OD Computers Not Auto-Added to WGM Computer List and POSIX/ACLs Woes

[smith456]

Hello, All,

A few months ago I setup a new Xserve running Leopard Server (patched to 10.5.8). The following services are up and running normally per Server Admin:
– DNS
– AFP
– OD
– NFS
– NetBoot

The initial problem has been getting OD clients (10.4.11, 10.5.8 and 10.6.2) to automatically add to the Computer List in the WGM when they bind and/or login. None does…ever. The only computer listed is the Xserve from which OD is hosted. The network accounts and logins work OK (mostly…there are some perm problems/oddities (see below)). So I’m wondering if the binding must be set to ‘required’ or is there something I’m missing.

Secondly, ACLs are behaving differently in Leopard Server from Tiger Server. In Tiger Server we used Local accounts, not OD accounts, and ACLs worked well, even when ignoring/not applying POSIX perms during propagation. Specific group perms are either ignored or misapplied in Leopard Server AND we are finding, unless we also apply POSIX there are instances when users do not have write perms to a folder ACLs say they should.

What I’ve Tried:
– Rebuilt the KDC per Apple’s guide/instructions
– Completely removed all ACLs from all files on a Xserve RAID, then re-applied ACLs and POSIX

I know I can manually add the clients to Computer List but I REALLY want to have the functionality we’ve paid for in Leopard Server.

I’m monitoring Snow Leopard Server but at this time have no inclination to go there…unless it’s confirmed it fixes a WHOLE LOT OF STUFF.

Thanks to all.

Steven

[Author]

Posts