Languages

Archived - Final Cut Server 1.5: Configuring for use with Windows Active Directory

To allow access to Windows Active Directory users and groups, you must modify the Final Cut Server settings preference file. Also, on Mac OS X Leopard, Mac OS X Leopard Server, and Mac OS X Snow Leopard, you must manually add Final Cut Server into the Kerberos realm.

Important: After following the below steps to configure Final Cut Server to authenticate using Active Directory, only Active Directory users who are members of Active Directory groups will be able to log in and use Final Cut Server.

Macintosh clients authenticating via Active Directory need to be running Mac OS X v10.5.8 or later.

This article has been archived and is no longer updated by Apple.

To modify the Final Cut Server settings preference file to allow access to Windows Active Directory users and groups:

  1. Log in as the root user.
  2. In the Terminal application, run the following command:

defaults write /Library/Preferences/com.apple.FinalCutServer.settings "AUTH_TYPE" -int 1

  1. Stop and Start Final Cut Server services in Final Cut Server System Preferences.


To add the Final Cut Server system to the Kerberos realm on Mac OS X Leopard, Mac OS X Leopard Server, and Mac OS X Snow Leopard systems:

  1. Log in as the root user.
  2. In Terminal, run the following command (entered as a single line in Terminal):

cd /Library/Application\ Support/Final\ Cut\ Server/Final\ Cut\ Server.bundle/Contents/Resources/sbin

  1. After the command in step 2 is complete, run the following command (entered as a single line in Terminal):

./adprincadd.pl -dc <fully qualified hostname of AD server> fcsvr/<fully qualified hostname of FCSVR machine>

Example: For a setup where the Domain is example.com, the Active Directory hostname is ad.example.com, and the Final Cut Server hostname is finalcutserver.example.com, the syntax would be:

./adprincadd.pl -dc ad.example.com fcsvr/finalcutserver.example.com

Additional Information

Using Kerberos for authentication requires that all Final Cut Server client systems be bound to the directory service hosting the Kerberos realm. If you are connected to an Active Directory domain, add an Active Directory group to Group Permissions and assign the group as admin. Then, enter the fully qualified domain name for the Final Cut Server system in the "Server:" field of the Final Cut Server client software. Finish by logging in as an Active Directory user that is part of that Active Directory group.

If you are authenticating via Active Directory to Final Cut Server from Windows clients, please refer to Active Directory bound Windows clients require a custom Kerberos configuration file for authentication.

This information is also available in the FInal Cut Server Setup Guide included with your software and also available here.

To reconfigure the Final Cut Server settings preference file to allow access to Local and Open Directory users and groups instead of Active Directory:

  1. Log in as the root user.
  2. In the Terminal application, run the following command:

    defaults write /Library/Preferences/com.apple.FinalCutServer.settings "AUTH_TYPE" -int 3

  3. Stop and start Final Cut Server services in Final Cut Server System Preferences.
Important: Information about products not manufactured by Apple is provided for information purposes only and does not constitute Apple’s recommendation or endorsement. Please contact the vendor for additional information.
Last Modified: Jul 30, 2013
Helpful?
Yes
No
  • Last Modified: Jul 30, 2013
  • Article: HT3818
  • Views:

    577
  • Rating:
    • 20.0

    (1 Responses)

Additional Product Support Information

Start a Discussion
in Apple Support Communities
See all questions on this article See all questions I have asked