freefall722

Q: unable to get network users working in server 3

After upgrading to Mavericks and OS X server 3 I've been unable to log into my network accounts from any of my client machines (all also upgraded to Mavericks). The Network Account Server is showing as green on the clients and I don't get any warnings at the login screen but trying to log into any accounts results in the failed attempt "shake" of the password box.

 

I'm now on a fresh install of Mavericks on the server with some test accounts set up and I'm still not able to log in from any of my clients. I can however access any share points I set up. Not really sure what I'm doing wrong here.

Posted on Oct 23, 2013 12:11 AM

Close

Q: unable to get network users working in server 3

  • All replies
  • Helpful answers

first Previous Page 4 of 12 last Next
  • by freefall722,

    freefall722 freefall722 Oct 24, 2013 8:04 AM in response to infinite vortex
    Level 1 (0 points)
    Oct 24, 2013 8:04 AM in response to infinite vortex

    @trilogy1000 and infinitevortex

     

    I had a similar experience at one point. For me through all my clients were upgraded to Mavericks and wouldn't log in - after wiping one of the clients and doing a fresh install that client could log into the network accounts which triggered all the other clients being able to.

  • by freefall722,

    freefall722 freefall722 Oct 24, 2013 9:50 AM in response to freefall722
    Level 1 (0 points)
    Oct 24, 2013 9:50 AM in response to freefall722

    So I've done another completely fresh install of the server and still can't get around the weird log in issue at the bottom of my previous post.

     

    Basically what happens is that for all my clients I can now log into any of the network users however only the first one I log into (ex. testuser) after a reboot of a client works correctly.

     

    If I log into another network account (ex.testuser2) after logging out of the first one it'll log in but thow an error: "The home folder for user "testuser2" isn't located in the usual place or can't be accessed." After this point I can't do anything with that user account because there is no where to save anything.

     

    However if I reboot the client machine and log into the second account (testuser2) first this time that account will work but the first account (testuser) will not and throw the above error instead.

     

    I can log in and out of the first user I logged in with after rebooting the client as many times as I like and it will always work but no other accounts will until I reboot again.

     

    This is per client. I can have one client machine working fine with "testuser" and another client machine working with "testuser2" at the same time.

     

    And again this is on a fresh install of Mavericks and Server 3.

  • by KianTech,

    KianTech KianTech Oct 24, 2013 1:54 PM in response to KianTech
    Level 1 (0 points)
    Oct 24, 2013 1:54 PM in response to KianTech

    I was able to fix my file shares mount (includine time machine) issue with the following terminal commands.

     

     

    sudo launchctl unload /System/Library/LaunchDaemons/com.apple.AppleFileServer.plist

     

    sudo serveradmin start afp

    source: https://discussions.apple.com/message/19362746#19362746

  • by Ali Kaylan,

    Ali Kaylan Ali Kaylan Oct 25, 2013 8:27 AM in response to freefall722
    Level 1 (5 points)
    Oct 25, 2013 8:27 AM in response to freefall722

    The only solution I could find was following Apple's instructions for the removal of the server here. Once I removed, I redid the server settings. I did not reinstall anything, but the re-setting the server was long and painful. Now we are again, after many wasted hours.

  • by lesliefromstockton-on-tees,

    lesliefromstockton-on-tees lesliefromstockton-on-tees Oct 26, 2013 3:27 AM in response to freefall722
    Level 1 (25 points)
    Oct 26, 2013 3:27 AM in response to freefall722

    To add a little more to the expanding discussion, I have wiped my Mac Mini server and done an out of the box install of Mavericks then installed server with no errors or crashing.  DNS, Open Directory all set with no problems very similar to my former setup.  But, once I bind the client to the server, I am getting Network Accounts Not Available at the login screen on the Client and can only login using local accounts.  Setup on all counts was very simple, nothing complicated, FWDN, no joy.

     

    Les

  • by Ali Kaylan,

    Ali Kaylan Ali Kaylan Oct 26, 2013 5:55 AM in response to lesliefromstockton-on-tees
    Level 1 (5 points)
    Oct 26, 2013 5:55 AM in response to lesliefromstockton-on-tees

    I am in the same boat. After the fresh set-up I mentioned one post above, I can login to all accounts on the Mavericks server machine, and I can login on ML client machines, but the only one machine with the mobile account (Mavericks) cannot login, despite having logged in once successfully. As others pointed out, I had modified the "join OD server" setting in the users pref panel on that machine a number of times, and it is now giving me the certificate warning when trying to change. I suspect it is related to some certificate issue + an issue relating to joining the OD server. I do not believe it is a mobile account issue, as I cannot login to non-mobile accounts from that machine either. Once again, that machine is running Mavericks.

     

    There is another issue that I have not been able to resolve. A few months back, I had experimented with a x.dyndns.org address. In the log, I keep seeing users logging in as y@x.dyndns.org with a host of warnings, instead of y@mydomain.net, and despite my best efforts, I cannot eradicate x.dyndns.org. I suspect it is somehow related to reverse look-up as others have pointed out, but the address that I inserted into dyndns.org is not my server static address. So, it is coming from somewhere else, presumably my own server. Any insights would be greatly appreciated. (I am not running server DNS.)

  • by rodvela,

    rodvela rodvela Oct 26, 2013 6:04 AM in response to freefall722
    Level 1 (0 points)
    Oct 26, 2013 6:04 AM in response to freefall722

    I solved by adding the server name in the hosts file on evety client mac.

