[fatherzimfire]

Anyone had any experience of doing this?
To simplify the question: Is there anything to look out for with binding an OD master to AD?

Many thanks for any responses.

FZ

[fatherzimfire]

Sorry, meant to post this in the AD forum.
Feel free to delete this as I’ll repost there. APologies again.

[fatherzimfire]

Not sure why my reply was deleted as “spam”, but I’ll try again.
Thanks for the help. The first google search result proved very useful (as did the original reply).
Much appreciated. My initial googling failed to return anything of interest (hence me posting here). I was searching for “silent install” etc.

FZ

[fatherzimfire]

It works if you re-enter your username and password, sure.
I mean true SSO – a webpage authenticating you without you ever having to enter your credentials and saving them in your keychain. Knowing who you are from your kerberos credentials.
As far as I’m aware, this is not possible with IIS.

FZ

[fatherzimfire]

Edited –
oops, didn’t see the without ARD bit.

FZ

[fatherzimfire]

10.5, or 10.6. Kerberos ticket obtained and works fine for SSO with shares etc.
I have since learned that IIS does not support Kerberos SSO with Safari, though Apache should work fine if configured properly.

FZ

[fatherzimfire]

Great – thanks for all the help.

FZ

[fatherzimfire]

I’ve hit exactly the same problem, in a very big way.
Unfortunately the only “solution” I’ve been using is to manually rename thousands of files by hand (on a 10.4 machine), which is what I have been doing.
It appears to be a 10.4 SMB bug (fixed in 10.5). However, SMB in 10.5 (and windows) are unable to understand the old files as they aren’t legal NTFS file names.

Feel free to ask any further questions. I’ve become an unwilling “expert” on this irritating bug.
One final thought – Why the hell would you put a bloody space at the end of a filename anyway? Idiotic users are partly to blame in this mess.

FZ

[fatherzimfire]

Many thanks for your help, that was the perfect answer.

FZ.

[Author]

Posts