Search the Community

I'm currently working in an AD environment with an existing OD server that is not bound to AD (standalone). The 10.4 clients & users are managed completely via OD. I wish to use AD auth and still have the OD management (I've read the afp548 sandbox whitepaper) so setup a second OD server, bound it to AD, set the search order, etc and all appears to be working well at the server side. I've bound a client to AD and can login just fine (even without running an OD server) so my question is: how do I specify on the client how to use the OD server for management & how can I slowly migrate users/computers from the old OD server to the new OD server which is bound to AD). In other words, how do the clients know where to get their configuration from -- is it managed completely by the OD server via mac address in the computer group section of WGM? I have apx 350 clients to convert at this early phase. thanks! Eric

We have recently purchased a Mac Mini and Stuck OS X Server on it to hopefully resolve some of are mac issues in the music dept. However this sounds fantastic I have made myself more issues! Does anyone have any experience OD integrating with AD for signing on users in a Windows Domain so I can use apple remote desktop to admin the macs!! Any help would be fantastic. So far I've bound the mac server to AD, Got an Open Directory master running and I can see all off the AD users in workgroup manager! Not to sure where to go from here! Been reading about adding foward and Reverse DNS lookups for the server?? Help!! Thanks Steve

I’m running a golden triangle setup with Open directory assigning group policy and authentication provide by active directory. In workgroup manager I can search through the AD and add users or computers to groups in OD workgroup manager. However when I save and refresh the users or computer appear as ‘not found’. Is there a reason for this?

I seem to have lost my trusty script that renames Macs and joins them to AD so I've had to re-make it. Anyway, it's all nice and shiny now and it may come in handy for you since I've made it rather generic. You can check it out at http://www.edugeek.net/wiki/index.php/Changing_the_computername_and_joining_Open_Directory_and_Active_Directory Feel free to post feedback and extend the script if needs be.

Further to an earlier thread of mine it seems our principal is introducing Macs by stealth. Well, not very stealthy, really, as there'll be 40 or so very soon now. There has been no thought given as to how we integrate and manage them. I've browsed this forum and found things like a very useful guide to building a sandbox to play with OD - AD integration and I'm certainly game to try to get this situation under some sort of control, although no-one here has any Mac experience. So, I assume I'll need an Xserve to host the OD. (Don't know where we'll put it, what with our 6 brand new Wintel blades coming in next week ...). What else do I need? Any particular Xserver software? Yes, I know I need training. I imagine we'll be running Parallels on the Macs, and that Windows will be around for a long time yet, but I assume that the long-term plan is to migrate. Any case studies of a successful migration would be very welcome. We run a Server 2003-based network with two DCs, Akhter Jigsaw to provide some management, Exchange Server 2003, (some) SharePoint and a few other bits and bobs that'll need moving at some stage. There are about 800 users and 250 or so machines on the current domain.

We have recently purchased a Mac Mini and Stuck OS X Server on it to hopefully resolve some of are mac issues in the music dept. However this sounds fantastic I have made myself more issues! Does anyone have any experience OD integrating with AD for signing on users in a Windows Domain so I can use apple remote desktop to admin the macs!! Any help would be fantastic. So far I've bound the mac server to AD, Got an Open Directory master running and I can see all off the AD users in workgroup manager! Not to sure where to go from here! Been reading about adding foward and Reverse DNS lookups for the server?? Help!! Thanks Steve

Our macs here used to be set up so users got their AD network home drives mapped when they login in when the path was in the following format in AD; \\fileserver\username$ However to make adding new users easier for ourselves we changed the AD accounts so the home directory path is now as follows; \\fileserver\users$\Students\YearGroup\username This works fine in windows but on the macs it just maps users$ which they don't have permission to so.. Is there an easy way of fixing this? I've written this applescript which ejects the users$ share, queries AD for the current users home directory, converts the \\ into / and maps that as an SMB share. However i'm hoping there's an easier way of doing this that i've missed as i've got to apply this to around 100 macs.. set diskName to "users$" tell application "Finder" if disk diskName exists then eject disk diskName else end if end tell set homedir to (do shell script "dscl /Active\\ Directory/domainname.org.uk -read /Users/$USER SMBHome | grep \\\\\\\\.* -o") set x to SaR(homedir, "\\", "/") on SaR(sourceText, findText, replaceText) set {atid, AppleScript's text item delimiters} to {AppleScript's text item delimiters, findText} set tempText to text items of sourceText set AppleScript's text item delimiters to replaceText set sourceText to tempText as string set AppleScript's text item delimiters to atid return sourceText end SaR set networkhomedir to the result mount volume "smb:" & networkhomedir as text Any suggestions would be greatly appreciated. Many thanks, Martin

Right, I'm getting a little confused now with integrating OS X and Active Directory. I have an OS X server (10.5) and half a dozen or so OS X clients. My intention is to have the server get its users from the AD, the clients get their prefs and authentication via the OS X server and everything lives happily ever after. I have got the OS X server bound to the AD domain and can see the users (only 1000, even though there are more objects than that in the AD??), and a client which has the OD server and the AD server as it's servers. So, an AD user can log in just fine. The problem is the use of the Workgroup Manager to restrict privileges etc... How do I do this? Everywhere I look, it points to 'it can't be done unless you buy a third party program or extend the AD schema' - without explaining what extensions to the schema need doing. And also talks about Mappings. I can understand the mappings issue, but what ID should I assign to the UID? Can someone provide me with some info on how to do what I want, without spending more money on software?