Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly.

However, we have one particular user who is unable to log in to just some of the Macs. He has no problem with most of them, but there is one group of them (all built from the same image) that he can't log in to. The machine in question is running OS X 10.6.2. The relevant entries from secure.log are below, with the hostname and username redacted.

Aug 16 10:32:43 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:43 hostname SecurityAgent[4411]: Will sleep 1 seconds and try again (retryCount = 4)
Aug 16 10:32:44 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:44 hostname SecurityAgent[4411]: Will sleep 2 seconds and try again (retryCount = 3)
Aug 16 10:32:46 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:32:46 hostname SecurityAgent[4411]: Will sleep 4 seconds and try again (retryCount = 2)
Aug 16 10:33:10 hostname SecurityAgent[4411]: Could not get the user record for username from DirectoryServices.
Aug 16 10:33:10 hostname SecurityAgent[4411]: Will sleep 8 seconds and try again (retryCount = 1)
Aug 16 10:33:18 hostname SecurityAgent[4411]: User info context values set for username
Aug 16 10:33:18 hostname SecurityAgent[4411]: unknown-user (username) login attempt PASSED for auditing

Everything I've found online suggests that our use of Mobile Accounts is causing the issue. I turned that feature off, but I still can't log in as that user.

id returns a record for his account, and nothing looks out of the ordinary.

Has anyone here run into this before?

share|improve this question
    
upgrade it to a PC ;) –  JamesRyan Sep 1 '13 at 23:56
    
Can other users log in to those workstations? What if you create a new user on your domain, can you log in with that? Can that user log in to other workstations? –  Canadian Luke Mar 4 at 18:50
    
Luke, I asked this question in August 2010. I don't exactly recall what I did to resolve the issue, but I believe it had something to do with his home directory attribute in Active Directory being an invalid path. –  Ben Wyatt Mar 4 at 20:52

1 Answer 1

Have you inspected his user record on the AD side of things? I would guess that there's something in his record that DirectoryServices is crapping out on

share|improve this answer
    
His account looks normal. He can log in to every one of our online systems (OWA, etc.) as well as every PC and most of the Macs. The only thing that was different was the primary group, which was set to faculty instead of Domain Users. I've since switched it to Domain Users. –  Ben Wyatt Aug 20 '10 at 13:57

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.