Lion Server network accounts not working on some computers.

Hello all -
I'm currently having an issue with network accounts working on some Macs but not others. I have a Mac Mini and a MacBook Pro. The Mac Mini works fine and I can login and sync my network account with the server just fine. However, I cannot connect to it from my MBP.
When I try and connect I get an error that says "You are unable to log in to the user account "xxxx" at this time. Logging in to the account failed because an error occurred."
If I login through console (by typing in ">console" in the username field) I get an error that says the user does not have a home directory...
I have searched numourous other forums but I have not found a solution that seems to solve this problem. I have unbound and re-bound my client to the open directory and I have restarted file sharing. Neither has solved the problem. I have a feeling the issue originates somewhere on the MBP since I can log in to the Mac Mini without any problems.
Anymore suggestions?

Thanks for your suggestion, SolidWood. Unfortunately it didn't help.
After a 90 minute phone call with AppleCare, this issue has finally been resolved. Here is what the solution was. Turns out it was pretty simple but it took a while to find it.
First we created a test user and left the home folder set to Local Only in the Server App. I was successfully able to login with the test user on both clients but since there were no mobility preferences set, it was pretty basic.
Then, we removed the Users sharepoint from file sharing, turned off file sharing to disconnect any users, and restarted the server. Then we created a new folder on the Server HD with a random name. We chose Darron. We created a new sharepoint in file sharing (with it still turned off), and shared the new folder called Darron. Double click on the sharepoint and scroll to the bottom and check the box that says "Make available for home directories over AFP". Then we restarted file sharing.
Then we opened Workgroup Manager, clicked on the problem user in the left sidebar, clicked on the Home option at the top, and there were three things listed:
     (None)
     afp://servername.com/Users
     afp://servername.com/Darron
Then we removed the Darron sharepoint from file sharing, and found that it was still listed as a home directory under the problem user.
This was the root of the problem. The system didn't know which path to use as the home directory.
Sooooo...
In the server app, we opened the Directory Utility (Tools in the menubar, Directory Utility). Clicked on Directory Editor. Authenticate to the directory using the diradmin login. Changed view settings to match this below:
In the left column, there were two paths listed for home mounts. We deleted both of them, saved changes, and closed directory editor.
Then, we restarted workgroup manager and both paths had been deleted from the users home listings. This was begining to solve the problem.
In the Server App, we recreated the users sharepoint, made it available for home directories, and restarted file sharing and workgroup manager. Now only one path is listed for the home folder for all the users.
This solved my problem of not being able to login on the MBP. The system synced the home folder and all was well. On the Mac Mini, I had to delete the problem account, un-bind from the network server, re-bind, and recreate the account. Now both clients are sycning perfectly and all is well.
Thank God I bought AppleCare! Thanks to everyone else for their help and suggestions.
As a recap, the problem of not being able to login to the MacBook Pro was caused by having multiple paths to the multiple home folders. These rogue paths were added somewhere in the troubleshooting process to try and recreate the home directories before I called AppleCare. To solve this, we had to remove the directory listings from accounts using Directory Editor, remove and recreate the users sharepoint in file sharing. The syncing problem on the Mac Mini was also created when multiple paths were introduced. The system didn't know which files to use.
Taylor

Similar Messages

Lion Server network accounts not available after 10.7.4 update

I installed the incremental update for Server 10.7.3 to 10.7.4, and now my network accounts can't log in. That would be all users of the machine then. How can I fix this?
Unimpressed!

Exact same thing happened to me on my 2010 MacBook Pro, running Lion as well. Updated to 10.7.4 and whammo, no more DVD drive. Tried numerous discs and the computer just mulled over whether it was going to play the discs for a few attempts then spat them out. All the discs I tried were in perfectly good working order.
Just saw this thread, but created one of my own before (https://discussions.apple.com/thread/4026857). Still waiting for some help....

Lion Server DNS service not working for locally created zones. Caching working fine.

