How to configure golden triangle?

Question

Level 1

44 points

How to configure golden triangle?

Hello, I've been given the task of setting up and integrating a Lion server 10.7.4 (quad core Mac Pro) to connect to our existing Active Directory network with ~120 Macs and 75 PCs. Unfortunately I've found Apple's almost non-existant documentation disappointing, and Googling for help on the topic is somewhat helpful but geared to more advanced setups with terminal commands.

• Macs to authenticate to AD

• Macs to use Lion server for System Updates (faster, easier install process)

• Reimage Macs as needed via NetBoot

• Basic file sharing for IT needs, not company-wide use (there's a SAN for that)

I have some confusion on how the Lion server role should be set up:

• I'm assuming the server OD assistant will connect to existing AD and set up an OD replica?

• Do the Mac clients join AD or OD then? Both?

• Migrating existing local Mac users to using the AD user?

• Then switching 120 Macs to new AD setup once Lion server is configured.

I'm really disappointed with what Apple has provided here as it's hardly an overview, nevermind in-depth setup of the Server Admin services NetBoot and Software Update. 😕

https://help.apple.com/advancedserveradmin/mac/10.7/

Walkthrough steps would be great, and apprecieative! 🙂

Thank you,

-alden

Posted on May 16, 2012 7:46 AM

Reply

Answer 1

Best reply

gracoat

Level 3

673 points

May 16, 2012 10:45 AM in response to corradokid

The reason that there doesn't seem to be a ton of documentation around on the internet about this level of server information is that people sell that information and then certify the technicians that learn it!

Long story short:

In Server.app

In the Manage menu at the top. Click Connect to Directory and follow the steps.

On your clients, they only need to bind to the Mac Server. Not the AD server.

Your users will be able to use the services that the lion server is providing now.

There's quite a few good tutorials on lynda.com on how to set up a server from scratch. They cover everything from the initial installation to configuring advanced features of the services not offered in the GUI.

The cost is only 25 bucks per month, and it's all video tutorials. Totally worth it for a person new to server and IT administration. Certainly though, taking a certification course will give you an understanding of why these services work the way they do.

HTH

-Graham

Reply

Answer 2

corradokid Author

Level 1

44 points

May 16, 2012 2:42 PM in response to gracoat

Hi Graham,

Thank for you for the info on who Mac clients will bind to, makes sense but seems like none of Lion server is as easy as it could be.

I've been given the task to get this server up and running with no prior OS X server knowledge and despite being a Mac user since 1992, this starts to not be so logical and not used to having to research so much.

I did check out Lynda but I'm skeptical about the length of the videos and if they're in-depth enough? Like explaining how to migrate existing local users to AD/OD authenticaed users and so on. I'm all for whatever guides me through as hands-on seems to be the best way to learn.

-Alden

Reply

Answer 3

corradokid Author

Level 1

44 points

May 18, 2012 2:14 PM in response to gracoat

Check into getting certified... classes run $2,000, so that isn't happening. LOL

I did see this Peachpit Press info online VERY helpful:

http://www.peachpit.com/articles/article.aspx?p=1431816&seqNum=2

What I was hoping for was something more in-dpeth step-by-step like this extremely helpful post by Beandip408:

https://discussions.apple.com/thread/3280427?answerId=17200059022#17200059022

This was also helpful but not sure how applicable:

https://discussions.apple.com/thread/3334221?answerId=16193782022#16193782022

I've followed it but still have questions. The server has a SERVER.local name and that isn't going to change, some people say that's a problem? Some say it's supposed to be fixed in 10.7.4. I don't understand how Apple can not fix something that their server software defaults to.

Reply