1 Reply Latest reply: Dec 31, 2009 4:25 PM by bitwise
bitwise Level 1 Level 1 (0 points)
I am trying to connect to my SL Server machine via screen sharing (vnc://server.local). I receive a prompt to login. However, when I try to login I get denied. It says authentication failed.

I see this in my system log of the client machine:

Dec 31 14:27:57 ares com.apple.launchd.peruser.501[278] (com.apple.Kerberos.renew.plist): Throttling respawn: Will start in 162 seconds
Dec 31 14:27:58 ares Screen Sharing[3424]: AuthenticateKerberosCore returns 100001
Dec 31 14:28:00 ares Screen Sharing[3424]: * -[NSLock unlock]: lock (<NSLock: 0x100455cb0> '(null)') unlocked when not locked

I ran 'kdestroy' on my client in case there were any kerberos tickets cached, as well as removing some plist files on the server and restarting AppleVNCServer process. Nothing is helping.

Can someone please save me from spending another day on this!


MacBook Pro 15" Core 2 Duo, Mac OS X (10.6.2)
  • 1. Re: Screen Sharing Authentication
    bitwise Level 1 Level 1 (0 points)
    Well, I figured it out! Turns out that I was playing with open directory recently (not successfully) because I wanted to have a networked home drive between my mbp and my mini. So during that process os x uses LDAP for looking up users. After I decided to give up on open directory, i just turned the service off. I guess the machines were still trying to authenticate against a LDAP service. So what I had to do:

    open directory utility (/System/Library/CoreServices/Directory Utility.app)
    look at the list of sources there. If you aren't using open directory, uncheck LDAP.

    *I disabled LDAP on both the client and the server, its possible you only need to do it on the server.

    restart ARDAgent (ps aux | grep ARD find the procid, then kill <procid>).
    viola! working screen sharing again.