+ Post New Thread
Results 1 to 1 of 1
Mac Thread, The "Magic Triangle" in Technical; Hi guys, I am currently in the process of configuring 3x Apple XServes in a mixed domain, hence in a ...
  1. #1
    stig's Avatar
    Join Date
    Sep 2009
    Location
    Barnsley
    Posts
    5
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Question The "Magic Triangle"

    Hi guys,

    I am currently in the process of configuring 3x Apple XServes in a mixed domain, hence in a "magic triangle". This terminology in itself makes me chuckle as it makes one wonder if whatever goes in there is lost forever and untraceable

    The main "bridge" server is setup in the data centre and is configured as the Open Directory Master. Its sole purpose is to push out Managed Preferences to the 2 further remote servers which are configured as Open Directory replica's.

    The servers are bound to Active Directory (using the AD plugin). User Groups have been configured on the ODM under LDAP and Active Directory groups have been placed inside the User Groups to push out the Managed Preferences.

    Kerberos has been disabled as per the recommendations for a "magic triangle configuration" from Apple.

    Using this setup I can log in to the domain using Active Directory credentials fine. Users' Home Folders are automatically mapped on the Dock via the AD settings which is great. Managed Preferences are being pushed out fine.

    Enough of the info and on to the question:

    In the Managed Preferences I have configured the Network settings to point the proxies to our Windows ISA Server and Port. For some reason (and I may be wrong), I presumed that when logging the Mac's on to the Windows Domain it would use Kerberos Authentication from the Windows Servers; hence there would be no further need to authenticate against the proxy servers.

    This is obviously not the case as every time I launch Safari, I am presented with an authentication dialog to connect to the proxy servers.

    1) Is Safari kerberised?
    2) Why do I have to keep authenticating with the proxy servers?
    3) How do you use Single Sign-On?
    4) Has anyone got the internet working through a proxy using Single Sign-On?

    Thanks in advance guys,

    Steve
    Last edited by stig; 1st October 2009 at 03:48 PM.



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 3
    Last Post: 11th September 2009, 10:01 AM
  2. Replies: 2
    Last Post: 11th August 2009, 12:08 PM
  3. Did Smoothwall Tom star in "The Colour of Magic"? =)
    By ZeroHour in forum General Chat
    Replies: 3
    Last Post: 28th March 2008, 08:18 PM
  4. "Error 403" & "Moved to here" message
    By tech_guy in forum Windows
    Replies: 4
    Last Post: 24th January 2008, 02:07 PM
  5. Replies: 6
    Last Post: 28th September 2006, 08:06 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •