{"id":704,"date":"2013-11-13T05:28:44","date_gmt":"2013-11-13T11:28:44","guid":{"rendered":"http:\/\/www.ethnosync.com\/?p=704"},"modified":"2014-04-23T10:24:31","modified_gmt":"2014-04-23T15:24:31","slug":"unable-to-get-network-users-working-in-server-3-0-take-6","status":"publish","type":"post","link":"https:\/\/www.ethnosync.com\/?p=704","title":{"rendered":"Network Users Cannot Login &#8211; Server 3.0 &#8211; Take 6"},"content":{"rendered":"\n<p>I am now fully up, just to reiterate my painful steps, and with some of the trivial details to help the less experienced:<\/p>\n<ul>\n<li>Image the server using Carbon Copy Cloner. (I used the version 3.4.7, the last free version, which seems to be still running OK with Mavericks.)<\/li>\n<li>Using .local set-up. My external domain name is used\u00a0only\u00a0in VPN, mail and websites settings.<\/li>\n<li>Using a DNS set-up\u00a0manually\u00a0created while &#8220;show all records&#8221; is in effect. (Any other way relying on Apple&#8217;s automatic scripts seems to screw it up.) Primary zone &#8220;local&#8221;, and each machine is listed as with their names under local. Except nameservers that are listed as x.local under the local zone. Looking for &#8220;only some clients&#8221; with &#8220;forwarding server&#8221; 10.0.1.1, my airport extreme router. The server and\u00a0all\u00a0of the clients are in the DNS.<\/li>\n<li>Server uses 127.0.0.1 as it own DNS followed by my airport extreme router at 10.0.1.1, followed by 8.8.8.8, and 8.8.4.4, DNS servers from google. [This is set-up in the network panel of System Preferences on the server.]<\/li>\n<li>Clients substitute the 10.0.1.x (my server) in place of 127.0.0.1 in the DNS, otherwise the same. All clients use my DNS services. [This is set-up in the network panel of System Preferences on the client.]<\/li>\n<li>Confirm reverse lookup works per\u00a0<a href=\"http:\/\/support.apple.com\/kb\/HT5300\">Apple&#8217;s directions<\/a>. Server and the clients.<\/li>\n<li>Once all of the steps above are complete, blow away your Open Directory, and reset it from scratch. (What a pain in the derri\u00e8re.) Set users, groups and file sharing up.<\/li>\n<li>[Optional] Bring trust certificates from profiles to clients using\u00a0<a href=\"http:\/\/10.0.1.x\/mydevices\">http:\/\/10.0.1.x\/mydevices<\/a>, so you don&#8217;t have to confirm every time when you join.<\/li>\n<li>[May or may not be needed] Delete and rejoin the network account server on all clients.<\/li>\n<li>Make sure all Little Snitch installations in clients and the server have been removed.<\/li>\n<li>Server is 3.0.1, but this was also working before once I removed Little Snitch.<\/li>\n<\/ul>\n<p>I hope this helps.<\/p>\n<p><a href=\"http:\/\/www.ethnosync.com\/?p=684\">Network Users Cannot Login &#8211; Server 3.0<\/a><\/p>\n<p><a href=\"http:\/\/www.ethnosync.com\/?p=686\">Network Users Cannot Login &#8211; Server 3.0 &#8211; Take 2<\/a><\/p>\n<p><a href=\"http:\/\/www.ethnosync.com\/?p=690\">Network Users Cannot Login &#8211; Server 3.0 &#8211; Take 3<\/a><\/p>\n<p><a href=\"http:\/\/www.ethnosync.com\/?p=697\">Network Users Cannot Login &#8211; Server 3.0 &#8211; Take 4<\/a><\/p>\n<p><a href=\"http:\/\/www.ethnosync.com\/?p=702\">Network Users Cannot Login &#8211; Server 3.0 &#8211; Take 5<\/a><\/p>\n<p>Network Users Cannot Login &#8211; Server 3.0 &#8211; Take 6<\/p>\n<p>\u00a92013 EthnoSync.com. All Rights Reserved.<\/p>\n<p><script type=\"text\/javascript\">\/\/ <![CDATA[\ngoogle_ad_client = \"pub-7338556709983307\"; \/* ArticleBanner *\/ google_ad_slot = \"0441375625\"; google_ad_width = 468; google_ad_height = 60;\n\/\/ ]]><\/script><br \/>\n<script type=\"text\/javascript\" src=\"http:\/\/pagead2.googlesyndication.com\/pagead\/show_ads.js\">\/\/ <![CDATA[\n\n\n\/\/ ]]><\/script><\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>I am now fully up, just to reiterate my painful steps, and with some of the trivial details to help the less experienced: Image the server using Carbon Copy Cloner. (I used the version 3.4.7, the last free version, which seems to be still running OK with Mavericks.) Using .local set-up. My external domain name [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":529,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,91,90],"tags":[177,181,180],"class_list":["post-704","post","type-post","status-publish","format-standard","has-post-thumbnail","category-apple","category-mavericks","category-server","tag-apple","tag-mavericks","tag-server","czr-hentry"],"_links":{"self":[{"href":"https:\/\/www.ethnosync.com\/index.php?rest_route=\/wp\/v2\/posts\/704","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ethnosync.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ethnosync.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ethnosync.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ethnosync.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=704"}],"version-history":[{"count":3,"href":"https:\/\/www.ethnosync.com\/index.php?rest_route=\/wp\/v2\/posts\/704\/revisions"}],"predecessor-version":[{"id":761,"href":"https:\/\/www.ethnosync.com\/index.php?rest_route=\/wp\/v2\/posts\/704\/revisions\/761"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ethnosync.com\/index.php?rest_route=\/wp\/v2\/media\/529"}],"wp:attachment":[{"href":"https:\/\/www.ethnosync.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=704"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ethnosync.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=704"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ethnosync.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=704"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}