OS Lion Server DNS service not working for local zones. Was fine under Snow leopard server but Lion server upgrade has severely broken my DNS and web sites. Zones look fine under Server Admin but keep getting "query failed (SERVFAIL) for xxxx at /SourceCache/bind9/bind9-42/bind9/bin/named/query.c:3921" in the logs. BTW - Server Admin cant seem to see the log file either.
Surely someone actually tested that DNS still worked on Lion?

I upgraded from Snow Leopard Server to Lion Server on day 01. I hit the same issue where, after the upgrade, my Lion Server stopped serving names for my private local domain.
I finally took a few minutes to figure out what was wrong. After turning on debug logging and looking through the logs, I found my particular issue, now resolved.
The issue I had was, when the domain initially was setup when I installed Snow Leopard Server, for some reason it created a zone just for the server (in my case, something like zone "s-01.mydomain.priv"), and a separate zone for all the other machines (zone "mydomain.priv", containing all the private IPs for my local domain). I never messed with it because it worked, but generally I would have put all of them in the same zone.
My zone "mydomain.priv" had a nameserver and mail exchanger entry for my server, s-01.mydomain.priv. I could see this in the Server Admin app on the DNS bubble, Zones tab, mydomain.priv selected, and the General Info panel. This was fine in Snow Leopard. This was failing the zone load in the updated bind for Lion Server, though. The issue was that the "mydomain.priv" zone was referencing the s-01.mydomain.priv server, which was not defined in the "mydomain.priv" zone but rather in the "s-01.mydomain.priv" zone.
My fix:
1. In Server Admin, add the server to the zone "mydomain.priv". I put an A record (Add Machine) in the "mydomain.priv" zone for my server named s-01.mydomain.priv.
2. shut down DNS on the OS X Lion Server (hit the Stop DNS button on Server Admin).
3. edit /etc/named.conf by hand, removing the specialized zones that contianed just the server. In this case, it would be the section titled 'zone "s-01.mydomain.priv"' and the section titled 'zone "3.10.1.10.in-addr.arpa"'. Your in-addr.arpa zone name will change based on whatever your server IP address was. My internal one happened to have s-01.mydomain.priv mapped to 10.1.10.3.
4. Once the specialized zones for just the server were removed, I started the DNS up again. Instead of serving four zones as it had in OS X Snow Leopard Server, it now servers two zones. And, now, it is resolving my local machines for the mydomain.priv zone.
YMMV. I did note that it wasn't totally necessary to do step 3, but I never really understood the need for the specialized domain, and keeping it around would have a copy of data that would just confuse things.
Hope that helps. That's been the only hiccup I've noticed updating to OS X Lion Server thus far.

Mountain lion server network accounts are not mounting network home directory, rather its creating a blank local directory

I have set up a scratch mountain lion server with open directory. copied over old user account directories and added my users that match the directory ids. Currently if a networked user logs into a networked computer, instead of mounting the network home directory, its creating a local home directory. suggestions?
thanks,
Dave

Additional info: it appears that certificates are not working either: setting up ical: "the certificate for this server was signed by an unknown certifying authority."...

Trying to connect IMac to Lion server (network account)

Hello,
     I have been trying to get this to work for a few weeks now. I have 2 Imacs and a Macbook, i am trying to login to a network account. I did the step by step to set up my server. I can screen share and see all the shared folders. I have a network user in the work group, and when i go to users on my macbook, and say join the server, i get host not found, but the server is active.
     My network is a DSL modem ( in bridge mode), then to a time capsule, that is hard wired to my server and one Imac, everthing else is wireless. My time capsule hands out the Ip's, and a DNS server is running on my lion server.
     Am I having a DNS problem, I am not sure what DNS has to go where starting with the time capsule. Should i have my time capsule just server one IP to my lion server and have the server hand out the other IP's over DHCP?
     My goal is to have network user account on my server, and no matter what computer you use, you can get the same information. Then set up mobile account for when my macbook is not on the network.
     I setup profile manager, and tried to push my settings to my account, but it also fails every time.
     I tried to follow apple's doc's on this but I have luck with some things, and now with others.
    I am running lion server on a mac mini server.
Thank you,
     Justin

