Unable to create AD mobile accounts from the command line on OS X 10.10.3
| Originator: | rtrouton | ||
| Number: | rdar://20482382 | Date Originated: | 09-Apr-2015 10:37 AM |
| Status: | Closed (Duplicate) | Resolved: | |
| Product: | OS X | Product Version: | Mac OS X 10.10.3 (14D131) |
| Classification: | Other Bug | Reproducible: | Always |
Summary:
As part of my testing with the release version of 10.10.3, I noticed that the following command was not creating an AD mobile user:
-------
sudo /System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobileaccount -n username_goes_here
-------
Instead, I was receiving an error indicating that the mobile account could not be created.
Steps to Reproduce:
1. Open Terminal
2. Run the following command with root privileges:
/System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobileaccount -n username_goes_here
Expected Results:
A new mobile account and home folder be set up on the machine for the "username_goes_here" AD account.
Actual Results:
I received an error indicating that the mobile account could not be created. Error message attached as file named "error_output.txt"
computername:~ username$ sudo /System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobileaccount -n username_goes_here
createmobileaccount built Mar 4 2015 21:45:09
2015-04-09 09:22:13.922 createmobileaccount[69912:277627] ### syncProxyWithSemaphore error:Error Domain=NSCocoaErrorDomain Code=4097 "Couldn’t communicate with a helper application." (connection to service named com.apple.systemadministration.writeconfig) UserInfo=0x7f89a9c162b0 {NSDebugDescription=connection to service named com.apple.systemadministration.writeconfig}
2015-04-09 09:22:13.982 createmobileaccount[69912:277616] MCXCCacheMCXRecordAndGraph(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_SUSPEND, &(uid=699453718), NULL) failed
2015-04-09 09:22:14.433 createmobileaccount[69912:277616] MCXCCacheMCXRecordAndGraph(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_RESUME, &(uid=699453718), NULL) failed
2015-04-09 09:22:14.542 createmobileaccount[69912:277643] ### syncProxyWithSemaphore error:Error Domain=NSCocoaErrorDomain Code=4097 "Couldn’t communicate with a helper application." (connection to service named com.apple.systemadministration.writeconfig) UserInfo=0x7f89a9d0e980 {NSDebugDescription=connection to service named com.apple.systemadministration.writeconfig}
2015-04-09 09:22:14.542 createmobileaccount[69912:277616] MCXCCreateMobileAccount(): Failed to create account. Error = -6304 (mobile account file path is either not a directory or could not be properly created). Cleaning up mobile account record.
2015-04-09 09:22:14.546 createmobileaccount[69912:277643] ### syncProxyWithSemaphore error:Error Domain=NSCocoaErrorDomain Code=4097 "Couldn’t communicate with a helper application." (connection to service named com.apple.systemadministration.writeconfig) UserInfo=0x7f89a9d5a840 {NSDebugDescription=connection to service named com.apple.systemadministration.writeconfig}
2015-04-09 09:22:14.549 createmobileaccount[69912:277616] MCXCDeleteAccount(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_SUSPEND, &(uid=699453718), NULL) failed
2015-04-09 09:22:14.550 createmobileaccount[69912:277620] ### syncProxyWithSemaphore error:Error Domain=NSCocoaErrorDomain Code=4097 "Couldn’t communicate with a helper application." (connection to service named com.apple.systemadministration.writeconfig) UserInfo=0x7f89a9c392c0 {NSDebugDescription=connection to service named com.apple.systemadministration.writeconfig}
2015-04-09 09:22:14.578 createmobileaccount[69912:277643] ### syncProxyWithSemaphore error:Error Domain=NSCocoaErrorDomain Code=4097 "Couldn’t communicate with a helper application." (connection to service named com.apple.systemadministration.writeconfig) UserInfo=0x7f89ac101990 {NSDebugDescription=connection to service named com.apple.systemadministration.writeconfig}
2015-04-09 09:22:14.578 createmobileaccount[69912:277616] MCXCDeleteAccount(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_RESUME, &(uid=699453718), NULL)failed
*** mobile account could not be created: -6304 (MCXCCreateMobileAccount(): [newUser createHomeDirectory] failed)
computername:~ username$
Regression:
Retested in a VMware VM running OS X 10.10.2 build 14C1514. Error did not occur:
------
computername:~ username$ sudo /System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobileaccount -n username_goes_here
createmobileaccount built Nov 16 2014 15:10:36
2015-04-09 10:28:29.316 createmobileaccount[968:5545] MCXCCacheMCXRecordAndGraph(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_SUSPEND, &(uid=699453718), NULL) failed
2015-04-09 10:28:29.809 createmobileaccount[968:5545] MCXCCacheMCXRecordAndGraph(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_RESUME, &(uid=699453718), NULL) failed
computername:~ username$
------
Notes:
Comments
Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!
Bug closed as Duplicate
My bug report has been closed as a duplicate of bug ID 20295898. If you want to file a bug report that dupes mine, please use the following bug ID to do so:
Bug ID 20295898
Post available with findings
I've written a post about my findings. It's available from here:
https://derflounder.wordpress.com/2015/04/09/creating-mobile-accounts-using-createmobileaccount-is-not-working-on-os-x-10-10-3/
Creating a mobile account by logging in at the OS login window works OK.
In testing against my shop's AD domain, automatic mobile account creation via the loginwindow on OS X 10.10.3 appears to work fine.
Problem not limited to AD accounts
I've now tested the process on a VM which is bound to an OpenLDAP domain, and I've replicated the same error and results.
Filed a duplicate ticket #20482694
Thanks for sharing.