Can't establish VPN on windows client to OSX server

Hi everyone,
I'm stuck for a while now with a very annoying problem.
I can't establish a VPN connection on a windows client to a OSX Server. It worked fine while we had OSX server 10.6.
We recently updated to 10.8 and got this problem.
I know some of u are now thinking, the solution is: Just don't use windows... But the director of the company i am doing this for
doesn't want to switch to mac.
Also, this problem maybe be related to windows but i hope someone here can help me.
Things i've done:
I've tried PPTP ( didn't work either )
I've tried different users
I've tried adding a rule te regedit in windows ( according to a windows vista kb file for VPN trough NAT devices )
I've tried different authentication rules
In VPN log is Server admin everything goes well until:
pppd[87435]: fatal signal 6
vpnd[104]: --> Client with address 192.168.0.24 has hungup
after this it goes further with some successes.
I hope someone here knows the solution!
Thanks in advance,
Remy
Mac mini server, 10.8.5
server admin 2
( client ) windows 7 & 8
ps. sorry for my bad grammer, i'm dutch..

You could have a look at the following and see if it helps.
http://support.apple.com/kb/HT5078

Similar Messages

Cisco ASA 8.2(2) Lt2p windows client and OSX remote VPN

Having trouble getting windows 7 and OSX to authenticate via VPN to the ASA.
Something is missing or not configured correctly.
In the ASA logs I get this error
ipaa error freeing address
On the client side I get invalid username/password. I am trying to authenticate using our LDAP map to our Active Directory box. (it works with other the cisco VPN just fine)
group-policy DefaultRAGroup internal
group-policy DefaultRAGroup attributes
wins-server none
dns-server value 10.10.0.99 10.10.0.100
vpn-tunnel-protocol IPSec l2tp-ipsec
ipsec-udp enable
default-domain none
group-policy DfltGrpPolicy attributes
vpn-tunnel-protocol IPSec l2tp-ipsec svc webvpn
tunnel-group DefaultRAGroup general-attributes
address-pool IPpool
default-group-policy DefaultRAGroup
strip-group
tunnel-group DefaultRAGroup ipsec-attributes
pre-shared-key Ourprivatekey
tunnel-group DefaultRAGroup ppp-attributes
no authentication chap
authentication ms-chap-v2
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec transform-set samplevpn esp-aes esp-sha-hmac
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set Set_1 esp-3des esp-sha-hmac
crypto ipsec transform-set TRANS_ESP_3DES_SHA esp-3des esp-sha-hmac
crypto ipsec transform-set TRANS_ESP_3DES_SHA mode transport
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto dynamic-map samplevpn_map 1 set transform-set samplevpn
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5 TRANS_ESP_3DES_SHA
crypto map workmap 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map workmap interface outside
crypto map workmap interface backup
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 28800

Thanks for the response Javier, but I'm still getting the same error.
FRWALL# show run aaa-server
aaa-server ADLDAP protocol ldap
max-failed-attempts 5
aaa-server ADLDAP (inside) host 10.10.0.91
ldap-base-dn dc=*******, dc=com
ldap-scope subtree
ldap-naming-attribute sAMAccountName
ldap-login-password *****
ldap-login-dn login@*********
server-type microsoft
aaa-server ADLDAP (inside) host 10.10.0.91
ldap-base-dn dc=n********, dc=com
ldap-scope subtree
ldap-naming-attribute sAMAccountName
ldap-login-password *****
ldap-login-dn asaldap@*******.com
server-type microsoft
FRWALL# show running-config tunnel-group DefaultRAGroup
tunnel-group DefaultRAGroup general-attributes
address-pool VPNpool
authentication-server-group ADLDAP
default-group-policy DefaultRAGroup
strip-group
tunnel-group DefaultRAGroup ipsec-attributes
pre-shared-key *****
tunnel-group DefaultRAGroup ppp-attributes
no authentication chap
authentication ms-chap-v2

Significant difference in response times for same query running on Windows client vs database server

