7 Replies Latest reply: May 12, 2012 8:56 AM by Brian Fendler
Brian Fendler Level 1 Level 1 (0 points)

Hello everyone,

 

I am not able to bind to my server from outside the LAN, but I am within it. I have forwarded every port that could have anything to do with Open Directory and it is still not working. I have verified that the ports are open. I have tried not using SSL (disabling it in Server Admin) and tried with it, neither work. I always get the error Connection failed to the directory server. (2100)

 

 

The reason I'm trying to do this is I am trying to integrate the directory into Wordpress and wordpress cannot bind either, presumably because nobody can from outside the LAN.

 

Thank you in advance for any help you can provide.

 

Brian


Mac mini, Mac OS X (10.7.4)
  • 1. Re: Cannot bind (2100)
    gracoat Level 3 Level 3 (660 points)

    Do you have external DNS records in pace that point to your server?  What happens if you ping your domain name from outside your LAN?

  • 2. Re: Cannot bind (2100)
    Brian Fendler Level 1 Level 1 (0 points)

    It times out, but I am able to access the main webpage of the server, also mail services work just fine.

     

    Thanks,

     

    Brian

  • 3. Re: Cannot bind (2100)
    gracoat Level 3 Level 3 (660 points)

    Interesting

    It times out when pinging, but not when you open up a web browser and type the same address?

    Or are you saying that when you type www.example.com you can see the web page, but when you ping example.com it times out?

     

    If this is the case, then the DNS records are not set up quite properly.

    If you're comfortable, let us know what the domain name is so we can see what the issue might be.

  • 4. Re: Cannot bind (2100)
    Brian Fendler Level 1 Level 1 (0 points)

    Yes. When I type in server.iconyearbook.com I can see Lion server's default page, but when I ping it, it times out.

     

    The domain name is server.iconyearbook.com

  • 5. Re: Cannot bind (2100)
    gracoat Level 3 Level 3 (660 points)

    Indeed the server's certificate isn't trusted.  That's a first hint.  Couldn't hurt trying to install the certificate on the client computer, and then trying to bind.

     

    If it still isn't working:

    Secondly... Get a copy of the server admin tools for 10.7 if you don't have them already.

    In Server Admin, Connect to your server and click on the Open Directory Service.

    Click the Settings button at the top.

    Click the policies tab

    Click the binding tab.

     

    For testing purposes ONLY and only do this temporarily...

    Uncheck everything in terms of security.

    Then try to connect.

     

    After a bit of hunting online, there's another person that had the same issue with no resolution.

    Until he set up a VPN.  Which IMO is probably a better option for you.

    Setting up a VPN will allow you to connect to your network in a secure way across the internet as though you were inside the network.

    It's a bit more letwork on each client, but the security benefits are probably worth it.

  • 6. Re: Cannot bind (2100)
    Brian Fendler Level 1 Level 1 (0 points)

    Would VPN offer the same directory services (such as logging in) as without?

     

    I will try the suggestions you mentioned when I return to the office in about an hour. Do you see any DNS problems?

     

    Thanks,

     

    Brian

  • 7. Re: Cannot bind (2100)
    Brian Fendler Level 1 Level 1 (0 points)

    I tried to connect after unchecking all the authentication options, and still nothing. It doesn't get past Getting server information.