[lyleHM]

[QUOTE][u]Quote by: LyleHM[/u][p]I was able to work around the error by switching the user to a crypt password and then back again to an OD password.
Hope that works for others – good luck!

Lyle Millander 😯 [/p][/QUOTE]——————–
Ignore my OD>crypt>OD suggestion. Although it may work around the problem, it doesn’t really fix it.

From the terminal on your Open Directory server (either locally, or via ssh), enter the following:

sudo slapconfig -settopasswordserver userShortName dirAdmin (obviously substituting the short names of the user needing the fix and a directory administrator)

First, you’ll be prompted to enter the sudo password, then the new password for the user, and finally the password for the directory administrator. If you do this in 10.5.x, you’ll also have the option to enter the user and diradmin passwords in line with the command. Apparently, that capability was removed for security reasons in 10.6.

From the slapconfig man page on 10.6:

-settopasswordserver user directory-administrator
Converts a user account to have an Open Directory
authentication type. A new password server slot and
kerberos principal are created. If the user was
previously an Open Directory user, the old slot and
principal are deleted and replaced.

Cheers,
Lyle

[lyleHM]

I was able to work around the error by switching the user to a crypt password and then back again to an OD password.
Hope that works for others – good luck!

Lyle Millander 😯

[Author]

Posts