OS X AD Authentication

[Ric_]

OK... this is relatively easy to do. I've banged the details in as intructed in Mike Bombich's intructions and all has gone to plan (surprising after my ineptness with the images!).

 

My problem, however, is that the users' network home doesn't appear to be mounting. I get a lovely question mark on the dock and some pretty text saying that it should be the user's network share. If I click the link it does less than nothing though

 

Obviously the permissions on this folder are correct I receive a message telling me that the authentication details I supply are incorrect (no matter what details I chuck at it!).

 

Any help would be appreciated ASAP. If you know what you are doing with these (Paul or Tony ) please PM me your number so I can have a chat.

[Roberto]

Presumably the home folders are on a SMB share on a Windows Server?

 

Is the path to each user's home share defined in AD? It needs to be.

 

What happens if you open Finder / Go / Connect to Server and try to mount the share manually, using the format smb://{the exact path to server as specified in the AD account}/sharename

for example smb://mywindowsserver.robertmoir.com/robertm$

[kingswood]

Yeah- I initially had this problem and killed it by dropping SMB digital signing at the AD server...worked a treat.

[ITWombat]

Has anybody tried Group Logic's ExtremeZ-IP for Windows/MacOS integration?

[GrumbleDook]

I looked at it 5 years ago and it was good then ... but the powers that be would not consider the amount of money needed for it (I think I have already done the rant about conslutants not know their rectum from their axilla)

 

It has moved on since then and promised features have become real features ... the thing I love is the unlimited files. The only problem I had was the limited number of apple volumes that could be shared from a single server, something that doesn't appear to be an issue now (it had the same limit as W2K server for the max number of apple volumes ... and if you wanted an apple volume per student home area, as we used to have, then you were scuppered)

[Ric_]

@Roberto: I don't think I was clear... the homedrive appears in the AD details for the users (this can be checked with the directory services client). If I try to reach that share (or any other in fact) from Finder, it simply displays that message about the logon credentials.

 

@Kingswood: This sounds like it might be an option for me to investigate. How do I disable this digital signature wizardry?

[Roberto]

@Roberto: I don't think I was clear... the homedrive appears in the AD details for the users (this can be checked with the directory services client). If I try to reach that share (or any other in fact) from Finder, it simply displays that message about the logon credentials.

 

@Kingswood: This sounds like it might be an option for me to investigate. How do I disable this digital signature wizardry?

 

Ok, if you can't mount the drive from Finder normally then you most certainly need to check SMB signing as your next stage.

 

You don't want to turn off SMB signing totally, what you should do is put SMB signing settings into the hands of the connecting client, so that the most secure mode that the client supports is what the server will use.

 

Good guide on that here:

MacOSXhints

[Ric_]

BINGO! The SMB signing business appears to have done the trick.

[Geoff]

Jeeze, what sucky version of Samba does MacOS X ship with? Samba 3 is fine with signed packets on Linux.