Can't authenticate to Active Directory!

[quaium]

Sorry, me again. Having another issue with the OD/AD setup.

 

After setting up the OD/AD server on a Mac Mini. Everything works and looks fine. However, after I restart the system, I get problems loggin into my Active Directory server via Workgroup Manager. When I click on the padlock icon and enter my AD domain admin login I get the following error message "The login information is not valid for this server. The server failed to accept the login information you provided. Check the Name and Password and try to log in again or contact your network administrator".

 

It's driving my crazy, I'm 100% sure I have put in the correct login details and it worked prefectly when I initially set everything up. It just wouldn't work after a restart of the Mac server! Please can some advise me on what to do...

[Gatt]

Is th time on your Mac Mini correct?

Used to get this with Linux a lot - if the time between the client and server is out by 5 or more minutes then authentication can fail...

 

Or it could be something completely diferent......

[quaium]

The time is correct as the Mac server is pointing to our Domain Controller for the time. Just out of interest I noticed that within Server Admin the server is named "macserver.local", however, I do remember on my other attempts it read "macserver.*domain name*.local"... could this be the cause of the problem and if so how do I sort that out?

[quaium]

Does anyone have any ideas on how to get this resolved? I'm starting to think it might be something to do with kerberos.

[quaium]

Bump! Someone? Anyone?

[tommej]

Is the kerberos service running, anything in the logs under server admin -> open directory?

[rbelson]

What does the search policy say in Directory Utility? Is Active Directory above LDAPv3 (Open directory)?

[quaium]

What does the search policy say in Directory Utility? It has both the AD domain and the OD LDAP directory listed.

 

Is Active Directory above LDAPv3 (Open directory)? Yes AD is above LDAPv3

 

Is the kerberos service running? Keberos is not running on the OD server as it's getting it's information from the AD server.

 

Anything in the logs under server admin -> open directory? There are quite a few logs files to look through. Is there a particular one that you want me to look at? They all have some sort of entry in them, but don't give much away (maybe that's because I'm not sure what I should be looking for).