Skip to main content
Question

Problem joining 10.10.3 (Yosemite) to Active Directory.

  • August 11, 2015
  • 2 replies
  • 17 views

Forum|alt.badge.img+3

Trying to join Macs (running 10.10.3) to the campus Active Directory domain. Domain name, name and password of account with joining privileges, and OU specification are accurate (have been triple-checked.)

Getting the following error message:
"The 'Directory Binding Account' payload could not be installed. The server 'foo.local' either couldn't be found, or was not responding."

Any thoughts?

2 replies

Forum|alt.badge.img+16
  • Honored Contributor
  • August 11, 2015

Ran into this myself. 10.10.1+ made some changes to the way the .local name is handled. Essentially bonjour is attempting to handle the resolution of .local instead of DNS. The solution is to tell the discoveryutil to return to the old way of handling it:

sudo discoveryutil mdnsactivedirectory yes

This however will only work until the next restart, you will have to create a LaunchDaemon to force it to apply on ever reboot.

Something like:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key>
    <string>com.company.discoverydfix.local</string>
    <key>ProgramArguments</key>
    <array>
        <string>/usr/sbin/discoveryutil</string>
        <string>activedirectory</string>
        <string>yes</string>
    </array>
    <key>RunAtLoad</key>
    <true/>
    <key>ServiceDescription</key>
    <string>.local fix</string>
</dict>
</plist>

This actually may have been resolved in 10.10.4 (changed back to the way it worked before). I haven't checked since I already have this setup on all machines now and it's working since application.


Forum|alt.badge.img+3
  • Author
  • New Contributor
  • August 12, 2015

Thank you, I will give this a try!