patrick_tttntech

Level 1 (0 points)

Q: TS5289 I have "Existing connecting is not authenticated: password change denied" but no /var/db/openldap/migration/.rekerberize. What can I do ?

Dear all,

I have "Existing connecting is not authenticated: password change denied" whan I try to create a network user.

The page http://support.apple.com/kb/TS5289 says that I need to :

sudo touch /var/db/openldap/migration/.rekerberize

sudo killall PasswordService

restart the Server and it's ok. However, I don't have this file :

/var/db/openldap/migration/.rekerberize

Of course, I killed the PasswordService. And it still does not work.

What should I do now ?

Thanks,

Patrick.

ps : of course, I have seen nearly all the web pages about the subject.

Mac mini, OS X Mavericks (10.9)

Posted on Dec 5, 2013 11:13 PM

I have this question too

Q: TS5289 I have "Existing connecting is not authenticated: password change denied" but no /var/db/openldap/migration/.rekerber ... more

All replies

Helpful answers

by odx,

odx Dec 5, 2013 11:19 PM in response to patrick_tttntech
Level 1 (5 points)

Safari

Dec 5, 2013 11:19 PM in response to patrick_tttntech

Hello this appears to become a more and more common issue.

One remark: all the touch command does is create a new file with the current time stamp. I assume this file is used by the PasswordService to determine that it is time to rekerberize. And the file will be removed after this was performed. So don't expect to have this file permanently on your disk.

Please refer to my threads:

https://discussions.apple.com/message/23860765#23860765#23860765
and
https://discussions.apple.com/message/24034118#24034118

As i read in the news 10.9.1 is not far from beeing released... So there might be a little chance this will be fixed.
Anyways please file a bug report to folks at apple get aware about the severity of this issue.
Reply options

Link to this post

by patrick_tttntech,

patrick_tttntech Dec 5, 2013 11:27 PM in response to odx
Level 1 (0 points)

Dec 5, 2013 11:27 PM in response to odx

Thanks odx.

However, I do not want to recreate the OD. I have 138 users :-)

I do know that this is a common issue and that there are many posts.
What I do here is just to give a last chance to Apple to keep me in their
clients.

Best regards,
Patrick.
Reply options

Link to this post

by patrick_tttntech,

patrick_tttntech Dec 7, 2013 12:43 AM in response to patrick_tttntech
Level 1 (0 points)

Dec 7, 2013 12:43 AM in response to patrick_tttntech

Hello,

several days that I am stuck with this bug. I am unable to create
a network user. Without any answer of Apple.

That is why I will drop Apple asap and get other less expensive
materials with a Free BSD.

Patrick.
Reply options

Link to this post

by KRIBkia,

KRIBkia Jan 31, 2014 11:56 AM in response to patrick_tttntech
Level 1 (2 points)

Jan 31, 2014 11:56 AM in response to patrick_tttntech

Hey Patrick, did you get a fix for this issue?

I'm in the same situation, and in need of help...

https://discussions.apple.com/thread/5850487

Thanks.
Reply options

Link to this post

by patrick_tttntech,

patrick_tttntech Jan 31, 2014 12:06 PM in response to KRIBkia
Level 1 (0 points)

Jan 31, 2014 12:06 PM in response to KRIBkia

Hey,

unfortunately, I got no solution.

The only solution I got is to save all LDAP people from WorkGroup Manager (and not from OS Server).
Then erase and recreate a LDAP base.
Then reimport what has been saved with WorkGroup Manager.

The problem is when you do that, you have to reinitiialize all password.

As I said, I will drop Apple asap and get other less expensive
materials with a Free BSD because this is a simple ldap problem
and it could be resolved by Apple people. But it was not...

Patrick.
Reply options

Link to this post