Can't connect to a directory system

I'm working on upgrading all of our OSX Servers from Tiger to Leopard.
Before this happens, I always test new server setups in my test lab.
I'm having a problem in this lab that I cannot figure out. All that I'm trying to do is connect a Leopard server (10.5.2) using 'Connect to a Directory System' to another Leopard server(10.5.2) that is an Open Directory Master.
I can do both forward and reverse lookups on both the servers.
LDAP server, Password Server and Kerberos are all running on the ODM.
I've added the server that I want to connect to the ODM into the computer list of the ODM's Workgroup Manager.
I've created a group of Kerberized Servers with that added computer in WGM.
I've added a Kerberos Record to the ODM which contains:
diradmin for the administrator name
diradmin's password for the administrator password
The fully qualified domain name of the Leopard server that is going to connect to a Directory system
diradmin as the Delegated Administrator.
I don't get an error message and the window disappears after I click add so I'm assuming the record is added.
On the server that is going to connect to the ODM, I open Open Directory Utility and I am able to bind this server to the ODM.
I next click on the Join Kerberos button.
The realm that first appears is LKDC:SHA1.763D1DFF494B476438C
I click on this and choose the Kerberos Realm that I created when I set up the ODM which is marked as (default)
I enter the username of diradmin
I enter diradmin's password for the password.
It tells me I have either an invalid username or password.
I'm pretty sure that the username is correct because if I use another username I get a delegation error that says this administrator has no delegated Kerberos Join authority. But if I go back to the diradmin username it gives me the invalid user name/password error.
Looking at the Password Service Server Log I get an error such as this when I try to join the Kerberos realm:
RSAVALIDATE: success.
AUTH2: {0x47b35e1c6b8b4570000000200000002, diradmin} DHX authentication failed, SASL error -13 (password incorrect).
I've tried destroying the ODM multiple times. Rebooted both servers. Changed the diradmin password. Nothing works.
I'm at a loss for what to do next.

Hi Tony,
Let tell you what I did.
1. I created a dns record for the odm and member server on the odm
2. Started up dns on odm
3. I made sure both machines resolved correctly on both the member and odm using nslookup
4. Started afp on the odm
5. Configured Open Directory Master on ODM with the administrator diradmin
6. Configured Directory Utility on the member server to bind to odm
7. Made sure odm was the first one in list for authentication/contacts (it was the only one)
8. Added a machine record for the member server on the odm. (Double checked that the MAC address was correct.)
9. Added Kerberos record with the member server's FQDN with diradmin as the admin
10. Went to Connect to the Directory System on the member system. It was already selected.
11. Went into terminal on member server and ran the kadmin.local -q list_principals
It gave me the following output:
Authenticating as principal root/admin@LKDC:SHA1.763D1FDFF494B476438CF685295A959757D8541E with password.
K/M@LKDC:SHA1.763D1FDFF494B476438CF685295A959757D8541E
afpserver/LKDC:SHA1.763D1FDFF494B476438CF685295A959757D8541E@LKDC:SHA1.763D1FDFF 494B476438CF685295A959757D8541E
cifs/LKDC:SHA1.763D1FDFF494B476438CF685295A959757D8541E@LKDC:SHA1.763D1FDFF494B4 76438CF685295A959757D8541E
kadmin/admin@LKDC:SHA1.763D1FDFF494B476438CF685295A959757D8541E
kadmin/changepw@LKDC:SHA1.763D1FDFF494B476438CF685295A959757D8541E
kadmin/history@LKDC:SHA1.763D1FDFF494B476438CF685295A959757D8541E
kadmin/mail.lgusd.k12.ca.us@LKDC:SHA1.763D1FDFF494B476438CF685295A959757D8541E
krbtgt/LKDC:SHA1.763D1FDFF494B476438CF685295A959757D8541E@LKDC:SHA1.763D1FDFF494 B476438CF685295A959757D8541E
lgadmin@LKDC:SHA1.763D1FDFF494B476438CF685295A959757D8541E
root@LKDC:SHA1.763D1FDFF494B476438CF685295A959757D8541E
vnc/LKDC:SHA1.763D1FDFF494B476438CF685295A959757D8541E@LKDC:SHA1.763D1FDFF494B47 6438CF685295A959757D8541E
12. Went into terminal on the odm and ran the kadmin.local -q list_principals
It gave me the following output:
Authenticating as principal root/[email protected] with password.
HTTP/[email protected]
HTTP/[email protected]
K/[email protected]
XMPP/[email protected]
XMPP/[email protected]
afpserver/[email protected]
afpserver/[email protected]
cifs/[email protected]
cifs/[email protected]
[email protected]
ftp/[email protected]
ftp/[email protected]
host/[email protected]
host/[email protected]
http/[email protected]
http/[email protected]
imap/[email protected]
imap/[email protected]
ipp/[email protected]
ipp/[email protected]
kadmin/[email protected]
kadmin/[email protected]
kadmin/[email protected]
kadmin/[email protected]
krbtgt/[email protected]
ldap/[email protected]
ldap/[email protected]
nfs/[email protected]
nfs/[email protected]
[email protected]
pop/[email protected]
pop/[email protected]
[email protected]
smtp/[email protected]
smtp/[email protected]
vpn/[email protected]
vpn/[email protected]
[email protected]
xgrid/[email protected]
xgrid/[email protected]
xmpp/[email protected]
xmpp/[email protected]
Obviously not the same
13. So I clicked on the Join Kerberos button. Changed realm from the LKDC one to ODM.LGUSD.K12.CA.US. Entered diradmin's credential's. It once again says my password is invalid. So I'm back to where I started.
Conclusion:
I hate OS 10.5.2 Server

