I'm working with a 10.4 Xserve trying to set up user accounts in Workgroup
Manager. I am able to create new users with a Crypt Password without a
problem, but as soon as I try to change it to an Open Directory password I
get an eDSAuthFailed error (-14090). I've googled this quite a bit, but the
only reference I've been able to find to the error is for a 10.2 server.
The complete error message is as follows:
Got unexpected error
Error of type eDSAuthFailed (-14090) on line (changes) of
/SourceCache/ServerManagerUserGeneral/ServerManagerUserGeneral-193/UserAdvan
cedPluginView.mm
I remember reading about someone who expands their user database before importing users. I wonder if there is a problem where the pw database is not expanding fast enough and some form of corruption is going on? hence the overflow files?
This of course is me speculating and is not a fact 🙂
When I deleted these files, I made the mistake of deleting them while the server was running - this is bad. It means anyone logged in at that time needed to have their password reset. Once reset, however, it appears to stay fixed.
Since then I've spoken with an Apple tech, and he told me my fix was a good one, but should be done from Single User Mode - that way the server is not running the password services when you make the change. From his notes:
Another "fix" approach, also not completely worked out:
- boot single user mode (Hold down "Apple" and "S" keys while booting. Screen will turn black with white text; OK to release keys now. Apple Keyboard required.)
- mount filesystem (enter "mount -uw /" (don't include the quotes!)
- enter "cd /var/db/authserver" and hit return
- enter "ls" and hit return (to see how things are spelled)
- enter rm authserverfree and hit return (causes password server to assign new nonoverlapping range of free "slots")
- enter rm
overflow and hit return (should delete all overflow files)
- Enter "exit" or "reboot" to continue booting.
- Some users (the valid overflows) will be unable to authenticate. For these users, reset passwords, or delete and recreate the accounts.
Hopefully this will help everyone out - the tech hinted these notes (as well as other solutions and fixes for -14090 errors) are being tested and edited/reviewed at Apple now, and we should have a completed KB article shortly.
Well, after following Macinminds advice and Charles Firths fix the problem went away. Now to move on to the other problem of the nmbd service randomly terminating..... It's a rollercoaster ride being a tiger server admin.