some AD accounts can’t login

[matx]

I have a situation where some new, and some re-enabled, AD accounts from a Windows 2003 server, can not log in to the Mac clients. Macs are Mac Pro and G5s. Running 10.4.9. Bound to AD and LDAP. Some AD accounts do work properly. Actually, most do. Using “dirt” all accounts check out fine. Name and pass work. Cloning known good AD accounts changes nothing. Using “dscl localhost” to drill down into AD reveals nothing different between good and bad accounts. Strange.

Any ideas?

Thanks.

[reesdl]

In the Authentication tab in Directory Access, do you have AD & LDAP in the correct order? If you had to unbind from AD and bind again, it may of moved under LDAP depending on which you authenticate to first. I have had it happen a couple times.

[Author]

Posts