[tdassel]

Hello,

we also use a 10.4.3. server but have not experienced at similar behaviour ( yet ). We tried to integrate with 10.3..x a year ago and had that problem at that time, but since using 10.4. is has gone.
what does dscl localhost return when you try to ls your way through AD ? Any error messages ?

greetings

Thomas

[tdassel]

Hello,

with 10.4. you should get this to work. We couldn#t do it with 10.3. but with 10.4.3. Apple seems to have done a lot regarding AD integration.
It still depends on you AD though. We still have some issues ( read here ) Link to thread
and the home folders seem to be a constant case of trouble for a lot of users on this board.
Our AD is huge ( 50.000+ users ) and several sub domains, but we made it work, so in your case I would be pretty confident, that you can work it out.

Greetings

Thomas

[tdassel]

Hello,

some update on this one.
Despite the fact that being in more than 12 groups prevents the user to log in using the afp protocol ( smb works ! ) there also seem to be certain groups where the membership prevents the mounting of the network home folder via afp.
So if you have the same problem, perhaps it helps to remove all AD group memberships ( you can’t remove the default group ) and try to log on then. If this is successful simply add one group after the other to see if the log in still works and try to dig out which group(s) are the “bad” ones.
We are still trying to figure out what causes the bahaviour and will analyse the groups in question next.

Greetings

Thomas

[Author]

Posts