Newbie: can’t log into accounts created in Workgroup Manager

[caseystone]

Hello!

Well, I know OS X pretty well, and Servers pretty well, but OS X Server is a new one.

I have an admin account, created when I installed OS X Server 10.4 (now .10) on an old G4 tower, and using that I can connect to the machine no problem including FTP and AFP.

Then I set up the machine as an Open Directory Master, with Kerberos running, created the diradmin account, created a sharepoint master folder to house network user home directories, made it automountable, etc.

If I log in as the original admin account (which is not listed in the /LDAP3/127.0.0.1 directory I’m working with in Workgroup Manager) via AFP I can see those sharepoints and home directories just fine…

What I cannot do is log in as the user I have created in Workgroup Manager. It’s like the LDAP Open Directory is not being consulted.

Is there just some setting I’ve got wrong? Does one have to create user account in the System Preferences -> Accounts to be able to log in over AFP or FTP? That doesn’t seem right with all this fancy Directory stuff I’ve set up.

Please point me in the right direction, or let me know what other info you might need to figure it out.

Thanks.

-Casey

—

D’Oh! How do you delete a post?

Anyway, I forgot that I had ‘cleverly’ restricted access for services by user, and I had not allowed the newly created user to use AFP and FTP service.

So… like I said…

Works great!

Thanks.

-Casey

[mcmaddog]

It sounds like your client doesn’t know about the OD Master. Is your client setup with a static IP or DHCP? If DHCP, is your OS X Server the DHCP Server and if so is it configured with the LDAP info? and finally is the DNS server your client is using configured with the forward and reverse info for your OS X Server?

It’s very important the client can do a lookup for your server, secondly open Directory Access in the Utilites folder and click LDAPv3 and then the configure button, if using DHCP make sure it’s checked to get the information automatically, otherwise manually add a new configuration to connect to the LDAP server.

You shouldn’t have to reboot, but it doesn’t hurt. after you get to the login screen click where it shows the computer name until you get to Network account availablility, if it’s a green dot you should be able to log into the OD account if it’s red (give it at least 20-30 seconds) then it it doesn’t even see the OD server.

[Author]

Posts