Yosemite Server, Internet Accounts (Gmail, iCloud etc) & Keychain = BIG Problems

Question

Level 1

8 points

Yosemite Server, Internet Accounts (Gmail, iCloud etc) & Keychain = BIG Problems

Quick summary

have been running an OX 10.x server for many years (although skipped Mavericks as I could never get that to work) on home based network for family use. Running on a Mac Mini C2D 2.66ghz 8GB Ram with (non-factory) Fusion Drive 500GB/128SSD

All client macs are Yosemite (except one iMac which is Mountain Lion) and the user accounts are network accounts i.e. HD's are stored on the server so anyone can log into any mac and get their account

So initially ran the server with ML and Yosemite clients perfectly fine and then upgraded the server to Yosemite and that appears to be fine for a while. Whilst I can't remember the specific I started to have problems with server so I time-machined back to ML and it was ok again.

I've Now tried a fresh install of Yosemite (i.e. formatted HDD) and rebuild OD and everyone's accounts manually (I need to ask in another day if there is a better to re-create a user account than logging into and manually copying their data (docs, music etc) from an external HDD ? ) and again that seemed ok EXCEPT for Internet Accounts and Mail.

So whilst initially setting up is ok i.e. you enter internet accounts credentials all fine and it appears to save it all ok and you can open Mail for example and it appears to be all fine (although I am seeing that the FIRST time you open mail for a user, it start ok but you get NO mail window. This is only rectified if you close Mail and re-open and then the mail window opens and everything seems ok - very odd

So whilst the account appears to be ok (and it is) when you log back in - Mail (and Internet passwords) have all been forgotten an you have manually re-enter the passwords, so naturally I looked up issues with keychain (on the forums) and indeed if you follow some of the instructions to delete & rebuild keychain / keychain repair you return the above paragraph - everything again appears to be ok i.e. internet accounts are ok (although same issue with the first open of Mail in that the window isn't displayed ) However if you again logout and log back in again your're back to System Preferences asking for passwords again -- and as before, its for very type of account (so not just limited to mail) - linkedin, twitter, iCloud, Gmail etc.

Obviously I can run a server where clients can;t log out for fear of screwing up the internet account passwords!

I've all the usual stuff - rebooted, repaired permissions, re-installed fresh copies of Yosemite on server and client; destroy and rebuilt OD; re-created user accounts (note the issue is for everyone not use one account)

So I've proven its an issue with keychain/internet accounts on the SERVER by testing the following scenarios

- Logging using different using different client Macs - Same issue

- Reinstalling a fresh copy of yosemite on client Mac - Same issue

- Created a LOCAL account on client mac i.e. not using server - NO issue and no need to re-enter client account passwords + Mail works first time ok without the need to run it twice before there main mail window appears

So it all points to issues with the server user accounts/keychain/permission type of thing

Appreciate any help or pointers or better still a fix!!

Thanks

Rob

Posted on Dec 11, 2014 12:35 AM

Reply

Answer 1

Dec 11, 2014 3:14 AM in response to iDash

As i'm reading your problems, the "More Like This" section right under states 4 email problems that might put your on the solution.

Yahoo! mail stopped working with Yosemite

****

Re: Cannot receive mail after installing Yosemite

Re: Mail not working with Yosemite on Macbook Air

Re: Why does outgoing mail not work after installing OS X Yosemite

Reply

Answer 2

iDash Author

Level 1

8 points

Dec 11, 2014 11:41 AM in response to estrois.me.com

Thanks for the response but none of these solutions resolved the problem (I had already tried 1 or 2 previously)

This is isn't an email problem specifically (although it manifest itself as such). The problem is with Internet Accounts (whether gmail, iCloud, twitter, linked in, Facebook etc.) and that it 'forgets' the password or more specifically, it cannot seem to retrieve it properly from the keychain

As mentioned previously I have tried deleted and recreating the Keychain using various methods already described in the forum and whilst I get initial success - it appears all ok UNTIL i log out and log back I'm back to where square one. i.e.

