Client Unable to Log In

I work at a school and am trying to test out Leopard on clients before upgrading the school's computers this summer. However, clients are unable to log into their OD Accounts on the Leopard machines. My server is currently running Tiger, but hopefully THAT isn't the problem.
Some more info:
- I do not get a simple shake; it reports "could not log into user account X at this time because an error occurred" when I attempt to log in.
- In Directory Services on the client, everything appears to be hunky-dory and I get a green light, same on the login screen.
- DNS appears to be functioning correctly, I have run hostname, changeip, nslookup, etc and everything appears to be fine, my server ip and hostname resolve to each other correctly.
- I am able to "Connect to Server" and access accounts via AFP without any problems.
- I am not using Kerberos for authentication.
- All other clients(Panther, Tiger) are able to log in properly.
Any thoughts? Or other info that might be useful?
Thanks!

I'm having a similar problem with 10.5.2 Leopard server and client -- no Tiger involved.
I have the green light on the login screen and am able to log in as an OD administrator, but regular OD users are rejected with a login window shake. I never specified any home directories because they were auto-generated on machines locally when I logged in with the OD administrator.
Apple phone support were able to duplicate my problem and had me do an Enterprise Data Capture. Apple engineers were also able to duplicate my problem. Here is some of what phone support emailed me:
+I got a reply from engineering. They said they were able to duplicate the issue with a 10.5 up to a 10.5.2 client with no home directory specified. The only current workaround is to set up an automount location for home directories and specify a home location place for the users. The clients do not have to be bound to the server, they just need to have a home folder directory specified.+
+Engineering is aware of the issue and are working on it. For now this is the only workaround we have.+
I haven't had a chance to try this Apple workaround, but maybe it will help you.

Similar Messages

Unable to log in in Client PC

Hi Experts..
We currently installed SAP in the Cleint PC. Upon log in, the system was nos able to open SAP. Error message is " [Miscrosoft SQL NAtive Client] Unable to lcomplete og in due to delay in opening server connection.
Can someone help me why this error occured? Hoping for prompt response.
Thanks.
Sandra

Hi
I hope it SQLSTAT 08001 error
then just download the exe from below link
[http://www.microsoft.com/downloads/details.aspx?FamilyId=39472EE8-C14A-47B4-BFCC-87988E062D91&displaylang=en]
if u remember the error code then please let me know.
Thanks
Kevin

Unable to log in

My enviroment is ERP6.0/Oracle 10.2.0.2/Solaris 10
I just done a system copy which concluded without errors
however I'm unable to log into one client. The message name or password is incorrect (repeat logon) results. I can succesfull loginto other clients.
Kindly assist
Andale

Message is Clear
name or password is incorrect (repeat logon)
You can activate emergency User SAP* .
Regards,

Unable to log in user at this time / opening up all ports

I've got a lion 10.7.3 server and several Lion client boxes all attached via ethernet to an airport extreme.
I've got a bona fide certificate that seems to have installed correctly, and the client is talking to the open directory server
Without fail, I get a message "unable to log in the user at this time" on each of the clients...
UNLESS I open up all ports on my airport extreme to the server.
I've tried opening individual ports for AFP, profile manager (1640, 2195), open ldap (389, 636) and even kerberos (88). Even with all of these open, it still doesn't work. I have to open up everything to get the error to go away - then the users can log in just fine.
Note, I'm logging in from the local network to a server on the local network, so this just seems bizarre.
I don't have the logs on this computer, but I recall that the error was occurring when it tried to mount the home directory, after authentication. It was an error 64 from homedirmounter (if memory serves).
Any thoughts on what port I'm missing that might be causing the error?

3659 is the SASL port used by the password server, so that makes a certain amount of sense.
However, I still maintain that if your network is configured in the way I'd expect, the base station shouldn't be relevant. The clients should be connecting on a LAN-to-LAN basis so the firewall/filter in the base station shoudn't be in play.
Given what you say, I suspect you've misconfigured your network - probably at the DNS level and you're not running private DNS for your LAN, which would force the clients to connect through the public address. The risks and downside of this approach are numerous - not least of which is the fact that you ARE exposing your server to the general public (including all the less-than-honourable people out there). On that basis there is a risk and i'd look to close that soonest.
You should have a private DNS server running on your LAN that knows the private network addresses of your servers and clients. In this way any client should be able to connect directly to the server's LAN address, bypassing the public interface on your base station. I suspect that if you perform a DNS lookup on your server's hostname you get back its public address, right?

