Use SunOne as Open Directory LDAP Server

[Anonymous]

I’ve been working at this for some time and it always feels like I’m just a few pages of good documentation from getting this working:

Our IT Dept has a SunOne LDAP server. This is to ensure “one login, one password” systemwide. I’ve done the Apple Schema import on the Sun and I’ve set it up like it’s an Apple OD server. It is, after all, going to have to handle all my Mac admin tasks as it is the LDAP server for the domain all the Macs will point to. The structure of the data is the same as on an Apple OpenLDAP server except for two details:

1. Our base is ou=blah,o=blah.com. rather than cn=blah,dc=blah,dc=com.
2. For all the apple containers I’ve put them in ou’s under a new ou called appleuse except for cn=users. Since the users are shared they live in ou=people.

Example user: uid=me,ou=people,o=qatar-med.cornell.edu,o=qatar-med.cornell.edu
Example group: cn=mygroup,ou=groups,ou=appleuse,o=qatar-med.cornell.edu,o=qatar-med.cornell.edu

Yes, the o is there twice. This is the structure I inherited.

So, anyway. All my users have Crypt passwords. For the Windows users we run IDSync and they get put in Active Directory where they authenticate that way. For the Macs, however (and this is almost all our users), the LDAP is their directory master. I would therefore dearly love to be able to add the options for Password Server and Kerberos. I also may be taking over file sharing roles on the Mac for Mac and Windows users. This will be impossible unless I can make the Windows users have Open Directory password types.

Ideally I’d love to have a KDC running on a Mac OS X Server that was tied to the SunLDAP in the same way that an out-of-box Apple KDC is tied to an Apple OpenLDAP OD server. I don’t see why I shouldn’t be able to do this but the specific steps are elluding me. I’ve been ’round the houses with NeST, kdcsetup, kerberosautoconfig and sso_util. I feel I have the tools to do what I want to if only I understood them better.

Can anyone help?

[Author]

Posts