AD User Cannot Log In

Question

Created Jun ’15

Replies 5

Boosts 0

Views 2.6k

Participants 2

I "upgraded" an OS X 10.10.4 beta to OS X 10.11 El Capitan Beta. The upgrade didn't seem to work. I then simply installed El Capitan Beta from scratch. I created the first account with admin privs. I logged in with that account and used dsconfigad to bind the El Capitan system to AD. After rebooting, the AD user was able to authenticate, I was asked if I wanted to create the mobile account to which I responded yes, and it appeared to then start the process of creating my account and logging me in. At this point, I get the spinning gear in the center of the screen and this never completes. I have to power off the system.

After rebooting, I logged back in with the local account I first created and looked in /Users. The mobile account was created. The .account file inside there was created. The .account file seemed to have all of the correct information.

I have tried to log into the system with the AD account numerous times. Every time it gets to the same point of the spinning gear while the background is still blurred, and it never finishes starting my session.

Has anyone else experienced this?

Boost

Answer 1

Walter Rowe OP

Jun ’15

I should also add that "dsconfigad -show" shows all the correct settings compared to 10.10.3 systems that are natively bound to AD.

0

Answer 2

threaten OP

Jul ’15

Can you explain to me how systems are natively bound and what mechinism 10.11 uses?

Thanks....

0

Answer 3

kcrwfrd_dev OP

Jul ’15

Yes I have seen this issue also. After multiple tries, and at least one reboot I was able to log in.

And on Beta3, AD is not working at all after upgrade.

I can sucessfully complete a rejoin, but still can't lookup anything from AD nor can I login.

0

Answer 4

Dmf OP

Jul ’15

I have the same issue. the account is authenticating against ActiveDirectory. It worked fine on Yosemite and failed after upgrading to El Capitan Public Beta 1. I can login when ewmoving all network cables. after login I replug the cables. Every time I need admin privileges, the password fails. When unplugging the cable again, I can get admin rights.

0

Answer 5

Walter Rowe OP

Jul ’15

One issue I have since identified is that if you have a /Library/Security/PolicyBanner in place, you may not get the "Completing Installation" to run after reboot when updating the OS. I had a 10.10.4 system I upgraded to the first beta with /Library/Security/PolicyBanner in place. The initial install prior to reboot completed successfully. When the rebooted automatically reboot, it would only boot up so far and get to a black screen. It never displayed the "Completing Installation" screen and never completed installation. When I restored the system to 10.10.4 via Time Machine, removed PolicyBanner, and did the upgrade again, all seemed to work as expected. This also seemed to address my AD login issue. I suspect something takes place in the "Completing Installation" that makes AD whole again after the upgrade. When my initial update would get stuck at the black screen, I would eventually power cycle and the system would seem to boot up OK. However, AD users could never log in. This contributes to my belief that the "Completing Installation" stage does some very necessary tasks to get everything working right.

0