What You ve Learned

What You've Learned

• The computer ID is limited to 16 characters and will truncate any characters over 16.

• The different methods a user can use to log in to a Mac OS X computer when bound to an Active Directory domain are: long name, short name, email address, and domain principal.

• When setting Active Directory administrative options, using "Allow administration by" specifies which groups of users within Active Directory have administration rights in Mac OS X.

• The majority of files connected with an Active Directory bind are located in /Library/Preferences/DirectoryService except the edu.mit.kerberos file, which is located in /Library/Preferences.

• Packet signing and packet encryption are not supported with the current Active Directory plug-in in Mac OS X v10.4.

References

Administration Guides

"Mac OS X Server Open Directory Administration": http://images.apple.com/server/pdfs/Open_Directory_v10.4.pdf

"Mac OS X Command-Line Administration": http://images.apple.com/server/pdfs/Command_Line_v10.4.pdf

Apple Knowledge Base Documents

The following Knowledge Base documents (located at www.apple.com/support) provide further information about Active Directory.

Document 107830, "Mac OS X Server 10.3 or later Active Directory: Using computer account attribute ACLs"

Document 301010, "Using the Active Directory plug-in in a multi-domain controller environment"

Books

Allen, Robbie, and Lowe-Norris, Alistair G. Active Directory, 2nd Edition (O'Reilly and Associates, 2003).

URLs

Open Directory and Active Directory: www.macdevcenter.com/pub/a/mac/2003/08/05/active_directory.html

Shukwit.com: www.shukwit.com

Windows Server 2003 Active Directory: www.microsoft.com/windowsserver2003/technologies/directory/activedirectory/default.mspx

Apple Professional Services: www.apple.com/services/consulting