HI,
my experience is as follows:
1. You have to setup a home folder for network/mobile users with Server.app
2. Create a group for network users with the workgroupmanagement.app from serveradmin tools
3. Create users with correct settings under "preferences" in workgroupmanagement.app, especially "rules"
4. Put the users in the group
4. Set the appropriate permissions to the home folder and share it over the network with server.app
After playing around I could login from a MacBook Pro and synchronize the users library and complete home folder. After testing and restarting the machines (Lion Server is on a Mac Mini) I could relogin with the network/mobile user.
My problem actually is, that I could not login from any other Mac. Everytime the system told me, that there is a fault with login.
Before I want to login with the network/moblle user on another MacBook i logout the user form the MacBook Pro.
No luck :-(
I test it with other users with same settings.
No luck :-(
I integrate the MacBooks in the Computer settings in the workgroupmanagement.app.
No luck :-(
I hope this thread give answers the next days, because I need a working synchronize and account management solution for different users and machines :-)
Cheers
Ishan

Lion Server Network Account loses all created files after logout

Hi,
I am new to Server, I got Lion Server working on a Mac Mini and everything was alright until I added users from existing client machines. I created new Users on the Server App with the same name and passwords as on the existing client machines, logged in as root on the Server and copied the client user home folder contents from an external HD into the User home directory on the Server. After that I ran Batchmod on all the User folders on the server and everything seemed to be working alright, now the only problem is, if you create a file or folder on the desktop it is not there anymore the next time I log back in. The accounts are setup as Network Accounts, and they are available from any computer in the office, they just don't save any settings that have been changed or any files and folders.
I have found the "Convert a local Home into a Network Home" post to late, http://www.afp548.com/article.php?story=20050331212133607&query=migrate%2B
does this sound like a permissions issue, and if so, can I still repair it or is it better to start fresh?
Thank you

I think your problem has a rather simple solution, since all files in a directory aren't modified unless you tell the OS or a program you've installed to.
To keep the external hard drive mounted even when nobody is logged into your server, enter the following into terminal:
sudo defaults write /Library/Preferences/SystemConfiguration/autodiskmount \
AutomountDisksWithoutUserLogin -bool YES
I think your server is looking for the external Hard Drive, but can' tfind it and thus defaults back to the internal HD.

SL bound clients can't logon Lion Server network accounts

Sorry if this has been covered or resolved elsewhere elsewhere, if so please point me in the right direction!
I posted this in a different thread and it was suggested this one would be more helpful.
I've spent all day with a new mac pro with Lion Server installed trying to set up a small network. Created an OD Master (from the Server App) then used WGM to make accounts. From the Server app I'd created sharepoints (where has File Sharing gone in Server Admin?) one of which was enabled to be used as home directories for which I configured back in WGM. I then bound SL clients computers to OD making sure there were no hypens in the computer names and allowed all network users to logon onto the machine as well as adding the Lion servers IP address as a DNS record.
The problem is, I go to logon with the network account and it starts to logon, i.e the icon expands rather than shakes then stops with the not very informative error "Cannot log you on because an error occurred".
The bound clients appear in WGM. The user accounts look ok. I've not enabled SSL on anything. This is really frustrating.
Any help much appreciated.
Regards,
Evan

Sorry if this has been covered or resolved elsewhere elsewhere, if so please point me in the right direction!
I posted this in a different thread and it was suggested this one would be more helpful.
I've spent all day with a new mac pro with Lion Server installed trying to set up a small network. Created an OD Master (from the Server App) then used WGM to make accounts. From the Server app I'd created sharepoints (where has File Sharing gone in Server Admin?) one of which was enabled to be used as home directories for which I configured back in WGM. I then bound SL clients computers to OD making sure there were no hypens in the computer names and allowed all network users to logon onto the machine as well as adding the Lion servers IP address as a DNS record.
The problem is, I go to logon with the network account and it starts to logon, i.e the icon expands rather than shakes then stops with the not very informative error "Cannot log you on because an error occurred".
The bound clients appear in WGM. The user accounts look ok. I've not enabled SSL on anything. This is really frustrating.
Any help much appreciated.
Regards,
Evan

Why would Flex not work on some computers?

