[ruckerz]

Erm nevermind. I think I figured it out.. d’oh

[ruckerz]

Thanks for the quick reply. I tracked the problem to the LocalHostName being redefined in the boot process. I’ve issued a scutil –set LocalHostname in a StartupItem that has no ‘Requires’ field. By boottime, it seems that OS X has reissued the LocalHostName. However I can’t find out when it occurs from the system.log. Is there a Requires that I can issue that makes sure my StartupItem runs just before loginwindow?

[ruckerz]

I got it now. I think it was a matter of getting my /Library/Preferences/edu.mit.Kerberos correct.

Here’s a question though, in the link above, there’s no mention of ‘Writing to server’ from Directory Access. This is convenient, since every machine I setup now to bind to LDAP I must use ‘manual’. However, writing to server also writes the machine login/pw, and the description attribute that it writes to is available to anonymous users.

Should I continue to setup machines to bind to ldap manually?

[Author]

Posts