Mavericks Server, separate OU in LDAP for Teachers, Students

We are a school using Mavericks Server 10.9.4: 1 Master, 4 Replicas, 7 facilities, 1700 Users. OD manages our LDAP user database. We need to put teachers/staff into a separate OU in LDAP from the students. Reason is we use WebHelpDesk and CASPER, which also reference LDAP for their User Data and we can't have Student Accounts in those applications. I don't have the first idea where to start. Any help is MUCH appreciated.

Hi,
the form alone will only help you with IDM just like you experienced. The reason is that in LDAP and AD what you are trying to do is not an update but a rename in IDMs terminology.
So what you have to do is:
Find out that the user has to move and move him in IDM in the form. Put a field in your form like issueRename and set it to true.
Clone your updateUser workflow and add a new activity issueRename. In the provisioning activity insert a new transition to issueRename if user.issueRename equals true.
The new activity checks out a rename view modifies it and checks it back in to then continue where the provisioning activity would have gone if you had not inserted the rename step.
To figure out how to manipulate the view to reach your goal use the bpe on a user with AD and LDAP and check out his rename view. Modify it, save it and check if it worked. When you got it working do the same what you did in bpe interactivly with a script action between renameView checkout and checkin.
Regards,
Patrick

Similar Messages

Adobe X Pro for teachers/students

If I puchase the Adobe X Pro teacher/student edition, can I download it on more than one computer?

Yes. Just like the normal versions it can be activated on 2 computers.
Mylenium

10.6.8 to Mavericks Server Upgrade loses Open Directory Users

Hi,
I have an OpenDirectory Master running OSX Server 10.6.8. An upgrade to Mavericks 10.9 has just failed.
The server has about 50 OD users and passwords need to be retained across the upgrade. Apart from OD, the only other active service is AFP file sharing.
DNS is good forward and back as per this article: OS X Server: Steps to take before upgrading or migrating the Open Directory database
I followed these Apple guidelines for server migration: OS X Server: Upgrade and migration from Lion Server or Snow Leopard Server.
I cloned the boot drive, booted from the clone, upgraded to Mavericks, then installed the Mavericks Server app.
On opening the Mavericks Server app "Configuring services' showed for 5 minutes, but then an error message appeared. I did not record it exactly, but it was something like, "There was an error configuring the server. Certificate not valid!".
I was able to continue through the error but on opening Server app there were no OD (local/network) users showing. Authentication was not happening.
I had underestimated the time to get the installation done and I had used up the window of downtime I had booked - I did not have much time to troubleshoot. So, I cut back to the original hard drive and the server is back to 10.6.8 again.
Can anyone point me in the right direction to find out what may have gone wrong? How can I get my users into 10.9 Server?
Many thanks,
b.

Linc Davis advice is spot-on, as usual.
There seem to be dozens of sub-databases in the LDAP database. A problem in any of them seems to derail the entire conversion process. I tried a straight conversion and was also disappointed that there were unresolved issues, and it meant that the conversion failed.
So I did the export route using WorkGroup Manager, and exported four sets:
Users
Groups
Computers
Computer groups
go to the appropriate pane (e.g., Users) and Select All, then choose Export, and give it a name (probably with an embedded date in case you need to do it again later)
Then use 10.9 WorkGroup Manager (available as a separate download) to Import.
When re-imported, everything worked just fine (except the passwords, which cannot be carried forward using this method). I did have to manually enable at least one service, such as File Sharing service in Server [admin], or users showed up as "not allowed" [to log in].
This entire process of getting Server 3 to work is fraught with peril, and everything converges on ONE diagnostic, "Network users can't log in". Which means you blew it, but provides no additional information about WHERE you blew it.
There do not appear to be any magic bullets. It is just a tough slog. Users who reported success after failing the first time reported they returned to fundamental principles and did all the steps over, in order, to attain success.

Mavericks Server Issues

We have a server that was upgraded to Mavericks and OS X Server 3 and that's when the issues started. Folders becoming inaccessible, permission issues, file getting corrupted. We thought it was because it was an older Mac Mini, which was fine running Snow Leopard server, but the issues started after Mavericks. It was assumed part of the problem was the upgrade as opposed to a clean install. As this is a production machine, there was no time to wipe and reinstall. We also worried it was possible the hardware was going after running 24/7 for 3.5 years.
To be safe, we replaced it will a brand new Mac mini running a clean version of Mavericks server. It was fine for a few dys then the issues started creeping in. Permissions issues again, inaccessible folders, Windows shares getting kicked off and finally the log file filling up with errors (4,000+) have pushed us to the breaking point. We cannot get a full days work done on the server without having to repair something or reboot.
The error that comes up in the log and console is: Kernel: proc: table is full. It fills up the log.
DNS is not running and neither is open directory as this server is hosting a small network of users (less than 10) for file sharing of graphics files only. Some of the errors occur once a windows machine connects.
Any suggestions as to what could be causing these issues would be greatly appreciate as we are stumped. It ran fine under Snow Leopard it seems it's more Mavericks specific. The next step is to revert to Snow Leopardand pray that work.
Thanks in advance.
Chris

This procedure is a diagnostic test. It makes no changes to your data. If you have more than one user account, you must be logged in as an administrator to carry out these instructions.
Please triple-click anywhere in the line below on this page to select it:
sudo dtrace -n 'syscall::fork*:entry{printf("%s %d",execname,pid);}' | head | pbcopy
Copy the selected text to the Clipboard by pressing the key combination command-C.
Launch the built-in Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Paste into the Terminal window by pressing the key combination command-V. I've tested these instructions only with the Safari web browser. If you use another browser, you may have to press the return key after pasting. You'll be prompted for your login password. Nothing will be displayed when you type it. If you don’t have a login password, you’ll need to set one before you can run the command. You may get a one-time warning to be careful. Confirm. You don't need to post the warning.
If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator. Log in as one and start over.
Wait for a new line ending in a dollar sign ($) to appear below what you entered.
The output of the command will be automatically copied to the Clipboard. If the command produced no output, the Clipboard will be empty. Paste into a reply to this message.
The Terminal window doesn't show the output. Please don't copy anything from there.

Server 2012 errors for timeout -- LDAP error number: 55 -- LDAP error string: Timeout Failed to get server error string from LDAP connection

Hello, currently getting below error msg's utilizing software thru which LDAP is queried for discovering AD objects/path and resource enumeration and tracking.
Have ensured firewalls and port (389 ) relational to LDAP are not closed, thus causing hanging.
I see there was a write up on Svr 2003 ( https://support.microsoft.com/en-us/kb/315071 ) not sure if this is applicable, of if the "Ntdsutil.exe" arcitecture has changed much from Svr 03. Please advise.
-----------error msg ----------------
-- LDAP error number: 55
-- LDAP error string: Timeout Failed to get server error string from LDAP connection

The link you shared is still applicable. You can adjust your LDAP policy depending on your software requirements.
I would also recommend that you in touch with your software vendor to get more details about the software requirements.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

DNS/Fowarding Servers for OS X Mavericks Server

Is it okay that my AirPort Extreme AC router takes care of the DNS for OS X Mavericks Server and have the fowarding servers set to the default which is my routers IP?

That won't work. There is no DNS server in an AirPort Extreme, nor in a Time Capsule. The Apple WiFi boxes and most other low-end gateway boxes will only contain a DNS resolver. When in a NAT'd network, the DNS resolver will simply forward the DNS queries to off-LAN DNS servers. The resolver has no concept of LAN-local host names or IP addresses; of what's happening in the NAT'd address space that's in use. (Various mid-grade gateway boxes do have DNS capabilities, and open source options such as DD-WRT do have a DNSmasq-based server, and these boxes can suffice for the needs of OS X Server. If there's a way to configure host names and host IP addresses for random boxes on your LAN, then the box you're using should work. If not, it's a resolver, and won't work for a NAT'd network.) Off-LAN DNS servers will almost certainly not provide correct translations for hosts with private-block addresses. OS X Server requires proper forward and reverse DNS translations, or things get weird. Here's how to set up local DNS on OS X Server.

