SNMP authentication failure for User Tracking

Hi,
In reference to this thread from a few years back, I have a similar issue on LMS3.2.1 (CM 5.2.2) ...
https://supportforums.cisco.com/message/641479#641479
I have hourly spikes in CPU on a lot of devices that I think is related to this. Packet sniffing shows the proper SNMP community string, but I'm getting auth fails. I took a look at the ANIServer.properties but can't make any sense of what I should be changing.
Looking up the MIBs doesn't seem to get me anywhere.
Any suggestions (J. Clarke--you know your stuff! or anyone from Cisco?)
Thanks

You'll want to set
UTGetSuspendedVlans=0
UTGetVlansOnDownPorts=0
in ANIServer.properties.
When you poll a switch for its MAC table using the BRIDGE-MIB, the community string that is used is in the format of @. The above prevents Campus from polling for vlans that are suspended or which do not have any active ports on them.
Also, if you are using SNMP v3, then you need to configure vlan contexts for the valid vlans on the device for the same reason.

Similar Messages

Authentication failure for zone 1 error

We did some cleanup of old user accounts in our edir tree and after that I noticed a whole bunch of error messages on our catalina.out file. Problem is the error message does not specify what account it is looking for so I do not know what account I need to restore/recreate. Vibe seems to be working okay so I'm not sure what is broken with this account missing. Error message reads:
2014-01-18 18:38:02,429 WARN [http-8443-55] [org.kablink.teaming.module.authentication.impl.Aut henticationModuleImpl] - Authentication failure for zone 1: org.springframework.security.userdetails.UsernameN otFoundException: User account disabled or deleted; nested exception is org.kablink.teaming.security.authentication.UserAc countNotActiveException: This account has been disabled or deleted.
We are running on Vibe 3.4.0. Any help in identifying the account needed would be much appreciated.
Thank you,
Ronnie

This looks okay. An authFail indicates that someone is polling this device with the wrong community string. Check x.x.x.x to make sure there aren't any applications polling this device with wrong credentials.
Something else to note is that you should not be using '@' in your community strings. While this shouldn't really matter for routers, it's a good rule of thumb not to use '@' on Cisco devices as that character is reserved for community string indexing.

SNMP Authentication Failure

Hi Folks
I saw the below in wlc controller ,what this mean,how to fix this issue if any
Most Recent Traps
SNMP Authentication Failure: IP Address: 192.168.10.2

I have same problem in WLC,
1) are you using snmpv3 ?
-Using SNMP modes -v2c & v3
2) What does this ip address relate to ? some specific device ?
-Its WCS
With this problem we are unable to add guest users from WCS to WLC.
Thanks in advance.

NoMachine(freenx) Authentication failed for user (MYUSERNAME)

Hi all,
I have quite a few experience with freenx on other linux distributions, but this is my first time setting up freenx on archlinux. After following the instructions in the wiki, authentication keeps failing no matter what I do.
Stuff I've done from the wiki:
1. install freenx
2. add RSAAuthentication yes AllowUsers someuser nx to sshd_config
3. add md5sum to node.conf
4. pacman -S xdialog xterm
5. run "/usr/bin/nxsetup --install --setup-nomachine-key"
6. modify /etc/nxserver/node.conf so that "USER_X_STARTUP_SCRIPT=.xinitrc"
7. pick the right configurations when connecting to my server
I have "exec startxfce4" in .xinitrc.
It always goes up to "Waiting for authentication" and then "Authentication failed for user (MYUSERNAME)" pops up. I think it should not be a XFCE issue since authentication itself didn't even pass. I assume if it is a X window problem, what I would get is something like a blank screen.
I'm using public key, so I didn't really copy anything from the server to my client.
I couldn't think of a second reason why this wouldn't work. Is there any thing obvious that I missed? (If so, please move this thread to the newbie corner. lol)
Any thoughts would be highly appreciated.
Thanks
Aweather

