Xserve doesn't authenticate

No one can login to the network (Open Directory on xserve). Local logins to machines are OK and network connections are OK. Admin can connect to Workgroup Manager, Server Monitor, etc, but the padlock shows locked - all editable fields are greyed out and status bar reports "Viewing directory: /LDAPv3/127.0.0.1. Not authenticated". Click the padlock icon - fails to authenticate with username and password for the admin account.
I recently added DNS service and set up xserve as a secondary DNS server. Wondering if this was the cause of login problems, I've stopped the DNS service and removed recently added entries in the main DNS (which clients point to in IP config). However any name resolution failure shouldn't affect the authentication when I'm already connected to Workgroup Manager?
Also recently added 2 Tiger eMacs to the crew, which otherwise is all Panther. (I note other post 'xserve authentication problems' where Tiger clients are having problems on Panther server & I'll keep an eye on it).

We've experienced similar problems today, 9.19.05 with inability to login to the server after the latest Security updates? Weird! Admin can connect to Workgroup Manager, Server Monitor; DNS and DHCP appear to be running and setup correctly. FYI-This XServe unit has been up and running since April 05 with no real problems.
In Workgroup Manager sharing permissions have changed and reverted to ownership of almost everything going to admin (su). When attempt is made to reassign ownership to correct user or group error message states_Group name you entered does not exist. Will allow creation of new user and new group, but won't accept a new group as owner.
We are stumped!

Similar Messages

  • Local Admin Doesn't Authenticate on Open Directory 10.9

    Running 10.9.4.  I exported my open directory database from my old 10.6 server and imported into my new 10.9.4 server.  Everything worked without a hitch, except that the local admin can't administer the database, only the old directory admin (which works, but after every action, it tells me I'm not authenticated... even though it still works).
    I double checked, and sure enough, all the admins are in the directory administer group:
    GroupMembership: root diradmin rfinn
    Member: root diradmin rfinn
    NestedGroups: 9B953861-B2D1-43A2-BC57-F53C0C33F236
    PrimaryGroupID: 80
    RealName:
    Open Directory Administrators
    RecordName: admin
    RecordType: dsRecTypeStandard:Groups
    But... it still doesn't authenticate in Workgroup Manager.  Just to be sure, I re-added the LDAP admin GUID to the local admin's nested group list, but that didn't fix the issue either.  Suggestions?
    Thanks,
    -Rob

    Running 10.9.4.  I exported my open directory database from my old 10.6 server and imported into my new 10.9.4 server.  Everything worked without a hitch, except that the local admin can't administer the database, only the old directory admin (which works, but after every action, it tells me I'm not authenticated... even though it still works).
    I double checked, and sure enough, all the admins are in the directory administer group:
    GroupMembership: root diradmin rfinn
    Member: root diradmin rfinn
    NestedGroups: 9B953861-B2D1-43A2-BC57-F53C0C33F236
    PrimaryGroupID: 80
    RealName:
    Open Directory Administrators
    RecordName: admin
    RecordType: dsRecTypeStandard:Groups
    But... it still doesn't authenticate in Workgroup Manager.  Just to be sure, I re-added the LDAP admin GUID to the local admin's nested group list, but that didn't fix the issue either.  Suggestions?
    Thanks,
    -Rob

  • Classic web app for upgrading sp2010 content site doesn't authenticate

    I have run the following powershell in 2013 to create a classic web app so i can upgrade my 2010 databases and then i would run the convert command to convert them but i have a problem i cannot get to the site i have created, i have pinged the site and it
    resolves, i get a username and password when i type the address in, but unable to log on, and i cannot figure out which account i should be using, as i have tried the wepapps account but doesn't authenticate
    New-SPWebApplication –Name "Classic Web App" -Port 80 -url
    http://upgrade-------- -ApplicationPool "ClassicAppPool"
    -ApplicationPoolAccount (GetSPManagedAccount "Domain\wepapps") -DatabaseName Wss_Content_Classic
    Which account should i be using to log on to the site? or is there a way to assign
    permissions
    to the site via a command?
    Thanks