Mail: Error finding an Internet password for abc@imap.gmail.com -25291

(multiple times in console)

The link appears to be Network Account AND Keychain - not one or either (so using a local account, I have absolutely no problems with internet accounts and the mac remembering its password ok with multiple logins:

11/12/2014 19:29:07.177 callservicesd[9075]: Failed to get the bundle id

11/12/2014 19:29:11.135 storeassetd[9091]: AssetServiceDelegate: Accepting new connection <NSXPCConnection: 0x7fc992e05760> connection from pid 9090 with interface <AssetServiceInterface: 0x7fc992e06ee0> (PID 9090)

11/12/2014 19:29:11.171 storeassetd[9091]: addOperation <UpdateOperation: 0x7fc992f18230>{name = '(null)'}

11/12/2014 19:29:11.813 storeaccountd[9064]: AccountServiceDelegate: Accepting new connection <NSXPCConnection: 0x7ff4e1d4b610> connection from pid 9091 with interface <AccountServiceInterface: 0x7ff4e1d29d80> (PID 9091)

11/12/2014 19:29:11.853 storedownloadd[9094]: DownloadServiceDelegate: Accepting new connection <NSXPCConnection: 0x7ffbe3e0f6c0> connection from pid 9091 with interface <DownloadServiceInterface: 0x7ffbe3e05f20> (PID 9091)

11/12/2014 19:29:13.706 AppleIDAuthAgent[9046]: AppleIdAuth URL: https://identity.apple.com/dsservices/dsxmlrpc

11/12/2014 19:29:41.560 Mail[9100]: Error finding an Internet password for abc@imap.gmail.com: -25291

11/12/2014 19:29:41.691 Mail[9100]: Error finding an Internet password for abc@imap.gmail.com: -25291

11/12/2014 19:30:00.008 Mail[9100]: Error finding an Internet password for abc@imap.gmail.com: -25291

11/12/2014 19:30:56.531 Mail[9109]: Error finding an Internet password for abc@imap.gmail.com: -25291

11/12/2014 19:30:56.542 Mail[9109]: Error finding an Internet password for abc@imap.gmail.com: -25291

11/12/2014 19:30:58.196 Mail[9109]: Error finding an Internet password for abc@imap.gmail.com: -25291

11/12/2014 19:30:58.739 Mail[9109]: Error finding an Internet password for abc@imap.gmail.com: -25291

11/12/2014 19:30:59.084 Mail[9109]: Error finding an Internet password for abc@imap.gmail.com: -25291

11/12/2014 19:31:02.417 Mail[9109]: Error finding an Internet password for abc@imap.gmail.com: -25291

11/12/2014 19:31:03.242 Mail[9109]: Error finding an Internet password for abc@imap.gmail.com: -25291

11/12/2014 19:31:04.193 Console[9114]: Failed to connect (_consoleX) outlet from (NSApplication) to (ConsoleX): missing setter or instance variable

11/12/2014 19:35:16.249 sharingd[9028]: 19:35:16.249 : Stopping Handoff advertising

11/12/2014 19:35:16.250 sharingd[9028]: 19:35:16.249 : Stopping Handoff scanning

11/12/2014 19:35:17.339 identityservicesd[9032]: <IMMacNotificationCenterManager: 0x7f98e2c22330>: notification observer: com.apple.iChat notification: __CFNotification 0x7f98e2d46830 {name = _NSDoNotDisturbEnabledNotification}

11/12/2014 19:35:17.353 identityservicesd[9032]: <IMMacNotificationCenterManager: 0x7f98e2c22330>: NC Disabled: NO

11/12/2014 19:35:17.359 identityservicesd[9032]: <IMMacNotificationCenterManager: 0x7f98e2c22330>: DND Enabled: YES

11/12/2014 19:35:17.359 identityservicesd[9032]: <IMMacNotificationCenterManager: 0x7f98e2c22330>: Updating enabled: NO (Topics: (null))

11/12/2014 19:35:17.921 sharingd[9028]: 19:35:17.920 : Stopping Handoff scanning

11/12/2014 19:35:17.922 sharingd[9028]: 19:35:17.920 : Starting AirDrop server for user 1031 on wake

11/12/2014 19:35:17.944 sharingd[9028]: 19:35:17.943 : SDStatusMonitor::kStatusWirelessPowerChanged

11/12/2014 19:35:18.689 identityservicesd[9032]: <IMMacNotificationCenterManager: 0x7f98e2c22330>: notification observer: com.apple.iChat notification: __CFNotification 0x7f98e2c08320 {name = _NSDoNotDisturbDisabledNotification}

11/12/2014 19:35:18.703 identityservicesd[9032]: <IMMacNotificationCenterManager: 0x7f98e2c22330>: NC Disabled: NO

