Directory Services PLIST

[Matt]

Im on a roll today.

Would it be possible to deploy the SearchNodeConfig.plist and ContactsNodeConfig.plist as a policy/MCX. For some reason ALL DOMAINS locks out our users and I have to manually add the correct paths. Would it be possible to just deploy this small file during imaging time?
--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

[bentoms]

Works fine for me.

Regards,

Ben.

[rockpapergoat]

you can't manage this via mcx, though you can package it for install as part of the default image.

check this for a good template: https://github.com/unixorn/luggage-examples/tree/master/configure_ldap

or, make sure you specify the proper details at bind time rather than fixing it later.

[Matt]

No matter what I do, I can't get that to work during bind. I use the JAMF Bind and its all set up right, it just never populate the domain corrects in the DirectoryServices plists.

--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

[nessts]

for those of you that were not in the seed, there are multitudes of organizations that cannot get AD to work on Lion, it binds but nobody can login, it won't bind, etc, many bug reports filed, no fixes seen.

--
Todd Ness
Technology Consultant/Non-Windows Services
Americas Regional Delivery Engineering
HP Enterprise Services

[tomt]

That been my experience here so far.
------------------------------
Tom Tubbiola Design IT
Ttubbiola at oakley.com
949.900.7705

[Matt]

I found the fix for us. Basically it involves Unchecking "Allow authentication from…" and updating the Directory Domain Paths.

Too bad JAMF doesn't have the option to declare domain paths in the AD Bind option.

Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

[rockpapergoat]

you could use dsconfigad instead and pass all the details you need. the jamf method assumes defaults, for the most part, but it's basically just using dsconfigad anyway.

might as well roll your own to get the results you need.

[Matt]

Im assuming all my old pre-casper bind scripts will work in Lion.

--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

[rockpapergoat]

check first. there are new options for dsconfigad, among other things, but i haven't checked yet. never assume…

[tlarkin]

Was just going to say, use a script with dsconfigldap or dsconfigad to
set your domain and search paths

[Matt]

Im going to test the script in a few seconds here. Ill let you all know the result.
--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group

[Matt]

AD Binding is still completely and utterly useless it seems. I can't get anything to work concerning binding and dsconfigad. I had a computer bind then it just unbound itself a few days later and now every time I try doing it manually it tells me the server encountered an error. This is frustrating.

--
Matt Lee, CCA/ACMT/ACPT/ACDT
Senior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group