OD client can no longer log in

I have a lab of 10.4.9 computers, all log in to an OD server. All has been fine for a year now, except that one suddenly would no longer log in. Any OD user. Only a local Admin would get in.
The message I get at login is:
"You are unable to log in to the user account "username" at this time" and "Logging in to the account failed because an error occurred. The home folder for the user account is located on an AFP or SMB server. Contact yor system administrator for help."
When I check in locally, I still can connect to the server, get online and everything. I checked the settings in Directory Access and al is fine there. I formatted the drive, reinstalled the OS. Still the same result.
Any suggestions for troubleshooting greatly appreciated.

Hi,
Would you please provides us the log file for further research.
Microsoft Remote Desktop -> About Microsoft Remote Desktop -> Send log via email -> Post the log here.
Thanks.
Jeremy Wu
TechNet Community Support

Similar Messages

Can no longer log in to my computer

I searched but did not see this problem. I also posted this question the networking forum and i asked that it be removed as this seems like a better place for it.
I have 3 iMacs and several PC's in my signshop and we are bound by AD to the main PC serer and we connect via DHCP. One particular shared user can no longer log into her user from any of the iMacs. She just gets the shaking password window. But she can log into her shared user from any of the PC's. And we can all log into our shared users from her iMac.
Thins we have tried.
1. changed her password and that did not work.
2. renewed DHCP and that did not work.
3. disabled and re-enabled her acount and that didn't work.
Any advice? I will check this from work tomorrow if you need any info from the PC IT geeks
thanks!!

Thank you for the helpful tips below. I had pretty much given up deploying Leopard in my public labs until AD binding became more stable. With the 10.5.3 update, I have had stable logins/binding to AD from May 30th, when I applied the update to my 'image' client until this morning (6/20/08).
My setup is public labs in university. Mac clients use netboot for imaging and I have one OD Master server controlling client admistration (login window messages, etc.) All network accounts are via AD (MS Server 2003) with 3 Domain Controllers.
Could you please be a little more descriptive on some of your suggestions? for example:
Before you bind: #2 -- Make sure a reverse zone is populated.
Populated where? On the DC or the client?
Before you bind: #4 - Make sure round-robin ...
Where? On the DC or the client?
Before you bind: #7. Set a simple name in sharing...
This is good for individual client setup. I have a situation where I create one master image and push this master image via netboot out to the clients. All of my clients bind to AD with the same computer name, but the clients themselves have individual local host names.
If failure occurs: #1 - Use dscl to try and browse the domain.
On the DC or client?
If failure occurs: #3 - Use dirt to hammer the directory
Not sure if my AD sys admins would appreciate this without forewarning! I would appreciate any insight you could give to my questions as I am building new images for Fall 08 semester now and would love to deploy Leopard, but will not until I am positive Leopard/AD autentication is stable. If you would prefer (and have the time) to discuss this further via email, please email me at [email protected]
Thanks,
Cheryl Tarbox
Binghamton University

I can no longer log into my ichat linked to my gmail. right after opening up ichat, receive the following message: lost connection with jabber. the server has unexpectedly disconnected.

i can no longer log into my ichat linked to my gmail. right after opening up ichat, receive the following message: lost connection with jabber. the server has unexpectedly disconnected. how to troubleshoot? thanks.

Hi,
There can be many reasons why the Login is "up the creek".
Any break in the network at your end whilst logged in will cause an issue.
A sort of discrepancy between what iChat thinks the state should be and what the server thinks.
If they don't agree the server will refuse to accept.
A Crash at the server end which does not log you out properly will also do it.
Any file at any time can be come corrupted.
Luckily with the iChat .plists they are recreated if removed with an iChat Restart.
If it were AIM you can also get your Account Suspended and this will not log you in.
(It tends to happen from Chat rooms where people notify AIM about bad behaviour (as they see it) and you have to apply to get Un-suspended).
Most of the big IM services use multiple servers.
Sometimes these go out of Sync.
In the case of AIM this happens when they remove Old unused Screen Names from people's Buddy List prior to making them available for re-registration. I am not sure if this happens at Google.
You seem to be talking about an account that has worked at Work and having new computer at home.
As I mentioned the Priority thing you have not said that it has coincided with the new computer logging in (this will kick the work Computer out of Google whether you are logged in on the Web Mail page or in iChat)
IN addition to that iChat stays partially logged in for Off Line IMs
This is done in the background by a support app called iChatAgent
If your Computer is ON but ichat is not started people can still send you Messages.
Instead of saving these on the server until you login iChat will start up.
Depending if the home Mac is effecting the Work Login it may be holding sway over your Login.
Using your girlfriend's login may have booted her Off Line where she normally uses the name/login.
The AIM Side can be specifically set to allow Multiple Logins and therefore NOT allow them. If this happens you get a warning and messages to do something about it.
You do not get these in any Jabber or Google Login as the Priority setting is supposed to take care of it.
If the Login works at the Web Mail Login and on one computer then the .plist on the work computer is the most likely issue.
There is a small chance that a Corrupt Buddy Pic (Home Folder/Library/Caches/com.apple.iChat/Pictures) may be the cause.
Set this folder to icon view and also use the Finder's View Menu > Show View Options and select icon view.
This should show all pics as their icon.
Check that all display properly.
At this point I would try a COMBO version update install of the last Update you did over what you have.
This often corrects hard to trace things
The 10.5.8 COMBO is here
11:28 PM Monday; June 20, 2011
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb( 10.6.7)
 Mac OS X (10.6.7),
"Limit the Logs to the Bits above Binary Images."  No, Seriously

After recent OS update (10.8.2) I can no longer log into icloud.

After recent OS update (10.8.2) I can no longer log into icloud. I've reset password, but when I try to login on the icloud preferences panel it gives a little "bonk" sound and then spins forever. Open to suggestion. Thanks!

Signing out and signing back in seemed to do the trick as suggested here: https://discussions.apple.com/message/19827058#19827058

I am trying to backup my iPhone but the email used for my Apple ID has been deactivated so I can no longer log into my account or back up my iPhone. How do I back it up otherwise? Or how do I change my email?

I am trying to backup my iPhone but the email used for my Apple ID has been deactivated so I can no longer log into my account or back up my iPhone. How do I back it up otherwise? Or how do I change my email?

You can update your AppleID info here: Manage your Apple ID
Also check this page for more details about iTunes: Apple - Support - iTunes

Snow leopard clients can no longer connect after 10.7.3 update.

Hey,
We updated to 10.7.3 on the server side and our snow leopard clients can no longer connect. Our lion clients have no trouble connecting.
They recieve an box saying an error occured, with no other information.
Any ideas?

Voelkl:
How are you trying to connect to your Lion Server? AFP? VNC? SMB?

Installed SAP Master and can no longer log into old xIEP portal

Hello there,
I am very new to SAP so please bear with me. We were experiencing J2EE Engine connection errors along with no connection to our SLD with our xIEP portal, so I tried to verify that all of our parameters were correct. I did this by checking prior documentation and opened up the SAP Master Installation and began to verify the settings for the current installation of NetWeaver 2004s that we have.
However at the end of the installation, I clicked on start and it began to install SAP Master. Now when we log into our xIEP portal, we can no longer log in with our user id and password, but are able to log in as Administrator.
I am afraid that when I installed the SAP Master, this might have replaced the old NetWeaver that our portal was running off of. Please tell me that this isn't true, and that somehow I can get access to our old portal. Any suggestions would be greatly appreciated. Thank you.

