freefall722

Q: unable to get network users working in server 3

After upgrading to Mavericks and OS X server 3 I've been unable to log into my network accounts from any of my client machines (all also upgraded to Mavericks). The Network Account Server is showing as green on the clients and I don't get any warnings at the login screen but trying to log into any accounts results in the failed attempt "shake" of the password box.

 

I'm now on a fresh install of Mavericks on the server with some test accounts set up and I'm still not able to log in from any of my clients. I can however access any share points I set up. Not really sure what I'm doing wrong here.

Posted on Oct 23, 2013 12:11 AM

Close

Q: unable to get network users working in server 3

  • All replies
  • Helpful answers

Page 1 of 12 last Next
  • by KianTech,

    KianTech KianTech Oct 23, 2013 2:00 AM in response to freefall722
    Level 1 (0 points)
    Oct 23, 2013 2:00 AM in response to freefall722

    I tried repairing permissions, reseting file sharining. Nothing working. Also the problem is causing my time machine to not work as well, probably because it can't mount the network share.

  • by coffeebreath,

    coffeebreath coffeebreath Oct 23, 2013 2:03 AM in response to freefall722
    Level 1 (0 points)
    Oct 23, 2013 2:03 AM in response to freefall722

    I'm utterly fscked off with Apple. This has been in beta for months, then when its released, they charge you for the privilge of it preventing any Network users to login to the server.

     

    Thanks, just thanks. No really..

  • by VTMikeL,

    VTMikeL VTMikeL Oct 23, 2013 5:43 AM in response to coffeebreath
    Level 1 (0 points)
    Oct 23, 2013 5:43 AM in response to coffeebreath

    I am also having this issue after updating both client and server.  I see the following log message on the server when trying to log in as a network user:

     

    no such entry found in hdb

  • by Ian Stephenson,

    Ian Stephenson Ian Stephenson Oct 23, 2013 6:53 AM in response to freefall722
    Level 1 (5 points)
    Oct 23, 2013 6:53 AM in response to freefall722

    Same here...

     

    I've noted that the accounts still exist, and I can still access them using command line tools like finger, and even change the password (using passwd). Files owned by the accounts are still recognised with the old ownership, so the accounts are still live - they're just not logging in.

     

    However I can't use the accounts for file sharing or logging in.

     

    In the Server app, the "log in" tick box for each user is still ticked but its greyed out, and can't be changed. I'm not sure if thats because I'm logging into server app as local admin, rather than network admin - the directory administrator is of course a network account, so that's not working either!!!

     

    Pretty stuck for ideas now...

  • by VTMikeL,

    VTMikeL VTMikeL Oct 23, 2013 6:55 AM in response to Ian Stephenson
    Level 1 (0 points)
    Oct 23, 2013 6:55 AM in response to Ian Stephenson

    Someone else posted somewhere I saw and implied that it seems to be a Mavericks client issue rather than a problem with the directory server itself.  That would support my case it seems, since I can access other clients using network credentials, but I do not have a ML client to test.  I had to force my clients to use cached credentials in order to log in.

  • by Ian Stephenson,

    Ian Stephenson Ian Stephenson Oct 23, 2013 7:04 AM in response to VTMikeL
    Level 1 (5 points)
    Oct 23, 2013 7:04 AM in response to VTMikeL

    There's something to this...

     

    I can't log into ML machines with a network account, [presumably] as they can't access the home directory share (which is back on a Maveriks machine).

     

    I CAN access files which are actually ON a ML machine using a network account which is authenticated from a Maveriks server.

  • by wajj82,

    wajj82 wajj82 Oct 23, 2013 7:16 AM in response to freefall722
    Level 1 (0 points)
    Oct 23, 2013 7:16 AM in response to freefall722

    Will Apple respond to this issue soon? I am having the same issue.  Our macs will not allow people to login from a network user account.  It works fine when I login as a local user.  This really should work considering it is a basic element of the software and it has been in BETA testing for months!

  • by nick.leblanc,

    nick.leblanc nick.leblanc Oct 23, 2013 8:10 AM in response to freefall722
    Level 1 (0 points)
    Oct 23, 2013 8:10 AM in response to freefall722

    I'm having the same issue after an upgrade to Server v3 and Mavericks.  All clients running 10.9, same symptoms as everyone else except for one. Some of my users get the "shaking" password box indicating a wrong password while some are prompted to change their passwords. 

     

    The one thing I have noticed is that my main system drive seems to have some funky permissions even after repairing. 

     

    Also, in the Server app, under users, Home Folders show a "Custom" location. Even when choosing the correct home folder and clicking "OK" to save the config, it reverts back to "Custom".

  • by Middlewest28,

    Middlewest28 Middlewest28 Oct 23, 2013 8:56 AM in response to VTMikeL
    Level 1 (0 points)
    Oct 23, 2013 8:56 AM in response to VTMikeL

    Hi !

