Log-in issues

[MacManifest]

Greetings. I administrate over a 150 Macs. This morning I have had some log-in issues with about 4 or 5 Intel iMacs. It seems whenever they log in with their known password, it rejects it. (These are local accounts). I was able to log in via my backup admin account and access the console logs. It seems the computer is locking out the user for a specific reason. I’m not familiar with this particular error, so I thought I would post the log below. Interesting enough, I switched one of the people in question from a standard account to an Admin account, and they were then able to log in.

“Mar 11 11:29:13 Reception loginwindow[413]: Login Window Started Security Agent
Mar 11 11:29:13 Reception ARDAgent [423]: ********ARDAgent Launched********
Mar 11 11:29:13 Reception ARDAgent [423]: ********ARDAgent Ready********
Mar 11 11:29:14 Reception DirectoryService[42]: Failed Authentication return is being delayed due to over five recent auth failures for username: reception.
Mar 11 11:29:16 Reception /System/Library/CoreServices/mcxd.app/Contents/MacOS/mcxd: ** MCXD.canUserLoginToComputer: Local users are not allowed to log in.
Mar 11 11:29:16 Reception /System/Library/CoreServices/mcxd.app/Contents/MacOS/mcxd: MCXD.canUserLogin received status = 3. User can’t log in.
Mar 11 11:29:18 Reception /System/Library/CoreServices/mcxd.app/Contents/MacOS/mcxd: ** MCXD.canUserLoginToComputer: Local users are not allowed to log in.
Mar 11 11:29:18 Reception /System/Library/CoreServices/mcxd.app/Contents/MacOS/mcxd: MCXD.canUserLogin received status = 3. User can’t log in.
Mar 11 11:29:48 Reception /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow: Login Window Application ”

These computers are registered in Open Directory. I tried removing the computer above from directory services, but it made no difference. It was only when I made the standard user an Admin user were they then able to log in. Has anybody seen this before? What is the mcxd.app? It says it needs to run in Root, if I want to access it.

Thanks in Advance.

[MacManifest]

[QUOTE][u]Quote by: MacTroll[/u][p]So admins aren’t typically bound by policy, which is why an admin user worked.

The particular error is that local accounts, non-OD accounts, aren’t authorized to log into this machine. Is “reception” a local account?[/p][/QUOTE]

Yes, these are local non-admin accounts. Reception is one of them. I had 5 iMacs do this over the weekend. In order to by-pass to allow these people to login, I gave them admin access. I’m thinkng I’ll create some more standard accounts to see if the same thing happens. If that doesn’t work I was thinking I could set up a managed admin account. Why this happened out of no where is beyond me.

[Author]

Posts