Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

10.5: Avoid an Active Directory 10.5 upgrade issue Install
If your Mac is bound to Active Directory (AD), make sure you unbind it before upgrading. Also make sure you have a local admin account (that was not created via AD) beforehand. I had a tough time with a Mac here -- the only account on the machine was created through authenticating via AD. In case this happens to someone else, and they find this, here's a fix:

Start up in single user mode (power on while holding Command-S) and enable the root account by giving it a password (by typing passwd and entering a password). Then reboot and log in as root. Once you've logged in (it was very slow for me), go into Directory Utility (/Applications » Utilities) and you will see the AD entry listed there.

For me it showed as connected, but was not getting the proper info. Unbind it, and as soon as it's done, you should see an immediate improvement. I was not able to log into my old account; I had to create a new (local) one, and then transfer the old home folder to my new one. I think I added that hint before, but here it is again, in case I didn't:

Create new user newuseraccount. In Terminal, do:
$ sudo -s (enter password)
$ cd /Users
$ rm -rf newuseraccount
$ mv olduseraccount newuseraccount
$ chown -R newuseraccount:staff newuseraccount
That's it -- good luck!
    •    
  • Currently 2.33 / 5
  You rated: 4 / 5 (9 votes cast)
 
[25,841 views]  

10.5: Avoid an Active Directory 10.5 upgrade issue | 6 comments | Create New Account
Click here to return to the '10.5: Avoid an Active Directory 10.5 upgrade issue' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.5: Avoid an Active Directory 10.5 upgrade issue
Authored by: fitzage on Oct 30, '07 11:18:38AM

Did you try rebinding after all this, and does it work?

I upgraded without unbinding, but I had local admin accounts, so I didn't need this hint. The problem is that Leopard always thinks the directory server is not responding. I can't unbind because I get unspecified errors every time.

Should I even bother dealing with it? I converted my account to a local one. If I was able to get my machine unbound, would it be possible to bind it again, or does it just not work in Leopard for some reason?



[ Reply to This | # ]
10.5: Avoid an Active Directory 10.5 upgrade issue
Authored by: gerritdewitt on Nov 02, '07 09:00:40AM

With all respect, this information is useful, but it's pretty obvious, and it doesn't actually solve any Active Directory + Leopard problems. I think the hint is very well written, especially for those who need guidance with unbinding from a directory domain in single-user mode. However, it does not solve any of the problems with Leopard and AD! I think a better title would be "How to Unbind from AD in Leopard."

--Gerrit



[ Reply to This | # ]
10.5: Avoid an Active Directory 10.5 upgrade issue
Authored by: Aaron Wyatt on Oct 30, '07 01:52:39PM

You don't need to login as root to unbind from AD. If you login to single user mode and mount the boot volume read/write, you can remove/backup all the conifg files in /Library/Preferences/DirectoryService. Now reboot and your computer will have lost it's AD bind, though the computer account will still exist on the Domain Controller.

If you already have a local account, you can now login with that, then use fast user switching to login to your old AD account (I had AD account cacheing turned on, so this may not work otherwise).

I'm still working on figuring out what the exact problem and solution is, because AD worked great in the developer seeds....



[ Reply to This | # ]
10.5: Avoid an Active Directory 10.5 upgrade issue
Authored by: fitzage on Oct 30, '07 02:00:29PM

Cool. I'll go that route, and try to bind it again.



[ Reply to This | # ]
10.5: Avoid an Active Directory 10.5 upgrade issue
Authored by: fitzage on Oct 30, '07 03:32:14PM

I can't re-bind it, but I was able to clear the binding using that tip.



[ Reply to This | # ]
10.5: Avoid an Active Directory 10.5 upgrade issue
Authored by: indy1979 on Nov 03, '07 03:05:57AM

I just upgraded to 10.5 on an AD binded Mac and had zero issues. Here is my setup and what I did.

Setup:

Primary user is an AD user on a Windows 2003 SBS machine. I have a local system account for troubleshooting and debugging.

1. In 10.4 log on with local system account.
2. Unbind from AD.
3. Upgrade OS.
4. Log on with local system account.
5. Bind to AD.
6. Log out and log in with AD user.

Nothing got broken when I did it this way. All the AD user files were still available and everything was just how I left it.

Sam



[ Reply to This | # ]