<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: MAC Users on Domain identified as &amp;quot;Unknown&amp;quot; Users in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/mac-users-on-domain-identified-as-quot-unknown-quot-users/m-p/45665#M33559</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;There's really no difference in troubleshooting authentication problems between Mac OS X and Windows. The computer needs to be joined/bound to the Active Directory domain, and the user needs a valid user account. &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;You can validate sucessful domain authentication in OS X using Ticket Viewer. &lt;A href="http://www.jaharmi.com/2009/08/29/view_kerberos_tickets_with_ticket_viewer_in_snow_leopard"&gt;http://www.jaharmi.com/2009/08/29/view_kerberos_tickets_with_ticket_viewer_in_snow_leopard&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Past that, you need to make sure you have successful and failure authentication auditing enabled on your default domain controller policy. &lt;/P&gt;&lt;P&gt;&lt;A __default_attr="2801" __jive_macro_name="document" class="jive_macro jive_macro_document" href="https://live.paloaltonetworks.com/"&gt;&lt;/A&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Tue, 17 Jul 2012 14:28:01 GMT</pubDate>
    <dc:creator>mharding</dc:creator>
    <dc:date>2012-07-17T14:28:01Z</dc:date>
    <item>
      <title>MAC Users on Domain identified as "Unknown" Users</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/mac-users-on-domain-identified-as-quot-unknown-quot-users/m-p/45664#M33558</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello Guys.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Before I describe the issue; just want to let you all know that I am no Apple Geek and have very very limited knowledge of Apple products (don't know why but was never fascinated).&amp;nbsp; Right, the issue is as follows:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;My client has installed Snow Leopard the latest version of OS in-order to have the integration with Windows Domain Controllers.&amp;nbsp; The first issue was that MAC users when logging onto the devices using domain credentials were being challenged by Captive Portal.&amp;nbsp; This issue was sorted by obviously setting no captive portal rule for the domain users.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;After resolving the above issue, the users are not being challenged by CP but are now being identified as "unknown" users.&amp;nbsp; Now, how can I go around troubleshooting this issue?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;1.&amp;nbsp; First thing I would think of is; Are the logon Account names matching on how they were defined on the domain controller / groups?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;2.&amp;nbsp; When the MAC users login / authenticate using the domain credentials the security logs should be similiar to the logs when users authenticate using Windows machines.&amp;nbsp; Is this happening?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;3.&amp;nbsp; If the above two steps are working perfectly fine, then what should I look into?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Any ideas or suggestions will be very much appreciated.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Look forward to hearing from you guys..!!!&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Many Thanks,&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;P&gt;Kalyan&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 17 Jul 2012 13:47:56 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/mac-users-on-domain-identified-as-quot-unknown-quot-users/m-p/45664#M33558</guid>
      <dc:creator>kalyanram.piratla</dc:creator>
      <dc:date>2012-07-17T13:47:56Z</dc:date>
    </item>
    <item>
      <title>Re: MAC Users on Domain identified as "Unknown" Users</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/mac-users-on-domain-identified-as-quot-unknown-quot-users/m-p/45665#M33559</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;There's really no difference in troubleshooting authentication problems between Mac OS X and Windows. The computer needs to be joined/bound to the Active Directory domain, and the user needs a valid user account. &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;You can validate sucessful domain authentication in OS X using Ticket Viewer. &lt;A href="http://www.jaharmi.com/2009/08/29/view_kerberos_tickets_with_ticket_viewer_in_snow_leopard"&gt;http://www.jaharmi.com/2009/08/29/view_kerberos_tickets_with_ticket_viewer_in_snow_leopard&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Past that, you need to make sure you have successful and failure authentication auditing enabled on your default domain controller policy. &lt;/P&gt;&lt;P&gt;&lt;A __default_attr="2801" __jive_macro_name="document" class="jive_macro jive_macro_document" href="https://live.paloaltonetworks.com/"&gt;&lt;/A&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 17 Jul 2012 14:28:01 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/mac-users-on-domain-identified-as-quot-unknown-quot-users/m-p/45665#M33559</guid>
      <dc:creator>mharding</dc:creator>
      <dc:date>2012-07-17T14:28:01Z</dc:date>
    </item>
  </channel>
</rss>

