This section describes how to join a Mac client to a DSfW domain and access NSS shares.
Follow the steps below to join a Mac client to a domain.
From the Apple menu, click System Preferences.
Click Network.
Click Advanced > DNS.
Add the DNS Server holding the zone information of the DSfW domain and the domain name of the DSfW domain.
Under System Preferences, click Users & Groups > Login Options > Join.
Click Open Directory Utility.
Select the Active Directory option, then click Apply.
Specify the Active Directory domain, then click Bind.
Specify the local administrator credentials, then click OK.
After you join the Mac workstation to the DSfW domain, you can use DSfW user accounts to log in to the Mac workstation.
Click Admin > Other.
Specify the domain credentials with which you want to join the domain.
After joining a Mac 10.10 workstation to a DSfW domain, logging in to the domain using the domain administrator credentials displays a pop-up to reset the password. Logging fails even if you reset the password. To avoid this, follow the steps given below:
In iManager, select Roles and Tasks > Rights > Modify Trustees.
Select the domain root partition.
Click Assigned Rights for Public Trustee.
Add the pwdChangedTime attribute to the Public Trustee.
Click Add Property.
Select the pwdChangedTime attribute from the Property Name list and click OK.
Select the Inherit check box for the pwdChangedTime attribute.
Restart the DSfW services.
After you join a Mac workstation to a DSfW domain, you can access NSS shares.
Click Go > Connect to server.
Specify the server IP address and the share name that you want to connect to.
Use the information in this section to resolve Mac client issues.
When you attempt to join a Mac client that was previously joined to a domain, the join might fail. This is an intermittent issue. To resolve this issue, you must restart the Mac client.