OD homedirs to a ADOD magictriangle
Greetings everybody,
We have "successfully" converted an existing OD network environment to a Golden Triangle because the organisation I work has decided to bring windows clients into our network.
We currently have 150 macs and 20 pc's (which as management tells me will be breeding). The implementation we are using is having the AD controller for just network wide authentication and group policy settings and a MacPro running as a OD pushing out preferences (great!) and is hosting user home directories, not so great.
Our initial plan was to host the home directories on a new windows server box and have the mac clients connect to it via SMB and the AD plugin but due to fiscal and time constraints we where force to reuse the exiting MacPro and host the directories on that
Before we undertook the upgrade we made sure to look around online and familiarise ourselves with will golden triangle process (the AD-OD Sandbox guide hosted here) was a real help to us as it gave us the option to host home directories on the windows or osx servers.
We have been able to create new user home directories with the createhomedir -a command, it went through our OD to our AD and pulled all our users names (we are using nested AD groups in OD groups) and created the home folders beautifully, we have no problems logging from windows (via SMB as per normal) or Mac clients (via AFP) and saving and creating and modifying files from both platforms.
But we have hit a pretty big snag .... how do we restore the old home directories full of data in the newly created empty directories made on the fresh installation of Leopard Server on the MacPro server.
How do people do it?, with scripts, a application, a feature of the operating system its self i.e.. they have a great utility like createhomedir but not one like assignhomedir that takes a directory, searches for a user on the directory server (i.e. AD) and assigns it the correct permissions to it and its children
Our existing home directories utilized short names for the home path but upper management stressed to us they would like to be able to change the convention to and that's what we did in the AD.
Again the Macs have no problem with this, everything is working swimmingly, well there is that warning in in AD every time you create the a new user of AD being unable to create the home directory on the OD server, but if they login into a MAC first everything is created for them, and even if they don't we can always click on Create Home Now in workgroup manager to make their directories.
We renamed the short name home folder backups and inserted a space between the first name and last name (matching their AD login), also we can leave them with their existing short names and just change the profile path in AD just in case the Macs have problems with spaces in the home dir path.
So how do people do it? I found one way by using ARD, setting the user owner to the domain user name (i.e. student guest) and the group owner to a domain group like CURRIC\domain users and then during the copy if it finds existing folders (i.e. the new empty home folders) replaces them, but this method is prone to error and we have over 300 users.
Is there a rapid way doing it in one shot.
Thank you for reading this long post
Peter