1

I have a macOS Sierra (10.12.3) machine hooked up to an AD domain aka "Network Account Server" but I am unable to change my password and I get the error below when I attempt to do so:

The server is not available. Change your password when the server becomes available.

However in "Users & Groups" preferences pane the "Network Account Server" indicator is green. I opened up the "Directory Utility", opened up the domain under "Services", expanded the details, clicked on the "Administrative" tab and told it to use a specific domain server via "Prefer this domain server". However that has no effect.

Delving into logs I can see the following from "opendirectoryd"

queuing request to connection - '<private>'
Client: <private>, UID: 0, EUID: 0, GID: 0, EGID: 0
Client: <private>, UID: 1234567, EUID: 1234567, GID: 1234568, EGID: 1234569
finding record to do authentication
queuing request to connection - '<private>'
* continuing with offline authentication for cached user
Verify password result: 0
finding record to do authentication
queuing request to connection - '<private>'
* setting policies / password for offline account is not allowed
* Change password result: 5200

I've highlighted the lines (*) with the most pertinent messages. I don't understand why it thinks I'm offline when the AD domain controller is reachable.

You must log in to answer this question.

Browse other questions tagged .