I have a Flex app that is behaving strange. On my computer I cannot log into the application via Firefox or IE. Yet many other users can.
What I have is a logon screen where they have to authenticate, then it changes state. But for me, the stat never changes. It's almost like my authentication is wrong, but it isn't because I can log on fine on another computer.
[Bindable]
   private var _sLoginUrl:String = "https://www.myhost.com/scripts/verifyUserCredentials.cfm";
[Bindable]
   private var _xmlLoginStatus:XML;
   private function initApp():void
    }//initApp
   private function authenticateUser():void
      lblStatus.text = ""
      dsLogin.send({username:username.text,password:password.text})
   private function onResult(oEvent:ResultEvent):void
      _xmlLoginStatus = XML(oEvent.result);
     //gets the XML of Aauthentication status
     if (_xmlLoginStatus.pass.text() == "True") {
     //vBoxes are stacked. 0 is first position. selectedIndex 1 is second
     vsMain.selectedIndex = 1;
        lblStatus.text = _xmlLoginStatus.username.text()
        getDeptCredentials.send()
        var username:String = _xmlLoginStatus.username.text()
    //    var password:String = _xmlLoginStatus.password.text()
      else {
       lblStatus.text = "Log-In failed. Please try again."
    }//onResult
]]>

I would suggest starting but using something like Charles Proxey (or any other similar utility you trust) to identify what is being sent back and fourth from the client to the server. You may also want to log steps in you CFC's to a text file to see how far it's getting.
Most of the time when I have seen something like this in my own projects I find it's either network related or I have some funky setting I left in a CFC for testing I forgot to turn on or off.
For example: In one instance I was not able to get a CFC to respond on one system but the one next to it worked fine. I found out that one system ran to one switch and the other system to a second switch and the second switch was having problems and causing enough lag that the connection was timing out. It had nothing to do with my code at all.
Alternatley I often will block certain IP Address ranges in my code so that when in a development environment no system that is not on my Allow list can run certain CFC's. I once spent an hour troubleshooting code only to figure out that I had forgotten to add my new laptop to the allow list.
Might also want to verify there are no firewall issues blocking ports. Windows Firewall is a real bugger at times regarding this. I have seen it turn itself back on after updates.
And if you go through a Proxy server you will want to verify that the Proxy is not caching pages. Especially if you are using CF's Session State Management in any way. Set the proxy to not cache any pages from that particular site.
Regardless though it's best to see what's actually getting sent to and from the server first before trying to troubleshoot. So start with Charles or the Network Monitor if your using Flash Builder.
-Joe

DNS not working for some computers

We have a SRP521W router and is set up with one SSID for wireless. In our office all the computers (5) can connect but only some may get on the internet. I have a laptop I am testing with and it will not connect, wired or wireless.
I found an article relating to flushing DNS, tried that, no luck.
I found another that said I should try setting my DNS to 208.67.222.222 and this worked, internet works fine.
I tried rebooting the DSL modem and router, tried many different things but am not a networking guru so I am just not sure why the DNS is not working for one computer but works for another, connected to same LAN or SSID.
Thanks,
Brad

Though what Don posted is one way to accomplish it, I never add anything to my DNS and it works fine. Windows DNS, in a default installation, will automatically forward to the root (.com, .edu, .gov, etc.). So I always just point my workstations
to my Domain Controller as their DNS and everything works just fine without any additional configuration.
Guess I'm one of those who won't even trust Google for sharing a DNS, particularly when I have never needed to set up any forwarders.
.:|:.:|:. tim

Wrt610n wireless network does not work after firmeware upgrade

Hi
I just updated my Wrt610n hardware version 1 to the newest firmware, it did finish with sucess, I did factory reset reboot and reconfig. But the wireless network does not work , cant connect computers to it. Did downgrade the firmware to the same it was and restore my settings but still wireless does not work. But router works fine with lan. Any suggestions? maybe the firmware tosted the router?
Regards
Stefan

