Filter
Top Products
244 Chapter 11 Solving Problems
 If the user’s account resides in a directory domain that is not available, create a user
account in a directory domain that is available.
 Make sure the client software encodes the password so it is recognized correctly. For
example, Open Directory recognizes UTF-8 encoded strings, which may not be sent
by some clients.
 Make sure the user’s current application and operating system support the user’s
password length. For example, Windows applications that use the LAN Manager
authentication method support only 14-character passwords, so a password longer
than 14 characters causes an authentication failure even though Windows service
supports longer passwords.
 If you disabled authentication methods for Open Directory or shadow passwords
(such as APOP or LAN Manager) the user’s applications can’t authenticate using the
disabled methods.
After enabling or disabling Open Directory Password Server or shadow password
authentication methods, you might need to reset the user’s password.
For information about enabling and disabling authentication methods, see Open
Directory Administration.
 For Kerberos troubleshooting tips, see “If Users Can’t Authenticate Using Single Sign-
On or Kerberos” on page 245.
 If a Mac OS v8.1–8.6 computer fails to authenticate for Apple file service, the
computer’s AppleShare Client software may need upgrading:
 Mac OS v8.6 computers should use AppleShare Client v3.8.8.
 Mac OS v8.1–8.5 computers should use AppleShare Client v3.8.6.
 Mac OS v8.1–8.6 computers that have file server volumes mount during startup
should use AppleShare Client v3.8.3 with DHX UAM (User Authentication Module)
installed. DHX UAM is included with the AppleShare Client v3.8.3 installation
software.
If Users Relying on a Password Server Can’t Log In
If your network has a server with Mac OS X Server v10.2, it could receive authentication
from an Open Directory Password Server hosted by another server. If the Password
Server’s computer disconnects from your network—for example, because you unplug
the cable from the computer’s Ethernet port—users whose passwords are validated
using the Password Server can’t log in because their server’s IP address isn’t accessible.
Users can log in to Mac OS X Server if you reconnect the Password Server’s computer to
the network. Alternately, while the Password Server’s computer is offline, users can log
in with user accounts whose password type is crypt or shadow password.