[cbrew325]

Hopefully this helps somebody:

The root of this problem is that the Active Directory Plugin has its own Dock MCX settings that take precedence over the ones assigned via OD Workgroup Manager. These settings are located in /Library/Preferences/DirectoryService/ActiveDirectory.plist

You can edit ActiveDirectory.plist to stop getting in the way of your managed MCX settings with the following command:

sudo /usr/libexec/PlistBuddy -c “delete AD\ MCX\ Template:mcx_application_data:com.apple.dock” /Library/Preferences/DirectoryService/ActiveDirectory.plist

This is a recommended procedure from Apple Enterprise Support.

[cbrew325]

Anyone find a way to resolve this problem? We’ve had this happen to several computers. So far no luck getting them to rebind.

I did try these things prior to rebinding. Note: a previous post listed DirectoryServices instead of DirectoryService.

rm -Rf /Library/Preferences/DirectoryService/*
rm -f /Library/Preferences/edu.mit.kerberos.plist
rm -f /private/etc/krb5.keytab

[cbrew325]

To add some resolution to this post, I am running the following script as a login hook. This is working pretty well. The login hook runs the script as root, but the current user is passed as $1.

#! /bin/bash

me=$1
defaults write /Library/Managed\ Preferences/”$me”/com.apple.dock ‘static-only’ -bool ‘TRUE’
chown root:admin /Library/Managed\ Preferences/”$me”/com.apple.dock.plist
chmod 644 /Library/Managed\ Preferences/”$me”/com.apple.dock.plist
killall Dock

[cbrew325]

I figured out that /Library/Managed Preferences/username/com.apple.dock is getting created with the static-only key set to false. By unchecking Merge with User’s Dock this key should be set to true. I can work around it with the following script:

me=`finger |grep ” *con “|cut -d\ -f1`
defaults write /Library/Managed\ Preferences/”$me”/com.apple.dock ‘static-only’ -bool ‘TRUE’
chown root:admin /Library/Managed\ Preferences/”$me”/com.apple.dock.plist
chmod 644 /Library/Managed\ Preferences/”$me”/com.apple.dock.plist
killall Dock

[cbrew325]

For what its worth, My 2 OD servers were upgraded from 10.4.11 to 10.5.2. They’ve since been updated to 10.5.3 and 10.5.4.

[cbrew325]

Well, my OD servers and Clients are all at 10.5.4 now and I still haven’t gotten this to work correctly.

When I check the option for Merge with User’s Dock, I can see that the value for static-only in com.apple.dock becomes false. When I uncheck Merge with User’s Dock, static-only changes to true. Regardless, When I login as a user I get a managed dock that I can add and remove items from. Other settings are working as expected.

[Author]

Posts