The best I can do is to suggest you turn on ds debugging, and poke through the log.
Ssh into your server with an admin account and do the following:
sudo killall -USR1 DirectoryService
tail -f /Library/Logs/DirectoryService/DirectoryService.debug.log
Then try to login graphically with the domain admin account and see what comes back.
You can turn off ds debugging the same way you turned it on.
Other things to look at are any static mapping you might have (uid/gid are the likely culprits in the GUI) that might not be set on a specific account.
Good luck.
–DH
Comments are closed