Unable to bind to Active Directory

Question

Level 1

0 points

Unable to bind to Active Directory

I am trying to bind my organization's first Mac to Active Directory on our SBS 2008 server and would be pulling my hair out right now if I had any left!

When I am attempting to bind I receive the error message:

*Unable to access domain controller*

This computer is unable to access the domain controller for an unknown reason.

This message isn't very helpful so I first verified that connectivity is there by pinging the server. I've also tried binding with invalid credentials and it is communicating on some level as it will come back with invalid username/password.

I have searched for several hours on the issue I am having and haven't found any solutions for my particular problem. In the DirectoryService debug it appears as if the error which causes the process to fail is what is seen below. Those are the last lines and the only error I find in the debug of an attempted bind.

2010-10-09 14:44:00 MDT - T[0x0000000100581000] - Active Directory: Password verify for #####@#####.LOCAL succeeded - cache MEMORY:35fBymn
2010-10-09 14:44:00 MDT - T[0x0000000100581000] - Client: Directory Utilit, PID: 296, API: dsDoPlugInCustomCall(), Active Directory Used : DAR : Node Ref = 33555075 : Request Code = 85 : Result code = -14006
2010-10-09 14:44:00 MDT - T[0x0000000100581000] - Plug-in call "dsDoPlugInCustomCall()" failed with error = -14006.
2010-10-09 14:44:00 MDT - T[0x0000000100581000] - Port: 6643 Call: dsDoPlugInCustomCall() == -14006
2010-10-09 14:44:00 MDT - T[0x0000000100581000] - Client: Directory Utilit, PID: 296, API: dsCloseDirNode(), Active Directory Used : DAC : Node Ref = 33555075
2010-10-09 14:44:00 MDT - T[0x0000000100581000] - Client: Directory Utilit, PID: 296, API: dsCloseDirNode(), Active Directory Used : DAR : Node Ref = 33555075 : Result code = 0

Any help you can offer would be greatly appreciated!!!

13" MacBook Pro, Mac OS X (10.6.4)

Posted on Oct 9, 2010 2:22 PM

Reply

Answer 1

Top-ranking reply

satcomer

Level 4

1,575 points

Oct 11, 2010 4:12 PM in response to Reiklen

When you first powered up the Mac, did you have a Domain Administrator make a Administrator account on that Mac? Then to bind the Mac open System Preferences->Network, Advanced button to bring down the Advnced networking and set the Static IP (given to you be the Domain Administrator) and WINS server IP and setup. Plus make sure the Apple Mac is using the same Time server4 as the reset of the cmputers on the domain.

Then go back out to System Preferences->Accounts. Click on the Administrator's Account (make sure the padlock is unlocked in the pane) and hit the "Join" button. In the pop-up have the Domain Administrator click on the button for 'Directory Utility'. Put in the Domain info in this application by hitting the pencil icon to add account info. that Administrator can then follow his nose about saving this information and powering it onto the domain.

Lastly make sure they make a Domain record with the Mac's machine name and information like any other new computer to the Domain.

Once you get it on to the Domain read the blog hint How to prevent .DS_Store file creation to prevent those pesky files on Windows shares.

Reply

Answer 2

Reiklen Author

Level 1

0 points

Oct 16, 2010 7:47 AM in response to Reiklen

I'm not sure what I changed but all of a sudden it started working. I have another MacBook that I need to join so I will see how that process goes and post back if there are any further issues. Thanks.

Reply