Re: AD Bind issue 10.5.6 Server

Subject: Re: AD Bind issue 10.5.6 Server

Date: Thu, 5 Nov 2009 22:08:23 -0800

Delivered-to: email@hidden

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:mime-version:subject:date:references :x-mailer; bh=Sm7XzfGAOrS6QRgCDxorKeoA6kh4a+sm2WnztmQtRIY=; b=k2hQXxLlAzzhrfH4eK0anziDti2aPT7tjknhAwPVGe6RjsVyDw/wmo0E0pKs2OuNFr 6PGd1XuOA7anFfKV1hDZG9+F9VxEcJYmVEC1ev/yyoOvoOLo9yOpQaRZ4yzPggHuG/Gr 02CNEV9m8c12XDA9UMhkJJiexUdVBPKcy/8wI=

Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type:mime-version:subject :date:references:x-mailer; b=N4Uh/s2mJz6Cq0nfg0UTZBj/6FKAYEkoX68ciYFHaRPm1eunLcykeed1KHrCtSUXGc WNJ2IJqHOTm7ZAxchppO3F5YOx/9VLLNzouexkdeVQRuxfA/Yuto70VJ/6lCCp2xwzc5 E7+gN16IpSM8lw2BIPKlgsCvfjo2QEyHUX7K0=

On Nov 3, 2009, at 11:10 AM, Aaron wrote:

Hello. I'm running into an issue with binding an xserve running Leopard server 10.5.6 to an AD domain. This was all up and running last week, but somethign seems to have happened. Yesterday, I came in and while working in WGM, noticed that I couldn't see AD users and groups. I went to the command line and tried to read an AD user, but that failed. So, I removed the domain, and tried to re-add it from the GUI. It fails with An unexpected error of type -14090 (eDSAuthFailed) occurred.

CDSLocalPluginNode::CreateDictionaryForNewRecord(), file at /var/db/dslocal/nodes/Default/config/Kerberos:domain.com.plist error, stat() result = 0
2009-11-03 07:03:48 PST - T[0xB0103000] - CDSLocalPluginNode::CreateDictionaryForNewRecord(): failed with error -14135

Looks like you may have a bad Kerberos config in DSLocal.

http://support.apple.com/kb/TS2691

--
Ben

That was it. I removed the Kerberos\:AD.DOMAIN.NAME file from /var/db/dslocal/nodes/Default/config, restarted directory services and was able to bind again. Thanks for the link Ben!

_______________________________________________ Do not post admin requests to the list. They will be ignored. Macos-x-server mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/macos-x-server/email@hidden This email sent to email@hidden

References:

>AD Bind issue 10.5.6 Server (From: Aaron <email@hidden>)

>Re: AD Bind issue 10.5.6 Server (From: Ben Gollmer <email@hidden>)