Activation and release of DC Deletion causing DTR Conflicts
Hello Everyone,
I will be thankful if anyone can help.
We recently released a bunch of activities (for the first time in this track) and imported into CONS. Most of the activites were normal development work but a few activities were Deletion of DCs which got relased along with the rest. Import into CONS went through but with Integration Conflicts indications in the log. Assembly is failing because of the same (Integration Conflicts involving the deleted DC).
What would be the best way to resolve this? Conflits are in dev/active, cons/inactive and cons/active branches. Closed activity view is showing entries under dev/active branch as 'Closed Activity, intergated from another workspace'.
In the Integration Conflict view, the Resolve Conflict menu option has 'Merge', 'Accept Active' and 'Accept Colliding' options. Not sure which to select since conflicts are because of a deleted DC and does not exist anywhere in DTR.
Thanks very much.
I see...
No, I don't think so. It was all straightforward use of NWDI in the preliminary stage of track usage. The only thing that I can tell is that the deletion of the DC was done in two different activities. The deletion of the _comp folder (hierarchical deletion activity) was done first and the deletion of .dcdef from the SCs folder was done in another activity and activated at different times in respective order. They were released at the same time though.
Right now, the activity is not showing up in the transport view. It is showing up under the Closed Activity view only. The Intgration Conflict view is now showing conflicts in cons/active and cons/inactive branch only. Entries for dev/inactive are gone.
One more thing... the conflicts were resolved from the DTR perpective using another client (not the client that gets created with the import of the Development Configuration (sorry, don't know its techincal term). The context menu options for resoliving in this client were greyed out. I am not an expert user of NWDI so I am not quite clear on the difference between the two types of dtr clients.)
I had also tried using the dtrshell tool but got the error: "FAILED:Discard is not allowed becasue the workspace is not modifiable" - I suppose because I was trying to resolve it in the dev/active branch - which can't be done when using the dtr client
that gets created by importing the Development Configuration?? I don't know. I am not clear on how things work here..
Any ideas?
Thanks for you input.
Message was edited by:
rema
Similar Messages
-
Process steps on releasing activity and importing in consolidation of cms
Hi All,
I have a question on consolidation in nwdi,I have develpment configurations trackname_dev and trackname_con. I imported trackname_dev and checked out(asked for activity ,so created the activity) and modified an ess DC and then checked in to DTR and activated so it got activated without errors, so the code from inactive workspace is pushed and merged to active workspace its fine till now., when i released the activity its in cms consolidation queue when i hit import the activity in queue what is happening now.
How the changes i made in trackname dev in active workspace of DTR are pushed to tracknamecon
so does it takes from trackname _dev in active workspace of DTR and pushes to inactive workspace of trackname _con andthen build in trackname _con workspace and activated so if again the activation passes the code goes to active workspace of DTR of trackname _cons from where assembly takes place.Am i right?
In simple words what is the process taking place when i hit release the activity and then hitting the import in consolidation queue of CMS?
I am asking this because my activation has no errors and Modified DC is good in green in trackname_D buildspace but when i hit import in the consolidation tab in cms after import the same DC in trackname_C its red as broken dc as it has compilation errors.
Please give your valuable suggestions.
Thanks,
PKV.Hi,
I guess the problem is because of version/patch you maintained in DEV system is different when compared to Cons/Test system.
First step you need to do is just open the console of DEV & CONS check the SC versions and patch levels.
I think this might definetly resolve your issue.
Regards,
Anil. -
I have two apple id's because my hotmail account is no longer active. How can I delete the old one and use or update the new one? Every time I try it won't allow me and now my iPad thinks there are two accounts and they are arguing with each other. Help!
You can't merge accounts or copy content to a different account, so anything that you bought or downloaded via the old account is tied to that account - so any updates that those apps get you will only be able to download via that account. You can change which account is logged in on the iPad via Settings > Store
-
i keep getting the incoming messagrs bar appearing under mail activity and all my old emails start to fill my inbox.Why and how do i stop this and how do i permanently delete old e mails?
Maybe this will help:
https://discussions.apple.com/message/21026706#21026706 -
Selective deletion of request from ODS which is activated and updated
Hi all,
I would like to delete the request from ODS which is activated and updated into data targets, i.e if i have three resquests 1,2,3 which are activated and loaded into cube..now i would like to delete the between (2) request from ods, it says we have to delete latest first(3) , cant we delete this 2 nd request by doing some sort of settings plz let me know if any body got come to know this...plz
Many thanks in advance,
BRBHi
Did you look at the Online-Docu (link above)? In the administration of the ODS (I think menue 'Manage' in an english environment -> I've none at the moment) where you see each loaded package there you have a button right of the request id (status of data mart). If you press on this a dialog screen appears. There you can press on the trash icon. This resets the delta queue for the specific request.
You have to do this for request 3 and 2. Then you can delete the request nr. 2. The bw system will then delete this request from the active data and from the change log. After this you can schedule the delta load again. This process will load request nr. 3 to the connected InfoCubes.
If you do not reset the delta queue you will not be able to load request nr. 3 from the change log.
As I supose you want not to delete request nr. 3 because of some long duration to upload and activate the whole request again.
This works fine. I've done the last weeks often because we loaded request with 3 million records and more.
Regards,
H.J. -
Delete Costing run - marked and released
Hi
I did one costing run which was marked and anolther costing run which was marked and released also.
I want to delete both the above.
Which transaction I can use for this and what is the implication of them ?Hi NIkhitha,
CKR1 is the Tcode for Deletion of Cost Estimate as told by Ajay. However to add few implications and points to be reviwed before deletion.
1. Check whether it is really necessary to delete
2. Any Orders are being valuated by this Cost Estimate price
SB -
I updated my computer today to Yosemite 10.1. It told me that my Kaspersky virus scanner was damaged and that I should delete it. I did so. I'm wondering what virus scanner I should purchase?
First, you should be sure you have fully uninstalled the software. If you have no uninstaller nor directions for uninstalling, then see:
Uninstalling Software: The Basics
Most OS X applications are completely self-contained "packages" that can be uninstalled by simply dragging the application to the Trash. Applications may create preference files that are stored in the /Home/Library/Preferences/ folder. Although they do nothing once you delete the associated application, they do take up some disk space. If you want you can look for them in the above location and delete them, too.
Some applications may install an uninstaller program that can be used to remove the application. In some cases the uninstaller may be part of the application's installer, and is invoked by clicking on a Customize button that will appear during the install process.
Some applications may install components in the /Home/Library/Applications Support/ folder. You can also check there to see if the application has created a folder. You can also delete the folder that's in the Applications Support folder. Again, they don't do anything but take up disk space once the application is trashed.
Some applications may install a startupitem or a Log In item. Startupitems are usually installed in the /Library/StartupItems/ folder and less often in the /Home/Library/StartupItems/ folder. Log In Items are set in the Accounts preferences. Open System Preferences, click on the Accounts icon, then click on the LogIn Items tab. Locate the item in the list for the application you want to remove and click on the "-" button to delete it from the list.
Some software use startup daemons or agents that are a new feature of the OS. Look for them in /Library/LaunchAgents/ and /Library/LaunchDaemons/ or in /Home/Library/LaunchAgents/.
If an application installs any other files the best way to track them down is to do a Finder search using the application name or the developer name as the search term. Unfortunately Spotlight will not look in certain folders by default. You can modify Spotlight's behavior or use a third-party search utility, EasyFind, instead.
Some applications install a receipt in the /Library/Receipts/ folder. Usually with the same name as the program or the developer. The item generally has a ".pkg" extension. Be sure you also delete this item as some programs use it to determine if it's already installed.
There are many utilities that can uninstall applications. Here is a selection:
1. AppZapper
2. AppDelete
3. Automaton
4. Hazel
5. AppCleaner
6. CleanApp
7. iTrash
8. Amnesia
9. Uninstaller
10. Spring Cleaning
For more information visit The XLab FAQs and read the FAQ on removing software.
Helpful Links Regarding Malware Problems
If you are having an immediate problem with ads popping up see The Safe Mac » Adware Removal Guide, AdwareMedic, or Remove unwanted adware that displays pop-up ads and graphics on your Mac - Apple Support.
Open Safari, select Preferences from the Safari menu. Click on Extensions icon in the toolbar. Disable all Extensions. If this stops your problem, then re-enable them one by one until the problem returns. Now remove that extension as it is causing the problem.
The following comes from user stevejobsfan0123. I have made minor changes to adapt to this presentation.
Fix Some Browser Pop-ups That Take Over Safari.
Common pop-ups include a message saying the government has seized your computer and you must pay to have it released (often called "Moneypak"), or a phony message saying that your computer has been infected, and you need to call a tech support number (sometimes claiming to be Apple) to get it resolved. First, understand that these pop-ups are not caused by a virus and your computer has not been affected. This "hijack" is limited to your web browser. Also understand that these messages are scams, so do not pay any money, call the listed number, or provide any personal information. This article will outline the solution to dismiss the pop-up.
