login using ad

[siddhartha]

i have 10.5.2 bound to ad but find that still turning bonjour off makes logins faster.

anyone still experiencing that?

[siddhartha]

yes sir.

[jdyck]

I’m seeing very long login times as well, but without a .local AD domain. I’m setting up laptops with Mobile accounts though, so not sure if that makes any difference. My logins are taking upwards of 3 minutes, which is not very good when these machines are going to be going into the hands of (impatient) students. Hopefully a solution comes soon…

[bentoms]

Hi guys,

I’m having the same issue with 10.5.3 clients on an ad 2k3 environment, he is some more info.

Our company is part of a global forest; mycompany.global.

Our subdomain is weu.mycompany.global.

Running the TCP dump as MacTroll advised showed that the Mac was querying all DC’s not only in our subdomain but in the forest!!!

If you look at your directory service console logs you should see something like the below;

2008-03-25 14:02:55 GMT – T[0xB0081000] – Network transition occurred.
2008-03-25 14:07:03 GMT – T[0xB0081000] – Network transition occurred.

If you then check you tcpdump in wireshark you will notice that during these two messages the mac is qurying the DC’s.

I have a bug report logged with apple, (Problem ID: 5804896), but am hoping that 10.5.3 will resolve.

[mlinde]

I’ve seen this as well, and even if you set up a “preferred” DC, it still queries the entire forest. I’m with you on 10.5.3 – it almost seems like AD integration took a step or two back with 10.5, I’m hoping to get back to 10.4.9 functionality soon…

[Author]

Posts