Directory Utility/Users can't log into their computers??!?!

Xserver version 10.5.8 is giving me a headache. Users reported that they could not log into their systems(iMacs). I double clicked on the login screen to find that all said and "Some Network Accounts Available" and other saying "No accounts available". So I logged into the server then to entered Server Admin. Open Directory was shown as running, which is what we want right. Next I entered the Utilities > Directory Utility. From there the "Local Server" was shown as running but the "Active Directory Server(Windows 2003 Server R2)" was not and had a red button label next to it. I checked the setup and everything was labeled as what it should be. I then rebooted the server. The Directory Utility now shows both the Local and Active Directory Server as running, green lights. I reboot a few iMacs and find that they all now still say "Some Network Accounts available". What could be the issue, i'm sure I hit all of the hot spots and they are active and even show in the "Workgroup Manager" utility with their account info. What should I do next to fix this issue.
corporateKeenanAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

SCCMCanuckOwnerCommented:
Please try and describe your environment more clearly.

Which servers are hosting particular services? ie DHCP, DNS. Are your OSX clients kerberized to the AD server? ie. Is AD handling your authentication or is Open Directory. All of these factors have a huge impact on what your particular solution might be.

From the information i feel i have been given so far it sounds like you are authenticating to Active Directory. If that is the case are all of your clients Clocks Set to sync to the IP address of the Active directory server? Also the OSX server should be set to sync to it as well. Provided that AD is handling your domain authentication?
0
SCCMCanuckOwnerCommented:
Also, Once you start to get a green directory services light across the board (ie all of your clients) ensure that you test logging on thoroughly, create 3 different test accounts. You may encounter an error message upon subsequent login / logouts. If that is the case there will be a file that you need to modify to ensure logons work correctly. I can post that info as well, however work on the green directory service ligth issue first.
0
corporateKeenanAuthor Commented:
Yes you are correct the XServe is authenticating to Active Directory on the Windows Server which is hosting the AD, DHCP, DNS and etc. None of the iMacs are kerberized to the Active Directory Server and they never have been. Another issue that I didn't note was that the XServe's HD was filling up rapidly because of some .ASL files that grew to 28gb. On instances when the OSX HD gets low these issues arise with users not being able to log in. I have copied the files to a external HD and Deleted them from the Server HD. Going back to the AD issue, everything is bound and running smoothly from the server side(green lights everywhere) but the clients are not getting the same response. Should I possibly try rebooting the AD server to see if Windows is hanging?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

SCCMCanuckOwnerCommented:
what are your clients pointing to for time?
0
SCCMCanuckOwnerCommented:
Also if you are not kerberizing to AD then i assume that OD is hosting your User Accounts. Am i correct in this assumption?

My main question is this, what are you using the xserver for? What services is it hosting that the windows server is not?
0
corporateKeenanAuthor Commented:
The clients are pointing to the XServe to sync their clocks. The XServes only purpose is to securely lock down Apple clients access to certain network directories and to give acces to only certain apps, host updates/image files and to obtain the user profiles from our Windows Server's AD and provide access when the correct. The only services that it is hosting that Windows is not offering is really only QuickTime streaming and Netboot. It really only serves as a gateway for our Macs to access network info by user profiles.
0
corporateKeenanAuthor Commented:
I'm also seeing that on the client pcs it is displaying that the "Open Directory Server is not responding"?
0
SCCMCanuckOwnerCommented:
Sounds exactly like the environment we run in many of our schools. I can tell you right now what the issue is and it is your clocks. If you sync the OSX server clock to the ip of your AD server followed by syncing your clients to the IP of the AD server, your problems will go away regarding some network accounts available and netwokr accounts not available. The reason you have to do this is because AD is responsible for your user accounts and your Authentication as a result. Also you really should be kerberizing your Open Directory server to AD, not sure i understand why you woldn't be.

Can you provide a screenshot of the "Open Directory Server is not responding"

Also, you can push the attached script through ARD to your clients to sync their clocks to the ip of your AD server. My recommendation would be that you attempt this on one machine first and test the crap out of it to ensure the time sync fix is your actual solution.

*Note: Modify the ip in the script to point to that of your AD server.
SetTimeServer.sh
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
corporateKeenanAuthor Commented:
Hey thanks for the script unfortunately my clocks were already pointing to the AD server. I really think that it is an issue with my Open Directory on XServe because each of my clients now have a green lights for the Active Directory Domain which is good they are bound but there is a red light for the Open Directory. I tried using the IP instead of the DNS Name to hopefully catch a break, it still didn't respond. So I will be posting some Print Screens from my Remote Desktops next.
0
corporateKeenanAuthor Commented:
Here are a few screen captures of the client and the Xserve configs.
ClientProblem.png
ClientMac.png
XServesDUgreenlights.png
XServeOD.png
XServeODBinding.png
XServeODauth.png
0
corporateKeenanAuthor Commented:
Found the solution, it was an ip address change on the server that the clients do not recognize. Is there a script that I can run in terminal that will update the IP address of the Xserve?
0
corporateKeenanAuthor Commented:
Nevermind the script I got the changes made to the ip and all is well now.
0
corporateKeenanAuthor Commented:
Good starting tip.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Databases

From novice to tech pro — start learning today.