Need help connecting ppc (G4) to MacPro (Intel) Open directory

[jem0714]

I have 3 Macs (each running 10.4.10) on the same network:

+ a MacPro (Intel) I am using for a server running Open directory.

+ an iMac (Intel) which I have bound to the directory and operates just fine

+ a PowerBook (PPC G4) which I can bind to the directory, but which does not authenticate network-only users: sshd and su both fail.

I am using the simplest possible authentication–i.e. no Kerberos, etc..

I can use dscl on the PowerBook to navigate the directory and read all
of the entries and DirectoryService.debug.log shows activity when I do this

However, when I use lookupd -d (in debug mode) “userWithName: network-only-user”
I get the following output:

$ lookupd -d
lookupd version 369.5 (root 2006.02.10 04:16:23 UTC)
Enter command name, “help”, or “quit” to exit
> debug: on

> userWithName: network-only-user
Oct 29 11:58:11 lookupd-debug: LUServer 0x00303220 added agent 0x00302050 (CacheAgent)
Oct 29 11:58:11 lookupd-debug: Search Cache: user name network-only-user time: 0 status: Failed
Oct 29 11:58:11 lookupd-debug: Allocated Dynamic Agent 0x003036d0
Oct 29 11:58:11 lookupd-debug: Allocated NI 0x00303c80
Oct 29 11:58:11 lookupd-debug: LUServer 0x00303220 added agent 0x003036d0 (NIAgent)
Oct 29 11:58:11 lookupd-debug: Search NI: user name network-only-user time: 3 status: Failed
Oct 29 11:58:11 lookupd-debug: Allocated Dynamic Agent 0x00304110
Oct 29 11:58:11 lookupd-debug: Allocated DS 0x003040a0

Oct 29 11:58:11 lookupd-debug: LUServer 0x00303220 added agent 0x00304110 (DSAgent)
Oct 29 11:58:11 lookupd-debug: — DS: 381: mapNetInfoRecToDSType: *** category: 0
Oct 29 11:58:11 lookupd-debug: — DS: 381: mapNetInfoRecToDSType: *** category: 0
Oct 29 11:58:11 lookupd-debug: Search DS: user name network-only-user time: 8 status: Failed
Oct 29 11:58:11 lookupd-debug: Search Failed: user name network-only-user time: 35 status: OK
Oct 29 11:58:11 lookupd-debug: Call: user name network-only-user time: 35 status: Failed
nil

>

I see no activity in DirectoryService.debug.log (I do see log activity on the iMac for the same operation).

I have tried installing the third-party utility ‘pam_ldap’ with no change in this behavior. Also, I have noticed that lookupd on PPC has a slightly older version than Intel. (It seems to me that this is bad form considering both platforms are running 10.4.10–why the difference?)

Thanks in advance for any suggestions you might have.

Cheers,

Jeff Marchese
Dept. of Applied Science
UC Davis

[jem0714]

Thanks for your quick response!

On the PPC box when I type id (as root) I see the following:

root# id
uid=0(root) gid=0(wheel) groups=0(wheel), 1(daemon), 2(kmem), 3(sys), 4(tty), 29(certusers), 5(operator), 80(admin), 20(staff)

I hope this helps.

Jem

[jem0714]

id returns the following:

$ id network-only-user
id: network-only-user: no such user
$

Thanks,

Jem

[jem0714]

Great! That works. Thanks for your expert help.

Now I have another question:

*** How do I set the authentication path using the command line interface (CLI)?

I have 11 more G5s in a closet for which I don’t have access to the console.

I have used dsconfigldap to attach to the OD and I have the same
problem as above, ssh and su are not using the OD for authentication (but I CAN connect to the OD using dscl).

Thanks again. Please let me know if I should start another “Topic” for this new question.

Cheers,

Jeff Marchese

[jem0714]

Thanks for your invaluable help. This was exactly what I needed. I was able to get it working with the command as you suggested, plus one additional command–which I was able to figure out once I knew where to look. The sequence was:

sudo dscl -q localhost -merge /Search CSPSearchPath /LDAPv3/servername

*and*

sudo dscl -q localhost -change /Search SearchPolicy NSPSearchPath CSPSearchPath

Thanks again. I never would have got this without your help.

Cheers,

Jeff Marchese (a.k.a. Jem)

[Author]

Posts