Ad Connector Problems

[jhanna]

We are using Untangle 7.1 with a Server 2008 R2 DC and the Policy Manager and AD connector. I have two racks defined, default and management. We are not yet using the parent/child hierarchical rack feature. The management rack is applied by user name. The AD connector works most of the time for most users but it randomly returns IP, hostname$, hostname instead of IP, username, hostname. see example:

Users found:

/192.168.1.69: espeitel work-53
/192.168.1.105: mshafeek work-34
/192.168.1.59: tbailey work-71
/192.168.1.52: jhanna work-60
/192.168.1.79: work-200$ work-200 **here is the issue***
/192.168.1.86: ebaker work-55
/192.168.1.100: dwilson work-30
/192.168.1.62: work-66$ work-66 **here is the issue***

When this happens, the users effected no longer use the management rack but are directed to the default rack. It also effects the reporting.

It worked fine until recently when we upgraded the DC from Server 2003 to 2008 R2. Untangle was also upgraded from 7.01 to 7.1 in the same time frame. I know about signing requirement for LDAP clients and have it disabled on the DC. I don't know which change broke it.

The login scrip for untangle is launched through Group Policy for all users. If you run it by hand and check logged in users, the user will report correctly but randomly change back.

I am at a loss as to how to fix it. Anyone have a suggestion?