OS X Server clients can't login after IP renumber and domain Name change

I can not seem to get the logins working again on my OS X server (10.9.4 w/ server 3.1.2 on a 1 yr old. MacMini) after I needed to renumber the IP and change the domain name. I destroyed the Open Directory server, recreated it and created one test account. If I log in to the client with a local account I can connect to the server (Go>Connect To Server)  from the client using my newly created account, but when I try to login to the server  using the same network account login I get the "shaking head" response immediately. I have rebound the server to this client and it says that network accounts are available, but seem to be at a loss to understand why it won't let me login...
The only error message I see in any of the logs is the following:
(AFP Error Log:) Sep 15 20:21:47 isis.mydomain.com AppleFileServer[3032] <Info>: major error <1>: No credentials were supplied, or the credentials were unavailable or inaccessible.
I'm not sure what credentials it is referring to. I created a self signed certificate that I am using with OD, could that be the one?

Many Open Directory problems can be resolved by taking the following steps. Test after each one, and back up all data before making any changes.
1. The OD master must have a static IP address on the local network, not a dynamic address.
2. You must have a working DNS service, and the server's hostname must match its fully-qualified domain name. To confirm, select the server by name in the sidebar of the Server application window, then select the Overview tab. Click the Edit button on the Host Name line. On the Accessing your Server sheet, Domain Name should be selected. Change the Host Name, if necessary. The server must have at least a three-level name (e.g. "server.yourdomain.com"), and the name must not be in the ".local" top-level domain, which is reserved for Bonjour.
3. The primary DNS server used by the server must be 127.0.0.1 (that is, itself) unless you're using another server for internal DNS. The only DNS server set on the clients should be the internal one, which they should get from DHCP if applicable.
4. Follow these instructions to rebuild the Kerberos configuration on the master.
5. If you use authenticated binding, check the validity of the master's certificate. The common name must match the hostname and domain name. Deselecting and then reselecting the certificate in Server.app has been reported to have an effect in some cases. Otherwise delete all certificates and create new ones.
6. Unbind and then rebind the clients in the Users & Groups preference pane. Use the fully-qualified domain name of the master.
7. Reboot the master and the clients.
8. Don't log in to the server with a network user's account.
9. Disable any internal firewalls in use, including third-party "security" software.
10. If you've created any replica servers, delete them.
11. As a last resort, export all OD users. In the Open Directory pane of Server, delete the OD server. Then recreate it and import the users. Ensure that the UID's are in the 1001+ range.

Similar Messages

  • 10.4 Server - Client Can't Login In

    Hello
    Basic knowledge of Tiger Server and need to troubleshoot a client that won't login to the network. It appears that the desktop comes up but the Client can't authenticate with the server.
    Any ideas?
    Can anyone step me through how to check the client config and see what is going on with the Login?
    Anyone available on Skype?
    Thanks In advance

    ok i had to poke around I changed users to crpyt pas word then back to open directory... got this error
    Error of type eDSAuthFailed (-14090) on line 3378 of
    /SourceCache/ServerManagerUserGeneral/
    ServerManagerUserGeneral-193.2.5/
    UserAdvancedPluginView.mm
    but after a few times i was able to get the open directory to stick and users can now log in... wierd... any one have an expalnation?

  • Question about RAC 10g on server running AIX and domain name changes

    We have several 10g clusters running on IBM p-Series AIX servers, and our company is changing the domain name for our network. I am concerned that if we do not change the domain names in the TNSNAMES.ora file and also the /etc/hosts file on each server, the cluster will no longer function. We are using CRS (version 10.2.0.3) and ASM within each cluster.
    Does anyone know where I can find information about changing the domain name that was set up as part of the CRS and database installs for RAC? Does anyone have experience doing this, and would be willing to share a few insights? Thanks in advance for any advice you can give!

    You may be able to use the VIPCA utility for RAC to change or modify the public and private settings for your domain names on AIX. Also, the Oracle 10g DBCA "Database Configuration Assistant" should be of use to change your settings for your RAC environment.
    Also, see here for a good IBM Redbook that covers Oracle 10g RAC on AIX platforms:
    http://www.redbooks.ibm.com/redbooks/pdfs/sg247541.pdf
    Regards,
    Ben Prusinski
    http://oracle-magician.blogspot.com/
    Regards,
    Ben Prusinski
    http://oracle-magician.blogspot.com/

  • How can I override the DNS Servers and Domain Name used by my Airport Time Capsule?