Quit Safari
Usually, these pop-ups will not go away by either clicking "OK" or "Cancel." Furthermore, several menus in the menu bar may become disabled and show in gray, including the option to quit Safari. You will likely have to force quit Safari. To do this, press Command + option + esc, select Safari, and press Force Quit.
Relaunch Safari
If you relaunch Safari, the page will reopen. To prevent this from happening, hold down the 'Shift' key while opening Safari. This will prevent windows from the last time Safari was running from reopening.
This will not work in all cases. The shift key must be held at the right time, and in some cases, even if done correctly, the window reappears. In these circumstances, after force quitting Safari, turn off Wi-Fi or disconnect Ethernet, depending on how you connect to the Internet. Then relaunch Safari normally. It will try to reload the malicious webpage, but without a connection, it won't be able to. Navigate away from that page by entering a different URL, i.e. www.apple.com, and trying to load it. Now you can reconnect to the Internet, and the page you entered will appear rather than the malicious one.An excellent link to read is Tom Reed's Mac Malware Guide.
Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.
See these Apple articles:
Mac OS X Snow Leopard and malware detection
OS X Lion- Protect your Mac from malware
OS X Mountain Lion- Protect your Mac from malware
OS X Mavericks- Protect your Mac from malware
About file quarantine in OS X
If you require anti-virus protection Thomas Reed recommends using ClamXAV. (Thank you to Thomas Reed for this recommendation.)
From user Joe Bailey comes this equally useful advice:
The facts are:
1. There is no anti-malware software that can detect 100% of the malware out there.
2. There is no anti-malware that can detect everything targeting the Mac.
3. The very best way to prevent the most attacks is for you as the user to be aware that
the most successful malware attacks rely on very sophisticated social engineering
techniques preying on human avarice, ****, and fear.
4. Internet popups saying the FBI, NSA, Microsoft, your ISP has detected malware on
your computer is intended to entice you to install their malware thinking it is a
protection against malware.
5. Some of the anti-malware products on the market are worse than the malware
from which they purport to protect you.
6. Be cautious where you go on the internet.
7. Only download anything from sites you know are safe.
8. Avoid links you receive in email, always be suspicious even if you get something
you think is from a friend, but you were not expecting.
9. If there is any question in your mind, then assume it is malware. -
Attack and Release in Compression
Okay, rather than a problem, another of my academic "how does it work" discussions.
On another forum, I've been debating the meaning of "attack" and "release" in compression. My contention is that the attack time is how long it takes to achieve the preset level of gain reduction once the signal crosses the threshod level...and release is the opposite: the time it takes to return to no gain reduction, again once the levels cross the threshold in downward direction.
Another poster, who usually knows what he is talking about, contents that the attack and release times are triggered, not by levels hitting the threshold, but rather simply by the compressor sensing an upward or downward level change.
As proof he posted a test from Soundforge: A tone that transitioned between -12 and -3dB at 300ms intervals. He then applied compression with the threshold set to -16 (so everything should be compressed) and, indeed, the waveform shows the effect of attack and release at each transition even though the whole test should be compressed.
I tried the same in Audition and, although the artefacts aren't as noticeable as in Sound forge, you can see the pumping on the waveform.
I can't see that the attack and release can be clever enough to react to every change in level (especially on a real signal, not his test) so have to assume the cause is a bit more basic.
Here's a picture of the original file I made:
And here's the same file compressed with an attack of 2ms and a release of 5ms and a threshold of -15dB, i.e. lower than anything in the clip.
As you can see, you can see where the attack and release happens (I won't post a pic but, with attack and release set to zero, you can't see any transitions) so if anyone can explain this you'll cure my curiosity!But I'd still like to know how software compression works anyway.
I do not claim credit for writing this description. It comes from another recording site I frequent but puts things in pretty plain words that we made a "sticky."
[quoted post]
Shotgun's Compressor Tools 1 of 2
What you have to do is understand what compressors do, and what each of the controls do IN GENERAL. Then you apply that knowlege to what you want out of using the compressor and what your ears hear AT THE TIME OF USE so that you can adjust as necessary. So, read below for an overview of the box as a whole and each knob you're likely to find on it.
Compression
From the name, one can surmise that a compressor is going to squish, squash, mash or pulverize something. Given that we plug audio signals into it, we can further surmise that what is getting squished, squashed, mashed or pulverized is, indeed, our audio signal. And one would be completely correct in assuming that. But what does that really mean?
Well, consider an audio signal. Let's say it's a recording of my mom yelling at me about leaving my laundry piled haphazardly in the hallway. First, mom starts out trying to reason with me, gently, "Shotgun, you know, it's just not condusive to laundry efficiency leaving that stuff piled haphazardly like that..." her voice is calm, even and even somewhat soft. As I stare at her blankly, not understanding the finer points of sorting one's laundry and transporting it to the appropriate room in the house her voice becomes stronger and louder. "SHOTGUN! I'M GOING TO BEAT THE LIVING **** OUT OF YOU WITH A TIRE IRON IF YOU DON'T PICK THIS **** UP IMMEDIATELY AND PUT IT WHERE IT BELONGS SO HELP ME GOD!" Now she's yelling, screaming, in fact. Her face is red and frankly, I've just soiled myself which makes the entire laundry issue even more complicated.
Now, let's assume we're going to lay this recording of mom over some Nine Inch Nails-style door slamming, pipe clanging, fuzz guitar backing tracks. It's going to be an artistic tour-de-force. However, when mom starts out, her voice was hitting only about 65-70dB--normal conversational speech. By the time she's done it's more like 105dB worth of banshee howling. Unfortunately, our backing tracks are a pretty even volume the whole way through. So, at the beginning of the track mom will be virtually inaduible whereas at the end she'll be drowning out my samples of whacking a stapler on a desk. How do we deal with that?
WE USE A COMPRESSOR!
You see, what a compressor compresses is volume. That is, technically, it compresses the amplitude of the signal, or its "gain". So for every decibel that goes into the compressor, only a fraction of it will come out. That means that (depending on our settings, see below) if mom's voice uncompressed winds up at 105dB then we can set our compressor so that it only gets as high as 52dB if we want. How does that help you ask? Won't it still be too low to hear over the backing music? Yes it will, but read on and we'll cover that in the controls discussion.
Threshold
The threshold control on a compressor sets a level below which the compressor will do no work. The control is graduated in dB (in this case dBV of signal level) and allows you to set an "on/off" point so that you can compress the LOUD parts of a signal, and leave the soft parts alone. At times you may want to set this control low enough so that you're affecting the entire signal, at times you may not. In the case of mom's rant-on-tape, what we may want to do is set the compressor so that it doesn't touch the signal until her voice reaches something like 85dB or so***, say, about halfway up the scale from softest to loudest. So, we set the threshold so that we only see activity on our "gain reduction" meter when the track gets to a certain point.
To USE the threshold control effectively, you generally need to use your ears. Have some idea, before you start, of what you hope to accomplish by using the compressor and set the threshold to Capture the part of a signal you wish to do whatever that is to. In our example I want to lower the louder parts of my mom's tirade so I set the threshold to activate the compression at some arbitrary point in the track. I could have done it several other ways and the only way to learn which is best is to experiment and listen.
Ratio
This is the control that tells us how much signal comes out of the box relative to what's coming in. It is graduated in terms of a ratio (hence the name) of output to input. So, let's say we set the control to point at "2:1". That means that for every 2dB of incoming signal, we're only going to get 1dB of outgoing signal. Which means that at its very loudest, mom's voice isn't going to be nearly as loud as it was originally. Keep in mind that this ratio only applies to signals that meet or exceed the threshold setting. Any signal that is below the threshold just passes through as though the compressor weren't there (kinda).
To use the ratio control effectively you, again, need some idea of what you want out of your compressor overall. In our case I just need mom's voice to be more easily mixed in with the backing tracks so I just want it to be kind of even. However, I still want it to start softer and get louder, just maybe not AS soft at the beginning and not AS loud at the end. That is, still changing, just not as much.
Attack
The attack control tells us that, once a signal meets or exceeds the threshold, how quickly does the compressor put the smack down on said signal? The control is usually graduated in intervals of time, usually marked in milliseconds. So, let's say that I set my attack control to say 5ms. That means that when the signal passing through reaches the threshold I've set, the compressor waits an additional 5ms before it begins to reduce the amplitude (again, gain). This seems counter-intuitive doesn't it? I mean, we want the level controlled WHEN it reachest threshold, right? Not 5ms later. Well, there are reasons for slightly delaying the attack (and for that matter release) times.
