Tell me more ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.
up vote 0 down vote favorite

I've configured a Lion client machine to connect to my OS X server and use it for network logins. The diradmin works okay, but I tried to use a regular user, and it doesn't allow any other users to log on.

Where can I start to troubleshoot this?

share|improve this question
In the error logs, it shows the password being entered successfully, (logs on the server), so I'm a bit confused. Any assistance appreciated. – Mister IT Guru Jul 20 '12 at 15:44
Can you try another non-admin user? – Robin Jul 23 '12 at 13:43

2 Answers

up vote 0 down vote accepted

I'm guessing from your tags this is a 10.5 Server with 10.7 clients?

In your Open Directory user configuration/preferences are you using portable home folders? (With the user in question selected in Workgroup Manager, choose the Preferences button and check the "Mobility" section)

If so (and even if not!), check that your users have a Home path set in Workgroup Manager -> Accounts -> testuser -> Home tab. Usually the diradmin default home is set to /var but for other users I've seen it default to (None) which causes the login window to just shake and reject the user when trying to log in on a client system, probably because the system doesn't know where to create their home folder.

Try a test where you set testuser's Home location to /Users/testuser by clicking the + in the Home tab of WGM and entering /Users/testuser under the Full Path: field (I'm basing this wording off a 10.6 server but I recall 10.4 to 10.6 being all quite similar.)

Good luck!!

share|improve this answer
I didn't have home paths for all my users, I noticed when I buggered up the home path for DIRADMIN testing configuring the presets. You got closest, I didn't realise that home folders are required for logons - So ... MrCoBalt, (nice name!) you win! :) – Mister IT Guru Aug 1 '12 at 12:24
up vote 0 down vote

(assuming server is 10.5)

Check out the Service Access Lists (SACLs) on the server under Server Admin -> Settings -> Access. Make sure you aren't restricting access to Login Window (or something similarly named).

Also, is the workstation in the Workgroup Manager? Are any of its preferences being managed, again Login Windows, like what users or groups can use that workstation to login.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.