S/Medicine Mac OS X Domain Binding Instructions

Transcription

1 Office of Origin: Information Technology 1. Purpose The purpose of this document is to outline the steps necessary to bind Macintosh computers using the Mac OS to the SOM domain in order for clients to authenticate against the SOM domain and log in to their network shares. The document outlines the necessary steps to change the settings in Mac OS 10.4 (Tiger). 2. Set Computer Name 1. Go to System Preferences and select Sharing, located under the Internet & Network section. 2. Each computer in the SOM domain is given a designated number (e.g. C722, DERM333, OB444, etc.). Please consult with your CSC or contact the ISU Helpdesk to determine the correct number for the computer. 3. From the Sharing window, enter your computer name in the space provided. You may need to unlock the window in order to make changes. To do this, click on the lock in the lower left hand corner of the window and it will prompt you for a local admin username and password in order to effect changes. Page 1 of 9

2 S/Medicine Mac OS X Domain Issue Date: 03/08/04 4. Hit the Show All button to return to the System Preferences window. 3. Setting DNS Servers and Search Domains 1. From the System Preferences window, select Network. Page 2 of 9

3 2. Configure your DNS Servers to read , and your Search Domains to read som.ucsf.edu, ucsf.edu, ucsfmedicalcenter.org, net.ucsf.edu as in the picture below. 3. Close the System Preferences window. 4. Binding to the Domain 1. Go to the Applications folder and open the Utilities folder. Find and open the Directory Access utility. Page 3 of 9

4 S/Medicine Mac OS X Domain Issue Date: 03/08/04 2. In Directory Access put a check next to Active Directory and SMB/CIFS (Bonjour is checked by default). Uncheck all other items. 3. Select Active Directory and click on the Configure button at the bottom of the window. From the roll down window, click the button next to Show Advanced Options to expand the window. Page 4 of 9

5 4. Add som.ucsf.edu to the Active Directory Domain field. 5. Under Advanced Options, select: Create mobile account at login Force local home directory on startup disk Default user shell: /bin/bash 6. Unselect all other items. Ignore any items that have been grayed out by default. 7. Select the Administrative tab. 8. Enter som.ucsf.edu as the preferred domain server. 9. Use the + sign to add the following administrators: SOM\domain admins SOM\enterprise admins SOM\w2k admins 10. Leave the option to Allow authentication from any domain in the forest unchecked. 11. Click the Bind button. 12. A window will pop up requiring a Network Administrator login and password. Keep in mind that standard users cannot login with their SOM username and password here. This login requires administrative privileges on the network. Page 5 of 9

6 S/Medicine Mac OS X Domain Issue Date: 03/08/ The Computer OU will need to be changed to include the OU for the proper department: (N.B. The OUs for each department can be found in Active Directory under the som.ucsf.edu\hosting domain.) DAHSM: OU=computers,OU=dahsm,OU=hosting, DC=som,DC=ucsf,DC=edu Derm: OU=computers,OU=dermatology,OU=hosting, DC=som,DC=ucsf,DC=edu ObGyn: OU=computers,OU=obgyn,OU=hosting, DC=som,DC=ucsf,DC=edu : OU=computers,OU=somdean,OU=hosting, DC=som,DC=ucsf,DC=edu 14. After entering login information and supplying the correct OU, click OK to begin the process of binding the computer to the domain. This may take a few moments. 15. Click OK to exit this window and return to the main Directory Access window. The computer should now be bound with the domain and allow users to authenticate with the SOM AD servers. 16. If the machine is unable to successfully bind to the domain, check your login and OU information for accuracy. If you believe this information is correct, please contact the ISU Help Desk for further assistance. Page 6 of 9

7 5. Configuring Authentication in Directory Access 1. In the Directory Access window, select the Authentication tab. 2. Click the Add button and select /Active Directory/som.ucsf.edu. Click Add. 3. Click the Services tab to return to the main Directory Access screen. Select SMB/CIFS and click Configure Page 7 of 9

8 S/Medicine Mac OS X Domain Issue Date: 03/08/04 4. Change the Workgroup to som and the WINS Server to Click OK. 6. Verify Additional Settings Page 8 of 9

9 1. Go to Apple / System Preferences / Accounts click the lock to unlock the control panel and make changes. Click on Login Options at the bottom of the accounts listing window on the left. 2. Uncheck Automatically log in as: 3. Change Display login window as: to List of users. 4. This will enable the list of users to login, as well as the option for Other to login at startup. 5. Close System Preferences and Log out of the computer. 6. Click on Other in the login window and put in the user s SOM username and password. 7. If everything went smoothly, you can now login using any SOM AD username and password. 8. Lastly, verify that the SOM DNS entries are in the network settings under Apple / System Preferences / Network. If they are not listed there, please enter the following: DNS Servers: Search Domains: som.ucsf.edu, ucsf.edu, ucsfmedicalcenter.org, net.ucsf.edu Page 9 of 9