It sounds that there is an issue with connecting to the LDAP service (you can authenticate w/ kinit but can't browse the directory). It could be server's firewall but I suspect you are not having an issue with Linux workstations.  Mac OS's directory services setup is likely the issue, if in Directory Utility > Directory Editor with a freeIPA node selected there are no objects. I'd verify that the server's public cert is installed on the workstation and working (web browse from workstation to freeIPA server). If the cert test works, delete the LDAPv3 service from the Directory Utility and rebuild the service configuration. 

On Tue, May 8, 2018 at 10:33 AM Jeffrey Parker via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
I did create local user accounts and converted to mobile, but there never seemed to be any link to FreeIPA on those accounts. When I went to browse the accounts in Mac OS X it could not connect to the directory server. I did get Active Directory working and was able to get Mac OS X working with Active Directory.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org


--
Jason Sherrill
IT Manager
office: 412-515-8309