A bit of help needed with directory utility

[Simmo]

Hopefully a simple one here.
In my environment we use e-directory, and we use a directory utility plug in called Kanaka for creating mobile account and mounting network shares on log-in.

On my image I have the .pkg installer and the .plist to pre-fill the directory utility information for Kanaka.

My only problem is that the directory utility information doesn't apply, I have to physically go in to directory utility, edit the kanaka plug-in and then press apply. I am needing to find a way to make the settings apply without having to do it manually.

Any ideas?

[calumhunter]

is the .plist to pre-fill the directory information supposed to go into /Library/Preferences/DirectoryServices?

If you enter the correct information manually, where is this information stored? use fs_eventer http://www.fernlightning.com/doku.php?id=software:fseventer:start to help you track down the file

also

e-directory - yuck
Kanaka - double yuck

[Simmo]

The .plist is in /Library/Preferences/DirectoryServices/ yes.

When I originally tried setting it up I just used composer to capture file system changes and then I entered the information in to the plug-in in directory utility and it created the plist there.

I don't have a choice about e-directory nor Kanaka, I just have to try to make it work.

[Nick_Gooch]

Did you ever figure this out? We are in the same boat.

We also have issues with users randomly not being able to log in off network.

[Simmo]

@Nick_Gooch In the end we migrated users to local accounts as we found the Kanaka plug-in to be too unstable, having users unable to log in when off the network trumped the need for federated authentication.

[Nick_Gooch]

Did you automate the migration or manually migrate everyone? I am considering the same.

[Simmo]

@Nick_Gooch I used a script at login to delete the user account but preserve their home directory and then re-create the account with the same home directory.

I had to do prompts at login to request them enter their password, as long as they entered the same password that they used for their mobile account it preserves the keychain.

I posted the script I use here: https://jamfnation.jamfsoftware.com/discussion.html?id=10878

[Nick_Gooch]

Awesome thanks. I'll look into that. Was it 100% successful or did you run into many issues?

[Simmo]

@Nick_Gooch Only issues I saw was when people didn't put in the password of mobile account, it would break the keychain and cause some issues with permissions.