To use the attack time effectively (and by now you should have seen this coming) you need to know what you want out of your compressor in general. Do you want the signal clamped down on fairly quickly? Or not? How do you know? This brings in one of the most important concepts of recording: attack and decay. Each sound has an attack and a release. Imagine hitting a drum (the easiest place to see this concept). You hear the sharp, immediately loud sound as the stick hits the head, but you also hear the sound gently fade away, also. That initial WHACK, that initial spike in amplitude is the sound's attack. Everything else is it's decay. Note that I use these terms in a "Shotgun" type of way and there are more correct ways to say this, I think, but I tend to, over time, develop my own language, so you're at a disadvantage.
So then, we can hear an attack in mom's voice, too. It's more subtle than the attack of a drum hit with a stick, or a guitar player's pick against a string, but it's there. And if we set our compressor's attack time too short, we will lose all the definition of the attack of the sound. Sometimes that's desirable, but in our case it is not. A very large percentage of how people perceive sounds comes from the attack. You must strive to preserve that unless it is your desire to purposely not. Therefore, be very careful with the attacks under your care. In the case of a vocal track, the attack of the voice will lend very much to the intelligibility of the track, so we do NOT want to destroy it. So, we may want a slightly longer attack time than 5ms here. But we can only tell BY LISTENING. LISTEN to the track, sweep the attack control back and forth and listen to what happens to the attack of the sounds. If it sucks, move the control. Don't look at where it's pointing until you're satisfied with how it sounds. Then only look for the sake of curiosity because that setting may never work the same way again. if you're using a plug-in make sure you allow ample time for the movement to take effect. Moving a plug-in's controls can sometimes not take effect for a full second or two after you move it so if you're sweeping it back and forth rapidly you'll fool yourself. In the case of plugins, make a move and pause until it changes. If it doesn't change within 2-3 seconds, maybe you didn't move it far enough.
Release
As you might guess the release control handles the other end of the signal from the attack. That is, when a signal drops back below the threshold, how long does the compressor wait to actually stop compressing. All the same counter-intuitiveness applies here as well. However, remember that the decay or "tail" of a signal isn't as important to the listener as the attack so you can get away with a little more here. Again this control is going to be graduated in units of time, usually ms. However, the numbers will be larger than the attack times. Sometimes up into the 100's of ms or even full seconds.
To set a proper release time, again, understand what you want out of your compressor. Do you want a major thrashing to your sound, or do you just want kind of a gentle corrective measure? What you have to look out for in the case of release times is pumping. If your release time is set too short then the sound will drop below the threshold, the compressor will release it, but the sound will then jump UP in level because the compression is no longer making it softer, but it's below threshold. That probably sounds confusing, but it happens. And it will sound pretty odd. The first time you hear it you'll understand why it's called "pumping". It sounds almost like there's a new "attack" near the end of the signal's decay. As I've said before, sometimes this is actually desirable. Usually it's not though. Your goal is to set a release time long enough to give the sound time to naturally decay to a point that when the compressor lets go it won't "pump" yet short enough so that the compressor isn't still active when the next "attack" comes along. If you set your release time too long it will start ****ing around with the attacks because it's taking so long to let go the next loud signal is there before the last one is finished compressing. So, if you get your attack set where you think it's right, but then you start losing your attack again, consider dropping that release time lower (faster).
Make up gain
Here's where we answer your initial question of "Won't it still be too low to hear over the backing music?" Remember that we noted that mom's voice started out so low that it was lost in the music. And all we've done so far is to use our compressor to take the bite out of the louder part of the track so that it's not overpowering. So, doesn't this leave the softer part still lost? And, possibly, doesn't it make the WHOLE TRACK too soft now? Yes, it absolutely does. But that's what we have makeup gain for.
The makeup gain is going to look very similar to any other gain control you have seen. It will be marked off in dB, possibly starting at 0dB and moving up to some obscene amount like 20 or 40 or 60 or 100,000 or something. (It won't really be 100,000). The makeup gain does just what it says it does, too. It allows you to "make up" the gain that you're losing by compressing in the first place. Now, that doesn't mean it UNDOES what you just did, not by any means. It means that you can now take your newly compressed signal and make the WHOLE THING louder. This is how we're going to get the parts that are too soft up where they belong.
To set this control we're going to, of course, listen. What we've done thus far is to compress down the loudest parts of the signal so that they're not so loud. You can say that the loud parts are now "closer" to the soft parts so to speak. So what you do with your makeup gain is to take the whole lot and move it back UP some smaller amount so that now the loudest parts are just still loud, but not AS loud and the softer parts are still soft, but loud enough to be heard. Think of yourself playing basketball. If you're short like me, there's no way you can slam dunk a basketball. However, let's say you can lower your basketball goal by one foot. Now it's lower, but you still can't slam dunk it, but lowering it any more would ruin the rest of the game because you'd just be dropping the thing in and not shooting. So what you do is you make yourself magically grow a foot as well. Now the goal is still a reasonable height, but you can slam dunk because you've grown a bit yourself. Same sorta thing. Your signal isn't so low it sucks now, but it isn't so high you can't get anything useful out of it as well.
Here's a shocker: in terms of makeup gain there IS a general rule you can keep in mind. As you're setting your compressor's other settings you will notice the meter marked "gain reduction" giving you some idea of what you're doing to the signal. It could be a schitzophrenic little peak meter or it could be a big, slow, thoughtful VU meter. Either way it'll tell you "hey, you're getting about 5dB of gain reduction here pal!" So, this tells you you can START your makeup gain at a setting of +5dB. That should give you a compressed signal at the same general level as the uncompressed signal. Kinda. Sorta. It's a really ROUGH starting point, but it's a starting point nonetheless. Again, though, twist it and listen to get it where it really needs to be. You may want more, you may want less.
The ******** you'll hear
Now, as you get replies to this thread there will be plenty of numbskulls along to give the following answers:
(1) Shotgun you're such a ****ing *******. The guy just wanted some basic info, some basic starting points for his compressor why do you have to be such a *****?
(2) Shotgun, you don't understand compression and you've never done any recording, HAVE you?
(3) Here are my basic settings and they'll probably work
None of that is even remotely true. Sure, there are plenty of basic starting points anybody here could give you. In fact, many of these folks have only been using compressors for about 6 months, but even THEY will have ONE setting group that they like for some reason and are DYING to tell you it in order to appear knowlegeable. Do not listen to any of this ****. Develop your own views on good starter compression settings by appying what you learn and what you hear and what you observe in your own experience. There are so many different kinds of compressors that anybody who gives you a rough setting diatribe is just pissing in the wind. In fact, many types of compressors don't even HAVE some of the controls I mentioned. Some have more. Also, there are plenty of points we haven't covered. For example limiting, which is a special kind of compression that uses a very high ratio (often infinity:1).
[/quote]
This isn't the complete post but it is the pertinent section.
Jack -
Directory Binding Script (Active and Open Directory) 10.7
Hi everyone
I'm reposting this in the right thread. I've written a Directory Binding Script for 10.6 and ported it now to 10.7 as among the things that have changed in the upgraded version is a refurbished directory binding enviroment.
The original thread can be found here: https://discussions.apple.com/thread/3090068. The script is applicable for clients as well and simplifies the binding process considerably.
Be aware that the reformatted script here contains some faulty line breaks. So you'll have to correct them in a proper text editor.