    The defaults picked up from my ISP's DHCP are to use the ISP's DNS servers and ISP's domain. I do not want this.
    With my prior router I set the DNS servers to Google's Public DNS (8.8.8.8 and 8.8.4.4) and my domain to either "bannister.us" (which I own) or "bannister.home". I do not want simple names resolving to some ISP default. (Yes, I know exactly what this does.)
    In the Apple AIrport Utility (version 6.3.2) the fields for DNS and Domain do not allow editing. (Why??)
    Is there some way to override this?

    Unfortunately not one that will work with the latest version TC.
    The way around it is to use a different router.. It can be a very simple router.. I usually recommend units like the TP-Link WDR3600 as they take good third party firmware like gargoyle, openwrt, dd-wrt.. ie they have real controls and beyond that a proper Linux firmware with command line interface.
    You can then change the TC over to static IP. It will not be the router.. but it will effectively become the local dhcp server.
    I have adsl so I cannot reproduce your system.. I have a bridged modem.. a router.. AC66U.. and a TC.. but the TC is not in bridge.. it is in static IP mode.
    Let me demonstrate.
    By setting a range on the main router from 1-199 (leave a space.. ) so set the TC to 192.168.2.201 and then you can set DNS and domain as you like. Set the dhcp range (leave a space) you could use 203-253.. then I use the main router as 254.
    It is brilliant.. all computers behind the TC receive the IP from the TC with whatever IP and dns (and domain although I haven't changed it).. Effectively the TC works as its own dhcp device.. but is merely a secondary dhcp server to the main unit.
    (This gives me netflix which is why I do it.. from well outside the US).
    It may be of use.
    Why leave a space.. well it helps it to work.. I have not tested it but another person reported issues and found leaving a space .. ie last ip in the router.. 199, static ip 201.. first dhcp 203 (i used 205 to help me keep count!!). worked.. I have not tried to reproduce the problem.. so I reproduce the solution.. it might be like sheep jumping over the fence.. even if the fence was removed the sheep keep jumping over at the same place. Just say bahhh and do likewise.

  • Can't login to iCloud messages and FaceTime

    i can't login to iCloud imessages and FaceTime.

    This could be a complicated problem to solve, as there are many possible causes for it. Test after taking each of the following steps that you haven't already tried. Back up all data before making any changes.
    Before proceeding, test on another network, if possible. That could be a public Wi-Fi hotspot, if your computer is portable, or a cellular network if you have a mobile device that can share its Internet connection. If you find that iMessage works on the other network, the problem is in your network or at your ISP, not in your computer.
    Step 1
    Check the status of the service. If the service is down, wait for it to come back up. There may be a localized outage, even if the status indicator is green.
    Step 2
    Sign out of iMessage and FaceTime on all your Apple devices. Log out and log back in. Try again to sign in.
    Step 3
    Restart your router and your broadband device, if they're separate. You may have to skip this step if you don't control those devices.
    Step 4
    From the menu bar, select
               ▹ About This Mac
    Below the "OS X" legend in the window that opens, the OS version appears. Click the version line twice to display the serial number. If the number is missing or invalid according to this web form, take the machine to an Apple Store or other authorized service center to have the problem corrected.
    Step 5
    Take the steps suggested in this support article. If you don't understand some of the steps or can't carry them out, ask for guidance.
    Step 6
    From the menu bar, select
               ▹ System Preferences... ▹ Network
    If the preference pane is locked, click the lock icon in the lower left corner and enter your password to unlock it. Then click the Advanced button and select the Proxies tab. If the box marked SOCKS Proxy is checked, uncheck it. You don’t need to change any other settings in the window. Click OK and then Apply. Test.
    The result may be that you can't connect to the Internet at all. Revert the change if that happens, or if iMessage still doesn't work. Remember that you must Apply any changes you make in the preference pane before they take effect.
    Step 7
    Select from the menu bar
               ▹ System Preferences… ▹ Flash Player ▹ Storage
    and click
              Block all sites from storing information on this computer
    Close the preference pane.
    Step 8
    Make sure you know the ID and password you use with iMessage. Launch the Keychain Access application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad and start typing the name.
    Use the search box in the toolbar of the Keychain Access window to find and delete all items with "iMessage" or "com.apple.idms" in the name. Log out and log back in.
    Step 9
    Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”
    While logged in as Guest, you won’t have access to any of your personal files or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.
    Test while logged in as Guest. After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.
    *Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.
    If iMessage worked in the guest account, stop here and post your results.
    Step 10
    Start up in safe mode and log in to the account with the problem.
    Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a Fusion Drive or a software RAID, you can’t do this. Ask for further instructions.
    Safe mode is much slower to start and run than normal, with limited graphics performance, and some things won’t work at all, including sound outputand Wi-Fi on certain models. The next normal startup may also be somewhat slow.
    The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
    Test while in safe mode. After testing, restart as usual (i.e., not in safe mode) and test again.
    If iMessage worked in safe mode, but still doesn't work when you restart in "normal" mode, stop here and post your results.
    Step 11
    Triple-click anywhere in the line below on this page to select it:
    /Library/Preferences/com.apple.apsd.plist
    Right-click or control-click the highlighted line and select
              Services ▹ Reveal in Finder (or just Reveal)
    from the contextual menu.* A folder should open with an item selected. Move the selected item to the Trash. You may be prompted for your administrator login password. Restart the computer and empty the Trash.
    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
              Go ▹ Go to Folder...
    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
    Step 12
    Reset the NVRAM.
    Step 13
    Reset the System Management Controller (SMC).
    Step 14
    Reinstall OS X.
    Step 15
    If none of the above steps resolves the issue, make a "Genius" appointment at an Apple Store, or contact Apple Support. When you set up a support call, select "Apple ID" as the product you need help with, not the hardware model. That way, if you're not under AppleCare, you may be able to talk your way out of being charged for the call.

