Tested removing DS Prefs, tested Timeout extension
 

Deleted the Preferences folder for Directory Services, restarted, created a brand new object in AD (Dir Util discovers it and that way I don't have to tweak the default OU structure) and...
Still was told that I was using a name/password combination that was invalid.
I tried binding using a name that was not yet in AD and same result.

Worked the timeout solution, tried 5 seconds and even 10 seconds for mdns_timeout, no change, and it did not seem to take any longer to time out.
Even changed the pdns_timeout and that didn't help either.

I tried authenticating with DOMAIN\MyAdminName (as opposed to just MyAdminName which is usually what works) and it was no better.

schwartze, not sure what you are referring to with 'cached credentials' - if you mean the local home, that was not affected and my client's keychains are intact. I turned off AD authentication and she logs in to her local user home and the servers authenticate her as she invokes them.
But our setup may be different. Here we can't use guest accounts and must show blank name and password fields.

Rick

Hi,
I'd like to know if you ever solved this problem?
I am experiencing the same problems throughout my workplace where sometimes it just won't let me rebind to a network.

I'm also having the issue that some users log on and almost instantly get a message saying 'unable to log you on at the moment'. Sometimes restarting helps, sometimes it needs rebinding. What I don't understand is that if a user uses Mac1, can't log on, moves to Mac2, can't log on. I come up, unbind and rebind Mac2, and the user can use both Mac2 and Mac1. Make any sense?

If you can help, I'd be hugely grateful!
Thanks
LCM Technician

The unable to log you on at the moment can be fixed by editing the auto_master file in the /etc folder.
It is caused by the Mac remembering the last user's credentials for their AD "H" drive so when someone else logs on, the logon fails.
Simply put a # in front of the /Network/Servers line so the file looks like this:-

----------------------------------------------------------------------------
#
# Automounter master map
#
+auto_master # Use directory service
/net -hosts -nobrowse,nosuid
/home auto_home -nobrowse
# /Network/Servers -fstab
/- -static

----------------------------------------------------------------------------

Note, you must restart the Macs to make the change effective.

I just realized I was wrong, dsconfigldap is for OD only, dsconfigad is for AD. You can use it to script unbinds, binds, whatever