#!/bin/sh
#Uncomment the following line to abort the script on errors
#trap exit ERR
## Script to automate OD and AD Binding of Mac OS X 10.7 Servers
## Script written by Marc Horat, URZ Basel, 11.6.2010
## Updated: 12.08.2011
# With the use of the following sources as inspiration:
# http://www.howtomac.co.uk/?p=247
#Created by Ross Hamilton
#Clock restart / Remove existing settings
#Join to Open Directory and Active Directory
# Bombich's AD-Bind Script:
# This script binds to AD and configures advanced options of the AD plugin
# As this scripts contains a password, be sure to take appropriate security
# precautions
# A good way to run this script is to set it as a login hook on your master machine
# Because it only needs to be run once, the last thing this script does is to delete
# itself. If you have another login script that you typically run, include the
# script on your master machine, and indicate its path in the "newLoginScript"
# variable.
# If running this as a one-time login hook to bind to AD after imaging,
# be sure to enable auto-login (for any local user) before creating your master image
#################CONFIGURATION##########################
#OD
# These variables need to be configured for your env
odAdmin="YOURODADMIN" #enter your OD admin name between the quotes
odPassword="YOURODPW" # Enter your OD admin password between the quotes
oddomain="YOURODDOMAIN" # FQDN of your OD domain
computerGroup="YOURNEWODCOMPGROUP" # Add appropriate computer group you want machines to be added to, case sensitive
oldComputerGroup="YOUROLDODCOMPGROUP" # If the Computer is in a Group already
#AD
# Standard parameters
domain="YOURADDOMAIN" # fully qualified DNS name of Active Directory Domain
domainname="YOURADDOMAINNAME" #Name of the Domain as specified in the search paths
udn="YOURADADMIN" # username of a privileged network user
password="YOURADPW" # password of a privileged network user
ou="OU=YOUR,OU=OU,OU=URZ,OU=IN,DC=YOUR,DC=AD,DC=DOMAIN" # Distinguished name of container for the computer E.G. OU=Macs,OU=Computers,DC=AD,DC=DOMAIN,DC=CH
# Advanced options AD Plugin
alldomains="disable" # 'enable' or 'disable' automatic multi-domain authentication
localhome="disable" # 'enable' or 'disable' force home directory to local drive
protocol="smb" # 'afp', 'smb' or 'nfs' (since 10.7) change how home is mounted from server
mobile="enable" # 'enable' or 'disable' mobile account support for offline logon
mobileconfirm="enable" # 'enable' or 'disable' warn the user that a mobile acct will be created
useuncpath="enable" # 'enable' or 'disable' use AD SMBHome attribute to determine the home dir
user_shell="/bin/bash" # e.g., /bin/bash or "none"
preferred="-preferred $domain" # Use the specified server for all Directory lookups and authentication
# (e.g. "-nopreferred" or "-preferred ad.server.edu")
admingroups="$domainname\YOURADADMINGROUP" # These comma-separated AD groups may administer the machine (e.g. "" or "APPLE\macadmins")
packetsign="allow" # allow | disable | require
packetencrypt="allow" # allow | disable | require
passinterval="14" # number of days
namespace="domain" # forest | domain
# Login hook setting -- specify the path to a login hook that you want to run instead of this script
newLoginHook="" # e.g., "/Library/Management/login.sh"
################################# End of configuration
############ Begin of Script
# Host-specific parameters
# computerid should be set dynamically, this value must be machine-specific
# This value may be restricted to 19 characters! The only error you'll receive upon entering
# an invalid computer id is to the effect of not having appropriate privileges to perform the requested operation
#computerid=`/sbin/ifconfig en0 | awk '/ether/ { gsub(":", ""); print $2 }'` # MAC Address
#computerid=`hostname | sed 's/.unibas.ch//'`
#computerid=`/usr/sbin/scutil --get LocalHostName | cut -c 1-19` # Assure that this will produce unique names!
#computerid=`/usr/sbin/scutil --get LocalHostName`
computerid=`scutil --get ComputerName`
adcomputerid=`echo "$computerid" | tr [:lower:] [:upper:]`
# These variables probably don't need to be changed
# Determing if any directory binding exists
nicAddress=`ifconfig en0 | grep ether | awk '{print $2}'`
if dscl localhost -list /LDAPv3 | grep . > /dev/null
then
check4ODtmp=`dscl localhost -list /LDAPv3 | grep -n 1 | sed 's/1://' | sed 's/2://'`
check4OD=${check4ODtmp//[[:space:]]/}
echo "Found LDAP: "$check4ODtmp
check4ODaccttmp=`dscl /LDAPv3/"$check4OD" -read Computers/"$computerid" RealName | cut -c 11-`
check4ODacct=${check4ODaccttmp//[[:space:]]/}
echo "Found LDAP-Computer-Account: "$check4ODacct
else
check4OD=""
check4ODacct=""
echo "No bound LDAP Server found"
fi
if [ $oldComputerGroup != "" ] && dscl localhost -list /LDAPv3 | grep . > /dev/null
then
check4ODgroupMembershiptmp=`dscl /LDAPv3/"$check4OD" -read ComputerGroups/"$oldComputerGroup" | grep "$computerid"`
check4ODgroupMembership=$check4ODgroupMembershiptmp
echo "LDAP Group Membership in Group: "$oldComputerGroup
else
check4ODgroupMembership=""
echo "No LDAP Group Membership defined or not bound to a server"
fi
if dscl localhost -list "/Active Directory" | grep $domainname > /dev/null
then
check4ADtmp=`dsconfigad -show | grep "Active Directory Domain" | sed 's/Active Directory Domain//' | sed 's/=//'`
check4AD=${check4ADtmp//[[:space:]]/}
echo "Found AD: "$check4AD
check4ADaccttmp=`dsconfigad -show | grep "Computer Account" | sed 's/Computer Account//' | sed 's/=//'`
check4ADacct=${check4ADaccttmp//[[:space:]]/}
echo "Found AD-Account: "$check4ADacct
else
check4AD=""
check4ADacct=""
echo "No AD-Account found"
fi
osversionlong=`sw_vers -productVersion`
osvers=${osversionlong:3:1}
#Time Sync
#Restart ntpdate
StartService ()
if [ "${TIMESYNC:=-YES-}" = "-YES-" ] && ! GetPID ntpd > /dev/null; then
CheckForNetwork
if [ -f /var/run/NetworkTime.StartupItem -o "${NETWORKUP}" = "-NO-" ]; then exit; fi
touch /var/run/NetworkTime.StartupItem
echo "Starting network time synchronization"
# Synchronize our clock to the network’s time,
# then fire off ntpd to keep the clock in sync.
ntpdate -bvs
ntpd -f /var/run/ntp.drift -p /var/run/ntpd.pid
fi
echo ""
echo ""
sleep 5
#### Removing any existing directory bindings
#Clear OD Computer Account and delete entry from Computer group
if dscl localhost -list /LDAPv3 | grep . > /dev/null
then
echo "This computer is bound to the following Open Directory Services:"
dscl localhost -list /LDAPv3
echo "With the Search Path entries:"
dscl /Search -read / CSPSearchPath | grep /LDAP
sleep 5
if [ "${check4ODacct}" == "${computerid}" ]
then
echo "This machine already has a computer account on $oddomain."
# Set the GUID
GUID="$(dscl /LDAPv3/$oddomain -read /Computers/${computerid} GeneratedUID | awk '{ print $2 }')"
echo "Found GUID: "$GUID
if [ "$oldComputerGroup" != "" ] && [ "$check4ODgroupMembership" != "" ]
then
echo "Removing entry from group $oldComputerGroup"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$check4OD" -delete /ComputerGroups/"$oldComputerGroup" GroupMembership "${computerid}"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$check4OD" -delete /ComputerGroups/"$oldComputerGroup" GroupMembers "${GUID}"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$check4OD" -delete /ComputerLists/"$oldComputerGroup" Computers "${computerid}"
fi
echo "Removing Computer entry $computerid in OD"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$check4OD" -delete /Computers/"${computerid}"
fi
#List existing Directories
echo "Removing OD-Binding to "$check4OD
dsconfigldap -r "$check4OD"
echo "Removing Search Path entries"
dscl /Search -delete / CSPSearchPath /LDAPv3/"$check4OD"
dscl /Search/Contacts -delete / CSPSearchPath /LDAPv3/"$check4OD"
dscl /Search -delete / CSPSearchPath /LDAPv3/"$check4OD"
sleep 5
else
echo "No LDAP or OD Binding present.";
fi
echo ""
# Check a second time in order to delete any remaining LDAP-Bindings
echo "Scanning for further LDAP servers"
if dscl localhost -list /LDAPv3 | grep . > /dev/null
then
echo "Found:"
dscl localhost -list /LDAPv3
echo "Removing OD-Binding to "$check4ODtmp
dsconfigldap -r "$check4ODtmp"
dscl /Search -delete / CSPSearchPath /LDAPv3/"$check4ODtmp"
dscl /Search/Contacts -delete / CSPSearchPath /LDAPv3/"$check4ODtmp"
dscl /Search -delete / CSPSearchPath /LDAPv3/"$check4ODtmp"
sleep 5
else
echo "No further LDAP or OD Binding present."
fi
echo ""
echo ""
#Remove the Active Directory binding
if [ "$check4AD" != "" ]
then
echo "This computer is bound to the following Active Directory Services:"
dscl localhost -list "/Active Directory"
echo "With the Search Path entries:"
dscl /Search -read / CSPSearchPath | grep /Active
sleep 5
echo "Removing any existing AD-Binding to "$check4AD
dsconfigad -f -remove -username "$udn" -password "$password"
echo "Removing Search Path entries"
if [ "$preferred" != "-nopreferred" ]
then
dscl /Search -delete / CSPSearchPath /Active Directory/"$domainname"
dscl /Search/Contacts -delete / CSPSearchPath /Active Directory/"$domainname"
dscl /Search -delete / CSPSearchPath /Active Directory/"$domainname"
fi
dscl /Search -delete / CSPSearchPath "/Active Directory/$domainname/All Domains"
dscl /Search/Contacts -delete / CSPSearchPath "/Active Directory/$domainname/All Domains"
#remove search path entries from 10.6
if dscl /Search -read / CSPSearchPath | grep /Active > /dev/null
then
dscl /Search -delete / CSPSearchPath "/Active Directory/$domainname/$domain"
dscl /Search/Contacts -delete / CSPSearchPath "/Active Directory/$domainname/$domain"
fi
sleep 5
else
echo "No Active Directory Binding present."
