AFP548

Can’t see /Active Directory/All Domains, but can see individual domains

I am binding a 10.4 client to our AD with an empty root forest and a sub-tree under it. I'm able to successfully bind to the sub-tree domain, however when I do "id user" I get no such user.

If I dscl /Active\ Directory/All\ Domains -read Users/test I get "data source is not valid".

If I dscl /Active\ Directory/mycorp.domain.com -read Users/test I get all the info about the user.

I am not able to log in at startup with this test user either.

So with dscl I am able to read the directory, but only if I specifiy the sub-tree domain. And with id I am not able to read the directory at all. What is my next step?

Craig
Exit mobile version