Slashdot Mirror

← Back to Stories (view on slashdot.org)

Integrating Mac OS X With Active Directory

Posted by pudge on from the icky-poo dept.

Eric Zelenka writes "Apple has released a new document called 'Integrating Mac OS X with Active Directory.' This document describes how you can use the information stored in Microsoft's Active Directory to authenticate Macintosh users and provide file services and home directories for them on Mac OS X Server. It is available for download from the Mac OS X Server web site." I want my Mac OS X box to self-destruct if it comes into contact with a Microsoft server; does Apple have a document for that?

7 of 22 comments (clear)

  1. not directly using AD -- using LDAP by teridon · · Score: 3, Informative

    You have to contort your AD server to allow LDAP for this to work.

    --
    I hold it, that a little rebellion, now and then, is a good thing. -- Thomas Jefferson
  2. Link to article itself by Cire · · Score: 2, Informative

    For those that dont feel like actually looking through apples site for the article, here's a direct link to the PDF version of Integrating Mac OS X with Active Directory [apple.com]


    Cire

  3. altering AD schema? by mistermoonlight · · Score: 2, Interesting
    It seems from the instructions that you have to create custom fields in the schemato make this happen (e.g. unixid). Higher-ups are a little nervous about this because changing the schema can severely alter the AD.


    I was under the impression that if you installed Services for Unix on the box hosting the AD, these fields would be automatically added, but would you still have to create unique LDAP IDs for each user? Is there a way you can do this in bulk?

  4. don't worry by moosesocks · · Score: 2

    Don't worry about self destruct:
    If the OSX box is in close proximity to a microsoft server, the explosion from the microsoft server after it spontaneously combusts (tends to happen on microsoft servers) should engulf the OSX box too
    (unless apple uses some sort of fire-retardant on their imacs :) )

    pun: somehow, this sounds like flamebate

    --
    -- If you try to fail and succeed, which have you done? - Uli's moose
  5. Re:What about Novell eDirectory? by Wesley+Felter · · Score: 2

    This howto is all about using OS X with LDAP servers. Since eDirectory is an LDAP server, it shouldn't bee too hard to modify the instructions to work with it.

  6. Re:Need Reverse Solution by rliebsch · · Score: 2, Interesting

    How does it not work for you. I have a fully implemented AD schema. I have file sharing for Windows, Mac, and Nix running. I have samba and appleshare IP.

    OSX sees it all. I can mount SMB, mount NFS, mount AFP.

    check yer smb conf.

    --
    Robert Liebsch Systems Psychiatrist, Network Sociologist, Security Criminologist
  7. Another addition to the elvolving Active Directory by fluor2 · · Score: 2, Interesting
    I must say I'm impressed with how Microsoft has made the AD evolve. There is a need in the industry, as networks increase in both size and bandwidth, for bigger and more centralized stuff so people don't have to use separate accounts for each apartment or whatever. There exist programs now for even synchonizing Oracle databases and AD, novell and AD (password on novell is unfortunately not possible to sync) and similar.

    A norwegian company named MetaMerge who has started on this big task (synchronizing databases is not that easy).

    I've seen that even Cisco is planning to support Active Directory. Wouldn't it be nice to right click on a user and just select what kind of access the user should have? E.g. "Allow only port 80, or only connections using https, or limit bandwidth of this user .. the solutions are endless".

    Of course, Microsoft did not like the full LDAP specification, so they created another layer (ADSI), but what the heck, it still works.