Random login denials

[Anonymous]

I have an Open Directory with about 300 users and 50 iMacs running Tiger 10.4.2, xserve is 10.4.2.
–Only login is not working. A user has always been able to login with local account then mount their home folder manually.
–One day login will work on a computer, the next it will fail.
–When a user can login and they go to mount the public folder, they are prompted for username and password, but they have already authenticated. Single sign on does not work.
–System log has many entries: has no URL data, ignoring
–slapd log has many SASL…Failure: no user in database.
I have confirmed user account exist and passwords are correct.
Appears only login service, not authentication altogether is bugged.
? What tool can I run to troubleshoot the login process?
? What other logging can I check?

[maccanada]

What components of OD are running. The overview tab in SA will indicate if SASL and Kerberos are running. It sounds like Kerberos isn’t.
SA has all the log files for the OD components.
Troubleshooting has been added to 10.4.3 to indicate at the login screen if the server(s) are available. See andrina’s article on 10.4.3 for details on this and on how to set a delay to ensure network is up and running.

[Anonymous]

Under OD, overview:
lookupd: running
slapd: running
Netinfo: running (local)
Password server: running
Kerberos: running

No entry of SASL.

KDC log has entries: [computer names] server not found in kerberos database

[Author]

Posts