Slashdot Mirror

← Back to Stories (view on slashdot.org)

Integrating Mac OS X With Active Directory

Posted by pudge on from the icky-poo dept.

Eric Zelenka writes "Apple has released a new document called 'Integrating Mac OS X with Active Directory.' This document describes how you can use the information stored in Microsoft's Active Directory to authenticate Macintosh users and provide file services and home directories for them on Mac OS X Server. It is available for download from the Mac OS X Server web site." I want my Mac OS X box to self-destruct if it comes into contact with a Microsoft server; does Apple have a document for that?

3 of 22 comments (clear)

  1. altering AD schema? by mistermoonlight · · Score: 2, Interesting
    It seems from the instructions that you have to create custom fields in the schemato make this happen (e.g. unixid). Higher-ups are a little nervous about this because changing the schema can severely alter the AD.


    I was under the impression that if you installed Services for Unix on the box hosting the AD, these fields would be automatically added, but would you still have to create unique LDAP IDs for each user? Is there a way you can do this in bulk?

  2. Re:Need Reverse Solution by rliebsch · · Score: 2, Interesting

    How does it not work for you. I have a fully implemented AD schema. I have file sharing for Windows, Mac, and Nix running. I have samba and appleshare IP.

    OSX sees it all. I can mount SMB, mount NFS, mount AFP.

    check yer smb conf.

    --
    Robert Liebsch Systems Psychiatrist, Network Sociologist, Security Criminologist
  3. Another addition to the elvolving Active Directory by fluor2 · · Score: 2, Interesting
    I must say I'm impressed with how Microsoft has made the AD evolve. There is a need in the industry, as networks increase in both size and bandwidth, for bigger and more centralized stuff so people don't have to use separate accounts for each apartment or whatever. There exist programs now for even synchonizing Oracle databases and AD, novell and AD (password on novell is unfortunately not possible to sync) and similar.

    A norwegian company named MetaMerge who has started on this big task (synchronizing databases is not that easy).

    I've seen that even Cisco is planning to support Active Directory. Wouldn't it be nice to right click on a user and just select what kind of access the user should have? E.g. "Allow only port 80, or only connections using https, or limit bandwidth of this user .. the solutions are endless".

    Of course, Microsoft did not like the full LDAP specification, so they created another layer (ADSI), but what the heck, it still works.