    Hi,
    You can go to Central Administration -> Application Management -> Manage Web Applications.
    Select your Web Application, and click "User Policy" in the ribbon.
    Add any account there. Use this account to access your web application.
    If you are using an FQDN for your Web Application (for instance:
    http://sharepoint.yourdomain.com) and you are trying to access it on your SharePoint server, you will get a blank page after logging in 3 times.
    This is caused by the Loopback Check security feature from Microsoft. To disable it, run the following PowerShell code:
    New-ItemProperty HKLM:\System\CurrentControlSet\Control\Lsa -Name "DisableLoopbackCheck"
    or you can edit your registry manually, for more info, see:
    http://www.jeremytaylor.net/2010/05/24/sharepoint-disable-loopback-check-disableloopbackcheck-dword-in-registry/
    <a href="http://sharepointrelated.com/about"><font color="maroon"><b>Nico Martens</font></a> - MCTS, MCITP</b><br/> SharePoint 2010 Infrastructure Consultant / Trainer<br/> <a href="http://twitter.com/MartensNico"><img
    src="http://nicosharepoint.files.wordpress.com/2012/05/twitter.png" border="0">&nbsp;</a><a href="http://sharepointrelated.com"><img src="http://nicosharepoint.files.wordpress.com/2012/04/blogicon.png"
    border="0"></a>&nbsp;<a href="mailto:[email protected]"><img src="http://nicosharepoint.files.wordpress.com/2012/04/email_open.png" border="0"></a>

  • New Nehalem XServe doesn't have Quartz Extreme?

    I have a new Nehalem with 2x 2.93GHz Quad-Core (16 cores total) with the standard NVIDIA GeForce GT 120 256MB Graphics card. For some reason Final Cut Server 1.1.1 and now 1.5 doesn't believe this server has Quartz Extreme and refuses to install. For that matter, Compressor also refuses to open for the same reason.
    What I have to do is go to a previous generation Xserve, do the install on the hard drive, then move that hard drive back to the Nehalem. So other than Compressor not opening, the Xserve is behaving normally with Final Cut Server near as I can tell.
    Any ideas what's up with this Xserve? I've reduced the display to as low as 800x600 with no change.
    thanks.

    You need to have a display connected for it to register that it is Quartz Extreme capabilities. Get a displayport to VGA or DVI adapator and hook up a monitor. With the previous intel boxes with the mini-dvi connector it was enough to just have the the dongle that came with the server plugged in at startup to get it to register Quartz Extreme. I am not sure if plugging in the display port adaptor with nothing else on the other end will work as all my installs and servers as of late have all had KVM switches. But the concept is still the same. The video card has to see something on the other end before it registers.

  • Hard drive attached to xserver doesn't show up on the network.

    I have an xserver on 10.5.8. Attached to it is a datatale box with 4 internal Hard drives. 2 hard drives are for storage, and 2 are for mirrored backup. The 2 hard drives for storage need to be accessable on the network, but one of them is not showing up.
    At the moment I am moving the problem hard drive to attach directly to a work station computer when I need to access it, and back to the server when it needs backing up.
    How can I get the hard drive to show up on the networked computers, when attached to the server? This is a problem that we have been coping with, but been unable to solve for some time.
    Any advice will be much appreciated.

    Not much in your post to go by...
    In general, just because a device it attached to the server that doesn't automatically make it available to clients. You have to identify the volume(s) to share over the network via the Server admin apps.
    However, since one volume works and another doesn't, I kind of assume you know this, and have done it for one, which begs the question of why you haven't done it for the other.
    The other missing data is how you're trying to access the volumes... what protocol are you using from the client? AFP? FTP? NFS? something else? That can also make a difference.