Update -
After last reset and reupgrade with the newest firmware for hardware version 1 I could config the router and connect 2 computers with wireless - but only for about 15 mín - then they lost connection and could not reconnect.
I did then get the newest update for hardeware version 2 - just to try and upgraded with that and got success, and now I have reset the router again and config it and those 2 computers are connected and have been for 1 hour now. So seems to be working - is it okay to have the firmware for hardware version 2 on my version 1 router?
Any thought what is going on - could it be that the other firmware had not loaded compleytle or?

I have 10.7.3 lion on my computers an iMac and a macbook pro plus a new iPod touch, and two older touches, now trying to sync my calendars is not working deletes some events, duplicates others, I want all my calendars to be the same. Any ideas

I have 10.7.3 lion on my computers an iMac and a macbook pro plus a new iPod touch, and two older touches, now trying to sync my calendars is not working deletes some events, duplicates others, I want all my calendars to be the same. Any ideas

Have you tried resetting the SMC ? > Resetting the System Management Controller (SMC)

So my airport extreme recently had some nat/dns issue and in the airport utility displayed a warning about it and to correct it. I wasn't sure what to do so i pressed the resolve icon and now my guest network is not working.

So my airport extreme recently had some nat/dns issue and in the airport utility displayed a warning about it and to correct it. I wasn't sure what to do so i pressed the resolve icon and now my guest network is not working.

Anytime you change networking hardware, it is always a good idea to perform a complete power recycle of your networking components.
I would recommend that you do the following as a minimum:
Power-down the modem, AirPort base station, and computer(s).
Disconnect the AirPort base station from the Internet broadband modem.
While all of the devices are powered-down, perform a "factory default" reset on the base station. This will get it back to its "out-of-the-box" configuration and make setting it up much easier, especially if you use the "Assist me" process within the AirPort Utility. (ref: Resetting an AirPort Base Station or Time Capsule)
After the base station resets, go ahead and power it back down.
Reconnect the AirPort base station to the Internet broadband modem. For the Extreme and Time Capsule, be sure to connect the cable to the base station's WAN (circle-of-dots) port.
Power-up the modem; wait at least 10-15 minutes to allow it adequate time to initialize.
Power-up the AirPort base station; wait at least 5-10 minutes. Note: The AirPort's status light may continue to flash amber after it has intialized. That is because, there may be some additional configuration items necessary, like setting up wireless security, before the overall setup is completed to get a green status.
Power-up your computer(s).
In this basic configuration, the AirPort base station will broadcast an unsecured wireless network with a Network Name (SSID) of Apple Network NNNNNN. Network clients, connected to the base station either by wire or wireless, should now be able to access the Internet through the ISP's modem. Once Internet connectivity has been verified, you can use the AirPort Utility to configure the base station for wireless security and any other desired options. Please post back your results.

If the data network is not available for some time, to get it again we need to restart the phone instead it is not finding the data network instantly. why cant the iphone searches data net work offten if not available. i am totally disappointed with this!

If the data network is not available for some time, to get it again we need to restart the phone instead it is not finding the data network instantly. why cant the iphone searches data net work offten if not available. i am totally disappointed with this!

Still it could not find the data network.it searches for voice network instantly and works too. but even full voice network available, there is no data network.when i restart the phone it could find data network.
Already i reset network settings for two times.

