Users cannot connect over SMB 10.10.1 server.app 4.0 and 4.0.3

Hello,
I have an issue where users cannot connect to a server for files sharing over SMB.
Info:
All users on 10.10.1
2 Servers on 10.10.1
Server.app 4.0.3 but issue was also present using 4.0
SMB connection works when connecting to the OD Master
SMB does not work when connecting to the OD Replica ServerBut AFP works fine when connecting to the OD Replica Server.
I have destroyed and re-added the OD replica but that did not seem to help
This is what I see in the logs each time I try to connect(logs have been cleaned to remove client details:
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: label: default
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: dbname: od:/Local/Default
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: mkey_file: /var/db/krb5kdc/m-key
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: acl_file: /var/db/krb5kdc/kadmind.acl
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: digest-request: netr probe 0
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: digest-request: init request
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: digest-request: init return domain: SERVER2 server: SERVER2 indomain was: <NULL>
Jan 9 14:37:13 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:13 server.pretendco.com digest-service[9961]: digest-request: init request
Jan 9 14:37:13 server.pretendco.com digest-service[9961]: digest-request: init return domain: SERVER2 server: SERVER2 indomain was: <NULL>
Jan 9 14:37:13 server.pretendco.com kdc[4802]: Got a canonicalize request for a LKDC realm from local-ipc
Jan 9 14:37:13 server.pretendco.com kdc[4802]: Asked for LKDC, but there is none
Jan 9 14:37:13 server.pretendco.com sandboxd[395] ([4802]): kdc(4802) deny file-read-data /private/etc/krb5.conf
Jan 9 14:37:22 server.pretendco.com kdc[4802]: Got a canonicalize request for a LKDC realm from local-ipc
Jan 9 14:37:22 server.pretendco.com kdc[4802]: Asked for LKDC, but there is none
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init request
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init return domain: SERVER2 server: SERVER2 indomain was: <NULL>
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init request
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init return domain: SERVER2 server: SERVER2 indomain was: <NULL>
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: od failed with 2 proto=ntlmv2
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: user=SERVER2\\username
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: kdc failed with 36150275 proto=unknown
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: guest failed with -1561745590 proto=ntlmv2
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init request
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init return domain: SERVER2 server: SERVER2 indomain was: <NULL>
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init request
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init return domain: SERVER2 server: SERVER2 indomain was: <NULL>
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: od failed with 2 proto=ntlmv2
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: user=SERVER2\\codywood
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: kdc failed with 36150275 proto=unknown
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: guest failed with -1561745590 proto=ntlmv2
I suspect the problem is to do with Kerberos and in relation to this server being an OD Replica.
I would really appreciate anyone's insight into this.
Thanks
Morgs

I have the same problem although I upgraded from Lion Server to Mountain Lion Server. The error appears to go hand in hand with this error.
userInit: CFPreferences: user home directory for user kCFPreferencesCurrentUser at /Network/Servers/fullyqualifieddomainname/Users/user is unavailable. User domains will be volatile.
I've read a number of things to try. A lot of people point to DNS being a problem, but I'm confident this is correct in my environment.

Similar Messages

Windows SMB users cannot connect to 10.5.4 server

Hi all,
Have a server running 10.5.4 bound to AD and running an OD to provide management of the Macs. Pretty standard setup and haven't had any problems elsewhere with the same deployment. However we're having a problem with XP users connecting to SMB shares. Mac users can connect over AFP or SMB fine, XP users are getting a "Network path could not be found" error. What's more the errors in the SMB log on the server aren't too descriptive. We're getting a few broken pipe errors, but no indication of what's causing that. XP machines don't appear to be getting to the authentication stage.
Server is an Xserve with a Promise RAID, shares are on a 4TB partition, bound to AD (OD not running Kerberos). SMB setup seems to be correctly aware of the AD.
Anyone any ideas?
Thanks

Is your SMB a Standalone or Domain Member?
I have a similar problem and noticed that if I change SMB from "Domain Member" to Standalone Windows users can connect. Now every so often Leopard Server will change SMB back to a Domain Member (automatically).
I have the Server bound to AD. AFP works for the Macs no matter what. Mac Users authenticate to AD and mount the share. However if they try to use SMB, it fails for the Macs as well if SMB is a Domain Member.
I would like to stop Leopard from not reverting back or fix the "domain member" problem.
The fact that I can connect while it's a Standalone suggests, to me, that it's not a permissions problem. As well the failure carries to the Mac side means it's not a Windows issue.

