Mac OS X Lion Server :: Network Users Can't Login Via VPN And Profile Manager
Apr 7, 2012
I have a problem with Network Users defined on my Lion Server accessing the server through VPN or Profile Manager (via Safari) ... I keep on getting authentication errors. Is this because they are network users or am I missing something else?
This works: when I logon to my Lion Server with either local or network users everything seems to be OK including home directory synchronisation.
I tried the following for VPN:my local server account can logon to the server (ie my secret key, user account/password combination are OK ("chap peer authentication succeeded for ...")when I try the same with two of my network accounts I keep on getting authentication errors (VPN) but I'm sure I use the same userid/password combinations as above ("chap peer authentication failed for ...")
I get similar results when I access the Profile Manager (url..)my local server account can logon on to the Profile Manager and sees as all the informationwhen I try this with one of my network accounts (which has devices assigned) I keep on getting 'incorrect user name or password
Info:Mac mini, Mac OS X (10.7.3), (Server)
View 4 Replies
ADVERTISEMENT
May 21, 2012
I have an OSX Lion 10.7.4 Server set up with Profile Manager and it is joined to AD.Â
I am able to see AD groups in the Profile Manager groups section. I can also see and add AD users and groups using the server app.Â
I have enabled the "Can Enable Remote Management" check box for Domain Users through Profile Manager. I have also added Domain Admins to the Workgroup group in the Server app. I'm not sure that I want or need either of these options, but they were suggestions to try. I am not able to log on to the Profile Manager or My Devices pages with AD logins.Â
I found these directions about nested groups in Workgroup Manager [URL] but I don't have a [URL] local group or any groups like are shown in the picture.Â
Info:
Mac mini, Mac OS X (10.7.4)
View 3 Replies
View Related
Feb 13, 2012
Today when we started trying to add users to our server (we use it only for afp access at this time), we noticed that new users belonging to a group "storage" were unable to login from client machines via afp (clients both 10.7.2 and 10.6.8). Â
When we tried editing the users accounts to change which groups they belonged to, it would appear in workgroup (and server preferences) that the changes would take but there was still no access.Â
As a test case, we modified an existing user who had no issues logging in to belong to a diffenent group and have different sharepoint access. The changes looked good in workgroup and server prefs, but when the user logged in, he was only able to acces his old sharepoint and not the new one (and since his permissions to the old were removed, he shouldn't have access to that sharepoint).Â
Also, for some reason users cannot be deleted within workgroup manager any more. The login used was the diradmin account.
Info:
Mac mini, Mac OS X (10.6.8)
View 2 Replies
View Related
May 2, 2012
I have installed Lion Server with Web and Profile Manager services. When I log into the profile manager web page I receive the message "Not Found The requested URL /wiki was not found on this server."Â
Info:
Mac mini, Mac OS X (10.7.3)
View 3 Replies
View Related
Mar 9, 2012
Is there a way to backup the database in the profile manger?
Info:
iPhone 4, iOS 4.3.3
View 3 Replies
View Related
Mar 12, 2012
I am working on getting profile manger working on 10.7.3. After turning profile manger I can get to a logon screen but after I logon I get this error in my browser. I am guessing the issue is with apache routing but I don't know.Â
View 5 Replies
View Related
Apr 14, 2012
10.7.3 private server (hostname is myserver.private) with profile manager turned on.I can access the profile manager locally from the server through https://myserver.private/mydevices, but when I try the same thing from the client (as suggested in the help window) I get the following error in Safari:Â Safari can't find the server Safari can't open the page
View 3 Replies
View Related
Jul 2, 2012
Trying to upload a IPA for ad-hoc deployment to a device group of IOS devices. File goes to upload and nothing happens.
Profile Manager Log has the following exception:
Jul 3 13:03:07 cif-podcast.qut.edu.au ProfileManager[441] <Error>: Caught unhandled exception undefined method `each' for nil:NilClass at /usr/share/devicemgr/backend/app/models/cfprefs_knob_set.rb:45:in `replace_string_types' ....
View 2 Replies
View Related
Feb 9, 2012
I've been looking around and I have yet to find an explanation or guide on how I could push shortcuts to websites and applications to the IOS/OSX Desktop or Dock via profile manager? I feel like the functionality is there, but I'm just missing something really obvious.
Info:Mac OS X (10.7)
View 5 Replies
View Related
Mar 1, 2012
If the MDM portion of Profile Manager allows you to track phone info like IMEI and phone number?
