lpadmin stoppning the login process

Basic facts:
10.5.6 server with 10.5.6 clients over Airport (Airport Extreme and Airport Express).
Managed clients with mobile accounts.
Services on server: DHCP, AFP, OD, NFS, SU, Netboot, DNS, iCal.

All worked fine up until one client updated itself to 10.5.7 around the same time I moved the printer from the Airport Express to the Airport Extreme.

What happens is when one try to login at this client machine it accepts the login but before anything changes a adminstration window opos up stating that lpadmin needs the administrator priviliges to do some changes. I cannot do anything with this, I cannot add the administartion login nothing.
If I try to login into the machine with the local account the same thing happens.

If I unbind the client from the OD I can login with the local account.
I have tried to update the server to 10.5.7 nothing changed.

I refomatted the client and when I bid the computer the OD same thing happens again.

So something has happend on the server, but what? And what can I do to fix this?

Powerbook G4, Mac OS X (10.5.7)

Posted on Jul 5, 2009 9:29 AM

Reply
8 replies

Jul 30, 2009 6:45 AM in response to STmattiasSwe

I believe this is a bug with 10.5.7. I'm not completely clear about what you're describing, but I can list one fix here for you.

Boot the affected client machine into single user mode using command-s at the startup chime.

Mount the system drive with the command
*mount -uw* /

Start Directory Services with the command
*/bin/launchctl load /System/Library/LaunchDaemons/com.apple.DirectoryServices.plist &*

Add the lpadmin user to the admin group with the command
*dseditgroup -o edit -p -a admin -t group _lpadmin*

Reboot the machine by typing
reboot

Hopefully that will work for you.

Message was edited by: Aaron Adams

Message was edited by: Aaron Adams

Aug 12, 2009 7:53 AM in response to qzyphus

Add the lpadmin user to the admin group with the command
dseditgroup -o edit -p -a admin -t group _lpadmin


The above command is incorrect. It adds the user 'admin' to the group '_lpadmin'. That is not what you want to do.

It is also not necessary to boot into 'single user mode' to use ' dseditgroup'.

Open Terminal.app and do:

sudo -s

then do:

dseditgroup -o -a _lpadmin admin

Changes will be applied immediately to the local directory and can be checked by doing:

dseditgroup -o -read admin

Aug 12, 2009 8:26 AM in response to Mabel O'Farrell

The above command is incorrect. It adds the user 'admin' to the group '_lpadmin'. That is not what you want to do.


According to this thread, it solves the problem. It has worked for me several times, so I'm passing it along.

It is also not necessary to boot into 'single user mode' to use ' dseditgroup'.


Correct that dseditgroup does not require SUM, but if the user is having a login problem, any variables associated with login can be eliminated by booting into SUM.

Aug 12, 2009 9:21 AM in response to Aaron Adams

According to this thread, it solves the problem.


The thread indicated is this discussion.

This command, ' dseditgroup -o edit -p -a admin -t group _lpadmin', attempts to add a user 'admin' to a record type of 'group' named '_lpadmin'. If you do, ' dscl . -list /Groups', you will see a group '_lpadmin' already exists. If you do, ' dscl . -read /Groups/_lpadmin' it will show the local admins as members of the group. In this case, the ' -t group', portion of the command is superfluous. If the user with the shortname 'admin' does not exist on the machine, then it does nothing.

More than likely the user shortname in the example, 'admin', was placed there to indicate an admin level user should be added to the '_lpadmin' group. So in order for this command, ' dseditgroup -o edit -a admin _lpadmin' to work, you would have to add all local admin users and any local users to the '_lpadmin' group.

What the dialog box is specifically asking for is admin privileges for the user '_lpadmin'. That is why this command, ' dseditgroup -o edit -a _lpadmin admin', is the correct syntax as it adds the user '_lpadmin' to the 'admin' group which satisfies the dialog box request and does not require you to add every user to the '_lpadmin' group.

Correct that dseditgroup does not require SUM, but if the user is having a login problem, any variables associated with login can be eliminated by booting into SUM.


If there are any jobs in any local printers on the machine that are not stopped, as soon as the machine boots, the jobs will start to spool. If the printers are unreachable or the problem under discussion is in effect, the machine could hang or become slow to respond. Reformatting the machine only removes the problem for local users. If a network user logs in, the spooled jobs will again start to print from the user's print spool. So the user's print jobs need to be cleared from the user's home folder on the server, also.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

lpadmin stoppning the login process

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.