I'm not sure if it's the same issue or not, but I've seen this alot - mostly OS X 10.4.x and pre 10.5.4 systems. I haven't been able to determine the cause, but it hasn't happened on 10.5.4 yet.
I don't have the actual terminal commands I use to fix the problem - they are on my work machine. But basically you need to: 1) unload any mDNS (bonjour) services (I read somewhere that the bonjour services keep DirectoryServices from flushing the cache correctly, so even though you delete the config it just reloads it) 2) Kill the DirectoryServices service (killall DirectoryServices) you may need to do this several times until you get a "process not found" 3) Delete "/Library/Preferences/DirectoryService" and "/Library/Preferences/edu.mit.Kerberos" (sudo rm -rf /Library/Preferences/DirectoryService /Library/Preferences/edu.mit.Kerberos) you only have about 10 seconds to do this before Directory Services reloads. 4) Kill the DirectoryServices service again (killall DirectoryServices) 5) Wait 10 to 20 seconds for the DirectoryServices process to reload 6) Rebind either with "Directory Utility.app" or with the terminal
The problem SHOULD go away.
Jason
Jason Bracy | SAIC System Administrator | Corporate Creative Services
On Sep 4, 2008, at 6:15 PM, Simon, Gary wrote: Here is what I have tried so far: - I have upgraded a computer to the latest 10.5.5 apple seed. I still get the dscl error when trying to read the “broken” accounts. I am waiting to get one of the “broken” users to try to actually login with the new seed.
- I unbound from Active Directory. Unchecked the box to map the User UID. Rebound to AD. - Still got the dscl error on those particular accounts.
Gary
|