Home Forums OS X Server and Client Discussion Active Directory OD homedirs to a ADOD magictriangle Re: OD homedirs to a ADOD magictriangle

#377141
sheridanp
Participant

dagothere thanks for the most excellent reply,

I was lucky enough to find the a utility called passenger (which is used a lot in Apple networks), its a for payment utility i.e. you can only import like 20 users at a time when its in unregistered mode BUT there is a feature that called Batch Permissions MOD which is basically a front end for a script that your creating here. You should really look at it (not that you need to), it allowed me to assign base permissions to a home dir and propagate them from that point onwards. Then I was able to assign permissions to specific directories in the user home dire i.e.

/studdata/year1//Documents
/studdata/year1/
/Desktop
/studdata/year1/
/public
/studdata/year1/
/public/dropbox
etc. etc.

As long as the base directory name () matched a user name in AD it assigned what ever POSIX permissions I wanted to. What was even better i was able to assign AD group permissions to the files as well in the following format

‘CURRIC\domain users’

the commas around the string are important, that way I was able to assign user and group permissions in any configuration I wanted. What really great its all done in a GUI interface that is easy to use and logs everything so you can go back and see what went wrong i.e. a user dir is spelt incorrectly or doesn’t exist in AD.

Oh when I mentioned before its a pay for utility, the batch mod part isn’t, you can use to build the script and then run it on a directory hierarchy of 10 users, 1000 users or even 10,000 users, its all scalable.

The only thing I had to do before hand was run chmod -RN * (when in the base dir where the users where stored) to make sure there weren’t any acl blocking access to any files or folders.

Again thank you for the reply and I hope my reply augments your excellent suggestion.

Regards

sheridanp

Comments are closed