Thanks. That was it. I had forgotten about that setting. I changed it
when I created a cluster admin group and didn't think about the fact
that the local admin would be locked out by default.
Knew it was something trivial that I was missing.
-David-
On Oct 30, 2007, at 2:18 PM, William Strucke wrote:
I didn't mean the firewall -- in server manager you could have the
access settings for the login window restricted to the "staff"
group for example which would exclude administrators from logging
in, at least with the default group memberships.
On Oct 30, 2007, at 8:45 AM, David R. Steiner wrote:
On Oct 29, 2007, at 6:41 PM, William Strucke wrote:
do you have any service access restrictions on those two servers
in server manager?
Good thought but...
I would see this as a possibility if there were problems logging
in with an OD account not the local admin account. By default all
traffic from the server to itself is allowed.
That said, just to be sure, I stopped the firewall on one of the
affected machines and still couldn't log in with the admin account.
-David-
On Oct 29, 2007, at 5:13 PM, David R. Steiner wrote:
Hello,
I have a problem that I can't figure out.
Background:
I have 6 machines that are part of a small Xsan cluster. Server
1 is the master MDC, Server 2 is the failover MDC and the master
OpenDirectory Server for the cluster. Servers 4 through 6 are
simply clients. All are running OS X Server 10.4.10. OD logins
seem to be working correctly on all the machines.
At some point, after I set up the OD master, I discovered that I
could no longer login on the login screen via ARD as the admin
user on servers 1 and 2. I can log in as a non-privileged Open
Directory user with no problem. The same is true if I try to ssh
in as admin.
On servers 4-6 (the clients) I have no problems logging in as
admin.
I know the password for the admin is good because that is the
password that ARD is using to make the connection to the machine
and I can use it to administer other things (e.g., Workgroup
Manager). I can also su to the admin user with it after I get
logged in.
I have checked the Directory Access settings on all the machines
and they appear the same.
I tried changing the admin account password on one of the
affected machines and it did not make any difference.
Am I missing something trivial here? Can anyone offer me a clue?
Thanks in advance.
-David-
David R. Steiner
email@hidden
UNIX System Manager Phone: 603.646.3127
Dartmouth College Fax:
603.646.1041
Peter Kiewit Computing Services
