Cannot authenticate as diradmin - OS X Server 10.6 Workgroup Manager

Question

Level 2

176 points

Cannot authenticate as diradmin - OS X Server 10.6 Workgroup Manager

As far as I can tell, not an uncommon problem: when I try to authenticate as 'diradmin' in Workgroup Manager for /LDAPv3/127.0.0.1 it fails with a login problem: "The login information is not valid for this server"

I'm 100% sure the password is correct (password server log confirms this)

slapd.log says

slapd[71]: SASL [conn=38] Failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Key table entry not found)

Other things to note:

I've done
```
klist -k
```
and can see the 3
```
ldap/{hostname}@{HOSTNAME}
```
entries
```
sudo changeip -checkhostname
```
reports all is OK
I can get a ticket with
```
kinit diradmin
```
just fine

Please help! Is there anything else I should be looking at?

Apart from rebuilding databases, I'm at a bit of a loss as to what to try next.

Posted on Apr 15, 2014 2:23 PM

Reply

Answer 1

Apr 19, 2014 2:20 PM in response to Steve Folly

This sounds like what happened to my server a couple of years back. At first, I wasn't able to authenticate with diradmin but I was able to authenticate with another admin user. But after a while that stopped working, too. Apparently my Open Directory master had become corrupted. I replaced it with a working backup.

Do you get any error messages when you enter the following in the Terminal?

/usr/libexec/slapd -Tt

Reply