Replica not working

[Anonymous]

I have an xserve with 10.3.5 as an OD Master and an older Blue and white G3 450 MhZ as an OD replica. It sees the master and everything is cool seemingly. So I shut off the master and reboot my computer to see if the replica will authenticate me. My computer takes forever to boot usually stalling on the waiting for network file system screen. Then the login window appears and I click on my mobile account and it takes forever for the password screen to show. I type in the password and after a long wait it will usually say “There is a problem that prevents you from logging in at this time please contact your sys admin.” The machine has a FQDN forward and reverse is good. My /Library/Preferences/edu.mit.Kerberos file shows the replica and master in there. I have also tried including the replica in my search policy in directory access on the client (which is also 10.3.5 by the way) and no dice. The /var/db/authserver/authserverreplicas file is the same on master and replica but I still cannot login. I have been able to auth to this machine when I was testing it as an OD Master before I got the Xserve. I have searched far and wide for an answer. Any advice?

[Anonymous]

Yeah I tried that as well but it did not work either. DO you thikn that it could be the dated HArdware?

[cmcfarling]

It sounds like you’ve tried all of the usual suspects. I’ve determined that the OD architecture is quite unforgiving if things aren’t perfect. A couple things I’ve done to resolve problems:

1) Make sure the master and replica have FQDN’s. If you don’t get a FQDN with the ‘hostname’ command, you’ll have problems. (I know you mentioned that you have this setup but I thought I’d mention it anyway)

2) Repair permissions after getting things setup how you want them.

3) Destroy and rebuild. I’ve wiped out and recreated my replica 6 or 7 times and my master 3 or 4 times since initially setting this thing up a couple months ago. (usually at the suggestion of Apple tech support)

4) Delete the Managed Mobile account from the client, forcing the creation of a new one on the next login.

It seems like it’s been one problem after another with OD though. For a while, the DNS server on the master would not work immediately following a reboot, which caused the KDC to not work, which made the OD useless. Miraculously, it started working a while back and I haven’t had problems since.

To answer your last question, I would doubt that the hardware is causing your problem.

[Author]

Posts