Hi,
I did update the password in the properties file but still I get the error
BUILD FAILED
C:\product\10.1.3.1\OracleAS_1\bpel\samples\utils\CreditRatingService\build.xml:
79: Authentication failed for user "oc4jadmin" on host
I am able to deploy from JDEV. and could configure as per documentation
Thanks in advance,
Anand
I had to update the <OH>/bpel/utilities/ant-orabpel.properties file for the password and now I can deploy successfully...information was there in the readme file...
Anand
Message was edited by:
AnandP

Essbase Error 1051440 - Authentication fails for user admin

We are facing a very unique problem...
The application is up & running.. even I can login into the application, can perform member addition, editing & mamage database from planning.... but I get this error while retreiving from excel addin or running scripts.
What I analysed is that this problem is Actually coming when a particular set of members are called anywhere either in scripts or during retreival thru Addin.
Recently we had added one dimension in one of the database of our application. After that that this problem started.
There were fewer Xref functions used to pull data from other cubes.... The problem is cominng with only those set of members where this Xref function has been used.
Even I had changed the formulas & incorporated member of new dimension in the formulas to point to target members....
Can you guys ever had faced such kind of issue....
Please help in resolving....
Complete Error is: msg fromremote site[date n time] Local////Error(1051440) Essbase user[admin] Authentication fails against shared services serverwith Error[30:1005:Authentication failed for user admin. Enter valid credentials.]]

Hi,
are you sure that user "admin" has all necessary rights to run your scripts? I have to ask because we sometimes had problems with our admin user... There is an "native essbase server admin" and the admin user in shared services.
We dont had any idea how this could happen but sometimes our admin user changed to the mentioned "native essbase server admin" - you can see it if you are connected as "admin (internal)".
If you are logged in as "admin (internal)" you have to "externalize" this user.
Hope this helps and my bad english is not so much confusing... :-)
Kind regards
André

Defining an Authentication Scheme for user ID and password and client certi

Hi,
                I do need to define an Authentication Scheme for user ID/Password and client certificate,, both at the same time, so whenever the end user access the SAP Portal he/she will be asked to provide user and password as well digital certificate,
                Despite of the whole idea behind o f the concept of digital certificate, my client sill wants to keep the user ID and password to complies with business requirements.
     I found a documentation that discuss Authentication Scheme with example using both ID and Digital certificate, but the priority was set different for each authentication method.
http://help.sap.com/saphelp_nw04s/helpdata/en/d3/1dd4516c518645a59e5cff2628a5c1/content.htm
     So I am wondering with I can accomplish User ID/Pwd plus digital certificate just by making the priority the same value. Anyone had a similar requirement?
Best Regards
Claudio Rocha

Hi
Did you get an answer for this Query ?
Regards
Priyanka

Prime infra 2.1 : SNMP Authentication failure polling

Dear all,
I post this message because we have some trouble during SNMP V2 poll on all our switches.
We took care to deploy the good snmp credentials into the "Operate-> discovery settings" and even into the "Administration -> sys settings -> SNMP credentials".
The issue is that during the poll phase the SNMP credential "default" is sent to all switchs that is causing a lot of "authentication failure" traps (a packet capture has been done to confirm this trouble).
The correct credential is sent in parallel of this request that is ok.
The OID requested is the 1.3.6.1.2.1.1.6.0 (which seems to be the "sysLocation" value). We already tried to restart the NCS services but trouble is still present.
thank you in advance for your support,
regards,
SebastienJ

Hello Afrahmad,
we tried but unfortunately no success with RW community.
We also tested before to place bigger timeout and more retries but no more result at all.
the only thing that is seems to work for the moment is to configure on our switchs the community name "default" but it is not a viable solution for us unfortunately.
Regards,
sebastien

