[elvisizer]

ok, i can easily run the same process on a regular 10.6.5 machine. I’ll give that a try and then post results . . . .
thanks!
elvisizer

[elvisizer]

it’s a 10.6 image that includes the 10.6.5 update (and a whole boatload of other software). I’m building it on a machine running OS X Server 10.6.5.

[elvisizer]

weird, i grabbed the latest rev of instadmg, and the checksum stopped changing.

[elvisizer]

thanks, dead, a vanilla machine had no errors. I took the updated pythons out of the path on the original machine and also had success, so you were definitely correct.

[elvisizer]

yes, i have rights using that account- it has domain admin privs. i use the same account to bind PC’s to the domain all the time, no problem.

[elvisizer]

hey again, guys. Thanks for the further help, macshome. I got more info from the logs this time, and now at least i know where the problem is occurring if not exactly how to fix it (yet!!)
So, after doing the tail command and trying to bind, here’s what I get:
sfmd1cking:~ cking$ tail -f /Library/Logs/DirectoryService/DirectoryService.debug.log | grep ADPlug
2005-02-08 09:47:47 PST – ADPlugin: Calling OpenDirNode
2005-02-08 09:47:47 PST – ADPlugin: Calling CustomCall
2005-02-08 09:47:47 PST – ADPlugin: Doing CheckServerRecords……
2005-02-08 09:47:47 PST – ADPlugin: Found Default Domain media.ziffdavis.com
2005-02-08 09:47:47 PST – ADPlugin: Found Forest Domain GC media.ziffdavis.com
2005-02-08 09:47:47 PST – ADPlugin: Finished CheckServerRecords……
2005-02-08 09:47:47 PST – ADPlugin: Rebuilt Kerberos File
2005-02-08 09:47:47 PST – ADPlugin: Calling CloseDirNode
2005-02-08 09:47:47 PST – ADPlugin: Calling OpenDirNode
2005-02-08 09:47:47 PST – ADPlugin: Calling CustomCall
2005-02-08 09:47:47 PST – ADPlugin: Doing CheckServerRecords……
2005-02-08 09:47:48 PST – ADPlugin: Good credentials for [email protected]
2005-02-08 09:47:48 PST – ADPlugin: No connection in connection mgr for [email protected]@media.ziffdavis.com:389
2005-02-08 09:47:48 PST – ADPlugin: Secure BIND Session with server medw2k001.media.ziffdavis.com:389
2005-02-08 09:47:48 PST – ADPlugin: Processing Site Search with found IP
2005-02-08 09:47:49 PST – ADPlugin: Site found of – SanFrancisco
2005-02-08 09:47:49 PST – ADPlugin: Added connection to connection mgr [email protected]@media.ziffdavis.com:389
2005-02-08 09:47:49 PST – ADPlugin: Found Default Domain media.ziffdavis.com
2005-02-08 09:47:49 PST – ADPlugin: Found Forest Domain GC media.ziffdavis.com
2005-02-08 09:47:49 PST – ADPlugin: Good credentials for [email protected]
2005-02-08 09:47:49 PST – ADPlugin: Retrieved connection from connection mgr [email protected]@media.ziffdavis.com:389
2005-02-08 09:47:49 PST – ADPlugin: Added connection to connection mgr [email protected]@media.ziffdavis.com:389
2005-02-08 09:47:49 PST – ADPlugin: Finished CheckServerRecords……
2005-02-08 09:47:49 PST – ADPlugin: Rebuilt Kerberos File
2005-02-08 09:47:49 PST – ADPlugin: Calling CloseDirNode
2005-02-08 09:47:49 PST – ADPlugin: Calling OpenDirNode
2005-02-08 09:47:49 PST – ADPlugin: Calling CustomCall
2005-02-08 09:47:49 PST – ADPlugin: Verify called for [email protected]
2005-02-08 09:47:49 PST – ADPlugin: Verify successful for [email protected]
2005-02-08 09:47:49 PST – ADPlugin: Calling CloseDirNode
2005-02-08 09:47:50 PST – ADPlugin: Calling OpenDirNode
2005-02-08 09:47:50 PST – ADPlugin: Calling CustomCall
2005-02-08 09:47:50 PST – ADPlugin: Doing DN search for account – sfmd1cking
2005-02-08 09:47:50 PST – ADPlugin: Good credentials for [email protected]
2005-02-08 09:47:50 PST – ADPlugin: Retrieved connection from connection mgr [email protected]@media.ziffdavis.com:389
