SBeattie2

Q: Unable to add an OS X Server Account to iOS device or Mac

Server 5.0.15 (Build 15S4033)  OS X 10.11.1 (El Capitan)  iOS 9.1

 

I am running OS X Server in a home environment.  I have several network accounts set up - all of which are able to log in successfully as network users on Macs that are bound to Open Directory.  I attempted to configure an OS X Server account on an iOS device - in Mail Contacts Calendars - Other Account - OS X Server Account.  It shows my server - and prompts to tell me that the certificate is not trusted (and that is correct).  I tell it to trust the certificate - and then it prompts for userid and password.  I then get a user name or password is invalid message and can't connect.  I get the same error on all iOS devices as well as on my Macs when attempting to add an OS X Server account to a Mac via Internet Accounts.  I have several shared folders set up in File Sharing - and I have the Share on iOS box checked.  Am I missing a setting somewhere else that is preventing the connect?  The network accounts work fine for all other services.  This is my first time trying to use an OS X Server account - so I can't say that it ever worked in the past.  I get the same error whether I am on the local network or accessing remotely.

 

~Scott

Mac Mini Server (Late 2012), OS X Server

Posted on Nov 21, 2015 1:14 AM

Close

Q: Unable to add an OS X Server Account to iOS device or Mac

  • All replies
  • Helpful answers

  • by SBeattie2,

    SBeattie2 SBeattie2 Jan 24, 2016 9:23 PM in response to SBeattie2
    Level 2 (184 points)
    Servers Enterprise
    Jan 24, 2016 9:23 PM in response to SBeattie2

    I have made some minor progress on this.  In asking around - and doing some experimentation on my own - I rebuilt the Mac Mini and Server with a clean install of El Capitan 10.11.3 and Server 5.0.15.  Surprisingly the problem still happens.  I run my home server as a non-registered as well as non-delegated subdomain of my registered domain - thus I had my host name as server.home.example.com  (with example.com substituted for my actual registered domain).  In this configuration all DNS functionality and services (except for add os x server account) were working perfectly.  This is private DNS - not public facing - port 53 blocked at the router.  In DNS - my primary zone was home.example.com with server.home.example.com as the name server.  I changed the DNS config to be a primary zone of example.com with server.example.com as host name and name server.  Surprisingly - the Add OS X Server account functionality works.  The downside of this is that I cannot access my external domain from inside my network - and that was the reason for the subdomain setup in the first place.  I tried a number of different DNS and subdomain configurations - and basically when the host name contains more than two dots (.) (e.g. server.home.example.com) the Add OS X Server account reports invalid user or password - as if it's not reading the correct open directory.  So - I can use {anyname}.example.com as the host - and everything works.  I wonder if this is actually a bug?  I have somebody looking at my DNS zone files to see if there is anything unusual.  I have read most of the DNS and Bind book and I can't see anything wrong - configuration wise - but I am not a networking professional and I'm doing this more as a learning experience.  Just curious to know if the others that have indicated that "they have this question too" are also using a "subdomain" DNS setup?

     

    ~Scott

  • by SBeattie2,Solvedanswer

    SBeattie2 SBeattie2 Mar 17, 2016 10:22 AM in response to SBeattie2
    Level 2 (184 points)
    Servers Enterprise
    Mar 17, 2016 10:22 AM in response to SBeattie2

    The Add OS X Server account functionality currently has a limitation of 24 characters on the length of fqdn (fully qualified domain name) of the hostname whether it is referencing nth-level subdomains or not.  Example: If your hostname is testingserver.example.com  you will get the error - because the fqdn is longer than 24 characters.  If your hostname is server.sub.x.example.com - everything will work fine - because the total length of the fqdn is 24 characters or less. This limitation applies to .private host names as well.  If you need to use OS X Server accounts feature - the workaround - at least for the time being - is to ensure that the fqdn of your hostname is 24 characters or less.  This may be difficult if you don't have any ability to shorten your domain or subdomain name.  This has been reported to Apple.

     

    ~Scott

  • by SBeattie2,

    SBeattie2 SBeattie2 Mar 17, 2016 11:00 AM in response to SBeattie2
    Level 2 (184 points)
    Servers Enterprise
    Mar 17, 2016 11:00 AM in response to SBeattie2

    The workaround above is the result of my testing and experimentation and appears to be consistent behavior in my environment.  It does not represent any acknowledgement or confirmation of a problem - nor any guarantee of a fix from Apple.  I am posting my findings in an effort to help those that are experiencing this issue.

  • by SBeattie2,

    SBeattie2 SBeattie2 Mar 22, 2016 8:15 PM in response to SBeattie2
    Level 2 (184 points)
    Servers Enterprise
    Mar 22, 2016 8:15 PM in response to SBeattie2

    The update to Server 5.1 appears to correct this issue.