Wism2 SNMP Authentication Failure

I cannot seem to communicate with my new Wism2 via SNMP.
The configuration is the same as on my Wism 1, same version of code, same SNMP settings and strings and subnets.
Slot Controller Service IP       Management IP    SW Version    Controller Type    Status
----+-----------+----------------+----------------+------------+------------------+---------------
1     1           192.168.10.2     10.XX.XX.10      7.0.116.0    WS-SVC-WISM-1-K9   Oper-Up
1     2           192.168.10.3     10.XX.XX.15      7.0.116.0    WS-SVC-WISM-1-K9   Oper-Up
3     1           192.168.10.4     10.XX.XX.20      7.0.116.0    WS-SVC-WISM-2-K9   Oper-Up
SNMPWalk of the Wism1 controllers is fine. SNMPWalk of the Wism2 just gets me a timeout.
The snmplog does occasionally register an Authentication failure
Trying V1 and V2c with the same results.
Any advice?

on thew new WiSM2 did you issue the command config network-mgmt-via-dyamic interface enable?
by default the WLC has issues with responding to requests from the wire, for a subnet that it is configured to use. The above is the workaround to this situation.
Per the best practices guide, "It is important to avoid configuring a dynamic interface in the same sub network as a server that has to be reachable by the controller CPU, for example a RADIUS server, as it might cause asymmetric routing issues."
HTH,
Steve

Why does Proxy Authentication prompt for user/pass on Win7 but not XP?

Trying to use NTLM authentication for our proxy through Firefox 7.0.1. It works great in Windows XP - the user doesn't ever get prompted for his username or password when going to the internet. However, when using the same settings with Windows 7 machines going to the same internet sites, they always get prompted for username and password. Is there a workaround for this? Is this a bug?

Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem.
*Switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance
*Do NOT click the Reset button on the Safe Mode start window
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

10.8.4 SACL membership failure for user

I got this message in the afp log after a successful authentifcation by the Open Directory located on the same server. I was attempting to login as a client to a sharepoint that automounted in Workgroup Manager in the home directories list. That sharepoint as read/write rights open to everyone.
ATM I am able to login from a client if I change the network home folder of this user to another sharepoint hosted on another server that functions as a replica. Strangely enough, others replicas than this one provide the same error message.
Solutions to this error message were provided on this forum for older OS that required Admin server to fix. Any idea what I could do ?

Did you check the Service ACLs ?
In Server Admin, in the left panel, at the top is the Server (just above AFP)
Click the server, then look for the Access tab.

Kerberos Authentication Failure for POP3 After Upgrading to 10.6.5

So I just upgraded from 10.6.4 to 10.6.5 and now Kerberos authentication for POP3 from Mail fails. Kerberos authentication for SMTP outgoing mail is just fine, it's only POP3 incoming mail that fails to authenticate. POP3 Kerberos authentication still works fine for the same account from another machine running 10.5.8. The mailaccess.log file contains the following:
Nov 23 15:36:59 server master[423]: about to exec /usr/bin/cyrus/bin/pop3d
Nov 23 15:36:59 server pop3[423]: executed
Nov 23 15:37:00 server pop3[423]: accepted connection
Nov 23 15:37:00 server pop3[423]: Major Error (1): A token was invalid (gssaccept_seccontext)
Nov 23 15:37:01 server pop3[423]: Minor Error (1): Token header is malformed or corrupt (gssaccept_seccontext)
Nov 23 15:37:01 server pop3[423]: Major Error (1): A token was invalid (gssaccept_seccontext)
Nov 23 15:37:01 server pop3[423]: Minor Error (1): Token header is malformed or corrupt (gssaccept_seccontext)
Nov 23 15:37:04 server pop3[423]: badlogin: FQDN [192.168.0.4] GSSAPI
Nov 23 15:37:04 server master[52]: process 423 exited, status 0
The server is running Mac OS X Server 10.4.11 and cannot be upgraded any further than as it is ancient hardware.
Any thoughts?
Cheers,
Derek

Makes perfect sense to me that ending one session by logging out enables him to begin a new session by logging back in. I give the young man credit for figuring out how to get around this deficiency in Parental Controls, as, deep down, I'm sure you do, too.
If you can't trust him to stick to his agreed upon half an hour a day, you can always (threaten to) lock him out of the computer for 23.5 hrs/day using the Bedtime settings. ; )

LMS 4.0.1 and User tracking with SNMP v3

Hi! (again )
I've another problem with our new LMS 4.0.1.
We manage our devices with SNMP v3 but the user tracking don't want to work flawlessly.
I've attached an example from our SNMP configuration. Basicly it's the same in our devices.
1st the problem was that no matter what I did the User tracking didn't want to find any host. I left it and worked on something else. After 2 weeks suddenly appeard couple of thousand end host.
As earlier (LMS 2.6 or 3.2 with snmp v2) it is the same that LMS cannot differentiate normal end host and IP Phones although we have several thousand from both. But this is only one problem.
The other is that there are switches with the same IOS and SNMP configuration and from one I get the UT data and from another one I didn't get anything. Only from some 4506 (aprox. 12-15) and 6506 (2) works and we have 20+ 4506 and 10+ 6506. Not to mention the other switches (couple of houndred 2960 and 3750).
I'll be grateful if somebody could advice what to do.
Thanks
Gabor

Understanding Debugger Utility
The utility displays a report on the reasons why User Tracking failed to discover end hosts on specific ports.
In many cases, User Tracking may not perform as expected. This may be because of problems in other LMS applications. For instance LMS Server may have devices that are not discovered or inadequate VLAN discovery in Topology Services.
You can run the utility to troubleshoot problems, or provide the report and log generated by the utility when you contact TAC for help in diagnosing problems.
The debugger utility uses the data collected by LMS Server and reports the reasons for the missing ports in User Tracking.
This tool also has an SNMP component embedded which runs an SNMP query for the table as a part of verification for SNMP failure. For example, SNMP bugs in Catalyst operating system because of which User Tracking may fail to discover devices.
This generates an Action Report that you can use to analyze the data.
The Debugger Utility:
1. Checks the switch ports in a sequential order.
2. Reports violation of basic rules for each of the missing ports such as link ports and trunk ports.
3. Checks for SNMP retrieval of data, if the ports pass the validity check.
4. Generates an Action Report suggesting possible remedial actions to retrieve the valid missing ports.
Using Debugger Utility
The Debugger Utility is available at $NMSROOT/campus/bin/ (where $NMSROOT is the directory where you have installed CiscoWorks).
To run the Debugger Utility, run the command:
utdebug -switch switch-ip -port port1[,port2 ...] [-export filename]
where,
switch is the switch to which the end hosts are connected.
ports are the ports on the switch which have missing end hosts User Tracking.
-export filename specifies that the debug messages be stored in the file specified. If this option is not used, the messages are displayed on the console.
For example,
utdebug -switch 10.29.6.12 -port 5/12
utdebug -switch 10.29.100.10 -port Fa0/10
utdebug -switch 10.29.6.14 -port Gi6
Pretty sure you will find this and perhaps more in the build in help of LMS
Cheers,
Michel

