A few more notes.
10.4.3 Server running on a Dual 2Ghz G5 XServe.
This server is only running AFP, SMB, and Web.
It is connected to an Active Directory Domain.
Most of the clients are also connected to AD.
Kerberous single sign on works.
It is not hosting home directories.
It has an XRAID connected to it.
It has a Fiber card and a video card.
I rebuild it from scratch just before Christmas.
I am getting the Disabled/Asleep problem again. teice in the last 24 hours.
I tried mapping UID to uSNCreated on the server and it did not seem to make a difference. Well it did break single sign on SMB for the PCs.
I tried mapping UID to uSNCreated on the client and it seemed to help. Now Mac clients who are joined to the domain can access all the areas on the OS X server they has privileges to. However, now there network drives don’t mount.
Fix one break another.
If I could just get AFP not to pass group auth down to the client that would do it.
Mike Bartosh’s article made it work for me. http://www.macdevcenter.com/pub/a/mac/2003/12/09/active_directory.html
However it has not been updated for 10.3.3 yet. Now with 10.3.3 you don’t have to join it to AD using the terminal. Make sure to watch the webcast. Just dedicate an hour to watching it before you start.
Recent Comments