How do i create a form in live cycle E4 that i can save as a PDF that the user cannot save over?

How do i create a form in live cycle E4 that i can save as a PDF that the user cannot save over?

You can't. If the file is made read-only via the file system, the user will prompted to save as a new file if they attempt to save.

Sharing only users cannot connect to Lion Server

Dear all,
I stumbled across a funny problem, that I tried to resolve all day. I just wanted to add a sharing only user for my girlfriends new MacBook that she could use to connect to a shared Time Machine Volume.
If I add a new standard user, this user can connect to my server via finder (connect as...) and see the shared drives. If the same user tries to connect to the Time Machine Backup Volume via the settings dialog, it receives an error message (OSStatus-error 5).
If I add a sharing only user, this user cannot connect via finder or Time Machine (same error). The clients console states the following error message:
/System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthAgent[2471] AFP error -5018 mapped to EIO
Does anybody have an Idea?

That is my point. Yes, Apple still lets you add users via users and groups in system preferences but that is not how you should be adding users. I've seen nothing but trouble when that option is used to add users and I believe that the Lion server docs say to not use that. If you are using lion server why not use it the way it was meant to be. Just create a account in OD and only give her access to the Time Machine Service and none of the others.

User cannot connect to backend system with user J2EE_ADMIN.

I am using Rapid Installer to initiate the second part of the installtion "ERP 6.0 EhP 3 Self-Service Scenarios and Automatic Roles". When I get to the J2EE User section to enter the parameters, the user is defaulted to "Administrator" and I enter my password. I click next and get this message "User cannot connect to backend system with user J2EE_ADMIN." Any ideas?

If this is a double stack installation, you need to enter J2EE_ADMIN as user, NOT administrator.
Markus

Cannot connect to database master at SQL server at SERVERNAME

I have installed SQL 2008 R2 in a fresh win 2008 R2. I’m running the sharepoint configuration Wizard using the database server name with the correct domain
credentials but I get the following error message. “Cannot connect to database master at SQL server at
SERVERNAME. The database might not exist, or the current user does not have permission to connect”
I‘m able to login to the new SQL server using the “SQL server management studio” with no problems. I used the sa account and a domain account.
The sharepoint server is also a new installation. And both servers have the firewall disabled.
Thanks in advance for your help.
Simon

Hi,
What is your SharePoint server’s version?
Please make sure you use the farm admin account to launch SharePoint configuration wizard. If not, please log in with this account, then check the effect.
In addition, check if you create a named instance, such as, servername\sharepoint, however, you only specify the servername in the configuration wizard. If this is
the case, change to servername\sharepoint, then check the effect.
Thanks,
Rock Wang
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support,
contact [email protected]
Regards, Rock Wang Microsoft Online Community Support

I can't get to update my apps it keeps on saying cannot connect to iTunes ... I changed the date and it didn't work still

I can't get to update my apps it keeps on saying cannot connect to iTunes ... I changed the date and it didn't work still

