New network user enabled in FileVault not showing up on FileVault login window

Originator:nls.inbox
Number:rdar://34625926 Date Originated:25-Sep-2017 10:23 AM
Status:Open Resolved:
Product:macOS + SDK Product Version:17A362a
Classification:Serious Bug Reproducible:Always
 
Summary:
Doing a clean install of High Sierra 10.13 Beta (17A362a) on both a VM and physical MacBook Pro, I encounter the same issue where users who are enabled in FileVault do not show on the login window

Steps to Reproduce:
* login as local admin and join the computer to our domain
* turn on FileVault and wait for encryption to finish
* restart
* login as local admin, then do a logout to get to the login window
* login as network user
* after login, granted network user local admin rights in user and groups pane
* enable user in file vault .. get the error "Some Users weren't added … the following users weren't allowed to unlock this disk because of an unknown error occurered: test_scottnl."
* I logout
* login as local admin
* enable the network user in the FileVault pane, this time with no error message
* restart
* only local admin shows up on the FileVault login.
* login as local admin
* check users and groups pane .. verify network user has local admin rights
* check fillevault pane …verify user is enabled
* run command from the terminal to list local admins to verify my user is in the group.
    * `members () { dscl . -list /Users | while read user; do printf "$user "; dsmemberutil checkmembership -U "$user" -G "$*"; done | grep "is a member" | cut -d " " -f 1; }; members admin`
* restart
* only local admin shows up on the FileVault login.

Expected Results:
After enabling users in the FileVault pane and restarting. New network (AD mobile account) users should show on the loginwindow

Actual Results:
After enabling users in the FileVault pane and restarting. New network (AD mobile account) users are not showing up on the loginwidow

Version:
17A362a

Notes:

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!