Configuring OD/AD Kerberos with a Disjoined Namespace
I just surfaced out of a situation with a Mac Server connected to ADwith Kerberos Authentication. Much help was received from Apple and I was given permission to share the "fix" for anyone else out thereattempting this type of solution.
The problem was the server name in AD and the DNS name were different(Disjointed Namespace). This is because our external domain name[server.outside.org] differs from the AD domain [ad.inside.org] and theAD domain is not available on the internet. Since this server isavailable to the outside world, we could not use the AD name. TheActive Directory Plug-in cannot reconcile this difference.
Read on for more….
Read more›
Recent Comments