AFP users can’t log in after Leopard upgrade/clean install

[tkw4u]

I’ve been fighting this issue now for a couple of weeks with no resolution so far. I’m hoping someone has some ideas for me here.

I have a fully patched 10.4.11 PPC server running as an OD Master that I want to upgrade to Leopard. I’ve done it two different ways and I’m getting the same results each time. After the upgrade none of my AFP users can authenticate to share points. They CAN authenticate at the login window but the server gets an “incorrect password” error for any share point mounts. The weird part is my Windows users don’t have this problem. If I reset the AFP users password then they can authenticate and mount their share points. But, with over 700 users I don’t want to have to reset everyone’s password. I’m not using Kerberos for any of the authentications.

The first time I upgraded the server I used the following method:

I archived all the OD information using the “Archive” button in Server Admin. I exported all the settings files for my various services (AFP, SMB, etc.) and backed up all my web and log files.
Then, I wiped the drive clean, put a fresh install of Leopard server on as a standalone server and upgraded it to 10.5.4. I promoted it to an OD Master and used the archive tool to import my users. Then I imported all my file server settings files. Everything went in without a hitch and seemed to be working except for the authentication issue.

After a few hours of that I rolled the server back to my Tiger install from a backup disc and tried again. This time I just let the server get upgraded directly from Tiger to Leopard and then updated to 10.5.4. Same problem. Users could authenticate at the login window but no AFP users could access share points, only Windows users. In fact, Mac users couldn’t even access their share points via SMB either. I let this run for a few days but I was getting crashes of the SMB-NT plugin and every time that happened I would have to reset the Windows users passwords as well. The crashes seemed to become more frequent after I added in my other server as an OD replica. I’ve since rolled back to 10.4.11 again and it’s running rock solidly.

Does anyone have any ideas as to why my AFP users are all getting scrambled after either of these upgrades? I’m assuming the SMB-NT plugin crashes are a by-product of the upgrade since it didn’t seem to happen with the clean install. I’d really like to get these servers to to Leopard but not with all of this instability. I’ve got all the log files from the most recent upgrade attempt so please let me know if any of them would be of use.

Thanks!

[Author]

Posts