[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

Binding problems in Mac OSX

Posted on 2008-01-30
12
Medium Priority
?
805 Views
Last Modified: 2008-06-01
Hi.

I have a Windows 2003 environment... in my lan, i have two MacOSx boxes (one with Leopard, the other with the previous OS... I think is Tiger).

Until yesterday, all my Macs were working flawless, but for some unknown reason, the Tiger Mac lost the binding with Active Directory yesterday and all connection with my server (Server01).

If i try to connect to a Server01 share (smb://server01/share), Mac returns me an error telling me that "the login and password were incorrect", but the connection never asks me for any login information... i tried erasing all the entries in my keychain, but up to now, it has been useless; if i try to access to my server using Finder/Network, my server doesn't appear.

Now, when i try to bind this computer to Active Directory (my active directory name is server01.mydomain.com), the process freezes in the 5th step and after a lot of time, it tells me that "an unknown error was detected".

If I ping my server, it answers me, so i think it's not a network problem.

What can i do?

Thank you

(By the way, i'm not a Mac OS expert, so if you can answer me a procedure step by step, it would be appreciated)
0
Comment
Question by:kalvillo
  • 3
  • 3
  • 2
  • +3
12 Comments
 
LVL 53

Expert Comment

by:strung
ID: 20777444
0
 
LVL 2

Expert Comment

by:tgunnr
ID: 20777642
Known problem on the Leopard server, only solution right now is to stop and start the AFP/SMB file server. Fixed in 10.5.2 I am told.
0
 
LVL 53

Expert Comment

by:strung
ID: 20777887
True, but Kalvillo says his problem is binding a Tiger Mac to a Windows 2003 server, unless I misread the initial post.
0
Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

 
LVL 10

Expert Comment

by:Darylx
ID: 20777911
Check the system time on the OSX box.  If it is more than 5 mins out from the domain controller, you'll lose access.
0
 

Author Comment

by:kalvillo
ID: 20778973
I checked the system time... that's not the problem.

strung> apparently, your solution is what i need, but the procedure that you shared with me is not very clear... do you have a more specific procedure?
0
 
LVL 53

Expert Comment

by:strung
ID: 20778998
I don't, I am afraid.  
0
 
LVL 9

Expert Comment

by:heteronymous
ID: 20804445
On your Mac client machine, try setting aside
/etc/krb5.conf
/Library/Preferences/edu.mit.Kerberos
and if it exists,  
/etc/krb5.keytab
and if it exists,
/Users/<yourusernamehere>/Library/Preferences/edu.mit.Kerberos

and then re-binding the client.

You might also want to read
http://web.mit.edu/macdev/KfM/Common/Documentation/preferences-osx.html
0
 
LVL 32

Expert Comment

by:nappy_d
ID: 20826104
Before you delete your Kerberos preferences have your tried this...

go in to /System/Library/Core Services ad launch the Kerberos Application.  

Click on new and acquire a new kerberos ticket for your AD domain.
0
 
LVL 9

Expert Comment

by:heteronymous
ID: 20826815
A good thing to try, but my point was to *set aside* those files not delete them.
A bad file or one with incorrect info could still prevent getting a new/proper ticket, so the step of putting aside the files may still be necessary.
0
 

Accepted Solution

by:
kalvillo earned 0 total points
ID: 21053307
i'd tried everything.. i even formatted the Mac box and i'm having the same binding problems... i guess the problem is on the server side, but i don't know what to fix there, because all the other PCs (i even have one Mac OS X Leopard box working without an issue).

What i need to do?, i hope you can help me
0
 
LVL 10

Expert Comment

by:Darylx
ID: 21058585
It's more likely to be a Tiger problem than a server problem.   Tiger broke a lot of things that worked perfectly well in Panther (10.3).  If no one can come up with a fix, one solution could be to put Panther on it.
0
 
LVL 9

Expert Comment

by:heteronymous
ID: 21060018
Well, Tiger fixed alot of things that never worked right or easily or reliably in Panther ;)
*Especially* Active Directory binding. In a big way.

First, try deleting the computer account for the Mac OS X Client machine (and/or the server if you can't bind it still), then unbind via the Directory Access tool (yes, still "unbind"), and then rebind via that tool.

On the client, you might also want to try (in the Terminal):
dscacheutil -flushcache

and try rebinding.


Also, DNS is critical here. If you've done a fresh install of 10.4 (with all updates) and can't bind a client to your AD, then it's really quite probably *not* a Mac OS X issue.

Are you putting anything in the "search domain" field in System Preferences > Network > Built-In Ethernet (or, whatever name is assigned to the LAN port) ?

What's the name of the server you're trying to bind to ?
Can you resolve its FQDN from Mac OS X via: dig fqdn.youradserver.com  
and
dig -x ip.address.ofserver


If clients are also bound to your OD Master (OS X Server) you might want to see
http://docs.info.apple.com/article.html?artnum=300765 
0

Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article outlines the struggles that Macs encounter in Windows-dominated workplace environments – and what Mac users can do to improve their network connectivity and remain productive.
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

607 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question