"Unable to log in to the user account"

I'm having a problem I'm hoping one of you may have come up against and
solved. We have two Mac OSX.4 servers - one a login server, the other
contains the student Homes folders. Now when a student who has an account
from last year logs in, a message says "You are unable to log in to the user
account "username" at this time. Logging in to the account failed because an
error occurred. The home folder for the user account is located on an AFP or
SMB server. Contact your system administrator for help."
It seems there is a problem with the hand off from the login server to the
data server. I can connect to the data server through Connect to Server
while logged on as admin, so the server is accessible on line. I double-checked the Sharing info of the shared points and they are set correctly. Also, when I run Server Monitor, the stats summary for both servers says "waiting for response."
Any ideas? Thanks!

Mike
Server Monitor is an application that monitors XServe hardware providing feedback for the administrator. It has nothing to do with the Server Operating System. If your trying to use it on anything other than an XServe all you'll see is "Waiting for Response" all day long.
If your hardware is an XServe then you need to use either localhost or the server's loopback address (127.0.0.1) in the name field followed by the default admin's account's password.
+"The home folder for the user account is located on an AFP or+
+SMB server. Contact your system administrator for help"+
This error is usually down to (but not always) a DNS/DHCP issue or some other obscure network related issue affecting DNS. What does the logs say server and client side when the log-in fails?
Its possible the affected user no longer exists as a principal? Does the same thing happen to this user regardless of which client computer is used? You could search the schema using dscl from a client to see if the affected user is listed in the LDAP database? Alternatively you could issue:
sudo kadmin.local -q list_principals
On the server itself. If the affected user is not listed but exists in WGM then review the password type. It's possible its been set to Crypt? You could delete the user and re-create the account again and re-locating the home folder and trying again. It's also possible the student's home folder has developed a problem? Does the 'jiggle' and error occur immediately or after a slight delay? Do you have a strict Password Policy in place? Sometimes problems can develop with the Password Policy (it does get logged) that affects single accounts only.
You could try and create a completely new account and home for the affected user. Transfer the data from the old home propagate default permissions and go for a log-in again. Does it work now?
I'm assuming the two servers in question are in a Master/Replica relationship?
Tony

You are unable to log in to the user account at this time

I am facing this problem for some time now. Can anyone give some hints?
By the way. Excuse me for my English. I am not a native speaker.
I have a MacMini with Snow Leopard Server (10.6.7 since yesterday) wired to two iMacs (10.6.7), two PC's running Windows and a Time Capsule/Airport (7.5.2) which is wirelessly connected to a MacBook Air (10.6.7), iPad and iPhone.
The PC's use file sharing (SMB) which works fine.
The Server has some network accounts. Home dir is on the server.
At one iMac, I can log in to a network account. E-mail, iCal on Server, sync with iPad and iPhone. Works fine.
At the second iMac, I can NOT log in to any network account. Window shakes, saying "You are unable to log in to the user account at this time" and "Logging in to the account failed because an error occurred". In Terminal window, I can reach /Network/Servers/do.main.name/Users. Using the Finder, I can access all my files. If I shut down the first iMac, I can log in.
At my MacBook, I can not log in to my network account. In Terminal window, I can Not reach /Network/Servers/do.main.name/Users. I get "Users: Host is down". But using Finder, I have access to all my files. Shutting down both iMacs doesn't help. Airport settings see to be correct.
Where do I have to look. On the Server side? Using Server Admin and Workgroup Manager (from any client) I can not see anything strange. In WGM, multiple login for the network accounts is enabled. I even have Guest Access enabled for AFP (both in the sharepoint and in AFP settings).
Anyone?
Gr. Barend

Solved.
see: http://discussions.apple.com/thread.jspa?messageID=13288063&#13288063
Gr. Barend

