Linux Clients Unable to Connect to VPN

Hello all,
There are a few linux clients that need to be able to access our OS X VPN server but I have been unsuccessful at setting up a connection. I have enabled PPTP and windows clients can connect just fine, but using the linux network manager, I cannot connect, I just get a 'Connection Failed' message. I have tried both locally and via internet.
Has anyone had success connecting a linux machine to the os x vpn? Any configuration ideas? I can post the vpn logs if that would help.
Thanks
Greg

Greg,
I've never gotten this working either, and I'm surprised how little information I found after hours of googling and reading. Have you made any headway?
-Aaron

Similar Messages

Unable to connect to vpn

Hi, I'm unable to connect to VPN. The error I'm getting is - "The VPN server did not respond. Verify the server address and try reconnecting." I'm sure I am using the correct server address because I tried it on my non-mac laptop and worked fine. By the way, I'm using cisco as vpn client. Hope someone can help me. Thank you.

Where are you getting this error?
When are you getting this error?
Does the network block requests from your area?
You're connecting FROM India, but where are you connecting to?
Do you manage the network? If not, do you have support available?
Do you collect syslog events that you can look at?
Is it an authentication failure or another failure?
Is there Posture Assessments being done? If so, what are they?
Do the logs from monitoring / collection nodes (MNT, CAM/CAS, ETC) show a reason for failure?
Typically this would be something that starts at a Tier I support level and works its way up the chain from there. There are just so many possibilities from the data that you gave us, and so much being left out it's impossible to begin to ascertain what could be amiss.

Client unable to connect to Oracle 10g on linux

I have installed Oracle 10g on an Intel box running RedHat AS 3.0. The database installation was succesful but I am unable to connect to it from the client on my laptop running Oracle 10g client and Winfdows XP Pro. The server ip is 192.168.1.10 and I can ping it from the client:
C:\>ping attila.n3kje.net
Pinging attila.n3kje.net [192.168.1.10] with 32 bytes of data:
Reply from 192.168.1.10: bytes=32 time<1ms TTL=64
Reply from 192.168.1.10: bytes=32 time<1ms TTL=64
Reply from 192.168.1.10: bytes=32 time<1ms TTL=64
Reply from 192.168.1.10: bytes=32 time<1ms TTL=64
Ping statistics for 192.168.1.10:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Here is some info about the 2 environments:
[oracle@attila bin]$ uname -a
Linux attila.n3kje.net 2.4.21-9.0.1.ELsmp #1 SMP Mon Feb 9 22:26:51 EST 2004 i686 i686 i386 GNU/Linux
Server hosts file
======================================================
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 attila.n3kje.net attila localhost.localdomain localhost
hostname output
======================================================
[root@attila root]# hostname
attila.n3kje.net
ifconfig output
=======================================================
[root@attila root]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:C0:9F:1D:0C:C8
inet addr:192.168.1.10 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:13772171 errors:0 dropped:0 overruns:0 frame:0
TX packets:13748842 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1269613311 (1210.7 Mb) TX bytes:4065314800 (3876.9 Mb)
Interrupt:16 Base address:0xecc0 Memory:fe100000-fe120000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:5513840 errors:0 dropped:0 overruns:0 frame:0
TX packets:5513840 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:865454291 (825.3 Mb) TX bytes:865454291 (825.3 Mb)
Client TNSNAMES.ORA
======================================================
# tnsnames.ora Network Configuration File: C:\Oracle\product\10.1.0\Client_1\NETWORK\ADMIN\tnsnames.ora
# Generated by Oracle configuration tools.
ORACLE10G =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.1.10)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = DEV10G)
PRDSRR =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.1.10)(PORT = 1521))
(CONNECT_DATA =
(SERVICE_NAME = dev10g)
Client SQLNET.ORA
======================================================
# sqlnet.ora Network Configuration File: C:\Oracle\product\10.1.0\Client_1\network\admin\sqlnet.ora
# Generated by Oracle configuration tools.
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (EZCONNECT, TNSNAMES)
Server TNSNAMES.ORA
======================================================
# tnsnames.ora Network Configuration File: /u01/app/oracle/product/10.1.0/db_1/n
etwork/admin/tnsnames.ora
# Generated by Oracle configuration tools.
DEV10G =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = attila.n3kje.net)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = DEV10G)
EXTPROC_CONNECTION_DATA =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
(CONNECT_DATA =
(SID = PLSExtProc)
(PRESENTATION = RO)
Server LISTENER.ORA
======================================================
# listener.ora Network Configuration File: /u01/app/oracle/product/10.1.0/db_1/n
etwork/admin/listener.ora
# Generated by Oracle configuration tools.
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = /u01/app/oracle/product/10.1.0/db_1)
(PROGRAM = extproc)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = attila.n3kje.net)(PORT = 1521))
Results from the TNSPING command issued at the client
=================================================================
C:\>tnsping prdsrr
TNS Ping Utility for 32-bit Windows: Version 10.1.0.2.0 - Production on 02-APR-2
004 09:26:11
Copyright (c) 1997, 2003, Oracle. All rights reserved.
Used parameter files:
C:\Oracle\product\10.1.0\Client_1\network\admin\sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP)
(HOST = 192.168.1.10)(PORT = 1521))) (CONNECT_DATA = (SERVICE_NAME = dev10g)))
TNS-12541: TNS:no listener
C:\>tnsping oracle10g
TNS Ping Utility for 32-bit Windows: Version 10.1.0.2.0 - Production on 02-APR-2
004 09:26:38
Copyright (c) 1997, 2003, Oracle. All rights reserved.
Used parameter files:
C:\Oracle\product\10.1.0\Client_1\network\admin\sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP)
(HOST = 192.168.1.10)(PORT = 1521))) (CONNECT_DATA = (SERVER = DEDICATED) (SERVI
CE_NAME = DEV10G)))
TNS-12541: TNS:no listener
C:\>
Trying to connect to the database from the server
==================================================
[oracle@attila bin]$ echo $ORACLE_SID
DEV10G
[oracle@attila bin]$ ./sqlplus system
SQL*Plus: Release 10.1.0.2.0 - Production on Fri Apr 2 12:22:29 2004
Copyright (c) 1982, 2004, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 10g Enterprise Edition Release 10.1.0.2.0 - Production
With the Partitioning, OLAP and Data Mining options
SQL> exit
Disconnected from Oracle Database 10g Enterprise Edition Release 10.1.0.2.0 - Pr
oduction
With the Partitioning, OLAP and Data Mining options
[oracle@attila bin]$ ./sqlplus system@dev10g
SQL*Plus: Release 10.1.0.2.0 - Production on Fri Apr 2 12:23:09 2004
Copyright (c) 1982, 2004, Oracle. All rights reserved.
Enter password:
ERROR:
ORA-12154: TNS:could not resolve the connect identifier specified
tnsping issued at the server
======================================================
[oracle@attila bin]$ tnsping dev10g
TNS Ping Utility for Linux: Version 10.1.0.2.0 - Production on 02-APR-2004 12:3
:44
Copyright (c) 1997, 2003, Oracle. All rights reserved.
Used parameter files:
/u01/app/oracle/product/10.1.0/db_1/network/admin/sqlnet.ora
TNS-03505: Failed to resolve name
What am I doing wrong?
Thanks
Renato

