eddyh7

Thanks for all those surggestions, if I ever get the time I might set up a fresh domain. What does seem a little odd is that my 10.6 server doesn't seem to drop the connection to AD in the same way as the clients? Can't really see how this is any differant? Thanks, Ed

Hi, Thanks for your feedback, I have been wondering if it could be the .local domain name that I'm using for windows that's cauing me problems. My Mac's are being added to an OU in the Root of the domain so I guess I have a fairly flat structure from that point of view and I'm not using any of that RM rubbish as we scrapped that years ago. Could you tell me what you mean when you say "an enviroment that has been built to accomodate macs in the first place? If in the future when I replace the DC and have the time to create a new domain in order to get rid of the .local issue what else must I do to ensure that it as easy for the Macs to integrate as possible? Many thanks, Ed

I'm using a Symbolic link created in my log on hook (ln -s Target NameOfLink) That way it gets created for each user using the $1 variable (username) from the logon hook, and it gets created at every login and gets replaced at each login if the user deletes it.

Here's a System log where the client fails to reconnect to AD: Jun 21 01:04:46 macosx1 com.apple.launchd.peruser.501[129] (com.apple.AirPortBaseStationAgent[154]): Exited: Killed Jun 21 01:04:46 macosx1 SecurityAgent[273]: NSDocumentController's invocation of -[NSFileManager URLForDirectory:inDomain:appropriateForURL:create:error:] returned nil for NSAutosavedInformationDirectory. Here's the error:\nError Domain=NSCocoaErrorDomain Code=513 UserInfo=0x100140a40 "You don’t have permission to save the file “Library” in the folder “empty”." Underlying Error=(Error Domain=NSPOSIXErrorDomain Code=13 "The operation couldn’t be completed. Permission denied") Jun 21 01:04:47 macosx1 loginwindow[42]: DEAD_PROCESS: 42 console Jun 21 01:04:47 macosx1 com.apple.loginwindow[42]: LogoutHook: Executing /etc/hooks/LOcleanupclean.hook... Jun 21 01:04:47 macosx1 macadmin[311]: LogoutHook: Starting for macadmin Jun 21 01:04:47 macosx1 shutdown[316]: reboot by macadmin: Jun 21 01:04:47 macosx1 shutdown[316]: SHUTDOWN_TIME: 1277078687 279376 Jun 21 01:04:47 macosx1 mDNSResponder[18]: mDNSResponder mDNSResponder-214.3 (Feb 11 2010 04:49:16) stopping Jun 21 01:04:47 macosx1 mDNSResponder[18]: mDNS_Deregister_internal: 51 _kerberos.macosx1.local. TXT LKDC:SHA1.4DC7A1D1C03651E88DAFDF1E20B08E8FAE91136B already marked kDNSRecordTypeDeregistering Jun 21 01:04:47 macosx1 WindowServer[65]: hidd died. Reestablishing connection. Jun 21 01:04:47 macosx1 DirectoryService[244]: dnssd_clientstub read_all(18) failed 0/28 0 Jun 21 01:04:47 macosx1 WindowServer[65]: bootstrap_look_ip failed: Unknown service name Jun 21 01:04:47 macosx1 DirectoryService[244]: BUG in libdispatch: 10D578 - 1960 - 0x10004004 Jun 21 01:05:26 localhost com.apple.launchd[1]: *** launchd[1] has started up. *** Jun 21 01:05:26 localhost com.apple.launchd[1]: *** Verbose boot, will log to /dev/console. *** Jun 21 01:05:31 localhost blued[16]: Apple Bluetooth daemon started Jun 21 01:05:31 localhost mDNSResponder[18]: mDNSResponder mDNSResponder-214.3 (Feb 11 2010 04:49:16) starting Jun 21 01:05:32 macosx1 configd[14]: setting hostname to "macosx1.oakwood.local" Jun 21 01:05:32 macosx1 configd[14]: network configuration changed. Jun 21 01:05:34 macosx1 bootlog[53]: BOOT_TIME: 1277078726 0 Jun 21 01:05:35 macosx1 com.apple.usbmuxd[34]: usbmuxd-190 built for iTunesNineOne on Mar 8 2010 at 20:25:36, running 32 bit Jun 21 01:05:35 macosx1 /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow[42]: Login Window Application Started Jun 21 01:05:36 macosx1 configd[14]: network configuration changed. Jun 21 01:05:38 macosx1 loginwindow[42]: Login Window Started Security Agent Jun 21 01:05:38 macosx1 WindowServer[64]: kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged. Jun 21 01:05:38 macosx1 com.apple.WindowServer[64]: Mon Jun 21 01:05:38 macosx1.oakwood.local WindowServer[64] : kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged. Jun 21 01:06:08 macosx1 com.apple.DirectoryServices[11]: Enter machine password: Jun 21 01:06:09 macosx1 com.apple.DirectoryServices[11]: DNS update failed! Jun 21 01:06:56 macosx1 /System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer[78]: CGSKeyTranslateInitialize: KLGetCurrentKeyboardLayout or KLGetKeyboardLayoutProperty is not available, fall back to USA keymap Jun 21 01:07:02 macosx1 SecurityAgent[86]: NSSecureTextFieldCell detected a field editor ((null)) that is not a NSTextView subclass designed to work with the cell. Ignoring... Jun 21 01:07:03 macosx1 loginwindow[42]: Login Window - Returned from Security Agent Jun 21 01:07:03 macosx1 com.apple.loginwindow[42]: LoginHook: Executing /etc/hooks/LIclean.hook... Jun 21 01:07:04 macosx1 _mdnsresponder[127]: LoginHook: Starting for macadmin Jun 21 01:07:04 macosx1 loginwindow[42]: USER_PROCESS: 42 console Jun 21 01:07:04 macosx1 com.apple.launchd.peruser.501[135] (com.apple.ReportCrash): Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self Jun 21 01:07:07 macosx1 ServerScanner[154]: Not scanning because node /LDAPv3/Mac0.oakwood.local is in searchPath Jun 21 01:07:08 macosx1 com.apple.launchd.peruser.501[135] (com.apple.Kerberos.renew.plist[158]): Exited with exit code: 1 Jun 21 01:07:10 macosx1 com.apple.launchd.peruser.501[135] ([email protected][161]): Exited with exit code: 1 And Here's the console messages from the same reboot: 21/06/2010 01:05:26 com.apple.launchd[1] *** launchd[1] has started up. *** 21/06/2010 01:05:26 com.apple.launchd[1] *** Verbose boot, will log to /dev/console. *** 21/06/2010 01:05:38 com.apple.WindowServer[64] Mon Jun 21 01:05:38 macosx1.oakwood.local WindowServer[64] : kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged. 21/06/2010 01:06:08 com.apple.DirectoryServices[11] Enter machine password: 21/06/2010 01:06:09 com.apple.DirectoryServices[11] DNS update failed! 21/06/2010 01:07:03 com.apple.loginwindow[42] LoginHook: Executing /etc/hooks/LIclean.hook... 21/06/2010 01:07:04 com.apple.launchd.peruser.501[135] (com.apple.ReportCrash) Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self 21/06/2010 01:07:07 ServerScanner[154] Not scanning because node /LDAPv3/Mac0.oakwood.local is in searchPath 21/06/2010 01:07:08 com.apple.launchd.peruser.501[135] (com.apple.Kerberos.renew.plist[158]) Exited with exit code: 1 21/06/2010 01:07:10 com.apple.launchd.peruser.501[135] ([email protected][161]) Exited with exit code: 1 21/06/2010 01:09:23 com.apple.WebKit.PluginAgent[185] Debugger() was called! 21/06/2010 01:09:39 com.apple.WebKit.PluginAgent[185] Debugger() was called! 21/06/2010 01:09:45 com.apple.WebKit.PluginAgent[185] Debugger() was called! 21/06/2010 01:09:46 com.apple.WebKit.PluginAgent[185] Debugger() was called! Don't know if I'm looking in the right place here, but clutching at straws now!

