Home › Forums › OS X Server and Client Discussion › Active Directory › OD homedirs to a ADOD magictriangle › Re: OD homedirs to a ADOD magictriangle
dagothere thanks for the most excellent reply,
I was lucky enough to find the a utility called passenger (which is used a lot in Apple networks), its a for payment utility i.e. you can only import like 20 users at a time when its in unregistered mode BUT there is a feature that called Batch Permissions MOD which is basically a front end for a script that your creating here. You should really look at it (not that you need to), it allowed me to assign base permissions to a home dir and propagate them from that point onwards. Then I was able to assign permissions to specific directories in the user home dire i.e.
/studdata/year1/
/studdata/year1/
/studdata/year1/
/studdata/year1/
etc. etc.
As long as the base directory name (
‘CURRIC\domain users’
the commas around the string are important, that way I was able to assign user and group permissions in any configuration I wanted. What really great its all done in a GUI interface that is easy to use and logs everything so you can go back and see what went wrong i.e. a user dir is spelt incorrectly or doesn’t exist in AD.
Oh when I mentioned before its a pay for utility, the batch mod part isn’t, you can use to build the script and then run it on a directory hierarchy of 10 users, 1000 users or even 10,000 users, its all scalable.
The only thing I had to do before hand was run chmod -RN * (when in the base dir where the users where stored) to make sure there weren’t any acl blocking access to any files or folders.
Again thank you for the reply and I hope my reply augments your excellent suggestion.
Regards
sheridanp
Comments are closed