Active Directory Plug-In Logs

[egadsby]

Dear Friends,

We use the Active Directory plug-in to connect to a Windows Directory server from our 10.5 systems. This works well but one user can not log-in and is given a vague message to contact the system administrator.

Here’s what I want to know, where does the AD plug-in or subsystems keep access and error logs? I have looked and can’t find them. I hope they will shed some light on things. Thanks!

[mlinde]

All logs are stored in /Library/Logs/DirectoryService

For verbose logging restart DirectoryService:
[code]sudo killall -USR1 DirectoryService[/code]
and look at what is happening.
However I’d start with checking your network time services. AD uses Kerberos – 5 minute difference in time max.

You can also see if the AD plugin is active or if the user is found (or any domain user):
[code]dsconfigad -show[/code]
[code]id DOMAIN\\username[/code]

[Author]

Posts