Can I use Active Directory Groups for my AFP Share?

[sapridyne]

I’m playing around with AD authentication and seem to have an issue when I make an AFP share… when I assign the “Owner” I can take a name from AD and it populates the Owner field. However, when I try to drag an AD group over, it bounces back to the list — it won’t work.

I read an earlier post about creating a local group, then adding AD users into the group — is that the ONLY way to use AD authentication? So, in other words, can I use AD GROUPS… or no?

Sure hope so… 🙂

Any thoughts are appreciated…

-Sapridyne

[Anonymous]

You should be able to use top level AD group containers for group owners of AFP shares. Nested groups of any sort will not work.

[macdojo]

I have gotten the “bounce back” when using 2 WGM windows. Try expanding the Users& Groups tray on the active AGM window and then using the pull-down menu to select the Active Directory node. Add your groups from there.

[jaharmi]

By ‘top level,’ do you just mean groups that aren’t nested, or groups that must exist in some specific spot in the Active Directory hierarchy?

The lack of nested groups support is a major problem for me, from several standpoints. Just the inability to follow nested groups for setting which users have admin privileges on a local computer is terribly limiting. In my environment, a lot of groups are built automatically by scripts or tools like ActiveRoles, and they are *all* nested.

[Anonymous]

Yeah, it sucks but no nested groups (groups within groups.) That and the 16 group/user limit really hurts since Exchange dist lists count as well. We’ve had to do some dancing to get around these limits and it ain’t pretty.

Such is the way when mapping one permission system onto another though.

Tiger could help with its support of ACL’s, but who knows till we see it.

[Author]

Posts