OSX can't complete logging into OSX Server

P

pierskittel

Registered
Hello all,

Am having a nasty problem with an OSX Server and a few OSX machines, so I decided to take two of the OSX machines out of service, install OSX Server 10.3.9 on one of the machine (an eMac G4) and use the other machine (an iBook) to connect to the eMac. I've set up Open Directory and the iBook logs onto the server fine, but I need to share the user home directory to the server, and this is where I run into problems.

All I did was to click on Sharing in Workgroup manager, click on the Users folder, click on "Share this item and its contents", and click on "Network Mount" and click on "Create a mount record for this share point" and make sure "Where" is set to /LDAPv3/127.0.0.1 and "Use For" is set to User Home Directories, clicked on Save. Then I checked my "test_user" account, and checked its "Home" tab and it has "afp://<server name>/Users" in and all looks OK. I also clicked on "Create Home Now" and clicked on "Save". Set the disk quota to 1GB.

But when I try to log in as "test_user" on the iBook, I get an error message saying "You are unable to log in to the user account "test_user" at this time. Logging in to the account failed because an error occurred. The home folder for the user account is located on an AFP or SMB server. Contact your system administrator for help"

If I remove the share point, the iBook logs in just fine again, but it's useless without access to the user home directory.

The main server has this exact same problem, and I'm ripping out my hair trying to fix this problem, can anyone point in the direction where I can start troubleshooting this problem, or at least tell me what I'm doing wrong? I can't see anything useful in the logs, unless I'm looking in the wrong place. I've searched Google extensively, read the "Essential Mac OS X Panther Server Administration" book and trawled through forums including this one.

Thanks very much for your help in advance!

Regards - Piers
 
Update - found the following log enteries:

Jan 31 17:21:44 localhost slapd[318]: <= bdb_equality_candidates: (ou) index_param failed (18)
Jan 31 17:21:45 localhost PasswordService: DIGEST-MD5 server step 1
Jan 31 17:21:45 localhost PasswordService: DIGEST-MD5 server step 2
Jan 31 17:21:45 localhost slapd[318]: <= bdb_equality_candidates: (ou) index_param failed (18)
Jan 31 17:21:46 localhost slapd[318]: <= bdb_equality_candidates: (memberUid) index_param failed (18)
Jan 31 17:21:46 localhost PasswordService: DIGEST-MD5 server step 1
Jan 31 17:21:46 localhost PasswordService: DIGEST-MD5 server step 2
Jan 31 17:21:46 localhost krb5kdc[307]: AS_REQ (6 etypes {18 16 23 1 3 2}) 137.222.163.188: ISSUE: authtime 1138728106, etypes {rep=16 tkt=16 ses=16}, test_user@CDS-OWL.<domain> for krbtgt/CDS-OWL.<domain>@CDS-OWL.<domain>
Jan 31 17:21:47 localhost krb5kdc[307]: TGS_REQ (5 etypes {16 23 1 3 2}) 137.222.163.188: ISSUE: authtime 1138728106, etypes {rep=16 tkt=16 ses=16}, test_user@CDS-OWL.<domain> for afpserver/cds-owl.<domain>@CDS-OWL.<domain>

Any ideas what I need to do?

Thanks very much for your help again.

Regards - Piers
 
pierskittel said:
All I did was to click on Sharing in Workgroup manager, click on the Users folder, click on "Share this item and its contents", and click on "Network Mount" and click on "Create a mount record for this share point" and make sure "Where" is set to /LDAPv3/127.0.0.1 and "Use For" is set to User Home Directories, clicked on Save. Then I checked my "test_user" account, and checked its "Home" tab and it has "afp://<server name>/Users" in and all looks OK.
Click to expand...
Un-click Create a mount record for this share point and Share this item and its contents for the user's folder and instead make sure they are checked for afp://<server name>/Users. That's how I got past this problem.
 
Did you assure that you have proper DNS forward and reverse pointers? That can cause a user account record to not be able to find the home directory server and can cause havoc on your OD installation as well.

You should have an LDAP record for all user home directories as well.

Best practice? Log into the machine with a known good account, even a local account and use dscl to read out the LDAP data as its being passed to the client. This will show you what information the client is receiving to resolve all of the attributes of the account.
 
You must log in or register to reply here.
Back
Top