Forum Replies Created
-
Posts
-
Man, I kind of forgotten about this. Sorry for the long delay.
MacTroll wrote:
How many total users?
There’s approx 20 users on the list. As a sort of work around, I’ve handed edited the com.apple.loginwindow MCX setting for the computers and added in the array so that I can at least add and remove users from the list. All of the data for the array entries can be gotten from the users’ inspector. For about 20 accounts, this isn’t too much of a pain. 😆Sorry, I’m mixing up my context. I meant that if I set the login window to show local accounts in addition to the network accounts, it only shows the one local accounts on the clients. When I said “local only” I was thinking in terms of “Allow users with local-only accounts” from the access settings. (which of course has nothing to do with anything; the clients are set to allow all groups)
I tried setting the Guest Computer prefs in addition to computer list I already have (I realized my question before about all computers vs. computer in lists was kind of silly 😳 ) with the same effect. Clients in the guest list grab all the settings correctly but can’t seem to find the users accounts.
Just to reiterate for the sake of clarity (I hope), the clients are actually authenticating to the Open Directory server correctly and can log in using network accounts, it’s just that loginwindow can’t find them when trying to display the users list.
After some more thorough testing, it looks like the clients are in fact picking up (most) of the MCX preferences. If I delete the loginwindow plist and then log out I get the name/password fields. But if I show local only accounts in workgroup manager and then refresh the preferences on the client per your instructions I get a list with only the local admin account and other. So, is there any reason why loginwindow would not be able to discover the list of network accounts from the open directory server?
I tried what you suggested but it had no effect. What’s strange is that it almost seems like some settings are working; the restart/sleep/shutdown buttons are removed and the loginwindow message is shown.
The clients were originally listed in the server twice, once from manually entering them and then again from when they bound to the directory. The manual entries were then put into a computer list where all the preferences and settings were applied. I’ve tried eliminating all the duplicate entries, thinking that they could potientially be causing a conflict, but that doesn’t seem to have had any effect. Is there a way to apply preferences to all computers listed in the directory? When I have the “All Computers” computer list selected the, the preferences option is disabled. Thanks.
Well, it looks like I’ve gotten things sorted out; this seems like a textbook case of trying to do things the hard way and just generally making things worse. 😳 All the Student accounts were using the same home directory and I’d created a login hook which deleted it and then copied a fresh one from a template account I’d created. In effect, I think, the client was getting the MCX settings and then the script was promptly deleting them. Now, rather than a template account, I’m editing the User Templates directory, and using a logout hook to delete the home folder (just in case; I’m not certain if this is actually necessary, but it doesn’t seem to hurt). Thanks for helping to set me on the right path, I’ll be sure to pester you guys again the next time I’m royally boned. 😛
macshome wrote:
you can still create a 10.3 style mobile account that creates a cached local userI tried creating mobile accounts without home sync today (thank you Essential Mac OS X Panther Server Administration 😎) but I still encountered the same problem, ie, cached accounts have MCX settings, uncached ones do not.
MacTroll wrote:
OK then, have you tried MCX at the machine, and not the user, level then? There are MCX settings at the machine, group and user level and once the cache has been updated everything seems to work together, but until then none of the settings seem to be applied.
macshome wrote:
That works but remember that you can still create a 10.3 style mobile account that creates a cached local user but does not sync the homes. How exactly would I do this? Using WGM, it looks like all that I can do is just home syncing mobile accounts. Thanks guys!
No. The trouble I had with portable home directories was that these are for student accounts and I would like the files on them strictly controlled (there’s a folder where they can save files, but otherwise they get a clean slate at each login). I suppose if there were someway I could make syncing one-way (ie, the client machines ONLY grab updates from the server and don’t send any changes) then portable home directories might work.
