Open Directory binding

[#1]

Can someone point me in the right direction for pushing/automating Open Directory binding with Casper Remote or policy? I'm thinking it will be dscl commands on 10.5, but will that work for 10.4? We need to remove current OD bindings from clients and then create a new OD binding on a whole bunch-o-machines.

Thanks,
-Nathaniel

SPPS

[#2]

Here's my script. We also bind to AD so I have it adding AD to the search
policy ahead of LDAP.

defaults write /Library/Preferences/DirectoryService/DirectoryService
"LDAPv3" "Active"
dsconfigldap -v -a od.server.com -n od.server.com -u username -p password
sleep 10
dscl /Search -create / SearchPolicy CSPSearchPath
killall DirectoryService
sleep 5
dscl /Search -create / SearchPolicy CSPSearchPath
dscl /Search -append / CSPSearchPath "/Active Directory/All Domains"
dscl /Search -append / CSPSearchPath /LDAPv3/od.server.com

[tlarkin]

I bind all clients to the ODM in the image, and then have post imaging and building level subnet policies that will rebind the client to the specific ODR that is in that building. here is my script.

#!/bin/sh

#This script binds a 10.4.11 or 10.5 client to an LDAP (OD) server.

oldserver="odm.domain.com"
newserver="odr.domain.com"

/usr/sbin/dsconfigldap -r $oldserver
/usr/bin/dscl localhost -delete /Search CSPSearchPath /LDAPv3/$oldserver
/usr/bin/dscl localhost -delete /Contact CSPSearchPath /LDAPv3/$oldserver
sleep 10
/usr/sbin/dsconfigldap -a $newserver
/usr/bin/dscl localhost -create /Search SearchPolicy dsAttrTypeStandard:CSPSearchPath
/usr/bin/dscl localhost -merge /Search CSPSearchPath /LDAPv3/$newserver
/usr/bin/dscl localhost -create /Contact SearchPolicy dsAttrTypeStandard:CSPSearchPath
/usr/bin/dscl localhost -merge /Contact CSPSearchPath /LDAPv3/$newserver

So, effectively it removes the binding to the ODM, sleeps for 10 seconds for all connections to clear and then rebinds the client to specified ODR at the building the client is in. This helps reduce traffic for authentication over the WAN. I have it as a post image script and a policy that runs once per a computer on smart groups based on VLAN.

Thomas Larkin
TIS Department
KCKPS USD500
tlarki at kckps.org
cell: 913-449-7589
office: 913-627-0351