[kasha]

Another thing, I just tried to run the dsconfigad as a AD user with admin rights and it ask me for a password, when I enter this I get a “Unable to obtain rights to change Directory Services”.

Does t his mean anything to anyone?

[kasha]

In the white paper it mention that if it ask for authentication then you will need to check the edu.mit.Kerberos and smb.conf files. I looked into each of these 2 files and they both seem correct to me.

smb.conf file:
—————————————————————-

[global]
encrypt passwords = yes
workgroup = TOWERSTUDENTS
display charset = UTF-8-MAC
security = ads
deadtime = 5
guest account = unknown
client ntlmv2 auth = no
preferred master = no
defer sharing violations = no
allow trusted domains = no
netbios name = lysithea
vfs objects = darwin_acls
lanman auth = YES
wins support = no
brlm = yes
max smbd processes = 0
server string = Mac OS X
os level = 8
domain logons = no
passdb backend = opendirectorysam guest
dos charset = CP437
realm = STUDENTS.TOWER
unix charset = UTF-8-MAC
auth methods = guest opendirectory
local master = no
domain master = no
map to guest = Never
use spnego = yes
printer admin = @admin, @staff
ntlm auth = YES
log level = 0
[homes]
read only = no
browseable = no
comment = User Home Directories
[Groups]
vfs objects = darwin_acls
map archive = no
path = /Groups
read only = no
inherit permissions = no
comment = macosx
create mask = 0644
guest ok = 0
directory mask = 0755
[Public]
vfs objects = darwin_acls
map archive = no
path = /Shared Items/Public
read only = no
inherit permissions = no
comment = macosx
create mask = 0644
guest ok = 0
directory mask = 0755
[Users]
vfs objects = darwin_acls
map archive = no
path = /Users
read only = no
inherit permissions = no
comment = macosx
create mask = 0644
guest ok = 0
directory mask = 0755
[printers]
printable = yes
path = /tmp
[Homes]
oplocks = 0
map archive = no
vfs objects = darwin_acls
path = /Homes
read only = no
strict locking = 1
inherit permissions = 0
comment = macosx
create mask = 0644
guest ok = 0
directory mask = 0755

—————————————————————-

edu.mit.Kerberos

# WARNING This file is automatically created, if you wish to make changes
# delete the next two lines
# autogenerated from : /Active Directory/All Domains
# generation_id : 184498817
[libdefaults]
default_realm = STUDENTS.TOWER
dns_fallback = no
[realms]
ADMIN.TOWER = {
kdc = pladc01.admin.tower.:88
kdc = pladb01.admin.tower.:88
admin_server = pladc01.admin.tower.
admin_server = pladb01.admin.tower.
}
MERCURY.INFO = {
kdc = plmproxy01.mercury.info.:88
kdc = plmproxy02.mercury.info.:88
admin_server = plmproxy01.mercury.info.
admin_server = plmproxy02.mercury.info.
}
STUDENTS.TOWER = {
kdc = plsdc03.students.tower.:88
kdc = bgsdc02.students.tower.:88
admin_server = plsdc03.students.tower.
admin_server = bgsdc02.students.tower.
}
[capaths]
ADMIN.TOWER = {
MERCURY.INFO = .
STUDENTS.TOWER = .
}
MERCURY.INFO = {
ADMIN.TOWER = .
STUDENTS.TOWER = ADMIN.TOWER
}
STUDENTS.TOWER = {
ADMIN.TOWER = .
MERCURY.INFO = ADMIN.TOWER
}

—————————————————————-

Can anyone see anything wrong in these 2 files at all?

We also use an exsiting DNS server but for the sake of this experiment I decided to run my own DNS server from the same box so as someone said that a lot of the issues with OS X server seems to be resolved through DNS.

thanks for taking your time to read this and any pointers will be great.

[Author]

Posts