  • Cloned ACS (VMware) but clone doesn't authenticate

                       Hi, I'm having an issue with a cloned vm of our ACS. We are moving it to a different location. I was able to clone it and get it back on the network, but I can't authenticate to it from any of my switches. I do have an older version:
    5.2.0.26
    Any ideas on why a cloned ACS wouldn't funtion like the original?
    Thanks

    Supposing ip address and hostname were changed, try to disconnect the ACS from the AD (remove the machine from AD and remove AD configuraiton on the ACS clone). Then try to make it to join again.
    Hope that will fix your issue.
    Regards,
    Amjad
    Rating useful replies is more useful than saying "Thank you"

  • XServ doesn't display files in open/save window

    Hi;
    I have a weird problem.
    I have installed OS 10.5.1 on three machines so far and have worked through most of the issues but currently I have 1 machine with a weird problem.
    It is that when I try to show the files in the XServ in the standard OS Dialog, the files don't show up. I can't connect as a different user and when I am in applications the same thing happens.
    I can use the Adobe Dialog and the Server shows all it's files just fine, but if I use the OS Dialog, I can't see files.
    HELP!!!
    Thanks!
    Nancy

    This is what I see. Only software. Not sure how to get hardware to appear or anything else for that matter.
    Spark
    CLAD
    Test Engineer

  • Reinstalling OS X Tiger Server on XServe doesn't start...

    We bought an XServe some 6 months ago now hoping that it could solve the unique problem we have. We're a small organisation with only a few members in the tech team - and we're constantly busy trying to develop and support our own product. We wanted a server solution to handle the standard services (DHCP, DNS, printing, etc...) that wasn't Windows-based. But there's only one chap in the organisation with full-on *nix skills. The other techs are relative *nix noobs.
    So, the XServe and Tiger Server presented a compelling answer: a solution that provided all the power, robustness and scaleability of *nix server services, but with Apple's great UI for managing the services, with little hardcore server knowledge. Basically, it had to stay up, work consistently and be quick and very simply to administer for someone with little specific server config knowledge.
    I suppose the XServe has served this purpose, but we're getting consistent problems with SMB file permissions, Windows interactions and issues with permissions on AFP file shares.
    I think this has to do with my initial install of Tiger Server. I don't think the DNS and the Open Directory were set up properly, and I think this could be the root of all the file permission problems we're having. Therefore, we decided to backup and wipe the machine and start again.
    So, I've got a very useful install guide from AFP548 that talks me through getting DNS working first, then setting up the Open Directory, etc...
    HOWEVER
    I can't get OS X Server to install. I've got the server DVD in the drive of the XServer, been through the process of putting it into 'light 1' mode using the buttons on the front of the XServe (so it boots from CD), and I'm using the Server Assistant from my Powerbook across a wired network.
    I can go through the server assistant process as far as the install starting, but then I'm just left with a screen that says 'Installing...' and 'Installing Mac OS X Server on volume <Server HD>' and an empty progress bar. It just seems to hang and nothing happens.
    I've tried:
    - disk utility to check the disk for issues (nothing reported)
    - booting the Xserve in firewire target mode and installing from my laptop (installer gets to the same place 'preparing hard disk' and gets no further)
    - using disk utility on another laptop to erase the XServe's HD first, with the XServe in FW target disk mode (disk utility hangs when I click the 'erase' button).
    So, I'm a bit stuck chap and chapesses. Everything points to a problem with the disk somehow (although it would have to be something that disk utility couldn't pick up), but I'm damned if I know what it is!
    Any help would be much appreciated.

