Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Server Logs


Hello.
  I am new to managing servers and I am not sure how to read everything I am seeing in the logs.  I am running Server 10.4.11,on a  2 x 2 GHz Dual Core Intel Xeon processors, I have 2 GB of RAM in it, the services that I am running on it are DNS, AFP, Open Directory, and Windows.    The last 3 days everyone on the network have been losing connection to it, Mac and PC alike, and then it restarts.  This is all happening right around the same times each day.  Any help would be greatly appreciated.  

I have two main questions I would like answered.  1. What is causing it to restart   2. What would cause the failed authentication returns, is it internal or external, this is my username, and I am not trying to log onto the server.  I have replaced the server name with "@@@@@", and my user name with "####".  Thanks again.

Kate

Here is the system log of our server.

May 30 03:15:04 @@@@@@@@@ cp: error processing extended attributes: Operation not permitted
May 30 03:15:05 @@@@@@@@@ cp: error processing extended attributes: Operation not permitted
May 30 03:15:05 @@@@@@@@@ cp: error processing extended attributes: Operation not permitted
May 30 07:01:27 @@@@@@@@@ DirectoryService[95]: Failed Authentication return is being delayed due to over five recent auth failures for username: mis.
May 30 07:06:15 @@@@@@@@@ DirectoryService[95]: Failed Authentication return is being delayed due to over five recent auth failures for username: ####.
May 30 07:14:44 @@@@@@@@@ DirectoryService[95]: Failed Authentication return is being delayed due to over five recent auth failures for username: ####.
May 30 07:41:39 @@@@@@@@@ DirectoryService[95]: Failed Authentication return is being delayed due to over five recent auth failures for username: ####.
May 30 08:19:59 @@@@@@@@@ /usr/sbin/PasswordService: client response doesn't match what we generated
May 30 08:37:02 @@@@@@@@@ DirectoryService[95]: Failed Authentication return is being delayed due to over five recent auth failures for username: ####.
May 30 08:47:49 @@@@@@@@@ DirectoryService[95]: Failed Authentication return is being delayed due to over five recent auth failures for username: ####.
May 30 09:26:22 localhost kernel[0]: hi mem tramps at 0xffe00000
May 30 09:26:22 localhost kernel[0]: PAE enabled
May 30 09:26:22 localhost kernel[0]: 64 bit mode enabled
May 30 09:26:22 localhost kernel[0]: standard timeslicing quantum is 10000 us
May 30 09:26:22 localhost kernel[0]: vm_page_bootstrap: 513221 free pages
May 30 09:26:22 localhost kernel[0]: mig_table_max_displ = 71
May 30 09:26:22 localhost kernel[0]: Enabling XMM register save/restore and SSE/SSE2 opcodes
May 30 09:26:22 localhost kernel[0]: ACPI CA 20060421
May 30 09:26:22 localhost kernel[0]: AppleIntelCPUPowerManagement: ready
May 30 09:26:22 localhost kernel[0]: AppleACPICPU: ProcessorApicId=0 LocalApicId=0 Enabled
May 30 09:26:22 localhost kernel[0]: AppleACPICPU: ProcessorApicId=1 LocalApicId=1 Enabled
May 30 09:26:22 localhost kernel[0]: AppleACPICPU: ProcessorApicId=2 LocalApicId=6 Enabled
May 30 09:26:22 localhost kernel[0]: AppleACPICPU: ProcessorApicId=3 LocalApicId=7 Enabled
May 30 09:26:22 localhost kernel[0]: AppleACPICPU: ProcessorApicId=4 LocalApicId=0 Disabled
May 30 09:26:22 localhost kernel[0]: AppleACPICPU: ProcessorApicId=5 LocalApicId=0 Disabled
May 30 09:26:22 localhost kernel[0]: AppleACPICPU: ProcessorApicId=6 LocalApicId=0 Disabled
May 30 09:26:22 localhost kernel[0]: AppleACPICPU: ProcessorApicId=7 LocalApicId=0 Disabled
May 30 09:26:22 localhost kernel[0]: Copyright (c) 1982, 1986, 1989, 1991, 1993
May 30 09:26:22 localhost kernel[0]: The Regents of the University of California. All rights reserved.
