I am using a real Certificate, in which the computer name matches my server name.Ħ. I rebuild the kerberos, as the instructions show.ĥ. When doing dig and dig -x for the server, returned information is correct.Ĥ. The DNS server is correctly set in both the clients and the server, and it is also a real IP address. Both server name and computer name show the fully qualified domain name of the server, let's say .ģ. The server has a static IP all right, a real one.Ģ. I have the same problem here, but I am using real, static IPs. Ensure that the UID's are in the 1001+ range. Export all OD users, delete them, turn off OD, turn it back on, and import. Don't log in to the server with a network user's account.ĩ. Use the fully-qualified domain name of the master.Ĩ. Unbind and then rebind the clients in the Users & Groups preference pane. Deselecting and then reselecting the certificate in Server.app has been reported to have an effect in some cases.Ħ. The common name must match the hostname and domain name. If you use authenticated binding, check the validity of the master's certificate. Follow these instructions to rebuild the Kerberos configuration on the master.ĥ. The only DNS server set on the clients should be the internal one, which they should get from DHCP if applicable.Ĥ. The primary DNS server used by the master must be 127.0.0.1 (that is, itself) unless you're using another server for internal DNS. ''), and the name must not be in the '.local' top-level domain, which is reserved for Bonjour.ģ. The server must have at least a three-level name (e.g. On the Accessing your Server sheet, change the Host Name, if necessary. On the Accessing your Server sheet, Domain Name should be selected. Click the Edit button on the Host Name line. To confirm, select the server by name in the sidebar of the Server application window, then select the Overview tab. You must have a working DNS service, and the master's hostname must match its fully-qualified domain name. The OD master must have a static IP address on the local network, not a dynamic address.Ģ. Test after each one, and back up all data before making any changes.ġ. Many Open Directory problems can be resolved by taking the following steps.

Reset admin password mac os x 10.9