Info:
Profile Manager, Mac OS X (10.7.3), Lion Server
View 1 Replies
View Related
May 30, 2012
I have a Mac Mini running Lion Server. We are going to use it for software update, profile manage , vpn, ect. When I'm not on the LAN I can load the [url]... however when I'm on our LAN I'm unable to load this site. I can start load the site from the LAN by putting,[url]..., but the page then redirects to [url]...auth?redirect=[url]... and will not load because of the domain name. This problem is also causing me to not be able to push profiles to machines while they are conected to the LAN.
My goal is to be able to load the site from anywhere as [url]...
Info:Mac mini, Mac OS X (10.7.4)
View 2 Replies
View Related
Jun 27, 2012
when pushing a config to a device it fails and the client records an error 403 forbidden.
View 1 Replies
View Related
Feb 7, 2012
I have setup profile manager. Trusted profile is installed.When a user logs in the profile is added. In the profile the users email address is correct. [URL] When i turn to Mail, agenda and contacts in the system preferences the mail address is displayed as : [URL]This is also being displayed in the Mail account settings.Â
Info:
Multiple Systems, Mac OS X (10.7.2)
View 1 Replies
View Related
Mar 15, 2012
i've setted up my mini server as "server.domain.private"because i don't want it to be published on the internet by default, i want to have control on wich webapp is published.my main goal is to have a new Vhosts wich is serving only the webapps i need to be running and ,why not, hosting multiple VhostS enabling just some (or one) webapps each [url]). in other words: i want control on what is published where and how in order to publish Profile Manager i did: - created a new virtual host on the web service called "server.public-domain.com"- enabled the webapp on that Vhost from terminal as found in: [url] using this command "webappctl start [url]"- restarted the whole server but this seems not to work as expected.. should it ??? after some dirty work on the apache config (copy/paste from the original vHost of some "proxypass" and "balancemembers" and "include" regarding devicemngmt) i got it to ask me for password when browsed from the outside world, BUT after login it will redirect my browser to "server.domain.private" wich is obviously not working from outside.Â
Info:
Lion Server, Mac OS X (10.7.3), profile manager / ical server / ios
View 1 Replies
View Related
May 14, 2012
Im having problem problems all over Lion Server. I can't manage Profile Manager on client machines..nothing authenticates. So I thought I would rebuild the Open Directory replica functions....however in recreating an Open Directory I get an error.
"Cannot replicate a directory with augment user records. Your server cannot become a replica of 'server.com' because its directory contains augment user records. Please refer to the Open Directory Administration Guide for more information about this issue."
How do I get rid of the augment users records? By the way..I set this server up per Lynda Lion Server essential training. Part of the server functions with File Sharing and users accessing folders..but Profile Manager does not authenticate on client machines.
View 1 Replies
View Related
Feb 10, 2012
I am trying to set login policies for network users on a 2008 Mac Pro running 10.7.3 and failing miserably.  Let me start by saying that I am doing this successfully with 6 other laptops and another Mac Pro (2011 version) with absolutley zero issues. However no matter what I do I cannot seem to get this 2008 Mac Pro to work. The system in question is connected via WiFI (as are some of the other systems). I am using the mac address of the WiFI (as I am on the other systems) and have tried managing this system individually and in a group each of which fail.Â
View 1 Replies
View Related
Feb 6, 2012
I installed Lion Server on a MacMini to run a shared Wiki calendar, and all is quite well, I got the Wiki calendar page up and running and the iCal clients have successfully subscribed to it.The problem: external users can'tl log in from the internet.On our LAN they can reach the Wiki Home page at http://10.x.y.z/wiki but how do they log in from the internet ?We have a DynDNS host name, but [url] brings up an empty page.I forwarded port 8080 to our server. I did checkip -checkhostname and it looked alright to me. The server has a FQDN ourserver.name.private. that points to 10.x.y.z and the reverse lookup points to the server name.Â
Info:
Mac mini (Mid 2010), Mac OS X (10.7.3)
View 2 Replies
View Related
May 28, 2012
I have Intego VirusBarrier X6 in several macs. When using it with normal/local/mobile users, I do not have any problem. However, when logging as network user (I have a mac mini with lion server 10.7.4), the macs hang after a while. At the beginning, I tried everything: permissions, firewall, sharepoints, etc on both the client and the server. Only when I uninstalled the software on the client, everything works again normal.Â
Info:
Mac mini, Mac OS X (10.7)
View 3 Replies
View Related
May 3, 2005
I'm trying to setup our xserve so our clients will authenticate against AD but have their prefs managed by OSX Server. So far I've got the clients logging on ok,group folders mount nicely and I can see AD users and groups from workgroup manager. But when I try to add a home directory for an AD user I get - 'Got unexpected error Error of type -14140 on line 1127 of PMMUGMainView.mm'. I get the same if I try to create a new active directory user so it looks like workgroup manager is having problems writing to the active directory.