Similar Messages

  • How can we access the file/directory system in the server

    Hi friends,
    I have made a text editor attached with an audio player for my project.
    Both text editor and audio player are implemented in applet and put in to a
    jsp page using jsp:plugin. Text editor and player are separate applets running
    in the same page and from same server.A client who is using this editor may
    want to save the edited text files to the server as well as hear audio files from
    directories in the server.
    My question is how can we access the file/directory system in the server
    like we do in the local machine.When the user cliks save or openfromserver button
    in the editor, folder/files in the server must be displayed as we do with FileChooser.
    I am using Apache Tomcat 5,wiindows 2000 server, jdk1.5.
    manu

    You can't access it directly. But your applet can make net connections to the server, and the server can provide that kind of functionality. Generally this is easiest by making HTTP connections and having the server provide the functionality via the web server. (So in your case, JSPs or servlets on the server would list/deliver/create/modify/delete files, and the applets would invoke those JSPs and servlets.

  • Can we connect to any SAP system if we have connection details.

    Hi Experts,
    Can we connect to any SAP system if we have connection details.
    In this thread I found Diego Lombardini asking connection details.
    Needed help on this report
    I am working in ABAP for couple of years but donu2019t have much idea about connection to SAP system, Please let me know how it is possible .
    High points will be rewarded for any helpful answer.
    Regards
    Bikas

    Hi Bikas,
      That reply is just because Diego got irritated by Ravi asking the same question in many threads many times .
    Otherwise if a SAP server is not secureed using secureclient you can always connect to that SAP system using the internet and your own SAP GUI ( perhaps based on the GUI compatibility )
    But i bet, nobody will reveal SAP server as open for you.
    Cheers
    Kothand

  • Connected to a Directory System

    I am not able to properly set up my Open Directory Access. I have bounded the mac server to the Windows server and joined Kerberos. I was able to authenticate to both OD and Kerberos successfully. When launching workgroup manager I type in the local IP address of the mac server and it says "you are working in a directory node that is not visible to the network" I then quit Workgroup Manager and attempted to log into the IP of the windows server and used a domain admin account on the windows server and it said "host unreachable the address you entered is not reachable. Please check your network connections" and I know it is not a network issue. I found an article on apples support page that showed me how to setup LDAP manually and I did that and i am still recieving the same errors. All I am wanting my mac server to do is pull the information from AD on the Windows server so I can push updates to all my macs. Create custom Install imanges for new systems, and run Netboot. I may be missing something or setting the mac server up incorrectly. What should I do to have my mac server authinticate with the windows server and push updates to my macs?

