Anyway, I do have a question regarding
reachabbility of the AD Server. The idea is that each of our 20 so
colleges should have it’s own OD Master talking nice to the AD Server and
passing on it’s goodies to the OD Replicas. (We have our own OD Master and
Replica here already that has been humming along without a hiccup for the last
15 months or so, so the concept is not so new to us). Now I know, that in a pure
OD setup, if the Master goes down, the users can still get onto the Replica just
fine. If their mobile profiles or network profiles are on that Replica or
another Replica all is still well. It could very well be, that the
geeks-in-power will require that all stationary machine use network profiles.
What will happen in this new AD-world, if the AD Server goes down or the
connection to it goes down? Will our network or users be lost, be sitting in
front of black-boxes? Or is the AD LDAP info stored on the OD Master (here) as
if it itself were head honcho and not some AD Lackey-Server?
----------------
Ideal
AD/OD setup would have all the user accounts in AD and your AD groups
configured in OD and use OD just to manage MCX settings for users via applying
MCX settings to the configured groups. Mainly because OD can talk to AD but AD
can't talk to OD. If all your users are going to remain in OD there's no
point in introducing AD into that setup. You don't have to have your Mac's
in AD to connect users to Exchange. As far as the AD server, you should
have a primary and secondary AD/Domain controller just as you have a master and
replica for OD. If one goes down the other can take over. If they both go down
then your in trouble just as you would be if both OD servers went down. You can
store OD settings in AD if you apply the apple ldap schema but you cant store AD
settings in OD.
We
have our AD, OD, Exchange setup working flawlessly but we did not follow any of
the guides out there and used our own setup which involved third party apps.
Those are ExtremeZ-IP 4, which does cost money and MS Windows Services for Unix,
which is free now. I have been thinking of doing a HOW-TO FAQ but
I didn't think anyone would be interested since it involved 3rd party
apps.
Hope
this blabbering mess makes sense :)
Dedrick
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden
This email sent to email@hidden