     

    It seams to be a problem with DNS, that does not let the client mac resolve the name of the server.

     

    So do this in terminal

     

    # sudo nano /private/etc/hosts

     

    add at the end of the file this line with the IP of your server and its domain name

     

    168.192.0.4 mac-server.local

     

    save the changes and you are done.

  • by lesliefromstockton-on-tees,

    lesliefromstockton-on-tees lesliefromstockton-on-tees Oct 26, 2013 6:05 AM in response to freefall722
    Level 1 (25 points)
    Oct 26, 2013 6:05 AM in response to freefall722

    Further update, just rebuilt my MacBook and put Lion on it, bound it to the server and rebooted, no problems network login. Does that confirm that it is an issue with the Maverick client side as the server must be working?

  • by Ali Kaylan,

    Ali Kaylan Ali Kaylan Oct 26, 2013 7:23 AM in response to rodvela
    Level 1 (5 points)
    Oct 26, 2013 7:23 AM in response to rodvela

    Tried on my Mavericks client, and did not resolve my issue, unfortunately. Nice thought though. Thanks.

  • by nick.leblanc,

    nick.leblanc nick.leblanc Oct 26, 2013 8:16 AM in response to freefall722
    Level 1 (0 points)
    Oct 26, 2013 8:16 AM in response to freefall722

    So far I have done two fresh installs and found a few things that were problems. I hope this helps someone! I'm not by means claiming to be an expert however, these are items that solved my problems.

     

    • The client's primary DNS server must use a DNS server that is either serving the FQDN or is serving ".local" domains.
    • If the server is using an FQDN, the clients must use a DNS server that lists the domain as a searchable domain.
    • Last (and CERTAINLY not least!) make sure that the home folders are being set up to be shared over SMB. Though this is a setting, the Mavericks clients seem to only look for the user and user folder when they're shared over SMB.  This seems to be why the Lion & ML clients are logging into the Mavericks servers but not the Mavericks clients.

     

    Well, there's my $.02 for now! Hope it helps someone!

  • by lesliefromstockton-on-tees,

    lesliefromstockton-on-tees lesliefromstockton-on-tees Oct 26, 2013 6:49 PM in response to freefall722
    Level 1 (25 points)
    Oct 26, 2013 6:49 PM in response to freefall722

    Any movement anyone, still no login with clean installs!

  • by lesliefromstockton-on-tees,

    lesliefromstockton-on-tees lesliefromstockton-on-tees Oct 27, 2013 2:16 AM in response to freefall722
    Level 1 (25 points)
    Oct 27, 2013 2:16 AM in response to freefall722

    I see that in th UK you get 30 support from Apple as Server 3 was a purchase. Has anyone raised the login issues with Apple before I do myself.

  • by MDallimore,

    MDallimore MDallimore Oct 27, 2013 5:34 AM in response to lesliefromstockton-on-tees
    Level 1 (5 points)
    Oct 27, 2013 5:34 AM in response to lesliefromstockton-on-tees

    Did you mean 30 days from Purchase, my install has messed up my remote clients.

  • by haykong,

    haykong haykong Oct 27, 2013 5:58 AM in response to lesliefromstockton-on-tees
    Level 1 (119 points)
    Oct 27, 2013 5:58 AM in response to lesliefromstockton-on-tees

    Hi leslie,

     

     

            I can agree with what nick.leblanc suggested.  Regaarding about using the Mavericks Server DNS for your clients. It makes a lot of sense in configuration of the clients.

     

    I upgraded my test server and everything seems fine along with two of my clients for testing and no issues for login into network users accounts.

     

     

    Reason why I had no issues login in was probably since my clients use the server as it's DNS and the your ISP. However it makes all perfect sense.

     

    As a reverse test on what nick suggested. I set one of my mavericks clients using the ISP DNS and network login stopped working... even after I rebinded. I tested a mountain lion client using the ISP DNS and network login worked fined.

     

    Regardless, it makes perfect sense since it seems mavericks is picky about the server name since even if you provide the IP of the server it does reverse IP lookup of the server. So if you are using your ISP DNS it might return some other name that's provided by your ISP for your broadband,.

     

     

    LIke I've been saying FQDN and DNS setup is very important. I guess Mavericks clients now depends more importantly on it now for proper configuration.

     

    Like Again it makes perfect sense when thinking about it when setting up home directories in Workgroup manager. Especially, when you have to setup the full path,   server.yourdomain.net part of the full path......

    If your clients are not using your server DNS then it can not find the path. For whatever reason, in Mavericks clients DNS is more important than in Mountain Lion clients.

     

    If people are still having trouble logging as network users, let me know since individually I might be able to help with setup of your Server DNS and then get your clients to login using the Server DNS settings... etc etc..

  • by haykong,

    haykong haykong Oct 27, 2013 6:07 AM in response to rodvela
    Level 1 (119 points)
    Oct 27, 2013 6:07 AM in response to rodvela

    Hi Rodvela,

     

          yeah editing the host file is one way to solve your issue, but that's a lot fo work if you need to edit  alot of clients.

     

    Are you clients using the DNS services of your Mavericks Server?

     

    If not, Edit your DHCP server (your router or if you are using Mavericks Server) to use the local ip of your Mavericks Server.

     

    Next make sure the name of the server is configured right for your servr in the DNS services. etc etc

     

    Now if you do this, there is no need for changing host files of each client.

first Previous Page 4 of 12 last Next