Anonymous_User Absent Member.
Absent Member.
1263 views

AFP Login Problem

Hi,

i have a problem with my Mac Users and NFAP on a NW6sp2 Cluster and
afp101q. I can setup them up without a problem, but after a while (1
or
2 days) they can not login to server. I give them a new password and sometimes it works then again. With nmaslog i get these entries for a

failed login:

1: Create NMAS Session
1: RemoteCheckIfLocalUser checking USER.CONTEXT.
1: ERROR: -601 RemoteCheckIfLocalUser failed.
1: NCPCheckIfLocalUser failed -601
1: Client Session Destroy Request
1: Destroy NMAS Session
1: Aborted Session Destroyed (with MAF)

Because they can also not change the password i was thinking that this

is a NICI Problem, but there is no error message that confirm that.

Right now i set them up with the cleartext option where i have no
problems.

Reinhard




Labels (1)
0 Likes
9 Replies
Anonymous_User Absent Member.
Absent Member.

Re: AFP Login Problem

Does the server in question have a local replica? Are the other
servers
in the tree at the same DS (eDir) and NICI revision? When I get a
moment
I'll look up the error and see if I have anything else in my notes.

Jeff


Reinhard Wittmann wrote:
> Hi,
>
> i have a problem with my Mac Users and NFAP on a NW6sp2 Cluster and


> afp101q. I can setup them up without a problem, but after a while (1

or
> 2 days) they can not login to server. I give them a new password and


> sometimes it works then again. With nmaslog i get these entries for

a
> failed login:
>
> 1: Create NMAS Session
> 1: RemoteCheckIfLocalUser checking USER.CONTEXT.
> 1: ERROR: -601 RemoteCheckIfLocalUser failed.
> 1: NCPCheckIfLocalUser failed -601
> 1: Client Session Destroy Request
> 1: Destroy NMAS Session
> 1: Aborted Session Destroyed (with MAF)
>
> Because they can also not change the password i was thinking that

this
> is a NICI Problem, but there is no error message that confirm that.>
> Right now i set them up with the cleartext option where i have no

problems.
>
> Reinhard
>





0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: AFP Login Problem

You have added the LOG parameter to AFPTCP.NLM?

add it, do a AFPSTOP and a AFPSTRT, see into sys:\system\AFPTCP.LOG

-jl

"Reinhard Wittmann" <r_wittmann@web.de> escribió en el mensaje
news:3E662498.7070103@web.de...
> Hi,
>
> i have a problem with my Mac Users and NFAP on a NW6sp2 Cluster and> afp101q. I can setup them up without a problem, but after a while (1

or
> 2 days) they can not login to server. I give them a new password and


> sometimes it works then again. With nmaslog i get these entries for

a
> failed login:
>
> 1: Create NMAS Session
> 1: RemoteCheckIfLocalUser checking USER.CONTEXT.
> 1: ERROR: -601 RemoteCheckIfLocalUser failed.
> 1: NCPCheckIfLocalUser failed -601
> 1: Client Session Destroy Request
> 1: Destroy NMAS Session
> 1: Aborted Session Destroyed (with MAF)
>
> Because they can also not change the password i was thinking that

this
> is a NICI Problem, but there is no error message that confirm that.>
> Right now i set them up with the cleartext option where i have no

problems.
>
> Reinhard
>






0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: AFP Login Problem

Since he is running the "q" version, you can simply issue a "afplog
on" or
"afplog off" at the console without the need of a unload/load.

