No se puede crear una cuenta móvil en una máquina Mavericks conectada a AD

Cada vez que intento iniciar sesión como usuario de AD en un OS X Mavericks Macbook Pro, dice que no se puede crear una cuenta móvil. Tengo la configuración de AD establecida para crear una cuenta móvil al iniciar sesión, por lo que es correcto, pero no estoy seguro de por qué está fallando. Intenté ejecutar el comando de terminal para crear el usuario móvil (con información detallada) y esto es lo que devuelve: (El nombre de usuario se reemplazó con<username here>

bash-3.2$ sudo ./createmobileaccount -v -n <username here>
createmobileaccount built Nov 23 2013 15:20:29
verbose output on.
user name = "<username here>"
home path = "(null)"
user password = "(null)"
prompt for password = FALSE
encrypt new home = FALSE
create as external account = TRUE
home sync new account = FALSE
effective home path = /Users/<username here>
2013-12-20 08:14:17.753 createmobileaccount[9371:1303] ### authenticateUsingAuthorizationSync error:Error Domain=com.apple.systemadministration.authorization Code=-60007 "The operation couldn’t be completed. (com.apple.systemadministration.authorization error -60007.)"
2013-12-20 08:14:23.145 createmobileaccount[9371:507] MCXCCacheMCXRecordAndGraph(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_SUSPEND, &(uid=10175887), NULL) failed
2013-12-20 08:14:23.146 createmobileaccount[9371:507] MCXCCacheMCXRecordAndGraph(): [localNode createRecordWithRecordType:dsRecTypeStandard:Users name:"<username here"] == 4001 (Operation was denied because the current credentials do not have the appropriate privileges.)
2013-12-20 08:14:23.808 createmobileaccount[9371:507] MCXCCacheMCXRecordAndGraph(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_RESUME, &(uid=10175887), NULL) failed
2013-12-20 08:14:23.809 createmobileaccount[9371:507] MCXCCreateMobileAccount(): Failed to create account. Error = 4001 (MCXCCacheMCXRecordAndGraph failed). Cleaning up mobile account record.
*** mobile account could not be created: 4001 (Operation was denied because the current credentials do not have the appropriate privileges.)

He visto las líneas que indican que no tengo los privilegios apropiados pero estoy ejecutando esto como sudocon mi usuario administrador.

***Actualizado

Intenté ejecutar el comando con otra cuenta de administrador y obtuve un resultado diferente

bash-3.2$ sudo ./createmobileaccount -v -n '<username here>'
createmobileaccount built Nov 23 2013 15:20:29
verbose output on.
user name = "'<username here>'"
home path = "(null)"
user password = "(null)"
prompt for password = FALSE
encrypt new home = FALSE
create as external account = TRUE
home sync new account = FALSE
effective home path = /Users/'<username here>'
2013-12-20 09:44:16.603 createmobileaccount[9616:1303] ### authenticateUsingAuthorizationSync error:Error Domain=com.apple.systemadministration.authorization Code=-60007 "The operation couldn’t be completed. (com.apple.systemadministration.authorization error -60007.)"
2013-12-20 09:44:17.163 createmobileaccount[9616:507] MCXCCacheMCXRecordAndGraph(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_SUSPEND, &(uid=10175887), NULL) failed
2013-12-20 09:44:17.732 createmobileaccount[9616:507] MCXCCacheMCXRecordAndGraph(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_RESUME, &(uid=10175887), NULL) failed
2013-12-20 09:44:18.015 createmobileaccount[9616:507] MCXCCreateMobileAccount(): Failed to create account. Error = -6304 (mobile account file path is either not a directory or could not be properly created). Cleaning up mobile account record.
2013-12-20 09:44:18.019 createmobileaccount[9616:1303] ### authenticateUsingAuthorizationSync error:Error Domain=com.apple.systemadministration.authorization Code=-60007 "The operation couldn’t be completed. (com.apple.systemadministration.authorization error -60007.)"
2013-12-20 09:44:18.102 createmobileaccount[9616:507] MCXCDeleteAccount(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_SUSPEND, &(uid=10175887), NULL) failed
2013-12-20 09:44:21.579 createmobileaccount[9616:1303] ### Error: setMachineArray:(
    {
    date = "2013-06-13 23:01:20 +0000";
    "dsAttrTypeStandard:RealName" = '<old deleted username1>';
    "dsAttrTypeStandard:UniqueID" = 503;
    name = '<old deleted username>';
},
    {
    date = "2013-06-13 23:01:51 +0000";
    "dsAttrTypeStandard:RealName" = "'<old deleted username2>'";
    "dsAttrTypeStandard:UniqueID" = 502;
    name = '<old deleted username>';
},
    {
    date = "2013-06-25 21:46:17 +0000";
    "dsAttrTypeStandard:RealName" = temp;
    "dsAttrTypeStandard:UniqueID" = 504;
    name = temp;
},
    {
    date = "2013-08-07 15:29:02 +0000";
    "dsAttrTypeStandard:RealName" = "'<old deleted username3>'";
    "dsAttrTypeStandard:UniqueID" = 501;
    name = '<old deleted username3>';
},
    {
    date = "2013-12-20 16:44:21 +0000";
    "dsAttrTypeStandard:RealName" = "username here";
    "dsAttrTypeStandard:UniqueID" = 10175887;
    name = "'<username here>'";
}
) forKey:deletedUsers inDomain:com.apple.preferences.accounts
2013-12-20 09:44:21.580 createmobileaccount[9616:507] MCXCDeleteAccount(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_RESUME, &(uid=10175887), NULL)failed
*** mobile account could not be created: -6304 (MCXCCreateMobileAccount(): [newUser createHomeDirectory] failed)
¿Ha intentado hacerlo a través de la interfaz de usuario en lugar de la terminal?

Respuestas (1)

Terminamos solucionando el problema ejecutando el comando:

sudo /System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobileaccount –v –P –n networkusername

Todavía no estamos seguros de por qué no crearía automáticamente la cuenta, pero funcionó para lo que necesitábamos.

Gracias