OS X 10.4.11 Server - configured name and reverse DNS do not match / DNS

Hi all,
I have looked for similar posts but all seem to have different scenarios, hoping to get an answer from someone more experienced than myself before I do anything silly.
Help much appreciated!
Scenario:
We run a 10.4.11 OS X Server on an XServe, hosted at an ISP. ISP provides all DNS services, incl. the reversed DNS entry.
I am currently only running the following services (based on the display in ServerAdmin):
AFP
Firewall
iChat
Mail
QuickTimeStreaming
Web
All others (incl. DNS) are grayed out. (As ISP instructed us not to add a DNS service on our box, that's "normal" according to my experiences with dedicated /co-location server hosting).
We never used changeip after the initial setup, meaning the server's
Current Hostname = somename.local and
DNS Hostname = mail.ourdomainname.net
So in system.log I find this re-occuring entry:
Jul 8 11:41:22 somename servermgrd: servermgr_dns: configured name and reverse DNS name do not match (somename.local != mail.ourdomainname.net), various services may not function properly - use changeip to repair and/or correct DNS
Finally, my question:
As Mail and Web services etc. are currently running OK from what I can tell,
1) do I HAVE to change this at all?
2) Would it be much better / why?
3) Could I change this using the following command
(111.11.111.1 indicating the server's IP address)
changeip 111.11.111.1 111.11.111.1 somename.local mail.ourdomainname.net
4) without running a DNS server on the machine, i.e. DNS service is not required for this to work?
5) obviously I want to be able to use Server Admin after I issue this command...
6) can I fall back easily in case this would screw it up, or is there no risk whatsoever doing this in my case?
THANK YOU so much for any help!

Hi Jonas
If port 443 is already being used on the same box as KMS then it will complain and probably not start the service? I've seen this with LDAP port 636. This is when Kerio is installed on a server configured as an OD Master. Clearly the port can't be used by both servers.
It might be easier to change the port your sites are currently using to something else? Although don't do anything yet. Pose the question to Kerio Support and see what advice they offer.
Yes moving the mail to a local folder on the mail client will do it.
Is Kerio going on the same box? If its a different box (presumably different IP address?) Then what you can do is to port forward to the new server's IP address instead of disabling it. This way while you are bringing the new server on line users can still send mail right up until the time you give instructions on changing their inbound/outbound mail server details. Of course they won't be able to receive but if you time it right they may not even get an error message? Depends on what their schedules are.
If it was me I would choose IMAP every time. As the mail admin you have full control and a central location for easy backup. KMS has a built in archiving feature that makes this a simple process. This is an easier option than going round individual client machines and making sure mail held locally in POP accounts are backed up. Besides there is always someone who falls through the loop and I'm not taking into account drive failures. It makes good sense anyway as there is talk of legislation being introduced to make this a requirement for businesses who run their own mail servers. This is certainly true for certain parts of the US and what usually happens there is generally taken up in the UK and most parts of Europe.
Kerio's WebMail Client means users don't even have to have their own computer. Just as long as they have access to one that has access to the internet they can send/receive mail. No need for dedicated mail applications such as Apple Mail, Thunderbird, Entourage etc. How mail is uses remains consistent for all users.
Yes. I did this not so long ago with Leopard's built in Mail Server. I sent an e-mail defining a time when no inbound mail would be received. Disabled port forwarding for SMTP port 25 and approx 30 minutes after that another mail stating no outbound mail should be sent. Once everything was swopped over (we were changing from a G4 10.4 server to a G5 10.5 Server) port 25 was enabled, new server brought online and everyone was mailing again with no appreciable downtime.
These boxes were to have the same IP address hence the slightly different approach.
Does this help?
Tony

Similar Messages

Host name on SSL certificate did not match the alias name in the URL addres

To the XI gurus,
One of our vendors had problem to send us xml invoices because the url address had our server alias name and the SSL certificate we asked them to install had the server name.
To resolve this issue, can we install two certificates (one has the alias name and one has the server name) at our XI server or we can only have one SSL certificate installed at any time?
Thanks!
Fisher Li

Fisher Li,
> we can only have one SSL certificate installed at any time?
To my knowledge we can install only one certificate.
Cheers
Agasthuri

Name in certificate `URL' does not match host name `URL'

Hello,
We are getting the error
Name in certificate `URL' does not match host name `URL'?
Can someone can provide solution to resolve the above error? Also can you please inform whether Coldfusion 8 supports checking the Subject Alternative Names in the SSL certificate? If so, kindly tell us how to do it.
Environment that we use is coldfusion 8 with sql server 2005 (DB). If you have any query please let me know.
Thanks,
Satheesh.