2005-02-08 09:47:50 PST – ADPlugin: Added connection to connection mgr [email protected]@media.ziffdavis.com:389
2005-02-08 09:47:50 PST – ADPlugin: Calling CloseDirNode
2005-02-08 09:47:50 PST – ADPlugin: Calling OpenDirNode
2005-02-08 09:47:50 PST – ADPlugin: Calling CustomCall
2005-02-08 09:47:50 PST – ADPlugin: Looking for existing Record of sfmd1cking
2005-02-08 09:47:50 PST – ADPlugin: Doing DN search for account – sfmd1cking
2005-02-08 09:47:50 PST – ADPlugin: Good credentials for [email protected]
2005-02-08 09:47:50 PST – ADPlugin: Retrieved connection from connection mgr [email protected]@media.ziffdavis.com:389
2005-02-08 09:47:50 PST – ADPlugin: Added connection to connection mgr [email protected]@media.ziffdavis.com:389
2005-02-08 09:47:50 PST – ADPlugin: Attempting Add Record……
2005-02-08 09:47:50 PST – ADPlugin: Adding in OU = CN=Computers,DC=media,DC=ziffdavis,DC=com
2005-02-08 09:47:50 PST – ADPlugin: In Server = sfw2k008.media.ziffdavis.com
2005-02-08 09:47:50 PST – ADPlugin: Good credentials for [email protected]
2005-02-08 09:47:50 PST – ADPlugin: Retrieved connection from connection mgr [email protected]@media.ziffdavis.com:389
2005-02-08 09:47:50 PST – ADPlugin: Added record CN=sfmd1cking,CN=Computers,DC=media,DC=ziffdavis,DC=com using Server sfw2k008.media.ziffdavis.com
2005-02-08 09:47:50 PST – ADPlugin: Added connection to connection mgr [email protected]@media.ziffdavis.com:389
2005-02-08 09:47:50 PST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-02-08 09:47:50 PST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-02-08 09:47:50 PST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-02-08 09:47:51 PST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-02-08 09:47:51 PST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-02-08 09:47:51 PST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-02-08 09:47:51 PST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-02-08 09:47:51 PST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-02-08 09:47:51 PST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-02-08 09:47:51 PST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-02-08 09:47:52 PST – ADPlugin: Good credentials for [email protected]
2005-02-08 09:47:52 PST – ADPlugin: Retrieved connection from connection mgr [email protected]@media.ziffdavis.com:389
2005-02-08 09:47:52 PST – ADPlugin: Deleting Record CN=sfmd1cking,CN=Computers,DC=media,DC=ziffdavis,DC=com…
2005-02-08 09:47:52 PST – ADPlugin: Added connection to connection mgr [email protected]@media.ziffdavis.com:389
2005-02-08 09:47:52 PST – ADPlugin: Setting Computer Password FAILED Deleted Record……
2005-02-08 09:47:52 PST – ADPlugin: Closing All Connections – Connection Manager
2005-02-08 09:47:52 PST – ADPlugin: Closing Connection – [email protected]@media.ziffdavis.com:389
2005-02-08 09:47:52 PST – ADPlugin: Closing All Connections – Connection Manager Completed
2005-02-08 09:47:52 PST – ADPlugin: Calling CloseDirNode

So, it’s failing when trying to change the password for the computer account. at least, i THINK it’s the computer account- the fact that it says user sfmd1cking on those lines makes me wonder . . . . . . . . . .

[elvisizer]

yeah, since using the single existing computer account worked, i figured that could be a work around. haven’t tried it yet, though, and that would only work temporarily. I’m going to be upgrading about 75 macs to X soon, and they all need to be on the AD, so i’d rather not have to do it all manually.
you know, we have a really simple AD set up, too. one domain, 3 physical sites connected on a WAN, one DC @ each site. the other 2 sites don’t have this problem, so it seems like it HAS to be something funky on my DC.

