Have I got the wrong end of the stick? OS X and AD

[localzuk]

I am trying to set up an OS X server to act as an OD server for our OS X clients, but to pull its user list from the AD.

 

However, now that I have it talking happily to the AD, OD doesn't seem to be running on the server to allow other OS X machines to connect.

 

FYI I'm using OS X 10.5 Server, and the clients will all be 10.5 also.

[gaz350]

Our 10.4 od server is happily connected to our AD. Not having played with 10.5 Server yet cant help you there, but sounds like something is broke.

 

How did you connect to AD?

[localzuk]

Ah, I think I have figured out what I've done wrong. I've joined the server to the domain rather than using it as an OD Master and then doing the other fettling needed to get it to authenticate via kerberos. I'm gonna work through the instructions here http://www.bombich.com/mactips/activedir.html and see how I get on.

[localzuk]

Right, thats all that needed doing. It seems all I needed to do was change the server to an OD Server Master, it remained bound to AD and it seems to work nicely now.

[gaz350]

bombich to the rescue again.

[HodgeHi]

i heard that leopard shouldn't need any of the messing about with kerb realms according to the guy i spoke to on the Apple stand at Bett.

 

He said that as far as he knows leopard server is cleverer than tiger in the fact that it knows that it is already joined to a kerberos realm and so doesn't ask to be joined to another or something along those lines.

 

I have also heard that 10.5 AD integration is somewhat broke in the Directory Util and an upgrade to 10.5.1 is needed.

 

Have you experienced or seen any of these issues?

 

At home i also set up a leo server and let the Dir Util to automatically configure the client only to find that the login window wouldn't let me log in. How have you faired with this?

 

Just wondering...