freefall722

Q: unable to get network users working in server 3

After upgrading to Mavericks and OS X server 3 I've been unable to log into my network accounts from any of my client machines (all also upgraded to Mavericks). The Network Account Server is showing as green on the clients and I don't get any warnings at the login screen but trying to log into any accounts results in the failed attempt "shake" of the password box.

 

I'm now on a fresh install of Mavericks on the server with some test accounts set up and I'm still not able to log in from any of my clients. I can however access any share points I set up. Not really sure what I'm doing wrong here.

Posted on Oct 23, 2013 12:11 AM

Close

Q: unable to get network users working in server 3

  • All replies
  • Helpful answers

Previous Page 2 of 12 last Next
  • by haykong,

    haykong haykong Oct 23, 2013 10:23 AM in response to haykong
    Level 1 (119 points)
    Oct 23, 2013 10:23 AM in response to haykong

    FYI for network accounts....

     

    Also note, For those that have are using Open Directory Network Acounts.

     

    Firefox 24 does not work wiith Network Account users. Somehow the user prefs get corrupted and needs to be tossed before going back to Firefox 23.01

     

    Firefox 24 works fine with local accounts on a workstation but not network accounts,

     

    Its a bug with Firefox 24 where it crashes when network account users attempt to launch it.

  • by Ali Kaylan,

    Ali Kaylan Ali Kaylan Oct 23, 2013 10:24 AM in response to haykong
    Level 1 (5 points)
    Oct 23, 2013 10:24 AM in response to haykong

    I am having the very same issue with muliple clients. The issue seems to be related to x.local, and your domain name being convulted during the upgrade and sidelining your certificate, with no apparent way to bring it back.

  • by lesliefromstockton-on-tees,

    lesliefromstockton-on-tees lesliefromstockton-on-tees Oct 23, 2013 10:38 AM in response to freefall722
    Level 1 (25 points)
    Oct 23, 2013 10:38 AM in response to freefall722

    Same here, thanks Apple, the only element that you charged us for and it doesn't work. 

     

    Unable to get any of the computers, ipads or anything to get logged into the server.

     

    Server app also crashes if you try a password reset or create a new acount. 

     

    Thanks a lot Apple. Back to Microsoft Small Business Server!

  • by freefall722,

    freefall722 freefall722 Oct 23, 2013 10:41 AM in response to haykong
    Level 1 (0 points)
    Oct 23, 2013 10:41 AM in response to haykong

    haykong,

     

    In 10.8.x I used something like "example-name.local" without DNS services on my server and it always worked fine. I'm sure this is not the right way (and assumed as much which is why I did a fresh install of Mavericks server and set up DNS services with a "name.example.lan" type hostname) but several of the tutorials online geared towards this showed using a .local hostname so I followed along.

     

    However saying that even after wiping the server and setting it up with a FQDN (I assume - dns is not really my domain) I was unable to connect to a Network account from my Maverick clients.

     

    I posted above however after wiping one of my machines and installing Mavericks on it clean I was able to log into my network accounts - which somehow triggered something that made it possible to log in to those accounts on all of my machines. During this client wipe process I didn't make any changes to the server.

     

    I will be trying Workgroup Manager now - but I'd like to know what changed to make things work when I connected the clean client.

  • by Ali Kaylan,

    Ali Kaylan Ali Kaylan Oct 23, 2013 11:01 AM in response to freefall722
    Level 1 (5 points)
    Oct 23, 2013 11:01 AM in response to freefall722

    There is no way to create a new user, it borks out.I cannot add users, I cannot make reasonable changes tocertificates. It crashes. There is nothing good here. What good is a server if you cannot log into it.

  • by RobbieRobster,

    RobbieRobster RobbieRobster Oct 23, 2013 11:17 AM in response to lesliefromstockton-on-tees
    Level 1 (0 points)
    Oct 23, 2013 11:17 AM in response to lesliefromstockton-on-tees

    Hey Leslie,

    Just a short check up as I'm also having trouble getting my server app back: we REALLY have to pay for Server 3.0?

    thanks,

    Rob

  • by lesliefromstockton-on-tees,

    lesliefromstockton-on-tees lesliefromstockton-on-tees Oct 23, 2013 11:32 AM in response to RobbieRobster
    Level 1 (25 points)
    Oct 23, 2013 11:32 AM in response to RobbieRobster

    Hi Rob

     

    Yes in the UK £13.99 for the pleasure of upgrading to something that doesn't work!

    Les

  • by freefall722,

    freefall722 freefall722 Oct 23, 2013 11:43 AM in response to Ali Kaylan
    Level 1 (0 points)
    Oct 23, 2013 11:43 AM in response to Ali Kaylan

    So after my first successful login with a test account and clean install of the server I'm hitting this brick wall of being unable to add any new accounts without crashes: "existing connection is not authenticated - cannot change password" is the error I'm getting.

     

    I guess it's time to wipe the server again but not really sure what I did to get it in a messed up state - so I'm leaning towards this just being a bug.

     

    Trying to change passwords in Workgroup Manager results in this:

     

    "In order to set the password of a a user with an Open Directory Password, your own password type must be Open Directory. Administrators with other password types cannot set the password of a user with an Open Directory password."

     

     

    Is there anybody out there for whom it's working at all?

