4.04.2012

Mac OS X "SOE" Day 7 (continued)

Considering switching from ADMitMac to Native AD plugin for some users.

#* Bind AD using built-in AD Plugin
#+ Unbind
logger "POSTBUILD PHASE : Unbind Native AD."
sudo /usr/sbin/dsconfigad -remove -u ${USERNAME} -p ${PASSWORD} -force
#+ Bind
logger "POSTBUILD PHASE : Bind ${workstation} to ${OU}"
sudo /usr/sbin/dsconfigad -f -a ${workstation} -domain ${DOMAIN}.COM -u ${USERNAME} -p ${PASSWORD} -ou ${OU}
#+ Configure
logger "POSTBUILD PHASE : Configure Native AD."
sudo /usr/bin/dscl /Search -create / SearchPolicy CSPSearchPath
sudo /usr/bin/dscl /Search -append / CSPSearchPath "/Active Directory/${DOMAIN}/All Domains"
sudo /usr/bin/dscl /Search/Contacts -create / SearchPolicy CSPSearchPath
sudo /usr/bin/dscl /Search/Contacts -append / CSPSearchPath "/Active Directory/${DOMAIN}/All Domains"
sudo /usr/sbin/dsconfigad ${options}
sudo /usr/sbin/dsconfigad -groups "${groups}"
if [ "${preferreddc}" != "" ]; then
 logger "POSTBUILD PHASE : Native AD Preferred DC ${preferreddc}"
 sudo /usr/sbin/dsconfigad -preferred $preferreddc
fi

Changed this up, modified the search paths to remove the /All Domains path. The "Network Accounts Unavailable" bubble now lasts only 5 seconds instead of 15 seconds.

#* Bind AD using built-in AD Plugin
#+ Unbind
logger "POSTBUILD PHASE : Unbind Native AD."
sudo /usr/sbin/dsconfigad -remove -u ${USERNAME} -p ${PASSWORD} -force
#+ Bind
logger "POSTBUILD PHASE : Bind ${workstation} to ${OU}"
sudo /usr/sbin/dsconfigad -f -a ${workstation} -domain ${DOMAIN}.COM -u ${USERNAME} -p ${PASSWORD} -ou ${OU}
#+ Configure
logger "POSTBUILD PHASE : Configure Native AD."
sudo /usr/bin/dscl /Search -create / SearchPolicy CSPSearchPath
sudo /usr/bin/dscl /Search -append / CSPSearchPath "/Active Directory/${DOMAIN}"
sudo /usr/bin/dscl /Search/Contacts -create / SearchPolicy CSPSearchPath
sudo /usr/bin/dscl /Search/Contacts -append / CSPSearchPath "/Active Directory/${DOMAIN}"
sudo /usr/sbin/dsconfigad ${options}
sudo /usr/sbin/dsconfigad -groups "${groups}"
if [ "${preferreddc}" != "" ]; then
 logger "POSTBUILD PHASE : Native AD Preferred DC ${preferreddc}"
 sudo /usr/sbin/dsconfigad -preferred $preferreddc
fi