The Complete Guide to Using the iTunes Store
http://www.ilounge.com/index.php/articles/comments/the-complete-guide-to-using-t he-itunes-store/
iTunes Store: Associating a device or computer to your Apple ID
http://support.apple.com/kb/ht4627
Can’t connect to the iTunes Store
http://support.apple.com/kb/TS1368
iTunes: Advanced iTunes Store troubleshooting
http://support.apple.com/kb/TS3297
Best Fixes for ‘Cannot Connect to iTunes Store’ Errors
http://ipadinsight.com/ipad-tips-tricks/best-fixes-for-cannot-connect-to-itunes- store-errors/
iOS: Changing the signed-in iTunes Store Apple ID account
http://support.apple.com/kb/ht1311
Try this - Reset the iPad by holding down on the Sleep and Home buttons at the same time for about 10-15 seconds until the Apple Logo appears - ignore the red slider - let go of the buttons. (This is equivalent to rebooting your computer.) No data/files will be erased. http://support.apple.com/kb/ht1430
This works for some users. Not sure why.
Go to Settings>General>Date and Time> Set Automatically>Off. Set the date ahead by about a year.Then see if you can connect to the store.
 Cheers, Tom

I keep getting an error when trying to update an app- cannot connect to store. I logged out from my account and tried to log back in and got the same error. I am doing all this from my phone since I no longer own a personal computer (only work)

I keep getting an error when trying to update an app- cannot connect to store. I logged out from my account and tried to log back in and got the same error. I am doing all this from my phone since I no longer own a personal computer (only work) since I use iCloud and I tunes match

YAY!!! Saved it in my Mac's Firefox Bookmarks for easy future access!
Hope you are having a lovely afternoon today! I'm about ready to go bobo....I have an early meeting, and I don't want to oversleep! The nice part is that I work remotely, so I only have to wake up 15 minutes or so before the meeting.... I don't even use an alarm clock anymore (really, my iPhone alarm, which is much more pleasant), unless I have to get up at 6:30 or something....
TMI?
GB

HT204003 if i open passbook on iphone 5, it always say cannot connect to itunes, any fix from apple tech support? and whats the reason for this problem? why do we have to figure it out and not even apple can give answer??

if i open passbook on iphone 5, it always say cannot connect to itunes, any fix from apple tech support? and whats the reason for this problem? why do we have to figure it out and not even apple can give answer??

actually i found out how to fix it
1 sign out of apple account
2 close down passbook app
3 change year to 2013
4 reopen passbook and sign in at the button with your apple ID
5 change the time to auto update and it should work from now on.
this worked for me let me know if it work for you:)

TS3297 After updating to ios6 I am mostly unable to download apps, about 95% of the time I get a box saying "cannot connect to iTunes Store". Have checked for more updates and been around in circles on apple tech "support", any ideas anyone?

After updating to ios6 I am mostly unable to download apps, about 95% of the time I get a box saying "cannot connect to iTunes Store". Have checked for more updates and been around in circles on apple tech "support", any ideas anyone?

After updating to ios6 I am mostly unable to download apps, about 95% of the time I get a box saying "cannot connect to iTunes Store". Have checked for more updates and been around in circles on apple tech "support", any ideas anyone?

Since upgrading to Yosemite I am getting frequently "safari can't open the page (blank) because the server unexpectedly dropped the connection this sometimes occurs when the server is busy. wait and then try again"

Since upgrading to Yosemite on my iMac I am frequently getting "safari can't open the page (blank) because the server unexpectedly dropped the connection this sometimes occurs when the server is busy. wait and then try again". This is with both a WiFi and Ethernet connection. The server is working fine from other devices using WiFi onto it such as iPhones, iPads, MacBook (which is also on Yosemite) so don't believe its an issue with the server.
I am also noticing page load very slowly when this problem is not occurring.

Please read this whole message before doing anything.
This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.
Step 1
The purpose of this step is to determine whether the problem is localized to your user account.
Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”
While logged in as Guest, you won’t have access to any of your documents or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this behavior; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.
Test while logged in as Guest. Same problem?
After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.
*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.
Step 2
The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
Please take this step regardless of the results of Step 1.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you turn on the computer, and again when you log in.
Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem?
After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of Steps 1 and 2.