fi
echo ""
#Remove Existing Directory Services Config
echo "Removing existing DS Config"
if [ -d "/Library/Preferences/edu.mit.Kerberos" ]
then
rm -R /Library/Preferences/edu.mit.Kerberos
fi
if [ -d "/etc/krb5.keytab" ]
then
rm -R /etc/krb5.keytab
fi
# Clean up the DirectoryService configuration files
rm -Rfv /Library/Preferences/DirectoryService/*
#OD
echo ""
echo ""
echo "Binding to OD-Damin "$oddomain
sleep 5
dsconfigldap -v -a "$oddomain" -n "$oddomain" -c "$computerid"
echo "Killing opendirectoryd"
killall opendirectoryd
sleep 5
echo "Adding computer account $computerid to /LDAPv3/${oddomain} on $oddomain"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$oddomain" -create /Computers/"$computerid" ENetAddress "$nicAddress"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$oddomain" -merge /Computers/"$computerid" RealName "$computerid"
# Set the GUID
GUID="$(dscl /LDAPv3/$oddomain -read /Computers/${computerid} GeneratedUID | awk '{ print $2 }')"
# Add computer to ComputerList and ComputerGroup
if [ $computerGroup != "" ]
then
echo "Adding computer $computerid to OD group $computerGroup on $oddomain"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$oddomain" -merge /ComputerLists/"$computerGroup" apple-computers "$computerid"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$oddomain" -merge /ComputerGroups/"$computerGroup" apple-group-memberguid "${GUID}"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$oddomain" -merge /ComputerGroups/"$computerGroup" memberUid "$computerid"
fi
echo "Finished OD Binding."
sleep 5 # Give DS a chance to catch up
echo ""
echo ""
echo "Performing the AD Binding"
#AD
# Activate the AD plugin
defaults write /Library/Preferences/DirectoryService/DirectoryService "Active Directory" "Active"
plutil -convert xml1 /Library/Preferences/DirectoryService/DirectoryService.plist
#Use the existing AD-Computername or generate a new one
computeridtmp="default"
if [ "$check4ADacct" == "" ]
then
LEN=$(echo ${#adcomputerid})
if [ $LEN -lt 15 ]; then
echo "ComputerID "$adcomputerid " has 15 characters or less and is therefore suitable for AD-Binding. It is $adcomputerid"
computeridtmp=$adcomputerid
else
echo "ComputerID "$adcomputerid " has 16 or more characters and needs to be modified for AD-Binding."
echo "Removing any -"
computeridtmp=${adcomputerid//-/}
LEN=$(echo ${#computeridtmp})
if [ $LEN -lt 15 ]; then
echo "ComputerID "$computeridtmp" has now 15 characters or less and is therefore suitable for AD-Binding."
else
echo "Only using the last 15 characters of the Computer name to be able to bind to AD."
computeridtmp=${computeridtmp:(-15)}
fi
echo "Cropped Computername to "$computeridtmp
fi
else
computeridtmp=${check4ADacct//$/}
echo "Found existing AD Account previously, attempting to recreate in the OU: "$computeridtmp
fi
echo ""
# Bind to AD
echo "Binding to AD-Domain "$domain" with computerid "$computeridtmp
dsconfigad -f -add "$domain" -username "$udn" -password "$password" -ou "$ou" -computer "$computeridtmp"
echo ""
echo "Setting the Advanced AD Plugin options"
# Configure advanced AD plugin options
if [ "$admingroups" = "" ]
then
dsconfigad -nogroups
else
dsconfigad -groups "$admingroups"
fi
dsconfigad -alldomains "$alldomains"
dsconfigad -localhome "$localhome"
dsconfigad -protocol "$protocol"
dsconfigad -mobile "$mobile"
dsconfigad -mobileconfirm "$mobileconfirm"
dsconfigad -useuncpath "$useuncpath"
dsconfigad -shell "$user_shell"
dsconfigad "$preferred"
dsconfigad -packetsign "$packetsign" -packetencrypt "$packetencrypt" -passinterval "$passinterval"
dsconfigad -namespace "$namespace"
sleep 5
echo ""
echo ""
# Add the OD & AD node to the search path
if [ "$alldomains" = "enable" ]
then
csp="/Active Directory/$domainname/All Domains"
else
csp="/Active Directory/$domainname"
fi
echo "Finished AD Binding."
echo "Adding Domain /LDAPv3/"$oddomain" and "$csp" to Search Path"
dscl /Search -create / SearchPolicy CSPSearchPath
dscl /Search/Contacts -create / SearchPolicy CSPSearchPath
echo "Adding OD.."
dscl /Search -append / CSPSearchPath /LDAPv3/"$oddomain"
dscl /Search/Contacts -append / CSPSearchPath /LDAPv3/"$oddomain"
echo "Adding AD.."
#Adding all Domains first to improve reliability under 10.7
if [ "$alldomains" != "enable" ]
then
cspadall="/Active Directory/$domainname/All Domains"
dscl /Search/Contacts -append / CSPSearchPath "$cspadall"
dscl /Search -append / CSPSearchPath "$cspadall"
fi
dscl /Search/Contacts -append / CSPSearchPath "$csp"
dscl /Search -append / CSPSearchPath "$csp"
echo "Finished Updating Search Paths."
echo ""
echo ""
# Restart DirectoryService (necessary to reload AD plugin activation settings)
killall opendirectoryd
# Destroy the login hook (or change it)
if [ "${newLoginHook}" == "" ]
then
defaults delete /var/root/Library/Preferences/com.apple.loginwindow LoginHook
else
defaults write /var/root/Library/Preferences/com.apple.loginwindow LoginHook $newLoginHook
fi
sleep 5
# Customizing the login-Window
#defaults write /Library/Preferences/com.apple.loginwindow AdminHostInfo DSStatus
#defaults write /Library/Preferences/com.apple.loginwindow showInputMenu -bool TRUE
#defaults write /Library/Preferences/com.apple.loginwindow SHOWFULLNAME -bool TRUE
# This works in a pinch if the above code does not
#defaults write /Library/Preferences/DirectoryService/SearchNodeConfig "Search Node Custom Path Array" -array "/Active Directory/All Domains"
#defaults write /Library/Preferences/DirectoryService/SearchNodeConfig "Search Policy" -int 3
#plutil -convert xml1 /Library/Preferences/DirectoryService/SearchNodeConfig.plist
#killall opendirectoryd
# Disable autologin
defaults delete /Library/Preferences/com.apple.loginwindow autoLoginUser
srm /etc/kcpassword
echo ""
echo ""
echo ""
echo "Now bound to OD Domain:"
dscl localhost -list /LDAPv3
echo "With Search Path entries:"
dscl /Search -read / CSPSearchPath | grep /LDAP
echo "Now bound to AD Domain:"
dscl localhost -list "/Active Directory"
echo "With Search Path entries:"
dscl /Search -read / CSPSearchPath | grep /Active
exit 0 ## Success
exit 1 ## Failure
Any inputs, questions and improvement suggestions are, of course, most welcome!
Cheers
SeeHi everyone
I'm reposting this in the right thread. I've written a Directory Binding Script for 10.6 and ported it now to 10.7 as among the things that have changed in the upgraded version is a refurbished directory binding enviroment.
The original thread can be found here: https://discussions.apple.com/thread/3090068. The script is applicable for clients as well and simplifies the binding process considerably.
Be aware that the reformatted script here contains some faulty line breaks. So you'll have to correct them in a proper text editor.
