[MacTUG] Deploystudio and 10.9

[Dani Roloson]

Next time check in Directory Utility and see if AD is listed in the Services and Search Policy.

That's the problem with us just using

dsconfigad -add ADSERVER -computer `scutil --get ComputerName` -username ADBINDUSER -password 'PASSWORD1' -ou 'SUITABLE-OU' -mobile disable -mobileconfirm disable -localhome disable -useuncpath disable -protocol nfs -shell /bin/bash -uid uidNumber -gid gidNumber -ggid gidNumber -nopreferred -nogroups -alldomains enable -passinterval 0

Seems we need to do this
> you'll need to activate it in /L/P/DS/DirectoryService.plist using defaults,
> then use dscl to edit the SearchPath property of the Contacts node.


And there's a decent description here (after the man pages of course).
http://systemsboy.blogspot.com/2006/11/directory-access-via-command-line.html


________________________________
From: mactug-bounces at lists.uwaterloo.ca [mactug-bounces at lists.uwaterloo.ca] on behalf of Keith McGowan [kmcgowan at uwaterloo.ca]
Sent: October 30, 2013 13:55
To: Donald Duff-McCracken; MacTUG
Subject: Re: [MacTUG] Deploystudio and 10.9

We also pre-stage our systems so that’s not the issue.  Our systems did SEEM to bind (green Nexus button) but a Nexus account login failed. Once we un-bound and binded again, the login succeeded.

…Keith

From: mactug-bounces at lists.uwaterloo.ca [mailto:mactug-bounces at lists.uwaterloo.ca] On Behalf Of Donald Duff-McCracken
Sent: October-30-13 1:42 PM
To: MacTUG
Subject: [MacTUG] Deploystudio and 10.9

As a follow up to Keith’s comments that he was not getting AD binding with Deploystudio when pushing out a 10.9 client, I decided to try that next.

I built a 10.9 master image in deploystudio. It was just a OS and a few little tweaks I do to an admin folder, because I do a granular install, installing just the OS and then having deploystudio push out a bunch of composer-created packages.

At any rate I took one of the workflows I use in deplystudio and duplicated it and just replaced the disk image. This workflow uses the same deploystudio “active directory binding” and “automatic enrolment” workflow tasks that I used in 10.8 without modification.

For my test, the computer was presaged as it is an existing computer that I had deployed with deploystudio using my 10.8 workflow that bound and enrols clients.

I can report, that IT WORKED!

So Kieth, I am not sure why it worked and it did not for you?!? As I said, it was prestaged, maybe I should try it by deleting it from active directory and building the test client again?
------------------------------------
Donald Duff-McCracken
Technical Services Manager
Mapping, Analysis & Design
Faculty of Environment
University of Waterloo
(519) 888-4567 x32151
https://uwaterloo.ca/environment-computing/about/people/donald-duff-mccracken

------------
To request help from MAD please use Request Tracker. For info see:
https://rt.uwaterloo.ca/~wwwrt/cgi-bin/rtuser.pl

------------
This email communication is intended as a private communication for the sole use of the primary addressee and those individuals listed for copies in the original message. The information contained in this email is private and confidential and If you are not an intended recipient you are hereby notified that copying, forwarding or other dissemination or distribution of this communication by any means is prohibited.  If you are not specifically authorized to receive this email and if you believe that you received it in error please notify the original sender immediately.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.uwaterloo.ca/pipermail/mactug/attachments/20131030/1c66977d/attachment-0001.html>