Solved

Magic Triangle authentication priority

Posted on 2013-12-26
5
70 Views
Last Modified: 2015-06-22
Hi all,

We implemented the Magic Triangle to our 2k8 AD domain and Mac Mini server. We have this scenario:

1. The Mac OS X server went down.
2. AD is still up for authentication and file sharing.

When that happen, majority of the AD users on their Mac Pro clients weren't able to login using their AD account even though AD DC is up. I've changed the authentication priority to have AD on top of /LDAPv3/OD in Directory Utility. There must be some other settings I need to change?

Can someone please advise if something is needed to be configured to allow AD users able to login at all time when OD is down?

Thanks.
0
Comment
Question by:AVTechMIS
  • 3
  • 2
5 Comments
 

Author Comment

by:AVTechMIS
ID: 39741551
Just want to add if I remove OD from the authentication list then AD users would get logged in without much delay. I don't know what side effect it would cause but at least users can log in when OD is down.
0
 
LVL 32

Expert Comment

by:nappy_d
ID: 39743058
Where do you store the user home folders?  Are locally cached or do they depend on a share located on a mac Server?

Also, did you create your users in AD and OD?
0
 

Accepted Solution

by:
AVTechMIS earned 0 total points
ID: 39750263
AD User home folders are locally cached, mac clients are not using Server to store their profiles.

We don't have any OD users in the environments, only AD Users.
0
 
LVL 32

Expert Comment

by:nappy_d
ID: 39750634
Can you post a screenshot of your Directory Plugin and settings?
0
 

Author Closing Comment

by:AVTechMIS
ID: 40843098
MAC AD authentication issue - upgraded OS
0

Featured Post

Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The /etc/authorization file in Mac OS X 10.x can be used to control access to the various panes of the System Preferences amongst other things. It’s used by some of us Mac Sys Admin’s to give Standard Users access to System Prefs panes that only adm…
iCloud Drive was introduced after iOS 8 was launched last year. This drive is Apple’s online storage device that lets users sync their files and access them from all their Apple devices.   There is a lot of data that is not automatically backed up…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question