Home › Forums › OS X Server and Client Discussion › Active Directory › 10.4.11 AD Issues

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • November 20, 2007 at 4:34 am #370552
    dmatfb
    Participant

    So today for no apparent reason (even though I updated to 10.4.11), my Windows users cannot authenticate to my Apple servers. My Apple clients can connect fine using Kerberos or AFP login. My Windows users can’t get in, nor can Apple clients who use smb://X.X.X.X get in either. We have several Apple file servers which house home directories and shared folders. We have two OD boxes, one master one replica. We bind our computers to Active Directory. Our Mac users get the same bind to AD, but we also add our OD server in there for the OD part. Looking through my WIndows log on any of our server boxes I get:

    [2007/11/19 20:15:02, 1] auth_ods.c:opendirectory_ntlmv2_auth_user(312)
    User “jdoe” failed to authenticate with “dsAuthMethodStandard:dsAuthNodeNTLMv2” (-14090) 🙁
    [2007/11/19 20:15:02, 1] auth_ods.c:opendirectory_ntlmv2_auth_user(312)
    User “jdoe” failed to authenticate with “dsAuthMethodStandard:dsAuthNodeNTLMv2” (-14090) 🙁
    [2007/11/19 20:15:02, 1] auth_ods.c:opendirectory_ntlmv2_auth_user(312)
    User “jdoe” failed to authenticate with “dsAuthMethodStandard:dsAuthNodeNTLMv2” (-14079) 🙁
    [2007/11/19 20:15:02, 1] auth_ods.c:opendirectory_auth_user(208)
    User “jdoe” failed to authenticate with “dsAuthMethodStandard:dsAuthSMBNTKey” (-14987) 🙁
    [2007/11/19 20:15:02, 1] auth_ods.c:opendirectory_smb_pwd_check_ntlmv1(377)
    opendirectory_smb_pwd_check_ntlmv1: [-14987]opendirectory_auth_user
    [2007/11/19 20:15:03, 1] auth_ods.c:opendirectory_auth_user(208)
    User “jdoe” failed to authenticate with “dsAuthMethodStandard:dsAuthSMBNTKey” (-14987) 🙁
    [2007/11/19 20:15:03, 1] auth_ods.c:opendirectory_smb_pwd_check_ntlmv1(377)
    opendirectory_smb_pwd_check_ntlmv1: [-14987]opendirectory_auth_user
    [2007/11/19 20:17:51, 1] /SourceCache/samba/samba-100.9/samba/source/smbd/server.c:open_sockets_smbd(359)

    This is trying to connect using smb on a Mac I get this error. I should mention we also use Kerberos from AD. I did the hack that shuts off Kerberos authentication coming from OD which is referenced in this KBase article: http://docs.info.apple.com/article.html?artnum=300765

    The only thing that has changed, is I’ve updated the boxes to the latest 10.4.11, our AD admins are moving the users from root level of our AD to different OU, and I’ve changed the local admin/root passwords on all boxes. What am I missing? I need some help pretty please!

    November 20, 2007 at 7:13 pm #370571
    dmatfb
    Participant

    1. I did change the root password recently

    2. I can access with non-AD user.

    Change back my root password?

    November 27, 2007 at 6:55 pm #370622
    thirdwaver
    Participant

    I’m having the same problems over here and I have not changed the password. It’s not the first time I’ve had the problem either but it seems to come and go. At some point, we determined it to be DNS related, then it had to do with security settings on the Windows client but none of those things seem to be helping now. 😡

    I could sure use some help here. What can I post to help give a better picture of the situation?

    Sean

    November 27, 2007 at 7:02 pm #370623
    dmatfb
    Participant

    It turns out winbindd daemon was not running. If users can authenticate with AD credentials to OD controlled folders, home folders, etc, ensure winbindd is running. I will post the info apple support sent me to check if its running.

  • Author
    Posts
Viewing 4 posts - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.

Comments are closed

Copyright © 2025 AFP548. All Rights Reserved.