- This topic has 2 replies, 1 voice, and was last updated 20 years, 8 months ago by
.
Viewing 3 posts - 1 through 3 (of 3 total)
-
Posts
-
So here’s the deal. We are in the process of moving machines to authenticate to an AD domain and we’re having trouble with the Macs. Our group does not control the domain, but we do control our OU.
Anyway, when we try to join our macs Directory Access gets to “Step 5 of 5” and hangs for about 20 mins. So I switched to debug mode (log below). Seems to me that it’s failing trying to change the machine account password and freaking. Any suggestions?
Also would this be related to the ““Microsoft network server: Digitally sign communications (always)” and “Microsoft network server: Digitally sign communications (if client agrees)” Policy settings? This seems likely to me, but I’d like a second opinion.
Thanks in advance!
2006-02-28 09:32:51 EST - ADPlugin: Initialize Called 2006-02-28 09:32:51 EST - ADPlugin: Initialize Returned 2006-02-28 09:32:51 EST - ADPlugin: State Changed Called 4 2006-02-28 09:32:51 EST - ADPlugin: Received ServerRunLoop Mutex 2006-02-28 09:32:51 EST - ADPlugin: Received Kerberos Mutex 2006-02-28 09:32:51 EST - ADPlugin: State Changed Called 1 2006-02-28 09:32:51 EST - ADPlugin: State Changed Called 1 2006-02-28 09:32:51 EST - ADPlugin: Calling OpenDirNode 2006-02-28 09:32:51 EST - ADPlugin: Calling CustomCall 2006-02-28 09:32:51 EST - ADPlugin: Calling CustomCall 2006-02-28 09:32:51 EST - ADPlugin: Calling CloseDirNode 2006-02-28 09:33:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:33:14 EST - ADPlugin: Calling OpenDirNode 2006-02-28 09:33:14 EST - ADPlugin: Calling CustomCall 2006-02-28 09:33:14 EST - ADPlugin: Doing CheckServerRecords...... 2006-02-28 09:33:14 EST - ADPlugin: central.purdue.lcl - Start checking servers for site "any" 2006-02-28 09:33:14 EST - ADPlugin: Total Servers "any" LDAP - 4, Kerberos - 4, kPasswd - 4 2006-02-28 09:33:15 EST - ADPlugin: Server #1 picked - "1061cendc03.central.purdue.lcl" 2006-02-28 09:33:15 EST - ADPlugin: Server #2 picked - "1061cendc04.central.purdue.lcl" 2006-02-28 09:33:15 EST - ADPlugin: Got rootDSE for server 1061cendc04.central.purdue.lcl to determine forest 2006-02-28 09:33:15 EST - ADPlugin: Determined Forest of purdue.lcl from Domain Controller 1061cendc04.central.purdue.lcl 2006-02-28 09:33:15 EST - ADPlugin: Found Default Domain central.purdue.lcl 2006-02-28 09:33:15 EST - ADPlugin: Global Catalogs - Start checking servers for site "any" 2006-02-28 09:33:15 EST - ADPlugin: Total Servers "any" LDAP - 6, Kerberos - 2, kPasswd - 2 2006-02-28 09:33:15 EST - ADPlugin: Server #1 picked - "1061rtdc01.purdue.lcl" 2006-02-28 09:33:15 EST - ADPlugin: Server #2 picked - "1061cendc02.central.purdue.lcl" 2006-02-28 09:33:15 EST - ADPlugin: Found Forest Domain GC purdue.lcl 2006-02-28 09:33:15 EST - ADPlugin: purdue.lcl - Start checking servers for site "any" 2006-02-28 09:33:15 EST - ADPlugin: Total Servers "any" LDAP - 2, Kerberos - 2, kPasswd - 2 2006-02-28 09:33:15 EST - ADPlugin: Server #1 picked - "1061rtdc02.purdue.lcl" 2006-02-28 09:33:16 EST - ADPlugin: Server #2 picked - "1061rtdc01.purdue.lcl" 2006-02-28 09:33:16 EST - ADPlugin: Found Forest Domain purdue.lcl 2006-02-28 09:33:16 EST - ADPlugin: Something wrong, unable to determine domain information from Config container...... 2006-02-28 09:33:16 EST - ADPlugin: Finished CheckServerRecords...... 2006-02-28 09:33:16 EST - ADPlugin: Created KerberosClient record Generation ID 162829996 2006-02-28 09:33:16 EST - ADPlugin: Rebuilt Kerberos File 2006-02-28 09:33:16 EST - ADPlugin: Calling CloseDirNode 2006-02-28 09:33:16 EST - ADPlugin: Calling OpenDirNode 2006-02-28 09:33:16 EST - ADPlugin: Calling CustomCall 2006-02-28 09:33:16 EST - ADPlugin: Doing CheckServerRecords...... 2006-02-28 09:33:16 EST - ADPlugin: Failed getting credentials at line 2687 in ADSEngine.mm 2006-02-28 09:33:16 EST - ADPlugin: central.purdue.lcl - Start checking servers for site "any" 2006-02-28 09:33:16 EST - ADPlugin: Total Servers "any" LDAP - 4, Kerberos - 4, kPasswd - 4 2006-02-28 09:33:16 EST - ADPlugin: Server #1 picked - "1061cendc04.central.purdue.lcl" 2006-02-28 09:33:16 EST - ADPlugin: Server #2 picked - "1061cendc01.central.purdue.lcl" 2006-02-28 09:33:16 EST - ADPlugin: Got rootDSE for server 1061cendc01.central.purdue.lcl to determine forest 2006-02-28 09:33:16 EST - ADPlugin: Determined Forest of purdue.lcl from Domain Controller 1061cendc01.central.purdue.lcl 2006-02-28 09:33:16 EST - ADPlugin: Found Default Domain central.purdue.lcl 2006-02-28 09:33:16 EST - ADPlugin: Global Catalogs - Start checking servers for site "any" 2006-02-28 09:33:16 EST - ADPlugin: Total Servers "any" LDAP - 6, Kerberos - 2, kPasswd - 2 2006-02-28 09:33:16 EST - ADPlugin: Server #1 picked - "1061rtdc01.purdue.lcl" 2006-02-28 09:33:17 EST - ADPlugin: Server #2 picked - "1061cendc02.central.purdue.lcl" 2006-02-28 09:33:17 EST - ADPlugin: Found Forest Domain GC purdue.lcl 2006-02-28 09:33:17 EST - ADPlugin: purdue.lcl - Start checking servers for site "any" 2006-02-28 09:33:17 EST - ADPlugin: Total Servers "any" LDAP - 2, Kerberos - 2, kPasswd - 2 2006-02-28 09:33:17 EST - ADPlugin: Server #1 picked - "1061rtdc01.purdue.lcl" 2006-02-28 09:33:17 EST - ADPlugin: Server #2 picked - "1061rtdc02.purdue.lcl" 2006-02-28 09:33:17 EST - ADPlugin: Found Forest Domain purdue.lcl 2006-02-28 09:33:17 EST - ADPlugin: Failed getting credentials at line 2687 in ADSEngine.mm 2006-02-28 09:33:17 EST - ADPlugin: Finished CheckServerRecords...... 2006-02-28 09:33:17 EST - ADPlugin: Created KerberosClient record Generation ID 162829997 2006-02-28 09:33:17 EST - ADPlugin: Rebuilt Kerberos File 2006-02-28 09:33:17 EST - ADPlugin: Closing All Connections - Connection Manager 2006-02-28 09:33:17 EST - ADPlugin: Closing All Connections - Connection Manager Completed 2006-02-28 09:33:17 EST - ADPlugin: Calling CloseDirNode 2006-02-28 09:33:17 EST - ADPlugin: Calling OpenDirNode 2006-02-28 09:33:17 EST - ADPlugin: Calling CustomCall 2006-02-28 09:33:17 EST - ADPlugin: Verify called for hunter@CENTRAL.PURDUE.LCL 2006-02-28 09:33:17 EST - ADPlugin: Calling CloseDirNode 2006-02-28 09:33:25 EST - ADPlugin: Calling OpenDirNode 2006-02-28 09:33:25 EST - ADPlugin: Calling CustomCall 2006-02-28 09:33:25 EST - ADPlugin: Doing CheckServerRecords...... 2006-02-28 09:33:25 EST - ADPlugin: central.purdue.lcl - Start checking servers for site "any" 2006-02-28 09:33:25 EST - ADPlugin: Total Servers "any" LDAP - 4, Kerberos - 4, kPasswd - 4 2006-02-28 09:33:25 EST - ADPlugin: Server #1 picked - "1061cendc01.central.purdue.lcl" 2006-02-28 09:33:25 EST - ADPlugin: Server #2 picked - "1061cendc02.central.purdue.lcl" 2006-02-28 09:33:25 EST - ADPlugin: Got rootDSE for server 1061cendc02.central.purdue.lcl to determine forest 2006-02-28 09:33:25 EST - ADPlugin: Determined Forest of purdue.lcl from Domain Controller 1061cendc02.central.purdue.lcl 2006-02-28 09:33:25 EST - ADPlugin: Found Default Domain central.purdue.lcl 2006-02-28 09:33:25 EST - ADPlugin: Global Catalogs - Start checking servers for site "any" 2006-02-28 09:33:25 EST - ADPlugin: Total Servers "any" LDAP - 6, Kerberos - 