Kerberos Auth method not being added to new users

[playdrums]

Using Tiger Server 10.4.2, OD –

Very recently (last two days), every time I create a new user record either via WGM or by using dsimport, the record does not have a kerberos value for the AuthenticationAuthority attribute. There should be two values for this attribute – one respresenting PasswordServer and the other for kerberos.

Has anyone seen this or know what may have happened that this value is now suddenly not being inserted into new user records.

When I try to add a record via WGM I get the following error:

“Error of type eDSAuthFailed (-14090) on line 1922 of /SourceCache/ServerManagerUserGeneral/ServerManagerUserGeneral-193/UserAdvancedPluginView.mm”

The user gets added but without the kerberos AuthAuth.

[playdrums]

responding to myself here for an update since there’s a radio silence:

It looks like passwordserver is taking a crap on us. Apparently, after talking with our Apple rep it looks like there are some major problems with passwordserver that will hopefully be fixed in 10.4.3.

[Author]

Posts