+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 16
Mac Thread, Issues with student logging in in Technical; A number of our students are having issues logging onto our 10.6.8 iMacs We are an RM CC4.3 network with ...
  1. #1
    mellowip1983's Avatar
    Join Date
    Sep 2011
    Location
    Wirral
    Posts
    69
    Thank Post
    2
    Thanked 8 Times in 7 Posts
    Rep Power
    7

    Issues with student logging in

    A number of our students are having issues logging onto our 10.6.8 iMacs

    We are an RM CC4.3 network with windows server 2008 R2.

    Users struggle with logging on to the Macs, come see us, we log them on to a PC successfully, then can log into macs.

    Has anyone else encountered trouble with AD auth on macs?

  2. #2
    stevenwba's Avatar
    Join Date
    Aug 2009
    Location
    Dudley
    Posts
    323
    Thank Post
    110
    Thanked 16 Times in 11 Posts
    Rep Power
    12
    Were on an rm cc4 network also, using the unmanaged mac script, but on macbooks only with no problems, are you getting no errors at all?

  3. #3
    mellowip1983's Avatar
    Join Date
    Sep 2011
    Location
    Wirral
    Posts
    69
    Thank Post
    2
    Thanked 8 Times in 7 Posts
    Rep Power
    7
    we have a couple of different issues with them. Sometimes the login box responds "could not log you on at this time" even when directory status shows green, a reset of the password normally resolves this.

    The other the login box just shakes rejecting the username/password combo. When this happens the users can still log in to a windows machine but again resetting password will resolve it.

    i am wondering if it is unhappy the users are not in the OD but the AD. almost as if it is looking to OD over AD

  4. #4
    round2it's Avatar
    Join Date
    May 2009
    Location
    UK
    Posts
    992
    Thank Post
    193
    Thanked 143 Times in 101 Posts
    Rep Power
    36
    make sure the time is synced to your DC this is the number one cause of failed logins here
    goto the time preferences and put your dc name in and lock the settings
    not had any problems so far 2 months since the install.

  5. #5

    Join Date
    Jan 2007
    Location
    The Console
    Posts
    236
    Thank Post
    22
    Thanked 29 Times in 23 Posts
    Rep Power
    22
    What is your set up - just Mac clients authenticating to AD? What's your setup in directory utility? Is your DNS water-tight? What does your Mac's system log say?

  6. #6
    mellowip1983's Avatar
    Join Date
    Sep 2011
    Location
    Wirral
    Posts
    69
    Thank Post
    2
    Thanked 8 Times in 7 Posts
    Rep Power
    7
    round2it - thanks for that suggestion, have set it on the teachers machine, will test how he gets on in the morning. The initial time server was set to our OD server rather than the AD.

    iSteve - setup is 25 x iMacs running 10.6.8. Mac Pro server running 10.7.1 with server components installed. 2008R2 RM CC4 Windows AD holding user data. Machines are bound to OD and we configure settings using WGM. Machines are also bound to AD and all our user accounts are there. network was setup by RM so should be 'Magic Triangle' only user data OD knows about are the teachers, students and sysadmin groups from AD that have OD groups assigned.

  7. #7
    stevenwba's Avatar
    Join Date
    Aug 2009
    Location
    Dudley
    Posts
    323
    Thank Post
    110
    Thanked 16 Times in 11 Posts
    Rep Power
    12
    sorry mellowip for the late reply, while setting up, i did experience login problems due to time settings, but do exactly what round2it said, and its been working perfectly ever since, let us know how you get on

  8. #8
    mellowip1983's Avatar
    Join Date
    Sep 2011
    Location
    Wirral
    Posts
    69
    Thank Post
    2
    Thanked 8 Times in 7 Posts
    Rep Power
    7
    Just been having a look at the configuration, the iMacs are configured to sync to the Mac server, which in turn is set to sync to the AD Forrest Root, so in a round about way they were configured to. will keep an eye on and update the post with feedback from teachers.

  9. #9
    mellowip1983's Avatar
    Join Date
    Sep 2011
    Location
    Wirral
    Posts
    69
    Thank Post
    2
    Thanked 8 Times in 7 Posts
    Rep Power
    7
    Just been called into the mac room as the teacher couldn't log in. attempted to use my AD credentials to log in but couldn't, logged into it using local admin fine, time is in sync with AD server. Tried resetting my password, still didn't let me in.