May 30 09:26:22 localhost kernel[0]: using 10485 buffer headers and 4096 cluster IO buffer headers
May 30 09:26:22 localhost kernel[0]: Enabling XMM register save/restore and SSE/SSE2 opcodes
May 30 09:26:22 localhost kernel[0]: Started CPU 01
May 30 09:26:22 localhost kernel[0]: Enabling XMM register save/restore and SSE/SSE2 opcodes
May 30 09:26:22 localhost kernel[0]: Started CPU 02
May 30 09:26:22 localhost kernel[0]: Enabling XMM register save/restore and SSE/SSE2 opcodes
May 30 09:26:22 localhost kernel[0]: IOAPIC: Version 0x20 Vectors 64:87
May 30 09:26:22 localhost kernel[0]: Started CPU 03
May 30 09:26:22 localhost kernel[0]: ACPI: System State [S0 S3 S4 S5] (S3)
May 30 09:26:22 localhost kernel[0]: Security auditing service present
May 30 09:26:22 localhost kernel[0]: BSM auditing present
May 30 09:26:22 localhost kernel[0]: disabled
May 30 09:26:22 localhost kernel[0]: rooting via boot-uuid from /chosen: FA5B391C-EB0D-35DE-B862-C95319565C9D
May 30 09:26:22 localhost kernel[0]: Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
May 30 09:26:22 localhost kernel[0]: USB caused wake event (EHCI)
May 30 09:26:22 localhost kernel[0]: FireWire (OHCI) TI ID 8025 built-in now active, GUID 0016cbfffe74032a; max speed s800.
May 30 09:26:22 localhost kernel[0]: FusionMPT: Notification = 10 (Event Change) for SCSI Domain = 0
May 30 09:26:22 localhost kernel[0]: FusionMPT: Notification = 10 (Event Change) for SCSI Domain = 2
May 30 09:26:22 localhost kernel[0]: FusionMPT: Notification = 22 (SAS Discovery) for SCSI Domain = 2
May 30 09:26:22 localhost kernel[0]: Discovery condition = 0x000f0001
May 30 09:26:22 localhost kernel[0]: FusionMPT: Notification = 18 (SAS Phy Link Status) for SCSI Domain = 2
May 30 09:26:22 localhost kernel[0]: SAS Phy Link Status: PhyNum = 0, old link rate = 0, new link rate = 8, SASAddress = 5008000700012cd8
May 30 09:26:22 localhost kernel[0]: FusionMPT: Notification = 18 (SAS Phy Link Status) for SCSI Domain = 2
May 30 09:26:22 localhost kernel[0]: SAS Phy Link Status: PhyNum = 1, old link rate = 0, new link rate = 8, SASAddress = 5008000700012cda
May 30 09:26:22 localhost kernel[0]: FusionMPT: Notification = 15 (SAS Device Status Change) for SCSI Domain = 2
May 30 09:26:22 localhost kernel[0]: FusionSAS: SASAddress = 9555205748E5941 added. Mapped to targetID = 3, bus = 0 on SCSI Domain = 2.
May 30 09:26:22 localhost kernel[0]: FusionMPT: Notification = 15 (SAS Device Status Change) for SCSI Domain = 2
May 30 09:26:22 localhost kernel[0]: FusionSAS: SASAddress = 955520573907B31 added. Mapped to targetID = 4, bus = 0 on SCSI Domain = 2.
May 30 09:26:22 localhost kernel[0]: Extension "com.apple.driver.iTunesPhoneDriver" has no kernel dependency.
May 30 09:26:22 localhost kernel[0]: FusionMPT: Notification = 10 (Event Change) for SCSI Domain = 1
May 30 09:26:22 localhost kernel[0]: Got boot device = IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/RP01@1C/IOPCI2PCIBridge/P8PC@0/IOPCI2PCIBridge/SAS@2/AppleLSIFusionSAS/SAS Target 09555205748E5941@3/IOSCSITargetDevice/IOSCSILogicalUnitNub@0/IOSCSIPeripheralDeviceType00/IOBlockStorageServices/IOBlockStorageDriver/ST3808110AS PN Media/IOGUIDPartitionScheme/Apple_RAID_OfflineV2_Untitled_3@2/AppleRAIDMember/AppleRAIDMirrorSet/Mac ND@0
May 30 09:26:22 localhost kernel[0]: BSD root: disk1, major 14, minor 4
May 30 09:26:22 localhost kernel[0]: jnl: replay_journal: from: 519680 to: 3680768 (joffset 0x263000)
May 30 09:26:22 localhost kernel[0]: HFS: Removed 4 orphaned unlinked files
May 30 09:26:22 localhost kernel[0]: FusionMPT: Notification = 22 (SAS Discovery) for SCSI Domain = 2
May 30 09:26:22 localhost kernel[0]: Discovery condition = 0x00000000
May 30 09:26:22 localhost kernel[0]: Jettisoning kernel linker.
