Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Admin user for managed clients



Nigel Kersten <email@hidden> wrote:

> Have a look at the "generateduid" property of your OD group, it will
> look something like:
> 
> 2FAC47CF-50F9-4DF2-994D-AAF42C9B035D
> 
> If you then create the property "nestedgroups" in the "admin" group  
> in NetInfo, and put this UUID there, your OD users in that group will
> effectively be admins of the local machines in terms of command line
> stuff like being able to sudo.

Funny you go this way, I'd personnaly use the dseditgroup command with
something like this :

dseditgroup -o edit -a lanadmins -t group -n /NetInfo/DefaultLocalNode
admin

(on one line)

In this exemple, the group "lanadmins" will be added (nested) to the
netinfo group "admin".

Anyway, I haven't tried for this purpose, there may be issues. I haven't
any OD domain to test it soon.

-- 
Laurent Pertois - ACT - ACSA
"Never forget: 2 + 2 = 5 for extremely large values of 2"
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden

References: 
 >Re: Admin user for managed clients (From: Nigel Kersten <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.