Mac OS X: Server-based users can‘t log in, or don‘t appear in the Login Window user list

After a computer starts up or wakes from sleep, server-based accounts may not appear in the Login Window's user list, or users with these accounts may not be able to log in. However, you may notice that this issue doesn't occur if you have first logged in and out with a local user account.
Tip: Remember that your preferences and the type of account determine whether a server-based account is supposed to appear in the user list. Some users type their names instead. Thus it may be normal for accounts not to appear in the user list, and you would troubleshoot those accounts based strictly on the ability to log in.

This issue occurs in Mac OS X 10.3 through 10.3.4. To resolve the issue, follow these steps:

  1. Update client computers to 10.3.5 or later.
  2. Avoid using DHCP Option 95 with a manual or customized Directory Access configuration. (If you do, the issue will persist.)
  3. AirPort-connected computers must specify a specific network (see Note 3).

Notes:

  1. After updating to 10.3.5, there will still be a 20 to 30 second delay before a network-based user can log in or until the user list starts to populate in the Login Window. That's the normal behavior for this type of configuration.

  2. As an alternative to DHCP Option 95 with a manual or customized Directory Access configuration, do only one of the following:
    • If you automate Mac OS X client directory setup and specify the LDAP Directory Server via DHCP Option 95, then don't customize the Authentication Search Path (which is configured via the Search pop-menu, located by clicking the Authentication tab in Directory Access).  The Authentication Path must be set to Automatic.
    • If you manually configure any aspect of Mac OS X client Directory Access configuration (this includes manually entering your LDAP Server information) and use a DHCP Server for client IP address configuration, then Option 95 must be disabled on your DHCP Server. If you can't disable Option 95, then your client computers must have manually assigned IP addresses.

  3. Here's how AirPort-enabled computers specify a network:

    • From the Apple menu, choose Location, and from the submenu choose Network Preferences.
    • From the Show pop-up menu, choose AirPort.
    • Click the AirPort tab.
    • From the By default, join pop-up menu, choose A specific network.
    • Enter the name of the AirPort network in the Network field.
    • If the network requires a password, enter it.
    • Click the Apply Now button.


Published Date: Feb 17, 2012