You are unable to log in...; Network Home directories; 10.4 & 10.5 Servers

I have a solution!
Note: this is a new post because all previous posts dealing with this topic have been archived, MANY without an answer.
Problem:
Users with Network Home directories can't log in. After entering their correct username and password, the following error message appears:
"You are unable to login to the user account 'username' at this time. Logging in to the account failed because an error occurred."
Problem occurs with v10.5 Leopard client attempting to login to a Network Home directory hosted on a v10.4 Tiger server.
_Significant Troubleshooting Symptom:_
Client mac Console log (all Messages) contains the following entry at the time the user attempted to login to their Network Home directory:
authorizationhost[509] ERROR | -[HomeDirMounter
mountNetworkHomeWithURL:attributes:dir:Path:username:] |
PremountHomeDirectoryWith Authentication( url=afp://server.example.com/Homes, homedir=
/Network/Servers/server.example.com/Volumes/ServerHardDisk/Homes/username,
name=username )
returned 2
_Computing/Network Environment:_
v10.5 Leopard server doing: DNS; Open Directory with Kerberos for Single Sign-On; AFP for half of all users' Network Home directories.
v10.4 Tiger server doing: AFP for the other half of the Network Home directories. Also, note that Open Directory is not running on this server, BUT IT IS CONFIGURED (using Server Admin) as "Connected to a Directory System" and has joined the Kerberos realm on the v10.5 Leopard server.
v10.5 Leopard clients.
Solution:
v10.5 User Management manual
http://manuals.info.apple.com/enUS/User_Managementv10.5.pdf
says share points for Network Home directories have to have Guest Access ENABLED. See step 5 on page 117 and step 12 on page 118. Note that these are two different settings, but seem consistent with each other.
I had followed/complied/set Guest Access according to steps 5 (page 117) and 12 (page 118) on BOTH the v10.5 Leopard AND the v10.4 Tiger servers. The solution that allows users to log on normally is:
Uncheck/disable Guest Access (as set in step 12 page 118) for the v10.4 Leopard server only. Leave "Share this item using AFP" checked. Uncheck "Allow AFP guest access."
The above worked for me. Your milage may vary. If anyone knows how to report this to Apple for fixing in the server software and/or clarification in User Management manual, please do. If anyone knows that this solution "breaks" other stuff, please post back.

Other posts that dealt with this same issue and other potential solutions:
http://discussions.apple.com/thread.jspa?messageID=5700241&#5700241
http://discussions.apple.com/thread.jspa?messageID=5784186&#5784186
http://discussions.apple.com/thread.jspa?threadID=1215039&start=0&tstart=0
http://discussions.apple.com/thread.jspa?messageID=9204496&#9204496
http://discussions.apple.com/thread.jspa?threadID=1522353&start=0&tstart=0
http://discussions.apple.com/thread.jspa?messageID=10226660&#10226660

Crystal Reports Server 2008 trial install - unable to log into CMC

Hi,
I have been looking for a way to host my existing Crystal XI reports on our in house web application rather than using a thick client application with cview. I was told that the options were Crystal Reports Server 2008 or Visual Studio 2008. I have downloaded trials of both and am currently testing.
After installing Crystal Reports Server 2008, including MySQL DB and Tomcat web server, i am unable to log into any of the applications with the error that:
Error: Server SCOTTPC:6400 not found or server may be down (FWM 01003) null
After seeing this i checked the services on my test machine and found that the Server Intelligence Agent was not started. So i tried starting it and recieved the generic windows message:
Service on local computer started and them stopped. Some services stop automatically if they have no work to do ... etc
After multiple reboots and reinstalls i am still unable to use any aspect of the application as i am unable to log into the CMC as the server is down. Now i am new to Crystal reports and web servers so have a very limited knowledge of whats going on here - i am primarily a DBA. From what i can tell MySQL does not even appear to be installed but i cannot be sure.
Any suggestions?

ok... after research it seems a DSN has not been created.
Also when trying to start the server intelligence service i see the following in the application event viewer:
[Node Name: SCOTTPC]
[User Name: SYSTEM]
Server Intelligence Agent has failed to initialize because the bootstrap file C:\Program Files\Business Objects\BusinessObjects Enterprise 12.0\win32_x86\_boe_SCOTTPC.bootstrap is missing information about the CMS cluster. Please restore your bootstrap file from your backup.
i have recreated the bootstrap file but still get the same error.
i have SQL Server 2005 installed on this rig as well - could this be causing the issue? Would it be better for me to integrate this to SQL Server rather than using the MySQL DB that comes with Crystal server 2008?

VMware SQL 2008R2 bcp error - SQLState = 08001, NativeError = 0 Error = [Microsoft][SQL Server Client 10.0] Client unable to establish connection due to prelogin failure

Can someone help me resolve this error? Thanks
Windows Server 2008 R2 Standard SP1 64-bit - SQL Server 2008R2 Standard 64-bit
VMware vCenter Server Version 5.1.0
SQLState = 08001, NativeError = 0
Error = [Microsoft][SQL Server Native Client 10.0]Client unable to establish connection due to prelogin failure
bcp program:
bcp SYM.dbo.ACCOUNT in "D:\Data\SQLExtract\EXTRACT.ACCOUNT" -f"D:\Data\SQLCommands\FMT.ACCOUNT" -S DEV-DATA\TEST\ -T -oSYMLOAD.LOG Type SYMLOAD.LOG >> SYMLOAD.LOG.CUMULATIVE
The bcp program executes successfully on a local instance of SQL Server.