WLC connect LDAP for Authentication, but could not connect to server

Hi Everyone, I got a problem when I use WLC 5508 connect to LDAP for authentication, but no luck there, it's a simple config, but not easy to work on my job, I got the following messgae:
Service Port - Not connected
Distrubution port include:
     Management Interface - in AP Management VLAN - 30
     Student AP interface - in Student VLAN - 20
     Staff AP interface - in Staff VLAN - 10
AD is in Staff VLAN - 10
WLC LDAP Server setting
Base DN:OU=wws_ou,DC=ww,DC=yc,DC=com,DC=hk
User Attribute: sAMAccountName
User Object Type: Person
Debug aaa all enable message
*LDAP DB Task 1: Jul 09 01:40:58.969: ldapInitAndBind [1] called lcapi_init (rc = 0 - Success)
*LDAP DB Task 1: Jul 09 01:41:00.969: ldapInitAndBind [1] configured Method Anonymous lcapi_bind (rc = 1005 - LDAP bind failed)
*LDAP DB Task 1: Jul 09 01:41:00.969: ldapClose [1] called lcapi_close (rc = 0 - Success)
*LDAP DB Task 1: Jul 09 01:41:00.969: LDAP server 1 changed state to IDLE
*LDAP DB Task 1: Jul 09 01:41:00.969: LDAP server 1 changed state to RETRY
*LDAP DB Task 1: Jul 09 01:41:00.969: LDAP_OPT_REFERRALS = -1
WLC GUI Log:
*LDAP DB Task 1: Jul 09 02:56:13.045: %AAA-3-LDAP_CONNECT_SERVER_FAILED: ldap_db.c:1038 Could not connect to LDAP server 1, reason: 1005 (LDAP bind failed).
*LDAP DB Task 1: Jul 09 02:56:11.045: %AAA-3-LDAP_CONNECT_SERVER_FAILED: ldap_db.c:1038 Could not connect to LDAP server 1, reason: 1005 (LDAP bind failed).
*LDAP DB Task 1: Jul 09 02:56:09.045: %AAA-3-LDAP_CONNECT_SERVER_FAILED: ldap_db.c:1038 Could not connect to LDAP server 1, reason: 1005 (LDAP bind failed).
LDP Message of LDAP BaseDN:
Expanding base 'CN=Frankie F. Yeung,OU=wws_ou,DC=ww,DC=yc,DC=com,DC=hk'...
Result <0>: (null)
Matched DNs:
Getting 1 entries:
>> Dn: CN=Frankie F. Yeung,OU=wws_ou,DC=ww,DC=yc,DC=com,DC=hk
4> objectClass: top; person; organizationalPerson; user;
1> cn: Frankie F. Yeung;
1> sn: Yeung;
1> givenName: Frankie;
1> initials: F;
1> distinguishedName: CN=Frankie F. Yeung,OU=OU=wws_ou,DC=ww,DC=yc,DC=com,DC=hk;
1> instanceType: 0x4 = ( IT_WRITE );
1> whenCreated: 8/10/2011 10:28:14 China Standard Time China Standard Time;
1> whenChanged: 8/10/2011 10:31:26 China Standard Time China Standard Time;
1> displayName: Frankie F. Yeung;
1> uSNCreated: 3850555;
1> uSNChanged: 3850571;
1> name: Frankie F. Yeung;
1> objectGUID: 6ebfc7e9-6989-4f11-bae7-62c23af67edc;
1> userAccountControl: 0x10200 = ( UF_NORMAL_ACCOUNT | UF_DONT_EXPIRE_PASSWD );
1> badPwdCount: 0;
1> codePage: 0;
1> countryCode: 0;
1> badPasswordTime: 0;
1> lastLogoff: 0;
1> lastLogon: 0;
1> pwdLastSet: <ldp error <0x0>: cannot format time field;
1> primaryGroupID: 513;
1> objectSid: S-1-5-21-3867848445-1581729766-1247451615-2172;
1> accountExpires: <ldp error <0x0>: cannot format time field;
1> logonCount: 0;
1> sAMAccountName: fckyeung;
1> sAMAccountType: 805306368;
1> userPrincipalName: [email protected];
1> objectCategory: CN=Person,CN=Schema,CN=Configuration,OU=wws_ou,DC=ww,DC=yc,DC=com,DC=hk;
Hope I can resolve this problem ASAP, thanks!

