Parallels Desktop 8 for Mac is lets you seamlessly run Windows and Mac applications side-by-side

Login | Register

Post new topic Reply to topic  [ 4 posts ] 

Mon Dec 06, 2010 6:30 am

Offline
Joined: Mon Dec 06, 2010 6:00 am
Posts: 3

On a recently built OSX 10.6 machine user has reported that AD password expired.

We (IT) have changed the password in Active Directory Users and Computers.

Now the user reports that when screensaver comes on he is unable to unlock with the password.

It does unlock when we unplug the network cable.

Suggests to me it is disagreeing with the Domain controller for some reason?

Domain controller and DNS has been checked and passed by the team that manage Domain Controllers.



Top Top
  Profile

Mon Dec 06, 2010 11:10 pm

Offline
Site Admin
Joined: Wed May 12, 2010 7:45 pm
Posts: 179

We've had reports of this before, which are posted on our Snow Leopard and Active Directory Tips and Reports page. There is also an article on that page with a solution from Apple:

http://www.macwindows.com/snowleopardAD.html#040210g

Let us know if this is helpful.

_________________
John Rizzo
MacWindows.com



Top Top
  Profile

Tue Dec 07, 2010 11:34 am

Offline
Joined: Mon Dec 06, 2010 6:00 am
Posts: 3

Thanks SO much for the tip.

It is as if the system is using the last cached credentials in preference to the AD credentials.

This was on a machine that was seemingly fine.

I am getting some users that are getting a problem that prevents them from logging on.

Basically this manifests itself in two ways:

i) The user is logged-in, the screensaver kicks-in and their AD Password does not work to let them back in. If they disconnect the network cable and use a password then they can get back in.

ii) The machine will not let them log in at start-up. This seems to follow an AD password change. Local accounts still work, other never-tried-before AD accounts work and create the mobile folders.

I think this problem is related to this problem here http://support.apple.com/kb/TS3287

However I am unable to edit the file on the effected machine as the permissions seems to be buggered.

Just wondered if you had seen this kind of thing before or had any inkling of what may be going on ?

It is as if the system is using the last cached credentials in preference to the AD credentials.



Top Top
  Profile

Tue Jan 25, 2011 12:35 pm

Offline
Joined: Tue Jan 25, 2011 12:13 pm
Posts: 1

Use either of the following command in terminal to edit the authorization file with elevated permissions:

sudo /Developer/Applications/Utilities/Property\ List\ Editor.app/Contents/MacOS/Property\ List\ Editor /etc/authorization

OR

sudo /Applications/TextEdit.app/Contents/MacOS/TextEdit /etc/authorization



Top Top
  Profile
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

All times are UTC - 8 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum


Search for:
Jump to:  
cron

OS X Mountain Lion Server for Dummies
By John Rizzo

Simplifies the installation, configuration, and management of Apple's OS X Server software. Support Mac and Windows clients for file sharing, email, and directory services; Install software to your iOS devices and Macs. Incorporate a Mac subnet into a Windows Active Directory domain, manage Mac and Windows clients, and configure security options, and more. Click here for more.

Serving the cross-platform community since November 15, 1997. Copyright 2010-2013 John Rizzo. All rights reserved.
Powered by phpBB