Can't start managed server - Authentication for user denied

Greetings,
I have a WebLogic 10.3.6 based domain. The admin server works correctly. Using the admin console, I created a managed server. It is not associated to any machine and I don't use node manager. The managed server listens on localhost:7101 while the admin listens on localhost:7001. Starting the managed server asks for an user/password authentication. Using the same as the one used for the admin console says:
<7 dÚc. 2012 13 h 55 CET> <Critical> <Security> <BEA-090403> <Authentication for
user nicolas denied>
<7 dÚc. 2012 13 h 55 CET> <Critical> <WebLogicServer> <BEA-000386> <Server subsy
stem failed. Reason: weblogic.security.SecurityInitializationException: Authenti
cation for user nicolas denied
weblogic.security.SecurityInitializationException: Authentication for user nicol
as denied
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.do
BootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:966)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.in
itialize(CommonSecurityServiceManagerDelegateImpl.java:1054)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityS
erviceManager.java:873)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
Truncated. see log file for complete stacktrace
Caused By: javax.security.auth.login.FailedLoginException: [Security:090303]Auth
entication Failed: User nicolas weblogic.security.providers.authentication.LDAPA
tnDelegateException: [Security:090295]caught unexpected exception
at weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.log
in(LDAPAtnLoginModuleImpl.java:251)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(Log
inModuleWrapper.java:110)
at java.security.AccessController.doPrivileged(Native Method)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(Log
inModuleWrapper.java:106)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
Truncated. see log file for complete stacktrace
>
<7 dÚc. 2012 13 h 55 CET> <Notice> <WebLogicServer> <BEA-000365> <Server state c
hanged to FAILED>
<7 dÚc. 2012 13 h 55 CET> <Error> <WebLogicServer> <BEA-000383> <A critical serv
ice failed. The server will shut itself down>
<7 dÚc. 2012 13 h 55 CET> <Notice> <WebLogicServer> <BEA-000365> <Server state c
hanged to FORCE_SHUTTING_DOWN>
I googled a while and found a post saying that the realm is probably altered or in an incorrect status. I reset the the admin's credentials using weblogic.security.utils.AdminAccount but this disn't change anything. Of course, upon the managed server creation, I initialized the fierlds user and password in the server starting tab of the admin console.
Many thanks for any help.
Nicolas

Hi,
Have you configured LDAP Authenticator on the server?
If yes, afther the change did you restart both the servers - admin and managed?

Getting mail authentication errors for outlook user sending mail

When Outlook 2010 user attempts to use port 587 to send mail (to himself at this point), we see the following in the server logs:
(User in question can attach to file shares on the same server just fine from his Windows laptop)
Outlook config for outbound server is "port: 587, encryption TLS"
When we connect, we get "connection interrupted by server"
Tried other encryption methods - outlook 2010 states that server does not support the other methods (None, SSL)
SMTPD Logs
Jul 29 22:22:58 <servername>.l-n-l.com postfix/smtpd[2306]: connect from <Outlook Client Name>[<Outlook ClientAddr>]
Jul 29 22:22:58 <servername>.l-n-l.com postfix/smtpd[2306]: error: validate response: error: Authentication server failed to complete the requested operation.
Jul 29 22:22:58 <servername>.l-n-l.com postfix/smtpd[2306]: error: validate response: authentication failed for user=colin (method=DIGEST-MD5)
Jul 29 22:22:58 <servername>.l-n-l.com postfix/master[1407]: warning: process /usr/libexec/postfix/smtpd pid 2306 killed by signal 6
Jul 29 22:22:58 <servername>.l-n-l.com postfix/master[1407]: warning: /usr/libexec/postfix/smtpd: bad command startup -- throttling
Jul 29 22:24:12 <servername>.l-n-l.com postfix/smtpd[2270]: timeout after END-OF-MESSAGE from localhost[127.0.0.1]
Jul 29 22:24:12 <servername>.l-n-l.com postfix/smtpd[2270]: disconnect from localhost[127.0.0.1]
Meanwhile: Mac clients are able to connect to smptd submission port to send mail with no problems. Based on what the logs say, it appears that the Mac mail is using a different authentication mechanism.
Client config for outbound server is "use custom port: 587, Use SSL:Checked, Authentication: MD5 Challenge-Response"
Jul 29 22:19:12 <servername>.l-n-l.com postfix/smtpd[2261]: connect from <Mac Client Name>[<MacClientAddr>]
Jul 29 22:19:12 <servername>.l-n-l.com postfix/smtpd[2261]: 721FCEC991: client=<Mac Client Name>[<MacClientAddr>], sasl_method=CRAM-MD5, sasl_username=<username>@l-n-l.com
Jul 29 22:19:12 <servername>.l-n-l.com postfix/cleanup[2267]: 721FCEC991: message-id=<[email protected]>
Jul 29 22:19:12 <servername>.l-n-l.com postfix/qmgr[1800]: 721FCEC991: from=<[email protected]>, size=573, nrcpt=1 (queue active)
Jul 29 22:19:12 <servername>.l-n-l.compostfix/smtpd[2270]: connect from localhost[127.0.0.1]
Jul 29 22:19:12 <servername>.l-n-l.com postfix/smtpd[2270]: E722AEC9A0: client=localhost[127.0.0.1]
Jul 29 22:19:12 <servername>.l-n-l.com postfix/cleanup[2267]: E722AEC9A0: message-id=<[email protected]>
Jul 29 22:19:12 <servername>.l-n-l.com postfix/qmgr[1800]: E722AEC9A0: from=<[email protected]>, size=994, nrcpt=1 (queue active)
Jul 29 22:19:12 <servername>.l-n-l.com postfix/smtp[2268]: 721FCEC991: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.55, delays=0.06/0.01/0.01/0.48, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as E722AEC9A0)
Jul 29 22:19:12 <servername>.l-n-l.com postfix/qmgr[1800]: 721FCEC991: removed
Jul 29 22:19:13 <servername>.l-n-l.com postfix/pipe[2273]: E722AEC9A0: to=<[email protected]>, relay=dovecot, delay=0.13, delays=0/0.01/0/0.12, dsn=2.0.0, status=sent (delivered via dovecot service)
Jul 29 22:19:13 <servername>.l-n-l.com postfix/qmgr[1800]: E722AEC9A0: removed
Jul 29 22:20:12 <servername>.l-n-l.com postfix/smtpd[2261]: disconnect from <Mac Client Name>[<MacClientAddr>]
Running OS X 10.8.4 with Server 2.2.1.
Any thoughts on what I need to do to make OSX Server mail play nice with Outlook over the submission port?
Thanks in advance!!