2, kPasswd - 2 2006-02-28 09:33:26 EST - ADPlugin: Server #1 picked - "1061cendc02.central.purdue.lcl" 2006-02-28 09:33:26 EST - ADPlugin: Server #2 picked - "1061rtdc02.purdue.lcl" 2006-02-28 09:33:26 EST - ADPlugin: Found Forest Domain GC purdue.lcl 2006-02-28 09:33:26 EST - ADPlugin: purdue.lcl - Start checking servers for site "any" 2006-02-28 09:33:26 EST - ADPlugin: Total Servers "any" LDAP - 2, Kerberos - 2, kPasswd - 2 2006-02-28 09:33:26 EST - ADPlugin: Server #1 picked - "1061rtdc02.purdue.lcl" 2006-02-28 09:33:26 EST - ADPlugin: Server #2 picked - "1061rtdc01.purdue.lcl" 2006-02-28 09:33:26 EST - ADPlugin: Found Forest Domain purdue.lcl 2006-02-28 09:33:26 EST - ADPlugin: Finished CheckServerRecords...... 2006-02-28 09:33:26 EST - ADPlugin: Created KerberosClient record Generation ID 162830006 2006-02-28 09:33:26 EST - ADPlugin: Rebuilt Kerberos File 2006-02-28 09:33:26 EST - ADPlugin: Calling CloseDirNode 2006-02-28 09:33:26 EST - ADPlugin: Calling OpenDirNode 2006-02-28 09:33:26 EST - ADPlugin: Calling CustomCall 2006-02-28 09:33:26 EST - ADPlugin: Doing CheckServerRecords...... 2006-02-28 09:33:26 EST - ADPlugin: Good credentials for hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:33:26 EST - ADPlugin: No existing connection in connection mgr for hunters@CENTRAL.PURDUE.LCL@central.purdue.lcl:389 2006-02-28 09:33:27 EST - ADPlugin: Secure BIND Session with server 1061cendc01.central.purdue.lcl:389 2006-02-28 09:33:27 EST - ADPlugin: Read Context information from server for configurationNamingContext of CN=Configuration,DC=purdue,DC=lcl 2006-02-28 09:33:27 EST - ADPlugin: Processing Site Search with found IP 2006-02-28 09:33:27 EST - ADPlugin: Returning connection to pool for domain central.purdue.lcl with dsStatus 0. 2006-02-28 09:33:27 EST - ADPlugin: central.purdue.lcl - Start checking servers for site "any" 2006-02-28 09:33:27 EST - ADPlugin: Total Servers "any" LDAP - 4, Kerberos - 4, kPasswd - 4 2006-02-28 09:33:27 EST - ADPlugin: Server #1 picked - "1061cendc02.central.purdue.lcl" 2006-02-28 09:33:27 EST - ADPlugin: Server #2 picked - "1061cendc03.central.purdue.lcl" 2006-02-28 09:33:27 EST - ADPlugin: Got rootDSE for server 1061cendc03.central.purdue.lcl to determine forest 2006-02-28 09:33:27 EST - ADPlugin: Determined Forest of purdue.lcl from Domain Controller 1061cendc03.central.purdue.lcl 2006-02-28 09:33:27 EST - ADPlugin: Found Default Domain central.purdue.lcl 2006-02-28 09:33:27 EST - ADPlugin: Global Catalogs - Start checking servers for site "any" 2006-02-28 09:33:27 EST - ADPlugin: Total Servers "any" LDAP - 6, Kerberos - 2, kPasswd - 2 2006-02-28 09:33:27 EST - ADPlugin: Server #1 picked - "1061rtdc02.purdue.lcl" 2006-02-28 09:33:27 EST - ADPlugin: Server #2 picked - "1061cendc01.central.purdue.lcl" 2006-02-28 09:33:27 EST - ADPlugin: Found Forest Domain GC purdue.lcl 2006-02-28 09:33:27 EST - ADPlugin: purdue.lcl - Start checking servers for site "any" 2006-02-28 09:33:27 EST - ADPlugin: Total Servers "any" LDAP - 2, Kerberos - 2, kPasswd - 2 2006-02-28 09:33:27 EST - ADPlugin: Server #1 picked - "1061rtdc01.purdue.lcl" 2006-02-28 09:33:27 EST - ADPlugin: Server #2 picked - "1061rtdc02.purdue.lcl" 2006-02-28 09:33:27 EST - ADPlugin: Found Forest Domain purdue.lcl 2006-02-28 09:33:27 EST - ADPlugin: Good credentials for hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:33:27 EST - ADPlugin: Retrieved existing connection from connection mgr hunters@CENTRAL.PURDUE.LCL@central.purdue.lcl:389 2006-02-28 09:33:27 EST - ADPlugin: Read Context information from server for configurationNamingContext of CN=Configuration,DC=purdue,DC=lcl 2006-02-28 09:33:27 EST - ADPlugin: Returning connection to pool for domain central.purdue.lcl with dsStatus 0. 