Managed Preferences issue

Question

Managed Preferences issue

Apparently my managed preferences for computers/groups will only work when a Machine has the OD server added, but not when the machine is actually bound to the server. Is there a reason this is happening or something I might do to remedy it? Seems like Im just missing something here...

Xserve Intel dual 3ghz, Managing Macbooks, Macbook Pros and iMacs, Mac OS X (10.4.10)

Posted on Sep 25, 2007 3:03 PM

Reply

Answer 1

Sep 26, 2007 9:19 AM in response to Nicholas Shaff

A side note that may lead to more information on this... upon taking a look at the log files, Im getting the following error message:

Sep 26 11:11:47 HN-MBCOW1-82CF /System/Library/CoreServices/mcxd.app/Contents/MacOS/mcxd: DSOpenNode(): dsOpenDirNode("/LDAPv3/xxx.xxx.xxx.xxx") == -14002

(x's being the name of our server). The server has forward and reverse lookup working. Cant think of any other useful information at the moment but if anything else is needed let me know.

Reply

Answer 2

PatGmac

Level 3

510 points

Sep 27, 2007 5:06 AM in response to Nicholas Shaff

If another directory service is handling your kerberos (such as AD), then you can't "bind" to OD because it will take over kerberos, which you can see in /Library/Preferences/edu.mit.kerberos.

Reply

Answer 3

Sep 27, 2007 7:16 AM in response to PatGmac

Is this the case even with kerberos disabled on the OS X Server?

Reply

Answer 4

PatGmac

Level 3

510 points

Sep 27, 2007 7:22 AM in response to Nicholas Shaff

Yes.

Reply

Answer 5

Sep 27, 2007 8:27 AM in response to PatGmac

Ahh well that makes a lot of sense now, thanks for the help pat.

Reply

Answer 6

Sep 27, 2007 8:49 AM in response to Nicholas Shaff

Ok so from this point how would I reverse this and get managed preferences working on the machines? I unbound a test machine, removed the following:

/etc/krb5.keytab
/Library/Preferences/edu.mit.kerberos
/Library/Preferences/DirectoryService/*

then rebound AD, re-added the OD server but did not bind it, and Im still unable to get managed preferences to work. Is there some other cache I need to clear or something else Im missing?

Reply

Answer 7

PatGmac

Level 3

510 points

Sep 27, 2007 9:03 AM in response to Nicholas Shaff

Now that you're not binding to OD, you have to add the machine to WGM manually and add it to a computer list.

Reply