AFP548 Changing the world one server at a time.

AD specifying OSX Home without LDAP or Server AD Bind

Home › Forums › OS X Server and Client Discussion › Active Directory › AD specifying OSX Home without LDAP or Server AD Bind

  • This topic is empty.
Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #358914
    Anonymous
    Guest

    Following on from  ‘Can you do AD and OD with MCX from WGM?’
    (sorry this is a bitt of a mounthful)
    is it possible with methods described there i.e. binding client to both AD and OD with OD Server not bound to AD but providing WGM. To specify AD home directory path to be on the OD Server?? (I’m guessing if this is the case I may have to script the home directory creation but any pointers would be great). Thanks for the wicked site. . .

    #358949
    Anonymous
    Guest

    After many an hour staring at screens I just wanted to note that I have managed with a OD master (with KDC running) OS X server with AD plugin bound to AD that I have managed to get network user home folders working on the OS X Server.

    I had to manually alter the edu.mit.kerberos file to reflect two domains (as the autoconfig did not seem to work (I believe the OD master can overwrite also unless autocreation lines are removed).

    I should also note to save other people from spending too much time on this – if they make the same mistake I did. You should enter the fully qualified domain name of the server in the directory path to home folder on the Ad server ‘s user account. As I was copying some windows entries I made the mistake of only putting the server host name in (even though this would resolve – and I had tested this). Once I resolved this everything worked a treat.

    Obviously this required the command line options of dsconfigad dsconfigad -localhome disable’ & ‘dsconfigad -mountstyle afp’

    #358950
    Anonymous
    Guest

    I should have noted in the previous post (sorry its late) that I ended up binding the server to AD as I could not seem to resolve network share authentication issues from the client.

    The reason I did not want to bind the server was I had heard it tended to break the KDC – with a bit of massaging I managed to get this resolved so not an issue 😕

Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.