A single AD user can't log into a single Mac bound to the domain (DirectoryServices error). How can I resolve this?OSX automatic login disabled, cannot re-enableLDAP authentication … Log in fail on the LDAP clientServer 2003: How can the administrator login as another user?rules for usernames in windows domainWhy is Mac OSX Lion losing login/network credentials?Why can't this user connect to domain share?You are unable to log in to the user account “user_name” at this timeWhy are my Macs failing to authenticate to my SAMBA file sharing server?How do I make it as if I've never logged into a workstation with a Domain AD user profile?Set Windows share as network home for AD-joined Mac users
Multi tool use
Who was this character from the Tomb of Annihilation adventure before they became a monster?
What is Plautus’s pun about frustum and frustrum?
Usefulness of complex chord names?
On studying Computer Science vs. Software Engineering to become a proficient coder
How can this pool heater gas line be disconnected?
Make all the squares explode
Why doesn't Rocket Lab use a solid stage?
Understanding integration over Orthogonal Group
Why is this int array not passed as an object vararg array?
What's special about a Bunsen burner?
What are the components of a legend (in the sense of a tale, not a figure legend)?
What's the word for the soldier salute?
How did Thanos not realise this had happened at the end of Endgame?
How to slow yourself down (for playing nice with others)
Proof that the inverse image of a single element is a discrete space
Plastic-on-plastic lubricant that wont leave a residue?
When a land becomes a creature, is it untapped?
Smallest Guaranteed hash collision cycle length
Is it a bad idea to replace pull-up resistors with hard pull-ups?
How to minimise the cost of guessing a number in a high/low guess game?
Why do Thanos's punches not kill Captain America or at least cause some mortal injuries?
Why was Endgame Thanos so different than Infinity War Thanos?
Size of a folder with du
Do atomic orbitals "pulse" in time?
A single AD user can't log into a single Mac bound to the domain (DirectoryServices error). How can I resolve this?
OSX automatic login disabled, cannot re-enableLDAP authentication … Log in fail on the LDAP clientServer 2003: How can the administrator login as another user?rules for usernames in windows domainWhy is Mac OSX Lion losing login/network credentials?Why can't this user connect to domain share?You are unable to log in to the user account “user_name” at this timeWhy are my Macs failing to authenticate to my SAMBA file sharing server?How do I make it as if I've never logged into a workstation with a Domain AD user profile?Set Windows share as network home for AD-joined Mac users
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly.
However, we have one particular user who is unable to log in to just some of the Macs. He has no problem with most of them, but there is one group of them (all built from the same image) that he can't log in to. The machine in question is running OS X 10.6.2. The relevant entries from secure.log are below, with the hostname and username redacted.
Aug 16 10:32:43 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:43 hostname SecurityAgent[4411]: Will sleep 1 seconds and try again (retryCount = 4)
Aug 16 10:32:44 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:44 hostname SecurityAgent[4411]: Will sleep 2 seconds and try again (retryCount = 3)
Aug 16 10:32:46 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:46 hostname SecurityAgent[4411]: Will sleep 4 seconds and try again (retryCount = 2)
Aug 16 10:33:10 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:33:10 hostname SecurityAgent[4411]: Will sleep 8 seconds and try again (retryCount = 1)
Aug 16 10:33:18 hostname SecurityAgent[4411]: User info context values set for username
Aug 16 10:33:18 hostname SecurityAgent[4411]: unknown-user (username) login attempt PASSED for auditing
Everything I've found online suggests that our use of Mobile Accounts is causing the issue. I turned that feature off, but I still can't log in as that user.
id returns a record for his account, and nothing looks out of the ordinary.
Has anyone here run into this before?
active-directory mac-osx authentication login
asked Aug 20 '10 at 13:39
Ben WyattBen Wyatt
2461411
add a comment |
On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly.
However, we have one particular user who is unable to log in to just some of the Macs. He has no problem with most of them, but there is one group of them (all built from the same image) that he can't log in to. The machine in question is running OS X 10.6.2. The relevant entries from secure.log are below, with the hostname and username redacted.
Aug 16 10:32:43 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:43 hostname SecurityAgent[4411]: Will sleep 1 seconds and try again (retryCount = 4)
Aug 16 10:32:44 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:44 hostname SecurityAgent[4411]: Will sleep 2 seconds and try again (retryCount = 3)
Aug 16 10:32:46 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:46 hostname SecurityAgent[4411]: Will sleep 4 seconds and try again (retryCount = 2)
Aug 16 10:33:10 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:33:10 hostname SecurityAgent[4411]: Will sleep 8 seconds and try again (retryCount = 1)
Aug 16 10:33:18 hostname SecurityAgent[4411]: User info context values set for username
Aug 16 10:33:18 hostname SecurityAgent[4411]: unknown-user (username) login attempt PASSED for auditing
Everything I've found online suggests that our use of Mobile Accounts is causing the issue. I turned that feature off, but I still can't log in as that user.
id returns a record for his account, and nothing looks out of the ordinary.
Has anyone here run into this before?
active-directory mac-osx authentication login
asked Aug 20 '10 at 13:39
Ben WyattBen Wyatt
2461411
1
upgrade it to a PC ;)
– JamesRyan
Sep 1 '13 at 23:56
Can other users log in to those workstations? What if you create a new user on your domain, can you log in with that? Can that user log in to other workstations?
– Canadian Luke
Mar 4 '14 at 18:50
Luke, I asked this question in August 2010. I don't exactly recall what I did to resolve the issue, but I believe it had something to do with his home directory attribute in Active Directory being an invalid path.
– Ben Wyatt
Mar 4 '14 at 20:52
add a comment |
On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly.
However, we have one particular user who is unable to log in to just some of the Macs. He has no problem with most of them, but there is one group of them (all built from the same image) that he can't log in to. The machine in question is running OS X 10.6.2. The relevant entries from secure.log are below, with the hostname and username redacted.
Aug 16 10:32:43 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:43 hostname SecurityAgent[4411]: Will sleep 1 seconds and try again (retryCount = 4)
Aug 16 10:32:44 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:44 hostname SecurityAgent[4411]: Will sleep 2 seconds and try again (retryCount = 3)
Aug 16 10:32:46 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:46 hostname SecurityAgent[4411]: Will sleep 4 seconds and try again (retryCount = 2)
Aug 16 10:33:10 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:33:10 hostname SecurityAgent[4411]: Will sleep 8 seconds and try again (retryCount = 1)
Aug 16 10:33:18 hostname SecurityAgent[4411]: User info context values set for username
Aug 16 10:33:18 hostname SecurityAgent[4411]: unknown-user (username) login attempt PASSED for auditing
Everything I've found online suggests that our use of Mobile Accounts is causing the issue. I turned that feature off, but I still can't log in as that user.
id returns a record for his account, and nothing looks out of the ordinary.
Has anyone here run into this before?
active-directory mac-osx authentication login
asked Aug 20 '10 at 13:39
Ben WyattBen Wyatt
2461411
On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly.
However, we have one particular user who is unable to log in to just some of the Macs. He has no problem with most of them, but there is one group of them (all built from the same image) that he can't log in to. The machine in question is running OS X 10.6.2. The relevant entries from secure.log are below, with the hostname and username redacted.
Aug 16 10:32:43 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:43 hostname SecurityAgent[4411]: Will sleep 1 seconds and try again (retryCount = 4)
Aug 16 10:32:44 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:44 hostname SecurityAgent[4411]: Will sleep 2 seconds and try again (retryCount = 3)
Aug 16 10:32:46 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:46 hostname SecurityAgent[4411]: Will sleep 4 seconds and try again (retryCount = 2)
Aug 16 10:33:10 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:33:10 hostname SecurityAgent[4411]: Will sleep 8 seconds and try again (retryCount = 1)
Aug 16 10:33:18 hostname SecurityAgent[4411]: User info context values set for username
Aug 16 10:33:18 hostname SecurityAgent[4411]: unknown-user (username) login attempt PASSED for auditing
Everything I've found online suggests that our use of Mobile Accounts is causing the issue. I turned that feature off, but I still can't log in as that user.
id returns a record for his account, and nothing looks out of the ordinary.
Has anyone here run into this before?
active-directory mac-osx authentication login
active-directory mac-osx authentication login
asked Aug 20 '10 at 13:39
Ben WyattBen Wyatt
2461411
asked Aug 20 '10 at 13:39
Ben WyattBen Wyatt
2461411
asked Aug 20 '10 at 13:39
Ben WyattBen Wyatt
2461411
asked Aug 20 '10 at 13:39
Ben WyattBen Wyatt
2461411
asked Aug 20 '10 at 13:39
Ben WyattBen Wyatt
2461411
2461411
1
upgrade it to a PC ;)
– JamesRyan
Sep 1 '13 at 23:56
Can other users log in to those workstations? What if you create a new user on your domain, can you log in with that? Can that user log in to other workstations?
– Canadian Luke
Mar 4 '14 at 18:50
Luke, I asked this question in August 2010. I don't exactly recall what I did to resolve the issue, but I believe it had something to do with his home directory attribute in Active Directory being an invalid path.
– Ben Wyatt
Mar 4 '14 at 20:52
add a comment |
1
upgrade it to a PC ;)
– JamesRyan
Sep 1 '13 at 23:56
Can other users log in to those workstations? What if you create a new user on your domain, can you log in with that? Can that user log in to other workstations?
– Canadian Luke
Mar 4 '14 at 18:50
Luke, I asked this question in August 2010. I don't exactly recall what I did to resolve the issue, but I believe it had something to do with his home directory attribute in Active Directory being an invalid path.
– Ben Wyatt
Mar 4 '14 at 20:52
1
1
upgrade it to a PC ;)
– JamesRyan
Sep 1 '13 at 23:56
upgrade it to a PC ;)
– JamesRyan
Sep 1 '13 at 23:56
Can other users log in to those workstations? What if you create a new user on your domain, can you log in with that? Can that user log in to other workstations?
– Canadian Luke
Mar 4 '14 at 18:50
Can other users log in to those workstations? What if you create a new user on your domain, can you log in with that? Can that user log in to other workstations?
– Canadian Luke
Mar 4 '14 at 18:50
Luke, I asked this question in August 2010. I don't exactly recall what I did to resolve the issue, but I believe it had something to do with his home directory attribute in Active Directory being an invalid path.
– Ben Wyatt
Mar 4 '14 at 20:52
Luke, I asked this question in August 2010. I don't exactly recall what I did to resolve the issue, but I believe it had something to do with his home directory attribute in Active Directory being an invalid path.
– Ben Wyatt
Mar 4 '14 at 20:52
add a comment |
2 Answers
2
active
oldest
votes
Have you inspected his user record on the AD side of things? I would guess that there's something in his record that DirectoryServices is crapping out on
answered Aug 20 '10 at 13:52
Josh BuddeJosh Budde
2,343127
His account looks normal. He can log in to every one of our online systems (OWA, etc.) as well as every PC and most of the Macs. The only thing that was different was the primary group, which was set to faculty instead of Domain Users. I've since switched it to Domain Users.
– Ben Wyatt
Aug 20 '10 at 13:57
add a comment |
It is most likely because there was a conflicting local user account by the same name created at some point. Have you turned off mobile accounts and tried to log in without that feature? Also, I would unbind and then re-bind any of the problem images from the domain, restart, and then try again.
answered Dec 9 '17 at 7:25
oemb1905oemb1905
1012
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f172740%2fa-single-ad-user-cant-log-into-a-single-mac-bound-to-the-domain-directoryservi%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
Have you inspected his user record on the AD side of things? I would guess that there's something in his record that DirectoryServices is crapping out on
answered Aug 20 '10 at 13:52
Josh BuddeJosh Budde
2,343127
His account looks normal. He can log in to every one of our online systems (OWA, etc.) as well as every PC and most of the Macs. The only thing that was different was the primary group, which was set to faculty instead of Domain Users. I've since switched it to Domain Users.
– Ben Wyatt
Aug 20 '10 at 13:57
add a comment |
Have you inspected his user record on the AD side of things? I would guess that there's something in his record that DirectoryServices is crapping out on
answered Aug 20 '10 at 13:52
Josh BuddeJosh Budde
2,343127
His account looks normal. He can log in to every one of our online systems (OWA, etc.) as well as every PC and most of the Macs. The only thing that was different was the primary group, which was set to faculty instead of Domain Users. I've since switched it to Domain Users.