Hi Siva,
we have faced the same problem on our application. To overcome this we used the below workarround...
Make the host entry for webservice provider [serviceprovider.test.com] pointing to its IP [172.99.71.12].
In cfm file
There's no need to add the proxy and the port in the cfm file.
             <cfhttp method="Post" url="#WEBSERVICE_SERVICE_PROVIDER#" resolveurl="Yes">
                <cfhttpparam type="Formfield" name="xmlValue" value="#tostring(xml)#">
            </cfhttp>
The below URL will help you on debugging CFHTTP Request
http://kb2.adobe.com/cps/998/9987e902.html

My user name and pass word have not changed I can't get into my gmail

My user name and pass word have not changed I can't get into my gmail

Can you access the email on a computer using a web browser meaning are you sure it is not a problem on the gmail end?

HT201240 I have a new macbook pro that did not have a disk, OS X was pre installed so how can i change the administrators name and password, it did not migrate properly from my hard drive.., so how do i

I have a new macbook pro that did not have a disk, OS X lion 7.3.4 was pre installed so how can i change the administrators name and password, it did not migrate properly from my hard drive.., now there is some mysterious administrator name and or password??

See #5
Step by Step to fix your Mac

When I burn a disc from a playlist in iTunes, the track names and artist info does not display on the disc when friends view/listen to it. This probably is an easy fix, but I need some advice.

When I burn a disc from a playlist in iTunes on my MacBook, the track names and artist info does not display on the disc when friends view/listen to it. This probably is an easy fix, but I need some advice.

No, this standard has been implemented for several decades.
How iTunes remembers audio CDs - http://support.apple.com/kb/TA27785
It is just conceivable you burned a CD that exactly matched one already in the Gracenote database. Gracenote uses track count and duration to decide what CD it is you have in a computer. If you have one that matches that it will label it. You could conceivably even have one that matches it that is not the correct one.
This script will only work on Macs:
http://dougscripts.com/itunes/scripts/ss.php?sp=cdtexttocdinfo - script to use CD-text file on CD to label CD in iTunes

AP is unable to associate. The Regulatory Domain '-E' configured on interface '802.11a' does not match the Controller Regulatory Domain '-C'

Hi,
There are three different types of APs associated with controller and working fine.
1.       AIR-LAP1252AG-E-K9
2.       AIR-LAP1522AG-E-K9
3.       AIR-CAP1552E-C-K9
WLC is AIR-CT5508-K9. Software version is 7.4.100.0. Field Recovery Image is 7.0.112.21. Firmware version is FPGA 1.7, Env 1.8, USB console 2.2. WCS is 7.0.240.0 for Windows.
WCS is sending alarms for AIR-LAP1522AG-E-K9:
Message: AP is unable to associate. The Regulatory Domain '-E' configured on interface '802.11a' does not match the Controller Regulatory Domain '-C'.
Before Controller was 7.2.4 (not sure).
Country configured on WLC is AE and shows -CE regulatory domain. Mesh APs are also associated.
I believe this Critical alarm should not come.
how much is this alarm important? What should be done to resolve this?

Typically you still need to make sure that the country codes are indeed configured on the WLC. Thing can change when you upgrade code as standards might of changed and regulations also. If your AP's are functional, then you should be okay and I wouldn't worry too much about it, but if after the upgrade, the WLC complains about country code stuff, then you just need to verify that the AP's country code is defined on the WLC. May times the AP will not join and if it does join, the radios might be disabled or in a down status.
Sent from Cisco Technical Support iPad App

Oops... a server error occurred and your email was not saved.

after completion of mail content when try to send the message error shows as
"Oops... a server error occurred and your email was not saved."
This problems are being experienced very often since installation of Firefox version 5.0

Reload web page(s) and bypass the cache.
* Press and hold Shift and left-click the Reload button.
* Press "Ctrl + F5" or press "Ctrl + Shift + R" (Windows,Linux)
* Press "Cmd + Shift + R" (MAC)

HT201320 what is the incoming mail server host name and user names

Hi there,
I am trying to add my school email account to my phone and I am able to fill in the
Name
Email
and Description
but am not sure what I am supposed to fill out in the Incoming Mail Server spots:
Host Name
User Name
and the password is already filled in?
and Im not sure what the Outgoing Mail Server is either.

