Keychain error for new user on 10.3.5

[cocobeach]

We are runing a small network of 25 Users and I am testing the remote home folder functionnality with 4 users. They are all running OS X 10.3.5 and the server also with an unlimited user license. I am using LDAP with kerberos/SSL(thanks to the post of MacTroll 🙂 ).

The problem is that all the new users that I create can login and see their desktop but when they start an application like Safari, for exemple, they have an error that Safari cannot use the login keychain to store some info…
The popup windows propose to reset the keychain file. But if you choose to do so nothing happen and you have the same error the next time you launch Safari…
When you open Keychain Access you can see the “login” and “system” keychain but you can only unlock system. When you clic on unlock for “login” nothing happen… I have try the “Keychain First Aid” witch produce a error also:
———–
Verification started
Checking keychain configuration for John Doe (user ID=1077)
Home directory is /Network/Servers/server.cellbio.domain.de/Volumes/Image/Users/jdoe
Checked login keychain
~/Library/Keychains/login.keychain does not appear to be a valid keychain file
Checked password for ~/Library/Keychains/login.keychain
Unable to verify password for ~/Library/Keychains/login.keychain (-25295)
Unable to read settings for ~/Library/Keychains/login.keychain (-25295)
Checked default keychain
Checked keychain search list
Checked contents of ~/Library/Keychains/jdoe’s Keychain.keychain
Problems were found; you should choose the Repair option to fix them
Verification failed
———————-
Repair started
Checking keychain configuration for John Doe (user ID=1077)
Home directory is /Network/Servers/server.cellbio.domain.de/Volumes/Image/Users/jdoe
Checked login keychain
Checked password for ~/Library/Keychains/login.keychain
Unable to verify password for ~/Library/Keychains/login.keychain (-25295)
Login password could not be synchronized with keychain ~/Library/Keychains/login.keychain (-25295)
Unable to read settings for ~/Library/Keychains/login.keychain (-25295)
Checked default keychain
Checked keychain search list
Checked contents of ~/Library/Keychains/jdoe’s Keychain.keychain
Warning: some problems were not fixed
Repair failed
———–

So here I am… I re-made the user but nothing change and all the new account produce the same error… My method to create the user didn’t change from the others user I set up. ❓

David

[cocobeach]

Thanks,
But When you create a new user with his home folder with WGM, the Library folder from the user doen’t contain the Keychain folder. But you can log on and when you launch Keychain Access you have a popup saying that “the specified keychain is not a valid keychain file”. In fact the Keychain folder doen’t exist…
And when you launch Safari for the first time : “A keychain cannot be found to store “Safari”” At this point you can reset keychain to default and create a login.keychain file but this file still not valid.
In the system log you can find that:
Sep 28 18:20:11 localhost /Applications/Safari.app/Contents/MacOS/Safari: Locking /Network/Servers/server.domain.de/Volumes/Image/Users/jdoe/Library/Keychains/lck~login.keychain

If you delete the login.keychain file > logout and try to login with the same user the computer run forever with a nice blue screen, right, but quite boring in the end… 😐
And the ew account I create from now do the same…

David

[cocobeach]

I am using WGM according to the method describe here :
http://www.macdevcenter.com/pub/a/mac/2004/05/25/ldap.html
But I do not use their command line method “sudo createhome -a” .
I create an entry inside the list “where” (afp://server.domain.com/Volumes/Users). But if you let that new location selected the home will never be create even if you clic on “Create Home Now” so I found that by re-selecting the default entry in the list (afp://server.domain.com/Users) and clicing on “Create Home Now” and save the home is create.
What I can see under the Tab button is that :
——–
Home: afp://server.domain.com/Users/jdoe
/Network/Servers/server.domain.com/Volumes/
——–
It’s completely tricky but it was working until now… 😕

[Author]

Posts