    I have an iMac upgraded to Server 3 and Mavericks.

    I have 2 macbooks which are "clients" of the iMac .

     

    Macbook 1 (upgraded to Mavericks) : can't use network user access anymore ("shaking" password)

    Macbook 2 (still ML) : everything is ok.

     

    So, even 2 is not statistically ideal, it seems that the problem is on the Mavericks client!.

  • by freefall722,

    freefall722 freefall722 Oct 23, 2013 9:27 AM in response to nick.leblanc
    Level 1 (0 points)
    Oct 23, 2013 9:27 AM in response to nick.leblanc

    nick.leblanc wrote:

     

    Also, in the Server app, under users, Home Folders show a "Custom" location. Even when choosing the correct home folder and clicking "OK" to save the config, it reverts back to "Custom".

    I'm seeing this same behavior.

  • by haykong,

    haykong haykong Oct 23, 2013 9:48 AM in response to wajj82
    Level 1 (119 points)
    Oct 23, 2013 9:48 AM in response to wajj82

    wajj82 wrote:

     

    Will Apple respond to this issue soon? I am having the same issue.  Our macs will not allow people to login from a network user account.  It works fine when I login as a local user.  This really should work considering it is a basic element of the software and it has been in BETA testing for months!

    I guess you never really done Apple Server Upgrades in the past. From Apple's Past history with Server upgrades, things always break during the first major ugprade. It normally takes time to fix it. Sometimes clean install works best.. and port over things. I always advise against upgrading a production machine and would be best to test it on a test server machine  before putting on production.

  • by haykong,

    haykong haykong Oct 23, 2013 10:06 AM in response to freefall722
    Level 1 (119 points)
    Oct 23, 2013 10:06 AM in response to freefall722

    freefall722 wrote:

     

    nick.leblanc wrote:

     

    Also, in the Server app, under users, Home Folders show a "Custom" location. Even when choosing the correct home folder and clicking "OK" to save the config, it reverts back to "Custom".

    I'm seeing this same behavior.

     

     

    In Server App 2.2.2 and 10.8.5  thats normal to say "Custom" for home folders for network accounts. I'm not sure if some people correctly configured home folders for network accounts in Workgroup Manager.

     

    For those that upgraded to 10.9 and Server App 3

     

    have you tried downloading Workgoup Manager 10.9

    http://support.apple.com/kb/DL1698

     

    I think they forgot to update the webpage to reflect saying Mavericks.

     

    Anyway... in workgroup manager under home per user

     

    afp url should be set

    along with user path

    full path

     

    Also you should have  FQDN for the server or things would not work right... just checking to make sure everyone has covered their bases with server setup.

  • by freefall722,Helpful

    freefall722 freefall722 Oct 23, 2013 10:06 AM in response to freefall722
    Level 1 (0 points)
    Oct 23, 2013 10:06 AM in response to freefall722

    So some progress. I made the assumption that Apple at least tested this with a clean install of Mavericks server and client so I did a fresh install of one of my clients to test with my recent fresh install of server and it was able to connect to the new network accounts I set up for testing.

     

    The best part of this though is that after successfully connecting with the fresh client I'm now able to connect with my other upgraded Mavericks clients.

     

    Some caviates:

    • This is with a fresh install of Mavericks server - I haven't tried bringing my old user accounts back in yet

    • On the upgraded clients I had to delete all my profiles before it would work

    • During the process I switched my server name from a .local to a .lan and turned on dns serving (I'm not sure yet if this is required but this alone did not solve the issue)

    • Sometimes on the upgraded clients I had to add the Network Account Server twice (add, delete, add) when it worked it didn't ask me if I wanted to trust the SSL (it asked me about trusting the server but not the second popup about the SSL)

     

    And I should mention that I had done all of the above multiple times before trying to connect with a clean client with no success - after connecting with the clean client once they all seem to work.

  • by haykong,

    haykong haykong Oct 23, 2013 10:18 AM in response to freefall722
    Level 1 (119 points)
    Oct 23, 2013 10:18 AM in response to freefall722

    freefall722,

     

           Sounds like in 10.8.X server you never had a full correct setup. I know things tend to break on upgrades or services when your server's name is not setup with a proper FQDN. And since you weren't running the DNS service might indicate that you did not have it setup correct.  OS X Server is very picky about having certain things configured right from the beginning like FQDN when setup up all the services from the beginning. When changing FQDN it can impact other services and some services will not function right if not correctly change at all points that need to be changed.

     

    Have  you use workgroup manager 10.8 back when 10.8.5?

    Anyway, if you haven't please download

    Workgroup Manager 10.9 it'll give you more options in configuration of users.

Page 1 of 12 last Next