May 30 09:26:22 localhost kernel[0]: Resetting IOCatalogue.
May 30 09:26:22 localhost kernel[0]: Matching service count = 0
May 30 09:26:22 localhost kernel[0]: Matching service count = 0
May 30 09:26:22 localhost kernel[0]: Matching service count = 0
May 30 09:26:22 localhost kernel[0]: Matching service count = 0
May 30 09:26:22 localhost kernel[0]: Matching service count = 0
May 30 09:26:22 localhost kernel[0]: Matching service count = 0
May 30 09:26:22 localhost kernel[0]: Previous Shutdown Cause: 0
May 30 09:26:22 localhost kernel[0]: Apple16X50ACPI1: Identified Serial Port on ACPI Device=UAR1
May 30 09:26:22 localhost kernel[0]: Apple16X50ACPI::start FOUND DB9 Property for AAPL,connector
May 30 09:26:22 localhost kernel[0]: Apple16X50UARTSync: Detected 16550AF/C/CF FIFO=16 MaxBaud=115200
May 30 09:26:23 localhost lookupd[80]: lookupd (version 369.6) starting - Fri May 30 09:26:23 2008
May 30 09:26:24 localhost watchdogtimerd: Automatic reboot timer enabled.\n
May 30 09:26:24 localhost named[70]: starting BIND 9.3.4-P1 -f
May 30 09:26:24 localhost named[70]: command channel listening on 127.0.0.1#54
May 30 09:26:24 localhost mDNSResponder-108.6 (Jul 19 2007 11: 41:28)[62]: starting
May 30 09:26:24 localhost memberd[77]: memberd starting up
May 30 09:26:24 localhost kernel[0]: AppleIntel8254XEthernet: Ethernet address 00:17:f2:93:63:d8
May 30 09:26:24 localhost kernel[0]: AppleIntel8254XEthernet: Ethernet address 00:17:f2:93:63:d9
May 30 09:26:24 localhost DirectoryService[95]: Launched version 2.1 (v353.6)
May 30 09:26:24 localhost configd[73]: No AirPort Driver found.
May 30 09:26:24 localhost lookupd[96]: lookupd (version 369.6) starting - Fri May 30 09:26:24 2008
May 30 09:26:25 localhost diskarbitrationd[75]: disk0s3    hfs      2EF5B321-ACCA-3035-BC16-2F7DF4F13C5B Boot OSX                [not mounted]
May 30 09:26:25 localhost diskarbitrationd[75]: disk2s3    hfs      2EF5B321-ACCA-3035-BC16-2F7DF4F13C5B Boot OSX                [not mounted]
May 30 09:26:25 localhost diskarbitrationd[75]: disk1      hfs      FA5B391C-EB0D-35DE-B862-C95319565C9D Mac HD                  /
May 30 09:26:25 localhost /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow: Login Window Application Started
May 30 09:26:26 localhost loginwindow[111]: Login Window Started Security Agent
May 30 09:26:26 localhost /System/Library/CoreServices/mcxd.app/Contents/MacOS/mcxd: DSGetLocallyHostedNodeNames(): dsFindDirNode() == -14008
May 30 09:26:26 localhost /System/Library/CoreServices/mcxd.app/Contents/MacOS/mcxd: DSGetSearchPath(): DSGetLocallyHostedNodeNames() == -14956
May 30 09:26:26 localhost /System/Library/CoreServices/mcxd.app/Contents/MacOS/mcxd: DSGetCurrentConfigInfo(): DSGetSearchPath() == -14956
May 30 09:26:26 localhost /System/Library/CoreServices/mcxd.app/Contents/MacOS/mcxd: DSGetCacheInfo(): DSGetCurrentConfigInfo() == -14956
May 30 09:26:26 localhost /System/Library/CoreServices/mcxd.app/Contents/MacOS/mcxd: *** MCXD.getComputerInfo: Couldn't get cache info -14956
May 30 09:26:27 localhost mDNSResponder: Adding browse domain local.