Your AD is in the Staff Vlan so maybe the WLC uses the Staff interface instead of management to contact the AD. I don't know how you sniffed exactly.
The comment about eap methods you saw is when you use LDAP with dot1x security. It is the same as saying "You cannot do peap-mschapv2 or eap-fast-mschpv2 with LDAP".
But you can do LDAP for web authentication, that has no eap methods.
Your original problem was a binding problem from the WLC, so we can expect that the WLC really is sending traffic towards AD.

Looking for a manual to Maverick Server. Where can I find it?

Looking for a manual to Maverick Server. Where can I find it?

Hi ..
Start here > OS X Server - Apple Support
Once you have OS X Server installed, from the OS X Server menu bar (top of your screen) click Help > OS X Server Help

Long delay for login list to appear Mavericks Server

I am currently looking at an issue where the login list of users takes up to 30 seconds to appear after a user has logged out of their account. This might not sound like much time, but is a long time for the user waiting to get the list. Any ideas on where to look for a remedy, or what tests might be applied would be appreciated.
Clients are all 2012 - 2013 iMacs and Macbook Airs - About 140 nodes
Server is a new Mid 2012 Mac Pro Server running Mavericks server with all updates. Open Directory network.
Network is Gigabit with a 3com 4500 Layer 3 switch and Gig Lan switches.
Message was edited by: Don Roedl - To edit out my personal machine, which is not relevant to the issue.

Hello Don
We have experienced the same issue.
Are all clients 10.9 clients or 10.8 ?
If 10.8 home directories should be served as AFP protocol. If 10.9 clients then it is SMB ( SMB 2 ) OS X 10.10 Yosemite has moved from SMB2 to SMB3.
Make sure in clients that you have "Show fast user switching" ticked off.
Otherwise, the user logs out but the client machine will almost never unmount the previous user home directory shared point, the next user will not be able to log in.
In Server.app under File Sharing you see idle users even after successful log out. It was our case.
Some people on the internet went to the terminal to add precious terminal commands to force kill idle users after a "x" hours for instance.
http://krypted.com/mac-security/missing-server-app-settings-for-afp/
10.8 and 10.9 have differences.
I suggest you read http://www.amazon.com/Apple-Pro-Training-Essentials-Supporting-ebook/dp/B00HJUBR Q0
Even if you have lots of experience with OS X.

Code-signing Certificate Provider for Mavericks Server?

Our Digicert Code Signing Certificate [which worked fine in Mountain Lion Server but doesn't work in Mavericks Server no matter what I try] is about to expire, and I'm wondering if anyone could recommend a vendor whose code-signing certificates definitely work with Mavericks Server?

I have just created a self-signed code-signing certificate, I used XCA to generate it which is a front-end for openssl. Obviously being generated from a self-signed rootCA it is not going to be trusted by the outside world but it is good enough for an internal Profile Manager setup since the enrollment process will automatically trust your own self-signed rootCA.
Anyway, when trying to install it I did come across a gotcha which might help you and others here. I found that if I imported the certificate in to Keychain Access e.g. by double-clicking on it, then Server.app did not list it as an available certificate for Profile Manager code-signing. However if instead I used the option in Server.app under Profile Manager to import the code-signing certificate it was accepted.
In theory importing via Keychain Access should work as well but it did not, so if you have been doing it that way try importing via Server.app instead.
If you have already imported it via Keychain Access just delete it from your Keychain and try again.
With regards to the suggestion from ajm_from_WA for buying one from www.ssls.com I could not find any code-signing certificates listed on their website. These are different to ordinary website certificates.

Do we need separate Unattended service account for each SharePoint Server 2013 BI service applications?

SharePoint 2013 - I'm planning to use 'unattended service account' method of Secure Store Service - for Excel, Performance Point and Visio services. I'm about to create Active directory accounts for them.
Question: Do we need separate Active directory accounts for each service
DomainName\ExcelUnattendedAccount
DomainName\PPSUnattendedAccount
DomainName\VisioUnattendedAccount
(or)
Can I have just one Active Directory account DomainName\SharePointUnattendedAccount ?
Are there any drawbacks having a single account? Any best practice around this? For all the three services the data sources are going to be the same.
Subash.S

Security is the only reason you would separate accounts (as these accounts must have access to the source data). There should be no other drawbacks.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Multiple Web Sites on OS X Mavericks Server

I want to run multiple test web sites off my home Mac OS X Mavericks Server 10.9 can someone point me to a good "How to" on the specific of how to use the Server application to create and operate multiple web sites of a single Mavericks Server?
Example
MyServer.inno.com          10.0.2.5
Basic web is up and running....
I want to host four other web sites off the same machine for testing purposes how do I do that?
MyServer.inno.com          10.0.2.5
MyServer.web1.com          10.0.2.5
MyServer.web2.com          10.0.2.5
MyServer.web3.com          10.0.2.5
MyServer.web4.com          10.0.2.5
so if I go to the server and load
     MyServer.web1.com          10.0.2.5
it load a different web server.
My thought is to use virtual host how does Apple / Community recommend I set this up...
T.

