OSXServer: troubleshooting of slow login and other issues

This is a rough summary of personal experience and online search,

Environment: Mac server + Mac Client, which can be an authentication Network architecture integrated with AD. In particular, the user configuration is Network Home folder, and the Environment is configured for local/mobile users, the login process may also be affected by the customer/client/server configuration/connection, but it is generally included in the following steps.

In two cases, one is that only one person is slow, and the other is that all users are slow.

The first case should be related to the user's environment, and it is generally not urgent. The second case is what we are going to face here, which is also tricky and even more urgent. It is also the most difficult to get started. In many cases, we may need to cooperate with other departments, for example, the Network department, the AD administrator, and the Manager.

Client:

Clean the waste paper basket. Do not put too many things (dozens of GB files) on the desktop to view network configurations, view Hardware/system configurations (mainly free memory and hard disk), and view logs, user and System error messages (Console) Disable IPv6 (networksetup-setv6off) from deleting search domain (System Preferences-> Network-Advanced-> DNS) (scutil -- dns) login/Logout Hooks disables spotlight from operating DNS for any network sharing (dscacheutil-q host-a name fqdn. of. your. server) Check that Kerberos (kinit) is correctly configured based on two user configuration options: HomeDirectory and NFSHomeDirectory.

Server

Restrictions on the Restart AFP service AFP: the maximum number of user connections is generally between 150. If the limit is exceeded, there may be problems, especially before 10.6. server Memory/disk capacity/free resources (CPU/disk/network) Disable spotlight (mdutil-d/) to check user/computer configurations, in particular, when a user logs on to the shared (Workgroup Manager) configuration MCX/Profiles, it is essential to check whether the user's caches/logs folder is incorrectly redirected to the local, if the network home folder backup time is at night... Sort out Disk (http://www.coriolis-systems.com/iDefrag.php) if it is an AD authentication problem, then you should increase the AD server and assign users to different server authentication. Debugging of OD/AD authentication, odutil set log debug | odutil set log default

  (dirt -u username -n）（dirt -m "/Active Directory/All Domains" -u activedirectoryusername -p activedirectorypassword)

Network:

Connection type (auto, 1000, duplex) network cable quality DNS settings (both the server and client can be correctly resolved) (forward/revers DNS) Sometimes this tcpdump-I en0 host ip_address_of_host may be required
Iperf command to view IP (http://jesterpm.net/downloads)

Tool/command:

ARD, SSH, mdutil, scutil, ifconfig, networksetup, systemsetup, Workgroup Manager, Server Admin, Server. app, kinit, sysdiagnose

Docs/Refs:

Mac OS X Server v10.5, 10.6: Enabling Directory Service debug logging: http://support.apple.com/kb/ht3186OS X Server: Changing opendirectoryd logging levels: Too large Network Home Folder Redirector: http://web.archive.org/web/20110825115813/MCX Redirector: http: // www. afp5 48.com/article.php? Story = MCXRedirectorDuplex mismatch: http://en.wikipedia.org/wiki/Duplex_mismatchHow and Why to Defragment Your Mac's Hard Drive: http://www.macobserver.com/tmo/answers/how-and-why-to-defragment-your-macs-hard-drive