[jscott]

Well I feel completely dumb now. I don’t know how I missed the “computer or computer groups” portion of that. Grrrr, things are moving too fast around here. Its working… now (that I learned to read).

thanks guys.

[jscott]

OK, going through the help files I found this section “Managing Time Machine Preferences” and it says you can set TM settings through Managed Preferences which includes size limits. The directions are as follows:
1. In Workgroup Manager, click Preferences.

2. Make sure the correct directory is selected and you are authenticated.
To switch directories, click the globe icon. If you are not authenticated, click the lock and enter the name and password of a directory domain administrator.

3. Select one or more computers or computer groups.

4. Click Time Machine.

5. Set the management setting to Always.

So I click my Managed Users group, click Preferences and the only problem is there is no Time Machine button in the Preferences section. Anyone else seeing this?

I should note this server is set up in advanced mode.

[jscott]

I must be missing this in WGM. I see where you can set a limit for the size of a home folder but I don’t see anywhere to limit the size of a backup file. I’m not using roaming profiles. Am I missing it?

[jscott]

Once I’ve bound my server to AD should I log in using the local admin account or an AD authenticated account? With 10.4 I just use the local admin account and everything works fine but I’ve always wondered if this is the best way and since I’m updating to 10.5 might as well get it worked out.

[jscott]

I wanted to post a correction to this. I stated that I can use Windows print servers but it turns out I can’t. I can see the printers in Printer Browser and add them but when I try to print to them I get an error that says NT_STATUS-ACCESS_DENIED.

I believe this is a seperate issue from the subject of this post so I’ll start a new thread for this one.

Thanks,
JS

[jscott]

[QUOTE BY= MacTroll] Are you attempting to login as your AD account?

Also a bit more info about your setup would be appropriate here.[/QUOTE]

The problem has been solved but to answer the question, yes I was loggin in with my AD account. The issue turned out to be DNS. We are moving facilities next week so there is a lot of back-end preperation going on. One of them being new DNS servers that I was unaware of. Its been said many time before on these boards so let this be a testament to the fact that DNS is key. DNS DNS DNS DNS, burn it into your brain

Thanks all.

[jscott]

Just wanted to add that Kerberos is showing running on the OD Overview page.

[jscott]

I was having the same problem and the Terminal command sudo dsconfigad -enablesso worked for me. I now have SSO from my Mac clients. this has to be run on the server, just in case it wasn’t clear.

[jscott]

[QUOTE BY= macshome]If you still get the MIT style join then you can run the AD join with sudo dsconfigad -enablesso.[/QUOTE]

This worked! I now have SSO for my users. So did I just miss where to do this in the GUI or does it not exist?

Thanks guys,
JS

[jscott]

[QUOTE BY= MacTroll] Have you clicked the “Join Kerberos Realm” button in the OD settings in Server Admin?[/QUOTE]

I don’t see that button anywhere. Its set to Open Directory Master and the only Kerberos button says “Add Kerberos Record…” but when I click that and read what it wants it doesn’t seem like the right place to be.

[jscott]

[QUOTE BY= macshome]
Eventually it’s my hope that MCX will work on inherited groups. That way you could bind the server to AD, nest the AD groups in matching OD groups, and then apply your mcx as needed.[/QUOTE]

This is exactly what’s needed and I’m sure I’m not the first to agree with you. Thanks for the help. At this point I don’t think binding the server to AD is necessary.

[jscott]

I’m looking for a way to do this also. I don’t want to use Network Home Directories. I just want authentication and managed prefs. There should be an option under the Home tab in WGM that says use local machine, or somthing like that.

There has to be a way to do this…

[jscott]

Nothing yet…. Joel can you shed some light in this for me? It being your paper you probably have the best insight on it.

Thanks,
JS

[Author]

Posts