AFP548 Changing the world one server at a time.

Augmented User in Workgroup Mode

Home › Forums › OS X Server and Client Discussion › Open Directory › Augmented User in Workgroup Mode

Viewing 5 posts - 1 through 5 (of 5 total)
  • Author
    Posts
  • #372076
    bkaplan
    Participant

    I am trying to get augmented users working Workgroup mode. According to the apple docs this should allow any users who are added to a particular group on my OpenLDAP server to automatically be entered in my OD server with the same credentials. Unfortunately the only way to do this is by importing the users or groups from the server preferences. No mater what I do Server Preferences can not find my groups.

    My steps so far
    1) Add OpenLDAP server via Directory Utility
    2) Change mappings for OpenLDAP to OD

    I can login to my OSX server with the credentials of a user from my OpenLDAP server after #1, so I know that works
    I can see my users and groups, and the users in a particular group from dscl.

    I simple can’t see any groups to try and import, has anyone got this working? Does it even work?

    #372086
    bkaplan
    Participant

    The server I want to pair with is an OpenLDAP derivative, but I have been testing with a standard OpenLDAP server default install on a debian box. My users are all objectClass inetOrgPerson and posixUser, I have no problem going in and giving the users all GUIDs, but do you know which object class/property I should put the GUID in? Also can it be a standard apple GUID, or does that have to be special?

    #372093
    bkaplan
    Participant

    The reason I am using workgroup mode is that I have read people have had issues getting calendar and wiki to work as seamlessly and easily when using advanced mode. Also, it would look like I have to add each new user to OD manually vs. automatically if I just import the group. And lastly, don’t I have to be explicit about each property I want to augment, I really only care about the userid/password coming from my openldap server.

    #372094
    bkaplan
    Participant

    So i tried adding the apple-generateduid to my user and still no luck, i am starting to wonder if this was ever tested?

    #372100
    bkaplan
    Participant

    Ah… Ok that makes sense then. I wish I knew what to add as it would seem easier to me to simply add an objectClass to my LDAP directory vs making my server Advanced and creating the augmented config.

    On that note, what is a good resource for finding the names of other attributes for the augment attribute list?

Viewing 5 posts - 1 through 5 (of 5 total)
  • You must be logged in to reply to this topic.