Forum Replies Created
-
AuthorPosts
-
benfeea1
ParticipantA few more notes.
10.4.3 Server running on a Dual 2Ghz G5 XServe.
This server is only running AFP, SMB, and Web.
It is connected to an Active Directory Domain.
Most of the clients are also connected to AD.
Kerberous single sign on works.
It is not hosting home directories.
It has an XRAID connected to it.
It has a Fiber card and a video card.I rebuild it from scratch just before Christmas.
I am getting the Disabled/Asleep problem again. teice in the last 24 hours.benfeea1
ParticipantWell I thought 10.4.3 has fixed this problem.
Although the frequency of users showing up as “Disabled/Asleep” has gone down, it has not gone away.
I still get the problem about once a week.
benfeea1
ParticipantI have the solution for you. Sorry it is not sooner but I just saw your post.
I am going to assume your Mac OS X clients are also bound to AD. That is part of the reason they have no privileges.
To solve this you have to modify /Library/Preferences/com.apple.AppleFileServer.plist
Set
noNetworkUsers
trueIt is the craziest thing I have ever seen, but it works.
benfeea1
ParticipantSo how do you use lpadmin to modify the “Installable Options” of a printer?
For instance, a printer with extra paper trays and upgraded RAM.
benfeea1
ParticipantI tried mapping UID to uSNCreated on the server and it did not seem to make a difference. Well it did break single sign on SMB for the PCs.
I tried mapping UID to uSNCreated on the client and it seemed to help. Now Mac clients who are joined to the domain can access all the areas on the OS X server they has privileges to. However, now there network drives don’t mount.
Fix one break another.
If I could just get AFP not to pass group auth down to the client that would do it.
benfeea1
ParticipantSupposedly there is a way to configure AFP to NOT hand off enforcement of user/group/other permissions to the client.
Does anyone know how to configure this option?
April 10, 2004 at 1:06 pm in reply to: resources to intergrating xerve with active directory #357781benfeea1
ParticipantMike Bartosh’s article made it work for me.
http://www.macdevcenter.com/pub/a/mac/2003/12/09/active_directory.html
However it has not been updated for 10.3.3 yet. Now with 10.3.3 you don’t have to join it to AD using the terminal. Make sure to watch the webcast. Just dedicate an hour to watching it before you start.http://www.macosxlabs.org/webcasts/2004-03-16_ActiveDirectory/index.html%5B/quote%5D
-
AuthorPosts
Recent Comments