Ok, I was able to succesfully connect to the database from the client. I made the following changes to the sqlnet.ora, tnsnames and listener. Here are the changes I made:
sqlnet.ora
==============================
# SQLNET.ORA Network Configuration File: /u01/app/oracle/product/9.2.0.1.0/netwo
rk/admin/sqlnet.ora
# Generated by Oracle configuration tools.
# NAMES.DIRECTORY_PATH= (EZCONNECT)
NAMES.DIRECTORY_PATH= (EXCONNECT, TNSNAMES, ONAMES, HOSTNAME)
listener.ora
==============================
# listener.ora Network Configuration File: /u01/app/oracle/product/10.1.0/db_1/n
etwork/admin/listener.ora
# Generated by Oracle configuration tools.
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = /u01/app/oracle/product/10.1.0/db_1)
(PROGRAM = extproc)
(SID_DESC =
(GLOBAL_DBNAME = DEV10G)
(ORACLE_HOME = /u01/app/oracle/product/10.1.0/db_1)
(SID_NAME = DEV10G)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.1.10)(PORT = 1521))
tnsnames.ora
===========================================
# tnsnames.ora Network Configuration File: /u01/app/oracle/product/10.1.0/db_1/n
etwork/admin/tnsnames.ora
# Generated by Oracle configuration tools.
DEV10G =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.1.10)(PORT = 1521))
(CONNECT_DATA =
(SERVICE_NAME = DEV10G)
EXTPROC_CONNECTION_DATA =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
(CONNECT_DATA =
(SID = PLSExtProc)
(PRESENTATION = RO)
Here is the new problem!
I start the dbconsole using the folowing command:
[oracle@attila bin]$ ./emctl start dbconsole
TZ set to US/Eastern
Oracle Enterprise Manager 10g Database Control Release 10.1.0.2.0
Copyright (c) 1996, 2004 Oracle Corporation. All rights reserved.
http://attila.n3kje.net:5500/em/console/aboutApplication
Starting Oracle Enterprise Manager 10g Database Control ........................
... started.
Logs are generated in directory /u01/app/oracle/product/10.1.0/db_1/attila.n3kje
.net_DEV10G/sysman/log
When I try and access it from the client I get the following error message:
"The database status is currently unavailable. It is possible that the database is in mount or nomount state. Click 'Startup' to obtain the current status and open the database. If the database cannot be opened, click 'Perform Recovery' to perform an appropriate recovery operation."
What am I doing wrong this time?
Your help would be greatly appreciated
Thanks
Renato

