10.6.8 Funkyness?

Nope, only "widespread" issues I'm aware of are the printer issues, and the hwmond issues on Xserve. Otherwise, it's fine in the couple of places I help manage...

Happy Monday!!!

10.6.8 feels like 7.6.1

:P

--
Pat Camporeale
"You don't need to be a mechanic to drive a car."

Ever since 10.6.8 we have machines that lose AD binding after reboot. It says Network Not Available but when you login it shows the connection as green. You unbind rebind it works until you reboot.

--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

Similar here. Only have it on a couple of machines. It seems intermittent though. Perhaps we don't reboot often.
--
James Fuller | Starbucks Coffee Company | Technology Application Services | application developer II
E: jafuller at starbucks.com<mailto:jafuller at starbucks.com> | V: 206.318.7153 | F: 206.318.0155

Technology does not drive change -- it enables change.

We shutdown all systems at night. This start with 10.6.8 and I can't find any relief for this.
--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

have you tried setting the pass interval as discussed last week?

--
Todd Ness
Technology Consultant/Non-Windows Services
Americas Regional Delivery Engineering
HP Enterprise Services

Can't say we have that here, most all of our systems have it installed
already, but I am unaware of any binding issues.

John Wojda

Lead System Engineer, DEI & Mobility

3333 Beverly Rd. B2-338B

Hoffman Estates, IL 60179

Phone: (847)286-7855

Page: (224)532.3447

Team Lead DEI: Matt Beiriger
<mailto:mbeirig at searshc.com;jwojda at searshc.com?subject=John%20Wojda%20Fe
edback&body=I%20am%20contacting%20you%20regarding%20John%20Wojda.>

Team Lead Mobility: Chris
<mailto:cstaana at searshc.com;jwojda at searshc.com?subject=John%20Wojda%20Fe
edback&body=I%20am%20contacting%20you%20regarding%20John%20Wojda.> Sta
Ana

Mac Tip/Tricks/Self Service & Support
<http://bit.ly/gMa7TB>

"Any time you choose to be inflexible in your approach to an
unpredictable project you are already building failure into your plan"

I have unfortunately this machine is freshly imaged.
--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

I've seen a few machines have AD login trouble if they were bound after
10.6.8 was installed / applied during imaging.

No trouble with any machines that were bound and *then* upgraded to 10.6.8.

-p

Exactly! I think you are on to something.

--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

Rarely, but it has happened, I'll get a call from a user who can't log in to AD on one machine but is fine elsewhere. The machine seems to create a local user account with the same name as the AD account. Most of the time the machine has crashed while the user is logged in.

You'll notice something is wrong when you log in as a different user but still see the first user's AD account appear in the Accounts System Preferences pane. Deleting this ghost account resolves the problem.

--

William Smith
Technical Analyst
Merrill Communications LLC
(651) 632-1492

We use Mobile Accounts too
--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

I've been watching this thread with interest as I am currently updating the core OS of our images to 10.6.8. It's interesting that you mention that the local user account showing in the prefs pane. On my setup, all accounts are mobile accounts (Create mobile account at login in the AD plugin). I always see every user who logs in under the accounts prefs.

One similar login issue I did see with 10.6.8 was a user was *not* visible in System Prefs even though they had logged in many times. I went in via dscl and Deleted the user from /Local/Default/Users, which resolved the issue and I didn't pursue it further.

I have been creating the caper dmg from the latest thunderbolt Macbook media and applying the 10.6.8 Combo uptate to that (offline) volume. I end up with a non-booted dmg that I run through Casper NetInstall Creator 3.2. That forms the core. After that everything is all packages and OS updates which get applied at or after imaging. Most existing machines are still at 10.6.6. Hopefully there isn't some obscure issue with the update.

- Aaron

I seem to remember in the 10.6.8 release notes that there were changes "in preparation for Lion". In the developer forums, there are reports of issues with Lion and AD. I wonder if some of the "preparation for Lion" mucked up AD in Snow Leopard.
--
Walter Rowe, System Hosting
Enterprise Systems / OISM
walter.rowe at nist.gov<mailto:walter.rowe at nist.gov>
301-975-2885

Whatever it is, Mac are losing bindings more and more everyday and my GM of Lion still won't connect to AD.

--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

The issue is getting serious now. Machines are dropping AD like flies. None of the tips given in these threads are helping. 10.6.8 broke something. We unbind and rebind and it works until you reboot. Not good!

--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

Let me add that the mobile home folders are disappearing. 10.6.8 seems to be broken.

--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

Anything interesting in your DirectoryServiceError.log or
On 7/19/11 2:53 PM, "Matthew Lee" <Matt.Lee at fox.com> wrote:
DirectoryServiceServer.log? These should be available in the Console.

I've got quite a few folks on 10.6.8 who are bound to AD. Pretty much all
of them were bound at 10.6.8 and not updated to 10.6.8 while bound. Not
sure if we're running Windows 2008 or R2.

--

William Smith
Technical Analyst
Merrill Communications LLC
(651) 632-1492

Hi Matt,

When you rebind, do the macs find their existing computer object?

Do you move these objects outside of computers?

Are you see Kerberos preauthentication errors in the logs?

Try unbinding, deleting computer account from ad... Wait for ad to replicate or force. Then rejoin leaving the computer object in the computers OU.

Regards,

Ben.

Awww don't make me contact our account admins!!! I have no AD access unfortunately. The objects are current objects, not moved, no Kerberos errors.

Looks like the same issue we have with Lion. Computer gives me a green light and then shakes its head at me.

--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

Well you can wait for replication (maybe 30 mins).

Regards,

Ben.

I’m curious if there’s a correlation with the issues your seeing and the following article, the article symptoms read “If network access is interrupted, a Mac OS X v10.6 client may not be able to reconnect to an Active Directory domain”:

http://support.apple.com/kb/ts3248

--
Hasaan Herrington
Technical Support II
Information Technology
Anchorage School District
1602 Hillcrest Drive, Anchorage, Alaska, 99517.
Help Desk: (907) 742-4615

Perhaps but Im thinking this is the same issue people are having with Lion.

Has anyone found a way to bind Lion to AD?

--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

The normal way works for me.

Regards,

Ben.

Damn, I can't get it to do anything. It green lights me in the OS and redlights me at the Loginwindow.

Do you by any chance have reverse DNS set up properly in your environment?

--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group