Network accounts unavailable using wireless (Leopard client on AD)

[rodrigomramos]

Hi fellows,

I’m doing some tests binding a MacBook (Late 2008), running Leopard 10.5.5 into AD, Server 2003 all up to date. The binding process was fine, but the problem is, if i try to connect over AirPort network, there’s no network accounts available. I logged in as local administrator and Directory Utility can’t contact AD server… Running [i]dsconfigad -show[/i], the bind appears to be ok, but [i]id[/i] any AD user shows “no such user” response. [i]dscl[/i] is also unable to browse the domain node, albeit is listed using [i]ls[/i] command.

As soon as i connect the ethernet cable, everything works like a charm…
The wireless network is working properly and if remove and re-add the AD server on Directory Utility, i’m able to authenticate against it without a problem, until i restart the MacBook.

I also noted that bring the MacBook back from sleep, with requiring to authenticate option enable, cause authentication errors. I need to wait a few seconds before to type the password. Seems that wireless connection is not properly made right on wake.

The logs does not say much.
DirectorySevice, right after wake:
9/16/08 5:54:12 PM com.apple.KerberosAutoConfig[1030] Couldn’t find KerberosClient config record
9/16/08 5:54:13 PM kernel AppleYukon2: 00000000,00000000 sk98osx_dnet – recovering from missed interrupt
9/16/08 5:54:16 PM com.apple.DirectoryServices[11] Enter machine password:
9/16/08 5:54:16 PM com.apple.DirectoryServices[11] Successfully registered hostname with DNS
9/16/08 5:54:18 PM com.apple.KerberosAutoConfig[1038] Kerberos configuration is up to date

All messages:
9/16/08 12:48:25 PM kernel MAC AUTH succeeded
9/16/08 12:48:25 PM kernel AirPort: Link Up on en1
9/16/08 12:48:27 PM mDNSResponder[16] Note: Frequent transitions for interface en0 (FE80:0000:0000:0000:021B:63FF:FEB6:DA9D); network traffic reduction measures in effect
9/16/08 12:48:29 PM com.apple.KerberosAutoConfig[517] Couldn’t find KerberosClient config record
9/16/08 12:48:33 PM fseventsd[36] callback_client: ERROR: d2f_callback_rpc() => (ipc/send) timed out (268435460) for pid 199
9/16/08 12:48:33 PM fseventsd[36] client: 0x1010800 : USER DROPPED EVENTS!
9/16/08 12:48:39 PM com.apple.DirectoryServices[11] Enter machine password:
9/16/08 12:48:39 PM com.apple.DirectoryServices[11] Successfully registered hostname with DNS
9/16/08 12:48:41 PM com.apple.KerberosAutoConfig[525] Kerberos configuration is up to date
9/16/08 12:48:43 PM fseventsd[36] callback_client: ERROR: d2f_callback_rpc() => (ipc/send) timed out (268435460) for pid 199
…

Just FYI, the MacBook clock is set to sync with AD. I know Kerberos could be very temperamental…

Best regards,
Rodrigo

RJ, Brasil

[aavarca]

Go into the advance settings in Airport and make sure “Disconnect from wireless network when logging out” is NOT checked. Then try disabling IPV6 from Airport. See if those changes help. You might want to enable a ssh connection, with an AD account, to the laptop while logged off to verify connection. Let me know what happens.

[rodrigomramos]

Hi, i just disabled the IPV6 and did a quick test. Appears that, besides a 10 seconds delay to network accounts becomes “green”, everything is working properly. I’ll run more tests and post here the results.

Thanks for the help!

[rodrigomramos]

After extensive tests, it’s confirmed: blame on IPV6!

Thank you!

[Author]

Posts