  • Hi i am working on my web site and it appears to have blocked the ip from my server i can't open my web sites and i cant open the server home page but can do this on my iPhone i have trend micro running on 2 other desk tops all from the same router please

    Hi i am working on my web site and it appears to have blocked the ip from my server i can't open my web sites and i cant open the server home page but can do this on my iPhone i have trend micro running on 2 other desk tops all from the same router please help maybe its a firewall? Cheers Dave

    All I can suggest is that you open that file on the MBA and save it as a new file, then see if you can open the new one on the iMac.

  • I have an Apple ID, I can't login into Apple store and iTunes  , it keeps declining my payment  details. Please what should  I do?

    I have an Apple ID, I can't login into Apple store and iTunes  , it keeps declining my payment  details. Please what should  I do?

    What are you trying to use as your payment method, credit card, debit card ... ? Debit cards don't appear to still be accepted in all countries, and even where they are it seems (based on what some people have posted) that not all work.
    For a card to have a chance of being accepted it needs to be registered to exactly the same name and address (including format and spacing etc) that you have on your iTunes account, and have been issued by a bank in the country where you and your iTunes account are. If it is then you could check with the card issuer to see if it's them that are declining it, and if not then try contacting iTunes Support (these are user-to-user forums) and see if they know why it's being declined (but you might not be able to use a debit card) : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page, then Account Management
    Do you have a different card that you could try ? Or do you get the 'none' option on the payment details screen (that would allow you to download free items) ? If you are being prompted to review your account then you could see if this post by mountaingoatgirl lets you do so without needing to enter credit card details : https://discussions.apple.com/message/24303054#24303054

  • Why I can't login to my forms and response on forms central from my tablet Samsung.  thanks

    why I can't login to my forms and response on forms central from my tablet Samsung. thanks@

    [discussion moved to FormsCentral forum]

  • Connection Errors to Remote Desktop from OSX after Domain name change

    We have an issue using Microsoft Remote Desktop from Macs in our school. All was well until we changed the domain name of our RDS servers and installed a new wildcard certificate. Connections work perfectly in Windows 7/8 and also iOS on iPads, but we cannot
    get any Macs to connect having tried OSX 10.7 and 10.9. The error message says the connection failed to load but seems to add a spurious end to the connection string - TS/en-US/Default.aspx - but we cannot trace where this is being picked up.
    We can get to the site in a web browser and sign in to receive the "browser not supported" message in Safari so traffic is obviously getting to the severs.
    Has anyone else had a similar issue? We have spent days poking around with DNS etc but can't seem to make any progress here.

