[bebop]

Same here.
It’s not particularly helpful to be told what kind of error it is. I can see that from the application response. What we want to know is, if we are authenticated, then why is the error being thrown.

School starts Tuesday, I’m not interested in resetting passwords on 680 accounts individually. I would like to set the accounts to prompt for a password change. The authentication error is occuring every time. Sometimes I can acknowledge the dialogue and try again. Sometimes a second error dialolgue comes up which won’t be dismissed and requires a force quit of WGM.

As an aside, I know that this is complicated stuff. I also know I have a pretty generic configuration which has been set up straight from apple guidelines and from guides that I downloaded from this site. It seems like there is a certain amount of dancing around the fact that some of the settings in WGM just don’t work as advertised.

There are a lot of people who come here for advice that are not pro server admins. I’m one of them, but I’ve worked hard to educate myself, and I’m angry about the amount of time I’ve had to spend solving problems that arise around things that should be pretty straight forward. Select the accounts on the left, choose the settings on the right… authentication error. WTF? Don’t mean to offend, but I’ve let this build up for a while.

And thanks to all those who take their time to help people like me.
Best.

[bebop]

Ok, I don’t know if this is what was stopping anybody else, but here’s what I was doing wrong.

I did a clean install of Tiger Server leaving user directories untouched on another partition. I then batch reloaded the accounts (with a lot of new ones) using Passenger.

Well as you can imagine, this reassigns user IDs so there are mismatches between accounts and home directory permissions.

I ran batch permissions with Passenger (God I love that app) and lo and behold. ‘createhomedir -a’ works like a charm.

[bebop]

I’m still having this problem myself.

Tiger 10.4.2 on XServe.
Home is afp://msxserve.hackleyschool.org/students (students is the share not the path)

Running createhomedir -a as root returns ‘Creating home directories’, but it’s lying.

Kind of a show stopper ya know?

Anyone?

[bebop]

Here is some additional info from the log when attempting to log in as testuser:

Apr 5 15:25:31 localhost kernel: arplookup 192.168.2.108 failed: host is not on local network
Apr 5 15:25:32 localhost krb5kdc[326]: AS_REQ (6 etypes {18 16 23 1 3 2}) 192.168.2.108: NEEDED_PREAUTH: [email protected] for krbtgt/[email protected], Additional pre-authentication required
Apr 5 15:25:32 localhost krb5kdc[326]: AS_REQ (6 etypes {18 16 23 1 3 2}) 192.168.2.108: ISSUE: authtime 1112729132, etypes {rep=16 tkt=16 ses=16}, [email protected] for krbtgt/[email protected]

Dan Jewett

[bebop]

OK, I’ll narrow my question.

If DNS is being handled by another server on the network, is there any reason to enable the service on the XServe?

If there is, what should the settings be?

Dan Jewett

[bebop]

Thanks to the apple mailing list links provided here, I found this:
http://lists.apple.com/archives/macos-x-server/2004/May/msg01278.html

Thanks,
Dan J.

[Author]

Posts