May 30 09:26:29 localhost kernel[0]: Intel8254x -- Link Up -- 00:17:f2:93:63:d8 -- called by interruptOccurred() -- 
May 30 09:26:29 localhost kernel[0]: --        Auto-Negotiation Advertisement Register (04d)                = 0xde1
May 30 09:26:29 localhost kernel[0]: --        Auto-Negotiation Link Partner Ability Register (05d)         = 0xc1e1
May 30 09:26:29 localhost kernel[0]: --        Auto-Negotiation Gigabit Advertisement Register (09d)        = 0xe00
May 30 09:26:29 localhost kernel[0]: --        Auto-Negotiation Gigabit Link Partner Ability Register (10d) = 0x7800
May 30 09:26:29 localhost kernel[0]: --        PHY Specific Status Register (17d)                           = 0xac48
May 30 09:26:29 localhost kernel[0]: Intel8254X -- Negotiated Speed: 1 Gb/s, Duplex: Full, Flow Control: Receive Pause Disabled, Transmit Pause Disabled
May 30 09:26:30 @@@@@@@@@ kernel[0]: Intel8254x -- Link Up -- 00:17:f2:93:63:d9 -- called by interruptOccurred() -- 
May 30 09:26:30 @@@@@@@@@ kernel[0]: --        Auto-Negotiation Advertisement Register (04d)                = 0xde1
May 30 09:26:30 @@@@@@@@@ configd[73]: setting hostname to "@@@@@@@@@@@@@@@@@@@@@@@@@@@"
May 30 09:26:30 @@@@@@@@@ kernel[0]: --        Auto-Negotiation Link Partner Ability Register (05d)         = 0xc1e1
May 30 09:26:30 @@@@@@@@@ kernel[0]: --        Auto-Negotiation Gigabit Advertisement Register (09d)        = 0xe00
May 30 09:26:30 @@@@@@@@@ kernel[0]: --        Auto-Negotiation Gigabit Link Partner Ability Register (10d) = 0x7800
May 30 09:26:30 @@@@@@@@@ kernel[0]: --        PHY Specific Status Register (17d)                           = 0xac48
May 30 09:26:30 @@@@@@@@@ kernel[0]: Intel8254X -- Negotiated Speed: 1 Gb/s, Duplex: Full, Flow Control: Receive Pause Disabled, Transmit Pause Disabled
May 30 09:26:32 @@@@@@@@@ configd[73]: executing /System/Library/SystemConfiguration/Kicker.bundle/Contents/Resources/enable-network
May 30 09:26:32 @@@@@@@@@ configd[73]: posting notification com.apple.system.config.network_change
May 30 09:26:32 @@@@@@@@@ lookupd[127]: lookupd (version 369.6) starting - Fri May 30 09:26:32 2008
May 30 09:26:33 @@@@@@@@@ servermgrd: servermgr_dns: Reloaded named
May 30 09:26:33 @@@@@@@@@ servermgrd: servermgr_dns: hostname and DNS entries for this server are synchronized
May 30 09:26:33 @@@@@@@@@ kernel[0]: nmbd[246] uses send/recv on a pipe
May 30 09:26:35 @@@@@@@@@ servermgrd: servermgr_dns: Reloaded named
May 30 09:26:37 @@@@@@@@@ configd[73]:   target=enable-network: disabled
May 30 09:26:39 @@@@@@@@@ mDNSResponder: Update _kerberos._tcp.@@@@@@@@@.@@@@@@@@@.COM. refused
May 30 09:26:39 @@@@@@@@@ mDNSResponder: Registration of record _kerberos._tcp.@@@@@@@@@.@@@@@@@@@@@@@@@@@@.COM. type 33 failed with error -65553
May 30 09:26:39 @@@@@@@@@ mDNSResponder: Update _kerberos._udp.@@@@@@@@@@@@@@@@@@.COM. refused
May 30 09:26:39 @@@@@@@@@ mDNSResponder: Registration of record _kerberos._udp.@@@@@@@@@.@@@@@@@@@.COM. type 33 failed with error -65553
May 30 09:26:39 @@@@@@@@@ mDNSResponder: ERROR: Only name server claiming responsibility for "_kerberos.intelxserve." is "."!
May 30 09:26:40 @@@@@@@@@ /usr/sbin/serialnumberd[213]: serialnumberd: Firewall rule #1 added to allow port 626.
May 30 09:26:43 @@@@@@@@@ ARDAgent [293]: ********ARDAgent Launched********
May 30 09:26:43 @@@@@@@@@ ARDAgent [293]: ********ARDAgent Ready********
May 30 09:26:43 @@@@@@@@@ ARDAgent [293]: ServerNotificationReplyHandler: serverEntryRef is NULL
May 30 09:26:45 @@@@@@@@@ /usr/sbin/serveradmin: servermgr_ipfilter:ipfw config:Notice:Disabled firewall
May 30 09:27:23 @@@@@@@@@ kernel[0]: FusionMPT: Notification = 7 (Link Status Change) for SCSI Domain = 0
May 30 09:27:23 @@@@@@@@@ kernel[0]: FusionFC: Link is down for SCSI Domain = 0.