    Have you a large hammer?
    Just kidding, but I do think that you are on to something with it rebooting into the old OS just like nothing happened.
    Unfortunately I have never actually encountered this so I am just tossing out suggestions. It sounds to me that you have already covered most of the bases that I would/could suggest.
    Have you checked this manual http://manuals.info.apple.com/en/MacOS_X_Server_v10.4_GettingStarted.pdf
    I know it is basic but perhaps an answer is in there. I wish I could be of more help but I still haven't got that pony either ;>)
    Luck and keep us posted.
    -DaddyPaycheck

  • 7210 doesn't authenticate to secondary domain controller

    We've been testing a 7210 configured to authenticate to a domain controller's MS active directory. Our testing indicates that when our primary domain controller is off line that the 7210 does not attempt to authenticate to the secondary domain controller. I would have expected it to behave like any other device set to authenticate on our domain and to use the secondary controller if the primary domain controller becomes unavailable.
    Has anyone else noticed this behaviour and more importantly is there a way to configure the 7210 to ensure it will use the secondary if need be?
    Cheers.

    For others who may come across this we ended up putting a support call in to Sun. The answer from Sun is:
    "... have been informed that this is by design to occur like this. Many people don't believe it should so there is an
    RFE raised and development is occurring to resolve this under an internal bug."
    regards
    Stephen Meatheringham

  • Thunderbird doesn't authenticate with iCloud!

    Is there any info yet on why iCloud email doesn't work with thunderbird? I copy the same exact server information from Outlook 2010 (where it works normally) and thunderbird fails authenticating.
    So frustrating. I do not want to be using Outlook 2010 for email now .

    SOLUTION!!!!
    It works with some minor tweaking in about:config. However, I now have to resync all of my mailboxes (not sure how that one worked out =P).
    In thunderbird, go to Tools, Options, Advanced, General, Config Editor
    Search for the string 'mail.server.server'
    You should see a bunch of listings as mail.server.server#, where # = 1,2,3, etc
    Look for the entry that says 'mail.server.server#.name' and find the name of the account that you have as your iCloud account in Thunderbird. Record the value of # in your brain.
    Now go to mail.server.server#.authMethod and set it to 2
    At this point, it should connect, but it may lose all of your folders. Just right click your account in the navigation pane, and click Subscribe and update accordingly.
    If you just want to see your folders without redownloading everything again, go to Tools, Account Settings, Server Settings (for the iCloud email), Advanced, and uncheck 'Show only subscribed folders'
    Everything should now work. This forces thunderbird to use the old-style IMAP login (I believe what Outlook uses and why Outlook 2010 works).
    UPDATE: I seem to have had a problem with imap.mail.me.com today, so I switched to p99-imap.mail.me.com and it worked fine.

  • MDM7.1 SP04 on RHEL5 - Password for sidadm doesn't authenticate

    I was installing MDM7.1 SP04 and sapinst prompted me to input the password for <sid>adm.  I would provide the correct password but sapinst would fail and say incorrect password.  This was on a Red Hat 5 install and I could successfully logon as <sid>adm with the same password that I provided to sapinst.
    We use VAS (Vintela Authentication Service) to validate the credentials of our named users against Active Directory but <sid>adm is a service account that is not configured to use VAS so it should be validating it's credentials locally.

    This is caused by a bug in VAS.
    Bug 16296
    vastool: Running vastool configure pam would break symlinks on /etc/pam.conf
      or /etc/pam.d/<service files>.
    My workaround was to have VAS uninstalled/configured, run sapinst to complete my MDM7.1 install, and then have VAS reinstalled.  The correction to this bug has not been released as of July 6, 2010.
    Hope this helps.  It drove me nuts for five weeks trying to get sapinst to work, when it really had nothing to do with SAP or Red Hat.

  • X san 2, volumes doesn't appear!

    Hello, i have a problem. i use xserve,promisse (j+e)class,i have xsan2 the problem is that we lost electricity and all were shot down, since that i can see the volumen in any user. how can i recover the xsan? because i dont want to loss the data storage in the promise.

    Hello again, i have installed everything i mean, i reconfig the promisse (e+j class) and it works but i need to configure xsan. haver 1 Xserver and 2 Mac pro there is one of the Mac pro that doesn't authenticate its appear as conecting....
    What should i do?

