I currently have a significant problem with AD authentication. I am able to bind the computer account in AD and query AD for user and group information, however, I cannot login. I have had success configuring the AD plugin on different networks and authentication has never been a problem. Unfortunately, on this particular network, I can get everything to work except the login authentication.
SMB is working, DNS is able to resolve names, and I can bind computer accounts. I have verified the host name and made sure that made sure that the time is synched properly. I can get a kerberos ticket, but only manually after I login locally using the kerberos app. I can query AD, mount network volumes, and access anything on our network. Basically I can authenticate manually after I’ve logged in locally, I just can’t login with a domain account.
I made sure there is not a local account with the same name and tried logging in with domain\username. I’ve manually specified the “prefer this domain server” as well as let it automatically choose a DC. Finally, I’ve been able to bind about 15 different accounts, none of which are able to login.