AFP548 Changing the world one server at a time.

10.6 Server Authentication with Lesser Clients (10.5 & 10.4)

Home › Forums › OS X Server and Client Discussion › Open Directory › 10.6 Server Authentication with Lesser Clients (10.5 & 10.4)

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • #380677
    jwalkn1
    Participant

    I am getting a test environment setup for a future transition
    from Netware to Workgroup manager. Our 10.6 server is the OD Master
    and also configured to give access to our AD structure for teacher and
    staff home mappings/logins. Students and computer objects will be created and
    managed by workgroup manager and home folders will be mapped to the 10.6
    server.

    I am hitting roadblocks when managing 10.5 and 10.4 clients.
    Everything on a 10.6 client works fine. I have setup three test users with
    home directories mapping back to our 10.6 server. I setup groups, presets,
    and share points and everything is working fine on 10.6. Everything I set up works
    beautifully in 10.6. However on previous mac OS’s I am having these two main
    problems.

    1. 10.5 clients receive all computer policies. They show Network Accounts
    available at the login window and act like they are logging in. The
    computer moves away from the login window, goes to a blue screen like its
    logging in then snaps right back to the login window. The strange thing is
    that the AFP logs under Server Admin show the user account is is connected
    and the status is “disabled/asleep” even though the computer has never
    logged in. However, any AD accounts can log in fine.

    2. 10.4 clients will not receive computer policies after binding to the
    server. Computers show no Network Accounts available. Local user accounts
    can login and the test accounts in workgroup manager that I have created
    can connect to server and get their home folders. They will not login
    though from the login window. I have googled to no avail.

    3. I haven’t gotten a chance to work with a 10.3 machine yet, but for some
    reason I have an idea that they may not want to be cooperative either.

    Thanks for any light you can shed on these problems.

    #380678
    jwalkn1
    Participant

    The 10.6 server is hosting home directories, except for the case of established AD users that already have mappings. The only shares available now to each test user is a common share and a home directory. Automount is turned on for each share and they are being hosted AFP.

    Interestingly, I just got the 10.4 client to connect to the LDAP server by not authenticating. If I leave the bind process with no credentials and just click OK, then the computer shows Network Accounts available. When you try to login though it kicks an error out:

    “You are unable to log in to the user account rockreststudent at this time. Logging in to the account failed because an error occurred. The home folder for the user account is located on an AFP or SMB server. Contact your system administrator for help.”

    Here are the messages when trying to login at >console

    10.5 client: No home directory /Network/Servers/…/rockreststudent!
    Logging in with home = “/”
    9200MODTEST105:/ rockreststudent$ Apr 21 08:27:08 9200MODTEST105
    kextd[10]: /Volumes/Snow Leopard: unrecognized bootcaches data; skipping

    10.4 client: automount [243] Attempt to mount /automount/servers/….rockreststudent returned 80 (authentication error)

Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.