MAC External Authentication breaks when moving from FMSA 9 to FMSA 10 or 11

[Crooked Arm]

Hi All,

I've got a Xserve running OSX Server 10.5.8 and FMSA 9. When I uninstall FMSA 9 and install either FMSA 10 or 11, external authentication breaks. All the external users and groups are set up in the local OS.

Some things we've tried:

-confirmed that FM and External authentication are enabled in the admin

-double checked the spelling of group names in the OS and FM files

-re-uploaded the data files through the admin

-deleted and re-created some users and groups in the OS

-deleted and re-created some external-auth accounts in a database

-burned sage in the server closet

No matter what we do, we end up with error number 661 logged when attempting to authenticate with an external account. I appreciate any suggestions offered up. Thanks!

[Vaughan]

Check the date and time on the servers is the same as that on the client. Could be daylight savings or time zone.

[Crooked Arm]

No kidding? I'll have the client check it out. Why would a time discrepancy break authentication? Seems like it would always fail for WAN users outside the server TZ.

Thanks for the suggestion.

[Vaughan]

I don't know, but Stephen Blackwell mentions it as a point of failure several times.

I think the machines in the same domain are assumed to have the same time.