Re: Argh! I hate that I am going to ask this. (UPDATE)

Subject: Re: Argh! I hate that I am going to ask this. (UPDATE)

From: Josh Wisenbaker <email@hidden>

Date: Wed, 31 Aug 2005 10:14:47 -0400

Delivered-to: email@hidden

On Wednesday, August 31, 2005, at 04:23AM, Adrian Flaherty <email@hidden> wrote: >Ok, still no joy with Mac clients connecting to Mac X Server 10.4.1. > >Windows clients (XP and 2K) connect, validating via LDAPv3 without any problem what so ever. However, for the life of me, I >cannot get any Mac clients to authenticate either via LDAP or Netinfo. So are you using the Mac OS X Server PDC for the PCs? Or are you really using LDAP with something like pGina? > >Settings on a client Mac as follows: > >Mac OS X 10.3.X or 10.4.X > >Directory Access settings are: > >LDAP Services - > Use DHCP supplied LDAP server - Off >Enable - On >Server Name or IP = 192.168.0.200 >LDAP Mappings - From Server >SSL = Off Try specifying the mappings as OpenDirectory and enter the full search base. i.e. dc=server,dc=domain,dc=edu. > Authentication tab - /NetInfo/root (which is ghosted) It's ghosted because the local nidb is always searched first. > /LDAPv3/192.168.0.200 (not ghosted) OK > >Netinfo Settings - > >Attempt using Broadcast protocol - Unchecked > Attempt using DHCP - Unchecked > Attempt using specific Netinfo Server - Checked > Server IP Address = 192.168.0.200 > Server tag = X-Server (name of the server) OK, you have the plugin configured, but you have not put the NetInfo server in the authentication tab. It won't even attempt to look at it. 10.4 Server won't even have a netinfo server running unless you have updated from the 10.2 days all the way up and never migrated to LDAP. >I can't use DHCP to do this as, when I switch DHCP on on the server, it causes the PC's stress (as they get their IP numbers at the >moment from a router which also NAT's). In our lab, which is also X-Served, the netinfo settings above (except that the Server >Tag is called something else), works 100% reliably for about 55 Mac clients (and no PC's), although this is Jaguar server. Like I said, 10.2 can host netinfo just fine, but it isn't running by default on 10.3+ server. > >Beginning to worry a little now as the deadline approaches (next Monday). I appreciate anyone having a look at this and asking >me any and all (obvious and less obvious), questions. Are you putting your users in the LDAP domain? Does your DNS work perfectly both forward and reverse? Is everything running in the OD overview tab of Server Admin. Josh www.afp548.com

Ok, still no joy with Mac clients connecting to Mac X Server 10.4.1.

Windows clients (XP and 2K) connect, validating via LDAPv3 without any problem what so ever. However, for the life of me, I cannot get any Mac clients to authenticate either via LDAP or Netinfo.

Settings on a client Mac as follows:

Mac OS X 10.3.X or 10.4.X

Directory Access settings are:

LDAP Services -

Use DHCP supplied LDAP server - Off

Enable - On

Server Name or IP = 192.168.0.200

LDAP Mappings - From Server

SSL = Off

Authentication tab - /NetInfo/root (which is ghosted)

/LDAPv3/192.168.0.200 (not ghosted)

Netinfo Settings -

Attempt using Broadcast protocol - Unchecked

Attempt using DHCP - Unchecked

Attempt using specific Netinfo Server - Checked

Server IP Address = 192.168.0.200

Server tag = X-Server (name of the server)

I can't use DHCP to do this as, when I switch DHCP on on the server, it causes the PC's stress (as they get their IP numbers at the moment from a router which also NAT's). In our lab, which is also X-Served, the netinfo settings above (except that the Server Tag is called something else), works 100% reliably for about 55 Mac clients (and no PC's), although this is Jaguar server.

Beginning to worry a little now as the deadline approaches (next Monday). I appreciate anyone having a look at this and asking me any and all (obvious and less obvious), questions.

Strangely enough - I have exactly the same problem at our other school using Panther 10.3.X Server. PC's work fine - Mac's won't authenticate at all. It makes me think I am making a fundamental error, but I can't seem to see the wood for the (OUCH! My head!).

Adrian the Hairless

Milton Keynes Preparatory School

_______________________________________________ Do not post admin requests to the list. They will be ignored. Macos-x-server mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/macos-x-server/email@hidden This email sent to email@hidden

References:
	>Argh! I hate that I am going to ask this. (From: Adrian Flaherty <email@hidden>)
	>Re: Argh! I hate that I am going to ask this. (From: Adrian Flaherty <email@hidden>)
	>Re: Argh! I hate that I am going to ask this. (UPDATE) (From: Adrian Flaherty <email@hidden>)