You might consider rebuilding the ECP virtual directory:
http://technet.microsoft.com/en-us/library/ff629372.aspx
With the EMS, procedure should be the same for Exchange 2010 and 2013.
Since you state that everything else is working, other virtual directories included (OWA for ex.), it's most likely something with the ECP virtual directory.
But even before that, I would try to look at the (rather cryptic) IIS logs and see if you cannot find any useful information there:
http://social.technet.microsoft.com/Forums/exchange/en-US/935eeb5b-d996-4933-9cbd-0347ebad801d/how-can-i-view-exchange-iis-logs?forum=exchange2010
There were some ideas in this thread but i think you may have seen it already?
http://social.technet.microsoft.com/Forums/exchange/en-US/1736b5ab-e69b-4637-aa59-f2d9bd54ead2/unable-to-access-exchange-2013-eacecp-webpage?forum=exchangesvrdeploy
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

I can no longer log into either of my banks on line. I have Safari 6.0.3

I can no longer log onto either of my banks. I have Safari Version 6.0.3(7536.28.10). I just did an update. On the apple bar there is https and a paddle lock. clicking on that it says I'm using an encrypted connection. I can't get past this. Help?

" On the apple bar there is https and a paddle lock."
That's standard. Has nothing to do with your issue. What happens when you try to log into a bank web site? What is the response?

I can no longer log on to itunes store

I can no longer log on to itunes store or icloud
Can someone help me?

I sure did, that was the second try. Still no change as of an hour ago.
Whatever it is, it's only effecting this specific ATV. I have a couple of them running a lot when all three of my kids are home.

I can no longer log on to facetime

I can no longer log on to facetime on my ipodtouch

Try removing the account in Settings - Facetime and logging in again.

Since updating every time I click on something another window intrudes and I can no longer log in to secure (bank etc) sites. What's happened and how do I sort it ou? It's become unusable

Since updating Firefox every time I click on something another site (v. dodgy looking) opens and I can no longer log in to secure (bank etc.) sites, what has happened and how do I cure it? It's reached the point where I no longer use Firefox.

Im wondering why my post hasn't been answered yet. I did file a report with the BBB and I had a rude representative from Verizon call me named Steve. He said I can file all of the reports I want and I will just keep getting calls from him. I can understand why my phone couldn't be replaced because of the small crack. I guess I have to eat that one (but it sucks because the lollipop update is what caused the problems) but what about all of the data overage I had to pay for for trying to fix this phone because of a lollipop update. I dont think it is fair to have to pay that as well. In addition, because I have an east coast phone number but live on the west coast, I cannot have tech support after 8pm. Verizon has cut this off. Im very dissatisfied and I have been a customer of Verizon for 13 years. Im hoping for a response this time.

After 10.6 Upgrade - XP clients can no longer connect

Just upgraded my server from 10.5 to 10.6.2 and now none of my XP clients can connect via SMB. Can't figure out the issue. They would normally connect via IP on a local network at "\\192.168.80.2", but now nothing happens on the XP side. Just does nothing at all. No login prompts or anything. Anyone know whats going on?
Some stuff from the SMB logs if this helps.
[2009/11/16 10:48:57, 0, pid=1155] /SourceCache/samba/samba-235/samba/source/auth/authodsam.c:opendirectory_smb_pwd_checkntlmv1(387)
opendirectoryuser_auth_and_sessionkey gave -14091 [eDSAuthMethodNotSupported]
[2009/11/16 10:48:57, 0, pid=1155] /SourceCache/samba/samba-235/samba/source/lib/opendirectory.c:getopendirectoryauthenticator(247)
failed to read DomainAdmin credentials, err=67 fd=26 errno=2
[2009/11/16 10:59:12, 1, pid=1155] /SourceCache/samba/samba-235/samba/source/smbd/service.c:close_cnum(1289)
szymon (192.168.80.90) closed connection to service Ledger
[2009/11/16 10:59:12, 1, pid=1155] /SourceCache/samba/samba-235/samba/source/smbd/service.c:close_cnum(1289)
szymon (192.168.80.90) closed connection to service Accounting

