OSX Server - AD - Advice/help wanted

[pooley]

My job for monday is to setup an OS x server, we using a mac mini with 2gig ram etc etc.

 

Now i've read a few articles/how to's etc on the www but am a little confused as to what I really need to be dong.

 

The idea behind the mac server is to be able to lock down the imac's we have and aid with home folder and network folder mapping.

 

I want to ink it into AD so we don't have duplicate/multiple logon names.

 

Basically :-

 

Does the server need to be setup as an OD master?

If I just link it into AD using the directory tool will I be able to manipulate OU's and users from my AD domain and setup shares and access rights etc ?

 

Any help would be appreciated, am slowly drowning in information at the moment

 

Cheers

[kingswood]

I haven't got time to detail the steps you need to take- and besides others have done it better on here and on t'internet (particularly here: http://www.bombich.com/mactips/activedir.html ) but in essence you need to make you server an OD Master and also bind it to your AD domain. Take a look at the linked document and that pretty much says it all.

 

If you get stuck, scream for help and there are some good people on here who can help more.

 

Good luck!

 

Paul

[Rozzer]

IF you get any issues after reading that article of bombwich feel free to pm me i will be happy to help. Or i can pass on a contact number macs are my friend

 

Ross

[pooley]

Thanks guys will follow the bombwich bible and see how I get on

[HodgeHi]

I had an interesting issue when i followed the OD-AD integration paper using one OS X Server. I wanted kerberos and standard authorisation to the OD services Mail, etc and network mount shares (under sharing in WGM).

 

When i set the AD first in the contacts list in directory access i could authenticate to the services but when trying to mount the network share (ticking the box) i could only select the active directory which since i could not write back to the schema complained.

 

But if i switched ldap v3 and AD in the directory access (so LDAPv3 was first) i could choose only LDAPv3 but users could not authenticate.