AFP548 Changing the world one server at a time.

ADAM, AD and 10.5 Schema issues.

Home › Forums › OS X Server and Client Discussion › Active Directory › ADAM, AD and 10.5 Schema issues.

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • July 18, 2008 at 12:47 pm #373431
    DMcCoy
    Participant

    I’ve been playing with the schema analyzer to build an ldif for AD.

    This has all gone well and I can get all the attributes and classes, minus the existing ones in AD. There are in fact several mistakes in the best practises guide from apple too!

    I am trying to export the 10.5 schema, and have done a full ldif and selective for those items mentioned on the guide. When I try and change preferences or computer lists or user settings I get a -14142 error from WGM. This seems to centre round an 6002 (OBJ_CLASS_VIOLATION) error in AD, and I am suspicious that it is the new changes to the mcx_settings and mcx_flags options in the 10.5 schema. The Mac OS X container is created and AD logging shows a successful attempt to write the property, but with full logging I can see AD throw an internal error as mentioned above.

    I will also try with 10.4, but wonder if anyone else has successfully extended AD with the 10.5 schema.

    David McCoy

    July 18, 2008 at 4:14 pm #373434
    DMcCoy
    Participant

    Quote by: MacTroll

    DMcCoy wrote:

    There are in fact several mistakes in the best practises guide from apple too!

    What guide are you referring to here?

    You need to change the objectClassCategory for the object classes as well.

    Oh, didn’t know I needed to change anything! All I have to go on is this http://images.apple.com/itpro/pdf/AD_Best_Practices_2.0.pdf and the few bits I’ve picked up from postings.

    I’ve never found anyone in the UK to ask for the scripts :/

    The bits in the guide I *assume* are wrong

    dn: CN=apple-mountDirectory,CN=Schema,CN=Configuration,DC=X (mountDirectory)
    dn: CN=apple-mountDumpFrequency,CN=Schema,CN=Configuration,DC=X (mountDumpFrequency)
    dn: CN=apple-mountOption,CN=Schema,CN=Configuration,DC=X (mountOption)
    dn: CN=apple-mountPassNo,CN=Schema,CN=Configuration,DC=X (mountPassNo)
    dn: CN=apple-mountType,CN=Schema,CN=Configuration,DC=X (mountType)
    dn: CN=apple-Managed Client Preferencesflags,CN=Schema,CN=Configuration,DC=X (mcx-settings)
    dn: CN=apple-Managed Client Preferencessettings,CN=Schema,CN=Configuration,DC=X (mcx-flags)
    dn: CN=apple-mount,CN=Schema,CN=Configuration,DC=X (mount)

    July 18, 2008 at 7:30 pm #373440
    DMcCoy
    Participant

    Thanks for that, I’d just altered the objectclasscategories by looking at the ldap scheme with a ldap browser.

    I’m afraid i’ve just been using OS X server for a while, but not ldap.

    I’d just spotted the auxiliaryClass bits in the scripts from Shukwit in fact, not spotted them before while looking at the attributes.

    I only thought those items were wrong because the bracketed bits are my guess as to the attrib/class as they don’t exist with the name provided in the documentation. dn: CN=apple-Managed Client Preferencessettings,CN=Schema,CN=Configuration,DC=X for example isn’t the name, I just assumed someone has done a find and replace on the document for mcx with “Managed Client Preferences”.

    Anyway, I should be able to get it working now, thanks again for the help 🙂

    David

  • Author
    Posts
Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.