Unable to login @ login window with Active Directory User on Lion

Are you saying that you can properly bind the Mac's to AD but the home directory is not mounting?

Did you try to import the users from the AD to your OD so they authenticate via your OD?

Bind the Mac's to your AD aswell.

This allows you to log in via AD and create a local user.

Binding the Lion Server also lets you assign permissions to AFP shares and other services for AD users.

Have you tried adding the AD users to a local (OD) group?

This won't import the users, but gives them the option to login and use services..

This might be helpful for you. Found this somewhere else on this forum.

Setting up a new Lion OS X Server

1. Change the Shared name
   1. apple >> System Preferences >> Sharing
   2. enter a name like: server-mac
2. Give a Static Address

   apple >> System Preferences >> Network

3. Download Lion OS X Server app from the app store (not through itunes)
4. Download Server Admin Tools for Lion (this can be found via google)
5. install both and run apple >> Software Update

Binding

apple >> System Preferences >> Users & Groups

1. Unlock the padlock
2. Click Open Login Options
3. Click Join
4. Click Directory Utility
   1. Double click Active Directory
   2. for domain, enter: DOMAIN.LOCAL
   3. Click the triangle next to Show Advanced Options
      1. Click User Experience
         1. Create mobile account at login
            1. Remove: require confirmation box
         2. Remove: Use UNC path box
         3. Default user shell: /bin/bash
      2. Click Administrative
         1. Prefer this domain server: ADserver.domain.local
         2. Allow administration by (leave defaults)
         3. Remove: Allow authentication from any domain in the forest
      3. Click ok

Create Open Directory Masteropen Server Admin

Connect to server-mac.local (or enter the static address)

1. Highlight the local server and click Settings
2. Click Services
   1. Open Directory
   2. Click Open Directory under server-mac.local (or static address)
   3. Click General
   4. Under Role, click Change
   5. Select Remain connected and setup as Open Directory Master
   6. Create user called: Diradmin

Changing Login Options

1. apple >> System Preferences >> Users & Groups
2. Click Login Options
3. Under: Display login window as, select Name and password radio button
4. Allow network users to log in at login window
   1. Select: Options
   2. Select: Only these network users radio button
   3. Click +
   4. Under Network Users:

      select those who you want to be able to log into this server

Adjust the Date and Time

Click the time in the upper right corner

1. Click Open Date & Time Preferences...
2. Click Date & Time tab
3. Set date and time automatically: ntpserver.domain.local

Add a Mac Client to the Open Directory

Go to System Preferences >> Users & Groups

1. Unlock the padlock
2. Click Login Options
3. Click Join
   1. Type in the ip address of the mac server
   2. Press ok
   3. It will tell you "This server provides SSL certificates. Do you want to trust the certificates.... Choose Trust.
   4. Server does not provide a secure SSL connection. Do you want to continue? Choose Continue
4. Should be done!! Woot!!

Decide who can get onto the box.2. Go to System Preferences >> Users & Groups

1. Unlock the padlock
2. Click Login Options / Options / Choose "Only these network users:" Then choose the individuals from the open directory that you want to allow access to.

Binding a Client Mac to Active Directory and Open Directory

apple >> System Preferences >> Users & Groups

1. Unlock the padlock
2. Click Login Options
3. Click Join
   1. Enter in the Mac server name or ip address
   2. dont enter any credentials if asked (bind anonymously)
   3. Press ok
4. Click Join
   1. Double click Active Directory
   2. for domain, enter: DOMAIN.LOCAL
   3. Click the triangle next to Show Advanced Options
      1. Click User Experience
         1. Create mobile account at login
            1. Remove: require confirmation box
         2. Remove: Use UNC path box
         3. Default user shell: /bin/bash
      2. Click Administrative
         1. Prefer this domain server: adserver.domain.local
         2. Allow administration by (leave defaults)
         3. Remove: Allow authentication from any domain in the forest
      3. Click ok

Also, have you set the mac clients to prefer the AD?

Exactly.

Within Directory Utility there is a checkbox that says to force local user home folders. Uncheck that.

Also in Directory Utility under the tab 'Search policy'. Make sure your AD is first in line (so the top one).

This makes sure that authentication goes to your AD first.

If you bind both servers, your Mac is able to use both servers services.

So if I understand correctly, binding the AD to your Mac, allows you to log in, but uses a local home folder?

Try renaming the home folder to 'username_old' and see what happens when logging in.