00:01 PROGRESS: End: 0:00:00:01 PROGRESS: Duration: 0:00:00:01 PROGRESS: Frame Rate: 30.00 (comp) PROGRESS: Guide Layers: All Off PROGRESS: Storage Overflow: On PROGRESS: Skip Existing Files: Off PROGRESS: PROGRESS: Output Module: Lossless PROGRESS: Output To: net:tmp:images:foo.[####].png PROGRESS: Format: PNG PROGRESS: Output Info: - PROGRESS: Start Frame: 1 PROGRESS: Output Audio: - PROGRESS: Channels: RGB PROGRESS: Depth: Millions of Colors PROGRESS: Color: Premultiplied PROGRESS: Stretch: - PROGRESS: Crop: - PROGRESS: Final Size: 320 x 240 PROGRESS: Post-Render Action: None PROGRESS: PROGRESS: 0:00:00:01 (1): 0 Seconds PROGRESS: 12/3/05 3:21:12 AM: Finished composition Spiro . PROGRESS: Total Time Elapsed: 0 Seconds PROGRESS: Launching After Effects... PROGRESS: ...After Effects successfully launched AERENDER SUCCEEDS |
From: Greg Ercolano <erco@(email surpressed)> Subject: Re: [Q+A] Using After Effects on OSX Date: Sat, 03 Dec 2005 13:09:53 -0800 |
Msg# 1130 View Complete Thread (10 articles) | All Threads Last Next |
How are you mounting your SMB/NFS/AFP shares without logging in first? I use NFS with this technique: http://seriss.com/cgi-bin/rush/newsgroup-threaded.cgi?-view+764+764+770+771+772 The mount is available at all times. That's interesting because on my test machine, even with aerender setuid'd root, I cannot get it to render. I must first login. What's the (entire) frame log say when it fails? ie. is it a missing mount problem, or an AE error message? If this is a new machine installed from the CDs, be sure to take the update first (ie. bring 10.4.0 -> 10.4.3) and reboot. I have a vague recollection that without the update, some 3rd party renders wouldn't start. -- Greg Ercolano, erco@(email surpressed) Rush Render Queue, http://seriss.com/rush/ Tel: (Tel# suppressed) Cel: (Tel# suppressed) Fax: (Tel# suppressed) |
From: Jeff Yana <240vac@(email surpressed)> Subject: Re: [Q+A] Using After Effects on OSX Date: Sat, 03 Dec 2005 13:47:25 -0800 |
Msg# 1131 View Complete Thread (10 articles) | All Threads Last Next |
I used a similar but slightly different approach ( I had forgotten about
this article ;-( ). Anyway, I am using AFP, not NFS, and while the
principle is the same, there are important differences between the
filesystems that could cause permissions and masks to behave differently.
My approach was to test for the existence of the custom mountpoint I created at root, and then execute "su - renderuser -c 'ls -l /automount/Servers/' " and that would automount the five AFP Mounts stored in my local NIDB. Three lines of code and it works great. The mounts are owned by "renderuser", with the following mask: 0700. If you did not use the su command then the filesystem would be owned by the root user, which obviously would be a problem given the mask noted above. Yes, the test machine is a fully revved version of Tiger Server (not sure about the submitting machine but that is probably not relevant), so I am baffled. Greg Ercolano wrote: by www.3dsite.com (8.12.8/8.12.8) with SMTP id jB3L9q11016841 for <rush decimal general at seriss decimal com>; Sat, 3 Dec 2005 13:09:53 -0800 Received: (qmail 68417 invoked from network); 3 Dec 2005 21:10:28 -0000 Received: from unknown (HELO ?192.168.0.9?) (unknown) by unknown with SMTP; 3 Dec 2005 21:10:28 -0000 X-pair-Authenticated: 24.205.137.195 Organization: Seriss Inc. User-Agent: Thunderbird 1.5 (X11/20051025) MIME-Version: 1.0 To: rush decimal general at seriss decimal com In-Reply-To: <1129-rush decimal general at seriss decimal com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Path: 3dsite.com Xref: 3dsite.com rush.general:1130 NNTP-Posting-Host: localhostHow are you mounting your SMB/NFS/AFP shares without logging in first?I use NFS with this technique: http://seriss.com/cgi-bin/rush/newsgroup-threaded.cgi?-view+764+764+770+771+772 The mount is available at all times.That's interesting because on my test machine, even with aerender setuid'd root, I cannot get it to render. I must first login.What's the (entire) frame log say when it fails? ie. is it a missing mount problem, or an AE error message? If this is a new machine installed from the CDs, be sure to take the update first (ie. bring 10.4.0 -> 10.4.3) and reboot. I have a vague recollection that without the update, some 3rd party renders wouldn't start. |