    Hi Saatchi, you say that when you login using the local IP address it gives you the "you are working in a directory node that is not visible to the network" message, are you clicking the globe icon on the top left under the Server Admin icon?
    It should list all the directory systems available.

  • Lumia 620 can't connect to internet after system u...

    I have a brand new Nokia Lumia 620, I've only had it for about a month. I saw there was a new system update this past Saturday, so I updated my phone. With the update came Data Sense, the option to block numbers from calling/texting me, and some other new options in the Settings menu. However I've noticed that I can't connect to the internet though my data plan anymore. I have 500 MB included on my plan and suddenly I can't use it. Connecting though wi-fi works fine. I looked through settings, it says my 3G connection is on and everything. I don't really know what to do.
    Solved!
    Go to Solution.

    Next thing to try involves a little more work. You need to contact your network and get the apn settings. Once you have the settings, goto Settings>Access points>+, then set up access point using the apn settings you got earlier.  Once you set it up, make sure to activate it and see if this works.

  • Can not connect to adadmin as system user

    Enter the password for your 'SYSTEM' ORACLE schema:
    ...Unable to connect.
    Hi All,
    OS oul5x64
    DB 11.1.0.7
    EBS R12 12.1.1
    i just install DB vault to my system
    and now follow this note to install patches to DBTier and AppsTier
    when run "adadmin" it would not take my system password. but when connect using sqlplus> the password was still valid .
    is it because the DBvault ?
    Integrating Oracle E-Business Suite Release 12 with Oracle Database Vault 11.1.0.7 [ID 859397.1]
    Can someone please help!
    Thanks in advance
    AD Administration error:
    The following ORACLE error:
    ORA-01017: invalid username/password; logon denied
    occurred while executing the SQL statement:
    CONNECT SYSTEM/*****
    AD Administration error:
    Unable to connect to 'SYSTEM'; password may be invalid.
    AD Administration needs the password for your 'SYSTEM' ORACLE schema
    in order to determine your installation configuration.
    Enter the password for your 'SYSTEM' ORACLE schema:

    Hi Hussein,
    ran adpatch and got the same error
    i will try the note.
    Thanks,
    Enter the password for your 'SYSTEM' ORACLE schema:
    ...Unable to connect.
    AutoPatch error:
    The following ORACLE error:
    ORA-01017: invalid username/password; logon denied
    occurred while executing the SQL statement:
    CONNECT SYSTEM/*****
    AutoPatch error:
    Unable to connect to 'SYSTEM'; password may be invalid.

  • How can I connect laptop to stereo system?

    I have a  Pavillion dm3 1130us and I want to go out of it into my stereo system to play the pc audio on the stereo. It''s got headphone output which traditionally won't work to line in of the stereo, but are there settings on the pc that will allow it to work with line in?
    And, what are my options for doing this wirelessly? Is there any way I can use my wireless router for this?
    Thank you!

    I think you would want an Airport Express
    The Express is designed to work with iTunes, but with the following (free) program you can use the Express to play any PC audio without iTunes: Airfoil Speakers for Windows
    All this will work with any router, wired or wireless. Enjoy!

  • Can we connect a Cisco videoconference system to adobe connect?

    One of our participants wnt to use his own CISCO C20 videoconferencing system as a source for better video quality. Is it possible to connect Cisco C20 with Adobe Connect and if "Yes", what are the technical advices for the connection.
    Best regards,
    Martin

    If you have an on-premise deployment of Adobe Connect you could see if you could configure to the Cisco system to work through the VTC integration, Configure FMG for a video telephony device. However, the Cisco C20 is not one of the supported systems, so it may or may not work.
    If you are on a hosted deployment, then you don't have the above option. You could get the video/audio feed into a computer and display it in the Video pod. This may not improve the video quality as the Video pod is limited to its preset resolutions (up to 240p) and frame rates. You may also need to use DVdriver to get a Windows computer to recognize your video input as a webcam.
    Third option would be to explore using one of the external video pods available here, Adobe Connect | Apps. You will likely need to do some setup outside of Connect to get them to work, but it could be worth exploring. There are two there that may work: TalkingStick and tecRacer VideoPlayer.