I have a query which is taking a long time to return the results using the Oracle client.
When I run this query on our database server (Unix/Solaris) it completes in 80 seconds.
When I run the same query on a Windows client it completes in 47 minutes.
Ideally I would like to get a response time equivalent on the Windows client to what I get when running this on the database server.
In both cases the query plans are the same.
The query and plan is shown below :
{code}
SQL> explain plan
2 set statement_id = 'SLOW'
3 for
4 SELECT DISTINCT /*+ FIRST_ROWS(503) */ objecttype.id_object
5 FROM documents objecttype WHERE objecttype.id_type_definition = 'duotA9'
6 ;
Explained.
SQL> select * from table(dbms_xplan.display('PLAN_TABLE','SLOW','TYPICAL'));
PLAN_TABLE_OUTPUT
| Id | Operation          | Name      | Rows | Bytes |TempSpc| Cost (%CPU)|
|   0 | SELECT STATEMENT   |           | 2852K|    46M|       | 69851   (1)|
|   1 | HASH UNIQUE       |           | 2852K|    46M|   153M| 69851   (1)|
|* 2 |   TABLE ACCESS FULL| DOCUMENTS | 2852K|    46M|       | 54063   (1)|
{code}
Are there are configuration changes that can be done on the Oracle client or database to improve the response times for the query when it is running from the client?
The version on the database server is 10.2.0.1.0
The version of the oracle client is also 10.2.0.1.0
I am happy to provide any further information if required.
Thank you in advance.

I have a query which is taking a long time to return the results using the Oracle client.
When I run this query on our database server (Unix/Solaris) it completes in 80 seconds.
When I run the same query on a Windows client it completes in 47 minutes.
There are NO queries that 'run' on a client. Queries ALWAYS run within the database server.
A client can choose when to FETCH query results. In sql developer (or toad) I can choose to get 10 rows at a time. Until I choose to get the next set of 10 rows NO rows will be returned from the server to the client; That query might NEVER complete.
You may get the same results depending on the client you are using. Post your question in a forum for whatever client you are using.

Windows client - Linux oracle server SSO through Win2003 DC

Hi,
I'm trying to do SSO with the captioned setting, the outline can be simplified as below:
windows cleint --> Win2003 DC --> Linux Oracle server
Of course, the Linux server would issue kerberos ticket to the Windows client after which successfully authenticates with the Win2003 DC.
I have problem doing test connection for both Windows client & Linux server when connecting to the database. Both with error "ORA-12638: Credential retrieval failed" when testing with Oracle Net manager. Listener & DB were both started.
Platform: Redhat Enterprise ES4, Oracle 10.2.0
The configuration files are as follows:-
SQLNET.ORA
SQLNET.AUTHENTICATION_SERVICES= (BEQ, KERBEROS5)
SQLNET.KERBEROS5_KEYTAB = /u01/app/oracle/oracle/product/10.2.0/db_1/ORACLE.keytab
NAMES.DIRECTORY_PATH= (TNSNAMES)
SQLNET.KERBEROS5_CONF = /etc/krb5.conf
SQLNET.KERBEROS5_CONF_MIT = TRUE
NAMES.DEFAULT_DOMAIN = test.com
SQLNET.AUTHENTICATION_KERBEROS5_SERVICE = ORACLE
TRACE_LEVEL_SERVER=16
TRACE_DIRECTORY_SERVER=/u01/app/oracle/oracle/product/10.2.0/db_1/network/log/
TRACE_FILE_SERVER=server
TRACE_UNIQUE_SERVER=ON
LISTENER.ORA
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = orcl)
(ORACLE_HOME = /u01/app/oracle/oracle/product/10.2.0/db_1)
(GLOBAL_DBNAME = ORCL.TEST.COM)
# (PROGRAM = extproc)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
(ADDRESS = (PROTOCOL = TCP)(HOST = rhedlora)(PORT = 1521))
TNSNAMES.ORA
ORCL.TEST.COM =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = rhedlora)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = orcl.test.com)
EXTPROC_CONNECTION_DATA =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
(CONNECT_DATA =
(SID = PLSExtProc)
(PRESENTATION = RO)
Can anyone advise what's wrong? Thanks in advance.

Sorry for miscommunication..
this is the actual listner information :
LSNRCTL> start
Starting tnslsnr: please wait...TNSLSNR for 32-bit Windows: Version 9.2.0.1.0 - Production
System parameter file is E:\oracle\ora92\network\admin\listener.ora
Log messages written to E:\oracle\ora92\network\log\listener.log
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1ipc
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=ECT-STPPC2316.BLR.INDIA.
CGINET)(PORT=1521)))Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for 32-bit Windows: Version 9.2.0.1.0 - Produc
tion
Start Date 20-DEC-2007 13:32:16
Uptime 0 days 0 hr. 0 min. 0 sec
Trace Level off
Security OFF
SNMP OFF
Listener Parameter File E:\oracle\ora92\network\admin\listener.ora
Listener Log File E:\oracle\ora92\network\log\listener.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1ipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=ECT-STPPC2316.BLR.INDIA.CGINET)(PORT
=1521)))
Services Summary...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
=============
I am using different listner(Listner).
Please let me know if I have to make any configuration at Client Machine.

