| Author |
Message |
|
colesy
|
Post subject: AD Authentication no Longer Working  Posted: Mon Aug 25, 2008 3:19 pm |
|
 |
| Not quite half way |
 |
Joined: Sat Dec 17, 2005 2:29 am
Posts: 82
|
|
This year we upgraded to 10.5.4 and I made my image and everything was working fine. Just today we were not able to login to any of the macs via AD accounts.
I logged onto the Mac server and some how the AD connection had been lost completely, so I rebound it and that didn't seem to make a difference.
When I go into Directory Access on the workstations everything looks fine. I can map shares using AD credentials from the Mac.
I have tried rebooting the Mac server, and AD server, neither helped. I tried unbinding and rebinding the workstations to AD and it didn't help.
This new version of OSX doesn't have the lookupd command, and I can't figure out how to use the new command.
If you have any ideas that would be awesome.. This is terrible timing with school starting next week.
|
|
  |
|
 |
|
colesy
|
Post subject: Re: AD Authentication no Longer Working Posted: Mon Aug 25, 2008 3:48 pm |
|
|
| Not quite half way |
|
Joined: Sat Dec 17, 2005 2:29 am
Posts: 82
|
|
Just an update, when I reboot the workstation and go into Directory Access the AD connection says its not responding. If I go around and play with settings it usually comes back up.. But I am not sure why it keeps losing connection.
|
|
| |
|
|
|
Dominic
|
Post subject: Re: AD Authentication no Longer Working Posted: Mon Aug 25, 2008 9:58 pm |
|
Joined: Wed May 18, 2005 3:53 pm
Posts: 293
Location: UK
|
|
hi colesy
Is it just the server loosing its mapping or the clients as well?
dscl is the command you want to use to do lookups..
|
|
| |
|
|
|
colesy
|
Post subject: Re: AD Authentication no Longer Working Posted: Mon Aug 25, 2008 10:27 pm |
|
|
| Not quite half way |
|
Joined: Sat Dec 17, 2005 2:29 am
Posts: 82
|
It appears what is happening is the workstations are not binding correctly to the server. It shows that it has binded, and says the AD server is responding correctly, however it doesn't actually put an entry into the AD server. And it doesn't give me an error after it binds. Also you know how usually while its binding it flashes text showing exactly what its doing. Like searching for closest domain controller etc, it doesn't show any of that. I have tried adding them manually as well into AD, then binding, but that doesn't work either. Apparently there is a known bug in 10.5.4 where computers are losing connection to the AD servers, but there hasn't been a fix yet. Here is the post I am talking about.. http://discussions.apple.com/thread.jsp ... ID=7886182
|
|
| |
|
|
|
colesy
|
Post subject: Re: AD Authentication no Longer Working Posted: Tue Aug 26, 2008 1:53 pm |
|
|
| Not quite half way |
|
Joined: Sat Dec 17, 2005 2:29 am
Posts: 82
|
|
It appears the binding took over night on the ones I was messing with. For some reason it was very delayed. Not sure why.. I will try it on the rest, and test in the morning.. I will keep you posted.
Thanks
|
|
| |
|
|
|
Dominic
|
Post subject: Re: AD Authentication no Longer Working Posted: Wed Aug 27, 2008 3:02 pm |
|
Joined: Wed May 18, 2005 3:53 pm
Posts: 293
Location: UK
|
|
why is it being delayed?
Are you doing this remotely?
It should be instant....are you using a script?
I have rolled the entire school over to 10.5.4 with servers without any issues...
Used PKGImage on all the clients and server were done manually but all are bound to a AD...
Keep me posted..
Dominic
|
|
| |
|
|
|
colesy
|
Post subject: Re: AD Authentication no Longer Working Posted: Wed Aug 27, 2008 3:21 pm |
|
|
| Not quite half way |
|
Joined: Sat Dec 17, 2005 2:29 am
Posts: 82
|
|
Not sure why there is a delay. They were working fine initially. I am sitting at each system and adding the AD connection in Directory Access. Usually they would show up immediately in the AD, and I would move them to the right container, but they do not show up.
Not sure what is going on.
|
|
| |
|
|
|
Dominic
|
Post subject: Re: AD Authentication no Longer Working Posted: Fri Dec 05, 2008 9:25 pm |
|
Joined: Wed May 18, 2005 3:53 pm
Posts: 293
Location: UK
|
|
when you do a refresh on the AD do they appear or is there a delay?
|
|
| |
|
|
|
