10.4.11 AD Issues

dmatfb

17 years ago

So today for no apparent reason (even though I updated to 10.4.11), my Windows users cannot authenticate to my Apple servers. My Apple clients can connect fine using Kerberos or AFP login. My Windows users can't get in, nor can Apple clients who use smb://X.X.X.X get in either. We have several Apple file servers which house home directories and shared folders. We have two OD boxes, one master one replica. We bind our computers to Active Directory. Our Mac users get the same bind to AD, but we also add our OD server in there for the OD part. Looking through my WIndows log on any of our server boxes I get: [2007/11/19 20:15:02, 1] auth_ods.c:opendirectory_ntlmv2_auth_user(312) User "jdoe" failed to authenticate with "dsAuthMethodStandard:dsAuthNodeNTLMv2" (-14090) :( [2007/11/19 20:15:02, 1] auth_ods.c:opendirectory_ntlmv2_auth_user(312) User "jdoe" failed to authenticate with "dsAuthMethodStandard:dsAuthNodeNTLMv2" (-14090) :( [2007/11/19 20:15:02, 1] auth_ods.c:opendirectory_ntlmv2_auth_user(312) User "jdoe" failed to authenticate with "dsAuthMethodStandard:dsAuthNodeNTLMv2" (-14079) :( [2007/11/19 20:15:02, 1] auth_ods.c:opendirectory_auth_user(208) User "jdoe" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14987) :( [2007/11/19 20:15:02, 1] auth_ods.c:opendirectory_smb_pwd_check_ntlmv1(377) opendirectory_smb_pwd_check_ntlmv1: [-14987]opendirectory_auth_user [2007/11/19 20:15:03, 1] auth_ods.c:opendirectory_auth_user(208) User "jdoe" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14987) :( [2007/11/19 20:15:03, 1] auth_ods.c:opendirectory_smb_pwd_check_ntlmv1(377) opendirectory_smb_pwd_check_ntlmv1: [-14987]opendirectory_auth_user [2007/11/19 20:17:51, 1] /SourceCache/samba/samba-100.9/samba/source/smbd/server.c:open_sockets_smbd(359) This is trying to connect using smb on a Mac I get this error. I should mention we also use Kerberos from AD. I did the hack that shuts off Kerberos authentication coming from OD which is referenced in this KBase article: http://docs.info.apple.com/article.html?artnum=300765 The only thing that has changed, is I've updated the boxes to the latest 10.4.11, our AD admins are moving the users from root level of our AD to different OU, and I've changed the local admin/root passwords on all boxes. What am I missing? I need some help pretty please!