AFP login not possible, OD error?

Dear all,
since Monday some of our users have the problem that they cannot access the file server with their user credentials. This does not affect all users, only 3 out of 18.
The setup is:
Mac OS X Server 10.6.8 running on an Xserve 1.1 (file server)
Mac OS X Server 10.6.8 running on an Xserve 2.1 (OD server)
Clients (Mac mini, iMac) running 10.9.4
The user accounts are managed on the OD server, the OD is replicated on the file server. This affects one newly created account (on Friday, login was then possible) and two accounts that already existed for half a year or more.
When I log in with a working account, /Library/Logs/AppleFileService/AppleFileServiceAccess.log shows up the following line:
IP xxx.xxx.xxx.xxx - - [04/Sep/2014:11:08:21 0100] "Login [user name]" 0 0 0
When I log in with a working account using a wrong password, the following lines appear:
IP xxx.xxx.xxx.xxx - - [04/Sep/2014:11:10:30 0100] "Login [user name]" -5023 0 0
IP xxx.xxx.xxx.xxx - - [04/Sep/2014:11:10:30 0100] "Logout [user name]" -5023 0 0
AFP error 5023 means "AFP User not authorized" which makes perfect sense.
When I log in with one of the accounts that now don't work, only the following line appears:
IP xxx.xxx.xxx.xxx - - [04/Sep/2014:11:15:53 0100] "Logout [user name]" -5023 0 0
So there is no login logged.
However, in the log I can find the following lines:
IP xxx.xxx.xxx.xxx - - [03/Sep/2014:22:11:08 0100] "Logout [user name]" -5023 0 0
IP xxx.xxx.xxx.xxx - - [03/Sep/2014:22:11:29 0100] "Logout [user name]" -5023 0 0
IP xxx.xxx.xxx.xxx - - [03/Sep/2014:22:11:50 0100] "Logout [user name]" -5023 0 0
IP xxx.xxx.xxx.xxx - - [03/Sep/2014:22:12:10 0100] "Login [user name]" -5019 0 0
IP xxx.xxx.xxx.xxx - - [03/Sep/2014:22:12:10 0100] "Logout [user name]" -5023 0 0
IP xxx.xxx.xxx.xxx - - [03/Sep/2014:22:12:31 0100] "Logout [user name]" -5023 0 0
This happened obviously after the user has logged out and Mac OS is trying to sync the mobile account with the credentials that have problems. Error 5019 means "AFP Parm error". I manually aborted the sync after hours. When the users tried to log in the next morning, also an error -5019 followed by a -5023 appeared in the log. Error or warning messages did not appear to the users while logging into their accounts.
Changing the passwords did not help. Disabling and re-enabling the accounts in the OD did not help. Restarting AFP services did not help. As for AFP, the users can use different credentials, but for the mobile accounts this way is not appropriate.
What I did on Sunday was shutting down the file server, removing the hard disks and testing a spare Xserve 2.1 with the system. Then I put back the drives into the Xserve 1.1, which is running as the file server since then. Could that be the cause? Other changes (system updates, config changes) have not happened.
Thanks in advance,
Andreas

Andreas,
Did you ever find a solution to this?
I have pretty much the exact same issue.
Regards
Ben

Similar Messages

  • Sap license error--error is "login not possible (error in license check)u0094

    Hi,
    I we are not able to login in our IDES r/3 system, it is showing “login not possible (error in license check)”, only sap*  is able to login . I have already applied sap license that will
    Expires on 31-12-9999, I have old license also it was expired on 07-02-1996 it is under red light, second one under green light.  I tried to del old one but system says through sap* not possible, only sys admin will do…..what I can do now..

    Hi,
    When your license expired you can only login to the system with SAP* user.When you are login using sap* and deleting old license you will get a popup with this  message <b>SAP* WHEN THE VALID SYSTEM LICENSES HAS EXPIRED,ONLY THE SAP* CAN LOG ON TO THE SYSTEM.IN THIS CASE,IT WOULD BE DANGEROUS TO LICENSE
    THIS IS WHY THE SAP* IS NEVER ALLOWED TO DELETE A LICENSE</b>
    So can cannot delete the expired license with SAP*.If u want to delete means try to login with <b>dilog user</b> and go to slicense T-code.
    Select the expired license in menu goto EDIT->Delet license(shift+f2)
    kiran kumar.v

