Integrating Microsoft's AD into Apple's OD?

grag asks: "My workplace has started a migration to a unified authentication system using Microsoft's Active Directory, and Apple's Open Directory. We need to know if it is possible to place a Microsoft Active Directory server underneath a master Open Directory server in the hierarchy. The Microsoft server provides services only to our Accounting Department, and it seems to us that it should integrate to the Mac Server since all of our other departments use the Mac Server. Our network consists of fifty Macs connected to an Xserve running Mac OS X Server 10.3.6 Unlimited Client License. In addition, we have on a separate subnet five Windows boxes connected to a Microsoft Windows 2003 Server with a five-client license. Should I pursue this question or give up and place the Microsoft Server at the top of the hierarchy?"

Comments

other sources

[Johnny Mnemonic]

Should I pursue this question or give up and place the Microsoft Server at the top of the hierarchy?

While interesting, I would suggest that you look at Apple centric boards for resolution of this kind of question. How many Slashdotters know or care? Here's some examples:

• AFP 548
• OS X Enterprise
• Apple's Server mailing list,this question is right up that alley.
• X server boards on Apple's website
• Apple's PDF on Open Directory Administration.

I'm sure there's more, but those are the quick few that you could at least get better resources from if they don't directly answer your question. I won't kid you--I don't think it'll be easy. But it would be helpful to start with people that might actually know the answer, than to start with people that probably don't.

You might also consider a Server Support agreement from Apple; they can help with this kind of integration. Sure, it costs; but then you didn't think that we'd do your job for you either, right? And I believe that you could get this kind of support for the cheapest plan: $5995, and even have a few more calls left over for the rest of the year.

Re:Translation

[aventius]

You know.... the above parent has a good point about calling tech support. Contacting tech support or searching the Apple website would have been much faster and more fruitful than posting on Slashdot. Half of the responses here will be:

1) drop Open Directory
2) drop AD, or
3) I welcome our new LDAP overlords

But unfortunately, the parent is lame for posting anonymously so flamebait he obviously is. Had he posted under an account, I would have not jumped to conclusions (damn I need to get my 'Jump to conlusions' mat back from the repair shop) that he was trolling. /end-rambling