  • [SOLVED] linux-ck 3.17.4-1 fails to load nvidia - xserver dies

    Hi,
    since upgrading linux-ck from 3.17.3-1 to .4-1, xserver doesn't start anymore because it can't load the nvidia module.
    Downgrading solves this issue, no problems like this with the stock kernel…
    I tried adding nvidia to initramfs, didn't help either.
    Any ideas how to resolve this? Or Is this just a sit-and-wait-bug?
    Last edited by cju (2014-11-24 07:39:27)

    It says:
    modprobe: ERROR: could not insert 'nvidia': invalid argument
    Here the according X-log:
    [ 60.383] (EE) NVIDIA: Failed to initialize the NVIDIA kernel module. Please see the
    [ 60.383] (EE) NVIDIA: system's kernel log for additional error messages and
    [ 60.383] (EE) NVIDIA: consult the NVIDIA README for details.
    [ 60.383] (EE) No devices detected.
    As said before, with 3.17.3-1ck, everything was fine…

  • Replacing several XServe to...Mac mini? Mac Pro?

    Hello,
    we have several Xserve running several services all binded with Open Directory. Most of this Xserves doesn's support no more than Lion Server wich we don't wnat to upgrade.
    We are thinking about replacing these all together migrating services (manually or not), but the question is about performance on the new servers.
    Can anyone suggest something? We don't consider old Mac Pros, we are doing a new upgrade old stuff will be again a problem in a couple of years
    Thank You

    The Mac mini is a surprisingly powerful machine.  However, it has its limitations.  They include:
    • No enterprise support - If you get AppleCare, it is a consumer AppleCare agreement.  A hardware issue means your are likely down for about three days (this goes for the Mac Pro also)
    • No redundant hardware other than the drives
    • No how swap parts
    • No PCI so expansion means break out boxes, dongles, and adaptors.
    Now, that being said, if you are looking to the present and the future, you might be looking to replace all legacy components and just go modern.  If this is the case, the mini will fit the bill and:
    • Reduce power consumption
    • Reduce heat generation
    • Consume less space
    Also, a strategy I am employing is to simply buy an extra mini.  Use it as a cold spare.
    R-
    Apple Consultants Network
    Apple Professional Services
    Author "Mavericks Server – Foundation Services" :: Exclusively available in Apple's iBooks Store

