Security Update 2007-004 (#7): Active Directory login issues

Problems with Active Directory login apparent after the latest Apple security update -- several fixes are listed.

CNET staff

Sept. 2, 2009 1:24 a.m. PT

3 min read

Active Directory login issues In addition to the problems with general Mac OS X login we've noted after application of Security Update 2007-004, some users are reporting problems logging into Active Directory services after the update.

MacFixIt reader Cameron McConnochie writes:

"All of our Macs are bound to Active Directory. Since installing security update 2007-004 we are unable to login correctly. When you first attempt to login an error saying 'You are unable to log in to the user account 'username' at this time, logging in to the account failed because an error occurred. The home folder for the user account is located on an AFP or SMB server.' The home drive is in fact located on an SMB server. If you retry it does log you in, so authentication seems to be working. When it's finished logging in an error saying 'your home folder wasn't found in the expected location' is displayed.

"Depending on the user, the home folder can be on one of two SMB shares. I have found that if I try logging in the first time as a user on one of the shares I can then log in OK as a user from the other share. Could it be an issue with Samba or automount?"

Indeed Security Update 2007-004 makes several changes to the SMB architecture -- used by Active Directory services -- in Mac OS X. In particular, it replaces the following files with new versions:

/sbin/mount_smbfs (used to mount SMB [Samba] shares)
/System/Library/Extensions/smbfs.kext (used for interacting with SMB filesystems)
/System/Library/Filesystems/smbfs.fs (used for mounting SMB filesystems)

As such, one potential cause for the aforementioned Active Directory issues is modification of these files. First, however, try these traditional fixes:

Delete then re-add the Active Directory domain in Directory Access (located in Applications/Utilities) as described here.
Use the instructions in Knowledge Base article #303841 to change the startup parameters of automount.

Failing the above, you can try replacing the SMB files replaced by Security Update 2007-004 via these instructions. The general warning for mixing and matching components from different system updates applies here: you could cause compatibility problems and will certainly lose any refinements brought about by the revised edition(s). Consequently, this should be used only as a last resort.

Download the Mac OS X 10.4.9 combo updater appropriate to your system from Apple's download page.
Download and install the shareware application Pacifist
Drag the Mac OS X combo installer package (e.g. MacOSXUpd10.4.9Intel.pkg) onto the Pacifist application icon.
Find the file you are looking for by clicking the disclosure triangles to reveal the targeted location (/sbin/mount_smbfs for instance, can be found by clicking the disclosure triangle next to sbin)
Select the file in question and click the Install button in Pacifist. You will be required to enter your administrator password.
Repeat the above step for each file to be replaced.
Restart your Mac

Previous coverage:

Resources

here

#303841

Apple's download page

Pacifist

Security Update 2007-004 (...

Security Update 2007-004 r...

Computing Guides

Laptops

Desktops & Monitors

Computer Accessories

Photography

Tablets & E-Readers

3D Printers