[neilt]

[QUOTE BY= MacTroll] [email protected] is your computer account. Denoted by the $ in the name.

You’re having issues resetting the password for it.

It seems that an existing computer account is already in the domain for this machine. However, you don’t have rights to change the password on it.[/QUOTE]

True, this particular machine was already in AD, i unbound it and was trying to rebind it to the same account, using the password I used initially to bind it in the first place.

When you say i don’t have the rights to change the password on it, which password is that, or which it (the domain or the mac)?

I get this same exact erro though even if the machine I am binding has never been bound before or has a completely different machine name than anything in AD.

very odd.

[neilt]

Below is the tail from the ad plugin when trying to bind. this particular mac was bound to the domain this morning. i unbound it to see if i could get it to bind again. It failed at the exact same place as the other 3 machines (2 tiger client and one tiger server) I have tried. It times out while during step 5, which translates to this in the log:

2005-11-15 12:54:06 EST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-11-15 12:56:06 EST – ADPlugin: Setting Computer Password FAILED for existing record……

Here is a tail from the ad plugin:

2005-11-15 12:35:35 EST – ADPlugin: Initialize Called
2005-11-15 12:35:35 EST – ADPlugin: Initialize Returned
2005-11-15 12:35:35 EST – ADPlugin: State Changed Called 4
2005-11-15 12:35:35 EST – ADPlugin: Received ServerRunLoop Mutex
2005-11-15 12:35:35 EST – ADPlugin: Received Kerberos Mutex
2005-11-15 12:35:35 EST – ADPlugin: State Changed Called 1
2005-11-15 12:35:35 EST – ADPlugin: State Changed Called 1
2005-11-15 12:35:35 EST – ADPlugin: Calling OpenDirNode
2005-11-15 12:35:35 EST – ADPlugin: Calling CustomCall
2005-11-15 12:35:35 EST – ADPlugin: Calling CustomCall
2005-11-15 12:35:35 EST – ADPlugin: Calling CustomCall
2005-11-15 12:35:35 EST – ADPlugin: Calling CloseDirNode
2005-11-15 12:35:48 EST – ADPlugin: Calling OpenDirNode
2005-11-15 12:35:48 EST – ADPlugin: Calling CustomCall
2005-11-15 12:35:48 EST – ADPlugin: Doing CheckServerRecords……
2005-11-15 12:35:48 EST – ADPlugin: wcu.edu – Start checking servers for site “any”
2005-11-15 12:35:48 EST – ADPlugin: Total Servers “any” LDAP – 5, Kerberos – 5, kPasswd – 5
2005-11-15 12:35:48 EST – ADPlugin: Server #1 picked – “gazetteer.wcu.edu”
2005-11-15 12:35:48 EST – ADPlugin: Server #2 picked – “gc4.wcu.edu”
2005-11-15 12:35:48 EST – ADPlugin: Got rootDSE for server gc4.wcu.edu to determine forest
2005-11-15 12:35:48 EST – ADPlugin: Determined Forest of wcu.edu from Domain Controller gc4.wcu.edu
2005-11-15 12:35:48 EST – ADPlugin: Found Default Domain wcu.edu
2005-11-15 12:35:48 EST – ADPlugin: Global Catalogs – Start checking servers for site “any”
2005-11-15 12:35:48 EST – ADPlugin: Total Servers “any” LDAP – 2, Kerberos – 5, kPasswd – 5
2005-11-15 12:35:48 EST – ADPlugin: Server #1 picked – “gc2.wcu.edu”
2005-11-15 12:35:49 EST – ADPlugin: Server #2 picked – “gc4.wcu.edu”
2005-11-15 12:35:49 EST – ADPlugin: Found Forest Domain GC wcu.edu
2005-11-15 12:35:49 EST – ADPlugin: Something wrong, unable to determine domain information from Config container……
2005-11-15 12:35:49 EST – ADPlugin: Finished CheckServerRecords……
2005-11-15 12:35:49 EST – ADPlugin: Created KerberosClient record Generation ID 153768949
2005-11-15 12:35:49 EST – ADPlugin: Rebuilt Kerberos File
2005-11-15 12:35:49 EST – ADPlugin: Calling CloseDirNode
2005-11-15 12:35:49 EST – ADPlugin: Calling OpenDirNode
2005-11-15 12:35:49 EST – ADPlugin: Calling CustomCall
2005-11-15 12:35:49 EST – ADPlugin: Doing CheckServerRecords……
2005-11-15 12:35:53 EST – ADPlugin: Good credentials for [email protected]
2005-11-15 12:35:53 EST – ADPlugin: No existing connection in connection mgr for [email protected]@wcu.edu:389
2005-11-15 12:35:55 EST – ADPlugin: Secure BIND Session with server gazetteer.wcu.edu:389
2005-11-15 12:35:55 EST – ADPlugin: Read Context information from server for configurationNamingContext of CN=Configuration,DC=wcu,DC=edu
2005-11-15 12:35:55 EST – ADPlugin: Processing Site Search with found IP
2005-11-15 12:35:55 EST – ADPlugin: Returning connection to pool for domain wcu.edu with dsStatus 0.
2005-11-15 12:35:55 EST – ADPlugin: wcu.edu – Start checking servers for site “any”
2005-11-15 12:35:55 EST – ADPlugin: Total Servers “any” LDAP – 5, Kerberos – 5, kPasswd – 5
2005-11-15 12:35:55 EST – ADPlugin: Server #1 picked – “gazetteer.wcu.edu”
2005-11-15 12:35:55 EST – ADPlugin: Server #2 picked – “gc4.wcu.edu”
2005-11-15 12:35:55 EST – ADPlugin: Got rootDSE for server gc4.wcu.edu to determine forest
2005-11-15 12:35:55 EST – ADPlugin: Determined Forest of wcu.edu from Domain Controller gc4.wcu.edu
2005-11-15 12:35:55 EST – ADPlugin: Found Default Domain wcu.edu
2005-11-15 12:35:55 EST – ADPlugin: Global Catalogs – Start checking servers for site “any”
2005-11-15 12:35:55 EST – ADPlugin: Total Servers “any” LDAP – 2, Kerberos – 5, kPasswd – 5
2005-11-15 12:35:55 EST – ADPlugin: Server #1 picked – “gc2.wcu.edu”
2005-11-15 12:35:55 EST – ADPlugin: Server #2 picked – “gc4.wcu.edu”
