TheChinaMac

Q: Mobile User Slow Login Off Network

I am running server 10.58 with mobile user accounts. I have upgraded three laptops to Snow Leopard and when they are off the network any login or password entry for things like changing a sys pref takes over 1 minute. If i remove the network account server bind from the user account in sys prefs, the login is back to normal. I read of similar problems in 10.5 that was the result of a search domain being listed in the DNS settings of the client machine. However, my DHCP server provides the DNS and search domain listings so this is not listed in the client machines when they are off the network.

My domain name is miniserv.companydomain.net and the search domain in the server is companydomain.net - but again, this DNS info is not listed in the client machines. companydomain.net is a FQDN that only runs locally. Could the client be looking for companydomain.net on the WAN?

The console log reads as follows:

authorizationhost[1965] k5_authenticate(): got -1765328228 (Cannot contact any KDC for requested realm) on /SourceCache/SecurityAgent/SecurityAgent-37013/plugins/krb5/krb5_operations.c:8 4

authorizationhost[1965] -[SFBuiltinAuthenticate performDSPasswordAuth](): got -1765328228 (Cannot contact any KDC for requested realm) on /SourceCache/SecurityAgent/SecurityAgent-37013/authhostbuiltins.m:1039


Any guidance appreciated.

MacBook Pro, Mac OS X (10.6)

Posted on Sep 4, 2009 2:38 PM

Close

Q: Mobile User Slow Login Off Network

  • All replies
  • Helpful answers

first Previous Page 7 of 8 last Next
  • by jev1313,

    jev1313 jev1313 Feb 25, 2011 8:50 AM in response to jev1313
    Level 1 (0 points)
    Feb 25, 2011 8:50 AM in response to jev1313
    jev1313 wrote:
    jgilmour wrote:
    I have found this post to work - http://techsmog.com/?p=194 (.local domain & AD) had slow logins/logouts/authenticating, all works well now.


    This looks very promising, i will test and report back. However apple still needs to fix this as it is a major problem with their OS.


    I have tested this and unfortunatly it did not resolve the 10 minute login times. I took a freshly imaged 10.6.6 MBP home last night and performed the steps outlined in the post and it had no affect whatsoever on reducing the 10 minute delay while logging in.
  • by afuns10,

    afuns10 afuns10 Feb 28, 2011 9:20 PM in response to TheChinaMac
    Level 1 (0 points)
    Feb 28, 2011 9:20 PM in response to TheChinaMac
    I bet you people all have VMware Fusion installed too? Am I right or am I right? **** I'm good.
  • by afuns10,

    afuns10 afuns10 Feb 28, 2011 9:54 PM in response to afuns10
    Level 1 (0 points)
    Feb 28, 2011 9:54 PM in response to afuns10
    sudo ditto -rsrc /Library/LaunchDaemons/com.vmware.launchd.vmware.plist /Applications/VMware\ Scripts/Library/LaunchDaemons/com.vmware.launchd.vmware.plist;sudo rm /Library/LaunchDaemons/com.vmware.launchd.vmware.plist;

    now the user is responsible for starting vmware script when needed from...
    /Library/Application\ Support/VMware\ Fusion/boot.sh --start
  • by afuns10,

    afuns10 afuns10 Feb 28, 2011 10:18 PM in response to afuns10
    Level 1 (0 points)
    Feb 28, 2011 10:18 PM in response to afuns10
    we could automatically trigger /Library/Application\ Support/VMware\ Fusion/boot.sh --start

    After login but I have no idea if VMware approves of that.

    anyways now I can make the issue go away when I want.
    _Adam
  • by afuns10,

    afuns10 afuns10 Feb 28, 2011 10:47 PM in response to afuns10
    Level 1 (0 points)
    Feb 28, 2011 10:47 PM in response to afuns10
    nevermind. the workaround is still just turn off your airport en1. You can automate the switch off when you boot however you loose remote access.
  • by jev1313,

    jev1313 jev1313 Mar 4, 2011 10:44 AM in response to afuns10
    Level 1 (0 points)
    Mar 4, 2011 10:44 AM in response to afuns10
    afuns10 wrote:
    I bet you people all have VMware Fusion installed too? Am I right or am I right? **** I'm good.


