Site Maintenance this evening The site will be offline for hosting changes. Time TBC

+ Post New Thread
Results 1 to 8 of 8
Mac Thread, "Active Directory time error" when binding OS X Server 10.5 to Active Directory in Technical; I've just received a bunch of new Apple gear and OS X server 10.5, and I am trying to join ...
  1. #1

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,680
    Thank Post
    516
    Thanked 2,451 Times in 1,897 Posts
    Blog Entries
    24
    Rep Power
    832

    "Active Directory time error" when binding OS X Server 10.5 to Active Directory

    I've just received a bunch of new Apple gear and OS X server 10.5, and I am trying to join it to the domain for authentication.

    I am in Directory Utility and have gone to the services screen and entered the domain. I click bind, enter the username and password, confirm the OU is correct and click OK.

    It then does a couple of stages (flashes through authenticating) and then pops up with an error 'Active Directory time error' 'Active Directory only permits sliight variations between clocks on your computer and on the Active Directory server. You should check the time and time zone settings on your computer and reset them if needed.'

    Now, I have checked the times on both, and they both pull their times from the same time server - so there is no difference. Both are set to british as the format for dates etc, and the time zone is set to GMT on both.

    What am I doing wrong?

  2. #2

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,680
    Thank Post
    516
    Thanked 2,451 Times in 1,897 Posts
    Blog Entries
    24
    Rep Power
    832
    Well, we now seem to have solved the issue. Even though the times were appearing the same, something odd was happening with the ntpd service on the os x server and shutting it down, then binding, then starting it up seems to have done the trick.

  3. #3

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    NTPD is fussy. If the time is too far off, it'll just shut down.

  4. #4
    AustenLowe
    Guest
    I got something going on just like this with a mac mini running 10.5, its very odd indeed, during the bind process to my domain, it accepts the password and fails at stage 5 complaining about the credentials, after checking the console its failing to rename the workstation.

    Entering incorrect credentials provides a different failure message, and the account is the domain administrator account.
    Last edited by AustenLowe; 17th January 2008 at 07:32 PM. Reason: diplexiplaa

  5. #5

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,680
    Thank Post
    516
    Thanked 2,451 Times in 1,897 Posts
    Blog Entries
    24
    Rep Power
    832
    Quote Originally Posted by AustenLowe View Post
    I got something going on just like this with a mac mini running 10.5, its very odd indeed, during the bind process to my domain, it accepts the password and fails at stage 5 complaining about the credentials, after checking the console its failing to rename the workstation.

    Entering incorrect credentials provides a different failure message, and the account is the domain administrator account.
    I seem to be getting this sometimes too. I solved it by creating the computer in the AD and using a different domain admin account.

  6. #6

    Join Date
    Jan 2008
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I have tried the suggestion regards the ntpd - but am still getting the AD time error.

    Anyone have any other ideas?

    Also, is there any way to add an internal windows time server to the used list of time servers on a Mac OSX 10.4machine? (Client and Server).

  7. #7

    Join Date
    May 2006
    Location
    West Bromwich
    Posts
    2,190
    Thank Post
    299
    Thanked 215 Times in 185 Posts
    Rep Power
    56
    Click in the box where it says time.euro.apple and then type in the Ip address.

  8. #8

    Join Date
    Jan 2008
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    great thanks - can't believe it was that simple!
    Any ideas about the AD time error? Only change from the above comments is that i am running 10.4.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 3
    Last Post: 6th October 2007, 10:30 AM
  2. Exchange Server 2007 and Active Directory
    By MarkB in forum Windows
    Replies: 7
    Last Post: 16th April 2007, 10:53 AM
  3. Windows 2003 server RIS active directory
    By StewartKnight in forum Windows
    Replies: 1
    Last Post: 27th February 2007, 03:23 PM
  4. Replies: 19
    Last Post: 10th August 2006, 09:12 AM
  5. Setting up test scenario on Server 2003/Active Directory/GPO
    By tosca925 in forum How do you do....it?
    Replies: 20
    Last Post: 24th January 2006, 11:38 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •