Hi all,
I have a Mac OS X Yosemite Server (10.10.4) installed on an I-MAC, serving network home folders to Mac OS X Yosemite 10.10.4 clients. (four users on the network)
All of our users are experiencing freezes and slowing down that manifest shortly after login or opening certain apps. How can I eliminate those freezes ?
Any insight?
Logs?
5:53412
Jul 14 11:27:46 Enara-server-local.local kdc[100]: TGS-REQ faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL from 10.0.1.5:53589 for host/enaras-imac-2.local@ENARA-SERVER-LOCAL.LOCAL [forwardable]
Jul 14 11:27:46 Enara-server-local.local kdc[100]: Server not found in database: host/enaras-imac-2.local@ENARA-SERVER-LOCAL.LOCAL: no such entry found in hdb
Jul 14 11:27:46 Enara-server-local.local kdc[100]: Failed building TGS-REP to 10.0.1.5:53589
Jul 14 11:27:46 Enara-server-local.local kdc[100]: TGS-REQ faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL from 10.0.1.5:49399 for ldap/Enara-server-local.local@ENARA-SERVER-LOCAL.LOCAL [canonicalize, forwardable]
Jul 14 11:27:46 Enara-server-local.local kdc[100]: TGS-REQ faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL from 10.0.1.5:62913 for ldap/Enara-server-local.local@ENARA-SERVER-LOCAL.LOCAL [forwardable]
Jul 14 11:27:47 Enara-server-local.local kdc[100]: AS-REQ faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL from 10.0.1.5:63785 for krbtgt/ENARA-SERVER-LOCAL.LOCAL@ENARA-SERVER-LOCAL.LOCAL
Jul 14 11:27:47 --- last message repeated 1 time ---
Jul 14 11:27:47 Enara-server-local.local kdc[100]: Client sent patypes: REQ-ENC-PA-REP
Jul 14 11:27:47 Enara-server-local.local kdc[100]: user has no SRP keys
Jul 14 11:27:47 Enara-server-local.local kdc[100]: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ
Jul 14 11:27:47 Enara-server-local.local kdc[100]: AS-REQ faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL from 10.0.1.5:56657 for krbtgt/ENARA-SERVER-LOCAL.LOCAL@ENARA-SERVER-LOCAL.LOCAL
Jul 14 11:27:47 --- last message repeated 1 time ---
Jul 14 11:27:47 Enara-server-local.local kdc[100]: Client sent patypes: ENC-TS, REQ-ENC-PA-REP
Jul 14 11:27:47 Enara-server-local.local kdc[100]: ENC-TS pre-authentication succeeded -- faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL
Jul 14 11:27:47 Enara-server-local.local kdc[100]: DSUpdateLoginStatus: Unable to synchronize login time for faresalsyoufi: 77009
Jul 14 11:27:47 Enara-server-local.local kdc[100]: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, des3-cbc-sha1, arcfour-hmac-md5, using aes256-cts-hmac-sha1-96/aes256-cts-hmac-sha1-96
Jul 14 11:27:47 Enara-server-local.local kdc[100]: Requested flags: renewable, forwardable
Jul 14 11:27:47 Enara-server-local.local AppleFileServer[927]: GetAttrListStandardVolumeInfo: getattrlist failed with errno: 2!
