A permission problem of network user home folders

Question

I have a problem in logging in of network users. I suspect it is due to incorrect permissions at the client.  The trouble scenarios is as follows:
Hosts (all in the local network):
server.example.com (Mac mini server 10.8.4 w/ Server.app)
    provides Open Directory and AFP/SMB File Sharing
    allows remote login via SSH,
    have two network user accounts (user1 and user2), and
    have their home folders on the external HDD (/Volumes/HD1/home).
client.example.com (Mac mini 10.8.4)
    takes server.example.com as network account server and
    allows remote login via SSH.
From the third machine (third.exmple.com), both user1 and user2 can simultaneously login to server.example.com via SSH without trouble.
Their home folders (directories) are: /Network/Servers/server.example.com/Volumes/HD1/home/{user1, user2}
Problem Scenario:
(1) After rebooting both server.example.com and client.example.com,  user1 can also login to client.example.com via SSH without any trouble.
His/her home folder is /Network/Servers/server.example.com/Volumes/HD1/home/user1.  This seems correct behavior.
(2) But after the successful login of user1, user2 fails to login to client.example.com via SSH.  The error messages look like this:
user@third$ ssh -l user2 client.example.com
Password:
Last login: ...
Could not chdir to home directory /Network/Servers/server.example.com/Volumes/HD1/home/user2:     Permission denied
-bash: /Network/Servers/server.example.com/Volumes/HD1/home/user2/.bash_profile: Permission denied
user2@client$ pwd
user2@client$
At this time, the file permission of the mount point of "home" folder is like the following. I suspect that this prevents user2 to access his/her home folder.
user2@client$ ls -l /Network/Servers/server.example.com/Volumes/HD1
total 0
dr-x------+ 1 user1  staff  264 Sep  9 20:24 home
(3) Now I can observe (at server.example.com) that user1 is connecting as the AFP file service user. After disconnecting user1 using Server.app, user2 can login to client.example.com successfully. 
(4) While user2 is successfully logging in to client.exmple.com, user1 fails to login to the host. The error messages look similar to (2).
At this time, the file permission of the mount point of the "home" is taken by user2.
Sorry for the long scenario. Does anyone have clue to solve this?
I havn't encountered this sort of problem when I was using Snow Leopard Servers.
Note:
On server.example.com, /Volumes/HD1/home is configured to be share point (with guest access permission) and AFP home. Its local permission is:
user1@server$ ls -ld /Volumes/HD1/home
drwxr-xr-x+ 4 root  admin  136  9  9 20:24 /Volumes/HD1/home
On client.example.com, the permission of the directories above  the mount point of "home" is: drwxr-xr-x+ root admin
Both accounts (user1 and user2) are created using Server.app connected to server.example.com (I didn't use Workgroup manager).

Answer 1

Takuo,
Did you ever resolve this issue?  I'm having a similar problem.  Linc's comment (about not logging into the server with a network user) doesn't apply -- I'm not logged on with that user, and I have rebooted the server since any possible logins.
Essentially, I have a home network where I've setup OpenDirectory on a Mac Mini Server.  I'm authenticating via LDAP properly between my iMac client and my Mac Mini Server.  For example, using 'id' at the command prompt, I can properly retrieve all network information, and can use 'ldapsearch' to query user IDs from the server.  Perhaps most importantly, I've got pGina setup on a Windows XP machine, and I can authenticate via LDAP against the Server as well -- so I'm pretty sure that I've got the LDAP & DNS parameters all properly configured.
But what I can't seem to figure out is why my SMB shares are failing.  Whenever a network user's home directory attempts to get mounted on the iMac client, the home directory authentication fails.  For example,
vimac:~ kris$ su - kmv
Password:
su: no directory
On the server-side, I'm seeing:
2014-03-26 8:58:24.256 PM digest-service[43828]: label: default
2014-03-26 8:58:24.256 PM digest-service[43828]:           dbname: od:/Local/Default
2014-03-26 8:58:24.256 PM digest-service[43828]:           mkey_file: /var/db/krb5kdc/m-key
2014-03-26 8:58:24.256 PM digest-service[43828]:           acl_file: /var/db/krb5kdc/kadmind.acl
2014-03-26 8:58:24.257 PM digest-service[43828]: digest-request: uid=0
2014-03-26 8:58:24.259 PM digest-service[43828]: digest-request: netr probe 0
2014-03-26 8:58:24.260 PM digest-service[43828]: digest-request: init request
2014-03-26 8:58:24.327 PM digest-service[43828]: digest-request: init return domain: VSERVER.LOCAL server: VSERVER indomain was: <NULL>
2014-03-26 8:58:24.330 PM digest-service[43828]: digest-request: uid=0
2014-03-26 8:58:24.330 PM digest-service[43828]: digest-request: init request
2014-03-26 8:58:24.534 PM digest-service[43828]: digest-request: init return domain: VSERVER.LOCAL server: VSERVER indomain was: <NULL>
If I use 'smb://' (with a username & password), I also get denied, and the same error about the "NULL" indomain appears in the log. 
Is this similar to what you saw?  I've been scouring the web for info about digest-request, but am fairly new to OS X, so my progress has been slow...
Kris