Problems configuring AFP

zeffan wrote:

>
> nmas version 33100811.12 nov 12 08
> ds version 10554.34 apr 23 08
>
Same here.

> Here is an excerpt from the AFPTCP.LOG:
> Fri Sep 4 09:59:15 2009
> : Thread ID = 314, InitAuthentication: RegOpenKeyEx 'Appliance' failed
> 1073741838 <4000000e>
> Fri Sep 4 09:59:16 2009
> : Thread ID = 314, Using Mac Code Page <Roman>
>
I'm thinking that an error that occured on Sept 4 has nothing to do with any
current issues you are having.

> I couldn't find a afpvol.log
>
Doh! I meant to say afptcp.log. Glad you figured out my mistake.

> Trustee assignments aren't an issue because they can access the files
> from a Windows PC.
>
Good.

> Here's the output from the diagpwd:
>
> Object DN: cn=usernameremoved,ou=Teachers,ou=DMS,o=DSD
> EMail: [NONE]
> Last Changed Date: [UNKNOWN]
> Password Status: Enabled, Not set
> Distribution Password Status: Not set
> Simple Password Status: Not set
> Password Policy DN: cn=Policy-1,cn=Password Policies,cn=Security
>

So this is the output for an account that does NOT work, right? It probably
is going to be different from an account that DOES work and if you compared
the two you would no doubt find the problem.

I am going to venture that the problem is that there is no password set for
this account! Most important is the setting of the Simple Password which as
you can see is not set. In our working accounts the passwords are SET and
the Simple and NDS and UP are all equal. Also since your output does not
mention NDS Password I'm guessing that your policy is set to remove the NDS
Password?

For comparison here is our diag-pwd output

Object DN: cn=someuser,ou=ou1,ou=ou2,o=org
EMail: some.user@ubc.ca
Last Changed Date: 9999-01-01 11:11:11 Z
Password Status: Enabled, Set
Distribution Password Status: Set
Simple Password Status: Set
Password Policy DN: cn=Employee,cn=Password Policies,cn=Security

Password Policy DN: cn=Employee,cn=Password Policies,cn=Security
Options: 0x340 (832)
Universal Password enabled
Advanced policy enabled
Sync NDS
Sync Simple
Synch external
Not user readable
Not admin readable

> I'm just so happy this customer bought a lab of MACs I could just cry.
>
>
Job security my friend. Jobs security too for that matter ;-)

So get the diagpwd output for a working account and compare to the non-
working account, resolve any diffs and hopefully that will be the fix.

Cheers,

Ron

PS I am off for the next week so I won't be able to followup if this is not
the issue. As a another suggestion take a look at the following articles for
some other troubleshooting help :

http://wiki.novell.com/index.php/Universal_Password
http://www.novell.com/communities/no...eshooting-afp-
nmas-issues