[cperisho]

I am having a similar problem. This didn’t help me but it might help you.

http://docs.info.apple.com/article.html?artnum=300765

[cperisho]

I want to do something similar. I would like to boot to an image with apple software restore (or something similar) and then copy and standard image to each station’s drive. If anyone has any ideas of how to do this let us know.

[cperisho]

Okay, i did NOT try the LDAP plugin I decided changing InetOrgPerson to User was a much better solution and turned out to be pretty easy with ADSIedit.msc. I simply edit objectClass and remove the InetOrgPerson designation. This doesn’t *seem* to affect anything else and allows the mounts to work porperly.

My predecessor used InetOrgPerson because he had the impression that it would be more compatable with Open Directory. Which is sort of true in a sense I guess, but not with the setup I have here.

[cperisho]

Ah interesting. So, I think you’re saying that the AD plugin is looking for a AD User account and finding a LDAP object. The AD plugin is smart enough to allow authentication against it but not much else.

Maybe connecting to AD with BOTH the AD and the LDAP plugin would overcome this problem but maybe not. I’ll try it and report back.

I agree changing them to AD USERS is the preferable option. I’ll have to do some reading to see what the implications for email accounts and other settings are. I have a feeling this task will be non-trivial.

I’ll also ask my predecessor why he set it up this way.. I have his email addy..

[cperisho]

I’m not exactly sure what an InetOrgPerson is either but from googling around a bit I learned a few things

1.An InetOrgPerson is an entity representing a person. It can be used in Active Directory in place of the User type object.

2. It is an LDAP standard and was added to Active Directory (Ironically in this case) for better compatibility with other LDAP systems.

I think my problem may have something to do with the mapping of attributes. OD can’t figure out what attribute to use for home directory with this InetOrgPerson type object. I’m not really sure how to tell it where to grab this data from.

Any ideas?

[Author]

Posts