AD Groups in Apache Realms

[kreynen]

Apple FINALLY confirmed that while AD Groups show up in the Server Admin > Web >Realms, they do not actually work. That only took 2 months.

[kreynen]

Here’s the situation…

I have a few OSX servers and a hundred or so OSX clients all bound to AD. Student folder permissions are set so they are the owner and everything works fine. Faculty have class folders that have drop boxes. If a student is using a laptop or is logged into a lab computer as someone else, the dropboxes work fine. If the user is logged into the lab computer as their AD user, they can’t use dropboxes. They can connect to the server, modify files in their user dir, even see that the dropbox is a dropbox… but when they start transfering files they get an “operation cannot be completed because you do not have sufficient priviledges for some items” error.

Again… the student can copy to their user directory, just not a dropbox… but they can use a dropbox from any unbound machine or even a bound machine that is logged in as someone else. The clients are 10.4.3. The server is 10.3.9.

Any ideas?

[Author]

Posts