OSX 10.7.4 and cannot access shares using AFP

[jeburnett]

I had opened a support case (NETGEAR Online Case Submission Case #18622999) about this but got rebuffed because I'm running the 4.2.21 - T4 beta.

Here's the info included in the ticket:

MacBook Pro running Lion 10.7.4 is unable to access shares via AFP. Also, Time Machine cannot use shares on this new NAS. Getting similar error messages when I try these two things:

AFP errors:
There was a problem connection to the server “nas-EA-EC-45 (AFP)”. The version of the server you are trying to connect to is not supported. Please contact your system administrator to resolve the problem.

TimeMachine errors:
There was a problem connecting to the server “nas-EA-EC-45.local”. The version of the server you are trying to connect to is not supported. Please contact your system administrator to resolve the problem.

Raidator version is: 4.2.21 - T4

[mdgm]

What about on T7?

[jeburnett]

I just tried T7 and it made no difference (good or bad).

Jonathan

[jeburnett]

Tonight I regressed T7 back to 4.2.20 and retested my MacBook's ability to access via AFP shares on the Pro 6. This is now working. I also tested Time Machine's ability to work with this NAS and it too is working for the first time.

So, both T4 and T7 seems to be the source of these problems.

Jonathan

[mdgm]

Glad it's now working for you on 4.2.20. If things are working fine on a production firmware and you don't need new features, enhancements or bug fixes found in beta firmware it's generally best to stay on production firmware, though as you have done in this case, you generally can downgrade the firmware back to production firmware if you encounter issues on beta firmware.

[DannyB]

This is a bug in 4.2.21. Here is the cause:

4.2.21 includes netatalk 2.2.3, an upgrade from 2.2.2patchlevelsomethingorother.

netatalk includes loadable user authentication modules (UAM's) as .so's.
For DHX and DHX2 authentication methods, the UAM's used to be named uams_dhx.so and uams_dhx2.so.
netatalk 2.2.3 appears to have added PAM support for these UAM's, so there are now two sets of UAM's:

uams_dhx_pam.so and uams_dhx2_pam.so
uams_dhx_passwd.so and uams_dhx2_passwd.so

Since none of them have the names the afpd.conf is trying to load, you only get basic guest auth (AFP does not consider failure to load the UAM modules as a fatal error, it just logs a wonderfully unhelpful "uam: uam not found (status=-1)" message in the log ) What this means is your guest shares will work, but any authenticated access will claim the version of the server is not new enough, which is what is happening to time machine.

If you update /etc/netatalk/afpd.conf and replace uams_dhx.so/uams_dhx2.so with uams_dhx_passwd.so/uams_dhx2_passwd.so, and restart afpd (/etc/init.d/netatalk restart), everything should start working again.

Why the netatalk folks didn't use symlinks or deprecation notices, instead of just breaking working config files, is beyond me.

[Skywalker]

Thanks for posting. This will be fixed for the 4.2.21 final release.

[BigBearf]

@Skywalker
Do You have a timeframe for 4.2.21 final release? The AFP deal is a pain.
Bigbearf

[Skywalker]

It should be out before the end of the week.

[btaroli]

Not sure how many beta builds there will be for 4.2.21. I was thinking of trying it, but I rely upon Time Machine for backups. Armed with this info I guess it wouldn't be that difficult to work around, but still.

[BigBearf]

@Skywalker
Installed 4.2.21 and no change in accessing shares. Only can log in as "Guest". Any thoughts?
bigbearf

[mdgm]

That is very odd. I can login fine on 4.2.21. Try an OS Re-install: http://www.readynas.com/kb/faq/boot/how_do_i_use_the_boot_menu

[BigBearf]

@mdgm
Will try OS reinstall and repost. I have read that there is some problem with Lion 10.7.4 due to AFP security changes. What version of Lion are you using?
bigbearf

[mdgm]

10.7.4

[BigBearf]

@mdgm
I did the OS reinstall then reverted back to .17 then .20 and then .21 versions with no luck. I checked with Google and I was pointed to the the 10.7.4 combo updater.
Here is the link:
http://support.apple.com/kb/DL1524
I applied this and magically everything worked. I guess the point update via auto update did not do what the combo update did. Hope this helps someone else.
Bigbearf