    Went to Directory Utility and unticked the OD connection, rebooted computer and could log in fine. re activated the OD binding, rebooted again rejected. so have turned off for now and the teacher can log in using AD credentials, just doesn't get the drive maps the mac server should give. or restrictions

  10. #10

    Join Date
    Jun 2009
    Location
    Watford
    Posts
    876
    Thank Post
    381
    Thanked 114 Times in 73 Posts
    Rep Power
    62
    We had all sorts of issues trying to bind AD to our X-Serve we ended breaking the link and making each mac a stand alone with a local generic pupil log in with a mapped network drive.

  11. #11
    stevenwba's Avatar
    Join Date
    Aug 2009
    Location
    Dudley
    Posts
    323
    Thank Post
    110
    Thanked 16 Times in 11 Posts
    Rep Power
    12
    Quote Originally Posted by mellowip1983 View Post
    Just been called into the mac room as the teacher couldn't log in. attempted to use my AD credentials to log in but couldn't, logged into it using local admin fine, time is in sync with AD server. Tried resetting my password, still didn't let me in.

    Went to Directory Utility and unticked the OD connection, rebooted computer and could log in fine. re activated the OD binding, rebooted again rejected. so have turned off for now and the teacher can log in using AD credentials, just doesn't get the drive maps the mac server should give. or restrictions
    Sounds like when they are bound to the mac server, they ignore the fact you have added AD as an accounts server, not finding the accounts in od, so giving up altogether.

    Seen as though you have removed the OD bind, try removing the ad one as well, then readding both. I had one macbook that done this, and removing both the OD & AD account servers in directory utility and then readding solved the issue.

  12. #12
    dayzd's Avatar
    Join Date
    Nov 2009
    Location
    In front of computer
    Posts
    405
    Thank Post
    75
    Thanked 59 Times in 48 Posts
    Rep Power
    24
    I don't remember if it still makes a difference, but I'm sure in 10.5 it mattered which came first -AD or OD- in your directory search path.

    Might it be worth swapping them on one of the clients and seeing if that helps?

  13. #13
    mellowip1983's Avatar
    Join Date
    Sep 2011
    Location
    Wirral
    Posts
    69
    Thank Post
    2
    Thanked 8 Times in 7 Posts
    Rep Power
    7
    Just been to check the search policy on the machine that is having the issues and here is a capture of the search order, to the best of my knowledge on top first search item???

    ADODSearchPolicy.png

    for now have turned OD back on again and after lessons will reboot the machine see if log in issues still remain.

  14. #14
    stevenwba's Avatar
    Join Date
    Aug 2009
    Location
    Dudley
    Posts
    323
    Thank Post
    110
    Thanked 16 Times in 11 Posts
    Rep Power
    12
    Quote Originally Posted by mellowip1983 View Post
    Just been to check the search policy on the machine that is having the issues and here is a capture of the search order, to the best of my knowledge on top first search item???

    ADODSearchPolicy.png

    for now have turned OD back on again and after lessons will reboot the machine see if log in issues still remain.
    The screen you have is now exactly the same as what we have here

  15. #15
    slancaster's Avatar
    Join Date
    Jan 2009
    Location
    Rochdale
    Posts
    10
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    "unable to login at this time" can sometimes relate to your AFP/SMB network settings.

    If set incorrectly, you canne login.

    Go to directory utility and check to see if "network protocol to use" is set correctly, under the active directory tab (if your DC is on a windows box)

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Issues with QuickTime included in Win7 Image
    By afillmore in forum O/S Deployment
    Replies: 3
    Last Post: 28th July 2011, 06:02 PM
  2. Terminal Login - Not logging in with Admin Rights?
    By burgemaster in forum Windows
    Replies: 4
    Last Post: 15th May 2008, 05:45 PM
  3. Problems logging in with HTTPS - moodle
    By timbo343 in forum Virtual Learning Platforms
    Replies: 10
    Last Post: 12th February 2008, 09:59 AM
  4. Issues with new user accounts in an OU
    By Scruff in forum Windows
    Replies: 0
    Last Post: 7th September 2007, 10:12 AM
  5. Strange Latency? Issues with logging in.
    By HodgeHi in forum Wireless Networks
    Replies: 17
    Last Post: 21st February 2007, 02:23 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •