Kevin Hill has a strange Active Directory problem with Mac OS X 10.6.8 using JAMF Software's Casper. Everything was fine until students in his school could no longer log on to their own Macs (using Active Directory credentials) -- but they can log into other Macs. Hill reports:
Infrastructure Details (All machines started at 10.6.7 and have been updated to 10.6.8)
- Windows 2008 PDC running AD, DHCP, DNS.
- Xserve _ 10.6.8 not running Open Directory, strictly passing AD credentials.
- 150 - 13" Intel MacBooks running 10.6.8
- 30 - 13" Intel MacBook Pros running 10.6.8
- Students connect wireless via Cisco AP's.
- Macs are bound to AD via script from Casper.
- Students/Teachers login to Macs using AD credentials. Teachers are administrators of their machines students are not.
- Mac server serves as SUS.
- Students/Teachers login to their assigned Mac (they take them home with them) via AD credentials
- Macs are set up for mobile accounts so they can login in off network.
- Login window is imaged to list of users.
- I logged in each student the first time into their mac, so their name would be in the list. Admin , John Student, Other.
About 10 days ago a login issue began.
Students' name was no longer on the login screen. When the student selected other and put in their credentials the window shook. So, student A could not login to MacBook A. But student A could login to MacBook B. Student A can login to any other computer in the domain with A's credentials. Student B can login into Macbook A. Student A's folder is still in the user folder. I log in as admin and go to add account. I use Student A's name and credentials, it says account already exists. So the account is there they just can't login to their account.
Things I have done that didn't help.
- Un-bound, re-bound.
- Checked for valid IP.
- Checked to make sure no DNS/DHCP issue for computer or IP.
This has happened to 18 of the 150 MacBooks. I re-imaged them and have handed them back to the same student. Wondering if this will happen to all 150 and how many times each.
If you've seen this problem
.
