I thought I would post my experiences I have just had when integrating 25intel iMacs into an active directory and open directory. After net-restoring the machines (eventually) I then proceeded to copy and install the required software via ARD. This was the easy bit.
After this I tried to bind them to the AD and OD. I run a script through ARD. unfortunately each machine had an issue where they all thought they were the same. It turned out to be the local kerberos db that was the issue. So to disable this you need to run the command
This should remove the local kdc and also remove the duplicate machine issue when trying to bind to the OD.
sudo dscl /local/default delete /Config/kerberosKDC
I also had an issue with binding to the AD as well. The biggest issue was that the plugin is not enabled by default when you add it via a script. You need to use the defaults write command to activate the plugin.
# Activate the AD plugin
defaults write /Library/Preferences/DirectoryService/DirectoryService "Active Directory" "Active"
#convert the plist back to xml for editing
plutil -convert xml1 /Library/Preferences/DirectoryService/DirectoryService.plist
# Restart DirectoryService (necessary to reload AD plugin activation settings)
After manually finding all this and then editing the plist files until i got it working, i then came across Bombich's website which had a script for Ad-binding Leopard. I have uploaded this for convenience as well.
#I had to use these to write my search paths as the AD dscl command wouldn't take.
defaults write /Library/Preferences/DirectoryService/SearchNodeConfig "Search Node Custom Path Array" -array "/Active Directory/All Domains"
defaults write /Library/Preferences/DirectoryService/SearchNodeConfig "OD-Server path"
plutil -convert xml1 /Library/Preferences/DirectoryService/SearchNodeConfig.plist
The next major PITA was logging on remotely using the osascript command. I have still not managed to get this to work on leopard.
So these are just a few of the issues (but the main ones). If anyone has not seen these issues I would be interested to hear. Especially the last one or if you know how to get around this issue.