OS X Server, Mavericks & Personal URL (dynamic IP)

Question

shortysharp2 Author

Level 1

5 points

OS X Server, Mavericks & Personal URL (dynamic IP)

Machine Im working on:

Model Identifier: MacBookPro8,2

Processor Name: Intel Core i7

Processor Speed: 2.5 GHz

Total Number of Cores: 4

Memory: 16 GB

Drive: 750 GB 7200 RPM HDD & 250GB SSD (Formatted to FUSION Drive)

OS Software: 10.9.1

Server Software: 3.0.1

My Situation:

I just updated to Mavericks and purchased OS X Server. I haven't really used this software at all in the past. I walked through the steps to setup the VPN but 1st of all I'm not sure that I have them 100% Correct. The problem is that any device I try to use to connect to the VPN (iPhone, iPad, Macbook Pro 10.6.8 (is at my parents house in another state and gets the could not connect error) ) will get the dreaded "The L2TP-VPN server did not respond...." error.

My Network:

Fiberoptics 77mb up & down (only provies dynamic IP addresses for consumers)

Apple Airport Extreme 7.6.4

Airport Settings:

Port Settings:

Settings for VPN in Server:

DNS Settings:

VPN Service Log: (from time of opening)

2013-12-20 16:58:10 MST

Incoming call... Address given to client = 10.0.1.240

Fri Dec 20 16:58:10 2013 : Directory Services Authentication plugin initialized

Fri Dec 20 16:58:10 2013 : Directory Services Authorization plugin initialized

Fri Dec 20 16:58:10 2013 : publish_entry SCDSet() failed: Success!

Fri Dec 20 16:58:10 2013 : PPTP incoming call in progress from '14.17.35.181'...

2013-12-20 16:58:11 MST

--> Client with address = 10.0.1.240 has hungup

I have looked through many fourms and have had no luck. Any suggestions would be greately appreciated as Apple Care just told me that my Apple Care didnt cover this type of support.

One suggested running: (in terminal)

server:/ justinrsharp$ sudo changeip -checkhostname

Password:XXXXXXXXXX

Primary address = 10.0.1.200

Current HostName = server.justinrsharp.com

DNS HostName = server.justinrsharp.com

The names match. There is nothing to change.

dirserv:success = "success"

MacBook Pro (15-inch Late 2011), OS X Mavericks (10.9.1), 16gb ram, 750gb hdd, Matte

Posted on Dec 20, 2013 6:51 PM

Reply

Answer 1

shortysharp2 Author

Level 1

5 points

Dec 20, 2013 6:59 PM in response to shortysharp2

BTW I have "Back to my Mac" turned off on the Mac im running Server on and i have it turned off on the AEBS.

I do have firewall turned on also (there is no expection for server but i figured OS X would do that on its own).

I also have Firevault turned on.

And these are ALL of the Services that I have turned ON in Server:

Reply

Answer 2

Linc Davis

Level 10

209,547 points

Dec 20, 2013 8:22 PM in response to shortysharp2

VPN Update for Mavericks Server: This update fixes an issue that could prevent L2TP VPN connections from working with OS X Server

Reply

Answer 3

shortysharp2 Author

Level 1

5 points

Dec 20, 2013 9:03 PM in response to Linc Davis

Thanks for the link.... This did come out after I initially installed so I removed Server, All its files (that saves its preferences so when i reinstalled it would resetup), restarted and tried reinstalled Server..... Same issue.

(TO CLARIFY: I dont know if its beneficial but, I had already done all these steps and tried this fix prior to posting of the link)

Reply

Answer 4

Linc Davis

Level 10

209,547 points

Dec 20, 2013 9:16 PM in response to shortysharp2

If the application firewall is on, turn it off. It serves no purpose behind NAT. Then see whether you can connect to the VPN from the LAN.

Reply

Answer 5

shortysharp2 Author

Level 1

5 points

Dec 20, 2013 9:19 PM in response to Linc Davis

I will try this right now.

Thanks again for all the support!!!

Reply

Answer 6

shortysharp2 Author

Level 1

5 points

Dec 20, 2013 9:26 PM in response to Linc Davis

Still no dice.... the log show some things that might be valuable:

Dec 20 22:00:28 server.justinrsharp.com mDNSResponder[53]: ERROR: handle_resolve_request bad interfaceIndex 24

Dec 20 22:00:31 server.justinrsharp.com loginwindow[96]: ERROR | -[LWBuiltInScreenLockAuthLion askForPasswordBuiltIn:] | Attempted to add an observer when already observing

Dec 20 22:00:32 server kernel[0]: Sandbox: xcscredd(147) deny file-read-metadata /Users

Dec 20 22:00:34 --- last message repeated 49 times ---

Dec 20 22:00:54 server.justinrsharp.com usbmuxd[78]: AMDeviceStartSession (thread 0x103a81000): Could not start session: kAMDInvalidHostIDError

Dec 20 22:00:54 server.justinrsharp.com usbmuxd[78]: device_os_is_at_least (thread 0x103a81000): AMDeviceCopyValueWithError: 0xe8000016

Dec 20 22:00:54 server.justinrsharp.com usbmuxd[78]: _AMDevicePreflightWorker (thread 0x103a81000): Pair worker could not pair with device 38: 0xe8000082

Dec 20 22:00:54 server.justinrsharp.com com.apple.usbmuxd[78]: HandleDeviceAttachHelperCallback preflighting failed for WiFi device 0x26-fe80::bac7:5dff:feed:e247:0: 0xe8000082. Ignoring device.

Dec 20 22:00:56 server.justinrsharp.com com.apple.WebKit.Networking[415]: tcp_connection_destination_prepare_complete 6946 connectx to 2001:559:12:198::c77#80 failed: 65 - No route to host

Is it required for the server to be setup with an ethernet connection?

Reply

Answer 7

Linc Davis

Level 10

209,547 points

Dec 21, 2013 7:39 AM in response to shortysharp2

Your first log extract shows an attempt to connect to PPTP, but no client addresses are allocated to that protocol.

Reply

Answer 8

shortysharp2 Author

Level 1

5 points

Dec 21, 2013 9:56 AM in response to Linc Davis

I'm not sure why the image shows 0 for pptp I haven't changed anything and it currently shows there are 15. My only guess is that i had just opened the server app before I took the picture and that the addresses hadn't been allocated yet.

Reply

Answer 9

Linc Davis

Level 10

209,547 points

Dec 21, 2013 2:34 PM in response to shortysharp2

What happens when you try to connect to L2TP? Post an extract from the vpnd log.

Reply

Answer 10

shortysharp2 Author

Level 1

5 points

Dec 21, 2013 2:37 PM in response to Linc Davis

Im not familar with doing that.... Is it just the log that is listed in server?

Reply

Answer 11

Linc Davis

Level 10

209,547 points

Dec 21, 2013 2:47 PM in response to shortysharp2

Yes.

Reply

Answer 12

shortysharp2 Author

Level 1

5 points

Dec 21, 2013 3:56 PM in response to Linc Davis

so. while i was free today i tried removing everything and resetting up.

the big difference this time was that I used an ethernet cable. the other thing that I did was change the A address name for my url... i was unaware this was a necessary change.

no i can connect from the remote computer and my iphone. though i am still unable to see the files that are in the shared files section of services....

maybe i just dont know where im supposed to be looking for the files in finder?

Reply

Answer 13

shortysharp2 Author

Level 1

5 points

Dec 21, 2013 4:09 PM in response to Linc Davis

so i tried just clicking "connect to server"

used my url

server.justinrsharp.com

and they my username and password.

it connected, showed both shared folders but when i click connect it disconnects......

log is:

2013-12-21 17:01:57 MST

Incoming call... Address given to client = 10.0.1.225

Sat Dec 21 17:01:57 2013 : Directory Services Authentication plugin initialized

Sat Dec 21 17:01:57 2013 : Directory Services Authorization plugin initialized

Sat Dec 21 17:01:57 2013 : publish_entry SCDSet() failed: Success!

Sat Dec 21 17:01:57 2013 : L2TP incoming call in progress from '67.181.224.51'...

Sat Dec 21 17:01:57 2013 : L2TP received SCCRQ

Sat Dec 21 17:01:57 2013 : L2TP sent SCCRP

Sat Dec 21 17:01:57 2013 : L2TP received SCCCN

Sat Dec 21 17:01:57 2013 : L2TP received ICRQ

Sat Dec 21 17:01:57 2013 : L2TP sent ICRP

Sat Dec 21 17:01:57 2013 : L2TP received ICCN

Sat Dec 21 17:01:57 2013 : L2TP connection established.

Sat Dec 21 17:01:57 2013 : using link 0

Sat Dec 21 17:01:57 2013 : Using interface ppp0

Sat Dec 21 17:01:57 2013 : Connect: ppp0 <--> socket[34:18]

Sat Dec 21 17:01:57 2013 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x27747af0> <pcomp> <accomp>]

Sat Dec 21 17:01:57 2013 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x6fee8272> <pcomp> <accomp>]

Sat Dec 21 17:01:57 2013 : lcp_reqci: returning CONFACK.