From: Jeff Yana <240vac@(email surpressed)> Subject: Re: [Q+A] Using After Effects on OSX Date: Sat, 03 Dec 2005 14:09:17 -0800 |
Msg# 1132 View Complete Thread (10 articles) | All Threads Last Next |
Just realized that I did not completely answer your last question.there is no error message, the job just remains in a queued state (and presumable fails after 3 retires, though I have not let it go that long to find out) Jeff Yana wrote: I used a similar but slightly different approach ( I had forgotten about this article ;-( ). Anyway, I am using AFP, not NFS, and while the principle is the same, there are important differences between the filesystems that could cause permissions and masks to behave differently.My approach was to test for the existence of the custom mountpoint I created at root, and then execute "su - renderuser -c 'ls -l /automount/Servers/' " and that would automount the five AFP Mounts stored in my local NIDB. Three lines of code and it works great. The mounts are owned by "renderuser", with the following mask: 0700. If you did not use the su command then the filesystem would be owned by the root user, which obviously would be a problem given the mask noted above.Yes, the test machine is a fully revved version of Tiger Server (not sure about the submitting machine but that is probably not relevant), so I am baffled.Greg Ercolano wrote: |
From: Greg Ercolano <erco@(email surpressed)> Subject: Re: [Q+A] Using After Effects on OSX Date: Sat, 03 Dec 2005 15:35:22 -0800 |
Msg# 1133 View Complete Thread (10 articles) | All Threads Last Next |
Jeff Yana wrote: there is no error message, the job just remains in a queued state This doesn't sound like a window manager problem, or aerender even. It sounds like it's not starting the render at all, probably for a lower level reason, possibly mounts, or possible user accounts. In Irush, look at the 'Frames' and 'Cpus' reports under the NOTES column: are there any indications of an error? (uid unknown, file not found, access denied, not enough ram..) If not, are there any errors in the rushd.log on one of the render nodes that give any indications? (and presumable fails after 3 retires, though I have not let it go that long to find out) If the TRY count is staying zero, and the frames are all Que, then rush isn't even running the frames at all; see the Cpus NOTES field for the reason why. If, however, the TRY count is clocking up, and there is no error under the NOTES field of the Frames or Cpus report, then Pause the job, and double click on the frame to see what the log says. (When rush can't open the log file, it puts error messages into the NOTES field of the "Frames" and/or "Cpus" report) -- Greg Ercolano, erco@(email surpressed) Rush Render Queue, http://seriss.com/rush/ Tel: (Tel# suppressed) Cel: (Tel# suppressed) Fax: (Tel# suppressed) |
From: Jeff Yana <240vac@(email surpressed)> Subject: Re: [Q+A] Using After Effects on OSX Date: Mon, 05 Dec 2005 10:45:59 -0800 |
Msg# 1137 View Complete Thread (10 articles) | All Threads Last Next |
Yes, I have confirmed that this process DOES work. With no current login
(via WindowManager), AFP automounts functioning correctly, aerender
setuid'd to root, AE renders perform flawlessly.