2006-02-28 09:33:27 EST - ADPlugin: Finished CheckServerRecords...... 2006-02-28 09:33:27 EST - ADPlugin: Created KerberosClient record Generation ID 162830007 2006-02-28 09:33:27 EST - ADPlugin: Rebuilt Kerberos File 2006-02-28 09:33:27 EST - ADPlugin: Closing All Connections - Connection Manager 2006-02-28 09:33:27 EST - ADPlugin: Closing Connection - hunters@CENTRAL.PURDUE.LCL@central.purdue.lcl:389 2006-02-28 09:33:27 EST - ADPlugin: Closing All Connections - Connection Manager Completed 2006-02-28 09:33:27 EST - ADPlugin: Calling CloseDirNode 2006-02-28 09:33:27 EST - ADPlugin: Calling OpenDirNode 2006-02-28 09:33:27 EST - ADPlugin: Calling CustomCall 2006-02-28 09:33:27 EST - ADPlugin: Verify called for hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:33:27 EST - ADPlugin: Verify successful for hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:33:27 EST - ADPlugin: Calling CloseDirNode 2006-02-28 09:33:27 EST - ADPlugin: Calling OpenDirNode 2006-02-28 09:33:27 EST - ADPlugin: Calling CustomCall 2006-02-28 09:33:27 EST - ADPlugin: Good credentials for hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:33:27 EST - ADPlugin: No existing connection in connection mgr for hunters@CENTRAL.PURDUE.LCL@central.purdue.lcl:389 2006-02-28 09:33:28 EST - ADPlugin: Secure BIND Session with server 1061cendc02.central.purdue.lcl:389 2006-02-28 09:33:28 EST - ADPlugin: Read Context information from server for schemaNamingContext of CN=Schema,CN=Configuration,DC=purdue,DC=lcl 2006-02-28 09:33:29 EST - ADPlugin: Returning connection to pool for domain central.purdue.lcl with dsStatus 0. 2006-02-28 09:33:29 EST - ADPlugin: Updating Mappings from Schema.......... 2006-02-28 09:33:29 EST - ADPlugin: Doing Computer search for Ethernet address - 00:16:cb:85:c1:c3 2006-02-28 09:33:29 EST - ADPlugin: Doing DN search for account - 1392-MacIntel 2006-02-28 09:33:29 EST - ADPlugin: Good credentials for hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:33:29 EST - ADPlugin: Retrieved existing connection from connection mgr hunters@CENTRAL.PURDUE.LCL@central.purdue.lcl:389 2006-02-28 09:33:29 EST - ADPlugin: Returning connection to pool for domain central.purdue.lcl with dsStatus -14136. 2006-02-28 09:33:29 EST - ADPlugin: Calling CloseDirNode 2006-02-28 09:33:29 EST - ADPlugin: Calling OpenDirNode 2006-02-28 09:33:29 EST - ADPlugin: Calling CustomCall 2006-02-28 09:33:29 EST - ADPlugin: Looking for existing Record of 1392-macintel 2006-02-28 09:33:29 EST - ADPlugin: Doing DN search for account - 1392-macintel 2006-02-28 09:33:29 EST - ADPlugin: Good credentials for hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:33:29 EST - ADPlugin: Retrieved existing connection from connection mgr hunters@CENTRAL.PURDUE.LCL@central.purdue.lcl:389 2006-02-28 09:33:29 EST - ADPlugin: Returning connection to pool for domain central.purdue.lcl with dsStatus -14136. 2006-02-28 09:33:29 EST - ADPlugin: Attempting Add Record...... 2006-02-28 09:33:29 EST - ADPlugin: Adding in OU = CN=Computers,DC=central,DC=purdue,DC=lcl 2006-02-28 09:33:29 EST - ADPlugin: Good credentials for hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:33:29 EST - ADPlugin: Retrieved existing connection from connection mgr hunters@CENTRAL.PURDUE.LCL@central.purdue.lcl:389 2006-02-28 09:33:29 EST - ADPlugin: Returning connection to pool for domain central.purdue.lcl with dsStatus 0. 