  • User can not connect to the AdHoc System on UWL

    Our Production SAP portal uses LDAP to connect to AD.  One of our users is having problems when she tries to get to the Work Overview, it says that the connection to the AdHocSystem failure - Action failed.  This is causing her to not be able to create/maintain substitutes in the UWL.  Any ideas?
    I have connected (temporarily) one of our Sandbox Portals to the Production backend to see if the backend was the problem.  The user was created as a UME user, and there was no problems to get to do the Substitutions.
    Thanks

    Yeah, that info is useless currently. Sorry about that. The App Store is buggy for lots of people right now, so the only option we really have is to get on the computer then to go to the store online.

  • How to connect SAP R/3- System with SAP NetWeaver Portal (2004s)?

    Hello to all,
    sorry, can someone help me? How can I connect SAP R/3- System with SAP NetWeaver Portal (2004s)?
    Thanks and regards,
    Galyna

    Hi,
    In previous link contain this info
    This describes how to connect an SAP R/3 system to SAP NetWeaver Portal using an iView
    1)      Go to System Administration
    2)      Go to System Configuration
    3)      Go to Portal Content (Right Side Panel), open that folder.
    4)      Right Click on Portal Content, a Panel is displayed select "System (from Template)".
    5)      That will display a new view on right side, now select "SAP system using dedicated application server" from
    the existing templates. (Other templates are possible - for example, load balanced or through a SAProuter connection string).
    For this exercise, we'll use the simplest type.
    6)      Choose next
    7)      Give the System Name and System Id (which are mandatory fields) incase you want to give any brief notes
    about the system then give them in the "Description" field.
    8)      Open the Newly Created System.
    9)      Now when you want to create a New System, you have to fill four Properties they are:
    "Connector" - contains basic connectivty details
    "Internet transaction Server (ITS) - if you wish to use SAPGUI for HTML and/or IACs",
    "Web Application Server" - if you wish to access BSPs and/or Web Dynpro for ABAP and
    "User Management".
    You also need at least one "System Alias" has to be defined from the Display drop down menu.
    Make sure you have set end user access in the Permissions drop down menu to all users who need to access the system
    10)  Select "Connector" property, now fill the required fields such as:
    a)      Application Host (should be fully qualified hostname) - Give the R/3 "Application Name",
    which can be obtained from the SAP Logon Pad (check what R/3 system you are using, right click on it , go to the properties,
    it will open a window which has the Application Server Name.
    b)      Logical System Name - Give the logical name as defined in the backend system
    c)      SAP Client - Check the Client in the backend system and give the appropriate number (3 digits)
    d)      SAP System ID(SID)* - Check the R/3 properties and give the check for System ID
    e)      System Type* - Since we are connecting to R/3, select SAP_R3 system.
    f)       System Number - This is a two digit number that you can find in the SAP Logon Pad
    11)  Select "Internet transaction Server (ITS)" property, now fill the required fields like
    a)      ITS Description à Give some Description
    b)      ITS Host Name - Same as "Application Host" of R/3 (when integrated ITS) and should be attached with the
    port number of ITS Server (to get port number detailed description is given below). ex: hostname : port number
    c)      ITS Path - To get the path along with the port number you have to Log on to R/3 system. Use the
    Transaction Code "SICF", it opens a new window go to:
          default_host -> sap -> bc -> gui -> sap -> its -> webgui -> SAP GUI for HTML -> right click on
    that and click "Test Service'. This will open a new window, on the address bar you will find the "port number", and
    the path something like (/sap/bc/gui/sap/its/webgui). Use the path after the port number.
    d)      ITS Protocol - There are two protocols "http" & "https", select the appropriate protocol which is
    visible when you opened "Test Service" window.
    12)  Select "Web Application Server" property , now fill the required fields like
    a)      Web AS Description -> Give some Description
    b)      Web AS Host Name - same as ITS Host Name
    c)      Web AS Path - usually /sap/bc/bsp/sapd)*    
    Web AS Protocol - should be same as the ITS Protocol.
    13)   Select "User Management" property, now fill the required fields like
    a)      Authentication Ticket Type - Since we are not using SSO leave the field
    empty i.e. put in select mode. (Please note that longer term you will probably want to use SSO)
    b)      Logon Method - Select UIDPW.
    c)      User Mapping Type - In case you have administration rights then you choose "admin" or in case you
    just have user rights then choose "user", better go for "admin/user".
    14)   Since all the required fields are filled appropriately now create a System Alias name, this can be done by following steps:
    a) go to Display -> Select "System Aliases" give some Alias Name, let's call it "SAP_R/3"
    15)  Now that System is created we have to create a iView which will display the given Transaction Code.
    16)  Go To "Content Administration".
    17)  Go To "Portal Content".
    18)  Go to Portal Content (Right Side Panel), open that folder
    19)  Right Click on Portal Content, a Panel is displayed select "New" -> iView
    20)  Select iView template, click next
    21)  Select "SAP Transaction iView" from the list of templates available. Click next.
    22)  Give the iView name and iView ID. Incase you want to give any brief notes about the iView then give it in "Description" field. Click next
    23)   Select "SAP GUI for HTML" radio button. Click next
    24)  Now select the system which you have create "SAP_R/3", give some Transaction Code, say SE12 (Dictionary Display). Click next and Finish.
    25)  Now Preview the iView
    26)  You will see a new Window where in SE12 Dictionary Display window is displayed.
    Regards,
    Senthil K.

