active directory

[lamasculo]

Hi

We have integrated Apple X and Active Directory.

We have done this as a trial for educational establishments which currently run both Microsoft & Apple thus at the moment have a lot of dual accounting.

Anyway, we have integrated AD & OSX we have done the extra stuff of adding to the AD schema. All home dirs etc reside on the win2k machine, the OSX is only going to lockdown the client environment. For OS9 client logging in via Macintosh Manager everything works fine, Win clients its cool too. OSX clients are a tad troublesome. In the schema our mounts entry is cn not an ou. When you set directory access on an OSX client it assumes that the mounts is an ou, with this if you login, the home dir doesnt work correctly but the sharepoint is mounted so you can navigate there. If you alter directory access and make mounts an ou, you get the home directory but then the perfomance of the machine is like a lead welligton boot.

any ideas

David

[lamasculo]

Hi Joel

this sounds like what we are looking for.

just a couple of things I dont know/understand.

I can see how to make a group in netinfo with your users from AD but I dont know where I would put the mounts info.

I know how the OS9 clients connect (my OSX server is MM server), but my OSX clients get their info directly from AD. Should my OSX clients be pointing to my OSX server and it in turn gets its info from AD??

excuse me being a bit thick here

thanks in advance

David

[lamasculo]

just to let you know that it all works ok now.

we had incorrectly configured the Mounts part on AD, we had a spurious \

which made /Network/Servers/servername/mountpath/\mountpoint

the machine/user could logon but performance was baad.

its ok now

[lksixt]

Hi David, Joel.

I’ve been reading all about integrating AD & OSX. (fat of the lan, Joel’s article and others). I have a W2K AD environment, and students that use iBooks. I want to authenticate against AD, keep their home folders on the W2K machine, but use the XServe for Client Management.

I might be confused but it looks as if the articles were geared toward users that did not want to use the XServe/OSXS for Client management. I am the one and only network/sys admin/AD person so I can modify the AD schema if necessary, but it also means I’m in this alone and don’t have anyone to really bounce ideas off of… all help is appreciated 🙂

David, is this the same type of environment you are in? Did you follow the steps from Joel’s article or did you do something else?

~laura

[lksixt]

Joel, your right… it might have helped for me to read the entire article and not just the first half 😳

Did you ever write the followup article regarding using Kerberos?

~laura

[Author]

Posts