Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In Mac OS Server 10.6, when I select a user account, uncheck the "access account" checkbox, and click Save, I get this error message:

Error of type eDSAuthFailed (-14090) on line 3912 of /SourceCache/WorkgroupManager/WorkgroupManager-361.3.1/Plugins/UserAccounts/

It happen for all user accounts I've tried. I'm able to make changes to other attributes (e.g., passwords); I just can't disable accounts.

Any ideas about how to fix this, or to work around it in order to disable user accounts?

Already Tried

  • changeip -checkhostname says "The names match. There is nothing to change."
share|improve this question
up vote 1 down vote accepted

In Workgroup Manager, there are two levels of authentication: first there's the "Workgroup Manager Connect" dialog, then there's the authentication bar just below the main window's toolbar. For the second authentication, I was diradmin, which was failing. I deleted my Keychain entry for that, restarted Workgroup Manager, then, for the second authentication, authenticated as root. Root was able to successfully disable the user account.

This is strange, because diradmin has the "administer this server" permission, which I would have thought would include permission to disable users.

share|improve this answer

If you want to understand what's happening : will help you understanding what's happening by checking more detailed directory services logs.

First steps would be to unbind / rebind clients if you remote the server access from Workgroup Manager on a client.

If you just want to resolve this :

Open Directory issues are really annoying to resolve, can be related a thousand of things. If your network schema is not too interlinked to third party systems, I would advise you to backup your users/groups/computer.

/Utilities/Workgroup Manager, Export (Password are not saved) Then you set the OD as standalone, and master again, it will recreate the LDAP and Kerberos /Utilities/Workgroup Manager, Import (You have to set new password for users).

note : Promoting a OD to Master then reimporting user account won't reset your collaborative services data such as wiki, web, PosGres, address book, calendars... etc

You can -otherwise- archive the OD(password remain intact for accounts), then restore, but it is probable that you restore the issue in the meantime.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.