Skip to main content

Mac OS X "SOE" Day 7 (continued)

Considering switching from ADMitMac to Native AD plugin for some users.

#* Bind AD using built-in AD Plugin
#+ Unbind
logger "POSTBUILD PHASE : Unbind Native AD."
sudo /usr/sbin/dsconfigad -remove -u ${USERNAME} -p ${PASSWORD} -force
#+ Bind
logger "POSTBUILD PHASE : Bind ${workstation} to ${OU}"
sudo /usr/sbin/dsconfigad -f -a ${workstation} -domain ${DOMAIN}.COM -u ${USERNAME} -p ${PASSWORD} -ou ${OU}
#+ Configure
logger "POSTBUILD PHASE : Configure Native AD."
sudo /usr/bin/dscl /Search -create / SearchPolicy CSPSearchPath
sudo /usr/bin/dscl /Search -append / CSPSearchPath "/Active Directory/${DOMAIN}/All Domains"
sudo /usr/bin/dscl /Search/Contacts -create / SearchPolicy CSPSearchPath
sudo /usr/bin/dscl /Search/Contacts -append / CSPSearchPath "/Active Directory/${DOMAIN}/All Domains"
sudo /usr/sbin/dsconfigad ${options}
sudo /usr/sbin/dsconfigad -groups "${groups}"
if [ "${preferreddc}" != "" ]; then
 logger "POSTBUILD PHASE : Native AD Preferred DC ${preferreddc}"
 sudo /usr/sbin/dsconfigad -preferred $preferreddc
fi

Changed this up, modified the search paths to remove the /All Domains path. The "Network Accounts Unavailable" bubble now lasts only 5 seconds instead of 15 seconds.

#* Bind AD using built-in AD Plugin
#+ Unbind
logger "POSTBUILD PHASE : Unbind Native AD."
sudo /usr/sbin/dsconfigad -remove -u ${USERNAME} -p ${PASSWORD} -force
#+ Bind
logger "POSTBUILD PHASE : Bind ${workstation} to ${OU}"
sudo /usr/sbin/dsconfigad -f -a ${workstation} -domain ${DOMAIN}.COM -u ${USERNAME} -p ${PASSWORD} -ou ${OU}
#+ Configure
logger "POSTBUILD PHASE : Configure Native AD."
sudo /usr/bin/dscl /Search -create / SearchPolicy CSPSearchPath
sudo /usr/bin/dscl /Search -append / CSPSearchPath "/Active Directory/${DOMAIN}"
sudo /usr/bin/dscl /Search/Contacts -create / SearchPolicy CSPSearchPath
sudo /usr/bin/dscl /Search/Contacts -append / CSPSearchPath "/Active Directory/${DOMAIN}"
sudo /usr/sbin/dsconfigad ${options}
sudo /usr/sbin/dsconfigad -groups "${groups}"
if [ "${preferreddc}" != "" ]; then
 logger "POSTBUILD PHASE : Native AD Preferred DC ${preferreddc}"
 sudo /usr/sbin/dsconfigad -preferred $preferreddc
fi

Popular posts from this blog

Mac OS X "SOE" Day 7

Page Redirection> continued from day 6...

In summary, here is my method for creating a Mac OS X 10.7.3 Standard Operating Environment "SOE" Image.


Overview The goal is to create a "MASTER" non-booted SOE that can be used with multiple models and it multiple sites with different local requirements.

My intention is to use this "MASTER" image in a manual restore procedure due to the fact netboot facilities cannot be made available to all the sites I support however the DMG files are netboot compatible.

RequirementsLion Recovery Disk Assistant v1.0"TARGET" workstation. A compatible workstation that will be used to install Mac OS X 10.7.3 and capture a DMG image(s)."ADMIN" workstation. A workstation with Disk Utility that you will use to capture your DMG image(s).External storage such as a USB HARD DISK. SetupDownloaded the Lion Recovery Disk Assistant v1.0 and followed the instructions to setup an external Recovery D…

TFTP on Mac OS X 10.7 shell script

I've just started getting into Cisco support a little more. It's my goal to eventually specialise (its probably the first time I've found something in I.T. support that I don't eventually get bored with ). Since I've got about 1 of each OS I need make sure I can perform my job on anything. Was working on my macbook pro and needed to download some router configs. Give tftp a kick on Mac OS X 10.7 #!/bin/bash #* TFTP.sh #+ A quick script to enable/disable tftp (for use with cisco devices). #+ Usage: TFTP.sh on NO_ARGS=0 if [ $# -eq "$NO_ARGS" ] # no arguments? then /bin/echo "Disabling tftp." #+ Always unload, just to be on the safe side. sudo launchctl unload -w /System/Library/LaunchDaemons/tftp.plist #+ Cleanup any files so they aren't floating around ;) /bin/echo "Removing default tftp files." sudo /bin/rm -f /private/tftpboot/running-config sudo /bin/rm -f /private/tftpboot/startup-config sudo /bin/rm -f /private/tft…