Two things to try:
...Ensure the appropriate NLTM authentication is enabled? Probably NLTMv1.
Server Admin -> Open Directory -> Settings -> Policies -> Authentication
...Ensure that the Microsoft Windows XP clients have a compatible authentication requirement?
This security settings authentication downgrade is set via an msc widget on the higher-budget Microsoft Windows XP variants, or directly via the LMCompatibilityLevel registry knob available within all Windows variants.
With the upper-budget Windows versions, you can run the secpol.msc tool, navigate to Local Policies - Security Options, then to Network Security: LAN Manager authentication level, then (if the box is set this way) switch from "Send NTLMv2 response only" to "Send LM & NTLM - use NTLMv2 session security if negotiated".
On all Windows XP versions including the lower-budget versions, you can use regedit to switch the HKEYLOCALMACHINE\ SYSTEM\ CurrentControlSet\ Control\Lsa registry key value LmCompatibilityLevel to 1

Can no longer log on to a DC due to broken trust. Need a fix please

Here is the post that helped me get things sorted out: http://community.spiceworks.com/topic/post/1805553.

I have a Windows 2012R2 DC that will no longer allow me to log on locally, or at all. I have tried to re-create the trust using test-computersecurechannel - server servername -repair -verbose and all I get is false. I have tried netdom reset and that gets me interface is unknown. Of course it being a DC I can not just log in as local admin to just demote it and re-promote it. Any ideas. I have never had a DC lose its trust with the rest of the DC's.
This topic first appeared in the Spiceworks Community

My start up disk is full, and i can no longer log in to my username to remedy it. i am abroad and my coverage is about to expire. what to do?

My start up disk is full, and I can no longer access my username to remedy it or remove files. I can only access the guest user profile in safari only mode. I am currently overseas and my coverage expired the day this problem happened. sos what do i do? i need to access iphoto and itunes. and everything else I have

My start up disk is full, and I can no longer access my username to remedy it or remove files. I can only access the guest user profile in safari only mode. I am currently overseas and my coverage expired the day this problem happened. sos what do i do? i need to access iphoto and itunes. and everything else I have

After initial messaging server 'configure', amadmin can no longer log in

RHEL 4, JES 2005Q4
After install, amadmin can log into amconsole just fine. Under Sessions, Max Session time is 120 minutes. But after I run messaging 'configure' script and restart webserver, amadmin user can only log in to amconsole for roughly 8 seconds before being kicked out due to session timing out. If I quickly click Sessions, it shows 0 minutes max time, 0 minutes left, etc. Trying to log in as admin user results in "User has no profile in this organization." message.
The install log shows a few strange things:
After a long list of "+F mailsrv mail 640 /some/file", the following:
===== Mon Dec 12 18:49:31 CST 2005 =====
Running /bin/sh -c /opt/sun/messaging/sbin/imsimta clbuild -image_file=IMTA_COMMAND_DATA IMTA_BIN:pmdf.cl
d
/opt/sun/messaging/lib/imtacli: symbol lookup error: /opt/sun/messaging/lib/libmailwave.so: undefined symbol: db_env_create_4002
===== Mon Dec 12 18:49:31 CST 2005 =====
Running /bin/sh -c /opt/sun/messaging/sbin/imsimta chbuild
/opt/sun/messaging/lib/imtacli: symbol lookup error: /opt/sun/messaging/lib/libmailwave.so: undefined symbol: db_env_create_4002
Then a long list of "adding new entry" messages and the error 'ldap_modify: Type or value exists' repeats about 80 times or so. Then, a bit further down:
===== Mon Dec 12 18:49:32 CST 2005 =====
Running /bin/sh -c /opt/sun/messaging/sbin/imsimta cnbuild
/opt/sun/messaging/lib/imtacli: symbol lookup error: /opt/sun/messaging/lib/libmailwave.so: undefined symbol: db_env_cre
ate_4002
I am running configure as root, and libmailwave.so exists and is readable. The last line of an strace on 'imtacli cnbuild' has this to say:
write(3, "Internal error in cl_init -- can"..., 83Internal error in cl_init -- cannot open command definition file IMTA_BIN:pmdf.cld
but that file does exist and is readable by anyone!

the imsimta (mta cli) program is broken in Linux editions. There is a patch for that, currently available only from tech support.
Not likely the cause of your other issue, though.
Check what's happening in your ldap access log when you try to log in.
Possible there's a clue there.

OD client can no longer log in

Similar Messages

Maybe you are looking for