OSX 10.3 authenticate with Active Directory

[joh]

Hi All,

I was under the impression that OS X 10.3 (Panther) was
going to have singe sign on with regards to mounting
fileservers. I have a W2K active directory domain,
configured the Active Directory Plugin on the panther
clients, authenticate with a directory account. Everything
to here works fine; but when I mount a fileserver in the
domain, it prompts for credentials. Same result when
mounting with smb or afp. I thought that aft was
kerberoized, which should allow single sign on. Is there
some configuration that I'm missing?

Thanks for the insight.

joh

 

[Jim Seifert [MSFT]]

Macfile (afp) on Windows servers does not support Kerberos authentication.
The most recent version of the MS UAM supports NTLMv2 authentication but
this is not part of a the domain login solution you mention.

 

[Terry Caleb]

I have gotten my eMacs to authenticate to the Windows
2000 domain, but in 1 of the aricles from Apple, in
mentions that it should mount the users home directory to
the desktop. I have not benn able to do this. Has anyone?
Here is the article text:

The Active Directory plug-in dynamically generates a
unique user ID and a primary group ID based on the user
account's Globally Unique ID (GUID) in the Active
Directory domain. The generated user ID and primary group
ID are always the same for each user account even if the
account is used to log in to different Mac?OS?X
computers. Alternatively, you can force the Active
Directory plug-in to map the user ID to an Active
Directory attribute that you specify.

When someone logs in to Mac?OS?X with an Active Directory
user account, the Active Directory plug-in creates a home
directory on the startup volume of the Mac?OS?X computer.
The plug-in also tells Mac OS X to mount the user's
Windows home directory (as specified in the Active
Directory user account) to mount on the desktop as a
share point. Using the Finder, the user can copy files
between the Windows home directory in the Network globe
and the Mac?OS?X home directory.


Thanks,
Terry