On Jan 6, 2012, at 15:09 , Ski Kacoroski wrote > After the holidays something changed and I cannot figure out what it is, but > for some reason our Mac OSX 10.6 clients who are bound to Active Directory > are having the ownership changed. So for example: > > C00771:Users root# ls -l > total 0 > -rw-r--r-- 1 root wheel 0 Jul 1 2009 .localized > drwxrwxrwt 8 root wheel 272 Nov 23 2010 Shared > drwx------ 19 hmccrum 1696695147 646 Jan 3 10:44 hmccrum > drwx------ 13 2110082475 1696695147 442 Mar 25 2011 jbaumgartner > drwx------ 13 270894697 1696695147 442 Mar 25 2011 nholder > drwxr-xr-x+ 12 nsadmin staff 408 Feb 22 2011 nsadmin > drwxr-xr-x+ 12 staffadmin staff 408 Jan 27 2011 staffadmin > > The quick fix is simply to change them back, but then it happens again
UID's are generated from the AD GUID unless you specifically map it: http://docs.info.apple.com/article.html?path=ServerAdmin/10.6/en/od4943a366.html Any chance the GUID's changed for some of these users during the upgrade? > The only other item I have noticed is that in the DirectoryService.error.log > I see things like: > > 2012-01-05 08:26:52 PST - T[0x0000000101281000] - Active Directory: > No matching _kerberos records for server - "stadc07.staff.nsd.org" > 2012-01-05 15:41:00 PST - T[0x00007FFF70C96CA0] - DNSServiceProcessResult > returned -65563 > > Now the stadc07 server has not been around since Sept 2010. It was initially > set up as a new AD server and then renamed to stadc01 when we replaced the > original AD server (this was part of an upgrade from 2003 to 2008). OS X is VERY picky about DNS being correct, both forward and reverse. I'd check this thoroughly. > This is happening to around 50% at one site (20 of 35 machines) and > sporadically across our other sites. If we fix it then on some machines it > happens again in a few days. Have you tried removing the AD binding, reboot, then restoring it on a problem client machine? - Zack -- Zack Williams - Artisan Computer Services - 520.867.8701 [email protected] http://www.artisancomputer.com Apple Certified System Administrator, Apple Consultants Network Microsoft Certified Professional, Small Business Specialist Sun Certified System Administrator Linux Professional Institute LPIC-1 _______________________________________________ Discuss mailing list [email protected] https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss This list provided by the League of Professional System Administrators http://lopsa.org/
