[bodhisattva]

In my experience with 10.5.5, the automounting of SMB shares, when using Kerberos, failed.

OS X ignores the Kerberos ticket at the login window, and instead prompts the user to enter their plaintext password (assuming plaintext is enabled on the server).

Manually obtaining the TGT and supplying it to the server also fails.

Doing so via the command line works perfectly, which lead me to the workaround:

– setup a local MCX record for the Login window, automounting the SMB share
– ensure “use User name and Password” is selected

This way, the login window presents the Kerb TGT back to the AD server, and properly mounts the network drive during login.

Has anyone else encountered this, and if so, do you have a more elegant solution?

[bodhisattva]

Are you attempting to layer Computer, Group and User MCX records, or are all of your settings Computer based?

What type of inconsistent results are you seeing? With those that are giving you issues, what are you attempting to set?

[bodhisattva]

The problems you are describing seem to be related to two directories:

/Library/Receipts
/Library/Updates

I would ensure both of those directories are owner=root, group=admin, and that both owner/group have full read/write/execute access.

(DiskUtility needs to read /Library/Receipts in order to Repair Permissions, and SW Update needs to be able to read /Library/Receipts, and write to /Library/Updates).

[bodhisattva]

I found that in Standard mode, newly created users will have their NFSHomeDir pointed at /var/tmp.

To solve this, use Workgroup Manager to set their Home directories to NONE.
This will remove the “Empty” sharepoint from their listing.

[Author]

Posts