Hey All. Need some major help here.
Trying to bind my new iMac running 10.12.6 to our domain.edu
Binding through GUI and terminal using dsconfidad I get the error: "Authentication server could not be contacted. (5200)"
When I run "kinit firstname.lastname@example.org" I get the error "kinit: krb5_get_init_creds: unable to reach any KDC in realm DOMAIN.edu, tried 1 KDC"
I am at a complete loss here. DNS entries are correct and we can attach Windows machines with no issues.
Has anyone seen this or can give me any insight?
Is the time being synced with an internal time server, or with whatever your DCs are syncing with? If the time is off by too much from the time the domain server knows about, binding will fail. Though the error you're getting sounds as though it can't actually reach the server to join the domain. Still, I would check on the time on the device.