[fog] FOG active directory

[browolf]

Trying to get FOG to auto add to the domain.

 

It doesnt seem to be working. the fog log on the workstation only reports trying to add to domain. doesn't say why it didn't.

 

any way to find out?

[clarky2k3]

When you created your image did you leave it off the domain and did you have Windows XP Support Tools installed?

 

Have you use the FOGCrypt utility to create a encrypted password that FOG uses to join the domain?

[sparkeh]

Yeah I had a bit of tweaking to do to get this working.

 

So I am guessing that you have the client installed and added AD info to the console but did you follow the instructions about Securing Active Directory Integration?. AD integration would not work for me until I had recompiled HostNameChange.sln and replaced it on the host machine and used Fogcrypt.

Edited June 26, 2009 by sparkeh

[browolf]

everything is like it ought to be but haven't tried the recompiling. guess i'd better try that. thanks.

[browolf]

I tried that.

the hostname changer says

"padding is invalid and can not be removed."

 

wtf does that mean!? lol

[Jed]

Question:

 

Should I be using LDAP format in the default AD settings to represent the domain and the OU?

[Ric_]

You ran the tool to encrypt the password?

 

The account you're using has the delegated rights to add machines to the domain too yeah?

 

Sorry to rub it in, but mine worked straight away after following the instructions.

[Geoff]

does it work if you leave the destination OU setting blank (ie so it adds it to Computers).

[Jed]

Ran the Fogcrypt tool.

 

Changed the hostnamechanger.dll and added it to the client.

 

installed XP power tools on the client.

 

Using my admin account to test as I am sure this has the rights to join to the domain.

 

I can only assume it is my setup on the server. Hense my question about the setup of the default AD settings.

 

Can someone give me a template of theirs, so I can compare?

 

Cheers,

 

Jed

[R0M]

Also try checking that the host is not already added in AD, I imaged one for example called "ITRoom2-001" but hadn't removed that name from AD before re-imaging and it gave me funny errors.

[Jed]

Already tried that, I've got the hostname changer working, just the AD causing a problem. Still thinking that I've got the config wrong for the defualt AD settings.

[Geoff]

what happens if you run the netdom command manually with the settings you've used for fog?

[Jed]

I tried running that a minute ago, it came back with a syntax error. I copied it straight from the fogwiki. I am just going to run another deploy and check the fog.log to see if the client is trying to join the domain at all.

 

Still think I may have the default active directory settings wrong.

[Jed]

It worked!!!!

 

It was my default AD settings after all.

 

Cheers for the help guys,

 

Legendary as always!

[Geoff]

BTW the fog wiki is wrong where it says just to use the OU name. You must use the fully qualified LDAP path to the OU instead. For example:

 

OU=Classrooms,OU=Desktops,OU=All Computers,DC=carrhill,DC=lancs,DC=sch,DC=uk

[Jed]

Thanks for the LDAP reference, i'll base mine on that.

 

I have left it blank for now, just to make sure that mt AD integration is working, which it is now.

 

I changed my Domain Name to seafordhead.e-sussex.sch.uk. I think I was over thinking it using an LDAP reference for the domain name.

[birchanger]

I had the same pain a few days ago. See http://www.edugeek.net/forums/o-s-deployment/38675-syntax-specifying-ou-ad.html.

[geekthattweaks]

Hello all. I have followed the instructions on the fog wiki with no problems until I get to the part about encrypting the password. Whenever I run the FOGCrypt utility I get a Error: INI File Error. Any thoughts?

[andy_b]

You need to copy the etc folder (containing config.ini) to the same place as FOGCrypt.exe.