The error has nothing to do with BCP as such, but it is a connection problem. That is, for some reason you cannot connect to your instance from the VM. I would exect that you face a similar problem if you tried SSMS.
It could be a firewall issue, but prelogin suggests that you reach the instance. But possibly you don't come far enough for the login failure to be recorded. Possibly the instance is not configured to audit login failures.
The message you would see would be similar to
2010-08-18 14:11:30.91 Logon Error: 17809, Severity: 20, State: 3
Possibly followed by a a line that details the message. The error number may be different.
Erland Sommarskog, SQL Server MVP, [email protected]

OD Master/PDC, 10.4.11, why xp clients unable to locate domain controller?

After a migration/upgrade from 10.3.9 to 10.4.11 Server, windows XP clients are intermittently unable to log in to or even bind to the PDC running on that server.
I did a clean format and install from the 10.4 media, choosing the standalone server type, and applied all the Software Updates, I got forward and reverse DNS working for my zone, then I followed the instructions at http://www.afp548.com/article.php?story=20050615173039158 to move my OD from a working 10.3.9 server to 10.4.
This server goes against the usual recommendations, as it provides DNS, OD master, PDC and file services to 32 clients all in the same subnet, 20 running Windows XP SP2 and 12 running OS X Client 10.4.x or 10.5.x.
File services and various other users of the OD/LDAP, for example Wildfire Jabber/XMPP server and Apache2/LDAP running on a separate Linux server, are able to authenticate against the new 10.4.11 OD.
However, at this point the symptoms become intermittent approx. 40% of the Windows XP clients were unable to log in with various domain accounts, yielding errors of the form "Unable to find domain FOO". If I remove a client from the domain by joining it to WORKGROUP and rebooting, then try to join FOO again, I'll get an error, "Unable to locate Domain Controller for FOO..."
The set-up:
My server's FQDN is myserver.foo.example.com
The server's DNS is authoritative for the 10.10.10.0/24, foo.example.com zone and I have the trailing dot's in the right places, so ping myserver.foo.example.com, ping myserver, and ping 10.10.10.10 (server's example IP from the foo.example.com zone) all work correctly.
The DHCP server for this vlan is providing my DNS server to the clients, but is providing no netbios server. The XP clients are all set to use the DHCP server setting, which, according to the TCP/IP Advanced Settings panel, means that they'll revert to netbios over tcp/ip since no wins server is specified.
In Server Admin->Windows->General:
Role: Primary Domain Controller (PDC)
Description: FOO Domain at example.com
Computer Name: myserver
Domain: FOO
Server Admin->Windows->Access:
Allow Guest Access: Check
Client Connections: Unlimited
Authentication: NTLMv2 & Kerberos, NTLM, and LAN Manager: All check
Logging->Log Detail: High
Advanced->Code Page: Latin US
Services: Workgroup Master browser and Domain master browser: check
WINS Registration: Off
Homes: Enable virtual share points: check
Should my Windows service on 10.4.11 be providing WINS or not? If so, should the DHCP server be set to point the clients to it? If not, how do the XP clients reliably resolve the FOO domain?
Why did all these XP clients work fine with a 10.3.9 Windows PDC but don't work with 10.4.11?
Another strange point - I can use the XP-side 'net view' command to poke around and things look reasonable. I.E. even the clients that aren't joined to the domain and can't locate the domain controller will return sane results for 'net view /domain:FOO'.

The new PDC does use the same domain name as the old PDC, and the SID mismatch is at least partially to blame. After I'd performed the upgrade and confused the windows clients, I saw the advice on using samba's net command to duplicate the old PDC's SID to the new PDC. Maybe someday I'll have the opportunity to try that.
I resorted to removing all the XP clients from the domain and re-joining them. The XP clients were still able to contact the domain intermittently. I used various command-line tools on the XP side, including the built-in net command as well as some others I downloaded such as the quite useful http://www.joeware.net/freetools/tools/findpdc/index.htm, as well as the client-side error messages during the domain join attempts and the messages in the Event log, to determine that the clients couldn't find the domain.
The XP client TCP/IP settings state that the clients will revert to using netbios if no WINS server is specified, but that clearly wasn't working reliably, so I just enabled the WINS server on the PDC, told the DHCP server to hand out its address for the netbios-related options for that subnet, rebooted the PDC, waited a while for things to settle out, and now all the clients can reliably find the PDC.
I still have no idea why the WINS-less set-up worked in 10.3 server but didn't work in 10.4 server, but believe me, I'll remember it now!