Jeff


"Juliusoloc" <jlocatell@datamarkets.com.ar> wrote in message
news:W%q9a.9928$j15.982@prv-forum2.provo.novell.com...
> You have added the LOG parameter to AFPTCP.NLM?
>
> add it, do a AFPSTOP and a AFPSTRT, see into sys:\system\AFPTCP.LOG>
> -jl
>
> "Reinhard Wittmann" <r_wittmann@web.de> escribió en el mensaje
> news:3E662498.7070103@web.de...
> > Hi,
> >
> > i have a problem with my Mac Users and NFAP on a NW6sp2 Cluster

and
> > afp101q. I can setup them up without a problem, but after a while

(1 or
> > 2 days) they can not login to server. I give them a new password

and
> > sometimes it works then again. With nmaslog i get these entries

for a
> > failed login:
> >
> > 1: Create NMAS Session
> > 1: RemoteCheckIfLocalUser checking USER.CONTEXT.
> > 1: ERROR: -601 RemoteCheckIfLocalUser failed.
> > 1: NCPCheckIfLocalUser failed -601
> > 1: Client Session Destroy Request
> > 1: Destroy NMAS Session
> > 1: Aborted Session Destroyed (with MAF)
> >
> > Because they can also not change the password i was thinking that

this
> > is a NICI Problem, but there is no error message that confirm

that.
> >
> > Right now i set them up with the cleartext option where i have no> problems.
> >
> > Reinhard
> >

>
>






0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: AFP Login Problem

Try afplic2.exe
--
Andrew C Taubman
Novell Support Connection Volunteer SysOp
http://support.novell.com/forums
(Sorry, support is not provided via e-mail)

OneNet is better than nothing.NET

Opinions expressed in the above text are not
necessarily those of Novell Inc.





0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: AFP Login Problem

I don't think that this will help me because we have a MLA license.

Reinhard

Andrew C Taubman wrote:
> Try afplic2.exe
> --
> Andrew C Taubman
> Novell Support Connection Volunteer SysOp
> http://support.novell.com/forums
> (Sorry, support is not provided via e-mail)
>
> OneNet is better than nothing.NET
>
> Opinions expressed in the above text are not
> necessarily those of Novell Inc.
>
>





0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: AFP Login Problem


Yes, the Server has a local replica. We runnig currectly DS Version
10320.29, 10320.04 and 8.82 with NICI 2.0.1 in the tree. The upgrade
to edir
8.7 on all Server is planned this month.

Reinhard

Jeffrey Sessler wrote:
> Does the server in question have a local replica? Are the other

servers
> in the tree at the same DS (eDir) and NICI revision? When I get a

moment
> I'll look up the error and see if I have anything else in my notes.>
> Jeff
>
>
> Reinhard Wittmann wrote:
> > Hi,
> >
> > i have a problem with my Mac Users and NFAP on a NW6sp2 Cluster

and
> > afp101q. I can setup them up without a problem, but after a while

(1 or
> > 2 days) they can not login to server. I give them a new password

and
> > sometimes it works then again. With nmaslog i get these entries

for a
> > failed login:
> >
> > 1: Create NMAS Session
> > 1: RemoteCheckIfLocalUser checking USER.CONTEXT.
> > 1: ERROR: -601 RemoteCheckIfLocalUser failed.
> > 1: NCPCheckIfLocalUser failed -601
> > 1: Client Session Destroy Request
> > 1: Destroy NMAS Session
> > 1: Aborted Session Destroyed (with MAF)
> >
> > Because they can also not change the password i was thinking that

this
> > is a NICI Problem, but there is no error message that confirm

that.
> >
> > Right now i set them up with the cleartext option where i have noproblems.
> >
> > Reinhard
> >

>






0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: AFP Login Problem

I will try that and post the results when i get the error again.

