New iMac Dou Core not Connecting to Windows 2003 File Server

[mail]

Hello All,

The first Dou Core iMac just came into our shop and we have run into a
problem with it not connecting to our 2003 Files Server, even though we
installed the lastest UAM with NTLMv2 128-bit and we have bounded the
iMac to the Active Directory Domain. The error we get is "Failed to
Connect, Error 2".

Does anyone know if 2003 Files Services for Mac is compatible with the
new Dou Cores?

Jason

 

[William Smith]

Hello All,

The first Dou Core iMac just came into our shop and we have run into a
problem with it not connecting to our 2003 Files Server, even though we
installed the lastest UAM with NTLMv2 128-bit and we have bounded the
iMac to the Active Directory Domain. The error we get is "Failed to
Connect, Error 2".

Hi Jason!

A few questions for you:

Since you have installed the latest UAM do you then have File Services
for Macintosh installed and running on the Windows server?

On the Mac, how are you connecting to the server? Are you using
something like "smb://servername" instead of "afp://servername"? If so,
then you're not using File Services for Macintosh and the UAM won't come
into play. However, with this being a Windows 2003 server you may need
to have your administrator disable digitally signed communications. Have
a look at this article on Microsoft's website.
<http://support.microsoft.com/default.aspx?scid=kb;en-us;887429> I
doesn't specifically mention Mac OS X, but it applies and directs you to
what you need to disable on your server.

Do you have any other Mac OS X systems connecting to your server?

Hope this helps! bill

 

[mail]

William,

Thanks for your response. All our other Macs connect fine to the File
Server we have about 150 OS X systems that have been using our file
server for 2 years, so this is why I am wondering if there is a problem
with just the Dou cores. We do connect with afp and not smb. We do
have File Services for Mac installed on the Windows 2003 server.

Jason

 

[William Smith]

William,

Thanks for your response. All our other Macs connect fine to the File
Server we have about 150 OS X systems that have been using our file
server for 2 years, so this is why I am wondering if there is a problem
with just the Dou cores. We do connect with afp and not smb. We do
have File Services for Mac installed on the Windows 2003 server.

I've yet to see an Intel Mac myself to help you verify your theory. Do
you have a second Windows machine set up similarly to test against?

bill

 

[mail]

Sure, we have both PC and G5/G4 Macs that all connect to the fileserver
fine. And on the new iMac I logged on with my own domain account and
could not connect to the fileserver.

Jason

 

[William Smith]

Sure, we have both PC and G5/G4 Macs that all connect to the fileserver
fine. And on the new iMac I logged on with my own domain account and
could not connect to the fileserver.

Hi Jason!

Sorry, I may have not have been clear in my last post. Do you have
another Windows server to test the Intel Mac with? I'd be very curious
to know if this is consistent.

Thanx! bill

 

[mail]

William, this is the error message found in the console.log when
verbose debugging is on:

2006-02-13 14:53:21.148 afp_mount[483] CFLog (21): dyld returns 2 when
trying to load
/Library/Filesystems/AppleShare/Authentication/MicrosoftUAM.uamx/Contents/PlugIns/CarbonUAM.bundle/Contents/MacOS/CarbonUAM

I do not have another files server to test on. By the way I have no
trouble connecting to an MS Shared folder on a desktop machine using
smb. It is only an issue if you want to use the UAM for higher level of
encryption.

Jason

 

[mail]

William, this is the error message found in the console.log when
verbose debugging is on:

2006-02-13 14:53:21.148 afp_mount[483] CFLog (21): dyld returns 2 when
trying to load
/Library/Filesystems/AppleShare/Authentication/MicrosoftUAM.uamx/Contents/PlugIns/CarbonUAM.bundle/Contents/MacOS/CarbonUAM

I do not have another files server to test on. By the way I have no
trouble connecting to an MS Shared folder on a desktop machine using
smb. It is only an issue if you want to use the UAM for higher level of
encryption.

Jason

 

[William Smith]

William, this is the error message found in the console.log when
verbose debugging is on:

2006-02-13 14:53:21.148 afp_mount[483] CFLog (21): dyld returns 2 when
trying to load
/Library/Filesystems/AppleShare/Authentication/MicrosoftUAM.uamx/Contents/Plug
Ins/CarbonUAM.bundle/Contents/MacOS/CarbonUAM

I do not have another files server to test on. By the way I have no
trouble connecting to an MS Shared folder on a desktop machine using
smb. It is only an issue if you want to use the UAM for higher level of
encryption.

Hi Jason!

Here's a thought.

It may not be that the Intel Mac itself is having issues but rather the
Microsoft UAM. After all, it is not only an older piece of software
(last updated to work with 10.1) but also was developed in a PPC
environment. I know you'd like the better encryption but in this case
the UAM may be getting in the way.

It is possible to set your server to allow both Microsoft and clear text
connections, which means you could continue to use the UAM on all the
PPC Macs.

bill

 

[mail]

William,

It is definately the UAM software. I talked to an Apple system engineer
assinged to our campus and had not heard about anyone connecting yet. I
talked to Microsoft. They say they have no official information on
compatibility. On Macwindows.com I am the second person to report a
problem with the UAM not working. I am weighing the security risk of
using SMB. I just wish Microsoft would release a Universal Binary of
the UAM. It would solve all my problems.

Jasonn

 

[William Smith]

William,

It is definately the UAM software. I talked to an Apple system engineer
assinged to our campus and had not heard about anyone connecting yet. I
talked to Microsoft. They say they have no official information on
compatibility. On Macwindows.com I am the second person to report a
problem with the UAM not working. I am weighing the security risk of
using SMB. I just wish Microsoft would release a Universal Binary of
the UAM. It would solve all my problems.

Hi Jason!

Glad to hear you've determined your problem.

Keep in mind that the only security features the UAM provides are
encrypted password authentication and longer passwords. Nothing else
(such as file traffic) is encrypted or secured in any way.

If this is a priority for you then I suggest looking into installing
Group Logic's ExtremeZ-IP AFP server. It will allow your Macs to log in
with secured passwords. Additionally, it offers long file name support,
AD integration for single sign-on and supports Windows ACLs.

I wouldn't hold my breath for an update to the UAM. It hasn't been
updated since the early days of Mac OS X and Windows Server support
hasn't been updated since the days of Mac OS 8 and 9. Microsoft is
focusing its attention on its Longhorn/Vista server development but
after two full Windows Server releases without an upgrade for Mac
support, what you're asking for looks bleak.

bill