#!/bin/sh
#Uncomment the following line to abort the script on errors
#trap exit ERR
## Script to automate OD and AD Binding of Mac OS X 10.7 Servers
## Script written by Marc Horat, URZ Basel, 11.6.2010
## Updated: 12.08.2011
# With the use of the following sources as inspiration:
# http://www.howtomac.co.uk/?p=247
#Created by Ross Hamilton
#Clock restart / Remove existing settings
#Join to Open Directory and Active Directory
# Bombich's AD-Bind Script:
# This script binds to AD and configures advanced options of the AD plugin
# As this scripts contains a password, be sure to take appropriate security
# precautions
# A good way to run this script is to set it as a login hook on your master machine
# Because it only needs to be run once, the last thing this script does is to delete
# itself. If you have another login script that you typically run, include the
# script on your master machine, and indicate its path in the "newLoginScript"
# variable.
# If running this as a one-time login hook to bind to AD after imaging,
# be sure to enable auto-login (for any local user) before creating your master image
#################CONFIGURATION##########################
#OD
# These variables need to be configured for your env
odAdmin="YOURODADMIN" #enter your OD admin name between the quotes
odPassword="YOURODPW" # Enter your OD admin password between the quotes
oddomain="YOURODDOMAIN" # FQDN of your OD domain
computerGroup="YOURNEWODCOMPGROUP" # Add appropriate computer group you want machines to be added to, case sensitive
oldComputerGroup="YOUROLDODCOMPGROUP" # If the Computer is in a Group already
#AD
# Standard parameters
domain="YOURADDOMAIN" # fully qualified DNS name of Active Directory Domain
domainname="YOURADDOMAINNAME" #Name of the Domain as specified in the search paths
udn="YOURADADMIN" # username of a privileged network user
password="YOURADPW" # password of a privileged network user
ou="OU=YOUR,OU=OU,OU=URZ,OU=IN,DC=YOUR,DC=AD,DC=DOMAIN" # Distinguished name of container for the computer E.G. OU=Macs,OU=Computers,DC=AD,DC=DOMAIN,DC=CH
# Advanced options AD Plugin
alldomains="disable" # 'enable' or 'disable' automatic multi-domain authentication
localhome="disable" # 'enable' or 'disable' force home directory to local drive
protocol="smb" # 'afp', 'smb' or 'nfs' (since 10.7) change how home is mounted from server
mobile="enable" # 'enable' or 'disable' mobile account support for offline logon
mobileconfirm="enable" # 'enable' or 'disable' warn the user that a mobile acct will be created
useuncpath="enable" # 'enable' or 'disable' use AD SMBHome attribute to determine the home dir
user_shell="/bin/bash" # e.g., /bin/bash or "none"
preferred="-preferred $domain" # Use the specified server for all Directory lookups and authentication
# (e.g. "-nopreferred" or "-preferred ad.server.edu")
admingroups="$domainname\YOURADADMINGROUP" # These comma-separated AD groups may administer the machine (e.g. "" or "APPLE\macadmins")
packetsign="allow" # allow | disable | require
packetencrypt="allow" # allow | disable | require
passinterval="14" # number of days
namespace="domain" # forest | domain
# Login hook setting -- specify the path to a login hook that you want to run instead of this script
newLoginHook="" # e.g., "/Library/Management/login.sh"
################################# End of configuration
############ Begin of Script
# Host-specific parameters
# computerid should be set dynamically, this value must be machine-specific
# This value may be restricted to 19 characters! The only error you'll receive upon entering
# an invalid computer id is to the effect of not having appropriate privileges to perform the requested operation
#computerid=`/sbin/ifconfig en0 | awk '/ether/ { gsub(":", ""); print $2 }'` # MAC Address
#computerid=`hostname | sed 's/.unibas.ch//'`
#computerid=`/usr/sbin/scutil --get LocalHostName | cut -c 1-19` # Assure that this will produce unique names!
#computerid=`/usr/sbin/scutil --get LocalHostName`
computerid=`scutil --get ComputerName`
adcomputerid=`echo "$computerid" | tr [:lower:] [:upper:]`
# These variables probably don't need to be changed
# Determing if any directory binding exists
nicAddress=`ifconfig en0 | grep ether | awk '{print $2}'`
if dscl localhost -list /LDAPv3 | grep . > /dev/null
then
check4ODtmp=`dscl localhost -list /LDAPv3 | grep -n 1 | sed 's/1://' | sed 's/2://'`
check4OD=${check4ODtmp//[[:space:]]/}
echo "Found LDAP: "$check4ODtmp
check4ODaccttmp=`dscl /LDAPv3/"$check4OD" -read Computers/"$computerid" RealName | cut -c 11-`
check4ODacct=${check4ODaccttmp//[[:space:]]/}
echo "Found LDAP-Computer-Account: "$check4ODacct
else
check4OD=""
check4ODacct=""
echo "No bound LDAP Server found"
fi
if [ $oldComputerGroup != "" ] && dscl localhost -list /LDAPv3 | grep . > /dev/null
then
check4ODgroupMembershiptmp=`dscl /LDAPv3/"$check4OD" -read ComputerGroups/"$oldComputerGroup" | grep "$computerid"`
check4ODgroupMembership=$check4ODgroupMembershiptmp
echo "LDAP Group Membership in Group: "$oldComputerGroup
else
check4ODgroupMembership=""
echo "No LDAP Group Membership defined or not bound to a server"
fi
if dscl localhost -list "/Active Directory" | grep $domainname > /dev/null
then
check4ADtmp=`dsconfigad -show | grep "Active Directory Domain" | sed 's/Active Directory Domain//' | sed 's/=//'`
check4AD=${check4ADtmp//[[:space:]]/}
echo "Found AD: "$check4AD
check4ADaccttmp=`dsconfigad -show | grep "Computer Account" | sed 's/Computer Account//' | sed 's/=//'`
check4ADacct=${check4ADaccttmp//[[:space:]]/}
echo "Found AD-Account: "$check4ADacct
else
check4AD=""
check4ADacct=""
echo "No AD-Account found"
fi
osversionlong=`sw_vers -productVersion`
osvers=${osversionlong:3:1}
#Time Sync
#Restart ntpdate
StartService ()
if [ "${TIMESYNC:=-YES-}" = "-YES-" ] && ! GetPID ntpd > /dev/null; then
CheckForNetwork
if [ -f /var/run/NetworkTime.StartupItem -o "${NETWORKUP}" = "-NO-" ]; then exit; fi
touch /var/run/NetworkTime.StartupItem
echo "Starting network time synchronization"
# Synchronize our clock to the network’s time,
# then fire off ntpd to keep the clock in sync.
ntpdate -bvs
ntpd -f /var/run/ntp.drift -p /var/run/ntpd.pid
fi
echo ""
echo ""
sleep 5
#### Removing any existing directory bindings
#Clear OD Computer Account and delete entry from Computer group
if dscl localhost -list /LDAPv3 | grep . > /dev/null
then
echo "This computer is bound to the following Open Directory Services:"
dscl localhost -list /LDAPv3
echo "With the Search Path entries:"
dscl /Search -read / CSPSearchPath | grep /LDAP
sleep 5
if [ "${check4ODacct}" == "${computerid}" ]
then
echo "This machine already has a computer account on $oddomain."
# Set the GUID
GUID="$(dscl /LDAPv3/$oddomain -read /Computers/${computerid} GeneratedUID | awk '{ print $2 }')"
echo "Found GUID: "$GUID
if [ "$oldComputerGroup" != "" ] && [ "$check4ODgroupMembership" != "" ]
then
echo "Removing entry from group $oldComputerGroup"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$check4OD" -delete /ComputerGroups/"$oldComputerGroup" GroupMembership "${computerid}"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$check4OD" -delete /ComputerGroups/"$oldComputerGroup" GroupMembers "${GUID}"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$check4OD" -delete /ComputerLists/"$oldComputerGroup" Computers "${computerid}"
fi
echo "Removing Computer entry $computerid in OD"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$check4OD" -delete /Computers/"${computerid}"
fi
#List existing Directories
echo "Removing OD-Binding to "$check4OD
dsconfigldap -r "$check4OD"
echo "Removing Search Path entries"
dscl /Search -delete / CSPSearchPath /LDAPv3/"$check4OD"
dscl /Search/Contacts -delete / CSPSearchPath /LDAPv3/"$check4OD"
dscl /Search -delete / CSPSearchPath /LDAPv3/"$check4OD"
sleep 5
else
echo "No LDAP or OD Binding present.";
fi
echo ""
# Check a second time in order to delete any remaining LDAP-Bindings
echo "Scanning for further LDAP servers"
if dscl localhost -list /LDAPv3 | grep . > /dev/null
then
echo "Found:"
dscl localhost -list /LDAPv3
echo "Removing OD-Binding to "$check4ODtmp
dsconfigldap -r "$check4ODtmp"
dscl /Search -delete / CSPSearchPath /LDAPv3/"$check4ODtmp"
dscl /Search/Contacts -delete / CSPSearchPath /LDAPv3/"$check4ODtmp"
dscl /Search -delete / CSPSearchPath /LDAPv3/"$check4ODtmp"
sleep 5
else
echo "No further LDAP or OD Binding present."
fi
echo ""
echo ""
#Remove the Active Directory binding
if [ "$check4AD" != "" ]
then
echo "This computer is bound to the following Active Directory Services:"
dscl localhost -list "/Active Directory"
echo "With the Search Path entries:"
dscl /Search -read / CSPSearchPath | grep /Active
sleep 5
echo "Removing any existing AD-Binding to "$check4AD
dsconfigad -f -remove -username "$udn" -password "$password"
echo "Removing Search Path entries"
if [ "$preferred" != "-nopreferred" ]
then
dscl /Search -delete / CSPSearchPath /Active Directory/"$domainname"
dscl /Search/Contacts -delete / CSPSearchPath /Active Directory/"$domainname"
dscl /Search -delete / CSPSearchPath /Active Directory/"$domainname"
fi
dscl /Search -delete / CSPSearchPath "/Active Directory/$domainname/All Domains"
dscl /Search/Contacts -delete / CSPSearchPath "/Active Directory/$domainname/All Domains"
#remove search path entries from 10.6
if dscl /Search -read / CSPSearchPath | grep /Active > /dev/null
then
dscl /Search -delete / CSPSearchPath "/Active Directory/$domainname/$domain"
dscl /Search/Contacts -delete / CSPSearchPath "/Active Directory/$domainname/$domain"
fi
sleep 5
else
echo "No Active Directory Binding present."