2005-11-15 12:35:55 EST – ADPlugin: Found Forest Domain GC wcu.edu
2005-11-15 12:35:55 EST – ADPlugin: Good credentials for [email protected]
2005-11-15 12:35:55 EST – ADPlugin: Retrieved existing connection from connection mgr [email protected]@wcu.edu:389
2005-11-15 12:35:55 EST – ADPlugin: Read Context information from server for configurationNamingContext of CN=Configuration,DC=wcu,DC=edu
2005-11-15 12:35:55 EST – ADPlugin: Returning connection to pool for domain wcu.edu with dsStatus 0.
2005-11-15 12:35:55 EST – ADPlugin: Finished CheckServerRecords……
2005-11-15 12:35:55 EST – ADPlugin: Created KerberosClient record Generation ID 153768955
2005-11-15 12:35:55 EST – ADPlugin: Rebuilt Kerberos File
2005-11-15 12:35:55 EST – ADPlugin: Closing All Connections – Connection Manager
2005-11-15 12:35:55 EST – ADPlugin: Closing Connection – [email protected]@wcu.edu:389
2005-11-15 12:35:55 EST – ADPlugin: Closing All Connections – Connection Manager Completed
2005-11-15 12:35:55 EST – ADPlugin: Calling CloseDirNode
2005-11-15 12:35:55 EST – ADPlugin: Calling OpenDirNode
2005-11-15 12:35:55 EST – ADPlugin: Calling CustomCall
2005-11-15 12:35:55 EST – ADPlugin: Verify called for [email protected]
2005-11-15 12:35:56 EST – ADPlugin: Verify successful for [email protected]
2005-11-15 12:35:56 EST – ADPlugin: Calling CloseDirNode
2005-11-15 12:35:56 EST – ADPlugin: Calling OpenDirNode
2005-11-15 12:35:56 EST – ADPlugin: Calling CustomCall
2005-11-15 12:35:56 EST – ADPlugin: Good credentials for [email protected]
2005-11-15 12:35:56 EST – ADPlugin: No existing connection in connection mgr for [email protected]@wcu.edu:389
2005-11-15 12:35:56 EST – ADPlugin: Secure BIND Session with server gazetteer.wcu.edu:389
2005-11-15 12:35:56 EST – ADPlugin: Read Context information from server for schemaNamingContext of CN=Schema,CN=Configuration,DC=wcu,DC=edu
2005-11-15 12:35:58 EST – ADPlugin: Returning connection to pool for domain wcu.edu with dsStatus 0.
2005-11-15 12:35:58 EST – ADPlugin: Updating Mappings from Schema……….
2005-11-15 12:35:58 EST – ADPlugin: Doing Computer search for Ethernet address – 00:03:93:c7:e9:3c
2005-11-15 12:35:58 EST – ADPlugin: Doing DN search for account – wcu67748
2005-11-15 12:35:58 EST – ADPlugin: Good credentials for [email protected]
2005-11-15 12:35:58 EST – ADPlugin: Retrieved existing connection from connection mgr [email protected]@wcu.edu:389
2005-11-15 12:35:58 EST – ADPlugin: Returning connection to pool for domain wcu.edu with dsStatus 0.
2005-11-15 12:35:58 EST – ADPlugin: Calling CloseDirNode
2005-11-15 12:36:04 EST – ADPlugin: Calling OpenDirNode
2005-11-15 12:36:04 EST – ADPlugin: Calling CustomCall
2005-11-15 12:36:04 EST – ADPlugin: Looking for existing Record of wcu67748
2005-11-15 12:36:04 EST – ADPlugin: Doing DN search for account – wcu67748
2005-11-15 12:36:04 EST – ADPlugin: Good credentials for [email protected]
2005-11-15 12:36:04 EST – ADPlugin: Retrieved existing connection from connection mgr [email protected]@wcu.edu:389
2005-11-15 12:36:04 EST – ADPlugin: Returning connection to pool for domain wcu.edu with dsStatus 0.
2005-11-15 12:36:04 EST – ADPlugin: Good credentials for [email protected]
2005-11-15 12:36:04 EST – ADPlugin: Retrieved existing connection from connection mgr [email protected]@wcu.edu:389
2005-11-15 12:36:04 EST – ADPlugin: KerberosID Found for account CN=wcu67748,CN=Computers,DC=wcu,DC=edu – wcu67748$
2005-11-15 12:36:04 EST – ADPlugin: Returning connection to pool for domain wcu.edu with dsStatus 0.
2005-11-15 12:36:04 EST – ADPlugin: Existing record found @ CN=wcu67748,CN=Computers,DC=wcu,DC=edu with [email protected].
2005-11-15 12:36:04 EST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-11-15 12:38:05 EST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-11-15 12:40:05 EST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-11-15 12:42:05 EST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-11-15 12:44:05 EST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-11-15 12:46:06 EST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-11-15 12:48:06 EST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-11-15 12:50:06 EST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-11-15 12:52:06 EST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-11-15 12:54:06 EST – ADPlugin: Changing Password for User [email protected] as [email protected]
2005-11-15 12:56:06 EST – ADPlugin: Setting Computer Password FAILED for existing record……
2005-11-15 12:56:06 EST – ADPlugin: Updating Local Admin Group
2005-11-15 12:56:06 EST – ADPlugin: Cleaning Previous Additions to Local Admin Group
2005-11-15 12:56:06 EST – ADPlugin: Sending lookupd flushcache at request!
2005-11-15 12:56:06 EST – ADPlugin: Resetting memberd cache also!
2005-11-15 12:56:06 EST – ADPlugin: Closing All Connections – Connection Manager
2005-11-15 12:56:06 EST – ADPlugin: Closing Connection – [email protected]@wcu.edu:389
2005-11-15 12:56:06 EST – ADPlugin: Closing All Connections – Connection Manager Completed
2005-11-15 12:56:06 EST – ADPlugin: Bind/Join failed – Launching kerberosautoconfig -u
2005-11-15 12:56:06 EST – ADPlugin: Calling CloseDirNode

