[lancepr]

My problem was caused by AD when it was switched to native mode, some accounts lost their pre windows 2000 compatibility mode. I had to run this command on my domain controller.

NET LOCALGROUP “Pre-Windows 2000 Compatible Access” Everyone /ADD

Hope this helps someone in the future.

[lancepr]

Just checking to see if you ever resolved this problem. I am having a similar one.
all accounts created before a specific time, I am not sure when, work great. Then all other accounts will log in, but will not mount the shares.
I am going to pay the $695 on Friday to see if Apple can help. They do not want to help in a mixed environement (AD/OD) even though I have support contratcs, very frustrating.

Here is an example of a working account
Nov 8 14:40:09 brook-forests-imac-g5-2 loginwindow[874]: Login Window Started Security Agent
Nov 8 14:40:24 brook-forests-imac-g5-2 loginwindow[874]: Login of user “2009018” NOT recorded in /var/log/lastlog because UID (1270718509) is greater than 100000
Nov 8 14:40:24 brook-forests-imac-g5-2 kernel[0]: AFP_VFS afpfs_mount: /Volumes/Students, pid 874
Nov 8 14:40:52 brook-forests-imac-g5-2 /System/Library/CoreServices/CCacheServer.app/Contents/MacOS/CCacheServer: Exiting: (os/kern) successful (0)

Here is a broken example
Nov 8 14:40:53 brook-forests-imac-g5-2 loginwindow[986]: Login Window Started Security Agent
Nov 8 14:41:04 brook-forests-imac-g5-2 loginwindow[986]: Login of user “2010010” NOT recorded in /var/log/lastlog because UID (57132023) is greater than 100000
Nov 8 14:41:04 brook-forests-imac-g5-2 loginwindow[986]: lwMountWithArrayOfPaths: Skipping mount, final urlString was NULL

[lancepr]

Anyone else have this working? I called Apple tech support today and paid them money and they were of no help!
I have had the SSO working, I just watnt to be able to use the WGM on my AD users when they login.
I must be missing somethink simple.

[lancepr]

Should I set the tiger server as the prefered DC in the AD control panel?
Another question, when I make my Tiger server an OD master what domain should I put it in?
If my base AD domain is widget.domain.com
When I went to create my OD it defaulted to OSX1.widget.domain.com, should I make my OD master part of the same domain as my AD or should this work.
I can browse the AD and OD and add AD users to my OD but none of my settings are getting pulled by the Mac clients.

[lancepr]

you ever get this working?
I posted a similar problem, found some more people with the same errors after changing my search strings, but no fixes for the “magic” triangle

[Author]

Posts