AFP, Authenticating and Guest Access

[ingenious7]

Hi,

I am having an issue with Leopard Server and logging in from a client. We have recently migrated to a new Leopard Server from our old Leopard Server.

Our client Macs log in fine to the Open Directory only when AFP Guest Access is enabled. I want to turn the Guest access off, but when I do so I get the error from clients that says they cannot log in at this time, which is the error related to the clients not finding their AFP Shared home directory.

Has anyone experienced this and is there a way to get it to work correctly without Guest access. Our old Leopard server didn’t care whether Guest access was on or off.

Thanks!

[ingenious7]

Hi MacTroll

Yes I can manually authenticate and access network shares when Guest Access is switched off, but I still get the message saying that “this user account can not log in at this time”.

[ingenious7]

More info – The server is a fairly new install and the person that did the work didn’t apply OS updates so I have updated to 10.5.2 Server, and AFP seems to be runnings much smoother, but I turn off Guest Access and some clients can log in, but the majority cannot. This surely couldn’t be client related could it?

[Eden.Nelson]

This problem seems to related to auto mounts.
Verify your OD auto mounts are configured correctly. Use dscl, and/or WGM(using the inspector) to do this.
You may want to re-establish the auto mounts.

Also I wonder why you want to turn off guest access. I find guest access to be extremely useful.
OS X workstations want to mount auto mounts with guest access. Workstations will sometimes fill the logs with denied auto mount logins.

Let me know if you need me to clarify anything.

[ingenious7]

All clients are authenticating through the ldap tree including notebooks so I would prefer not to use Guest access. It also seems to speed thing up with it turned off.

What would be the correct way to refresh the automounts? I am not sure how to do this.

[ingenious7]

Thanks for your assistance. I re-established the automounts on my home directory shares by switching it off, saving, and switching it back on again (All in Server Admin > File Sharing).

Performance seems to be improved and when we get our OD replica set up an distribute the load of home directories things should be cruising.

[Author]

Posts