[neilt]

I also have the same problem.
Other things I have tried.
I can bind Panther clients. I have one machine with 2 hard drives, 1 panther, 1 tiger. When booted from panther it will bind. when booted from tiger, it wont.
Also. I have an xserve with os x server 10.4.3 that wont bind either.

I have tried this on 5 different machines. One thing to note is that about a month and a half ago, I was able to get one mac in tiger to bind. I unbound that machine, and now it will not bind again.

[neilt]

I have the same issue. We were thinking it was related to the veritas backup agent, but we have disabled that, and it still occurs.

Same symptoms, processors go to about 60 to 70% usage, and then a reboot after a minute or so.

Nothing in the logs, nothing anywhere that says what might have happened.

I did as suggested and turned off the auto-restart feature, but, the next time it happened, the machine didn’t reboot at all…. just hung with the processor lights on the front of the xserve reading 2/3 activity.

I checked the graph in server admin, and it shows the spike in processor activity, just like all the other reboot times, but this time, there is a 4 hour gap where the processors just disappear in the graph (the crash occurred overnight, and i had to physically reboot the machine, about 4 hours later)

so, i don’t recommend turning off the auto-restart, whatever is happening, the only way to recover is through a reboot, and the only way to reboot is with watchdog or physically hitting the power button.

Any one have any other ideas?

neil

[Author]

Posts