Upgraded to 10.9 and OS X Server 3.0.1, users cannot connect to home shares

Hello. I recenlty upgraded from Lion Server to Mavericks and Server OS X and users are now unable to access their home shares. When one attempts to afp to the server after connecting to my uni's VPN, the login box simply shakes and no connection is made.
Running Mac Mini with 10.9 and OS X Server 3.0.1 with home shares located on a Pegasus RAID array that worked fine under Lion Server. The upgrade seemed to go smoothly, as all accounts were intact and the settings were identical to the functional Lion Server settings. I have combed these forums trying to find a response that actually works for me, but was unable to locate a match that resulted in a working solution.
Here is a sample log when attempting to login:
Dec 16 13:08:50 xx.xx.xx.private kdc[109]: Got a canonicalize request for a LKDC realm from local-ipc
Dec 16 13:08:50 xx.xx.xx.private kdc[109]: LKDC referral to the real LKDC realm name
Dec 16 13:08:52 xx.xx.xx.private kdc[109]: AS-REQ xx@LKDC:SHA1.313DA2EA0C5E8BCD1311C69A6930240237DDC372 from local-ipc for krbtgt/LKDC:SHA1.313DA2EA0C5E8BCD1311C69A6930240237DDC372@LKDC:SHA1.313DA2EA0C5 E8BCD1311C69A6930240237DDC372
Dec 16 13:08:52 xx.xx.xx.private kdc[109]: UNKNOWN -- xx@LKDC:SHA1.313DA2EA0C5E8BCD1311C69A6930240237DDC372: no such entry found in hdb
Dec 16 13:08:57 xx.xx.xx.private kdc[109]: AS-REQ [email protected] from 127.0.0.1:51721 for krbtgt/[email protected]
Dec 16 13:08:57 --- last message repeated 1 time ---
Dec 16 13:08:57 xx.xx.xx.private kdc[109]: Client ([email protected]) from 127.0.0.1:51721 has no common enctypes with KDC to use for the session key
When I first upgraded, I was able to connect via PC but not Mac (10.9) clients, so I tried creating a new account to attempt to ferret out the problem. When I created a new account in the Server.app connecting to an existing home share, I was still unable to connect to it remotely--Server.app threw the "Cannot authenticate connection..." error and closed. I then attempted to create a new user and new home share directory in Workgroup Manager and received an error stating the home directory could not be created (I forgot the actual verbiage, but I will replicate and post if needed). I tried simply adding the folder to the home shares folder, but I was still unable to connect via afp or smb.
Any suggestions are greatly appreciated, as I need to resolve this issue ASAP. Please let me know if any other information would be useful to diagnosing this issue.
Thanks!

I have the same problem although I upgraded from Lion Server to Mountain Lion Server. The error appears to go hand in hand with this error.
userInit: CFPreferences: user home directory for user kCFPreferencesCurrentUser at /Network/Servers/fullyqualifieddomainname/Users/user is unavailable. User domains will be volatile.
I've read a number of things to try. A lot of people point to DNS being a problem, but I'm confident this is correct in my environment.

Connman cannot connect over pptp

I was trying to set up a pptp VPN with connman. However, even after creating a config file in /var/lib/connman-vpn, I seem to not be able to connect to the vpn. The file (/var/lib/connman-vpn/kuins.config) is:
[global]
Name = KUINS
Description = Connect to the VPN
[provider_PPTP]
Type = PPTP
Name = Connection to KUINS using pptp
Host = pptp0.kuins.kyoto-u.ac.jp
PPTP.User = xxx
PPTP.Password = "xyz"
PPPD.RequireMPPE128
PPPD.NoDeflate
PPPD.NoBSDComp
This particular PPTP VPN does not require a domain, so I did not add that option. I can confirm that I can connect to it using my credentials and the instructions given on this wiki page.
Upon running:
# connmanctl
connmanctl> vpnagent on
VPN Agent registered
connmanctl> vpnconnections
connmanctl>exit
There is no output to vpnconnections. I would like to use connman over netctl as it provides much better speed for dhcp ethernet for me, however, if it is necessary for me to be able to connect to this PPTP VPN. Unfortunately, there is no other way (e.g. OpenVPN) for me to connect to it.
Also, unfortunately, it seems that I cannot use pon and poff in order to enable/disable this VPN if I use connman.
$ sudo pon kuins
$ sudo ip route add default dev ppp0
RTNETLINK answers: File exists
Unfortunately, it seems not to be, as traffic certainly does not get routed through this VPN. My organisation requires that I use this VPN to connect to anything over port 80, and if that is not happening, I simply cannot connect. Which is exactly what happens here.
Any ideas as to what to do?
Last edited by genghizkhan91 (2014-05-10 08:57:41)