    Hi Jeremy,
    I have tried removing connections and also re-installing the App. We have been using this App since January with no real issues until we made our domain name change - I really don't understand why it works fine in Windows and iOS but not OSX. We are doing
    nothing different to what we have done from day 1.
    Log file from our old connection when it was working looked like this:
    [2014-Mar-24 10:41:43] RDP (0): Final rdp configuration used: redirectcomports=1
    server port=3389
    use multimon=1
    redirectdrives=1
    promptcredentialonce=1
    authentication level=0
    full address=rdsfarm.xxxxxxx.internal
    session bpp=16
    prompt for credentials on client=1
    redirectprinters=1
    drivestoredirect=*
    alternate shell=||OpenMind
    gatewayusagemethod=2
    alternate full address=rdsfarm.xxxxxx.internal
    workspace id=rdsgw.xxxxxxx.internal
    allow font smoothing=1
    redirectposdevices=0
    audiocapturemode=1
    gatewaycredentialssource=0
    remoteapplicationname=OpenMind 2.0
    devicestoredirect=*
    remoteapplicationmode=1
    remoteapplicationprogram=||OpenMind
    enablecredsspsupport=1
    redirectsmartcards=1
    redirectclipboard=1
    span monitors=1
    gatewayprofileusagemethod=1
    gatewayhostname=rds.xxxxxxx.sch.uk
    remoteapplicationcmdline=
    The log file looks very different now, all I am getting is:
    [2014-Jun-17 10:26:41] RDP (0): --- BEGIN INTERFACE LIST ---
    [2014-Jun-17 10:26:41] RDP (0): lo0 af=18  addr= netmask=
    [2014-Jun-17 10:26:41] RDP (0): lo0 af=30 (AF_INET6)  addr=fe80::1%lo0 netmask=ffff:ffff:ffff:ffff::
    [2014-Jun-17 10:26:41] RDP (0): lo0 af=2 (AF_INET)  addr=127.0.0.1 netmask=255.0.0.0
    [2014-Jun-17 10:26:41] RDP (0): lo0 af=30 (AF_INET6)  addr=::1 netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    [2014-Jun-17 10:26:41] RDP (0): gif0 af=18  addr= netmask=
    [2014-Jun-17 10:26:41] RDP (0): stf0 af=18  addr= netmask=
    [2014-Jun-17 10:26:41] RDP (0): en0 af=18  addr= netmask=
    [2014-Jun-17 10:26:41] RDP (0): en1 af=18  addr= netmask=
    [2014-Jun-17 10:26:41] RDP (0): en1 af=30 (AF_INET6)  addr=fe80::21f:5bff:feb8:3f72%en1 netmask=ffff:ffff:ffff:ffff::
    [2014-Jun-17 10:26:41] RDP (0): en1 af=2 (AF_INET)  addr=192.168.0.65 netmask=255.255.255.0
    [2014-Jun-17 10:26:41] RDP (0): fw0 af=18  addr= netmask=
    [2014-Jun-17 10:26:41] RDP (0): --- END INTERFACE LIST ---
    [2014-Jun-17 10:26:41] RDP (0): ----- BEGIN ACTIVE CONNECTION -----
    [2014-Jun-17 10:26:41] RDP (0): client version: 8.0.24875
    [2014-Jun-17 10:26:41] RDP (0): Protocol state changed to: ProtocolConnectingNetwork(1)
    [2014-Jun-17 10:26:41] RDP (0): correlation id: 9f18df13-7c84-dc4b-a780-e6b77a280000
    [2014-Jun-17 10:26:41] RDP (0): Protocol state changed to: ProtocolDisconnected(8)
    [2014-Jun-17 10:26:41] RDP (0): ------ END ACTIVE CONNECTION ------
    [2014-Jun-17 11:44:15] RDP (0): *** Application terminated ***
    [2014-Jun-18 09:51:37] RDP (0): *** Application terminated ***
    [2014-Jun-19 12:00:19] RDP (0): *** Application terminated ***
    [2014-Jun-19 12:15:32] RDP (0): *** Application terminated ***
    [2014-Jun-19 12:16:21] RDP (0): *** Application terminated ***

