WGM not allowing users access to applications

Question

Good afternoon
Here's hoping someone has a tip for me.
New install of Leopard XServes (2 of them) in a (so far) Mac-only environment running Leopard. Running AFP, SMB, Open Directory, and Print services on both and DNS services on one and Web services on the other.
Created user groups and populated the groups with sample users on both XServes. Attempting to use WGM to limit access to various applications through the group preferences. Just doing some basic applications for now like Firefox, Camino, and First Class. Have allowed these applications in the Applications tab in WGM/Group Preferences/Applications, but done nothing in the Folders tab.
Users log into their respective servers successfully with automounted home folders, but aren't allowed to open applications other than Safari and iTunes (Apple's own apps). Other apps say they are not on the approved list of applications. Printing from Safari works. Dock is being controlled nicely (differently for members of different groups).
Some of the apps required signing and I signed the as the Administrator rather than the Directory Administrator. Could that be the problem?
TIA
Greg (whose summer is being consumed by this)

Answer 1

Hi,
Yes I had the same issue before. It turns out that when you sing applications to be included in the list of allowed apps, the applications residing on the local machines should also be the same apps that were signed. Meaning that since you have mad the Xserve signed the applications, the ones within the local machines are not the same anymore as that on the server. I think it looks for a signature on the apps on the local machines from the server, and since those are not signed they are disallowed.
You can make a resolution by either copying the apps that are signed and distributing them to each local machine to be use or just totally not signed them at all.
Hope this helps