[ntownsend]

I have the same problem.
10.5.6 OD Master 10.5.6 Server bound as “Connected to a Directory Server” The join Kerberos button prompts me for a dir admin user and password. The slapconfig log on the client spits out:

Contacting the directory server
Creating the service list
Creating the service principals
Creating the keytab file
—
— key tab file stuff
—
Configuring services
WriteSetupFile: setup file path = /temp.5qal/setup

The “Join Kerberose” button does not disappear.

[ntownsend]

I called Apple: The method described in the user documentation does not work. Apple is aware of the problem. They did give me a workaround:

Apple Wrote:

This is the procedure to make nested home directories.

• Create a user and give the user the home where the nested home will
be.
• Enable the Inspector in Workgroup Manager (WGM)
• In the Inspector, edit 4 attribute properties:
HomeDirectory, NFSHomeDirectory, dsAttrtypeNative:apple-user-
homeurl, and dsAttrTypeNative:homeDirectory.
For each property either chang the the path (i.e. /Network/
Servers/servername/sharename/extrafolder/username) to add the
“extrafolder” in there, or edit the value between the and path> fields (i.e. extrafolder/username).
• Save a preset for this user
• Create new users with that preset selected in the dropdown at the
bottom of WGM

* If you have existing users to convert, batch edit them and set
their home to “None”, then export the users. Re-import the users and
choose “Overwrite existing record” and the preset you made earlier in
the “Preset for Users:” dropdown in the import window. Everything
else should be default.

[ntownsend]

Apple has an article# 301909

The CD installer set for Tiger server is missing a couple of files.
/sbin/kerberosautoconfig
/etc/mach_init.d/kerberosAutoConfig.plist

I setup a second OD master on another server and compared the settings. The fix worked but then I could not recreate the replicas.

Article# 302332 fixed that. On the replicas, make sure the local admin netinfo account is set to crypt and you copy over the missing kerberous files.

[Author]

Posts