  • App server domain name changed

    Hi All,
    Our App server domain name changed so we did following ways to take the changes to effect. When starting the Middle-tire gives error
    Old name=koredm104715.in.company.com
    New name=ias-instance id=koredm104715.apac.company.com
    C:\Oracle\Product\OraMidTier10gR2\chgip\scripts>cmd chgiphost.bat -mid
    Microsoft Windows [Version 5.2.3790]
    (C) Copyright 1985-2003 Microsoft Corp.
    C:\Oracle\Product\OraMidTier10gR2\chgip\scripts>cmd /c chgiphost.bat -mid
    Oracle Home set to C:\Oracle\Product\OraMidTier10gR2
    Starting Change Hostname/IP...
    Enter fully qualified hostname (hostname.domainname) of destination
    (koredm104715.APAC.company.com)>>koredm104715.APAC.company.com
    Enter fully qualified hostname (hostname.domainname) of source
    (koredm104715.in.company.com)>>koredm104715.APAC.company.com <----------- Issue is here as source should be koredm104715.IN.company.com
    Enter valid IP Address of destination
    (10.47.32.43)>>10.47.32.43
    Enter valid IP Address of source
    (10.47.32.43)>>10.47.32.43
    Source and destination hostname/IP are identical.
    Continue? (y/n) y
    Change Hostname/IP completed successfully.
    C:\Oracle\Product\OraMidTier10gR2\chgip\scripts>cd..
    C:\Oracle\Product\OraMidTier10gR2\chgip>cd..
    C:\Oracle\Product\OraMidTier10gR2>cd opmn\bin\
    C:\Oracle\Product\OraMidTier10gR2\opmn\bin>opmnctl startall
    opmnctl: starting opmn and all managed processes...
    ==============================================================================
    opmn id=koredm104715:6200
        5 of 7 processes started.
    ias-instance id=OMT_10gR2.koredm104715.in.company.com
    ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    ias-component/process-type/process-set:
        WebCache/WebCache/WebCache
    Error
    --> Process (pid=3152)
        failed to start a managed process after the maximum retry limit
        Log:
        C:\Oracle\Product\OraMidTier10gR2\opmn\logs\WebCache~WebCache~1
    ias-component/process-type/process-set:
        WebCache/WebCacheAdmin/WebCacheAdmin
    Error
    --> Process (pid=4924)
        failed to start a managed process after the maximum retry limit
        Log:
        C:\Oracle\Product\OraMidTier10gR2\opmn\logs\WebCache~WebCacheAdmin~1
    C:\Oracle\Product\OraMidTier10gR2\opmn\bin>Edited by: Lokanath Giri on १९ जनवरी, २०१२ १:५८ अपराह्न

    Have you checked your web cache log files for errors? Also check the %ORACLE_HOME%\opmn\log directory as there are many log files which can be helpful resolving your issue.
    Thanks,
    EJ

  • How to change the name / IP address and domain name for BOE Server

    Hello,
    We want to change the name / IP address and domain name for BOE Server, please could you indicate the steps or procedure to follow?
    I need your help
    thank you

    If it's 3.1 just change them, shouldn't cause any issues if by domain name you are referring to changing the domain the computer belongs to. If you are changing your domain for AD authentication then you will may have to take quite a few steps if the old domain is going away. Let us know.
    Regards,
    Tim

  • Can I set up email with my domain name?

    My domain name and the website is set up under GypsyOwlProductions.com with Adobe Muse CC. Can I set up email with my domain name like: [email protected] I would like customers to be able to email to me from outside the website. I have set up yahoo and gmail accounts for my business, and would like the mail from (exp) [email protected] be redirected to either my gmail or yahoo. is that possible?

    HI,
    If you have Free sites with creative cloud, then these sites do not allow you to host your email with BC. You can either upgrade your website to higher site plan, or chose one of the alternative email host, given in the following link
    Business Catalyst Help | Creative Cloud Sites / Set up email
    Do let me know if you have any question.

  • Server host and domain name have changed, which files do I edit?

    I just changed my Linux box server name and host name. I am going to edit the:
    tnsnames.ora
    sqlnet.ora
    listener.ora
    files to reflect the new host and domain name, are these the only files I need to edit?
    Thanks!

