That would be an ideal solution, and it worked fine for me in Panther but it doesn’t work under 10.4.2. My client machine binds to both directory services correctly, and can authenticate against either of them – but when they’re both in the Authenticate list with the AD/All Domains at the top the OD servers are never consulted for MCX information. Argh!
My OD servers do indeed have KerberosClient “munged” correctly, as per the KB document. Still no AD tickets when logging in through LDAP, no MCX when logging in through AD.
Perhaps it could be possible to use the -staticMappings parameter of dsconfigad to manually set the MCX lookup location. Does anyone know how I could do this?
Recent Comments