8.5. Automating System Tasks
8.5.1. Configuring Local Administrative Permissions
One thing you may notice after working with Open Directory is that there is no good way to define local administrator access to desktops via an Open Directory group. You can add users to the Open Directory Admin group, but due to the way that the DS Search Path is traversed (which is explained in Chapter 2), OS X desktops will search the local admin group for many administrative checks. Unlike the Active Directory plug-in, the LDAPv3 plug-in does not provide the ability to specify a local administrative group mapping. So, you, the administrator, are left to your own devices to accomplish this task. Luckily, we have just what you need. The following script is also ...
Get Enterprise Mac Administrator's Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
