AFP548 Changing the world one server at a time.

Need help connecting ppc (G4) to MacPro (Intel) Open directory

Home › Forums › OS X Server and Client Discussion › Open Directory › Need help connecting ppc (G4) to MacPro (Intel) Open directory

Viewing 5 posts - 1 through 5 (of 5 total)
  • Author
    Posts
  • October 29, 2007 at 7:44 pm #370308
    jem0714
    Participant

    I have 3 Macs (each running 10.4.10) on the same network:

    + a MacPro (Intel) I am using for a server running Open directory.

    + an iMac (Intel) which I have bound to the directory and operates just fine

    + a PowerBook (PPC G4) which I can bind to the directory, but which does not authenticate network-only users: sshd and su both fail.

    I am using the simplest possible authentication–i.e. no Kerberos, etc..

    I can use dscl on the PowerBook to navigate the directory and read all
    of the entries and DirectoryService.debug.log shows activity when I do this

    However, when I use lookupd -d (in debug mode) “userWithName: network-only-user”
    I get the following output:


    $ lookupd -d
    lookupd version 369.5 (root 2006.02.10 04:16:23 UTC)
    Enter command name, “help”, or “quit” to exit
    > debug: on

    > userWithName: network-only-user
    Oct 29 11:58:11 lookupd-debug: LUServer 0x00303220 added agent 0x00302050 (CacheAgent)
    Oct 29 11:58:11 lookupd-debug: Search Cache: user name network-only-user time: 0 status: Failed
    Oct 29 11:58:11 lookupd-debug: Allocated Dynamic Agent 0x003036d0
    Oct 29 11:58:11 lookupd-debug: Allocated NI 0x00303c80
    Oct 29 11:58:11 lookupd-debug: LUServer 0x00303220 added agent 0x003036d0 (NIAgent)
    Oct 29 11:58:11 lookupd-debug: Search NI: user name network-only-user time: 3 status: Failed
    Oct 29 11:58:11 lookupd-debug: Allocated Dynamic Agent 0x00304110
    Oct 29 11:58:11 lookupd-debug: Allocated DS 0x003040a0

    Oct 29 11:58:11 lookupd-debug: LUServer 0x00303220 added agent 0x00304110 (DSAgent)
    Oct 29 11:58:11 lookupd-debug: — DS: 381: mapNetInfoRecToDSType: *** category: 0
    Oct 29 11:58:11 lookupd-debug: — DS: 381: mapNetInfoRecToDSType: *** category: 0
    Oct 29 11:58:11 lookupd-debug: Search DS: user name network-only-user time: 8 status: Failed
    Oct 29 11:58:11 lookupd-debug: Search Failed: user name network-only-user time: 35 status: OK
    Oct 29 11:58:11 lookupd-debug: Call: user name network-only-user time: 35 status: Failed
    nil

    >

    I see no activity in DirectoryService.debug.log (I do see log activity on the iMac for the same operation).

    I have tried installing the third-party utility ‘pam_ldap’ with no change in this behavior. Also, I have noticed that lookupd on PPC has a slightly older version than Intel. (It seems to me that this is bad form considering both platforms are running 10.4.10–why the difference?)

    Thanks in advance for any suggestions you might have.

    Cheers,

    Jeff Marchese
    Dept. of Applied Science
    UC Davis

    October 29, 2007 at 8:11 pm #370311
    jem0714
    Participant

    Thanks for your quick response!

    On the PPC box when I type id (as root) I see the following:

    root# id
    uid=0(root) gid=0(wheel) groups=0(wheel), 1(daemon), 2(kmem), 3(sys), 4(tty), 29(certusers), 5(operator), 80(admin), 20(staff)

    I hope this helps.

    Jem

    October 29, 2007 at 9:21 pm #370314
    jem0714
    Participant

    id returns the following:

    $ id network-only-user
    id: network-only-user: no such user
    $

    Thanks,

    Jem

    October 30, 2007 at 8:13 pm #370329
    jem0714
    Participant

    Great! That works. Thanks for your expert help.

    Now I have another question:

    *** How do I set the authentication path using the command line interface (CLI)?

    I have 11 more G5s in a closet for which I don’t have access to the console.

    I have used dsconfigldap to attach to the OD and I have the same
    problem as above, ssh and su are not using the OD for authentication (but I CAN connect to the OD using dscl).

    Thanks again. Please let me know if I should start another “Topic” for this new question.

    Cheers,

    Jeff Marchese

    October 31, 2007 at 4:34 am #370338
    jem0714
    Participant

    Thanks for your invaluable help. This was exactly what I needed. I was able to get it working with the command as you suggested, plus one additional command–which I was able to figure out once I knew where to look. The sequence was:

    sudo dscl -q localhost -merge /Search CSPSearchPath /LDAPv3/servername

    *and*

    sudo dscl -q localhost -change /Search SearchPolicy NSPSearchPath CSPSearchPath

    Thanks again. I never would have got this without your help.

    Cheers,

    Jeff Marchese (a.k.a. Jem)

  • Author
    Posts
Viewing 5 posts - 1 through 5 (of 5 total)
  • You must be logged in to reply to this topic.