    OK here is my output when I try 2 different tnsping commands on my remote Linux box from my local PC:
    1.)
    C:\Documents and Settings\Rick>tnsping db.host.mtdomain.com
    TNS Ping Utility for 32-bit Windows: Version 9.2.0.1.0 - Production on 13-NOV-2005 07:38:55
    Copyright (c) 1997 Oracle Corporation. All rights reserved.
    Used parameter files:
    C:\oracle\ora92\network\admin\sqlnet.ora
    TNS-03505: Failed to resolve name
    2.)
    C:\Documents and Settings\Rick>tnsping mydomain.com
    TNS Ping Utility for 32-bit Windows: Version 9.2.0.1.0 - Production on 13-NOV-2005 07:36:07
    Copyright (c) 1997 Oracle Corporation. All rights reserved.
    Used parameter files:
    C:\oracle\ora92\network\admin\sqlnet.ora
    Used HOSTNAME adapter to resolve the alias
    Attempting to contact (DESCRIPTION=(CONNECT_DATA=(SID=*)(SERVICE_NAME=mydomain.com))(ADDRESS=(PROTOCOL=TCP)(HOST=mydomain.com)(PORT=1521)))
    OK (250 msec)
    Here are my sqlnet.ora, listener.ora, and tnsnames.ora
    # SQLNET.ORA Network Configuration File: /home/oracle/Oracle9i/product/9.2.0/network/admin/sqlnet.ora
    # Generated by Oracle configuration tools.
    NAMES.DEFAULT_DOMAIN = host.mydomain.com
    NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)
    # LISTENER.ORA Network Configuration File: /home/oracle/Oracle9i/product/9.2.0/network/admin/listener.ora
    # Generated by Oracle configuration tools.
    LISTENER =
    (DESCRIPTION_LIST =
    (DESCRIPTION =
    (ADDRESS_LIST =
    (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
    (ADDRESS_LIST =
    (ADDRESS = (PROTOCOL = TCP)(HOST = host.mydomain.com)(PORT = 1521))
    SID_LIST_LISTENER =
    (SID_LIST =
    (SID_DESC =
    (SID_NAME = PLSExtProc)
    (ORACLE_HOME = /home/oracle/Oracle9i/product/9.2.0)
    (PROGRAM = extproc)
    (SID_DESC =
    (GLOBAL_DBNAME = db9i)
    (ORACLE_HOME = /home/oracle/Oracle9i/product/9.2.0)
    (SID_NAME = db9i)
    # TNSNAMES.ORA Network Configuration File: /home/oracle/Oracle9i/product/9.2.0/network/admin/tnsnames.ora
    # Generated by Oracle configuration tools.
    DB.host.mydomain.com =
    (DESCRIPTION =
    (ADDRESS_LIST =
    (ADDRESS = (PROTOCOL = TCP)(HOST = host.mydomain.com)(PORT = 1521))
    (CONNECT_DATA =
    (SERVICE_NAME = db)
    EXTPROC_CONNECTION_DATA.host.mydomain.com =
    (DESCRIPTION =
    (ADDRESS_LIST =
    (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
    (CONNECT_DATA =
    (SID = PLSExtProc)
    (PRESENTATION = RO)
    INST1_HTTP.host.mydomain.com =
    (DESCRIPTION =
    (ADDRESS_LIST =
    (ADDRESS = (PROTOCOL = TCP)(HOST = 127.0.0.1)(PORT = 1521))
    (CONNECT_DATA =
    (SERVER = SHARED)
    (SERVICE_NAME = MODOSE)
    (PRESENTATION = http://HRService)
    )

  • Clients can't login to OD when home folders are on server

    Lion Server 10.7.2, Lion Clients 10.7.2
    Fresh new server, not a single service is on, except for file sharing, dns, open directory.
    After setting up network, time to add some clients.
    Clients whose homefolders are marked as "only local" (in server app), can login to their account on a client machine, with obviously local homefolders.
    The moment the "only local" setting is changed to a network homefolder location (the default "Users"), they can no longer login, and get a simple message not being able to login.
    I do not have a lot of knowledge of servers, but this is a real simple setup:
    Fresh server, only one client machine (for now).
    In Directory Utility (on server AND client), the HomeDirectory and NFSHomeDirectory are matching, and pointing at the selected path for this network-user. As is in Workgroup manager, the homefolder path is pointing where is should.
    Just tried on a leopard client machine. Binding OD in seconds, but with the same client login result.
    Can anyone help me with this one?
    Thanks

    Yes indeed kjamezzz, that was my problem.
    But same as Good-heart, no connection possible to OD when away from server. Probably because the 'Users and Groups" preferences point to OD-server  server.local  instead of the external DNS record. But the client can't find the OD server when pointing to the external DNS record, even when they are in the same network.

  • 10.6 client can't login to 10.9 server

    Wondering if there were any known issues with 10.6 clients connecting to 10.9 server.
    When the user tries to log in, they get the invalid username and password message.  It does work from 10.9.
    We just upgraded from 10.6 to 10.9 server.  We had a work through a number of issues with that.  We changed our hostname before upgrading and things were working until we upgraded to 10.9 server.  Had to rebuild open directory and fix some DNS issues.  Our DNS server is now on a different server.
    These errors from system log may be relevant.

    Verify that your network is functional and correctly-configured, and that your DNS services are correct, as a starting point.  Then definitely check the logs on the server, looking for clues around the particular errors being encountered.
    Beachballs within the administrative tools can be triggered by network errors and by invalid DNS configurations, and wonky network settings can derail the distributed authentication.

Maybe you are looking for