    Yes as a mater of fact I do use VMF on our macs.
  • by jev1313,

    jev1313 jev1313 Mar 4, 2011 10:49 AM in response to afuns10
    Level 1 (0 points)
    Mar 4, 2011 10:49 AM in response to afuns10
    afuns10 wrote:
    sudo ditto -rsrc /Library/LaunchDaemons/com.vmware.launchd.vmware.plist /Applications/VMware\ Scripts/Library/LaunchDaemons/com.vmware.launchd.vmware.plist;sudo rm /Library/LaunchDaemons/com.vmware.launchd.vmware.plist;

    now the user is responsible for starting vmware script when needed from...
    /Library/Application\ Support/VMware\ Fusion/boot.sh --start


    I am not a native mac admin and I am quite new to mac administration. could you please explain your reasons for thinking that vmware is the cause of this issue. the line of code above means little to me without some context or reasoning that i can understand.
  • by afuns10,

    afuns10 afuns10 Mar 4, 2011 7:54 PM in response to jev1313
    Level 1 (0 points)
    Mar 4, 2011 7:54 PM in response to jev1313
    I'm sorry, I would just delete that post but I can't.
  • by Ben Toms,

    Ben Toms Ben Toms Mar 9, 2011 9:29 AM in response to afuns10
    Level 1 (20 points)
    Mar 9, 2011 9:29 AM in response to afuns10
    turning off airport at logout resolves this for us...

    more info here http://macmule.com/2011/03/09/slow-login-for-ad-mobile-accounts-when-off-the-off ice-lan/
  • by gtoaster,

    gtoaster gtoaster Mar 14, 2011 12:01 PM in response to Ben Toms
    Level 1 (0 points)
    Mar 14, 2011 12:01 PM in response to Ben Toms
    Just curious if ANYONE has had any luck with this issue. It seems to be a major thorn in the side for those of trying to get these Snow Leopard machines to work in an AD environment. FYI, we are not using VMWARE.

    I can't believe Apple has yet to release a fix for this problem after a year of ongoing pain.
  • by buckster,

    buckster buckster Mar 16, 2011 5:20 AM in response to gtoaster
    Level 4 (2,814 points)
    Mac OS X
    Mar 16, 2011 5:20 AM in response to gtoaster
    Hi,

    I don't have AD only OD. So this is an untried theoretical suggestion which may break things... dyodd.

    In my experiences, once OD has been configured on a client, in System/Library/CoreServices/Directory Utility there are settings that can be defined for timeouts during OD server searches.

    Can you tweak anything there for AD settings/servers that might help?

    b.
  • by jev1313,

    jev1313 jev1313 Mar 23, 2011 9:31 AM in response to buckster
    Level 1 (0 points)
    Mar 23, 2011 9:31 AM in response to buckster
    I have messed with thos setting and they do not help the issue. Has anyone tested 10.6.7 yet? I just updated our server to it and my own laptop to test tonight. ill post my findings tomorrow.
  • by SuperUser7,

    SuperUser7 SuperUser7 Mar 24, 2011 4:34 AM in response to jev1313
    Level 1 (0 points)
    Mar 24, 2011 4:34 AM in response to jev1313
    In regards to the 10.6.7 update, I am working on my work laptop right now from home that is running 10.6.7 and connected to an OD server at my office. It still has the 3 min default splash screen after authenticating my login credentials. That 3 min delay is with having the ath0 interface enabled. I have not tried booting yet with the ath0 interface disabled.
  • by bingocaller,

    bingocaller bingocaller Mar 27, 2011 5:20 PM in response to TheChinaMac
    Level 1 (0 points)
    Mar 27, 2011 5:20 PM in response to TheChinaMac
    After the 10.6.7 update, I am no longer experiencing long delays at login on my mobile account away from my dot local active directory domain's home network. In the weeks before 10.6.7 came out, I also turned off Bonjour advertising as described here http://support.apple.com/kb/HT3789 and added "local" and mydomain.local to the search domains in DNS, even though that's not supposed to be necessary. The biggest improvement came after updating to 10.6.7.
  • by Ascension,

    Ascension Ascension Mar 30, 2011 7:32 PM in response to bingocaller
    Level 1 (0 points)
    Mar 30, 2011 7:32 PM in response to bingocaller
    bingocaller,

    I've also updated to 10.6.7, but to no avail -- the delay is still present. Did you do anything else besides upgrade?

    Message was edited by: Ascension
first Previous Page 7 of 8 last Next