fi
echo ""
#Remove Existing Directory Services Config
echo "Removing existing DS Config"
if [ -d "/Library/Preferences/edu.mit.Kerberos" ]
then
rm -R /Library/Preferences/edu.mit.Kerberos
fi
if [ -d "/etc/krb5.keytab" ]
then
rm -R /etc/krb5.keytab
fi
# Clean up the DirectoryService configuration files
rm -Rfv /Library/Preferences/DirectoryService/*
#OD
echo ""
echo ""
echo "Binding to OD-Damin "$oddomain
sleep 5
dsconfigldap -v -a "$oddomain" -n "$oddomain" -c "$computerid"
echo "Killing opendirectoryd"
killall opendirectoryd
sleep 5
echo "Adding computer account $computerid to /LDAPv3/${oddomain} on $oddomain"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$oddomain" -create /Computers/"$computerid" ENetAddress "$nicAddress"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$oddomain" -merge /Computers/"$computerid" RealName "$computerid"
# Set the GUID
GUID="$(dscl /LDAPv3/$oddomain -read /Computers/${computerid} GeneratedUID | awk '{ print $2 }')"
# Add computer to ComputerList and ComputerGroup
if [ $computerGroup != "" ]
then
echo "Adding computer $computerid to OD group $computerGroup on $oddomain"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$oddomain" -merge /ComputerLists/"$computerGroup" apple-computers "$computerid"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$oddomain" -merge /ComputerGroups/"$computerGroup" apple-group-memberguid "${GUID}"
dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/"$oddomain" -merge /ComputerGroups/"$computerGroup" memberUid "$computerid"
fi
echo "Finished OD Binding."
sleep 5 # Give DS a chance to catch up
echo ""
echo ""
echo "Performing the AD Binding"
#AD
# Activate the AD plugin
defaults write /Library/Preferences/DirectoryService/DirectoryService "Active Directory" "Active"
plutil -convert xml1 /Library/Preferences/DirectoryService/DirectoryService.plist
#Use the existing AD-Computername or generate a new one
computeridtmp="default"
if [ "$check4ADacct" == "" ]
then
LEN=$(echo ${#adcomputerid})
if [ $LEN -lt 15 ]; then
echo "ComputerID "$adcomputerid " has 15 characters or less and is therefore suitable for AD-Binding. It is $adcomputerid"
computeridtmp=$adcomputerid
else
echo "ComputerID "$adcomputerid " has 16 or more characters and needs to be modified for AD-Binding."
echo "Removing any -"
computeridtmp=${adcomputerid//-/}
LEN=$(echo ${#computeridtmp})
if [ $LEN -lt 15 ]; then
echo "ComputerID "$computeridtmp" has now 15 characters or less and is therefore suitable for AD-Binding."
else
echo "Only using the last 15 characters of the Computer name to be able to bind to AD."
computeridtmp=${computeridtmp:(-15)}
fi
echo "Cropped Computername to "$computeridtmp
fi
else
computeridtmp=${check4ADacct//$/}
echo "Found existing AD Account previously, attempting to recreate in the OU: "$computeridtmp
fi
echo ""
# Bind to AD
echo "Binding to AD-Domain "$domain" with computerid "$computeridtmp
dsconfigad -f -add "$domain" -username "$udn" -password "$password" -ou "$ou" -computer "$computeridtmp"
echo ""
echo "Setting the Advanced AD Plugin options"
# Configure advanced AD plugin options
if [ "$admingroups" = "" ]
then
dsconfigad -nogroups
else
dsconfigad -groups "$admingroups"
fi
dsconfigad -alldomains "$alldomains"
dsconfigad -localhome "$localhome"
dsconfigad -protocol "$protocol"
dsconfigad -mobile "$mobile"
dsconfigad -mobileconfirm "$mobileconfirm"
dsconfigad -useuncpath "$useuncpath"
dsconfigad -shell "$user_shell"
dsconfigad "$preferred"
dsconfigad -packetsign "$packetsign" -packetencrypt "$packetencrypt" -passinterval "$passinterval"
dsconfigad -namespace "$namespace"
sleep 5
echo ""
echo ""
# Add the OD & AD node to the search path
if [ "$alldomains" = "enable" ]
then
csp="/Active Directory/$domainname/All Domains"
else
csp="/Active Directory/$domainname"
fi
echo "Finished AD Binding."
echo "Adding Domain /LDAPv3/"$oddomain" and "$csp" to Search Path"
dscl /Search -create / SearchPolicy CSPSearchPath
dscl /Search/Contacts -create / SearchPolicy CSPSearchPath
echo "Adding OD.."
dscl /Search -append / CSPSearchPath /LDAPv3/"$oddomain"
dscl /Search/Contacts -append / CSPSearchPath /LDAPv3/"$oddomain"
echo "Adding AD.."
#Adding all Domains first to improve reliability under 10.7
if [ "$alldomains" != "enable" ]
then
cspadall="/Active Directory/$domainname/All Domains"
dscl /Search/Contacts -append / CSPSearchPath "$cspadall"
dscl /Search -append / CSPSearchPath "$cspadall"
fi
dscl /Search/Contacts -append / CSPSearchPath "$csp"
dscl /Search -append / CSPSearchPath "$csp"
echo "Finished Updating Search Paths."
echo ""
echo ""
# Restart DirectoryService (necessary to reload AD plugin activation settings)
killall opendirectoryd
# Destroy the login hook (or change it)
if [ "${newLoginHook}" == "" ]
then
defaults delete /var/root/Library/Preferences/com.apple.loginwindow LoginHook
else
defaults write /var/root/Library/Preferences/com.apple.loginwindow LoginHook $newLoginHook
fi
sleep 5
# Customizing the login-Window
#defaults write /Library/Preferences/com.apple.loginwindow AdminHostInfo DSStatus
#defaults write /Library/Preferences/com.apple.loginwindow showInputMenu -bool TRUE
#defaults write /Library/Preferences/com.apple.loginwindow SHOWFULLNAME -bool TRUE
# This works in a pinch if the above code does not
#defaults write /Library/Preferences/DirectoryService/SearchNodeConfig "Search Node Custom Path Array" -array "/Active Directory/All Domains"
#defaults write /Library/Preferences/DirectoryService/SearchNodeConfig "Search Policy" -int 3
#plutil -convert xml1 /Library/Preferences/DirectoryService/SearchNodeConfig.plist
#killall opendirectoryd
# Disable autologin
defaults delete /Library/Preferences/com.apple.loginwindow autoLoginUser
srm /etc/kcpassword
echo ""
echo ""
echo ""
echo "Now bound to OD Domain:"
dscl localhost -list /LDAPv3
echo "With Search Path entries:"
dscl /Search -read / CSPSearchPath | grep /LDAP
echo "Now bound to AD Domain:"
dscl localhost -list "/Active Directory"
echo "With Search Path entries:"
dscl /Search -read / CSPSearchPath | grep /Active
exit 0 ## Success
exit 1 ## Failure
Any inputs, questions and improvement suggestions are, of course, most welcome!
Cheers
See -
Firefox don't close when "browsing and Download History" is deleted on exit
Firefox doesn't close properly in about 50 % of cases. When closing FF, the window closes but the process firefox.exe isn't terminated. When trying to open FF again you got the error message "Firefox is already running, but not responding. To open a new window, you must first close the existing Firefox process, or restart your system." After terminating the process firefox.exe in the windows task manager, FF can be started again.
Error only occurs when under "Options/Privacy/Use custom settings for history" at "Clear History when Firefox closes" the option "Browsing and Download History" is selected.
All other options selected or not don't cause the issue.
I switched this option it several times. When "Browsing and Download History" at "Clear History when Firefox closes" isn't selected, the error doesn't appear.
Reproducible regardless if "Remember my browsing history" and "Remember download history" are selected or not.
Reproducible:
- after new installation of Firefox (Firefox 29.0.1 german, Windows7 64-bit)
- with different profiles, even with all addons disabled or running in safe mode
- with new profile with no addons or dictionaries installed
- with windows firewall turned off and deactivated antivirus program
- with hardware accellaration on and off
I know the issue has already reported at bugzilla.mozilla.org and described at
https://support.mozilla.org/en-US/questions/997918
https://support.mozilla.org/de/questions/997670
I want to describe the problem more precisely:
It only occurs when "Browsing and Download History" is delete on exit. The other option at "Clear History when Firefox closes" don't cause this issue.