You'll have to ask someone at your school what the incoming server settings are for their email. These differ for every email provider/account.

NAM and "unprotected identity pattern" not working as expected

Hi,
I'm trying to test such 802.1x wired environment:
windows xp sp3 as supplicant
windows NPS as radius server
2960 as authenticator
latest anyconnect (3.1.01065) + nam and standalone profile editor
I have a question:
Could someone explain me the difference between protected identity pattern and unprotected identity pattern (set in nam profile editor)? As I understand documentation PEAP-MSCHAPv2 is a tunneled method and it uses unprotected identity pattern to protect user's identity during phase 0. But if I use any fake identity here (anonymous, anonymous@[domain], etc) access is rejected (Access-Reject in switch debugs). I have to use exacly the same pattern in
unprotected identity pattern as in protected identity pattern ([username] or [username]@[domain]) to gain access, regardless of authenticaton mode (same in machine only, user only authentication)
I would be grateful for any clues
Best regards
Lukasz

Ok I've solved it... NAM works fine, problem was with NPS config. If you want unprotected identity pattern to work, just configure authentication methods under "connection request policies" not "network policies".

SSLException: Name in certificate "host1" does not match host name "host2"

Hi all,
I am using a hosted WebDAV/Subversion service to store my files. The provider has connected my domain name to the service, so now I can access the service through my domain name :-)
However, the provider cannot assign a static dedicated IP for the server which provides my content, hence he cannot set an SSL certificate for my domain name. Any time I access the service I am getting an SSL warning telling me that the domain name does not match that on the certificate... So far had no problem with that. The Web browser, the Windows Explorer, and the Subversion client allow me to accept the connection.
Now I need to set up some automatic build software (Maven) and it appears that the JRE has a problem with these name mismatches -- it just throws an exception and does not allow me to accept the connection :-( In order to ensure that this is a JRE problem, I have tried to connect to the service with a Java-based WebDAV client (DAVExplorer) -- same thing -- here is the message thrown by DAVExplorer:
javax.net.ssl.SSLException: Name in certificate "his.domain.name" does not match host name "my.domain.name"
Is there some configuration file, system property or switch that I can use to make the JRE ignore the domain name mismatch thing?
Please help,
Adrian.

