Hi all I have setup Kanaka on an sles10 sp3 oes2 server, and added all the ou's where my mac users are. Authentication works fine throughout the tree, with the exception of users directly under the org context. So users in ou=xxx.ou=yyy.o=zzz can login in fine but the 5 or 6 users directly in o=zzz get this error: Authentication failed due to logon rights not being granted to the account. The "O" context is at the top of the list of the user index. I can afp connect to the server that holds the home directories so I am stumped.

Any advice on this?