VPN client unable to connect

I am unable to connect to our corporate internet with the client. It tries the primary and the backup addresses and then reports that the client timed out. Our IT is unable and/or unwilling to help troubleshoot. What can I do to find the problem? I am operating inside a local network over a wireless connection.

I too am having trouble maintaining my VPN Client connection.
We have a 515E PIX and Cisco VPN Client 4.8
Users will seemingly randomly loose access to our Network without any obvious reason.
Like today. I'm at home happily working over VPN for 6-hours, then I try to connect another computer up to work over VPN. My signal gets dropped and when I try to re-connect I get the request for Password but then it never connects. I have a few User IDs that I can use and none work.
I did as suggested in the previous post and have attached the Detailed log of one attempt to connect.
Mikka

Airport Card on MacBook Pro unable to connect to VPN networks

For the last year or so (apart from two glorious months at the start of this year) when using an Airport connection, I'm unable to access any VPN networks. I always get an error saying that the VPN server is not responding.
However, if I use an ethernet connection, a USB Wifi modem or an iPhone tethering I can connect without any issues.
The VPN connections started working in January to my utter surprise. I think it may have been connected to the 10.6.6 update, but stopped working again when I did my last update on March 13th. I installed Java 10.6 update 4, iTunes 10.2.1 and Safari 5.0.4.
I'm about to install Mac OS X 10.6.7 to see if it has any effects but I wanted to know if this is a known issue and whether or not there are any solutions to the problem?
Message was edited by: Tinna
Seems like the 10.6.7 update solved the problem.

Hello Oliver,
I would start with removing your Wi-Fi network from your Preferred Network list. To do that, navigate to the Symptom: After restarting or waking from sleep, my computer might not connect to the Internet section in the first article and it will walk you through that. Another thing you can try is creating a new Network Location to see if there is an issue with your current configuration and the steps for that are in the second article.
Wi-Fi: How to troubleshoot Wi-Fi connectivity
http://support.apple.com/en-us/HT202222
Using network locations (Mac OS X v10.6 and later)
http://support.apple.com/en-us/HT202480
Regards,
-Norm G.

Outlook 2010 Client - "unable to connect to retrieve additional data" for some Distribution lists

We have a mix of Outlook 2003, 2007 and 2010 clients in our organization.
Users with an outlook 2010 client are having issues with a number (not all) of our distribution lists.
Issues: When selecting a distribution list in the new message 'to' fiedl, a 'message tip' appears with the name of the DL and 'contains xx recipients'.
However, when attempting to expand the DL (selecting the + sign) the following prompt appears "Cannot perfrom the requested operation. The command selected is not valid for this recipient. The operation failed"
When selecting the DL through the outlook address book the memberlist is empty and has a mail tip "unable to connect to retrieve additional data".
The DL's were all created in a 2003 environment.
We are currently setting up a 2010 environment, and all DL's were created prior to any schema updates etc.
Of note, users experience the issue, but access the list through OWA don't have the issue.

Please also perform the following steps to troubleshoot the issue.
1. Temporarily turn off firewall and antivirus program on the problematic machine for a test.
2. Remove the Outlook profile completely and create a new profile.
3. Login on the same mailbox by Outlook 2010 on another machine to check the result.
If the issue persists, please open Event Viewer and check whether any error message exists. If so, please post it here for research.
Thanks.
Novak Wu-MSFT

Email client unable to connect?