Anyway, did the log file supply anything useful to you mr. mactroll?

[elvisizer]

one other thing I just discovered- the macs WILL bind to the domain if I use the same computer name as the single mac i bound earlier- they only fail if i try to create a new computer account. I’d say it’s a permission problem with my account except that that same account can create new computer accounts when I add PC’s, and that this account has rights to do anything at all in the AD domain.
Anyway, I thought that info might be important!

[elvisizer]

ok, when i did the
sudo killall -USR1 DirectoryServices
it responded with ‘no matching processes’.
tried the join, and then looked in the log file.
here’s what it had from that particular login session:

2005-02-04 08:12:23 PST – DirectoryService 1.8.2 (v257.1) starting up…
2005-02-04 08:12:24 PST – Plugin , Version <1.6>, processed successfully.
2005-02-04 08:12:24 PST – Plugin , Version <1.6>, processed successfully.
2005-02-04 08:12:24 PST – Plugin , Version <1.6.5>, processed successfully.
2005-02-04 08:12:24 PST – Plugin

, Version <1.6.1>, processed successfully.
2005-02-04 08:12:24 PST – Plugin “Active Directory”, Version “1.0.5”, is set to load lazily.
2005-02-04 08:12:24 PST – Plugin “AppleTalk”, Version “1.1”, is set to load lazily.
2005-02-04 08:12:24 PST – Plugin “BSD”, Version “1.1”, is set to load lazily.
2005-02-04 08:12:24 PST – Plugin “PasswordServer”, Version “2.0.4”, is set to load lazily.
2005-02-04 08:12:24 PST – Plugin “Rendezvous”, Version “1.1”, loaded successfully.
2005-02-04 08:12:24 PST – Plugin “SLP”, Version “1.1”, is set to load lazily.
2005-02-04 08:12:24 PST – Plugin “SMB”, Version “1.1.3”, is set to load lazily.
2005-02-04 08:12:24 PST – Registered node ~Configure
2005-02-04 08:12:24 PST – Plug-in Configure state is now active.
2005-02-04 08:12:24 PST – Plug-in LDAPv3 state is now active.
2005-02-04 08:12:24 PST – Registered node ~NetInfo~DefaultLocalNode
2005-02-04 08:12:24 PST – Plug-in NetInfo state is now active.
2005-02-04 08:12:24 PST – Plug-in Rendezvous state is now active.
2005-02-04 08:12:24 PST – Registered Locally Hosted Node ~NetInfo~DefaultLocalNode
2005-02-04 08:12:24 PST – Registered node ~Search
2005-02-04 08:12:24 PST – Registered node ~Search~Contacts
2005-02-04 08:12:24 PST – Registered node ~Search~Network
2005-02-04 08:12:24 PST – Plug-in Search state is now active.
2005-02-04 08:12:25 PST – Plug-in SLP state is now active.
2005-02-04 08:12:25 PST – Plugin “SLP”, Version “1.1”, loaded on demand successfully.
2005-02-04 08:12:25 PST – Plug-in SMB state is now active.
2005-02-04 08:12:25 PST – Plugin “SMB”, Version “1.1.3”, loaded on demand successfully.
2005-02-04 08:12:25 PST – Plug-in AppleTalk state is now active.
2005-02-04 08:12:25 PST – Plugin “AppleTalk”, Version “1.1”, loaded on demand successfully.
2005-02-04 08:17:53 PST – Plug-in Active Directory state is now inactive.
2005-02-04 08:17:53 PST – Plugin “Active Directory”, Version “1.0.5”, loaded on demand successfully.

Doesn’t look like there’s anything that helpful in there to me, but that don’t mean much!

elvisizer

[elvisizer]

thanks, mactroll. good idea. i’ll try that tomorrow and post again.
elvisizer

[elvisizer]

ok, i got our dns fixed, now when i give the [code:1:beea5d7e35]sudo nidomain -d smitty/network smitty[/code:1:beea5d7e35] command, i get the response “nidomain:operation failed- No Such Tag”. But, when I do a nidomain -l command, it lists both a local and a network domain. Any ideas?
elvisizer

[Author]

Posts