Jul 14 11:27:47 --- last message repeated 6 times ---
Jul 14 11:27:47 Enara-server-local.local kdc[100]: Got a canonicalize request for a LKDC realm from local-ipc
Jul 14 11:27:47 Enara-server-local.local kdc[100]: Asked for LKDC, but there is none
Jul 14 11:27:47 Enara-server-local.local sandboxd[828] ([100]): kdc(100) deny file-read-data /private/etc/krb5.conf
Jul 14 11:27:47 Enara-server-local.local kdc[100]: TGS-REQ faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL from 10.0.1.5:64373 for afpserver/Enara-server-local.local@ENARA-SERVER-LOCAL.LOCAL [canonicalize, forwardable]
Jul 14 11:27:47 Enara-server-local.local kdc[100]: TGS-REQ faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL from 10.0.1.5:58294 for afpserver/Enara-server-local.local@ENARA-SERVER-LOCAL.LOCAL [forwardable]
Jul 14 11:27:48 Enara-server-local.local kdc[100]: AS-REQ faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL from 10.0.1.5:61409 for krbtgt/ENARA-SERVER-LOCAL.LOCAL@ENARA-SERVER-LOCAL.LOCAL
Jul 14 11:27:48 --- last message repeated 1 time ---
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Client sent patypes: REQ-ENC-PA-REP
Jul 14 11:27:48 Enara-server-local.local kdc[100]: user has no SRP keys
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ
Jul 14 11:27:48 Enara-server-local.local kdc[100]: AS-REQ faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL from 10.0.1.5:50640 for krbtgt/ENARA-SERVER-LOCAL.LOCAL@ENARA-SERVER-LOCAL.LOCAL
Jul 14 11:27:48 --- last message repeated 1 time ---
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Client sent patypes: ENC-TS, REQ-ENC-PA-REP
Jul 14 11:27:48 Enara-server-local.local kdc[100]: ENC-TS pre-authentication succeeded -- faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL
Jul 14 11:27:48 Enara-server-local.local kdc[100]: DSUpdateLoginStatus: Unable to synchronize login time for faresalsyoufi: 77009
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, des3-cbc-sha1, arcfour-hmac-md5, using aes256-cts-hmac-sha1-96/aes256-cts-hmac-sha1-96
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Requested flags: forwardable
Jul 14 11:27:48 Enara-server-local.local kdc[100]: TGS-REQ faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL from 10.0.1.5:55855 for host/enaras-imac-2.local@ENARA-SERVER-LOCAL.LOCAL [canonicalize, forwardable]
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Searching referral for enaras-imac-2.local
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Server not found in database: krbtgt/LOCAL@ENARA-SERVER-LOCAL.LOCAL: no such entry found in hdb
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Failed building TGS-REP to 10.0.1.5:55855
Jul 14 11:27:48 Enara-server-local.local kdc[100]: TGS-REQ faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL from 10.0.1.5:61449 for host/enaras-imac-2.local@ENARA-SERVER-LOCAL.LOCAL [forwardable]
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Server not found in database: host/enaras-imac-2.local@ENARA-SERVER-LOCAL.LOCAL: no such entry found in hdb
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Failed building TGS-REP to 10.0.1.5:61449
Jul 14 11:27:48 Enara-server-local.local kdc[100]: TGS-REQ faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL from 10.0.1.5:59552 for ldap/enara.server.local@ENARA-SERVER-LOCAL.LOCAL [canonicalize, forwardable]
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Searching referral for enara.server.local
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Server not found in database: krbtgt/SERVER.LOCAL@ENARA-SERVER-LOCAL.LOCAL: no such entry found in hdb
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Failed building TGS-REP to 10.0.1.5:59552
Jul 14 11:27:48 Enara-server-local.local kdc[100]: TGS-REQ faresalsyoufi@ENARA-SERVER-LOCAL.LOCAL from 10.0.1.5:50909 for ldap/enara.server.local@ENARA-SERVER-LOCAL.LOCAL [forwardable]
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Server not found in database: ldap/enara.server.local@ENARA-SERVER-LOCAL.LOCAL: no such entry found in hdb
Jul 14 11:27:48 Enara-server-local.local kdc[100]: Failed building TGS-REP to 10.0.1.5:50909
Jul 14 11:27:54 Enara-server-local.local AppleFileServer[927]: _Assert: /SourceCache/afpserver/afpserver-660.30.1/afpserver/OS.cpp, 265
Jul 14 11:29:24 Enara-server-local.local AppleFileServer[927]: Logged out 0x7fd11180b600
Jul 14 11:29:25 Enara-server-local.local AppleFileServer[927]: Logged out 0x7fd112025600
Jul 14 11:29:26 Enara-server-local.local servermgr_afp[720]: idle exit
Jul 14 11:29:26 Enara-server-local.local servermgr_caching[730]: idle exit
Jul 14 11:29:26 Enara-server-local.local servermgr_smb[728]: idle exit
Jul 14 11:29:26 Enara-server-local.local servermgr_sharing[744]: idle exit
Jul 14 11:29:27 Enara-server-local.local servermgr_firewall[749]: idle exit
Jul 14 11:29:27 Enara-server-local.local servermgr_filebrowser[750]: idle exit
Jul 14 11:29:29 Enara-server-local.local servermgr_status[780]: idle exit
Jul 14 11:30:26 Enara-server-local.local servermgr_alerts[715]: idle exit
Jul 14 11:30:29 Enara-server-local.local servermgr_web[259]: idle exit
Jul 14 11:30:31 Enara-server-local.local locationd[516]: Location icon should now be in state 'Active'
Jul 14 11:30:32 Enara-server-local.local locationd[516]: NETWORK: requery, 0, 0, 0, 0, 12, items, fQueryRetries, 0, fLastRetryTimestamp, 0.0
Jul 14 11:30:34 Enara-server-local.local locationd[516]: Location icon should now be in state 'Inactive'
Jul 14 11:30:40 Enara-server-local.local Server[956]: Connected to the Auth Service
Jul 14 11:30:40 Enara-server-local.local Server[956]: Connected to the Notify Service
Jul 14 11:30:40 Enara-server-local.local servermgr_info[966]: Connected to the Notify Service
Jul 14 11:30:41 Enara-server-local.local servermgr_network[968]: Connected to the Notify Service
Jul 14 11:30:43 Enara-server-local com.apple.xpc.launchd[1] (com.apple.serveralertproxy): Service only ran for 8 seconds. Pushing respawn out by 2 seconds.
