Xsan 2.2: "Incorrect search policy" appears in Xsan Admin
In Xsan Admin 2.2, computers may be reported as having an "Incorrect search policy" if the Directory Service search policy on the Xsan node is changed.
If Xsan manages your users and groups, or if you chose to connect to an existing Open Directory domain in Server Assistant, then Xsan Admin will monitor the Directory Service search policy on each Xsan node. In these two situations, Xsan Admin expects each nodes' search policy to contain only the server(s) that Xsan Admin adds to the computers.
To correct the search policy, hover the cursor over the warning to see the tool tip. The tool tip will indicate which directory domains are included or missing in the computer's search policy.
Mac OS X v10.5.8 client or server
On computers running Mac OS X v10.5.8 or Mac OS X Server v10.5.8, you can change the Directory Service search policy using Directory Utility.
Add or remove directory domains to or from the search policy as appropriate.
Mac OS X v10.6 client or server
On computers running Mac OS X v10.6 or Mac OS X Server v10.6, you can change the search policy this way:
- Open Account preferences (in System Preferences).
- Click Login Options.
- Click the "Edit..." button next to Network Account Server.
- Add or remove directory domains to or from the search policy as appropriate.
It is important to maintain the same search policy on all Xsan nodes. Inconsistent search policies on Xsan nodes can result in users having difficulties accessing or modifying files on the Xsan volume, or allow some users undesired access to restricted data.