Anybody?

Unable to change permissions when connecting over SMB

As of OS 10.9, SMB2 is the default protocol when connecting two Macs running 10.9. Unfortunately, SMB2 seems to be half-baked at this time. Among the issues I've encountered, one of the more vexing ones is that it does not seem to be possible to change permissions on a remote file or directory over SMB. In Finder, the permissions section simply says "you have custom access" regardless of the file/folder's actual permissions. Even if I have full read/write access to the file/folder, I have no way to change its permissions.
chmod and chown also don't work. They don't report an error – they simply don't do anything when I run them on remote files.
If I connect to the same system via AFP, everything works fine and I can change permissions in Finder, and via chmod.
Is anyone else seeing this behavior? Are permissions just broken under SMB2?

So the background to this situation:
1. The user had OS 10.6.8 installed on one volume, while his actual users home folders stored on a second volume, this is fine but can sometimes cause issues during/post upgrade to 10.7
2. The user upgraded to 10.7 and while his home folders were still being accessed, he no longer had permission to change or modify them.
3. The user downgraded to 10.6.4 again which broke the link for his users completely.
4. In an attempt to change the permissions for his information he had the (common) mistake of changing the permissions of his root level of his drive, this did several things, in addition to negatively effecting his OS, it also locked the drive mount points in his (hidden) /Volumes/ folder.
5. the steps taken to help rectify this issue:
A. Open Terminal.
B. TYPE:
chmod -N /
chmod 1775 /
chown root:admin /
C. Reboot computer
D. Open Disk Utility.
E. Repair permissions on the boot volume.
F. Also the following commands were run on her second drive to allow him access to his stuff again:
sudo chflags -R nouchg /path to drive/
chmod -R 775 /path to drive/
chmod -RN /path to drive/
chown -R username:staff /path to drive/
Once the permissions repair is complete the Users can be readded to the System Preferences>Accounts pane and the paths to home directories located in his second drive using the "Advanced Options..." section, but due to the time the permissions repair was going to take this step will be posted tomorrow.
Also each user will require Terminal commands to make the permissions unique for each user: (this must be done PRIOR to the users being added in System Preferences>Accounts.
chmod -N /
chmod 1775 /
chown root:admin /
sudo chflags -R nouchg /path to home folder/
sudo chmod -R 775 /path to home folder/
sudo chmod -RN /path to home folder/
sudo chown -R username:staff /path to home folder/
EE

Satellite internet users cannot connect to Flash based online multiplayer games

Hello,
I have found that Satellite internet users are unable to
connect to the game Club Penguin because of the recent security
fixes that have been added to the flash player over the last 6
months or so. Club Penguin used to require at least Flash Player 7
to run, at this time satellite users could connect.
They recently upgraded their system to require Flash player 9
or higher, since this update no satellite users can connect if they
have the newest versions of Flash. If they revert back to the Flash
Player 9r47 they can then connect to the game. Of coarse this opens
the computer up to the exploits that have been fixed.
Anyone have any idea of how to notify Adobe of this issue? Or
possibly another way to make it work with the newest versions of
Flash Player?

Does this problem with your Internet satellite happen only with this game? You might want to contact your Internet provider as I'm sure they will be able to work with Adobe in fixing the problem.

Users cannot connect over SMB 10.10.1 server.app 4.0 and 4.0.3

Similar Messages

Maybe you are looking for