  • LOGON NOT POSSIBLE. ERROR IN LICENSE CHECK -- NO HWid from message Server

    We could logon to the EC6 system. I
    Stopped the EC6 system and started
    it . It started with License Key
    Error. the License key was available
    and was shown in SLICENSE transaction
    but it was giving LOGON NOT POSSIBLE.
    ERROR IN LICENSE CHECK.
    SO I deleted the TEMP and the Original
    License via command SAPLICENSE -DELETE
    and then REINSTALLED THE LICENSE with
    the details
    SAP System: EC6
    Inst. Number: 0020174764
    Hardware Key: Z1686313186
    System Number: 310590866
    Expires On: 31.12.9999
    Key:
    RZKGNA79K9U4F7D7SGGOWU1V
    The License was successfully installed
    but Still the samer error .LOGON NOT
    POSSIBLE. ERROR IN LICENSE CHECK
    Somehow it is not getting the hardware
    key.But when I run the command
    saplince -get then it returns
    saplicense: HARDWARE KEY = Z1686313186
    DEV_W0 log says that
    M  ***LOG Q16=> ThGetMsHwId, DpMBufHwIdGet (HWID_PENDING) [thxxmbuf.c   509]
    M  *** ERROR => SlicKCheckLicense: did not get hwid from message server [slicch.c     306]
    M  *** ERROR => no hwid from msg-server received [likeyapi_w.c 2268]
    Please Help

    Sergo
    My sapmsEC6 has been assigned to 3601 port as my instanace number is 01 . So that is correct. the Thread which has given didn't help . Thanks for you inputs.
    Yogesh

  • Console mode, login not possible

    Hi all,
    I'm using OS X Yosemite and want to login as ">console" to open a terminal based access to my Mac.
    The console login appears a few seconds and afterwards in turns in a black screen only showing the mouse pointer. It is not possible to enter my username ans password when the login line appears. Therefore, it is not possible for me to login into the system. I have to do a hard reboot.
    Is there a possibility to fix this problem? I just want to login without the GUI.
    Thanks,
    markus

    Once you are in the web browser:
    You can log in by using:
    -Portal URL.System will ask you email as ID
    -URL that directs you to ITS( is an URL that contains the string BBPSTART).System will ask you your user ID, PW and  client.
    My point is to check if ITS is working and portal not.
    Thanks and Regards,
    Abraham

  • VNC login not possible from Sol 11 Express login

    Hello,
    after booting the machine the login prompt is shown (no auto - login)
    I want to connect using vnc - however this is not possible.
    Only after logging in locally vnc is working as expected...
    Bye

    How about this?
    - Use remote login, such as ssh
    - Set a VNC password with vncpasswd
    - Start VNC-Server, for examle "vncserver :1"
    - Access VNC remote with a VNC Client, for example "vncviewer <host-ip>:1"
    C.

  • Several T410 - Fingerprint blinks - Login not possible

    I have three brand new T410 all with the same problem. I never had problems with domain login with the older T400 or the W500/W510. What is happening? I have W7 64bit with SP1, all updates (incl. Lenovo) installed. Fingeprint is registered, light is on. When I scan my finger the light goes off, then blinks once and then it's on again. No login... I have to use my credentials. What is wrong? Thanks Rob

    I get a similar issue
    I get the USB malfunctions error on numerous occasions for the fingerprint reader .
    When i check device manager the biometric device is not there 80% of the time. And the icons in the device manager continually flash.
    I have had my fingerprint reader (the board that it is on) replaced on one occasion, this fixed the issue for one day and then it started behaving as it did previously.
    I have installed new drivers found on UPEK but this did not fix gthe problem.
    I am wondering if it is a powering issue from the USB hub??
    Additionally:
    When i come back to my computer after a while and it has entered sleep mode. The fingerprint reader light is on and allows me to swipe my finger once. After this one occassion it then turns off.

  • Trans. launcher: system login not possible

    Hi,
    I configured the tx. launcher and was able to logon to the ECC system and execute required transaction (VD03), however somehow I am not able to login to ECC now, it prompts me for the password over and over again. RFC's are working fine , HTTP service running on both systems and no changes were made to the launcher settings. Is there an authorization object required for this ?
    Has anyone faced a similar problem ?? any solutions please!!
    Secondly, do we need Single Sign On to avoid the login screen ?
    Regards.
    PS: It is possible to logon to ECC from the GUI
    Edited by: Jacob Raj on Nov 8, 2008 12:52 PM

    I've tried to login to ECC through the http service running within ECC and its successful but CRM to ECC login is not happening.
    possible reasons please !