  • XServe and Focusrite Saffire issues

    I'm posting this here because the problem appears to be with the XServe, but idf anyone thinks I'd better off in one of the other forums can you suggest which one?
    I have a Focusrite Saffire 24 which is part of the mobile recording setup, and had the idea that when It's not being used it for that, it could be used as an audio interface to allow me the run iTunes on the studio XServe to the hifi.
    However I can't get a consistent connection to the Saffire hardware from the XServe without the audio cutting out.
    The longest continuous connection I've had has been less than 10 minutes, normally I get around 5 minutes of audio before it cuts out. If I do nothing eventually the audio comes back on although sometimes when this happens it sounds as though it's no longer clocked correctly. While the output is silent iTunes is still playing according to the progress bar and the HD activity lights, and when the audio does return it is at the point where iTunes has got to.
    If I have the Saffire Mix Control app open, when the audio stops the meters drop to zero.
    I can force the audio back on by toggling the clock/sync setting between internal and any other value and then back again in either the Saffire Mix Control app or Apple's Audio MIDI setup. Setting the clock to anything other than internal will restart the Mix Control meters but I can only hear audio from the hifi when the clock is set to internal.
    The Saffire works properly with my MacBook Pro (OSX 10.5.8 + Apple updates) using all the same cables (FW800-400 and S/PDIF) either streaming audio direct from the MacBook Pro's HD or using iTunes sharing to access the library on the XServe.
    The MacBook Pro is running a slightly older version of the Saffire software (1.7 rather than 1.8) but Focusrite don't think it's an issue. 1.7 is no longer available for download and I'm reluctant to update the software on the MacBook Pro without access to the older version and full instructions for uninstalling the newer software in case it breaks.
    However I have had issues getting the MacBook Pro to actually accept that the Saffire was connected. All the status lights on the Saffire were lit correctly. It was set as audio input and output device in both the Sound prefs pane and the Audio MIDI setup app, but sound was still coming out of the MacBook Pro's speakers/headphone socket rather than the Saffire. More fiddling around with the settings eventually gets the audio routed to the Saffire but there doesn't seem to be any logic to what I do to make it work.
    Certainly neither of the other audio interfaces I use (MotU 2408 and M-Audio 2496 PCI based) have this much trouble. I simply select them in the Audio MIDI setup app and that's it. Audio gets routed to the interface and not the Mac's internal systems.
    I can't help but think that the XServe problems are a more severe form of this in that while the MacBook Pro seems to be OK once the routing has been established (I've not tested it for more than 3 hours continuous use though) the XServe keeps loosing the routing that is sending the audio signal to the Saffire rather than the built-in speakers. Since the XServe doesn't have any built-in audio system I can't actually tell if this is the case.
    The XServe is a 2.8GHz single Quad-core model fitted with 2GB RAM and 3SAS Hard drives, one for the OS and apps and the other two for data. I'm running OSX Server 10.5.8 with all the updates, which is a brand new install less than a week old. The Saffire software is the only non-Apple install on the Mac. I have an Apple keyboard and Mouse connected via one of the USB ports and a Sony monitor to the DVI port. The Saffire Pro 24 is the only device connected to the FireWire ports (both FW800, it doesn't make a difference which one is used).
    Anyone have any experience of this or have any other ideas I can try?

    I´m happy to read this thread.....Phantom never worked on my unit.
    I was feeding the Saffire with a Rode NTK mic. It has a transformer, so I never noticed, until I connected another mic.....It´s going back to shop now!
    All in all the Saffire has been a disappointment....From Audiomedia lll, to Digi 001, to Tascam 428, this one has turned out to be the most unstable and unpredictable.
    "Please disconnnect firewire and AC (if you´re using it) for a few seconds"
    I mean, with OSX I never do any restarts, but the Saffire has made me do quite a few.
    If I shut down my computer....The next day I´ll have to set up a very special procedure to make my Saffire work, that´s a fact.
    On board effects. Great, to take some heat off your cpu. But they are crap! Cheap reverb, cheap amp simulation....No!
    And still, I have never seen a GUI as poor as this.......And something is wrong,
    when you engage the UI, you hear a blob....The Saffire is in command!
    The Saffire should be discreet. As any good soundcard.
    It says 4 in, 8 out, Ha!
    If you use digital in you have no monitor options through the Saffire.
    If you use more than 2 out, you´ll have to deal with that fiddly GUI.
    The pre amps are decent, but the output to headphones is a laugh.
    I´ve done a vocal session and we had to set up an extra amp to make
    the signal loud enough.
    So, I guess, I wasted some money again.
    Peace!
    JanD

Maybe you are looking for

  • Can I transfer music from one apple id to another?

    I have always used my sisters iTunes when buying music and apps as I never really needed my own and well it was cheaper buying it into one account than do it separately. However now I am off to uni, I would like my own apple ID for my new mac and hop

  • Multi Value Parameter Passing

    Hi, I have created a SQL based HTML DB report that takes the dynamic value from textbox for SQL bind parameter . SQL is Select * from employees where emp_id IN ( :P9_EMPID); emp_id is of Number type. When i pass a single employee id value in the Text

  • How to use the kernel coredump

    My system generated a kernel coredump. I want to know the reason.

  • PL/SQL rows in a cursor

    How do I check the number of rows in a CURSOR without a complete fetch,If the records exist it should return a REF cursor else it shouls say no records. How can this be done

  • Help with conversion

    I have waited 20 minutes and it still says converting pdf to word, how long does it take?