  • Two BW systems connecting to an OLTP system

    We are upgrading our BW systems(3.5) to  BI 7.0.
    We are planning for a parallel Break-fix path. so we made a copy of our BW dev system(BWS)
    BWS-BWQ-BWP
    BWS2-BWQ2
    BWS2 is a copy of BWS and plan to upgrade it to BI 7.0 .we plan to retire BWS after upgrade is completed. When we try to restore connection for R/3 sourcesystem(DV1), it  gives a message with DELETE and DO NOT DELETE option
    " The connection BB is used in DV1 sourcesystem as a connection BWS to BW
    Do you want to delete this connection in the source system
    The connection is restored after it is deleted successfully."
    If i select "delete" it deletes connection to BWS and restores connection to BWS2, but if i select  "do not delete" it is not creating a connection for BWS2.
    How do i restore connection for BWS2 to DV1 without deleting the connection For BWS to DV1.
    I need to connect BWS and BWS2 to DV1.Please let me know How can we do this?
    If we can have connection for both BW systems to R/3 system, Do you see any issue with Delta loads?

    Did you resolve this? if yes how ? please let me know.
    Thank
    Shaik

  • BW system connecting to multiple ECC systems

    Hi,
    I am new to BW world & has a question to Gurus
    1. Can I connecte a single BW system to source from multiple ECC systems (activley) with out any technical issues ? I am assuming that the multiple ECC systems are pretty much mirror images.
    2. If possible what are the areas ( at a high level) I need to double check to make this happen ?
    Thanks
    Hari

    Hi Hari,
    Yes, you can connect multiple ECC systems to one BI system in one of my project we had more than 20 ECC systems connected to BI Production system.
    How this works is because source system and BI system has got different provisions for that,
    1) For connecting different systems you simply need to create RFC connection between them. After the RFC is formed you can load data from any of the systems.
    How BI system differentiate similar data coming from these systems?
    There is a field called 0SOURCE SYSTEM which is used as Compounding field, or primary key field where ever you have data loading from multiple systems, this field basically contains the 3 char source system ID and is used to differentiate records coming from different source system.
    How delta is managed in this scenario?
    In source system for each data source, a new delta queue is maintained for each target system.
    Regards,
    Durgesh.