Can't figure out how to make my OSX Server / AD (magic triangle) work- Please help

Hi there,
I have set up a machine with Mac OS X 10.9.1 and Server.app 3.0.2. I think installation and configuration was made ok (I do have experience with Macs and I am part-time admin for the Active Directory in my organisation). I set up a magic triangle by binding my Mac server to an Active Directory domain. Now, I am not a specialist for this so I bought and used "OS X Mountain Lion Server For Dummies" by John Rizzo, which helped me. I did set up everything, even including AD users to OD groups on the Mac server.
Now, I'm biding a Mac client to my OD server, and trying to log in. Can't do that. Any username I type that is not a local client name does not work. I have tried to use 'username' as a login and also 'DOMAINNAME\username', none of which work. I also tried to create a local network user on my OD server, and even with that username I can't log in on the client.
I did check System preferences / Users and groups :
- There is a green light next to my OD server name
- I checked the "allow network users to log in" and checked that "All users" are ok for login.
Two things that don't seem normal but I can't understand :
- Kerberos seems off on the server (klist in terminal returns nothing and Ticket Viewer.app shows no ticket)
- If I try to specify network users that CAN log in (i.e. not "everyone") I see users in the editor window but can't add them to the list
I'm kinda lost here. Anyone wishing to help?

No reason to be angry as it's in his book on page 112. You possibly did not understand its significance until you'd done it yourself?
In an AD-OD integrated environment (I prefer this to 'Magic Triangle' as there is no triangle as such) there are no users in OD. They're all in AD. You nest AD Users or Groups (best to use groups) into an OD Group and apply managed preferences that way. You could bypass group nesting if you wish and simply create OD Computer Groups instead. Manage the workstations directly. All users admin or not, local or otherwise would have have those preferences applied.
"Are preferences correctly inherited between AD and OD groups and users?"
In my experience they are.
"What if I want users in some AD Groups to be controlled users on the client and users in other AD groups to be admins on the client?"
You can do the first part of the question using the provided Server Tools, PM or WGM. To make users local admins you use a terminal command. You don't want to be doing this for student accounts. To make AD groups administrators access Directory Utility's Advanced Options section in the AD plug-in. Clicking on the Administrative tab should give you the option you may be looking for? Alternatively you could use the command line (man dsconfigad) as there are more settings available using it than there are in the GUI.

Upgrading ARD Client on OSX Server 10.3.9

Hello All -
Have an OSX Server 10.3.9 which has Apple Remote Desktop Client version 1.2.x. How can I get this updatedto at least 2.x? My ARD 3.0 Admin will not work or at least I haven't been able to get it to connect.
Any help would be greatly appreciated.
Thanks,
Acktom

You keep mentioning remotely install. I'm not sure what that means to you. If you have physical access to the machine, you can run the installer from the GUI. Otherwise, over SSH is probably your best bet (using kickstart).
Start here:
http://docs.info.apple.com/article.html?artnum=107837
use the help command to get info on how to install the package. it's very simple.
Jeff

Can't search on connected Windows servers in OSX 10.5.6

Ever since I switched to Leopard, I can no longer search for files on our servers. In Tiger there was an option for "Others" and I could select the server there. Anyone know how?
Thanks GJS

I have the same problem here. Lost functions on my psc 1300 series. I finally found the original install cd for the printer and ran it. The HP DIRECTOR All in One now functions.
I do not know if I should be removing any old drivers or not?
Now I have discovered that my hp laserjet 2100 will not work. Window says software is missing. What to do now is a mystery. I went to apple a looked at operating system sw update and I see that they have just added HP printer driver update. I downloaded the new drivers and still cannot get the 2100 (my main printer ) to work. All this happened since the 10.5.6 upgrade.
Sure could use some help here.
Thanks ...Bill

How can I automatically unmount my Windows partition in OSX?

Hey guys,
I have been having general performance slow down while in OSX since I (partitioned and) installed Windows 7 (onto the iMac below).
A couple of times, when I have been using OSX, I have found that if I unmount the Win 7 partition, then OSX will run faster and better.
Is there any way that I can automatically unmount the partition on startup/login? I do not mind if it is a script or something else I need to do/use, as the performance is becoming rather frustrating.
Thanks, Lib.