Reinhard

Jeffrey D Sessler wrote:
> Since he is running the "q" version, you can simply issue a "afplog

on" or
> "afplog off" at the console without the need of a unload/load.
>
> Jeff
>
>
> "Juliusoloc" <jlocatell@datamarkets.com.ar> wrote in message
> news:W%q9a.9928$j15.982@prv-forum2.provo.novell.com...
>
>>You have added the LOG parameter to AFPTCP.NLM?
>>
>>add it, do a AFPSTOP and a AFPSTRT, see into sys:\system\AFPTCP.LOG>>
>>-jl
>>
>>"Reinhard Wittmann" <r_wittmann@web.de> escribió en el mensaje
>>news:3E662498.7070103@web.de...
>>
>>>Hi,
>>>
>>>i have a problem with my Mac Users and NFAP on a NW6sp2 Cluster and


>>>afp101q. I can setup them up without a problem, but after a while

(1 or
>>>2 days) they can not login to server. I give them a new password

and
>>>sometimes it works then again. With nmaslog i get these entries for

a
>>>failed login:
>>>
>>> 1: Create NMAS Session
>>> 1: RemoteCheckIfLocalUser checking USER.CONTEXT.
>>> 1: ERROR: -601 RemoteCheckIfLocalUser failed.
>>> 1: NCPCheckIfLocalUser failed -601
>>> 1: Client Session Destroy Request
>>> 1: Destroy NMAS Session
>>> 1: Aborted Session Destroyed (with MAF)
>>>
>>>Because they can also not change the password i was thinking that

this
>>>is a NICI Problem, but there is no error message that confirm that.


>>>
>>>Right now i set them up with the cleartext option where i have no

>>
>>problems.
>>
>>>Reinhard
>>>

>>
>>

>
>





0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: AFP Login Problem

I looked at my notes again and while I've yet to find anything related
to
your log, re-reading your message reminded me of a similar problem we
had
about a year ago. Went something like this.

1) all servers had local replica and same DS/NICI version.
2) AFP users were aok and, like you, after a few days, they could not
log
in.
3) If I left the server alone, about 10 hours later, the users could
connect
again

What we found:
1) looking at the winsock 2.0/Diags & debug in Netware remote Manager,
we
discovered what appeared to be a DS communication problem .On the
problem
server, it would have a connection error listed for a random server
(that
was in the replica ring).
2) clearing the bad connection via. the diag & debug with immediatelyrestored the Mac user's ability to login.
3) Per the DS developers, there is some astronomically high timeout
for DS
connections. This is why the AFP logins would start working again
after a
while.
4) Why AFPTCP and more likely NMAS cared about another server is
unknown but
it did.

Solution:
We upgraded all the servers to eDir 8.6 (from 8.5) and installed NICI
2.01
or maybe it 2.40 (i'm at 2.40 now). Problem solved and we've not seen
the
problem again.

So, I'd get DS and NICI upgraded soon. You may also want to check theWinsock debug for the errors I mentioned. There is also an updated TCP
stack
for NW6 that may help but, I think the problem may be DS related.
Maybe
check to see that your NIC drivers are also up-to-date.

Jeff


"Reinhard Wittmann" <r_wittmann@web.de> wrote in message
news:3E662498.7070103@web.de...
> Hi,
>
> i have a problem with my Mac Users and NFAP on a NW6sp2 Cluster and> afp101q. I can setup them up without a problem, but after a while (1

or
> 2 days) they can not login to server. I give them a new password and


> sometimes it works then again. With nmaslog i get these entries for

a
> failed login:
>
> 1: Create NMAS Session
> 1: RemoteCheckIfLocalUser checking USER.CONTEXT.
> 1: ERROR: -601 RemoteCheckIfLocalUser failed.
> 1: NCPCheckIfLocalUser failed -601
> 1: Client Session Destroy Request
> 1: Destroy NMAS Session
> 1: Aborted Session Destroyed (with MAF)
>
> Because they can also not change the password i was thinking that

this
> is a NICI Problem, but there is no error message that confirm that.>
> Right now i set them up with the cleartext option where i have no

problems.
>
> Reinhard
>






0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: AFP Login Problem

It couldn't hurt as there was an issue where only 5 or 6 users were
allowed
to login, the rest were refused.

--
Timothy A. Leerhoff
Principal Consultant
Independent Experts
Novell Support Forum Sysop





0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.