Very slow AD login on OS X Lion

[netadmin]

We have just purchased a few iMacs running 10.7.1 Lion for our art program. I have tried joining the first computer to our Active Directory domain (it is a .local domain) both through the native OS X users application and through Centrify Express, but login time always seems to average between 3 and 6 minutes.

 

Does anyone know of any tricks to getting Lion to login users to Active Directory in a halfway reasonable amount of time?

 

Thanks for any tips.

[Michael]

I believe a .local creates DNS issues with Macs and this is probably why it's taking forever to logon. If you Google or search the forum, you should find more information on this.

[netadmin]

Thanks Michael.

 

Has anyone been able to solve the .local issue with Lion? I've found many solutions for the .local issue on Snow Leopard (and successfully tested one on an test machine), but Lion seems to be so new that there are few working solutions for .local presently.

[jubbi]

It's a difficult one for me to test as the school I do all my mac testing in now is a .net domain. Have you added .local to the search domains in the network pref pane and extended the mDNS timeout as is recommended for 10.6?

[itevo]

The solution for me is to add a IPv6 Reverse Lookup Zone, PTR and a Host Record in DNS Server.

 

Refer to this article (Login and directory binding delays on systems joined to an Active Directory domain ending in ".local")

[Stephen041085]

itevo's post above worked for me too a few days ago, found after extensive googling of the subject!

 

I'm also on a .local domain. On Server 2003, I have found that I also needed to disable (set to none) dynamic updating in DNS to get the new IPv6 record to stay there, otherwise its deletes everyday. Can anyone shed any light on this? Mine is only a small business network of 2 macs and a couple of PC's though, so its not a huge issue - would be on a larger network though.

 

Since applied, login times on OSX 10.6.8 are now 15-20 seconds rather than 5 or more minutes.

[Wreckingball74]

Hi there.

I have the same issue on 10.7.2 at the moment.

I think i followed this "Login and directory binding delays on systems joined to an Active Directory domain ending in ".local" " document from Apple correctly to add AAAA record, reserve zone and PTR.

But it's not going faster.

 

Can anyone provide some details about the correct way to set them up?

Because private IPv6 should be FE00::/8 but Apple suggested, told FD00://8.

 

Any help on this is very helpful. The IPv6 from my Server is fe80::1012:e2d7:6d32:88a5%10 (I'm thinking if I need to ad %10 as well).

 

Thanks for your help.