OD Server Managed Preferences not being applied

[Gary Bernstein]

I am hoping someone has run into this. I have set up an OD server and bound all the computers to AD and OD.

I went into WGM and choose a computer account and then choose preferences and login and I set keychain minder to always login.

I apply the changes and I logout one of the machines. I login and I don’t see KeyChain Minder run. So, I check out /Library/Managed Preferences/username/loginwindow.plist and I don’t see that KeyChain Minder is set to run. The date and time stamp on the file has changed.

I’ve also tried the update cache button. I have tried removing the OD server and putting it back in.

All machines are 10.4.6 and the OD server is 10.4.6 server.

Any help would be appreciated.

Thanks
Gary

[gw1500se]

Did you run WGM on the server or remotely? You need to run WGM remotely and set up the preferences that way. Running WGM on the server does not get the correct path for logged in users.

[Gary Bernstein]

I did set the preferences from the workstation.

Also, I determined that it was not getting set properly by opening the System Preferences -> Accounts -> choose any user -> Login items and see if the Keychain Minder was listed.

Now, one of the things that I did discover today was that if I unclicked the check box for “Disable clear text passwords” and then logged out and then back in, the Keychain Minder appeared in my login items.

So, my new question is: I feel like disabling clear text passwords is a good thing. Right? If so, how do I make this work?

Thanks
-Gary

[Gary Bernstein]

[QUOTE][u]Quote by: macshome[/u]Since you are setting MCX at a computer level you might want to force refresh the prefs on the client or maybe even what the MCX cache out of the NIDB.
[/QUOTE]

How does one do this besides clicking the update prefs button?

I did find a post talking about /System/Library/CoreServices/mcxd.app/Contents/Resources/MCXCacher -d would this work?

Thanks
-Gary

[gw1500se]

I believe what he was referring to is to use Applications -> Utilities -> Netinfo Manager. Select config -> mcx_cache then click Delete (you may have to unlock it first). Reboot the machine.

[Gary Bernstein]

Deleting the mcx in NIDB did not help.
Any thoughts on the checking of the Disable Clear Text passwords (mentioned above)?
This seems to be the key to my current problem. Do I even need to worry about this if my users are authenticating against the AD (and using the OD for mcx)?

Thanks

[Author]

Posts