When I try to log-in to CC-Client I get logged-out

Since few days I'm unable to log-in into CC-Client.
I start the CC-Client, enter my username and password. As next I get a notification that I was logged out. What am I doing wrong? This problem causes that I'm unable to synchronize my settings too.
I run the CC-Client as normal user with restricted rights.
If I run the CC-Client with administrator rights everything is fine. But why is this needed? It worked for a long time without administrator rights and I got the prompt to log-in with administrator rights only when an application was installed/updated.

Sign Out When Sign In http://forums.adobe.com/thread/1450581?tstart=0 may help
-and http://helpx.adobe.com/creative-cloud/kb/unable-login-creative-cloud-248.html
or
Chat Now button near the bottom for Activation and Deactivation problems may help
http://helpx.adobe.com/x-productkb/policy-pricing/activation-deactivation-products.html

ZCM 11 : Unable to log onto the WIRC

Hi,
We recently switched from Zenworks 6.5 to Zenworks 11, i just installed the reporting server a couple days ago everything works fine from the ZCC, i can connect to the infoview without any problem but when it comes to login to the Web intelligent rich client, i am just unable to log on it, every possible combination that i use gives me credentials error which are good because i am logged in the ZCC with the same account/password. As there are very little documentation about this in the novell documentation, you guys are my last hope to make this work.
So we're using an LDAP user source so at the authentication i chose the LDAP. As for system this is where i am really not sure about what to enter there, i tried a couple of things like our server name, zone name, zenworks but all of them did not work. If anyone could point me in the right direction i would be thankful
Thank you,
Pier-Olivier Plante

poplante,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

Some accounts on iMac unable to log into Gmail (OS X 10.6.4, Safari 5.0)

I have 5 accounts configured on my Intel iMac.
After upgrading to Snow Leopard (OS X 10.6.4), some of the accounts are unable to log into Gmail directly from a browser (not using the Mac mail client). It seems to time out. These accounts were not previously using the Mac mail client.
The accounts that previously used the Mac mail client can still successfully retrieve their Gmail via the Mac mail client, and they can still log directly into Gmail from a browser also.
Operating system: OS X 10.6.4 (Snow Leopard)
Program and version you use to access Gmail: Safari 5.0
Your antivirus software (e.g. Norton 2007): None
Any extensions, toolbars or plug-ins: None

Hi,
Your antivirus software (e.g. Norton 2007): None
I hope that means you do not have Norton a/v software installed.
For Gmail. From the Safari Menu Bar click Safari/Preferences then select the Security tab. Click: Show Cookies. Delete all Gmail related cookies. Relaunch Safari.
If you still can't login to Gmail, open Keychain Access (Applications/Utilities). Select Passwords on the left. Delete the Gmail keychain.
Relaunch Safari. Login to Gmail as you normally do with your user name and password. When prompted, click Yes.
Carolyn

10.5.4 client can't log on to 10.5.4 server

I get this message when trying to log in using a network account. "You are unable to log in to the user account "test1" at this time. Logging in to the account failed because an error occurred."
I have set up the Directory Utility on the client and the server shows as reesponding normally.
The server is set up to auto create home folders and has done for the 2 test users i have created.
I'm not sure what else to check. Any help greatly appreciated.

Oops, While playing around I had restricted the service access to just 2 accounts that were not the ones i was testing network logons from. doh!

Can anyone help me with Magicjack? after I purchased US number I am unable to log in on my Iphone, I keep getting an error "YOUR DEVICE IS NOT ON THIS ACCOUNT" I contacted MJ support but they are very much useless and dont know how to fix it!

can anyone help me with Magicjack? after I purchased US number I am unable to log in on my Iphone, I keep getting an error "YOUR DEVICE IS NOT ON THIS ACCOUNT" I contacted MJ support but they are very much useless and dont know how to fix it!

There's a whole lot to read in your post, and frankly I have not read it all.
Having said that, this troubleshooting guide should help:
http://support.apple.com/kb/TS1538
In particular, pay attention to the mobile device support sections near the bottom, assuming you have already done the items above it.

Client Unable to Log In

Similar Messages

Maybe you are looking for