  • Omwb can't connect to repository

    Hi
    I download omwb from otn for my Oracle9.2.0.4 on RH Linux9.
    i already create a new repository,and bring up the OEM.Then I run ./omwb.sh,however I found I can't connect to repository.
    username:system
    password:*******
    Host:XXXXX
    Port:1521
    SID:OEMREP2
    Incorrect login information specified.Ensure that the Host,Port,and SID values correct.
    Here is my /omwb/log/Error.log:
    ** Oracle Migration Workbench
    ** Production
    ** ( Build 20050629 )
    ** OMWB_HOME: /opt/oracle/product/9.2.0/omwb
    ** user language: en
    ** user region: null
    ** user timezone:
    ** file encoding: UTF-8
    ** java version: 1.4.2_08
    ** java vendor: Sun Microsystems Inc.
    ** o.s. arch: i386
    ** o.s. name: Linux
    ** o.s. version: 2.4.20-8
    ** Classpath:
    ../lib/boot.jar
    ** Started : Sat Sep 10 22:19:37 CST 2005
    What happens?

    Hello,
    "Incorrect login information specified" means you may be providing incorrect login information :). Check your username, password, hostname, port and sid. Try connecting with the login details from command prompt n try again.
    Observation: I think you are trying to create the repository in the "system" try creating a separate user and create your repository in that one, example "rep_user"
    Regards,
    Srinivas

  • Can't connect to server after binding to domain

    Hey there, I need to join my MacBook Pro to a Windows Domain, I followed all the instructions to set up Directory Access and am able to bind the computer to the Domain, but when I try to connect to server I get the error message: "Can't connect to Server: Directory Services may not be installed on the remote server, they may be turned off, or the URL may have been entered incorrectly."
    None of the reason noted in the error message are true, so any idea of what the culprit may be?
    Thanks,
    Tim

    Anyone? This is really driving me batty - I can not figure out why it won't connect...

  • Quality Center Adapter - Connecting Multiple Solution Manager Systems

    We are running Solution Manager 7/Enhp 1 and Quality Center 10 successfully using the Quality Center Adapter integration. My question is, can we connect multiple Solution Manager systems (i.e. SMP/SMS/SMX) to a single Quality Center server simultaneously? Or is there a one-to-one relationship restriction. Thanks.

    I have answered this question in this post below:
    http://forums.sdn.sap.com/thread.jspa?threadID=2110531&messageID=10962875#10962875
    To quote myself
    Each tie up is based on the logical ports at the Solution Manager end and the relationship between the two entities is between Projects. So if you set up the configuration like you would in a normal scenario and at the right moment, connect the projects in SolMans to the corresponding projects in HPQC, you should be fine.
    Hope that helps.

Maybe you are looking for

  • HP TM2 Keyboard Malfunctioning

    Hi I've been with my HP TM2 for about three years now and it's been the light of my life, but a couple of months ago, just one day out of the blue, the keyboard started to do this really wierd thing. When I type any of the letters in the first row of

  • Linking a G/L account with a Vendor

    Is it possible in SAP B1 to link a default G/L account to a vendor. For example, when processing AP invoices for our phone company I would like to be able to link with the G/L account for communications. This ability would stream line the processing

  • SAP DBM 6 Downpayment Functionality Issues or Problems

    Dear All, Requesting all to share any problem/issue faced in Down Payment Functionlity provided by SAP in DBM 6.0 with cash desk or any. If possible please share solutions for same. Thanks in Advance. Regards, Manan Patel

  • Photosmart Pro B9180

    What do I do with this 40 pound desk weight call a HP Printer? Will HP own up to the fact it made a lemon? Tell me what is being done to fix the many problems with this printer. Anger is a mild  word compared to what I would say. After spending hundr

  • Dropbox keeps reinstalling after each log in...

    I recently acquired Gnome3 and I am running it with Arch Linux.  I updated to a new version of dropbox and when I logged back in I was asked to put in my username and password for dropbox.  The installation wizard started and I installed and synced u