Hi,
have a look at the answers in this thread http://discussions.apple.com/thread.jspa?threadID=1984633&tstart=0
For starters, it might be sufficient to boot into WIndows a rename the Windows partition using the WIndows Explorer to something starting with a dot (e.g. .Windows).
OSX usually ignores partitions that start with a dot.
Regards
Stefan

Can you make Sysprep on Windows 8.1 and Server 2012 R2 Prompt for a Computer Name

Hi guys,
Our Windows 7 Unattend.xml has always made Sysprep prompt for Computer Name. I'm struggling to achieve that with Windows 8.1 and Svr 2012 R2.
Firstly: Is it still possible?
Secondly: If so, How?
Thanks

OOBE will only hide pages that contain the answers in the XML. So if you want OOBE to prompt for a computer name, make sure your XML does not contain the ComputerName object.

Are there any workable Windows clients for messages server?

I've just tried Jitsi which looked promising but won't connect.
Video chat required: any suggestions welcome!

Hi,
Many thanks for the reply but there's no mention of video on the Web site and according to WikiPedia video is not available on Windows:
http://en.wikipedia.org/wiki/Comparison_of_instant_messaging_clients#XMPP-relate d_features
I'll keep looking!

Moving .csv file from windows(client) to linux server

Hi All,
I have a .csv file in "D:\Datafiles\Test.csv". I need to move this file to server top "$XXLS_TOP/admin/import/US/" using shell scripting.
Server : XYZ
Login : test_user
Password : password
Can anyone help me on this.I am new to shell scripting..
thanks

Hi,
As already mentioned above, you have 2 major options:
1.samba (lots of docs on the net)
2. ftp (even more docs on the net)
If you decide to use ftp, then here's a starting point:
-install ftp server on your Win machine-
-you can use lftp , which has the ability to read a set of commands from a file
For instance:
[kido@kido ~]$ pwd
/home/kido
[kido@kido ~]$ ls
cacti_backup.tar.gz                    Desktop     ftp       j2re-1_4_1_02-solaris-sparc.sh out   test
cacti_data_query_ucdnet_device_io.xml diskio.tar help.txt net-snmp_devio.xml              perl
[kido@kido ~]$ cd ftp
[kido@kido ftp]$ ls
ftpscript
[kido@kido ftp]$ cat ftpscript
open localhost -u kido,123kido$
ls
get help.txt
bye
[kido@kido ftp]$ lftp -f ftpscript
drwxrwxrwx    2 501      501          4096 Feb 25 2009 Desktop
-rw-r--r--    1 501      501      13137873 Mar 30 19:54 cacti_backup.tar.gz
-rw-rw-r--    1 500      500         34216 Feb 03 2007 cacti_data_query_ucdnet_device_io.xml
-rw-r--r--    1 501      501          4950 Apr 07 08:46 diskio.tar
drwxrwxr-x    2 501      501          4096 Sep 08 15:53 ftp
-rw-rw-r--    1 501      501           144 Jul 30 19:27 help.txt
-rw-r--r--    1 501      501      23023830 May 27 14:17 j2re-1_4_1_02-solaris-sparc.sh
-rw-rw-r--    1 500      500          2568 Aug 18 2005 net-snmp_devio.xml
-rw-rw-r--    1 501      501          8093 Aug 05 15:21 out
drwxrwxr-x    2 501      501          4096 Jun 16 15:38 perl
drwxrwxr-x    2 501      501          4096 Sep 02 13:10 test
[kido@kido ftp]$ ls
ftpscript help.txt
[kido@kido ftp]$ You can modify ftpscript and put any commands you need. Then you can run "lftp -f ftpscript" from cron (for instance). For more details: man lftp.
kido