I've now tried a number of other things: I stopped the clients from sleeping and it didn't drop the connection to AD for over 24hr, but then I tried a reboot and it didn't reconnect. I've restarted a number of times today and sometimes it comes back up with both AD and OD connected, sometimes without OD. It always looks bound in Directory Utility and it's always in the search path though I've rebound to OD using the command line and this has changed nothing. I'm getting to the point where I might try to run a script to "killall DirectoryService" as a startup item in order to kick it back into life, but I'm not too sure how to get this working and it would certainly be bodging it. I have noticed this in my DirectoryService.error.log 2010-06-21 00:08:56 BST - T[0x00007FFF705F6BE0] - DNSServiceProcessResult returned -65563 2010-06-21 00:10:24 BST - T[0x00007FFF705F6BE0] - DNSServiceProcessResult returned -65563 2010-06-21 00:11:41 BST - T[0x00007FFF705F6BE0] - DNSServiceProcessResult returned -65563 2010-06-21 00:21:12 BST - T[0x00007FFF705F6BE0] - DNSServiceProcessResult returned -65563 I'm also seeing 21/06/2010 00:23:34 ServerScanner[148] Not scanning because node /LDAPv3/Mac0.oakwood.local is in searchPath Sometime this refers to OD and sometimes AD? Any ideas please?

Thanks for the reply, hum, I've not found any useful info on the web about this as yet either. I've searched for some stuff I found in the console logs, but I think it's unrelated, it's quite hard to pin it down to when it's happening. I'm running 10.6 Server and Clients, and I'm not using Deploy Studio, in fact this is my first test client that I'm having the problem with. Thanks, Ed

I'm having real problems authenticating with AD from my Mac clients. The set up I have is as follows: OD bound to AD and Kerberised to AD Kerberos Relm. DNS is on AD server, with Forward and reverse zones set up and all hostnames and IP resolve correctly. AD, OD and Mac Clients all have reserved DHCP addresses. Mac Clients are bound to AD & OD, AD is first in the search path. At seeming random intervals the ball in the log-in window is orange and if I log on with an Admin account and have a look in System preferences > Accounts > Login Options >Network Account Server I can see that I am still connected to the OD server, but not the AD. AD is still in this list and I am still bound to it, but it reports "This domain is not responding". The only way to kick it back into life seems to be to "sudo killall Directory Service", rebooting sometimes works but not always... Any ideas at all would be much appreciated? Thanks