Just in the past couple of days I have been unable to connect to my Gmail and Yahoo email accounts through the email client. I had no problem last week with this and I have neurotically checked the setup information for each email account.
The error I am getting is this: "Unable to connect to server, please try again."
And so I do, but with no such luck.
I am able to connect to WiFi without any problem (I am using my PlayBook to type this out right now).
Anyone know how to amend this problem?

Hi, eillo, and welcome to the Forums!
Me, too! My Gmail account remains stable, however I am tired of having to constantly re-input my Yahoo password.
The Gmail issue is addressed in this thread: http://supportforums.blackberry.com/t5/BlackBerry-PlayBook/Playbook-2-0-cannot-connect-to-Gmail/td-p...
I found some information about the Yahoo e-mail issue in this thread: http://supportforums.blackberry.com/t5/BlackBerry-PlayBook/Google-Apps-and-Yahoo-Mail/td-p/1579171/p...
Unfortunately, trying to address issues with two different e-mail systems in the same thread is confusing. I came across your thread while researching the Yahoo issue. If I can't find another thread related specifically to the Yahoo issue, I intend to start a new thread.
Regards,
Office_BB_Guru

Clients unable to connect and get DHCP - LAP1142N AP and 5508 WLC

Hi,
I have 19 locations, each with 1 or more LAP1142N AP's in FlexConnect mode, AP's are primed using CAPWAP to my 5508 WLC at the datacenter. The AP's join the WLC without issue every time. I have two WLAN's, one guest and one staff, the guest network is open and obtains DHCP from a WatchGuard XTM33 firewall at each of the remote locations. The staff side is WPA2/RADIUS and DHCP is assigned from the WLC. Each AP is assigned a static IP that is not in the DHCP scope. For example: DHCP scope on the branch firewall is 192.168.1.10-250 the AP will be assigned static IP of 192.168.1.1.. The AP's are connected to a HP procurve switch that has a untagged VLAN, the firewall is using the native vlan 1 and so is the AP.
I have been running this network for over a year and it has not had a single issue until the last two weeks. Nothing on the network has changed or has been upgraded.
Now for the issue: The issue I am seeing is that clients are no longer able to connect to the AP and do not get DHCP assigned to them. I am able to get it working, if I remove the static IP from the AP, the AP will reboot, join the controller, then begin working, users can connect and DHCP is assigned from the firewall as it should. However, If the AP then reboots, the AP will join back to the controller but no clients can connect nor do they get a DHCP address. So, I then reassign a static IP to the AP again and it reboots, connects to the controller and clients then can connect and get DHCP.
Attached is a running config from one of the APs
I've found several posts on this topic, in fact the patch of unassigning or reassigning static IP is one that I found. However, I wanted to post this to see if there is any further assistance I can get on this. I am also waiting on my SmartNet to start up and will be contacting Cisco support as well.
Thanks for any help.

Alright, so I finally figured out the issue with this. I had a Mobility Anchor set on the guest WLAN and once I removed that all started working again.
What is Mobility Anchor?
A. Mobility Anchor, also referred to as Guest tunneling or Auto Anchor Mobility, is a feature where all the client traffic that belongs to a WLAN (Specially Guest WLAN) is tunneled to a predefined WLC or set of controllers that are configured as Anchor for that specific WLAN. This feature helps to restrict clients to a specific subnet and have more control over the user traffic. Refer to the Configuring Auto-Anchor Mobility section of Cisco Wireless LAN Controller Configuration Guide, Release 7.0 for more information on this feature.

Hosts on corporate network unable to connect to VPN client

I've got an ASA 5505 set up as an IPSec-VPN server. The VPN client is able to connect okay and can initiate TCP sessions with hosts on the corporate network. But those hosts cannot initiate TCP sessions with the client; the ASA rejects their packets instead of sending them through the encrypted tunnel.
This sounds like a firewall configuration problem. But the ASA is not set up to firewall VPN connections at all, as far as I can tell.
Can anyone explain what's wrong or where I should look?

Thanks for the feedback.
The client is a Mac running OS-X. Firewalling is turned off; there's no trouble connecting to the client when it is plugged directly into the corporate network.
The "no-nat" rules on the 5505 look like this:
access-list inside_nat0_outbound extended permit ip any 10.170.30.0 255.255.255.0
nat (inside) 0 access-list inside_nat0_outbound
Here 10.170.30.0/24 is the IP pool dedicated to the VPN. There are no other NAT-related lines in the 5505's configuration.