Ok - so I think I have it almost all sussed. So for all 3 of you who might be reading this, here is what is going on.
1) As I expected, this has nothing to do with the FQDN/Outlook problem. I actually rejoiced when I finally got far enough to have that problem with my Outlook 2007 and 2010 clients. And I don't like the recommended fix for that either. There is another way - more on that in a minute.
2) This problem was all about authentication methods. At present, I have OS X Mail Server set for plain text and APOP only. I will be working to fix this soon - but at present I am unable to find any other combination that permits both Mac Mail and Outlook clients to authenticate properly. Mac Mail wants to use CRAM-MD5 by default. Outlook is so incompatible with CRAM-MD5 that even when there are other authentication methods available on the mail server, if CRAM-MD5 is selected on the Server then Outlook fails miserably no matter how you configure the Outlook client. Caveat: this is my own observation and I still have some experimenting to do. If you know otherwise (or can confirm more definitively), then please speak up!
So here is the working configuration at present:
   A) Mail Server authentication set to Custom with PlainText and APOP selected, all others blank.
   B) Firewall permits inbound from ports 25 (for mail from "outside"), 587 (submission for authenticated users, TLS) 993 (SSL IMAP), and 995 (SSL POP).
   C) Mac POP Clients:
      i) For retrieval (POP) In advanced settings, use Port 995, Check "Use SSL", Select APOP for authentication.
      ii) For submission (SMTP) : Set port 587 (only), Set Authentication to "Password"
    D) Outlook 2007,2010,2013 clients
       i) For retrieval (POP), Set "Require secure logon using SPA"
      ii) In "More Settings/Outgoing Server" set it to require authentication with same credentials as inbound
     iii) In "More Settings/Advanced"
         a) Turn on Encryption for the POP3, this should change the port to 995 automatically. If it does not, fix that too.
         b) Set outgoing server to 587
         c) Set TLS for the encryption type (nothing else will work here)
Once you do 2.A, 2.B, 2.D, you will THEN, finally encounter the FQDN problem.
3) So Apple and a lot of folks here in the forums resolve the FQDN problem by removing one of the restrictions:
    Remove "reject_non_fqdn_helo_hostname" from "smtpd_helo_restrictions" in your postfix main.cf file.
I have at least 2 problems with this:
   A) It removes yet another little bit of security from the setup
   B) It involves non-GUI changes to the config...which is dangerous if you use the GUI, as changes within the GUI will often result in overwrites to your changes outside the GUI. So you can easily lose this fix without being aware of it until one of your Outlook users starts screaming.
The problem is really with Outlook and Windows not sending the FQDN in the first place. So how about we force them to do that instead? It turns out not to be too hard. I found a thread somewhere that goes into this and it works. Further, the solution remains on through reboots AND also can be made part of an automated deployment of a standard config. The only gotcha is you have to edit the registry...so you have to be careful. You only need to do this ONCE though, and the two entries are easy to find.
C) Under HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/services/Tcpip/Parameters
       i) Set Hostname to the FQDN of your host (replace HOST with HOST.domain.com - or .net, or whatever)
      ii) Set NV Hostname to the FQDN of your host
      iii) Close Regedit and Reboot to have the changes take effect
Once you do this, the FQDN problem for Outlook users goes away.
So I am looking for suggestions to make the SMTP submission more secure. Aside from that, things are working - and I have had to make ZERO changes to config files outside of the Server GUI - a plus as far as I am concerned.

