Using pwpolicy to Manage User Password Policies via CLI
Have you ever wanted or needed to change a user's password policies from the command line? Read on to find out how pwpolicy can help you manage user's passwords without Workgroup Manager.
Category: Directory and Identity
Setting up a Network Library Folder
An article that helps you create /Network/Library.A quick walk-through of setting this up by Jason Bruder can be found here.
AD Binding via a LoginHook
One of the things that can make rollout plans go much smoother is automation. Through imaging and scripting I recently cut a rollout from 24 steps to 4! One thing here that can get you is AD binding, as it acts funky when trying to run as a post-restore script or as a startup item.
MacEnterprise.org "ADmitMac" Webcast
The MacEnterprise.org (formerly MacOSXLabs.org) group will be presenting a "ADmitMac" WebCast Tuesday, September 21 at 1:00 pm EDT. Paul Nelson, V.P of Engineering at Thursby Software Systems, will be presenting on ADmitMac, a tool that integrates Macintosh machines into Microsoft networks.
BDB Utilities
The Berkeley DB tools that should have come with the OS Michael Bartosh has a pkg installer for the Berkeley DB utilities that are necessary to roll your Cyrus and OpenLDAP transaction logs in addition to performing other housekeeping chores for any bdb database.
Using OS X Open Directory to authenticate Squid Proxy Server
How to get Squid on another machine to authenticate to an Open Directory LDAP server. While this example shows how to do this with a Red Hat box, the process is pretty much the same for any Unix/Linux.
Single Sign On for AFP using AD
How to kerberize your OS X Server when using AD for authentication. I was going to write up my own, but Michael has done a great job of documenting all this and there's nothing I can add.
AD/OD Group Synchronization
This script synchronizes AD group membership with OD group membership. Use this to better manage MCX settings for AD groups. You can download it here.
AD-OD Integration Whitepaper – Updated
A detailed overview of how to integrate OS X clients into an Active Directory environment while still retaining the ability to manage the clients with the OS X Server tools. Now up to version 1.4. Lots of changes including a section on troubleshooting.
Errors Regarding Unavailable Home Directories
I was having some trouble with a large Open Directory installation recently - users were able to authenticate, but never saw their desktop - they got a "you are unable to log in at this time..." error instead, then were logged back out.