Here is a quick example I put together. Most of the code was autogenerated by Eclipse "Generate Delegate Methods" on the urlConn field of the class. This is just an example; I haven't given it much thought; it probably opens up other security holes and I take no responsibility for it.
In my example, I have an SSL server with the name "dawntreader" in the certificate, but my URL is https://192.168.10.7/ which triggers the name mismatch. I have not actually tested it with maven, but looking at these docs (http://maven.apache.org/guides/mini/guide-repository-ssl.html) I think that you should be able to add the following to the MAVEN_OPTS environment variable: -Djava.protocol.handler.pkgs=MyHttpsUrlConnection and make sure the MyHttpsUrlConnection.class file is on the classpath
import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;
import java.net.MalformedURLException;
import java.net.ProtocolException;
import java.net.URL;
import java.security.Permission;
import java.security.Principal;
import java.security.cert.Certificate;
import java.util.List;
import java.util.Map;
import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLPeerUnverifiedException;
import javax.net.ssl.SSLSession;
import javax.net.ssl.SSLSocketFactory;
import javax.security.auth.x500.X500Principal;
public class MyHttpsURLConnection extends HttpsURLConnection
    static class MyHostnameVerifier implements HostnameVerifier
        private static final String EXPECTED_HOSTNAME = "dawntreader";
        private String getCN(String DN)
            String [] dnComponents = DN.split(",");
            // Find one that starts with CN=
            for (String component : dnComponents)
                if (component.startsWith("cn="))
                    return component.substring(3);
            return "";
        @Override
        public boolean verify(String hostname, SSLSession session)
            try
                X500Principal peerPrincipal = (X500Principal) session.getPeerPrincipal();
                String DN = peerPrincipal.getName("CANONICAL");
                // now parse the CN out of the effing DN
                // We should also get the subject alternative names
                // from the peer certificate
                String CN = getCN(DN);
                return CN.equals(EXPECTED_HOSTNAME);
            } catch (SSLPeerUnverifiedException e)
                return false;
    private final HttpsURLConnection urlConn;
    public MyHttpsURLConnection(URL url) throws IOException
        super(url);
        urlConn = (HttpsURLConnection) url.openConnection();
        urlConn.setHostnameVerifier(new MyHostnameVerifier());
    public void addRequestProperty(String key, String value)
        this.urlConn.addRequestProperty(key, value);
    public void connect() throws IOException
        this.urlConn.connect();
    public void disconnect()
        this.urlConn.disconnect();
    public boolean equals(Object obj)
        return this.urlConn.equals(obj);
    public boolean getAllowUserInteraction()
        return this.urlConn.getAllowUserInteraction();
    public String getCipherSuite()
        return this.urlConn.getCipherSuite();
    public int getConnectTimeout()
        return this.urlConn.getConnectTimeout();
    public Object getContent() throws IOException
        return this.urlConn.getContent();
    public Object getContent(Class[] classes) throws IOException
        return this.urlConn.getContent(classes);
    public String getContentEncoding()
        return this.urlConn.getContentEncoding();
    public int getContentLength()
        return this.urlConn.getContentLength();
    public String getContentType()
        return this.urlConn.getContentType();
    public long getDate()
        return this.urlConn.getDate();
    public boolean getDefaultUseCaches()
        return this.urlConn.getDefaultUseCaches();
    public boolean getDoInput()
        return this.urlConn.getDoInput();
    public boolean getDoOutput()
        return this.urlConn.getDoOutput();
    public InputStream getErrorStream()
        return this.urlConn.getErrorStream();
    public long getExpiration()
        return this.urlConn.getExpiration();
    public String getHeaderField(int n)
        return this.urlConn.getHeaderField(n);
    public String getHeaderField(String name)
        return this.urlConn.getHeaderField(name);
    public long getHeaderFieldDate(String name, long Default)
        return this.urlConn.getHeaderFieldDate(name, Default);
    public int getHeaderFieldInt(String name, int Default)
        return this.urlConn.getHeaderFieldInt(name, Default);
    public String getHeaderFieldKey(int n)
        return this.urlConn.getHeaderFieldKey(n);
    public Map<String, List<String>> getHeaderFields()
        return this.urlConn.getHeaderFields();
    public HostnameVerifier getHostnameVerifier()
        return this.urlConn.getHostnameVerifier();
    public long getIfModifiedSince()
        return this.urlConn.getIfModifiedSince();
    public InputStream getInputStream() throws IOException
        return this.urlConn.getInputStream();
    public boolean getInstanceFollowRedirects()
        return this.urlConn.getInstanceFollowRedirects();
    public long getLastModified()
        return this.urlConn.getLastModified();
    public Certificate[] getLocalCertificates()
        return this.urlConn.getLocalCertificates();
    public Principal getLocalPrincipal()
        return this.urlConn.getLocalPrincipal();
    public OutputStream getOutputStream() throws IOException
        return this.urlConn.getOutputStream();
    public Principal getPeerPrincipal() throws SSLPeerUnverifiedException
        return this.urlConn.getPeerPrincipal();
    public Permission getPermission() throws IOException
        return this.urlConn.getPermission();
    public int getReadTimeout()
        return this.urlConn.getReadTimeout();
    public String getRequestMethod()
        return this.urlConn.getRequestMethod();
    public Map<String, List<String>> getRequestProperties()
        return this.urlConn.getRequestProperties();
    public String getRequestProperty(String key)
        return this.urlConn.getRequestProperty(key);
    public int getResponseCode() throws IOException
        return this.urlConn.getResponseCode();
    public String getResponseMessage() throws IOException
        return this.urlConn.getResponseMessage();
    public Certificate[] getServerCertificates() throws SSLPeerUnverifiedException
        return this.urlConn.getServerCertificates();
    public SSLSocketFactory getSSLSocketFactory()
        return this.urlConn.getSSLSocketFactory();
    public URL getURL()
        return this.urlConn.getURL();
    public boolean getUseCaches()
        return this.urlConn.getUseCaches();
    public int hashCode()
        return this.urlConn.hashCode();
    public void setAllowUserInteraction(boolean allowuserinteraction)
        this.urlConn.setAllowUserInteraction(allowuserinteraction);
    public void setChunkedStreamingMode(int chunklen)
        this.urlConn.setChunkedStreamingMode(chunklen);
    public void setConnectTimeout(int timeout)
        this.urlConn.setConnectTimeout(timeout);
    public void setDefaultUseCaches(boolean defaultusecaches)
        this.urlConn.setDefaultUseCaches(defaultusecaches);
    public void setDoInput(boolean doinput)
        this.urlConn.setDoInput(doinput);
    public void setDoOutput(boolean dooutput)
        this.urlConn.setDoOutput(dooutput);
    public void setFixedLengthStreamingMode(int contentLength)
        this.urlConn.setFixedLengthStreamingMode(contentLength);
    public void setHostnameVerifier(HostnameVerifier v)
        this.urlConn.setHostnameVerifier(v);
    public void setIfModifiedSince(long ifmodifiedsince)
        this.urlConn.setIfModifiedSince(ifmodifiedsince);
    public void setInstanceFollowRedirects(boolean followRedirects)
        this.urlConn.setInstanceFollowRedirects(followRedirects);
    public void setReadTimeout(int timeout)
        this.urlConn.setReadTimeout(timeout);
    public void setRequestMethod(String method) throws ProtocolException
        this.urlConn.setRequestMethod(method);
    public void setRequestProperty(String key, String value)
        this.urlConn.setRequestProperty(key, value);
    public void setSSLSocketFactory(SSLSocketFactory sf)
        this.urlConn.setSSLSocketFactory(sf);
    public void setUseCaches(boolean usecaches)
        this.urlConn.setUseCaches(usecaches);
    public String toString()
        return this.urlConn.toString();
    public boolean usingProxy()
        return this.urlConn.usingProxy();
    public static void main(String[] args) throws MalformedURLException, IOException
        MyHttpsURLConnection urlConn = new MyHttpsURLConnection(new URL(
                "https://192.168.10.7/"));
        urlConn.connect();
        InputStream is = urlConn.getInputStream();
        int nread = 0;
        byte[] buf = new byte[8192];
        while ((nread = is.read(buf)) != -1)
            System.out.write(buf, 0, nread);
}

