[rkurczynski]

We are not getting a TGT. If you do not put in a password, it does not let you in. As far as the list of “1000” users showing up, this is a setting in AD schema. We have changed that setting in the past so on Workgroup Manager we can view all users in our list. I feel this list showing up can be controlled with a line added to the active directory plug-in on the clients, however, I do not know how to modify. We are able to minimise the list down to two users only showing up, by modifing the “LDAPAdminLimits” setting to 1 on our Active Directory Server. Seemed like a great fix until group policy broke. I’m hoping someone can help me add this setting to the Active Directory plist on the actual OS X clients that will tell the client to list none. Please help. Thanks
Bob

[rkurczynski]

Josh and SLB,
Thank you both for posting replies. Josh, are you able to replicate this problem on your setup? SLB, are you using apples AD plug-in? Are you both using the golden triangle setup? If SLB is, hopefully we can find a difference between our configs. Thank you for any input.

[rkurczynski]

Yes this is at the login window that the list appears, put an * in the username field and click log on and wait a few seconds.
Mac OS X versions 10.4.8-10.4.11 and 10.5.2. We researched a database of the account that was being used and it goes back over two years. We are pretty sure this has been a problem for a while, back then we were using 10.3 clients as well, have not verified on 10.3.x clients yet. Have not seen one it doesn’t act up on when the AD plug-in is being used. No I have not send in a security bug. Can you direct me where?
Thanks
Bob

[Author]

Posts