centos+ldap+osx client (10.5.6)

[aurfalien]

Hi all,

I’ve config’d my Centos OpenLDAP server and my linux clients are LDAPing to it (login, etc…).

While my OSX machines can login via OpenLDAP, some of the logins complain that the home directory cannot be found and uses /var/root for there home dirs.

I can login on this very same OSX box as another user and my home dir is found.

Does any one have some docs I can look at and start over in configing my OSX ciets to auth against an OpenLDAP server?

[aurfalien]

Hi Mactroll,

Thanks for the reply.

I have the statically NFS mounted home dirs, not autofs.

I set up the NFS mounts using both the Mecel Bresink NFS Manager tool and the Directory Utility tool in 10.5.

What can I do from here?

[Greg Neagle]

Where are your user’s home directories according to the user accounts in LDAP?

You need to have NFS mounts at the same path(s).

Either fix your static mounts, implement appropriate automount maps (either as local flat files or in LDAP), or static map the NFSHomeDirectory attribute in the LDAP mappings to point to the right place….

But in any case:

dscl /LDAPv3/ldapserver.myorg.com read /Users/usershortname NFSHomeDirectory

must point to a valid path for each user, or they won’t get the right home dir.

-Greg

[aurfalien]

Hi MT,

Well, you ain’t gonna b-leeve this but…

… before i go into it, know that I consult and as such, go into places filled with booby traps, undocumented stuff, etc….

So I find that the few macs I have been messing with had there own local dir server (yea, they happen to be OSX server installs on a bunch of MAC Pros) and had there own dir services configured with there own user database.

After deleteing all local users/group from those dbs, all my OpenLDAP users worked.

I will follow your advice on automount as I use that on the Linux machines and like it.

A side note, I did incorporate apple.schema file into OpenLDAP but the values;

apple-user-homeDirectory
and
apple-user-homeurl

Wouldn’t take when I tried to ldapadd users with those particular key values.

It didn’t break my OSX to OpenLDAP but its something to note.

Thanks again for your help, you are very good.

[Author]

Posts