May 30 09:27:23 @@@@@@@@@ kernel[0]: FusionMPT: Notification = 5 (External Bus Reset) for SCSI Domain = 0
May 30 09:27:23 @@@@@@@@@ kernel[0]: FusionMPT: External Bus Reset for SCSI Domain = 0
May 30 09:27:23 @@@@@@@@@ kernel[0]: FusionMPT: Notification = 7 (Link Status Change) for SCSI Domain = 1
May 30 09:27:23 @@@@@@@@@ kernel[0]: FusionFC: Link is down for SCSI Domain = 1.
May 30 09:27:23 @@@@@@@@@ kernel[0]: FusionMPT: Notification = 5 (External Bus Reset) for SCSI Domain = 1
May 30 09:27:23 @@@@@@@@@ kernel[0]: FusionMPT: External Bus Reset for SCSI Domain = 1
May 30 09:27:24 @@@@@@@@@ kernel[0]: FusionMPT: Notification = 8 (Loop State Change) for SCSI Domain = 0
May 30 09:27:24 @@@@@@@@@ kernel[0]: FusionFC: Loop Initialization Packet for SCSI Domain = 0.
May 30 09:27:24 @@@@@@@@@ kernel[0]: FusionMPT: Notification = 8 (Loop State Change) for SCSI Domain = 1
May 30 09:27:24 @@@@@@@@@ kernel[0]: FusionFC: Loop Initialization Packet for SCSI Domain = 1.
May 30 09:27:24 @@@@@@@@@ kernel[0]: FusionMPT: Notification = 7 (Link Status Change) for SCSI Domain = 0
May 30 09:27:24 @@@@@@@@@ kernel[0]: FusionFC: Link is active for SCSI Domain = 0.
May 30 09:27:24 @@@@@@@@@ kernel[0]: FusionMPT: Notification = 7 (Link Status Change) for SCSI Domain = 1
May 30 09:27:24 @@@@@@@@@ kernel[0]: FusionFC: Link is active for SCSI Domain = 1.
May 30 09:27:24 @@@@@@@@@ kernel[0]: FusionMPT: Notification = 6 (Rescan) for SCSI Domain = 0
May 30 09:27:24 @@@@@@@@@ kernel[0]: FusionMPT: Notification = 6 (Rescan) for SCSI Domain = 1
May 30 09:27:25 @@@@@@@@@ kernel[0]: jnl: replay_journal: from: 214089728 to: 45883392 (joffset 0x6d2b000)
May 30 09:27:25 @@@@@@@@@ kernel[0]: jnl: replay_journal: from: 26701824 to: 218173440 (joffset 0x6d2b000)
May 30 09:27:43 @@@@@@@@@ kernel[0]: hfs mount: enabling extended security on RAID1
May 30 09:27:43 @@@@@@@@@ diskarbitrationd[75]: disk3s10   hfs      61CAC0EF-DA57-3940-A079-7E7DBECBC61F RAID1                   /Volumes/RAID1
May 30 09:27:52 @@@@@@@@@ kernel[0]: hfs mount: enabling extended security on RAID2
May 30 09:27:52 @@@@@@@@@ diskarbitrationd[75]: disk4s10   hfs      51C8B60E-7A7F-3360-8CE3-F21AA3A85156 RAID2                   /Volumes/RAID2
May 30 09:34:12 @@@@@@@@@ DirectoryService[95]: Failed Authentication return is being delayed due to over five recent auth failures for username: ####.
May 30 10:01:09 @@@@@@@@@ DirectoryService[95]: Failed Authentication return is being delayed due to over five recent auth failures for username: ####.
May 30 10:26:46 @@@@@@@@@ DirectoryService[95]: Failed Authentication return is being delayed due to over five recent auth failures for username: ####.
May 30 11:02:54 @@@@@@@@@ DirectoryService[95]: Failed Authentication return is being delayed due to over five recent auth failures for username: ####.
May 30 11:20:03 @@@@@@@@@ DirectoryService[95]: Failed Authentication return is being delayed due to over five recent auth failures for username: ####.
May 30 11:42:45 @@@@@@@@@ ARDAgent [1060]: ********ARDAgent Launched********
May 30 11:42:46 @@@@@@@@@ ARDAgent [1060]: ********ARDAgent Ready********
May 30 11:42:46 @@@@@@@@@ ARDAgent [1060]: ServerNotificationReplyHandler: serverEntryRef is NULL











 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden


Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.