  • IMessage login not possible

    Hello,
    I try to login into IMessage but unfortunately it rejects my request after a while.
    I do not think it is an firewall issue because another computer in the same network works quite well with iMessage.
    OS is Yosemite new installed on MacBook Pro (15", Ende 2011).
    Error says, "Login failed. Check your internet connection and try again what is crap.
    Has Somebody an idea?
    Greetings
    Hubert

    Hi,
    Double check the following as well:-
    System Preferences > Date and Time.
    This should have the current Date and Time Zone set correctly.  It should also use the Automatic Time Servers as everything needs to be in Sync with the internet for Time Stamps and this starts at the Login stage.
    As it works for another computer you should not have to check your Routers is set to the same Time Zone and Date Settings.
    In the Network section use the advanced Button > DNS tab.
    This should show the router's DNS IP addresses passed from the router.
    A LAN IP such as one starting 192.168.x.x or 10.x.x.x only pints to the routing device and is probably not good enough.
    If they are not appearing automatically (and greyed out) then add them manually or add Public ones. (http://pcsupport.about.com/od/tipstricks/a/free-public-dns-servers.htm).
    In the Apple Menu top left of the Screen use this About this Mac item.
    In Yosemite more info appears here than in previous OS versions.
    Check the Serial Number of the Mac appears.
    If it is Missing then you will have to visit an Apple Store  to have it put back.
    It can go Missing if the logic/Mother board has ever been replaced in a refurbishment or repair where the engineer has not "flashed" it back to the new board.
    This is used by the App and with your password creates the IDS: YourAppleID-Auth Token that appears in the Keychain.
    Open Keychain Access in Applications/Utilities and check the list for this item.  (it may not have been created yet if this Mac has never managed to Login)
    8:16 pm      Friday; January 16, 2015
    ​  iMac 2.5Ghz i5 2011 (Mavericks 10.9)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
     Couple of iPhones and an iPad

  • Management Studio Login not possible

    Hello,
    I use BB 10.2.1 and after the latest Update the Management Studio is not accessable. I cannot give in Login Name and Password because thies fields are missing. I only the the drop down menu "Log in using" an this is empty.
    Do you have any ideas?
    Thanks and regards.
    Doreen

    are we talking about BES server?
    how are you accessing BMS and what browser version?
    Click here to Backup the data on your BlackBerry Device! It's important, and FREE!
    Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
    Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals
    BESAdmin's, please make a signature with your BES environment info.
    SIM Free BlackBerry Unlocking FAQ
    Follow me on Twitter @knottyrope
    Want to thank me? Buy my KnottyRope App here
    BES 12 and BES 5.0.4 with Exchange 2010 and SQL 2012 Hyper V

  • Local user got deactivated - login not possible

    Hi all,
    I have a Macbook using an user assigned to a domain and two local users also which are not assigned to that domain. I never had any issues so far and also assigned all three users as administrators.
    Just now after I have used the domain user and wanted to logon to one of the local users, the password has not been accepted and a message stated that the user gots deactivated and I should contact the system administrator. I tried also the other local user and the same message appears.
    I tried several things like disconnect from any network, removed the domain at the user settings, restarted several times but nothing helped. What is also very odd is that the checkbox for the quick user change is deactivated and cannot be checked.
    Anyone had this also and knows a fix for this?
    The system runs Mac OS X Yosemite 10.10.
    Thanks!

    Once you are in the web browser:
    You can log in by using:
    -Portal URL.System will ask you email as ID
    -URL that directs you to ITS( is an URL that contains the string BBPSTART).System will ask you your user ID, PW and  client.
    My point is to check if ITS is working and portal not.
    Thanks and Regards,
    Abraham

  • Anwering invitations to attend meetings is not possible. Error says Icloud cannot find the page, whenever I try to aceept a meeting by responding the email notification...Any ideas?.

    I am using Icloud and previous mobile me. Now I cannot respond to meeting invitations coming in to my email. I get an error saying (when clicking accept) "Icloud cannot find the page". I have also problems with making meeting invitations in my calender when adding attendees and sending to their email. They never get the invitation. Any ideas?

    Simple...
    http://www.apple.com/uk/support/mac/app-store/contact/

  • After login to the e-bank on line of the Eurobank EFG in Serbia error message: "Keyboard Navigation Disabled." appear and furthur work is not possible.

    This problem started about 10-20 days ago.
    After login to the e-bank on line service of the Eurobank EFG Serbia further work is not possible because the screen became gray and an error message appear: Keyboard Navigation Disabled.
    I run the laptop on Win 7 Professional - 64 bit Service Pack 1.
    My default web browser is Mozilla Firefox 21.0.
    Alternative is:
    - Internet Explorer 10
    Version: 10.0.9200.16576
    Update Versions: 10.0.5 (KB2829530)
    I have scanned my laptop and cleaned few fond viruses. Have uninstalled and installed again Java so now I have:
    - Java 7 Update 21
    - Java 7 Update 21 (64-bit)
    I have uninstall and reinstall Firefox.
    Result is that now I can run e-bank online in IE but not in Firefox.
    Customer support service from the bank told me that the problem is related to the browser...

