AD User can’t SSH into Xserve
I have my Intel Xserve 10.4.11 configured in my workplace Active Directory (AD) using the Golden Triangle approach with Open Directory (OD) used to configure Group membership and not much else. These are primarily just file servers, so no MCX or client management being done. I'm not able to log into the server using my AD account. I can log in as the local admin or a different AD account fine, just not mine. I have SSH restricted to only allow who I specify to log in, and my AD account is in that list. I've removed it and re-added it, which doesn't help. I've deleted my home directory; that didn't help. My AD account works with all other services running on that box it seems, such as LoginWindow, AFP, & SMB... just not SSH. I have another PowerPC G4 Xserve set up the same way, and my AD account works fine there across the board. Not sure what else to check? I'd rather avoid removing-rejoining to AD, as I'm not an AD admin so I have to request permission, and that can take time.
Here's what I'm getting in Console:
Aug 20 18:39:18 xserve sshd[5683]: User xxx from 10.10.10.10 not allowed because none of user's groups are listed in AllowGroups
Aug 20 18:39:18 xserve sshd[5683]: Failed none for invalid user xxx from 10.10.10.10 port 58729 ssh2
My sshd config has AllowGroups set to admin, which my AD account is a member of (verified via dscl).
Also, if I log in to the local admin acount via ssh, I can su - myself just fine (which is what I usually do).
I can log in as any other AD user via SSH.
I've tried revoking and re-adding myself to the admin group as well as the com.apple.access_ssh group, but this doesn't work. I'm stumped.