Error when changing passwords in Server admin

[gsantos]

Hello,

for no apparent reason I now get an error every time I try to change a password.

Is a dialog tht reads:

Got unexpected error

Error of type -14090 on line 1737 of
UserAdvancedPluginView.mm

Any idea?

[Shadomaker]

Hey,
I’m getting this same error. I’m authenticated as the Directory Administrator and have full domain privs to all users/groups/younameit. I have another admin account (2 actually), and they’re both doing it.

[Anonymous]

I am getting the same error message. I have two users that are both pws admins (i checked in command line) and get the error in both accounts. I get the error when trying to create or modify users with an open directory password type. I don’t get the error when using crypt passwords. This is a problem though because we want to be using the open directory passwords.

[bebop]

Same here.
It’s not particularly helpful to be told what kind of error it is. I can see that from the application response. What we want to know is, if we are authenticated, then why is the error being thrown.

School starts Tuesday, I’m not interested in resetting passwords on 680 accounts individually. I would like to set the accounts to prompt for a password change. The authentication error is occuring every time. Sometimes I can acknowledge the dialogue and try again. Sometimes a second error dialolgue comes up which won’t be dismissed and requires a force quit of WGM.

As an aside, I know that this is complicated stuff. I also know I have a pretty generic configuration which has been set up straight from apple guidelines and from guides that I downloaded from this site. It seems like there is a certain amount of dancing around the fact that some of the settings in WGM just don’t work as advertised.

There are a lot of people who come here for advice that are not pro server admins. I’m one of them, but I’ve worked hard to educate myself, and I’m angry about the amount of time I’ve had to spend solving problems that arise around things that should be pretty straight forward. Select the accounts on the left, choose the settings on the right… authentication error. WTF? Don’t mean to offend, but I’ve let this build up for a while.

And thanks to all those who take their time to help people like me.
Best.

[Anonymous]

Same error here.
I’m going back to Netinfo–at least it worked. 😢

[cyberzen11]

Seeing same problem on each of 3 servers upgraded from Panther (10.3.9) to Tiger (10.4.7).

Problem does not exist when I log in to the Workgroup Manager (and LDAP) as an admin with password type “Open Directory”. Unfortunately, one of my servers does not have any OD admin accounts so I am unable to change or create any new OD accounts. Therefore, I can’t offer my PC users access to this particular server since Windows access requires users with OD password type. Infinite loop.

Apple had no solution and suggested, of course, to rebuild OD by demoting and promoting the server while exporting/importing the users and groups. Still looking for a solution that does not require resetting of all of my users’ passwords.

[lyleHM]

I was able to work around the error by switching the user to a crypt password and then back again to an OD password.
Hope that works for others – good luck!

Lyle Millander 😯

[bcvanbelle]

Hi all,

I have been combatting this issue for some time now. For a while I could change the user from OD to Crypt and then back to OD to fix the problem. Mind you, we had users changed from OD to Crypt at random times as well!
Now I am unable to change users at all. I always get the same error message. Once I was able to get the OD record fixed for a user by switching back and forth between OD and Crypt password, but today no longer.

Then I tried the following: loggin in to Workgroup Manager as root.

SUCCESS!!

I don’t know what the ramifications are of logging in as root for the rest of the system, but at least I can add and change users.

Note to Apple: you are fast becoming another Micro$oft. We are running a school with limited budget. I cannot upgrade to the newest OS every 2 years, so keep providing support for the older OS’s!

[lyleHM]

LyleHM wrote:

I was able to work around the error by switching the user to a crypt password and then back again to an OD password.
Hope that works for others – good luck!

Lyle Millander 😯

——————–
Ignore my OD>crypt>OD suggestion. Although it may work around the problem, it doesn’t really fix it.

From the terminal on your Open Directory server (either locally, or via ssh), enter the following:

sudo slapconfig -settopasswordserver userShortName dirAdmin (obviously substituting the short names of the user needing the fix and a directory administrator)

First, you’ll be prompted to enter the sudo password, then the new password for the user, and finally the password for the directory administrator. If you do this in 10.5.x, you’ll also have the option to enter the user and diradmin passwords in line with the command. Apparently, that capability was removed for security reasons in 10.6.

From the slapconfig man page on 10.6:

-settopasswordserver user directory-administrator
Converts a user account to have an Open Directory
authentication type. A new password server slot and
kerberos principal are created. If the user was
previously an Open Directory user, the old slot and
principal are deleted and replaced.

Cheers,
Lyle

[Author]

Posts