Outlook autodiscover is not working for some users in coexistence

Hi
We are doing exchnage 2013/2010 coexistence
Most everything is ok BUT outlook autodiscover is not working for some exchange 2010 users now that 2013 is in the front!!!. We end up creating the profiles manually. It has affected some but not all the users.
I followed the instructions here but it didn't help.
http://blogs.technet.com/b/tips_from_the_inside/archive/2012/01/11/autodiscover-fails-for-one-or-more-users.aspx
Using outlook 2010, 2013, patches, .... didn't make a difference
Would you please help?
Thank you

Hi
If it is affecting only few handful of users i could suspect a mailbox corruption and would recommend to move mailbox and see the results.
Also you can try below
You need to set the values MaxFieldLength, MaxRequestBytes & MaxTokenSize to below on Exchange 2010 CAS servers as well as Exchange 2013 CAS servers
Path: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP\Parameters
Name: MaxFieldLength
Type: DWORD
Value: 65534
Path: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP\Parameters
Name: MaxRequestBytes
Type: DWORD
Value: 16777216
Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters
Name: MaxTokenSize
Type: REG_DWORD
Value: 48000
Just reboot the servers once its done and you will be good to go.
References
https://social.technet.microsoft.com/Forums/en-US/cc2929ac-4d36-4e84-a567-ce9b3bec1398/http-400-bad-request-on-iis-8-exchange-2013-cu2-on-windows-server-2012-autodiscovery-is-not?forum=exchangesvrgeneral
http://blogs.technet.com/b/kristinw/archive/2013/03/28/recommended-changes-and-enhancements-to-support-exchange-in-an-enterprise-environment-whew.aspx
Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you Check out my latest blog posts on http://exchangequery.com Thanks Sathish
(MVP)

Group Policy not work in some client machine.

Hello All,
Existing environment is AD 2012. gpupdate /force command does not working in some client machine. And it's occur randomly. Error shown about 15-20% of client machine. Please suggest. Hopefully this time get reply from community.
The Error:
User policy could not be updated successfully. The following errors were encount
ered:
The processing of Group Policy failed. Windows attempted to read the file \\example.net\sysvol\example.net\Policies\{31B2F340-016D-11D2-945F-00C04FB
984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
tings may not be applied until this event is resolved. This issue may be transie
nt and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller
has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
Computer policy could not be updated successfully. The following errors were enc
ountered:
The processing of Group Policy failed. Windows attempted to read the file \\example.net\sysvol\example.net\Policies\{31B2F340-016D-11D2-945F-00C04FB
984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
tings may not be applied until this event is resolved. This issue may be transie
nt and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.

Thanks for your reply. basically this error occurs with in same location as well as branch location. i have check event log in AD but not got any specific error. AD health status is ok. AD to AD synchronization also working well. All the client machine running
on windows 7 64 bit and few of them are windows 8.
Please suggest. if you need any event log for analysis i can send you.
Thanks
I recommend you examine the event logs upon an affected client machine. Specifically, look for the surrounding events on that machine (both System, and Application logs), for the hours previous and the hour after.
The time period may vary according to your environment (e.g. what is expected/normal for your environment, your configured GP refresh cycle-time).
e.g., are there network drops, or power drops, or system crashes, restarts at the similar time.
if it's a laptop, is it wireless? Was there a transition from wireless to wired operation?
Is there VPN in use?
If you are able to compare with another machine (I would encourage that), to understand what "normal" looks like in the logs, so that you have some kind of baseline data for comparison.
Other checks, maybe confirm that the machines are updating as required (have the relevant WindowsUpdates etc), and consider if some security/protection/firewall software might be interfering with normal Windows operations.
Also the potential for malware or virus, which can disturb many basic services (ensure a scan is performed and returns clean).
If you have the opportunity for an affected user to contact you urgently when the symptom occurs, check that the gpt.ini file is accessible from their PC.
e.g.: \\example.net\sysvol\example.net\Policies\{31B2F340-016D-11D2-945F-00C04FB
984F9}\gpt.ini
This file is hosted within the replicated SYSVOL share on your DC's, so check that it is accessible.
You might also validate the particular GPO this refers to, and check each of your DC's holds the correct copy of the files for that GPO GUID.
If you open that GPO, and perform a minor change to it (e.g. add a comment), then click Apply, OK, this should cause the GPO contents to replicate an updated version (be cautious, depending upon the nature of that GPO !!!)
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Lion Server network accounts not working on some computers.

Similar Messages

Maybe you are looking for