[bborofka]

The rationale is simply ease of setup. We deploy hundreds of Macs all over our University, and there’s always going to be more Macs coming in as upgrades/replacements. If we have to manually enter the MAC Address into Workgroup Manager every time we bind (which could be a few times a day), that is one more hoop for a tech to jump through, and possibly mess up or accidentally skip. Having Directory Binding work (like how it does for our Active Directory) would be so much easier and better.

I realize that getting Directory Binding working in our OD/AD environment is not easy, but if it is technically possible, I’d like to do it. We have no rush or time constraints, we have access to any other administration resources on campus if we need. I just need an idea of how to get this setup. If you have any ideas, that would be great.

Thanks.

[bborofka]

I’m having this same problem and I have a virtually identical setup to cmcfarling. We have a lab with 10.3.9 servers and clients, managed mobile accounts, SSO for our AFP share, Inheriting Permissions from Parent. The new G5’s we just got can’t create directories on the server but can move files. The 10.3.9 clients can still create directories, which is just fine.

That’s the only solution I’ve seen so far is to just create directories from 10.3.9 clients.

There is another problem I’ve noticed too: The Tiger clients aren’t respecting the Inherited Permissions like they should be (which I set in WG Manager and works beautifully on 10.3.9 clients). Files I copy to the server are getting the correct group, and rwx permissions, but are using their own owner, not the current directory’s owner. THIS IS VERY BAD, for a file-sharing environment with multiple users, like ours.

There must be issues with ACLs Apple is still working out.

[Author]

Posts