[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

Directory Utility/Users can't log into their computers??!?!

Posted on 2010-04-01
13
Medium Priority
?
810 Views
Last Modified: 2013-12-24
Xserver version 10.5.8 is giving me a headache. Users reported that they could not log into their systems(iMacs). I double clicked on the login screen to find that all said and "Some Network Accounts Available" and other saying "No accounts available". So I logged into the server then to entered Server Admin. Open Directory was shown as running, which is what we want right. Next I entered the Utilities > Directory Utility. From there the "Local Server" was shown as running but the "Active Directory Server(Windows 2003 Server R2)" was not and had a red button label next to it. I checked the setup and everything was labeled as what it should be. I then rebooted the server. The Directory Utility now shows both the Local and Active Directory Server as running, green lights. I reboot a few iMacs and find that they all now still say "Some Network Accounts available". What could be the issue, i'm sure I hit all of the hot spots and they are active and even show in the "Workgroup Manager" utility with their account info. What should I do next to fix this issue.
0
Comment
Question by:corporateKeenan
  • 8
  • 5
13 Comments
 
LVL 9

Expert Comment

by:SCCMCanuck
ID: 29366798
Please try and describe your environment more clearly.

Which servers are hosting particular services? ie DHCP, DNS. Are your OSX clients kerberized to the AD server? ie. Is AD handling your authentication or is Open Directory. All of these factors have a huge impact on what your particular solution might be.

From the information i feel i have been given so far it sounds like you are authenticating to Active Directory. If that is the case are all of your clients Clocks Set to sync to the IP address of the Active directory server? Also the OSX server should be set to sync to it as well. Provided that AD is handling your domain authentication?
0
 
LVL 9

Expert Comment

by:SCCMCanuck
ID: 29366997
Also, Once you start to get a green directory services light across the board (ie all of your clients) ensure that you test logging on thoroughly, create 3 different test accounts. You may encounter an error message upon subsequent login / logouts. If that is the case there will be a file that you need to modify to ensure logons work correctly. I can post that info as well, however work on the green directory service ligth issue first.
0
 

Author Comment

by:corporateKeenan
ID: 29370729
Yes you are correct the XServe is authenticating to Active Directory on the Windows Server which is hosting the AD, DHCP, DNS and etc. None of the iMacs are kerberized to the Active Directory Server and they never have been. Another issue that I didn't note was that the XServe's HD was filling up rapidly because of some .ASL files that grew to 28gb. On instances when the OSX HD gets low these issues arise with users not being able to log in. I have copied the files to a external HD and Deleted them from the Server HD. Going back to the AD issue, everything is bound and running smoothly from the server side(green lights everywhere) but the clients are not getting the same response. Should I possibly try rebooting the AD server to see if Windows is hanging?
0
The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

 
LVL 9

Expert Comment

by:SCCMCanuck
ID: 29375519
what are your clients pointing to for time?
0
 
LVL 9

Expert Comment

by:SCCMCanuck
ID: 29375836
Also if you are not kerberizing to AD then i assume that OD is hosting your User Accounts. Am i correct in this assumption?

My main question is this, what are you using the xserver for? What services is it hosting that the windows server is not?
0
 

Author Comment

by:corporateKeenan
ID: 29376914
The clients are pointing to the XServe to sync their clocks. The XServes only purpose is to securely lock down Apple clients access to certain network directories and to give acces to only certain apps, host updates/image files and to obtain the user profiles from our Windows Server's AD and provide access when the correct. The only services that it is hosting that Windows is not offering is really only QuickTime streaming and Netboot. It really only serves as a gateway for our Macs to access network info by user profiles.
0
 

Author Comment

by:corporateKeenan
ID: 29378206
I'm also seeing that on the client pcs it is displaying that the "Open Directory Server is not responding"?
0
 
LVL 9

Accepted Solution

by:
SCCMCanuck earned 1500 total points
ID: 29382030
Sounds exactly like the environment we run in many of our schools. I can tell you right now what the issue is and it is your clocks. If you sync the OSX server clock to the ip of your AD server followed by syncing your clients to the IP of the AD server, your problems will go away regarding some network accounts available and netwokr accounts not available. The reason you have to do this is because AD is responsible for your user accounts and your Authentication as a result. Also you really should be kerberizing your Open Directory server to AD, not sure i understand why you woldn't be.

Can you provide a screenshot of the "Open Directory Server is not responding"

Also, you can push the attached script through ARD to your clients to sync their clocks to the ip of your AD server. My recommendation would be that you attempt this on one machine first and test the crap out of it to ensure the time sync fix is your actual solution.

*Note: Modify the ip in the script to point to that of your AD server.
SetTimeServer.sh
0
 

Author Comment

by:corporateKeenan
ID: 29451601
Hey thanks for the script unfortunately my clocks were already pointing to the AD server. I really think that it is an issue with my Open Directory on XServe because each of my clients now have a green lights for the Active Directory Domain which is good they are bound but there is a red light for the Open Directory. I tried using the IP instead of the DNS Name to hopefully catch a break, it still didn't respond. So I will be posting some Print Screens from my Remote Desktops next.
0
 

Author Comment

by:corporateKeenan
ID: 29452297
Here are a few screen captures of the client and the Xserve configs.
ClientProblem.png
ClientMac.png
XServesDUgreenlights.png
XServeOD.png
XServeODBinding.png
XServeODauth.png
0
 

Author Comment

by:corporateKeenan
ID: 29472929
Found the solution, it was an ip address change on the server that the clients do not recognize. Is there a script that I can run in terminal that will update the IP address of the Xserve?
0
 

Author Comment

by:corporateKeenan
ID: 29478164
Nevermind the script I got the changes made to the ip and all is well now.
0
 

Author Closing Comment

by:corporateKeenan
ID: 31709995
Good starting tip.
0

Featured Post

Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Among the most obnoxious of Exchange errors is error 1216 – Attached Database Mismatch error of the Jet Database Engine. When faced with this error, users may have to suffer from mailbox inaccessibility and in worst situations, permanent data loss.
Microsoft Jet database engine errors can crop up out of nowhere to disrupt the working of the Exchange server. Decoding why a particular error occurs goes a long way in determining the right solution for it.
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…
Planning to migrate your EDB file(s) to a new or an existing Outlook PST file? This video will guide you how to convert EDB file(s) to PST. Besides this, it also describes, how one can easily search any item(s) from multiple folders or mailboxes…

590 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question