Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

unable to get network users working in server 3

After upgrading to Mavericks and OS X server 3 I've been unable to log into my network accounts from any of my client machines (all also upgraded to Mavericks). The Network Account Server is showing as green on the clients and I don't get any warnings at the login screen but trying to log into any accounts results in the failed attempt "shake" of the password box.


I'm now on a fresh install of Mavericks on the server with some test accounts set up and I'm still not able to log in from any of my clients. I can however access any share points I set up. Not really sure what I'm doing wrong here.

Posted on Oct 23, 2013 12:00 AM

Reply
173 replies

Oct 23, 2013 6:53 AM in response to freefall722

Same here...


I've noted that the accounts still exist, and I can still access them using command line tools like finger, and even change the password (using passwd). Files owned by the accounts are still recognised with the old ownership, so the accounts are still live - they're just not logging in.


However I can't use the accounts for file sharing or logging in.


In the Server app, the "log in" tick box for each user is still ticked but its greyed out, and can't be changed. I'm not sure if thats because I'm logging into server app as local admin, rather than network admin - the directory administrator is of course a network account, so that's not working either!!!


Pretty stuck for ideas now...

Oct 23, 2013 6:55 AM in response to Ian Stephenson

Someone else posted somewhere I saw and implied that it seems to be a Mavericks client issue rather than a problem with the directory server itself. That would support my case it seems, since I can access other clients using network credentials, but I do not have a ML client to test. I had to force my clients to use cached credentials in order to log in.

Oct 23, 2013 8:10 AM in response to freefall722

I'm having the same issue after an upgrade to Server v3 and Mavericks. All clients running 10.9, same symptoms as everyone else except for one. Some of my users get the "shaking" password box indicating a wrong password while some are prompted to change their passwords.


The one thing I have noticed is that my main system drive seems to have some funky permissions even after repairing.


Also, in the Server app, under users, Home Folders show a "Custom" location. Even when choosing the correct home folder and clicking "OK" to save the config, it reverts back to "Custom".

Oct 23, 2013 9:48 AM in response to wajj82

wajj82 wrote:


Will Apple respond to this issue soon? I am having the same issue. Our macs will not allow people to login from a network user account. It works fine when I login as a local user. This really should work considering it is a basic element of the software and it has been in BETA testing for months!

I guess you never really done Apple Server Upgrades in the past. From Apple's Past history with Server upgrades, things always break during the first major ugprade. It normally takes time to fix it. Sometimes clean install works best.. and port over things. I always advise against upgrading a production machine and would be best to test it on a test server machine before putting on production.

Oct 23, 2013 10:06 AM in response to freefall722

freefall722 wrote:


nick.leblanc wrote:


Also, in the Server app, under users, Home Folders show a "Custom" location. Even when choosing the correct home folder and clicking "OK" to save the config, it reverts back to "Custom".

I'm seeing this same behavior.



In Server App 2.2.2 and 10.8.5 thats normal to say "Custom" for home folders for network accounts. I'm not sure if some people correctly configured home folders for network accounts in Workgroup Manager.


For those that upgraded to 10.9 and Server App 3


have you tried downloading Workgoup Manager 10.9

http://support.apple.com/kb/DL1698


I think they forgot to update the webpage to reflect saying Mavericks.


Anyway... in workgroup manager under home per user


afp url should be set

along with user path

full path


Also you should have FQDN for the server or things would not work right... just checking to make sure everyone has covered their bases with server setup.

Oct 23, 2013 10:06 AM in response to freefall722

So some progress. I made the assumption that Apple at least tested this with a clean install of Mavericks server and client so I did a fresh install of one of my clients to test with my recent fresh install of server and it was able to connect to the new network accounts I set up for testing.


The best part of this though is that after successfully connecting with the fresh client I'm now able to connect with my other upgraded Mavericks clients.


Some caviates:

• This is with a fresh install of Mavericks server - I haven't tried bringing my old user accounts back in yet

• On the upgraded clients I had to delete all my profiles before it would work

• During the process I switched my server name from a .local to a .lan and turned on dns serving (I'm not sure yet if this is required but this alone did not solve the issue)

• Sometimes on the upgraded clients I had to add the Network Account Server twice (add, delete, add) when it worked it didn't ask me if I wanted to trust the SSL (it asked me about trusting the server but not the second popup about the SSL)


And I should mention that I had done all of the above multiple times before trying to connect with a clean client with no success - after connecting with the clean client once they all seem to work.

Oct 23, 2013 10:18 AM in response to freefall722

freefall722,


Sounds like in 10.8.X server you never had a full correct setup. I know things tend to break on upgrades or services when your server's name is not setup with a proper FQDN. And since you weren't running the DNS service might indicate that you did not have it setup correct. OS X Server is very picky about having certain things configured right from the beginning like FQDN when setup up all the services from the beginning. When changing FQDN it can impact other services and some services will not function right if not correctly change at all points that need to be changed.


Have you use workgroup manager 10.8 back when 10.8.5?

Anyway, if you haven't please download

Workgroup Manager 10.9 it'll give you more options in configuration of users.

Oct 23, 2013 10:23 AM in response to haykong

FYI for network accounts....


Also note, For those that have are using Open Directory Network Acounts.


Firefox 24 does not work wiith Network Account users. Somehow the user prefs get corrupted and needs to be tossed before going back to Firefox 23.01


Firefox 24 works fine with local accounts on a workstation but not network accounts,


Its a bug with Firefox 24 where it crashes when network account users attempt to launch it.

unable to get network users working in server 3

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.