Newsroom Update

Beginning in May, a special Today at Apple series titled “Made for Business” will offer small business owners and entrepreneurs free opportunities to learn how Apple products and services can support their growth and success. Learn more >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

I can't start a open directory, it gives an error saying: check network config

Hi,


to begin with, i'm dutch so sorry for my bad writing.


Setup:

Mac mini OSX server mountion lion 10.8.5

local users

cisco rvs4000


I'm having an issue since i changed my networks WANIP because we got a new and better internet line.

Also the new inviroment comes with a new router.


Now here's the problem, since this change i couldn't set up a VPN L2TP connection anymore..

So i looked at the VPN log, but there wasn't any text referring to a VPN L2TP connection. And yes i forwarded ervery port,

UDP 1701,500,4500 and the ESP 50 protocol is forwarded by the cisco router with the standard VPN passtrough option.


The next thing i tried is setting up an PPTP connection, after this i got the error: identity is not accepted. this time the VPN log gives me

an error:


0x0> <magic 0x628df8e6> <pcomp> <accomp>]

Thu Oct 17 12:42:33 2013 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x2b13fb41> <pcomp> <accomp>]

Thu Oct 17 12:42:33 2013 : rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x2b13fb41> <pcomp> <accomp>]

Thu Oct 17 12:42:33 2013 : sent [LCP EchoReq id=0x0 magic=0x2b13fb41]

Thu Oct 17 12:42:33 2013 : sent [CHAP Challenge id=0x2f <7b651c211c2065155c574d41732c394e>, name = "server.xxxxxx.private"]

Thu Oct 17 12:42:33 2013 : rcvd [LCP EchoReq id=0x0 magic=0x628df8e6]

Thu Oct 17 12:42:33 2013 : sent [LCP EchoRep id=0x0 magic=0x2b13fb41]

Thu Oct 17 12:42:33 2013 : rcvd [LCP EchoRep id=0x0 magic=0x628df8e6]

Thu Oct 17 12:42:33 2013 : rcvd [CHAP Response id=0x2f <eb158db194714bbd1f17f0aeae993927000000000000000012f827aea75c2b6cb2dbcbbd3bfabb 1bb6a7534d96d956f300>, name = "vpnuser"]

Thu Oct 17 12:42:33 2013 : DSAuth plugin: unsupported authen authority: recved Kerberosv5;;vpnuser@LKDC:SHA1.F0E4A62A66239C74E50793F3F30997F086074A1E;LKDC:SHA1 .F0E4A62A66239C74E50793F3F30997F086074A1E, want ApplePasswordServer

Thu Oct 17 12:42:33 2013 : DSAuth plugin: MPPE key required, but its retrieval failed.

Thu Oct 17 12:42:34 2013 : sent [CHAP Failure id=0x2f "S=4E4083190FD57B13DA38015F52FE14F8F594766A M=Access granted"]

Thu Oct 17 12:42:34 2013 : CHAP peer authentication failed for vpnuser

Thu Oct 17 12:42:34 2013 : sent [LCP TermReq id=0x2 "Authentication failed"]

Thu Oct 17 12:42:34 2013 : Connection terminated.

Thu Oct 17 12:42:34 2013 : PPTP disconnecting...

Thu Oct 17 12:42:34 2013 : PPTP disconnected

2013-10-17 12:42:34 CEST --> Client with address = 192.168.1.205 has hungup


When i googled for this problem all the awnsers were based on OD users and my in situation there were only local users.

So i thought if i just add all my users ( 10 local users ) to an OD it should fix my problem but here comes the next thing.

When i tried to configure an Open directory it gives me an error that the OD couldn't finish and to check my network settings.

sudo changeip -checkhostname gives me the right adress, dns seems to be ok. The error that console constantly gives is:

servermgd: servermgr_accounts: got error 5000 trying to auth to local LDAP node

and

WARING found KDC certificate

and

ntdp: GetConfig: Couldn't open </private/etc/ntp_opendirectory.conf


I'm stuck at this point, never seen this problem before.. someone knows a fix or work around for this??


thanks in advance

Mac mini, OS X Server, 10.8.5

Posted on Oct 17, 2013 4:06 AM

Reply
Question marked as Best reply

Posted on Oct 17, 2013 6:17 AM

To check the local network for some of the common configuration problems, launch Terminal.app and issue the following diagnostic command:


sudo changeip -checkhostname


That'll report some local configuration information and then either no errors detected and no changes required, or it'll point to whatever configuration errors or issues it might detect. That doesn't catch everything, but it catches the common errors.


FWIW, 192.168.0.0/24 and 192.168.1.0/24 are poor choices for the local network, as VPNs are based on IP routing and IP routing gets tangled when the same subnet is used on both ends of the VPN. 192.168.0.0/24 and 192.168.1.0/24 are near ubiquitous in home networks and coffee shops.

1 reply
Question marked as Best reply

Oct 17, 2013 6:17 AM in response to RemyNL

To check the local network for some of the common configuration problems, launch Terminal.app and issue the following diagnostic command:


sudo changeip -checkhostname


That'll report some local configuration information and then either no errors detected and no changes required, or it'll point to whatever configuration errors or issues it might detect. That doesn't catch everything, but it catches the common errors.


FWIW, 192.168.0.0/24 and 192.168.1.0/24 are poor choices for the local network, as VPNs are based on IP routing and IP routing gets tangled when the same subnet is used on both ends of the VPN. 192.168.0.0/24 and 192.168.1.0/24 are near ubiquitous in home networks and coffee shops.

I can't start a open directory, it gives an error saying: check network config

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.