View 7 Replies
View Related
Mar 22, 2012
I have Macmini 2.1 2007 year
After install 4 GB RAM (work only 3 GB) i install MAC OS X 10.7.3
Now i joined Macmini to Domain Active Directory 2008 R2. Joined via standard tools.
Macmini have a local user.
How i can migrate all settings, all data local user to Domain user?Â
When i used MAC OS X 10.6.8 i can joined to Domain via Likewise Open, and after i can use Likewise tools for migrate.
But now, in MAC OS X 10.7.3 i can't joined to domain via Likewise... and use migrate tools.Â
View 1 Replies
View Related
Jun 17, 2014
We upgraded our lab from 10.6.8 to 10.9.3. Preserving our settings and bootcamp by simply upgrading. After getting nearly all machines sorted out with active directory we are still having a problem with 2-3 machines with network user accounts being able to login. If no local home folder has been created prior to upgrading to 10.9.3 then the user cannot login, the login prompt dissapears then re-appears.
Here is a run down of the set-up.Â
Our settings force network users to have a local home folder on the local mac that they are logging into.Â
Mac OS X server is 10.6.8.Â
Active directory server is 2012 R2.Â
Network users without a pre-created home folder on the local mac prior to upgrade cannot login. The login prompt dissapears, then re-appears. No login.Â
Computers are managed with workgroup manager, as well as apple remote desktop. But no settings are applied, and no login scripts are being run. Â
Also I have noticed something concerning Mac OS X 10.8.5 and up. And that is in the active directory settings, if you bind to a domain (using active directory and not LDAP), lets say for example:Â
mydistrict.maindistrict.netÂ
And you go to add your local active directory district to the Authentication/Contacts search policy eg: Active Directory/mydistrict.maindistrict.net
it will only show: Active Directory/mydistrict/alldomains.maindistrict.net.Â
It shows a list of all domains for the forest. But it also adds the district that you bound to as the search directory?
Let me use a precise example using actual names.Â
Bind to local district: pineville.ketsds.netÂ
Now in search policy on 10.8.5 up to 10.9.3 it displays possible search domains like this:Â
Active Directory/PINEVILLE/pineville.ketsds.net <- The domain we want.
Active Directory/PINEVILLE/all-other-domains-in-forest.ketsds.net <--Which is fine.Â
Which is all fine, but when we select the local domain for authentication, and contacts search it adds it, but in the overview it says that it is not in our search policy even though it is.Â
On Mac OS X versions below this (10.6.8 and down, cannot verify for 10.7 as we do not have systems with it) it displays the search domains as:Â
Active Directory/pineville.ketsds.net
as compared to this on 10.8.5 and above:Â
Active Directory/PINEVILLE/pineville.ketsds.net
 As well as all the other domains, and when you add the local to the search policy it does not give the error that it is not in your search policy. Is there anyway to make this happen on 10.8.5 and above? We have tried everything. Network accounts will login even though it says this, it is just annoying. Â
Last question is on one computer that we upgraded, we had a problem with the network accounts. Tried deleting the .plist for network preferences, and the Directory services folder as well as the Open directory folder and now it create the open directory folder as locked and any changes made with the directory utility in the search policy is immediatley reverted once we hit apply.Â
Summary of questions:
1.) Network users cannot login without local folder created prior to upgrade.Â
2.) Mac OS X 10.8.5 and above does not correctly add Authentication/Contact search policy domains as it does in 10.6.8 and below.Â
3.) Active Directory/Open Directory Authentication/Contact search policy settings keey reverting after applying. (Happened prior to deleting .plist files and AD/OD folders in /Library/Preferences)Â
Info:
iMac, OS X Mavericks (10.9.3), Network Login Problems, 10.9.3
View 1 Replies
View Related
May 3, 2012
I have a couple of new users I've added to our directory recently. They are unable to connect to our internal jabber (iChat) server. Users that have connected previously are experiencing no difficulty. A quick overview of the layout of the system: two XServes, one is OD primary (aspen) the other is OD replica and iChat server (vail). I've modded some config files (long ago) to allow user IDs for jabber to be user@ourcompany.office instead of user@vail.ourcompany.office. It works quite nicely.Â
Excerpt from the logs shows a failed login attempt followed by a successful login attempt. Successful logins are happening from Messages (beta), iChat under Snow Leopard, and Pidgin under windows. Failing logins are all from iChat under Snow Leopard. Please ask questions, I'm happy to add any other pertinent data! May 3 16:21:45 vail jabberd/c2s[99718]: [13] [::ffff:10.255.170.122, port=52584] connectMay 3 16:21:47 vail jabberd/c2s[99718]: [13] [::ffff:10.255.170.122, port=52584] disconnect jid=unbound,
[code]....
