Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

How to bind OSX 10.4 Server to AD for client authentication...

Posted on 2007-03-19
8
Medium Priority
?
1,882 Views
Last Modified: 2013-11-24
Hello All,

I must start out by saying that I am a relative newbe to the Apple world, and while i have a basic knowledge of AD and how it works pelase do not omit any small details or assume that i will know what you are talking about!

Okay, I am a System Administrator at a medium-sized high-school (we have around 200 student workstations (PCs) and another 100 staff laptops (mix of Apple and IBM). The school has just purchased a shiny new Xserve, 12 MacPro's, and 40 MacBooks.

The idea is that we would like the users to be able to log-on to any of the Macs with their AD username and password. The catch is that for those students doing a subject such as Art or Media, they need to have a home directory on the Xserve. So if a student does not have a home directory on the Xserve, they just log on and use the computer, saving ot their NT home directory, whereas an art student comes along, puts in their own account and are presented with their home folder on their desktop.

I need somebody to walkthrough binding the Xserve to the AD server and then setting up authentication that way... i'm not sure if all of the clients need to be bound to the AD server as well... i would prefer if they didnt, but if that's what has to happen, so be it.

The logic i invisige is this: (excuse my crude diagram)

 [AD Server]-------[Xserve]-------([Mac Clients])
         |
         |
([PC Clients])

It would be great if i could just set up a user group in AD for those students who need a specific Xserve Home directory, but this could also just as easily be done on the Xserve itself.

Sorry if I am not making any sense, please ask any questions that you need to clarify anything.

Thankyou in advance,

Sam.
0
Comment
Question by:SamShaw
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
8 Comments
 
LVL 9

Expert Comment

by:Shaun McNicholas
ID: 18755733
http://docs.info.apple.com/article.html?path=DirectoryAccess/1.8/en/c7od45.html

If you are using OS X 10.4 or above it works very well.
0
 
LVL 9

Expert Comment

by:Shaun McNicholas
ID: 18755750
You can setup accounts on the XServe separate from the AD domain - using the Workgroup manager on the XServe. But yes you still have to bind all the Macs to AD if you want the AD accounts to have access to those computers.
0
 
LVL 1

Author Comment

by:SamShaw
ID: 18775410
So are you sayign that there is no way to have synchronized user accounts between the Xserve and the AD server? The idea of having to manage another password for the users is not a nice one!
0
Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

 
LVL 9

Expert Comment

by:Shaun McNicholas
ID: 18776455
Yes you have to bind the XServe server to active directory and then you have full access to active directory as well as the XServer features /blogs /jabber etc... but if you want people to be able to log in apart from the Active Directory you can also bind them only to the Open Directory from the XServer - so you can have the best of both worlds. I have my entire Active Directory structure bound to my XServer so all my domain users have immediate access to blogs and jabber - but I can also add external accounts for my consultants using the Open directory structure on the XServe. But you have to Bind the Xserve to the Active Directory Domain first.
0
 
LVL 9

Expert Comment

by:Shaun McNicholas
ID: 18776466
I am sorry - I meant to say no - The XServe picks up the AD accounts dynamically - so you have the best of both worlds - Active Directory access for AD accounts as well as custom Open Directory accounts.
0
 
LVL 1

Author Comment

by:SamShaw
ID: 18776571
maestropsm:
can you please give me a quick run-through on how to go about setting it up as you described? This sounds like almost exactly what I want...

Thanks,

Sam.
0
 
LVL 9

Accepted Solution

by:
Shaun McNicholas earned 2000 total points
ID: 18819933
Sorry I have been traveling and busy with development efforts.
Apple has all the directions you will need to accomplish this in thier support area of the website here:
http://docs.info.apple.com/article.html?path=ServerAdmin/10.4/en/c7od47.html

Just follow the directions it's pretty seamless in OS X Server 10.4 and up - they did a great job integrating with the Windows Active Directory Domains in the 10.4 version of the server.

Let me know if you get stuck anywhere - I have done the bind on my server as well as with a couple of the Mac computers that I own and it works well in the Server as well as the work stations.

Also this enables all of your Active Directory user accounts in the weblog and iChat services in the XServe that come with the Sever version 10.4 - I was very impressed.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article we discuss how to recover the missing Outlook 2011 for Mac data like Emails and Contacts manually.
Worried about if Apple can protect your documents, photos, and everything else that gets stored in iCloud? Read on to find out what Apple really uses to make things secure.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question