Active Directory authentication

[djenness]

I wrote the post prior to this one from Guest. I have since tried to use the LDAP Browser from a client and I can connect but it doesn’t display all of the items. Might this be part of the problem?

Thanks. Deanna

[djenness]

I get the top of the directory but none of the items below it. ie: ou’s, users, etc

[djenness]

Sorry, its early morning on a Friday, I should be more specific than my last reply. When I browse with the LDAP browser I get the top of the directory as in dc=Desmet,dc=local. Below that it shows CN=Configuration (Desmet.local:389). When I try to expand that, I get an error LDAP Server Desmet.local:389 is down or unavailable Reconnect? When I try to click Reconnect, the same error continues to appear. Any ideas? If I am going directly to the Active Directory server, my firewall shouldn’t be affecting this should it?

Thanks, Deanna

[djenness]

Okay, I approached it differently but yes, it did come down to permissions. I am now able to see all of my directory structure and I have confirmed that the static mappings in Directory Services are correct.

RecordName maps to sAMAccountName
UniqueID maps to uSNCreated
RealName maps to cn
Password is not defined
HomeDirectory is not defined
NFSHomeDirectory maps to #/Users/DesmetStudent

my search base is correct
the LDAP3 server is configured in Authentication and still when I do a lookupd -d I only get 23 users returned which I assume are the local users because I should have more like 150.

I am soooo confused but thanks for your input.

Deanna

[djenness]

I have echo’d that same sentiment many times this last summer while I have worked on a variety of different operating systems and concepts besides Windows. I went into the SMB configuration in Directory Services and set the workgroup to the domain name and then set the IP address for the Wins server. I unchecked AppleTalk also. I now receive 164 answers when doing lookupd -d which is the correct number but I do not receive all the information such as user name etc, mine all starts at the DSAgent lines an includes the password of course because it is not defined in the mappings.

I will continue to bang my head and hope one of these times it actually works. I believe I am VERY close to a breakthrough. Thanks again for your advise and the article that I could actually understand on how to do this.

Deanna

[djenness]

One more post I hope. I finally got the #$%^ thing to work and I am getting all users when performing a lookupd -d and I can log into the MAC using the AD information. The only problem now is that my applications won’t run. When I try to open Internet Explorer, it says it can’t run on this machine but when i log on as the local Administrator it runs just fine. Is this a local user permission I need to change. Sorry, I’m MAC illiterate but quickly learning.

Thanks, Deanna

[Author]

Posts