Info:
Xserve, Mac OS X (10.6.8)
View 4 Replies
View Related
Sep 8, 2014
When trying to create a new user in Server Application I've come across this message: "existing connection is not authenticated: password change denied".
1. Quit Server.app. Â
2. On the Open Directory Server, execute these Terminal commands:Â Â Â Â Â
sudo touch /var/db/openldap/migration/.rekerberize     sudo killall PasswordService Â
3. Open Server.app. but the message I'm given in the terminal is No such file or directory.
Why I don't have the folder structure needed for this?
Info:
Mac mini, OS X Mavericks (10.9.4)
View 2 Replies
View Related
Jun 19, 2012
In a scenario where a machine is setup for multiple logins:Â If you attempt to log two network users in on that machine, the second user will not be allowed to log in until the first users logs out.
Info:
Mac OS X Server 10.6.8, Mac OS X (10.6.8)
View 2 Replies
View Related
Feb 19, 2012
I have a server in our DMZ that connects to Active Directory LDAP server (non-ssl over 389) but no objects actually show up in the directory editor. I get a green light in my Network Account Server, but queries against LDAP return no results. My end goal is to be able to dictate to Profile Manager what LDAP groups are allowed to enroll devices. I tested on our internal network on a test server and get the same results. Anyone have any luck connecting a Lion Server to LDAP and actually being able to view and utilize users and groups?
Info:
Mac mini, Mac OS X (10.7.3), Server
View 1 Replies
View Related
Jun 8, 2012
I've got networked clients logging in and occasionally having problems, especially with shared logons. I bet changing the location of temporary files from the home folder (on the server) to the local machine would fix a lot of issues.
Info:
iMac, Mac OS X (10.6.8), i5 with Thunderbolt
View 9 Replies
View Related
May 28, 2012
I'm just setting up a new Mac Mini (5,3) Server but I can't find 'Workgroup Manager' installed, only the 'Server' app. Is this the difference between the Mac Mini and a 'real' server?Â
The server app seems to do most things but I want to create all the user accounts with a pre set password but force each user to create their own password on first login, I can't seem to find this option in the 'Server' app. I can do this in Workgroup Manager on my old 10.4 server that's being replaced.Â
Info:
Mac mini, Mac OS X (10.7.4)
View 2 Replies
View Related
Feb 25, 2012
I was logged into my account when i went to sleep and i accidentally pushed the switch user button and now it brings me to a screen i hadnt ever seen before asking me for an admin user and password i dont know, is there any way to switch back to my original user that i have the password to?
Info:
MacBook Pro, Mac OS X (10.7.3)
View 3 Replies
View Related
Feb 2, 2012
If our users can simply remove the Remote Management Profile and have access to everything anyway, what is the point of remote management? I need to be able to lock this profile down so that it cannot be removed without a password, but I see no way to do this. Is this a giant bug in the software or am I missing something?
Info:
iPad 2, iOS 5.0.1, Lion Server 10.7.2
View 1 Replies
View Related
Feb 20, 2012
Have recently done a clean install of Lion onto a Mac Pro that was running Snow Leopard. Upgradede to 10.7.3  The Lion Mac sits on an office network of several macs running Snow Leopard and a Network Shared HDD.  In order to gain quick full access to the other computers we have been using "connect as" then inputting the macs registerred user administrator details, we were able us access to the full Mac and it's currently mounted hard drives. Since installing Lion I can see and fully access the network share which only uses guest access, see the Other macs in finder, add to their drop boxes but not connect as a registerred user to access one of the snow Leopard machines.  I get a pop up. Spinning wheel, and eventually a timeout. Can't even cancel this action as it comes up greyed out. Oddly the other macs can still log into the Lion machine. No joy so far toggling network preferrences and I'm pretty sure it's going to be a setting I have missed, So far have had not joy looking online or playing in seeing why it would now not be able to connect as before.Â
Info:
Mac Pro, Mac OS X (10.7.3)
View 9 Replies
View Related