Possible to select self-signed certificate for client validation when connecting to VPN with EAP-TLS

In windows 8.2, I have a VPN connection configured with PPTP as the outer protocol and EAP : "Smart card or other certificate ..." as the inner protocol. Under properties, in the "When connecting" section I've selected "Use a certificate
on this computer" and un-checked "Use simple certificate selection".
My preference would be to use separate self-signed certificates for all clients rather than having a common root certificate that signed all of the individual client certificates. I've tried creating the self-signed certificate both with and without the
client authentication EKU specified, and I've added the certificate to the trusted root certificate authority store on the client. But when I attempt to connect to the VPN I can not get the self signed certificate to appear on the "Choose a certificate"
drop down.
Are self signed certificates supported for this use in EAP-TLS? If it makes a difference, I'm working with makecert (not working with a certificate server).
TIA,
-Rick

Hi Rick,
Thank you for your patience.
According to your description, would you please let me know what command you were using to make a self-signed certificate by tool makecert? I would like to try to reproduce this issue. Also based on my experience, please let me
know if the certificate has private key associated and be present in the local machine store. Hence, please move the certificate from the trusted root certificate authority store to personal store.
Best regards,
Steven Song
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Unable to connect to VPN after upgrade?

Hi:
I had a working VPN running on 10.3.9 Server which I could connect to without a problem. Now, from 10.4.7, I cannot connect to it anymore.
I can connect to another 10.4.5 Server though.
I wonder if something has changed in the client side with any of the software upgrades?
In the system log on 10.3.9 I can see the following error:
racoon: ERROR: isakmp.c:1087:isakmpph1beginr(): not acceptable Aggressive mode
kernel: ipfw: 64110 Deny ICMP:8.0 84.218.23.208 82.182.141.81 in via en0
Again, this messages are now, as I have been using this VPN before without a problem.
Thanks in advance!
MacBook Pro Mac OS X (10.4.7)

Hi there.
Have you had any success by stopped and starting the service?
(The VPN service tends to stop working after a reboot -- I have another post out about this topic).
Also, have you checked whether your VPN users are still in the RemoteUsers list for VPN access?
Cheers,
Derek

Unable to connect on VPN

I have a iMac and a MacBook both running OS X 10.9.2. I am trying to use the Checkpoint VPN to connect to work. I am able to connect using my Macbook, but for some reason I just am not able to do it on my iMac. The Checkpoint folks haven't been helpful.
When I look at the logs I get stuff like
"The exclusion subnet is totaly strange to the main subnet.." and
"VNA_TunIF_Create: connect failed No buffer space available", "
VNA_TunIF_Create: Failed to allocate name of interface".
Not really sure what any of this means - I have plenty of memory. If anything the Macbook is ancient and has less memory. Any pointers would make my life infinitley better. Thanks

Hi,
It looks like you did not create the client to gateway VPN in either the RV082 and the RV180W. In order to use the VPN user that you created in that router, you must create the client to gateway VPN inside that router. For example, you will have to configure PPTP VPN which is a client to gateway VPN and create a user in the RV180W. After that, you would set up the Windows default VPN set up. Please make sure that you use the WAN IP address of the RV180W that the client to gateway VPN was created in and use the VPN user that was created in that router as well. One last thing is that our Cisco Small Business routers do not support "Cisco Quick Connect."
I hope that made sense and please keep me posted or feel free to give us a call at 1-866-606-1866.

Unable to connect to VPN intermittenly with error 412

Lately one of my user is having trouble logging on to VPN. It is always getting '412 :The remote peer is no longer responding' error when it cannot connects . I attached the Cisco VPN client log. Anyone got any experience in troubleshooting this kind of problem, pls advice. Thanks for your help appreciate it.

We are experiencing the same thing across some clients. The strange thing is it only occurs from some internet accesses. Others it works just fine with no tweaking. But it is consistently not working at the same locations. I hate to start saying its the broadband router b/c that gets messy with users and it varies too much.
Any input would be appreciated from someone who has either an explanation or solution.
52 06:08:07.135 01/24/07 Sev=Warning/3 IKE/0xA300005E
Unexpected message (Exchange type 6) while negotiating IKE. Message discarded. SA=I_Cookie=7EAD9866581E8CD9 R_Cookie=CB31BEC2C7B9871F

Open directory server crashing every 30 days / clients unable to connect to calendar, contacts server

Hello everyone,
I am running an up to date Mavericks Server which serves exclusively as a calendar and contacts server for about two dozens devices. The server is reachable via DynDNS, however, the public IP hardly ever changes (only once or twice a year maybe). Tried setting the OS X DNS Server to serve "all clients" and "some clients".
For about 6 months (i.e. also under Mountain Lion), I am having a very strange problem. Roughly every 20-30 days, clients will not be able to connect to the server, instead getting a "wrong password" dialog. Restarting the open directory server will help for the next 30 days.
I have tried repairing the database as detailed here, however, the issue persists.
Any help would be highly appreciated!
I would have tried setting up a clean server installation, migrating calendars/contacts manually and re-adding all users by hand, however, I am not aware of an easy way to do so. The terminal command for calendar backup is broken under mavericks (might work with this workaround) and re-adding users manually would apparently involve correcting user UUIDs afterwards in order to match the migrated calendar data. Do you know of a better approach?
Thanks a lot!
DPSG-Scout

Hi Linc,
This looks the most relevant to me:
opendirectory.log
2014-03-11 11:13:09.460675 CET - 333.2628758.2628759 - Client: Python, UID: 93, EUID: 93, GID: 93, EGID: 93
2014-03-11 11:13:09.460675 CET - 333.2628758.2628759, Node: /Local/Default, Module: PlistFile - predicates with 'AND' are not supported
2014-03-11 12:09:00.296514 CET - State information (some requests have been active for extended period):
          Sessions: {
              28 -- opendirectoryd:
                          Session ID: 7BFBA6FE-A968-4399-A129-E3A5945E2A81
                          Refs: singleton
                          Type: Default
                          Target: localhost
          Nodes: {
              43 -- authd:
                          Node ID: 6D0E236D-6DBD-4E8C-BC01-B3F50C2C2D8E
                          Nodename: /LDAPv3/127.0.0.1
                          Session ID: <Default>
                          Refs: 1
                          Internal Use: X
an many more similar ones…
Thanks for your effort!

Client unable to connect AP with MAC filtering

I need some help from you, I found problem that some clients cannot connect to AP( but some client can connect as normal). As I checked from logs, I see a lot of messages as below:
Nov 18 01:13:55.760: %DOT11-4-MAXRETRIES: Packet to client 0023.68be.1c88 reached max retries, removing the client
Nov 18 01:13:55.760: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0023.68be.1c88 Reason: Previous authentication no longer valid
Nov 18 01:13:55.763: %DOT11-4-MAXRETRIES: Packet to client 0023.68be.1c88 reached max retries, removing the client
After that I tried to reload AP and then it can connect as normal but I found the log that it roaming to another AP in the same SSID as log below:
Nov 21 08:52:12.147: %DOT11-6-ROAMED: Station 0023.68be.1c88 Roamed to 003a.99e6.6860
Nov 21 08:54:33.855: %DOT11-6-ROAMED: Station 0023.68be.1c88 Roamed to 003a.99e6.6860
Nov 21 09:04:34.495: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0023.68be.1c88 Reassociated KEY_MGMT[NONE]
Nov 21 09:04:39.097: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0023.68be.1c88 Reason: Sending station has left the BSS
Nov 21 09:04:39.103: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0023.68be.1c88 Reassociated KEY_MGMT[NONE]
Nov 21 09:04:42.309: %DOT11-4-MAXRETRIES: Packet to client 0023.68be.1c88 reached max retries, removing the client
Nov 21 09:04:42.309: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0023.68be.1c88 Reason: Previous authentication no longer valid
Nov 21 09:04:42.315: %DOT11-4-MAXRETRIES: Packet to client 0023.68be.1c88 reached max retries, removing the client
I've check from CISCO document, this problem may be from Radio Interference, so please help to investigate and find out the root cause that why some clients cannot connect to AP at that time and how to prevent this problem occurred again.
Thank you in advance.

Hi @Krish1840 , and thanks for the reply!
Do the pages come out blank when making a copy as well?
I would suggest deleting the printer from your print system, using this document: Uninstalling the Printer Software.
Once you have deleted it, I would suggest verifying and repairing the disk permissions: About Disk Utility's Repair Disk Permissions feature.
I would also suggest running your Apple updates: OS X: Updating OS X and Mac App Store apps
After the updates, I would recommend readding the printer via OS X v10.9 Mavericks: Installing and Using the Printer on a Mac
Good luck and please let me know how it goes!
Please click “Accept as Solution " if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos, Thumbs Up" on the right to say “Thanks" for helping!
Jamieson
I work on behalf of HP
"Remember, I'm pulling for you, we're all in this together!" - Red Green.

Linux Clients Unable to Connect to VPN

Similar Messages

Maybe you are looking for