2006-02-28 09:33:29 EST - ADPlugin: Good credentials for hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:33:29 EST - ADPlugin: Retrieved existing connection from connection mgr hunters@CENTRAL.PURDUE.LCL@central.purdue.lcl:389 2006-02-28 09:33:29 EST - ADPlugin: Added record CN=1392-macintel,CN=Computers,DC=central,DC=purdue,DC=lcl 2006-02-28 09:33:29 EST - ADPlugin: Returning connection to pool for domain central.purdue.lcl with dsStatus 0. 2006-02-28 09:33:29 EST - ADPlugin: Setting Computer Password...... 2006-02-28 09:33:29 EST - ADPlugin: Changing Password for User 1392-macintel$@CENTRAL.PURDUE.LCL as hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:33:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:34:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:34:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:35:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:35:29 EST - ADPlugin: Changing Password for User 1392-macintel$@CENTRAL.PURDUE.LCL as hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:35:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:36:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:36:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:37:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:37:29 EST - ADPlugin: Changing Password for User 1392-macintel$@CENTRAL.PURDUE.LCL as hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:37:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:38:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:38:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:39:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:39:29 EST - ADPlugin: Changing Password for User 1392-macintel$@CENTRAL.PURDUE.LCL as hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:39:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:40:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:40:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:41:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:41:29 EST - ADPlugin: Changing Password for User 1392-macintel$@CENTRAL.PURDUE.LCL as hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:41:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:42:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:42:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:43:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:43:29 EST - ADPlugin: Changing Password for User 1392-macintel$@CENTRAL.PURDUE.LCL as hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:43:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:44:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:44:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:45:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:45:30 EST - ADPlugin: Changing Password for User 1392-macintel$@CENTRAL.PURDUE.LCL as hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:45:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:46:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:46:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:47:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:47:30 EST - ADPlugin: Changing Password for User 1392-macintel$@CENTRAL.PURDUE.LCL as hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:47:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:48:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:48:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:49:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:49:30 EST - ADPlugin: Changing Password for User 1392-macintel$@CENTRAL.PURDUE.LCL as hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:49:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:50:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:50:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:51:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:51:30 EST - ADPlugin: Changing Password for User 1392-macintel$@CENTRAL.PURDUE.LCL as hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:51:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:52:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:52:43 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:53:13 EST - ADPlugin: PeriodicTask Called....... 2006-02-28 09:53:30 EST - ADPlugin: Good credentials for hunters@CENTRAL.PURDUE.LCL 2006-02-28 09:53:30 EST - ADPlugin: Existing connection too old in connection mgr hunters@CENTRAL.PURDUE.LCL@central.purdue.lcl:389 2006-02-28 09:53:30 EST - ADPlugin: Secure BIND Session with server 1061cendc02.central.purdue.lcl:389 2006-02-28 09:53:30 EST - ADPlugin: Deleting Record CN=1392-macintel,CN=Computers,DC=central,DC=purdue,DC=lcl... 2006-02-28 09:53:31 EST - ADPlugin: Returning connection to pool for domain central.purdue.lcl with dsStatus 0. 2006-02-28 09:53:31 EST - ADPlugin: Setting Computer Password FAILED Deleted Record...... 2006-02-28 09:53:31 EST - ADPlugin: Updating Local Admin Group 2006-02-28 09:53:31 EST - ADPlugin: Sending lookupd flushcache at request! 2006-02-28 09:53:31 EST - ADPlugin: Resetting memberd cache also! 2006-02-28 09:53:31 EST - ADPlugin: Closing All Connections - Connection Manager 2006-02-28 09:53:31 EST - ADPlugin: Closing Connection - hunters@CENTRAL.PURDUE.LCL@central.purdue.lcl:389 2006-02-28 09:53:31 EST - ADPlugin: Closing All Connections - Connection Manager Completed 2006-02-28 09:53:31 EST - ADPlugin: Bind/Join failed - Launching kerberosautoconfig -u 2006-02-28 09:53:31 EST - ADPlugin: Calling CloseDirNode
Two possible issues are typically related to this.
1. You don’t have any sites set up for your LAN. The OSX system seems to be defaulting to the “any” site which means you could easily be creating the account on one domain controller, but attempting to change the password, via kerberos, on another. This is usually b/c you are hitting different locations that don’t have synchronous replication set up for AD.
You /should/ set up proper sites, as this is just generally bad AD policy not to have them.
We have one site judging by the MMC snap-in. But of course I have no control over this.
2. The user you are using to bind is in so many groups that AD switches to using TCP for the kerb exchange which OSX doesn’t support. Use a different user to bind the machine that isn’t in so many groups.
The user is only in 4 groups and I seriously hope that isn’t “too many” 🙂
While it’s possible that a signing policy is at issue here, what you are referring to is just for SMB connections, which don’t enter into the AD plugin.
That’s the only thing I can think of. Now we have another (unrelated) 2003 AD that I *can* bind to. But there I have full control and a domain admin account. On the main domain I amd what we call an “Advanced Admin” meaning I have full control over my OU but not much else.
Does the AD plugin require that my login have any special privlidges that I may not have been granted? I have sucessfully joined many PCs to the domain but maybe Directory Services is doing something weird?
Thanks for the reply!
FYI, it was a firewall issue.
We opened the ports to the AD controllers as described at this page:
http://support.microsoft.com/kb/179442/en-us
and it worked.
Viewing 3 posts - 1 through 3 (of 3 total)
- You must be logged in to reply to this topic.