  • by lesliefromstockton-on-tees,

    lesliefromstockton-on-tees lesliefromstockton-on-tees Oct 23, 2013 11:33 AM in response to Ali Kaylan
    Level 1 (25 points)
    Oct 23, 2013 11:33 AM in response to Ali Kaylan

    Just tried the same, can't do anything.

  • by Dizzy810,

    Dizzy810 Dizzy810 Oct 23, 2013 11:40 AM in response to freefall722
    Level 1 (0 points)
    Oct 23, 2013 11:40 AM in response to freefall722

    I'm having a similiar issue, but not quite the same.  I have a Mini Server and a Macbook Pro and I use server solely for network accounts.  I upgraded both machines and now I can only be logged into one machine at a time.  If I am logged into the Mini I get the shaky password on the MBP.  I normally leave the Mini logged in 24/7 in order to serve content to my AppleTV's.  So now I have the choice between a worthless MBP or worthless AppleTV's (4 of them). 

     

    Not happy about this at all.  The only reason I upgraded was because I thought it was free.  It wasn't until after I upgraded to Mavericks that I found out I had to pay for Server and now none of it works anyway.

  • by kristin119,Helpful

    kristin119 kristin119 Oct 23, 2013 11:54 AM in response to freefall722
    Level 1 (15 points)
    Oct 23, 2013 11:54 AM in response to freefall722

    freefall - It is insanely easy to get a messed up DNS FQDN: Apple configures the domain name incorrectly by DEFAULT. This only took me six months to figure out on Server 2.0 and another four months to track down and fix the cascade of related problems from that original setup error.

     

    In the Server DNS, click whatever magic button gets you "Show All Records." This is the only way to see the differentiation between the domain and the hostname. Apple's default makes the *hostname* into the *domain* name (helpfully called the Zone in the Server app). While this is an identical FQDN either way, you will have problems the second you add any other machines into your setup, since they will use the *hostname* of your server machine as their *domain* name.

     

    Example: FQDN myhost.mynet.local; hostname myhost.mynet.local; Zone myhost.mynet.local. The next machine added to the Zone is now FQDN myotherhost.myhost.mynet.local instead of myotherhost.mynet.local.

     

    You begin to see the problems?

     

    Enterprise support kept saying, "Look at the DNS," and they were right. If only they'd bothered to mention the Show All Records in the first place, I would have avoided nearly a year of headaches. (No, I'm not upgrading any time soon, either.)

  • by haykong,

    haykong haykong Oct 23, 2013 1:02 PM in response to kristin119
    Level 1 (119 points)
    Oct 23, 2013 1:02 PM in response to kristin119

    I agree with Kristin119,

     

         Most People who are new to O X Server don't  realize  how important it i to have DNS FQDN setup correctly.I've been running OS X Server since the days OS X  10.2 Server and did not figure out DNS FQDN had to been correctly configured til 10.5 Server. As always, never expect Server update to go flawless since errors will happen during an upgrade process especially if configuration files are not properly configured.  And always expect migration bugs and issues that can happen in a server update. When Apple transitioned from OS 10.6.8 Server to 10.7 yes there was huge bugs and messes since they were transtioning to server.app and away from admin tools. However, 10.8 Server seems more stable however SMBX was a mess. However at least its rumored that apple finally is licensing SMB2 from microsoft.

     

    Note: OS X Server is not really "No IT" needed.

     

    As noted: always do a full backup people ...

     

    I haven't upgraded yet on my production machine but plan on upgrading my test server so I can evaluate when would be a good time to upgrade my other clients who are on 10.8.5 server.

  • by haykong,

    haykong haykong Oct 23, 2013 1:15 PM in response to haykong
    Level 1 (119 points)
    Oct 23, 2013 1:15 PM in response to haykong

    Also note,

     

           People forget OS X Server will do a reverse IP lookup for the name of the server. Which means that if you dont have your DNS configured and just use your ISP DNS like say comcast, then your server will become the name of xxx.dynamic.comcast.net or something like that. So if you configure your DNS server settings say yourserver.yourdomain.com and make sure you have a reverse lookup of your local ip  and also set your DNS ip in network system prefs as 127.0.0.1 which refers back to the server itself so the server can find it's name when it does a reverse ip lookup.  Also note, your should keep your DNS server settings to only lookup only local networks and also make sure it does not do any zone transfers.

  • by KianTech,

    KianTech KianTech Oct 23, 2013 1:46 PM in response to freefall722
    Level 1 (0 points)
    Oct 23, 2013 1:46 PM in response to freefall722

    We do not need to be lectured on who osx server is intended for, its a $20 application, clearly its marketed to everyone.

     

    Prior to the update all these services were working for all the people in this thread, now it does not. Providing support and technical knowledge is what we are looking for. If its complicated and technical bring it on, we are all enthusiast here, but please don't tell us how a $20 program requires an IT team behind it.

  • by Ali Kaylan,

    Ali Kaylan Ali Kaylan Oct 23, 2013 3:40 PM in response to KianTech
    Level 1 (5 points)
    Oct 23, 2013 3:40 PM in response to KianTech

    This is broken and unusable. Reverting back after wasting many hours. What a shame. What happened to "it just works".

Previous Page 2 of 12 last Next