– Ben Wyatt
Aug 20 '10 at 13:57
add a comment |
Have you inspected his user record on the AD side of things? I would guess that there's something in his record that DirectoryServices is crapping out on
answered Aug 20 '10 at 13:52
Josh BuddeJosh Budde
2,343127
Have you inspected his user record on the AD side of things? I would guess that there's something in his record that DirectoryServices is crapping out on
answered Aug 20 '10 at 13:52
Josh BuddeJosh Budde
2,343127
answered Aug 20 '10 at 13:52
Josh BuddeJosh Budde
2,343127
answered Aug 20 '10 at 13:52
Josh BuddeJosh Budde
2,343127
answered Aug 20 '10 at 13:52
Josh BuddeJosh Budde
2,343127
2,343127
His account looks normal. He can log in to every one of our online systems (OWA, etc.) as well as every PC and most of the Macs. The only thing that was different was the primary group, which was set to faculty instead of Domain Users. I've since switched it to Domain Users.
– Ben Wyatt
Aug 20 '10 at 13:57
add a comment |
His account looks normal. He can log in to every one of our online systems (OWA, etc.) as well as every PC and most of the Macs. The only thing that was different was the primary group, which was set to faculty instead of Domain Users. I've since switched it to Domain Users.
– Ben Wyatt
Aug 20 '10 at 13:57
His account looks normal. He can log in to every one of our online systems (OWA, etc.) as well as every PC and most of the Macs. The only thing that was different was the primary group, which was set to faculty instead of Domain Users. I've since switched it to Domain Users.
– Ben Wyatt
Aug 20 '10 at 13:57
His account looks normal. He can log in to every one of our online systems (OWA, etc.) as well as every PC and most of the Macs. The only thing that was different was the primary group, which was set to faculty instead of Domain Users. I've since switched it to Domain Users.
– Ben Wyatt
Aug 20 '10 at 13:57
add a comment |
It is most likely because there was a conflicting local user account by the same name created at some point. Have you turned off mobile accounts and tried to log in without that feature? Also, I would unbind and then re-bind any of the problem images from the domain, restart, and then try again.
answered Dec 9 '17 at 7:25
oemb1905oemb1905
1012
add a comment |
It is most likely because there was a conflicting local user account by the same name created at some point. Have you turned off mobile accounts and tried to log in without that feature? Also, I would unbind and then re-bind any of the problem images from the domain, restart, and then try again.
answered Dec 9 '17 at 7:25
oemb1905oemb1905
1012
add a comment |
It is most likely because there was a conflicting local user account by the same name created at some point. Have you turned off mobile accounts and tried to log in without that feature? Also, I would unbind and then re-bind any of the problem images from the domain, restart, and then try again.
answered Dec 9 '17 at 7:25
oemb1905oemb1905
1012
It is most likely because there was a conflicting local user account by the same name created at some point. Have you turned off mobile accounts and tried to log in without that feature? Also, I would unbind and then re-bind any of the problem images from the domain, restart, and then try again.
answered Dec 9 '17 at 7:25
oemb1905oemb1905
1012
answered Dec 9 '17 at 7:25
oemb1905oemb1905
1012
answered Dec 9 '17 at 7:25
oemb1905oemb1905
1012
answered Dec 9 '17 at 7:25
oemb1905oemb1905
1012
1012
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f172740%2fa-single-ad-user-cant-log-into-a-single-mac-bound-to-the-domain-directoryservi%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
ub79a9Z5MlxuEP9W0jUkmZjURZRgfKXE8wXETTUZyQ9j58NI,wq z m5BQHtSZmnCW,tR,OdPeomTFh A
1
upgrade it to a PC ;)
– JamesRyan
Sep 1 '13 at 23:56
Can other users log in to those workstations? What if you create a new user on your domain, can you log in with that? Can that user log in to other workstations?
– Canadian Luke
Mar 4 '14 at 18:50
Luke, I asked this question in August 2010. I don't exactly recall what I did to resolve the issue, but I believe it had something to do with his home directory attribute in Active Directory being an invalid path.
– Ben Wyatt
Mar 4 '14 at 20:52