Jul 14 11:30:43 Enara-server-local.local servermgr_netboot[976]: Connected to the Notify Service
Jul 14 11:30:43 Enara-server-local.local servermgr_web[977]: Connected to the Notify Service
Jul 14 11:30:43 Enara-server-local.local servermgr_san[974]: Connected to the Notify Service
Jul 14 11:30:43 Enara-server-local.local servermgr_vpn[973]: Connected to the Notify Service
Jul 14 11:30:43 Enara-server-local.local servermgr_devicemgr[979]: Connected to the Notify Service
Jul 14 11:30:43 Enara-server-local.local servermgr_caching[972]: Connected to the Notify Service
Jul 14 11:30:43 Enara-server-local.local servermgr_smb[984]: Connected to the Notify Service
Jul 14 11:30:43 Enara-server-local.local servermgr_xcode[985]: Connected to the Notify Service
Jul 14 11:30:43 Enara-server-local.local servermgr_dns[987]: Connected to the Notify Service
Jul 14 11:30:43 Enara-server-local.local servermgr_wiki[986]: Connected to the Notify Service
Jul 14 11:30:43 Enara-server-local.local servermgr_afp[982]: Connected to the Notify Service
Jul 14 11:30:43 Enara-server-local.local servermgr_dirserv[988]: Connected to the Notify Service
Jul 14 11:30:43 Enara-server-local.local nsurlstoraged[272]: realpath() returned NULL for /var/root/Library/Caches/com.apple.servermgrd.plugin
Many Open Directory problems can be resolved by taking the following steps. Test after each one, and back up all data before making any changes.
1. The OD master must have a static IP address on the local network, not a dynamic address. It must not be connected to the same network with more than one interface; e.g., Ethernet and Wi-Fi.
2. You must have a working DNS service, and the server's hostname must match its fully-qualified domain name. To confirm, select the server by name in the sidebar of the Server application window, then select the Overview tab. Click the Edit button on the Host Name line. On the Accessing your Server sheet, Domain Name should be selected. Change the Host Name, if necessary. The server must have at least a three-level name (e.g. "server.yourdomain.com"), and the name must not be in the ".local" top-level domain, which is reserved for Bonjour.
3. The primary DNS server used by the server must be itself, unless you're using another server for internal DNS. The only DNS server set on the clients should be the internal one, which they should get from DHCP if applicable.
4. If you have accounts with network home directories, make sure the URL's are correct in the user settings. A return status of 45 from the authorizationhost daemon in the log may mean that the URL for mounting the home directory was not updated after a change in the hostname. If the server and clients are all running OS X 10.10 or later, directories should be shared with SMB rather than AFP.
5. Follow these instructions to rebuild the Kerberos configuration on the server.
6. If you use authenticated binding, check the validity of the master's certificate. The common name must match the hostname and domain name. Deselecting and then reselecting the certificate in Server.app has been reported to have an effect in some cases. Otherwise delete all certificates and create new ones.
7. Unbind and then rebind the clients in the Users & Groups preference pane. Use the fully-qualified domain name of the master.
8. Reboot the master and the clients.
9. Don't log in to the server with a network user's account.
10. Disable any internal firewalls in use, including third-party "security" software.
11. If you've created any replica servers, delete them.
12. If OD has only recently stopped working when it was working before, you may be able to restore it from the automatic backup in /var/db/backups, or from a Time Machine snapshot of that backup.
13. If there are slapd errors in the log, try the following steps.
Turn off Open Directory in the Server app.
Enter in a shell:
cd /var/db/openldap sudo -s db_recover -c -h authdata db_recover -c -h openldap-data
Turn Open Directory back on.
14. Reset the password policy database:
sudo pwpolicy -clearaccountpolicies
15. As a last resort, export all OD users. In the Open Directory pane of Server, delete the OD server. In some cases, you may have to use the shell to delete the server. Then recreate it and import the users. Ensure that the UID's are in the 1001+ range.
Mac OS X Yosmite Server freezes (10.10.4)
