Golden Triangle woes

[mulomulo]

I am following the instructuctions as stated by the AD-OD 2.1 pdf. I am still getting issues.

1) My DNS is working when i do a forward and reverse lookup.

The weird thing is that a machine that is bound to the AD domain has got issues mounting my SMB home folder. The error messages goes like the username and password is incorrect.(When i do a manual mount)

When i force my home folder to be local, i can be authenticated by the AD server. i have already put the path name /osxserver/users/%usrname% in the path name of the windows 2003 server. Naturally, i can log in to the client but my smb folder is on my local disk

When i try to log in using the network home folder i get an error message saying that the afp or smb share issues, please contact administrator

All my servers and clients are 10.4.4.

I did get my home folder to work only once. What i did next was to restart the OS X server and client to etest stability and everything screwed up.

What are the checks that i must do? Must my machine have windows file services setup to standalone server or domian controller?

I am able to correctly see my home folder path name for my user when i do a dscl from the client?

Also, how to i set quota to AD users from my OS X server. My primary reason to have a network home folder off my AD server is to allow users to have access to large home folders as my AD server only permits to have 20mb as my home folder. This is my company policy.

Please help as i have 2 more days to get it working.

[mulomulo]

Is your Mac OS X Server bound to AD? Have you kerberized it in the AD domain? If you login can you mount the home manually if you destroy your tgt in the Kerberos app or with a kdestroy?
(How do you run the kdestroy? Can i run the kerberos agent software found in /system/library/coreservices/..)

In the AD profiles for the user you need to put a standard UNC home path.
(done)

To make quotas work for AD users you will need to use the standard edquota tools.
(ok)

Is the whole point of this setup to circumvent IT policy on home folder storage?!?
(yes)

[Anonymous]

I don’t know if this is going to help at all. I had a similar problem where I tried to set up a client to authenticate AD users and log them in with a local home directory but also mounting their home folder. I could only get it to mount the home folder once. Every subsequent login would not mount the home folder. A quick look around with niutil revealed that OSX was caching the login information with the wrong home directory path. (The local instead of the network) So I went into workgroup manager and put the client in a computer list and set the caching preference to 0 days.) After that I got a home directory everytime. The only downside is that it turned off caching completely so if you wanted a user cached for offline login it would fail. This is with a 10.4.3 client so its possible 10.4.4 has fixed some things.

[mulomulo]

I seem to have the golden triangle working now. The only thing is to set the quota for the AD users who are having home folders on the xserve. Does 10.4.4 Server workgroup manager allow me to change the quotas? Also if not, i am facing difficiulty with edquota. I tried using the commands but i am confused. I want to set quotas to the home folders. Can anyone give me a step by step guide on edquota?

[mulomulo]

Does Edquota work on AD accounts? I ran a sudo repquota -a -v

but all i see are local user accounts of the server? How do i set quota on AD accounts? According to Golden Triangle, my home folder is on dirhost.

Using Workgroup Manager i am able to see my AD accounts. My clients are able to authenticate to the accounts. I can map the home folder(although this breaks very occasioanlly), but is it possible to manage quotas from EDquota to AD user accounts that have an smb share home folder on dirhost?

[Author]

Posts