Is there any other solution then to turn "Browsing and Download History" off?From what I have been reading from other posts on this forum, the issue may
be caused by the clear history settings.
Press the '''<Alt>''' or '''<F10>''' key to bring up the tool bar.
Then '''Tools > Options > Privacy'''.
The button next to '''History''', select '''Use Custom Settings'''.
At the bottom of the page, turn on '''Clear History When Firefox Closes.'''
At the far right, press the '''Settings''' button. Turn on ONLY '''Cache''' and
'''Form And Search History''' leaving the others off.
This is not a cure but will make it easier if Firefox locks up.
'''https://support.mozilla.org/questions/997866?esab=a&s=&r=1&as=s''' {web link} -
How do I use Firefox sync on my Android device with both Aurora and Release?
I have both Aurora and Release installed on my Android phone. I have set up a New Sync account on my desktop. I can log in to it with Release, and it syncs great.
However, my Aurora build keeps popping a "could not sign in" notification. If I touch the notification, it takes me to sync settings. I try to log in (same username and password), but it says "Could not sign in".
if I look in my Android settings, I have two "accounts" - one for Release and one for Aurora - and _both_ claim that they most recently synced 5 minutes ago! But I made an update to my bookmarks on desktop 10 minutes ago, and it's appeared in Release but not in Aurora. So the Aurora "last sync time" seems to be a lie.
The reason I'm on SUMO is that I don't know if this is a supported configuration. I remember with old sync there were some rules about whether you could have multiple copies of Firefox on the same device. Is this a supported configuration? If so, should I file a bug or have I missed something here?
GervHI Snickers,
There is an option to sync tabs. About:sync-tabs works on the desktop and can see the tabs from that device however this feature is not available for the mobile device. However from an active sync the current sessions are visible from the desktop page.
In order to restore a session you may be able to restore the session if it crashed. [https://support.mozilla.org/en-US/questions/1026370#answer-644109 With these instructions] -
I need to change my iCloud email address. I changed it for my Apple id but I can't log out of iCloud to change it there. Find my iPad is activated so I can't delete my iCloud account. I don't have the email address the iCloud login has anymore so I can't have the password sent there. To sum it up, iCloud has an old email for the account log-in. I don't remember the password for the old email. I have Find My iPad activated so the iCloud account cannot be deleted. And I am already logged out of iTunes & App Store.
If you mean that Find My Phone is asking for a password to a different Apple ID to your current Apple IDand that ID is a previous version of your current ID, not an entirely different one.
This feature has been introduced to make stolen phones useless to those that have stolen them.
However it can also arise when the user has changed their Apple ID details with Apple and not made the same changes to their iCloud account/Find My Phone on their device before upgrading to iOS 7, or if you restore from a previous back up made before you changed your details and some other circumstances.
The only solution is to change your Apple ID back to its previous state with Apple at My Apple ID using your current password, you don’t need access to this address if it’s previously been used with your Apple ID, once you have saved these details enter the password as requested on your device and then turn off "find my phone" and delete the account from your device. It may take a short while to remove the account.
You should then change your Apple ID back to its current state, save it once again and then log back in using your current Apple ID. Finally, turn "find my phone" back on once again.
This article provides more information about Activation Lock. -
imessage on my iMac has created two iMessage account both asking for Apple ID....and no option to - (delete) one of the two duplicate accounts....how can I delete one of them it just bothers me due to sign in issues....when signed into one it signs out the other and goes inactive I just wanted to delete one of them so this issue doesn't happen....why doesn't it give the option to delete ONLY these two accounts
1. Don't confuse "Apple ID" with iTunes Account ID. You can have many Apple IDs but only one iTunes account active at a time.
2. If you "changed" your iTunes account ID, you actually have 2 accounts - one under the old name plus the new name.
3. You can't merge the accounts - they remain separate. Apps purcahsed under the old account name will update ONLY WHEN THE PHONE IS SIGNED IN TO THE OLD ACCOUNT NAME and visa versa.
4. Likewise, you can sync only the apps, music, media purchased under the account the phone AND iTunes are signed in to. -
Upgrade to Lion and then to Mountain has caused me problems
After upgrading to Lion a year ago or so I developed a problem on my MB Pro that I'd never had before. (1) My Mail app starting acting funny. I'd compose an email then click send, but it would sit in the Outbox--for hours, even days. I had to login to MobileMe to send mail and to get Mail. And (2), my system would frequently crash. If I left 3-4 apps open and then went and had lunch, for example, when I came back, my system had crashed. The screen was blanked out, and I had to move the mouse, kind of use it like an eraser to erase a part of the crap in the foreground of the screen so that I could see my login, after which I would enter my password and then login. After login in I would find that all of my apps had either crased or were frozen. I thought it might be that I needed to upgrade my Memory, so I upgrade from 4 GB to 8 GB, but this didn't do any good.
So...after Mountain Lion came out, I upgraded, hoping by some miracle this might solve the problem. But no, the problem persisted. I had AppleCare and so I called Apple three times about this problem, but they couldn't solve it either, although one senion tech adviser did manage to get my Mail app working again. He went to some folder (I wish I'd noted what this folder was at the time but I didn't), found there was sever gobbly-gook or junk files inside it, and then proceeded to delete them. After this my Mail app worked OK but the other problem persisted.
A week ago I backed up everything on my MB Pro to my Time Machine BU, bought a new Mac Mini, and then used Migration Assistant to import all my data from the Time Machine BU. I was hoping for a miracle--i.e., hoping that this problem would disappear. But not only has the problem not disappeared, I now can't even use my Mail app on the new Mac Mini. It is completely disabled...plus I still get the random crashes. I am getting by using my old MB Pro. I've transfered back to my MB Pro my essential files and I am using it while I try to figure out what in the **** is going on with the original data on my Mac Mini.
Any ideas would be much appreciated.Install or Reinstall Lion/Mountain Lion from Scratch
Be sure you backup your files to an external drive or second internal drive because the following procedure will remove everything from the hard drive.
Boot to the Recovery HD:
Restart the computer and after the chime press and hold down the COMMAND and R keys until the menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.
Erase the hard drive:
1. Select Disk Utility from the main menu and click on the Continue button.
2. After DU loads select your startup volume (usually Macintosh HD) from the left side list. Click on
the Erase tab in the DU main window.
3. Set the format type to Mac OS Extended (Journaled.) Optionally, click on the Security button and set the Zero
Data option to one-pass. Click on the Erase button and wait until the process has completed.
4. Quit DU and return to the main menu.
Reinstall Lion: Select Reinstall Lion/Mountain Lion and click on the Install button.
Note: You will need an active Internet connection. I suggest using Ethernet if possible because it is three times faster than wireless. -
Enhancements is not active and cannot be transported
Hi All,
We are getting following error message when releasing a Transport request in CRM system which is on 7.0 version on MaxDB.
"Enhancements is not active and cannot be transported".
The strange thing is that the Tasks underneath are all released successfully , but only the TR is not getting released.
Also, the logs in transports do not point to which enhancement is not active as well.
Any help in this issue is highly appreciated.
Regards,
Murali NarayananHi Murali,
Go to the enhancement and check the tables.fields,includes and it request nos.Go to that transport request ,double click on that see what and all there under it. Post if need help.
Regards,
Madhu.
Maybe you are looking for
-
How to connect macbook to Sony tv
Hi there, I spent most of last night trying to get this done! No problems with the vision, cable between Macbook and HDMI input on the TV is fine. I have a 3.5mm Jack to Phono lead which I thought would work for the Audio. No sound. Maybe I'm not se
-
Hello guys, I just ran an e-mail campaign few days ago, but on my Control Panel, it shows "No Data to Display". It has been 4 days since my campaign, but i didn't get any reports yet. Do you guys know what type of issue i am having? Happy Holidays, B
-
Problems with multiple iTunes accounts/computers
Hey everyone, I have a bit of a problem with iTunes. The whole setup is a bit convoluted, here's the layout. My brother and I both have iPhones. He uses my account to buy things, but has a separate library. Recently, my computer crashed, so I took hi
-
How do I upgrade my Core2Duo Mini OSX10.4.11 to the latest version of Snow Leopard?
How do I upgrade my Core2Duo Mini OSX10.4.11 to the latest version of Snow Leopard? I am aware I should upgrade from 1GB to 2GB of RAM. Can I just purchase the Snow Leopard DVD and install from that? Will I be able to run my Microsoft Office 2004 s
-
I am a FC user and have the program on both my desk top and lab top, would I be able to do the
I am a FC user and have the program on both my desk top and lab top, would I be able to do the same if I sitch to premier pro?