• Mac OS X,  Mac OS X Server,  Mac Security

    Mac OS X Server: Using Open Directory to Control SideBar

    Recently I had a scenario where I wanted to disable all of the menu items using an MCX for some NetBoot clients.  To do so, I ended up building a custom MCX.  To do so, first open Workgroup Manager and click on the group in question.  Then click on Preferences and then the Details tab.  Next, click on the + sign and browse to /System/Library/CoreServices.  Next click on Menu Extras and click on the pencil.  Here drop down the Always disclosure triangle and click on the New Key button.  From here, name the key with menu item in question (or create multiple keys) and set the Type to Boolean and…

  • Mac OS X,  Mac OS X Server

    Mac OS X Server: Customizing Menu Items with Open Directory MCX

    Recently I had a scenario where I wanted to disable all of the menu items using an MCX for some NetBoot clients. To do so, I ended up building a custom MCX. To do so, first open Workgroup Manager and click on the group in question. Then click on Preferences and then the Details tab. Next, click on the + sign and browse to /System/Library/CoreServices/ManagedClient.app. Next click on Menu Extras and click on the pencil. Here drop down the Always disclosure triangle and click on the New Key button. From here, name the key with menu item in question (or create multiple keys) and set the Type to Boolean and the Value…

  • Active Directory,  Mac OS X,  Mac OS X Server

    Mac OS X: dirt

    dirt is a new utility in Leopard that can be used to test Directory Services.  You can use dirt to test authentication for LDAP or Active Directory.   The -u flag uses the username from the node you are testing against, in the above example it is the Active Directory username.  dirt tests whether an account exists in any node and can be used with the following structure: dirt -u username -n This would result in the following output if the account is located in Active Directory: User username was found in: /Active Directory/domainname The -p flag can also be used to test passwords.  You can also specify the node in Directory…

  • Active Directory,  Mac OS X Server,  Mac Security

    Managing the Keytab with ktutil

    clear_list – Clears the current keylist  read_kt or rkt – Reads a krb5 keytab into the current keylist  read_st or rst – Reads a krb4 srvtab into the current keylist  write_kt or wkt – Writes the current key listing into a krb5 keytab  write_st or wst – Writes the current key listing to a krb4 srvtab  add_entry or addent – Adds an entry to the current key listing  delete_entry, delent – Deletes an entry from the current key listing  list – Lists the current key listing  list_requests or lr – Lists available keys