Authentication issue for MAC workstation

MAC users has problem authenticated through AD server. DNS has been release to MAC workstation with one ip for AD DC server and the other is the OD (Open directory).

The MAC workstation reports that they can't login to the network. What can I check (on OD server and MACbook) ? I'm new to MAC OS environment but there is a Open directory server setup here.

Tks
AXISHKAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

serialbandCommented:
Are you authenticating to AD or OD?  You should be setting up the workstation to authenticate to AD and use OD for configuration only.  You'll have to disable Kerberos on the Mac so that OD doesn't interfere with the authentication.

https://it.uoregon.edu/Magic-Triangle-setup
0
AXISHKAuthor Commented:
I'm thinking of missing the my window domain on the OD server. I only add some machine record under DNS. How to add a domain record on the DNS  ?

Tks
0
serialbandCommented:
Are you doing DNS on Windows?  If you've set up AD and DNS correctly, and joined your mac to AD, then your DNS should automatically load on your Windows server.  If you want a fixed IP or fixed DHCP then you should edit the entries on your DNS and DHCP servers.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

AXISHKAuthor Commented:
Two Window DC with DNS have been setup and MacBook can be authenticated if the DNS is using Window DNS.

We have also setup Server OSX and input the DNS record. We want to use it to offline the window DNS.

However, if the Server OSX has been leased to a workstation (either MAC or window), it can't be authenticated. It seems that some wrong has been setup.

Can a DNS in Server OSX be used for DNS and user authentication. If a workstation just lease the DNS of Server OSX, can Server OSX redirect the authentication to DC for authentication, and use the DNS created in OSX to response to the domain DNS request ?

Tks again.
0
serialbandCommented:
If you want automatic DNS registration while using AD, you need to have Windows DNS.  I'm not completely clear on what you want.
0
AXISHKAuthor Commented:
My current company has setup two Server OSX , in addition to the 2 Window DNS. These 4 DNS servers have been leased to window or mac workstations through DHCP

Can Server OSX do the domain authentication and DNS resolution to reduce the workload of Window DNS server ?  I find that workstation leasing DNS of Server OSX can't be resolved successfully.

My target object is to add Server OSX to perform the similar role as 2 Window DC for DNS and authentication. Is it achievable ? Tks
0
serialbandCommented:
If you do that, then you'll have separate naming domains.  If you want a single sign on server, you should just authenticate through AD.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
AXISHKAuthor Commented:
Tks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Apple OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.