Authentication Failure (Password Mismatch)

Hi there.
I am having a nightmare trying to get my web server working under Snow Leopard. To cut a long story short the server died and I had to restore it using a disk image before I migrate it to a new mavericks server. For obvious reasons I'd like to get everything working before I migrate.
Whenever a users tries to access a secure page (mainly for svn access) they get rejected. If I try to access the page via safari/chrome I get a pop up window asking for a username and password. If the user enters their correct name and password it is constantly rejected (the name and password work elsewhere for email etc).
In the logs on the server I get:
[Wed Feb 05 16:34:33 2014] [error] [client 192.168.0.56] mod_auth_apple: User XXX authentication failure for "/xxx/xxxxxx": Password mismatch according to checkpw
[Wed Feb 05 16:34:33 2014] [notice] [client 192.168.0.56] mod_auth_apple: Authenticating using lookupd or checkpw failed, and no configured htaccess file (AuthUserFile)
If in Versions I try to refresh the svn repository I get:
OPTIONS of 'https://[email protected]/svn/project'://[email protected]/svn/project': authorization failed: Could not authenticate to server: rejected Basic challenge (https://server.name.com)
I am also having issues with iCal Server and AFP which makes me think there is some authorisation service which is corrupt/broken?
Any help MOST appreciated as I am tearing my hair out here!
Yours,
Nic

Ok something I have worked out by a bit of trial and error.
NEVER run a server with two HDDs both with clones/installs of Mac OS.
My server had the internal (faulty HDD) with the original server install called Macintosh HD. The clone was on a USB drive called SnowLeopardServer_Backup.
Now for the most part the server worked (because most stuff uses Unix and proper paths). However it looks like all of apples stuff (Web services, iCal server and AFP) use the full path or at least components of them do. So because the server was originally set up on an HDD called Macintosh HD I can only suspect that it was freaking out by 1) now being on an HDD called something else and 2) that there was another HDD there called Macintosh HD.
I have now renamed my old HDD to something else and renamed all the OS folders in it to something different too. I also renamed the clone drive to Macintosh HD.
So far I turned on Web services and AFP and they work perfectly I have not turned on iCal yet as I want to ensure each service is working before turning on another.
Also finally got the holy grail of Kerberos and Open Directory triangle working. I though that the iCal/Web/AFP not working with accounts was Open Directory related so I backed it up (and WGM), change to standalone and then tried to go back to a Master. It complained about the DNS not being set up and I finally found a post saying that you need to have your DNS set to point at 127.0.0.1 in the System Preferences > Network settings. I changed that and boom no more complaints about bad DNS
Nic.

SNMP authentication failure for User Tracking

Similar Messages

Maybe you are looking for