I think the problem I was having earlier was the known one of the Rush startup item failing at startup (I had just restarted thos test machines) under OS X (10.4 in this case). The jobs just remainged in a Queued state because Rush had not started on thos systems yet... Greg Ercolano wrote: by www.3dsite.com (8.12.8/8.12.8) with SMTP id jB3NZL11019080 for <rush decimal general at seriss decimal com>; Sat, 3 Dec 2005 15:35:21 -0800 Received: (qmail 90572 invoked from network); 3 Dec 2005 23:35:56 -0000 Received: from unknown (HELO ?192.168.0.9?) (unknown) by unknown with SMTP; 3 Dec 2005 23:35:56 -0000 X-pair-Authenticated: 24.205.137.195 Organization: Seriss Inc. User-Agent: Thunderbird 1.5 (X11/20051025) MIME-Version: 1.0 To: rush decimal general at seriss decimal com In-Reply-To: <1132-rush decimal general at seriss decimal com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Path: 3dsite.com Xref: 3dsite.com rush.general:1133 NNTP-Posting-Host: localhost Jeff Yana wrote:there is no error message, the job just remains in a queued stateThis doesn't sound like a window manager problem, or aerender even. It sounds like it's not starting the render at all, probably for a lower level reason, possibly mounts, or possible user accounts. In Irush, look at the 'Frames' and 'Cpus' reports under the NOTES column: are there any indications of an error? (uid unknown, file not found, access denied, not enough ram..) If not, are there any errors in the rushd.log on one of the render nodes that give any indications?(and presumable fails after 3 retires, though I have not let it go that long to find out)If the TRY count is staying zero, and the frames are all Que, then rush isn't even running the frames at all; see the Cpus NOTES field for the reason why. If, however, the TRY count is clocking up, and there is no error under the NOTES field of the Frames or Cpus report, then Pause the job, and double click on the frame to see what the log says. (When rush can't open the log file, it puts error messages into the NOTES field of the "Frames" and/or "Cpus" report) |
From: Jeff Yana <240vac@(email surpressed)> Subject: Re: [Q+A] Using After Effects on OSX Date: Mon, 05 Dec 2005 10:49:28 -0800 |
Msg# 1138 View Complete Thread (10 articles) | All Threads Last Next |
Yes, I have confirmed that this process DOES work. With no current login
(via WindowManager), AFP automounts functioning correctly, aerender
setuid'd to root, AE renders perform flawlessly.
I think the problem I was having earlier was the known one of the Rush startup item failing at startup (I had just restarted thos test machines) under OS X (10.4 in this case). The jobs just remainged in a Queued state because Rush had not started on thos systems yet... Greg Ercolano wrote: by www.3dsite.com (8.12.8/8.12.8) with SMTP id jB3NZL11019080 for <rush decimal general at seriss decimal com>; Sat, 3 Dec 2005 15:35:21 -0800 Received: (qmail 90572 invoked from network); 3 Dec 2005 23:35:56 -0000 Received: from unknown (HELO ?192.168.0.9?) (unknown) by unknown with SMTP; 3 Dec 2005 23:35:56 -0000 X-pair-Authenticated: 24.205.137.195 Organization: Seriss Inc. User-Agent: Thunderbird 1.5 (X11/20051025) MIME-Version: 1.0 To: rush decimal general at seriss decimal com In-Reply-To: <1132-rush decimal general at seriss decimal com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Path: 3dsite.com Xref: 3dsite.com rush.general:1133 NNTP-Posting-Host: localhost Jeff Yana wrote:there is no error message, the job just remains in a queued stateThis doesn't sound like a window manager problem, or aerender even. It sounds like it's not starting the render at all, probably for a lower level reason, possibly mounts, or possible user accounts. In Irush, look at the 'Frames' and 'Cpus' reports under the NOTES column: are there any indications of an error? (uid unknown, file not found, access denied, not enough ram..) If not, are there any errors in the rushd.log on one of the render nodes that give any indications?(and presumable fails after 3 retires, though I have not let it go that long to find out)If the TRY count is staying zero, and the frames are all Que, then rush isn't even running the frames at all; see the Cpus NOTES field for the reason why. If, however, the TRY count is clocking up, and there is no error under the NOTES field of the Frames or Cpus report, then Pause the job, and double click on the frame to see what the log says. (When rush can't open the log file, it puts error messages into the NOTES field of the "Frames" and/or "Cpus" report) |