Limited number of 5 concurrent VPN (ipsec/l2tp) connections to OSX Server

We've configured OS X 10.6 Server on XServe to accept VPN connections either via PPTP or via IPSEC/L2TP using a PreSharedKey.
When multiple clients try to connect using IPSec/L2TP, we experience problems as soon as 5 users are connected. No additional ipsec/l2tp connections can be created until one of the 5 existing connections is terminated, but then a new connection can start immediately.
Sniffing with tcpdump, the following can be seen on the server side:
09:24:45.349541 IP clientIP.isakmp > serverIP.isakmp: isakmp: phase 1 I ident
09:24:45.354978 IP serverIP.isakmp > clientIP.isakmp: isakmp: phase 1 R ident
09:24:45.358233 IP clientIP.isakmp > serverIP.isakmp: isakmp: phase 1 I ident[E]
09:24:45.365359 IP serverIP.isakmp > clientIP.isakmp: isakmp: phase 1 R ident[E]
09:24:45.367222 IP clientIP.isakmp > serverIP.isakmp: isakmp: phase 2/others I oakley-quick[E]
09:24:47.365936 IP clientIP.isakmp > serverIP.isakmp: isakmp: phase 2/others I oakley-quick[E]
09:24:50.365799 IP clientIP.isakmp > serverIP.isakmp: isakmp: phase 2/others I oakley-quick[E]
The last lines are repeated several times, until the connection attempt times out.
When using PPTP connections, we don't experience these problems, and in addition PPTP connections can even be created when 5 ipsec/l2tp connections are already established.
Does anyone know if there is some kind of limitation for the number of concurrent ipsec/l2tp connections built into OS X server? So far, we have not seen anything like this in the docs.

Ok, IMAP server almost universally allow multiple connections. Thunderbird as you would have observed uses 5 if they are available. As Airmail suggested, iphones just use more and more until they exhaust the available connections. There is no set maximum option.
However there are other things that can consume connections and some may surprise you.
Anti spam tools such as mail washer
Anti virus programs in their anti spam or anti phishing roles
Web mail.
The wife sharing the same account on her laptop.
That is from the top of my head. So could any of those apply.

VPN no longer accessible after OSX Server 4 upgrade

I was using mavericks server on a mac mini and I had the vpn working perfectly for l2tp. I recently upgraded to Yosemite server and now I can no longer connect to my vpn. Testing internally I can see that the port 1701 is not open on the mac mini. Any one else have a similar experience when upgrading? Any idea how to open the port? The default osx firewall is off, so that is not interfering, but I can't figure out why the port is not open. Below is the results of a port scan I ran on the server from within my internal network. My setup hasn't changed since before it was upgraded, all the configuration is the exact same.
Port Scan has started…
Port Scanning host: 10.1.1.225
Open TCP Port: 22     ssh
Open TCP Port: 53     domain
Open TCP Port: 80     http
Open TCP Port: 88     kerberos
Open TCP Port: 106    3com-tsmux
Open TCP Port: 311    asip-webadmin
Open TCP Port: 389    ldap
Open TCP Port: 443    https
Open TCP Port: 445    microsoft-ds
Open TCP Port: 464    kpasswd
Open TCP Port: 548    afpovertcp
Open TCP Port: 625    dec_dlm
Open TCP Port: 631    ipp
Open TCP Port: 636    ldaps
Open TCP Port: 749    kerberos-adm
Open TCP Port: 1640   cert-responder
Port Scan has completed…

Hotplugging is off. Both old and new xorg.conf are at http://pastebin.com/m23c8ea46
Not sure which fdi files to look for, but I've never made any changes to them.

Windows Client and ldap

How can windows client use OSX leopard server open directory? How can windows client connect to osx server contact address directory? Ical server work ok with windows mozzila thunderbird(lightning) but cannot select name to invite form osx server.
pls help me.......
thx

Mathieu,
Take a look at the user guide for NAM -
http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/administration/guide/ac04namconfig.html
You will see the protocols support like GTC that should allow you not to have to deploy certs.
Thanks.
Tarik Admani
*Please rate helpful posts*

Adding a windows client to a sun one Directory server running on Win 2000

Hi,
I am a newbie to sun one directory server but i am familiar with windows active directory.
I have followed the instructions and installed Sun One Directory Server on Windows 2000 Server using a typical setup and create a domain and also created some users in that domain.
The next thing i wanted to do was to add a windows 2000 professional desktop on this domain and login with one of the user accounts. I tried to adding the computer to the domain via the "My Computer->Network Identification->Properties->Domain" option and gave the domain name as the one i created on the Sun One Directory Server, but i get an error saying that domain was not found.
Am i missing something here. Do i need to install some client piece on the windows 2000 desktop to add the box on the sun one domain and login in as one of the users.
Any help will be deeply appreciated?
Thanks,
Raj...

yes, you can use samba for a windows client to login to ldap
http://www.samba.org/samba/docs/man/Samba-Guide/happy.html#id2536158
, but for windows XP clients you need to tweak the registry
http://www-jerry.oit.duke.edu/linux/docs/samba/winxp_client_registry_edit

Can't establish VPN on windows client to OSX server

Similar Messages

Maybe you are looking for