Comments on: More LDAP info… http://geekforce.com/2006/09/07/more-ldap-info/ We're geeks, damnit! Thu, 20 Nov 2008 14:49:17 +0000 http://wordpress.org/?v=2.3.1 By: Greg Neagle http://geekforce.com/2006/09/07/more-ldap-info/#comment-431 Greg Neagle Sat, 09 Sep 2006 00:45:41 +0000 http://geekforce.com/2006/09/07/more-ldap-info/#comment-431 Thanks for the compliments! You can do some interesting things with the combo of a central LDAP directory service and the local NetInfo database. For example, if you log on as an LDAP user and then open the Accounts prefs pane, you can check the box that gives that user admin privileges. This actually adds the LDAP user to the admin group in the local NetInfo database. Therefore, the LDAP user has admin rights on _that machine only_. You should look into Mobile Accounts - the problem with LDAP users and laptops is that when you are off the network, LDAP users can't log in, even if they have local home dirs. Thanks for the compliments!

You can do some interesting things with the combo of a central LDAP directory service and the local NetInfo database. For example, if you log on as an LDAP user and then open the Accounts prefs pane, you can check the box that gives that user admin privileges. This actually adds the LDAP user to the admin group in the local NetInfo database. Therefore, the LDAP user has admin rights on _that machine only_.

You should look into Mobile Accounts - the problem with LDAP users and laptops is that when you are off the network, LDAP users can’t log in, even if they have local home dirs.

]]>