Home › Forums › OS X Server and Client Discussion › DNS › OD login failed – Suspecting DNS issue
- This topic has 1 reply, 1 voice, and was last updated 21 years ago by
MacBeAdmin.
-
AuthorPosts
-
October 18, 2005 at 10:09 pm #363693
MacBeAdmin
ParticipantHello Everyone,
First off, my question might sound silly but, forgive me, it’s my first post and I am a user of AFP548 for about 1 hour…
Right, here is the deal.
I’m trying to move my network from AFP sharing to full Open directory (so homedirs for users and automounted AFP share for Company data).I have read the articles regarding DNS Best Practices (just to make sure), Tiger Server quickstart and OD Master & HomeDirs.
I’m getting the following message when trying to connect my first client :
You are unable to log in to the user account "username" at this time. Logging in to the account failed because an error occurred. Contact your sysadmin for help.The reason why i’m suspecting DNS to be the issue is that the client machine from which i’m trying to connect from does not have an A record nor PTR. The reason for this is that all the network users are using laptops and get IP’s from a DHCP server and the IP’s are changing frequently. In that sense recording the IP of the systems in DNS would mean almost daily DNS records update (which is out of the question).
Any clue ? If not where can I start for debugging this error ?
My setup :
PM G5 with OS X 10.4.2 Server
Activated services : (NTP, SSH) DNS, OpenDirectory and AFP
Home dirs are on a different volume than OS X, ACL is activated and cfg on that very same volume.
My hostname resolves to the correct FQDN, clients and server are getting successfull replies to both ways host checks. Directory Access is on the same page and allowed me to bind without errors.
Finally OD overview and logs shows that everything (except Netinfo) is running and started.October 23, 2005 at 10:08 pm #363760MacBeAdmin
ParticipantHi Everybody,
I’ve seen my post generated quite some hits but not really the replies.
Let’s fix this, I’ve found the issue and solved it.This is what I went trough :
– Deleted all my users and groups
– Deleted all my share points
– Demote from OD Master to Standalone
– Used the changeip trick for the servername and replaced -AUTOMATIC- by my FQDN in the /etc/hostconfig
– Promote back to OD Master
– Set back my users and groups
– Set back my share points
And here, the shock – Still the same error ?? 😕As no reply came, I started to go trough the apple support website and watch all their documents (and wow, there are a lot of docs to read).
I found something related to the home dirs that basically says that the full path to my Network home dirs share point can not exceed 89 characters but it also depends on your clients (my case 10.4 – I can not exceed 73 characters.
So I had to rename my Data volume and create a very short home dir name.
Here is what is needed :
10.4 clients : no more than 73 characters
Path is : /private/Network/Servers/servername.domain.ext/Volumes/volumename/homedirsharepoint/
And the / counts for characters. Which leaves us with :
Non usable characters : 36
/private/Network/Servers/ – 25 characters you can’t use.
/Volumes/ – 9 characters you can’t use.
/ *2 : 1 at the end of volume name & 1 at the end of sharepoint name
So your FQDN, volume name and home dir share point must not exceed 37 characters all together.
Completely crazy…The URL to the apple doc : http://docs.info.apple.com/article.html?artnum=107695
By the way, to the AFP548 gurus out there, if I want to change the FQDN while I have an up and running server, which steps should I follow outside changing the DNS part of the problem ?
I’m seriously thinking on shortening my hostname but I need advices first 😀So now I will continue with my setup and hope this reply will be helpfull for someone in the future.
Long life to AFP548, this website rocks and really holds tons of good stuff !
Arnaud.
-
AuthorPosts
- You must be logged in to reply to this topic.