Upgrade of our 10.4.11 laptop to 10.5 is accomplished and we now need to upgrade Quicktime and iTunes; however, the user name and password is now not working after the upgrade to 10.5.

Object is to sync address and calendar between laptop with Max OS 10.4.11 and iPhone. Upgrade of our 10.4.11 laptop to 10.5 is accomplished and we now need to upgrade Quicktime and iTunes; however, the user name and password for the laptop is now not working after the upgrade to 10.5., though it was working prior to the upgrade, for file sharing.

@ BDAqua > I tried your suggestion but no luck. holding opt+command just gave me a blue screen and it rebotted, pushing the disk out of the drive. Yes, the macbook has 1 gb of ram. I realize that the min req. call for 2 gb of ram so i've got an order in for another dimm to put into the machine. Thanks for your suggestions.
@ a_brody > Yes. The machine was plugged into a power source. The disk promts you to do that and i recall aspect this form other installs. Thanks for the reminder tho! ( btw your second post is like greek to me man!)
@ Kuncklesmac > You're right about Snow Leopard being an upgrade from Leopard. I'm aware of this. And yes previously i've been told by Apple that I needed the Box Set (not the family pack. i am using the family pack for OS Snow Leopard) to upgrade my 10.4.11 mac - they never mentioned adding ram but i figured that out on my own and an apple specialist recommended it when i purchased Snow Leopard and confirmed that I coul duse the Snow Leopard to upgarde from Tiger (10.4.11). I've also read extensively (as i said above) that it isn't necessary (always) to buy the box set. Several 10.4.11 users report having upgraded using the Snow Leopard upgrade disk only (not the Box Set) without trouble on intel macs (also see the apple link i posted). So i'm just ondering how they did it and i cannot.
Thanks fo rall yor help!

My name and/or password are not working on start up page. Got given used macbook pro and new to apple so please help!

