Comments for dotmac.AU http://www.dotmac.net.au Information Technology administration in education Fri, 21 Nov 2008 08:03:52 +0000 http://wordpress.org/?v=2.2.3 Comment on Active Directory plugin settings by connectionfailure http://www.dotmac.net.au/mac-os-x/active-directory-plugin-settings/#comment-4 connectionfailure Tue, 04 Dec 2007 09:21:44 +0000 http://www.dotmac.net.au/mac-os-x/active-directory-plugin-settings/#comment-4 But would you recommend using an unused AD field like postalCode for a 20-mac setup? I mean, if you could start from scratch like I am, how would you do it?What should the UIDs be, 6xx like I mentioned? What about the GIDs, I have no idea what numbers they should be. But would you recommend using an unused AD field like postalCode for a 20-mac setup? I mean, if you could start from scratch like I am, how would you do it?What should the UIDs be, 6xx like I mentioned? What about the GIDs, I have no idea what numbers they should be.

]]> Comment on Active Directory plugin settings by admin http://www.dotmac.net.au/mac-os-x/active-directory-plugin-settings/#comment-3 admin Tue, 04 Dec 2007 06:13:34 +0000 http://www.dotmac.net.au/mac-os-x/active-directory-plugin-settings/#comment-3 I manually maintain the UID for all users in my directory to ensure that the proper UID is used throughout the entire system. While I still use the LDAP plugin, while I was playing with the AD plugin I used the postalCode attribute to set a manual UID so that their usual Mac home directory had the correct permissions (due to Mac OS using UID's to assign permissions). The system would work much better if active directory assigned a unique number instead of the alphanumeric combo it does because you would be able to map the UID to that attribute. I manually maintain the UID for all users in my directory to ensure that the proper UID is used throughout the entire system.

While I still use the LDAP plugin, while I was playing with the AD plugin I used the postalCode attribute to set a manual UID so that their usual Mac home directory had the correct permissions (due to Mac OS using UID’s to assign permissions).

The system would work much better if active directory assigned a unique number instead of the alphanumeric combo it does because you would be able to map the UID to that attribute.

]]> Comment on Active Directory plugin settings by connectionfailure http://www.dotmac.net.au/mac-os-x/active-directory-plugin-settings/#comment-2 connectionfailure Mon, 03 Dec 2007 01:32:37 +0000 http://www.dotmac.net.au/mac-os-x/active-directory-plugin-settings/#comment-2 So you're saying that when 10.3 was around you manually picked a bunch of numbers, say 6xx, and you went into each user in Active Directory and put that in postal code? The same for GIDs, you put them in Telephone Number? If I leave the fields blank I get ridiculously high UIDs and GIDs. So you’re saying that when 10.3 was around you manually picked a bunch of numbers, say 6xx, and you went into each user in Active Directory and put that in postal code? The same for GIDs, you put them in Telephone Number?
If I leave the fields blank I get ridiculously high UIDs and GIDs.

]]>