Guest kerrymoralee9280 Posted April 17, 2008 Posted April 17, 2008 Hey again, Just set openfire up - it's authenticating spot on with LDAP. Thing is we have some staff in one area and some staff in another. We don't want to merge these so is there anyways of telling openfire to look in two places for authenticating logons? I've tried the simple method of separating the two DSN's with a ; but it seems openfire will only allow so many characters for this, so the last DSN was cut short.
Geoff Posted April 17, 2008 Posted April 17, 2008 Are the two OU's under a parent OU? If so, you can just tell it to look at the parent OU and it'll search the child OU's as well (That's what we do here).
Guest kerrymoralee9280 Posted April 17, 2008 Posted April 17, 2008 It's like this: Teacher OU 1 = OU=Teaching Staff,OU=Users,..... Teacher OU 2 = OU=Non-teaching Staff,OU=Users,.... But also in the user OU we have pupil accounts OU=Students,OU=Users,.... If we set the OU to the parent of 'Users' we can give everyone access, but by that we are also giving kids access. I know we could lock that down in other ways but I want this to be as simple as possible.
Geoff Posted April 17, 2008 Posted April 17, 2008 Simple way is to use the Users OU. Just don't tell the kids. Anyway, even if they did get on and started messaging people they have to login with their account details. Which is kinda incriminating, don't you think?
Guest kerrymoralee9280 Posted April 17, 2008 Posted April 17, 2008 I know the structure is not the best by far, but I don't want to change something over something so little and then watch as things start to go wrong. I think I'll just give access to the 'users' OU and look into ways of blocking access to the actual Spark software for pupils.
Geoff Posted April 17, 2008 Posted April 17, 2008 A file restriction policy should do that for you (you've got one setup already, right?).
Guest kerrymoralee9280 Posted April 17, 2008 Posted April 17, 2008 A file restriction policy should do that for you (you've got one setup already, right?). Yep I think that looks like the safest bet
mant01 Posted April 22, 2008 Posted April 22, 2008 Hi all you fine openfire (and spark) gurus. I am a newbie to the openfire game so I may doing something schoolboy error(ish) here but i have installed openfire ok, problem with ldap (but thats a different story)... I installed spark on a few pcs and work fine under mine and my colleagues account (domain admins) but when I try it under a member of staffs account it wont even open up spark? I am assuming its a rights thing but Im struggling to pinpoint it. I have given full permission to the spark folder but still no joy. O and we are on windows 2003 enterprise and workstations are xp sp2. Any help would be much appreciated.. Thanks guys (and dolls)
richard.thomas Posted April 22, 2008 Posted April 22, 2008 What error are you getting when you try to run Spark? It may be that there's a file restriction policy in place?
Guest kerrymoralee9280 Posted April 22, 2008 Posted April 22, 2008 It may be that there's a file restriction policy in place? Sounds about right to me - Have you tried adding a hash rule rather than a path rule?
mant01 Posted April 22, 2008 Posted April 22, 2008 Hey, thanks for the quick responses... much appreciated. There is no error message, it just doesnt work! Erm, I will check the file restriction policy (GPO i assume) and im not sure on the hash rule Thanks again, ill let you know how i get on!
mant01 Posted April 22, 2008 Posted April 22, 2008 I have had a quick look in GPO and there is no software restriction policy in place (it does sounds like it should be tho). I will have another look but I guess yet another annoying quirk I have down here!!!
Guest kerrymoralee9280 Posted April 23, 2008 Posted April 23, 2008 Is this a vanilla or CC3 network (or other?)
ZeroHour Posted April 23, 2008 Posted April 23, 2008 Is there any entries in the event log? I assume you have the latest version of java installed on the client?
mant01 Posted April 23, 2008 Posted April 23, 2008 Hiya, I have had a quick look in event viewer and found nothing of note. I am also on the latest java. It is really weird because whilst logged in as a normal user I can run it as administrator (using the run as option) but not as a normal user. hmmm
mant01 Posted April 24, 2008 Posted April 24, 2008 i am slowly getting somewhere with this. I setup a new test user under a test ou using a test gpo and without putting any settings in it works fine. I slowly put policies back in and all is ok under computer config. I put folder redirection in to redirect the desktop etc under user config, and this is where is messes up.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now