gakushaburu
Level 1 (10 points)
Desktops

Q: Network users can't login

I'm having trouble with network login and would be grateful if anyone could advise what to check next.

 

Attempting to log in from an iMac running Snow Leopard, the login dialog just jiggles every time I try to login.

 

The client log shows the following after each attempt

SecurityAgent[548]    Showing Login Window

kernel    Warning: audit space low (< 5% free)on audit log file-system

SecurityAgent[548]    Could not get the user record for 'test' from Directory Services

SecurityAgent[548]    User info context values set for test

SecurityAgent[548]    unknown-user (test) login attempt PASSED for auditing

kernel    Warning: audit space low (< 5% free)on audit log file-system

 

On the server (running Mavericks and Server 3.2.2) there are no messages in the log at the time of the login attempts.

 

DNS appears to be running without problems. On the server the checking

host 192.168.3.100

returns the correct hostname and

host [hostname]

returns the same ip address.

 

Using nslookup from the iMac gives the same results

 

The iMac seems to be correctly bound to the server. Login options shows the correct server name with a green lamp beside it and the user login list has an "Other" entry.

 

The network is wired.

Posted on Sep 9, 2016 5:54 PM

Close
gakushaburu

Q: Network users can't login

  • All replies
  • Helpful answers

  • by cdhw,

    cdhw cdhw Sep 10, 2016 9:56 AM in response to gakushaburu
    Level 4 (2,628 points)
    Servers Enterprise
    Sep 10, 2016 9:56 AM in response to gakushaburu

    Check that the user 'test' exists and is the correct 'network' type on the server. Check that the client is using the server for authentication. Your client disk is full, or nearly so, fix this before proceeding. OS X, like any unix, really does not like not having space available on the file system and this may be the cause of the problem.

     

    C.

  • by ScottSchaller,

    ScottSchaller ScottSchaller Sep 11, 2016 10:34 AM in response to gakushaburu
    Level 1 (8 points)
    Servers Enterprise
    Sep 11, 2016 10:34 AM in response to gakushaburu

    I am having the same problem in my classroom lab. I have 40 iMacs running Yosemite and I just migrated to OS X El Cap Server. Nothing worked properly so I wiped the entire server and started fresh. Everything seems to have worked except when it came time to test a student login. The password giggles every time. I can login as the local admin and connect to the server through the finder using the student login, which tells me file sharing is working. I am a graphics teacher, not an IT expert. OS X Server is advertised as being a simple server good for home use to corporate use. Not sure that is really the truth at this point. Any suggestions on how to fix this would be greatly appreciated as I have students who need to login next week.

  • by ScottSchaller,

    ScottSchaller ScottSchaller Sep 11, 2016 10:36 AM in response to cdhw
    Level 1 (8 points)
    Servers Enterprise
    Sep 11, 2016 10:36 AM in response to cdhw

    How do you check the users 'test' exists and how to check the 'network' type on the server? Where do I find out if the client is using the server for authentication? None of my client computers is anywhere near full.

  • by cdhw,

    cdhw cdhw Sep 11, 2016 10:57 AM in response to ScottSchaller
    Level 4 (2,628 points)
    Servers Enterprise
    Sep 11, 2016 10:57 AM in response to ScottSchaller

    Thread-jacking is considered impolite in these forums. It is impossible to deal with two people's problems simultaneously - even if the symptoms are superficially similar they can arise from multiple causes. You're not even running the same OS X version as the original poster. Please start a new question with your issue.

     

    Thanks

     

    C.

  • by cdhw,

    cdhw cdhw Sep 11, 2016 11:03 AM in response to ScottSchaller
    Level 4 (2,628 points)
    Servers Enterprise
    Sep 11, 2016 11:03 AM in response to ScottSchaller

    Use the Users panel and search for 'test'. In this example:

     

    Untitled 2.png

     

    The user 'cdhw' exists and 'Local Network Directory' is the correct user type for the OPs set up.

     

    C.

  • by gakushaburu,

    gakushaburu gakushaburu Sep 11, 2016 6:04 PM in response to cdhw
    Level 1 (10 points)
    Desktops
    Sep 11, 2016 6:04 PM in response to cdhw

    Thank you cdhw.

     

    The user "test" does exist and is of the type "local network user". I should have stated that in my first post. The password is also correct.

     

    I have freed up a little space on the disk, at least enough so the system doesn't complain about it.

     

    The client appears to be using the server for authentication. I used Wireshark to check that LDAP packets are arriving at the server every time I attempt to log in at the client but no more than that.

     

    There is still nothing showing in the messages on the server. The client messages now look like this:

     

    SecurityAgent[5907]Showing Login Window
    SecurityAgent[5907]Could not get the user record for 'test' from Directory Services
    SecurityAgent[5907]User info context values set for test
    SecurityAgent[5907]unknown-user (test) login attempt PASSED for auditing
    SecurityAgent[5907]Could not get the user record for 'test' from Directory Services

  • by cdhw,

    cdhw cdhw Sep 13, 2016 9:17 AM in response to gakushaburu
    Level 4 (2,628 points)
    Servers Enterprise
    Sep 13, 2016 9:17 AM in response to gakushaburu

    On the client, confirm that on the

     

         System Preferences > Users & Groups > Login Options

     

    panel the 'Network Account Server:' name is correct and is prefixed with a green circle and 'Allow network users to login at login window' is checked.

     

    C.

  • by gakushaburu,

    gakushaburu gakushaburu Sep 14, 2016 5:23 AM in response to cdhw
    Level 1 (10 points)
    Desktops
    Sep 14, 2016 5:23 AM in response to cdhw

    Thank you cdhw.

     

    This has at least given me something else to search.

     

    The server name is correct and green circle present as I mentioned in my original post ... but the 'Allow network users to login at login window' option is totally missing from the dialog. I had missed that altogether.

  • by gakushaburu,

    gakushaburu gakushaburu Sep 14, 2016 6:07 AM in response to gakushaburu
    Level 1 (10 points)
    Desktops
    Sep 14, 2016 6:07 AM in response to gakushaburu

    I got the checkbox back by restarting DNS and Open Directory and clearing the cache on the client. It was already checked. I still can't log in with the network user's credentials.