    Problem still exist - looking for a solution.
    You may see how this appears on the screen at the attached picture.

  • Server0 getting down and logon not possible ( error in license check)

    Hi Guys,
    I rebooted my SAP server and after that server0 is in disabled mode, well both the boxes seems to be green but the server0 node in disable mode as if it is maintained by some parameter and I have changed it, which is not the case, also there is no log with dev_server0 since then. I have followed 723909 note and also copied the parameters of a running server but didn't get success. Also when I am trying to login through SAPGUI its giving me error " Logon not possible( error in license check)" while the license is already installed.
    dev_w0 log says
    M Wed Sep 01 14:42:14 2010
    M  *** ERROR => sap license, no valid license found [likeyapi_w.c 2260]
    M  *** ERROR => wlikey_check_webas: There is a permanent license key for "NetWeaver_ADA" in the system but it has never been checked successfully. In this situation a temporary license key mustn't be installed. [sliclikey.c  1314]
    M  *** ERROR => The temporary license key for NetWeaver_ADA could not be installed [likeyapi_w.c 2305]
    SAP ECC 6.0 release 700
    DB: MaxDB
    OS: Win2k3 server
    Please help.
    Regards
    Mridul Gupta

    License issue is resolved but server0 node is still in disable status while the instances shows green, I checked dev_jcontrol log and found :
    [Thr 2168] [Node: server0] java home is set by profile parameter
         Java Home: C:\j2sdk1.4.2_25-x64
    [Thr 2168] JStartupICheckFrameworkPackage: can't find framework package E:\usr\sap\W6Q\DVEBMGS12\exe\jvmx.jar
    JStartupIReadSection: read node properties [ID123322550]
    -> node name          : server0
    -> node type          : server
    -> node execute       : no
    -> jlaunch parameters :
    -> java path          : C:\j2sdk1.4.2_25-x64
    I think the node execute sud be yes, I just wanted to know how I can enable this.
    Regards,
    Mridul Gupta

  • Logon not possible (error in license key)

    dear sir
    I had a temporary license which got expired yesterday. but i received the permanent license today
    and i wanted to install it on the solution manager server, but when i 'am trying to log in ,it throws
    an error at the bottom that " logon not possible (error in license key ) "
    pl given a solution
    thanks
    john

    Logon using SAP* in client 000.
    Probably you need to maintain profile parameter login/no_automatic_user_sapstar = 0 and restart the system before you are able to logon with user SAP*

  • Profile does not activated (it shows an error backup is not possible)

    Dear Experts ,
    please solve my problem
    here i changed one parameter by RZ10 in DEFAULT profile  and i saved it then it prompts for Activate or not i said yes but the profile is not activated and it shows an error that is backup is not possible
    parameter (login/system_client =100)
    i did not get why it showing that error
    please clarefy me
    Regards

    Hi,
    Make sure that there is proper access for this file at the OS level. Normally, when you are changing any profile at SAP level it will try to create a backup of existing file at OS level. Also, check if the parameter is set correctly and saved properly.
    If you are not able to change the file at SAP from RZ10 then change the same at OS level and after that restart the instance for parameter to take effect. After the system is restarted then again the load the profiles back in to the system using RZ10-->Utilities->Import profile->of active servers
    Regards,
    Sharath

Maybe you are looking for

  • HT4623 Opening multiple tabs within Internet Safari on my iPad mini

    How am I able to open multiple tabs within Internet Safari on my iPad mini?? I have an iPhone and I can do so but on my iPad mini I can't figure it out or it just doesn't have that option. Someone please help with some answers, thank you!!

  • CS4 Illustrator wont save to PDF, programe just stops

    Upgraded from CS2 to CS4 and everything is woking fine. But when I try and save a file from Illustrator CS4 to a PDF the programe just stops working.  The mouse pointer moves fine and I can use other applications on the machine. The machine is a P3 w

  • Canon G1 raw files unrecognized

    Hi all, I'm new to Mac and iPhoto. I have taken a number of raw images on my Canon G1 and am trying to import them into iPhoto version 8.0.4 (OS X 10.5.8). I use a USB CF card reader, not a direct camera connection. I have iPhoto set to copy to the i

  • IPad has backlight but no video on screen

    It is a 1st gen iPad, and the screen still appears to work.  When I power it on, the Apple logo appears, and the screen is backlit, but after it gets done booting there is no image on the screen.  Sound still works fine, and touch response swill work

  • Grant Permission in Applet

    I am writing an applet which needed to read and write files with user's local machine, so i need to grant the permissions. It seem the only way to grant the permissions for applets is needed user have some manually setup before running the applet. (E