Sat Dec 21 17:01:57 2013 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x6fee8272> <pcomp> <accomp>]

Sat Dec 21 17:01:57 2013 : rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x27747af0> <pcomp> <accomp>]

Sat Dec 21 17:01:57 2013 : sent [LCP EchoReq id=0x0 magic=0x27747af0]

Sat Dec 21 17:01:57 2013 : sent [CHAP Challenge id=0xce <7a2b11407919281b12263539630b231f>, name = "server.justinrsharp.com"]

Sat Dec 21 17:01:57 2013 : rcvd [LCP EchoReq id=0x0 magic=0x6fee8272]

Sat Dec 21 17:01:57 2013 : sent [LCP EchoRep id=0x0 magic=0x27747af0]

Sat Dec 21 17:01:57 2013 : rcvd [LCP EchoRep id=0x0 magic=0x6fee8272]

Sat Dec 21 17:01:57 2013 : rcvd [CHAP Response id=0xce <a25357049d7eae402cad0c2a7fea08ae0000000000000000e62c908e0af8b7de38045914c24887 d4954c00b3108d0af800>, name = "daddysharp"]

Sat Dec 21 17:01:57 2013 : sent [CHAP Success id=0xce "S=5923832DA37159ABB586E1931D8027A0D332E3E9 M=Access granted"]

Sat Dec 21 17:01:57 2013 : CHAP peer authentication succeeded for daddysharp

Sat Dec 21 17:01:57 2013 : DSAccessControl plugin: User 'daddysharp' authorized for access

Sat Dec 21 17:01:57 2013 : sent [IPCP ConfReq id=0x1 <addr 10.0.1.3>]

Sat Dec 21 17:01:57 2013 : sent [ACSCP ConfReq id=0x1]

Sat Dec 21 17:01:58 2013 : rcvd [IPCP ConfReq id=0x1 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]

Sat Dec 21 17:01:58 2013 : ipcp: returning Configure-NAK

Sat Dec 21 17:01:58 2013 : sent [IPCP ConfNak id=0x1 <addr 10.0.1.225> <ms-dns1 10.0.1.3> <ms-dns3 8.8.8.8>]

Sat Dec 21 17:01:58 2013 : rcvd [IPV6CP ConfReq id=0x1 <addr fe80::0216:cbff:fe96:a8c0>]

Sat Dec 21 17:01:58 2013 : Unsupported protocol 0x8057 received

Sat Dec 21 17:01:58 2013 : sent [LCP ProtRej id=0x2 80 57 01 01 00 0e 01 0a 02 16 cb ff fe 96 a8 c0]

Sat Dec 21 17:01:58 2013 : rcvd [IPCP ConfReq id=0x2 <addr 10.0.1.225> <ms-dns1 10.0.1.3> <ms-dns3 8.8.8.8>]

Sat Dec 21 17:01:58 2013 : ipcp: returning Configure-ACK

Sat Dec 21 17:01:58 2013 : sent [IPCP ConfAck id=0x2 <addr 10.0.1.225> <ms-dns1 10.0.1.3> <ms-dns3 8.8.8.8>]

Sat Dec 21 17:02:00 2013 : sent [IPCP ConfReq id=0x1 <addr 10.0.1.3>]

Sat Dec 21 17:02:00 2013 : sent [ACSCP ConfReq id=0x1]

Sat Dec 21 17:02:01 2013 : rcvd [LCP ProtRej id=0x2 82 35 01 01 00 04]

Sat Dec 21 17:02:01 2013 : rcvd [IPCP ConfAck id=0x1 <addr 10.0.1.3>]

Sat Dec 21 17:02:01 2013 : ipcp: up

Sat Dec 21 17:02:01 2013 : found interface en0 for proxy arp

Sat Dec 21 17:02:01 2013 : local IP address 10.0.1.3

Sat Dec 21 17:02:01 2013 : remote IP address 10.0.1.225

Sat Dec 21 17:02:01 2013 : Received protocol dictionaries

Sat Dec 21 17:02:01 2013 : Received acsp/dhcp dictionaries

Sat Dec 21 17:02:01 2013 : Committed PPP store

Sat Dec 21 17:02:01 2013 : Received acsp/dhcp dictionaries

Sat Dec 21 17:02:01 2013 : Committed PPP store

Sat Dec 21 17:02:01 2013 : l2tp_wait_input: Address added. previous interface setting (name: en0, address: 10.0.1.3), current interface setting (name: ppp0, family: PPP, address: 10.0.1.3, subnet: 255.255.255.0, destination: 10.0.1.225).

Sat Dec 21 17:02:01 2013 : rcvd [IPCP ConfReq id=0x2 <addr 10.0.1.225> <ms-dns1 10.0.1.3> <ms-dns3 8.8.8.8>]

Sat Dec 21 17:02:01 2013 : sent [IPCP ConfAck id=0x2 <addr 10.0.1.225> <ms-dns1 10.0.1.3> <ms-dns3 8.8.8.8>]

Reply

Answer 14

Linc Davis

Level 10

209,547 points

Dec 21, 2013 5:52 PM in response to shortysharp2

no[w] i can connect from the remote computer and my iphone. though i am still unable to see the files that are in the shared files section of services.

If you are expecting sharepoints to be advertised over Bonjour as they are on the local network, don't. Bonjour doesn't work over a VPN. You can mount a file server on the remote network manually in the Finder by its IP address or unicast domain name, if it has one.

Reply