11/12/2014 19:35:18.709 identityservicesd[9032]: <IMMacNotificationCenterManager: 0x7f98e2c22330>: DND Enabled: NO

11/12/2014 19:35:18.709 identityservicesd[9032]: <IMMacNotificationCenterManager: 0x7f98e2c22330>: Updating enabled: YES (Topics: (

))

Again I appreciate anyones/everyone's help

Rob

Reply

Answer 3

Dec 11, 2014 11:58 AM in response to iDash

Rob,

You are not alone. Read this 8300 view 8 page discussion of the topic :

Mavericks Server Keychain not properly storing information network users.

Reply

Answer 4

iDash Author

Level 1

8 points

Dec 11, 2014 1:05 PM in response to Erich Wetzel

Hi Eric

Thanks a lot for the url link to the previous discussion - I had missed it.

I am also glad I am not the only one too!

So did the kill scripts work properly under Yosemite?

Thanks again

Rob

Reply

Answer 5

Dec 11, 2014 1:21 PM in response to iDash

Rob,

Initially they did but after a bit of time things started to behave badly. Check out the last page or so in the discussion. We went back to rebooting any time a logout takes place to create a clean start up for the next user. The problem is that the issues still come up with Mail, Messages, some preferences, etc.

It really is bad news for users, horribly stressful for admins because we are chasing problems EVERY DAY, and surprising that Apple has not been able to resolve this. The other discussion is nearly a year old. Apple knows its an issue, but has decided not to resolve it a year and a full OS release later.

Reply

Answer 6

iDash Author

Level 1

8 points

Dec 12, 2014 1:45 AM in response to Erich Wetzel

Thanks Eric for help and advice

i have inplamented the scrips on My mini amd MBA and on both I have seen a noticible difference (if not quite 100%)

i will look t deploy on the other macs in the house - for its not absolutey mission critical (other than for myself which looks like so far to be ok) - bit are you saying it degredates over time ?

i Was thinking of trying Mavericks (which I never got working on the first place) but reading the thread it's just as bad there as it is for Yosemite ?

alternaively I could revert back to ML server as for me that was the mor stable that I ever so - as it doesn't look like we have a solution from apple any time soon

again thanks

rob

Reply

Answer 7

iDash Author

Level 1

8 points

Dec 12, 2014 1:47 AM in response to iDash

oh oh one other thing - do we the issue wih mobile accounts do you know as that could be a solution for me?

Reply

Answer 8

iDash Author

Level 1

8 points

Dec 12, 2014 11:31 AM in response to iDash

Sadly, having returned from work today, I've found issues with internet accounts/email on of the Macs where I installed the kill script(s) 😢

However, I am now testing Mobile accounts (as this will be ok for me and my family) and so far its looking promising (on the Mac with the kill scripts) -- Iv'e got more analysis to do and on Macs where I haven't previously install the aforementioned scripts

Fingers crossed...

Reply

Answer 9

iDash Author

Level 1

8 points

Dec 17, 2014 10:51 AM in response to iDash

iI'm happy to report some success with this:

- I've installed the kills scripts on all my Macs in the house

- ive created NEW mobile accounts and synced first server before adding any internet accounts a details

- Restarted Mac

- Logged in and created internet accounts

and I am happy to report no issues so far - I can log in and restart the Mac at will without any issue. It has been serval days and been fine

what I did observe is that you try to:

- convert an existing accout to mobile ie with internet acounts already present then I ran into problems. The key appears to be creating fresh accounts, sync and then add internet account details

- likewise if you create a fresh account , add Internet account and then sync then you'll run into problems

sso far so good!!

Reply

Answer 10

Dec 17, 2014 11:00 AM in response to iDash

THanks for posting your solutions, you have class.

you can give your above post a "this solved my problem" status. You won't get points for solving your own problem (sad thing) but other may rely on it to solve the same thing.

thanks again, I might get around trying that soon.

Reply

Answer 11

Mar 3, 2015 11:24 AM in response to iDash

Who following this thread are Apple Consultant Network (ACN) members? I am suggesting that we all contact ACN admin e-mail address to get them to escalate this bug which has been around since the introduction of Mavericks (10.9) and is still in the beta of Yosemite (10.10.3). They (ACN) won't do so, however, until enough ACNs that they represent contact them.

Reply