Please do not squat in the "home.com" domain. If you're going to use a bogus domain, please use a bogus to-level domain such as server.home.jarvis — .jarvis is not currently a valid top-level domain, though that might change with the way ICANN has been bringing many new top-levels online, so a real registration is safer here.
Peter Jarvis wrote:
Assumptions:
     1. The Server is not intended to be publicly accessable from the Internet
How will it be accessed? Entirely privately? No external access? OK.
     2. Private Network - 10.0.1.X
I'd probably pick something a little further into 10, such as 10.8 or 10.10, or 10.20.1.x — if you're ever using a VPN, it's best to use a weirder subnet, and I've worked with several folks that have 10.0.1.0/24 subnets.
     3. DHCP Reservation for the Mac Server - 10.0.1.2.
I usually prefer keep the server and the other fixed-address hosts outside the DHCP pool.
     4. Server Domain name MacServer.home.com
Are you the registrant for the home.com domain? (I'd tend to doubt that, and would therefore suggest use of a real and registered domain or subdomain that you have permission to use or (less desirably) use a bogus top-level domain.)
     5. Example Web Site http:www.rouxacademy.com to also run off the same server...
Is that going to be public?
Prequisites:
     1. Static Server IP Address / DHCP Reserved IP Address against MAC Address
     2. DNS Service Configured and Running
     3. Web Service Configured and Running
     4. Example Web Site http:www.rouxacademy.com
     5. You have a basic website (with mysql) files available
               Directory roux_academy (Contains Basic Web SIte files etc)
OK.
Steps:
     1. Static Server IP Address / DHCP Reserved IP Address against MAC Address
The Airport Airport allows you to Reserve and IP address against a MAC (Media Access Control) physicall address of Server Ethernet Card. You can do this or have the Airport allocated DHCP address from 10.0.1.50 and above and statically allocate the server address of the machine.
I'd leave the server out of the address pool. So long as the pool and all static IP hosts are in the same block (usually a 255.255.255.0 or /24 subnet) it'll all work, and you won't need to entangle the OS X Server with the DHCP server.
     2. DNS Service Configured and Running
Install Mavricks, install OS X Server application, launch server app...
Go to DNS tab, define a new host name MacServer.home.com and associate with 10.0.1.2 IP Addresss
Start DNS Service...
Note: DO not publish DNS service via airport to Internet...
Other than not squatting in that domain, yes. There's no reason to open TCP or UDP port 53 inbound.
   3. Web Service Configured and Running
Go to Web Sites tab...
Click + and create new web site entry
Domain Name:                http:www.rouxacademy.com
IP Address:                     Any
SSL:                               None
Store Files in:                /Volumes/dev/Library/Server/Web/Data/Sites/roux_academy
Who can access:          Anyone # I would restrict to a single user
Additional Domains:     rouxacademy.com
no http: prefix there, but yes.
If you're not exposing the server to the 'net (as mentioned above) there's probably no need to restrict. If you do need to restrict, you'll need to edit configuration files for Apache, or some other technique — maybe a VPN, if you're allowing (controlled, VPN-based) inbound access into your network.
Start Web Service...
     4. Back to DNS
Add host name....
www.rouxacademy.com / 10.0.1.2
# Do not create an MX record or publish DNS via airport...
AirPort does not know from MX records, and does not provide DNS services. AirPort will know about your local DNS server, since you are apparently using the AirPort for DHCP.
You can also add the DNS translation during step 2; Apache and DNS are not tightly linked here.
Launch Safari and type
     www.rouxacademy.com          - should launch web site...
     rouxacademy.com                   - should launch web site
Caveat: the Real rouxacademy.com will not be accesable from the server or local machines on 10.0.1.X network...
Ah, so there's a key detail — you're playing games and mimicking a real web site? OK.
The rouxacademy.com web site will be accessible from the server, as that'll (also) have the DNS translation (and remember the basis for virtual hosting is the client — the server in this case — has a translation for the host — the rouxacademy.com or www.rouxacademy.com domain in this case — and passes that string over the HTTP or HTTPS connection to the web server.   If you really want to keep the server from accessing this web site, then you'll have to push the local translation of that domain into the hosts file, or to a separate DNS server.
I'd try to avoid this configuration though, particularly as your references to MX earlier implies that this domain might be more active than just the web services discussed here — trying to run split-horizon DNS means you'll get what's internal and external somewhat tangled, and you'll have to keep mail — for instance — aimed outside and web services aimed internally. This is possible for many cases, but gets tricky.
Best to test the web site with a different domain name, and to use /-relative notation for accessing the files, or using the web content management system's configuration settings to control the "published" name of the site.

Migration from MS Exchange 2003 to Mavericks Server

Can anyone recommend a migration path from MS Exchange 2003 to OS X Mavericks Server? The key features to be migrated and used with the new server are: email, contacts, calendar, group tasks management, file sharing.
Also, any hardware recommendation? Is Mac mini enough for a group of about 6-8 other Macs or could we benefit from the new Mac Pro? Perhaps an iMac (with a Fusion Drive)?
Thanks for any suggestions.

Reginato Gobbo wrote:
knowing the limitations, I d´like to know if there is any tool to migrate all the mailbox from Exchange Server 2007 to Mavericks Server.
I don't think you know the limitations — Exchange Server provides rather more than what Postfix and Dovecot do.
This is a generic Exchange Server to Postfix/Dovecot migration, which — in conjunction with the imapsync option — might find some other discussions.
For migrating from Exchange Server itself, AFAIK, no, there are no packaged tools for that available. Tools such as imapsync can be used to migrate mail among imap servers, which can be an option here once imap is enabled on the Exchange Server, and once you know (or reset) all the passwords. Or you can select all and then drag and drop the messages.
Slightly closer to Exchange Server in capabilities are the Zimbra and Kerio products. Zimbra has migration tools, IIRC.
FWIW, please do not thread-jack, it just confuses the discussions — or at least it usually just ends up confusing readers. This is a very different question from the original, and should be its own separate thread.

Java ftp server which can use LDAP, how to integrate with WLS' implementation of LDAP?

Howdy.
I'm setting up a java ftp server
(http://www.mycgiserver.com/~ranab/ftp/index.html) which is capable of using
LDAP for it's user security. I would like to integrate this ftp server with
wls' implementation of LDAP so I only have to admin one user list.
Does wls put it's user list in the LDAP or in it's own proprietary setup? I
tried playing around with it, but the users don't seem to appear in the JNDI
tree. Is this where the LDAP stuff is located? I thought it was in there?
If it's in it's own setup, is there a way to propagate the users to LDAP?
If these look like newbie Q&A, I guess they kind of are, I'm new to LDAP.
Thanks for any input you might have.

Peter,
If you are talking about using the embedded LDAP server in WLS 7.0 for this purpose
I think you are going done the wrong path.
Look at the following URL on how to use an external LDAP server for your custom
application
http://e-docs.bea.com/wls/docs70/secmanage/realm.html#1172008
Chuck Nelson
DRE
BEA Technical Support

HT1311 I am a teacher and I use my ipad in my classroom. I have my own personal itunes account. My school has set up an itunes account for teachers to download shows for school. Can i download from the achool account onto my ipad without losing my stuff?

I am a teacher and use my personal ipad to teach in my class. My school has set up a separate itunes account for teachers to download shows for use in class. How do i download from a different itunes account than i use personally?

You sign out of your ID in Settings>iTunes and App Stores>Apple ID, then sign onto the school ID in order to use it. You know your situation better than I do, but when you switch ID's on the iPad and go back and forth in order to download purchases, you run the risk of locking yourself out of one of the ID's for 90 days.
Read this about associated devices.
http://support.apple.com/kb/ht4627

Mavericks Server, separate OU in LDAP for Teachers, Students

Similar Messages

Maybe you are looking for