AFP548 Changing the world one server at a time.

using OD for authentication with NO home folders

Home › Forums › OS X Server and Client Discussion › Open Directory › using OD for authentication with NO home folders

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • January 21, 2010 at 4:59 pm #377859
    beemerkid
    Participant

    We are looking to set up an Open Directory on a Snow Leopard server in our medium sized company – we would like to use it for Single Sign On authentication but do not want to create home folders on the server. All we want OD to do is authenticate

    We have been able to authenticate using OD bound and unbound but both need home folders. Is there a way to have no home holder and still authenticate?

    thanks

    February 22, 2010 at 10:02 am #378035
    s_groening
    Participant

    You could opt for a setup involving mobile accounts, which are OD controlled Macs with OD users allowed to login with local home directories instead of server based home directories.

    Setup a computer group to contain your individual computer accounts and setup the desired login preferences directly from WGM.

    MCX is then active on the computers, allowing you to force change of passwords, group memberships, print quotas etc.

    If you wish, you can let users replicate/syncronize data towards the server based on either a selection of folders or the entire home directory (which seems to defy your purpose, though).

    February 24, 2010 at 1:18 am #378060
    arekdreyer
    Member

    beemerkid wrote:

    We have been able to authenticate using OD bound and unbound but both need home folders. Is there a way to have no home holder and still authenticate?

    —
    Here are two ways to have users from OD log in with LOCAL home folders (rather than network home folders). Note that an OD user must have SOME home folder defined in order to log in at the loginwindow on a bound client.

    One way is to use managed preferences to force the creation of mobile accounts, and specify “Home folder location” as “on startup volume”
    See the illustration on page 67 of the tandtleo14.3.pdf document (use google to find it).

    Another way is to use Workgroup Manager to specify a local home folder for a network user account:

    Select the user
    Click the Home tab
    Click the Add button (+)
    In Full path, enter /Users/arekdreyer
    Click OK
    Now /Users will be listed in the Home tab
    Select the other users, select /Users, and click Save.

  • Author
    Posts
Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.