dsconfigldap -f returns “Failed Error Code -14177”

[srussel2]

Hello everyone,

I’m trying to bind to an OD master using dsconfigldap and it’s not working correctly. It doesn’t work in the Directory Access GUI, either, when I try to bind. I can connect just fine without binding but I really want trusted binding.

$ sudo dsconfigldap -f -a ALCO-myserver.somewhere.nd.edu -c srussel2-dev-ppc -u diradmin -v

Steps 1, 2, and 3 all succeed. Step 4 “Attempting to bind computer as srussel2-dev-ppc” returns “Status: Failed Error Code -14177” and I can’t find anything about that via Google nor in the Command Line Administration Guide nor in the Open Directory Admin Guide.

$ sudo dsconfigldap -a ALCO-myserver.somewhere.nd.edu -c srussel2-dev-ppc -u diradmin -v

–> this DOES work, but doesn’t give me trusted binding (-f)

Any help?

Thanks!
Scott

[srussel2]

The server doesn’t report anything in console.log, system.log, DirectoryService.eror.log, or DirectoryService.server.log when I attempt to do a trusted bind.

From the client system.log:

Jun 21 09:58:21 srussel2-dev-iMac-PPC sudo: alcoadmin : TTY=ttyp1 ; PWD=/private/var/ALCOadmin ; USER=root ; COMMAND=/usr/sbin/dsconfigldap -v -i -f -a alco-myserver.somewhere.nd.edu -u diradmin
Jun 21 09:58:32 srussel2-dev-iMac-PPC crashdump[7355]: dsconfigldap crashed
Jun 21 09:58:32 srussel2-dev-iMac-PPC crashdump[7355]: crash report written to: /Library/Logs/CrashReporter/dsconfigldap.crash.log

So, from the client dsconfigldap.crash.log:

**********

Host Name: srussel2-dev-iMac-PPC
Date/Time: 2007-06-21 09:58:31.725 -0400
OS Version: 10.4.9 (Build 8P135)
Report Version: 4

Command: dsconfigldap
Path: /usr/sbin/dsconfigldap
Parent: bash [7337]

Version: ??? (???)

PID: 7354
Thread: 0

Exception: EXC_BAD_ACCESS (0x0001)
Codes: KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0 Crashed:
0 libSystem.B.dylib 0x900032c8 strlen + 8
1 com.apple.CoreFoundation 0x907bf3bc CFStringCreateWithCString + 36
2 dsconfigldap 0x00003bb0 0x1000 + 11184
3 dsconfigldap 0x00003670 0x1000 + 9840
4 dsconfigldap 0x00002884 0x1000 + 6276
5 dsconfigldap 0x00002728 0x1000 + 5928

Thread 0 crashed with PPC Thread State 64:
srr0: 0x00000000900032c8 srr1: 0x100000000000d030 vrsave: 0x0000000000000000
cr: 0x24044242 xer: 0x0000000000000000 lr: 0x00000000907bf3bc ctr: 0x00000000900032c0
r0: 0x00000000907bf3bc r1: 0x00000000bffff890 r2: 0x000000009088f05c r3: 0x0000000000000000
r4: 0x0000000000000000 r5: 0x0000000008000100 r6: 0xffffffffffffffff r7: 0xffffffffffffffff
r8: 0x000000000032b28c r9: 0x0000000000000000 r10: 0x0000000000000001 r11: 0x00000000a07bd31c
r12: 0x00000000900032c0 r13: 0x0000000000000000 r14: 0x0000000000000000 r15: 0x0000000000000000
r16: 0x0000000000000000 r17: 0x0000000000000000 r18: 0x0000000000000000 r19: 0x0000000000000000
r20: 0x0000000000302e80 r21: 0x0000000000302e60 r22: 0x0000000000000000 r23: 0x0000000000000001
r24: 0x0000000000010000 r25: 0x0000000000000001 r26: 0x000000000000001e r27: 0x0000000008000100
r28: 0x0000000000000000 r29: 0x0000000000000000 r30: 0x0000000000000000 r31: 0x0000000000303fe0

Binary Images Description:
0x1000 – 0xffff dsconfigldap /usr/sbin/dsconfigldap
0x8fe00000 – 0x8fe52fff dyld 46.12 /usr/lib/dyld
0x90000000 – 0x901bdfff libSystem.B.dylib /usr/lib/libSystem.B.dylib
0x90215000 – 0x9021afff libmathCommon.A.dylib /usr/lib/system/libmathCommon.A.dylib
0x907bc000 – 0x90895fff com.apple.CoreFoundation 6.4.7 (368.28) /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x908de000 – 0x908defff com.apple.CoreServices 10.4 (???) /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x908e0000 – 0x909e2fff libicucore.A.dylib /usr/lib/libicucore.A.dylib
0x90a3c000 – 0x90ac0fff libobjc.A.dylib /usr/lib/libobjc.A.dylib
0x90aea000 – 0x90b5afff com.apple.framework.IOKit 1.4.1 (???) /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x90b70000 – 0x90b82fff libauto.dylib /usr/lib/libauto.dylib
0x90b89000 – 0x90e60fff com.apple.CoreServices.CarbonCore 681.12 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x90ec6000 – 0x90f46fff com.apple.CoreServices.OSServices 4.1 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x90f90000 – 0x90fd1fff com.apple.CFNetwork 129.20 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x90fe6000 – 0x90ffefff com.apple.WebServices 1.1.2 (1.1.0) /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/WebServicesCore
0x9100e000 – 0x9108ffff com.apple.SearchKit 1.0.5 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x910d5000 – 0x910fffff com.apple.Metadata 10.4.4 (121.36) /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x91110000 – 0x9111efff libz.1.dylib /usr/lib/libz.1.dylib
0x91121000 – 0x912dcfff com.apple.security 4.6 (29770) /System/Library/Frameworks/Security.framework/Versions/A/Security
0x913db000 – 0x913e4fff com.apple.DiskArbitration 2.1 /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x913eb000 – 0x913f3fff libbsm.dylib /usr/lib/libbsm.dylib
0x913f7000 – 0x9141ffff com.apple.SystemConfiguration 1.8.3 /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x91432000 – 0x9143dfff libgcc_s.1.dylib /usr/lib/libgcc_s.1.dylib
0x91d4d000 – 0x91e2bfff libxml2.2.dylib /usr/lib/libxml2.2.dylib
0x92a03000 – 0x92af1fff libiconv.2.dylib /usr/lib/libiconv.2.dylib
0x92bbd000 – 0x92de8fff com.apple.Foundation 6.4.8 (567.29) /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x93702000 – 0x93722fff com.apple.DirectoryService.Framework 3.1 /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService

[srussel2]

Hello again,

Here are a couple of additional notes:

1) A colleague suggested verifying that reverse DNS works — it does.

$ host ALCO-MyServer.somewhere.nd.edu
--> returns 129.74.x.x

$ host 129.74.x.x
--> returns alco-myserver.somewhere.nd.edu

Does case sensitivity matter?

2) Another post I found suggests that Kerberos needs to be correctly configured. I have done nothing with the Kerberos config. Do I need to?

Thanks for the suggestions so far.

[srussel2]

I think I have this fixed (for the moment, he added hesitantly). It appears that case sensitivity does play a role in this. I used changeip on the server to make the hostname all lowercase, removed all the LDAP entries from the client (in the search and authentication paths), re-added them with the new lowercase name. I was then able to do a trusted bind.

Thanks for all the help. I’m still new to Open Directory and I’m sure I’ll make more mistakes to give everyone some interesting reading.

[Author]

Posts