Update to Mac OS X v10.5.7 or later
Update the client to Mac OS X v10.5.7 or later; update the server to Mac OS X Server v10.5.7 or later.
Check DNS consistency
If the issue persists, review this article to ensure that the issue is not related to DNS.
Re-create certain Kerberos configuration files
If the issue persists after verifying DNS consistency, certain Kerberos configuration files used by Mac OS X may need to be created again.
To remove and re-create the files, execute the Terminal commands listed below:
ls -l Kerberos:*
Note: The above command lists all the Kerberos realms configured on the computer. Each Active Directory domain is represented by a separate realm file. Locate those that match your Active Directory domain(s) and remove them with the following command (the backslash before the colon is required):
Once removed, enter the following command to restart DirectoryService and rebuild the Kerberos configuration files upon your next connection to Active Directory:
sudo killall DirectoryService
TIp: If you use anti-virus software that performs real-time scanning, configure the software so it does not scan the /var/db/dslocal/ directory path. This may help avoid issues from occurring with certain Kerberos configuration files.