My brother gave me his macbook pro and I'm having trouble getting past the start up page that asks for my my name and password. I have an apple id and password but these don't work nor does me typing my actual name and the same password. I've rung apple twice and the first person said I had to reset my uusername account and told me I could do so by visiting the support part of the apple website using the link he gave me. The information tells me how to do this but I have to have the computer up and running to reset/change the account username and password. So no joy. Second time I spoke with a lady who told me the name and password should be the same as the one my brother used when he had the computer but having entered the name and password he gave me it still doesn't work. I've tried all the different name types of my name e.g. full name, no spaces, capitals and no capitals etc but every time I click on the right pointing arrow thing or press the enter button the password does a quiver/shake thing and nothing happens. My bro says he has a relatively new lion operating system. I haven't a clue what to do as I'm new to using apple computers and I've spent ages looking through the support section with no success in finding the solution. Any help/advise would be much appreciated. Ta

Resetting User Password in Lion and Mountain Lion
Boot into your Recovery Partition by holding down the Command and R keys whilst booting.
When the Recovery screen appears, go to the Utilities menu and open Terminal.
In Terminal, type:
resetpassword
...a small app will open and allow you to choose the user for whom you want to change the password. If you are the admin, be certain that you choose your admin user. Type in your new password twice and give yourself a good hint. Click OK (or Done or whatever) and reboot, enjoying the use of your new, hopefully memorable, password.
Good luck,
Clinton

Certificate Name and Expirty Date is not saved in Certificate Manager

The following scenario is happening for few cases:
* Firefox shows "Add Exception" for the certificate
* The certificate is added as permanent exception.
* Go to Firefox -> Tools -> Options -> Advanced -> View Certificates
* Go to Servers Tab
* The certificates which I had stored, doesn't show the certificate name and expiry date. For certificate name it shows <Not Stored>, and for expiry date it is empty.
* Also, when I select it, Export, View is all disabled. Only "Import", "Delete" and "Add Exception" is enabled.
* If I click on "Add exception" again, it says it is verified as it is already there in database.
* However, if I add it as "Temporary", then everything "Name, Expiry Date" is saved.
Is it a known issue in Firefox or am I Missing something. Please confirm and let me know.

Hi,
Go to T Code :-SM31
table J_1IEWT_ECFLAG -
check " X" against your Company code.
hope this will help
SU*

Sun App Server 8.1 and 8.2 could not start

Hi friends, thank for various suggestions. pls i'm having problem with Sun App Server 8.1 and 8.2. I installed Portal 7 on Red Hat Enterprise Linux 3 and also Sun Portal 6 on Suse Linux 9. The problem is that App server keep giving Login exception after using them for a while. The details is given below:
after typing ./asadmin start-domain --user admin domain1. Instead of it to give me the password prompt, it threw the following exception:
INFO: SEC5046: Audit: Authentication refused for [admin]
Login Failed javax.security. auth.login.LoginException: Failed file for login admin
CL1156 could not start the domain domain1.
I always login to the O/S as root.
Any suggestion will be highly appreciated. Thanks

Thanks very much kedar.mhaswade for your suggestions.
I do not have a regular access to the Internet, I
would have gotten back earlier than this, so i'm
sorry. Anyway, i checked the content of
~/.asadminprefs and the password is not the same with
the one i'm using. I found the default password
supplied by Sun but I don't think this could be the
problem. I'm actually using the App server that is
bundled with Sun Portal 6 and 7 and so i supplied my
own password during installation and i've logged in
several times after installation. It just failed in
one of those logins and had stopped working since. I
always encountered the same problem either when using
Sun Portal 7 or 6 on Red Hat ES 3 and Suse 9
respectively.
I'm posting the content of admin-keyfile as you
requested:
admin;{SSHA}Qf/m4KEBDPojsP1mkjywE5XZA6SPh7i8WQmV/A==;a
sadmin
# Domain User and Password - Do Not Delete Entry
Above
So i will so much appreciate your help and i wouldn't
mind if you could send me your phone number. Thanks.Hi tolulike,
Even if you supplied your own password, we have this developer friendly
feature that has side effects that are at times hard to diagnose. Can you
please
- rename the .asadminprefs file and make sure that there is no .asadminprefs file in your home directory?
- attempt to start the domain.
You should be prompted for the password.
The idea is that when you've got that file and that entry AS_ADMIN_PASSWORD in your home directory, asadmin will read it
from there and you land in this (unfortunate) situation.
Obviously doing this might have some side effects with other domains. This
is because for all domains, asadmin reads this file as a last resort. So,
it might so happen that this file is actually required for functioning of your
other domains.
But now you know when this file is used, so there is no mystery (hopefully).
Let me know if this works.
Thank you.
Kedar

OS X 10.4.11 Server - configured name and reverse DNS do not match / DNS

Similar Messages

Maybe you are looking for