Mac OS X 10.6 Server Admin: Magic Triangle General Setup Overview
Here is a summary of the general tasks you perform to set up a magic triangle with an Active Directory and Open Directory server.
Make sure your Active Directory server and its DNA service is properly configured and running.
Use Server Admin to turn the Open Directory service on. After the service is turned on you can configure Open Directory service settings. For more information about turning on Open Directory service, see Turning Open Directory On.
To set up servers that won’t get authentication and other administrative information from a directory service, see Setting Up a Standalone Directory Service.
Use Account preferences (or Directory Utility for advanced connections) to connect your standalone directory server to your Active Directory server, see Setting Up a Connection to a Directory Server.
Make your standalone directory server an Open Directory masters, see Setting Up an Open Directory Master.
Disable Kerberos on your Open Directory Master server to avoid conflicts with your Active Directory Kerberos realm, see Disabling Kerberos After Setting Up an Open Directory Master.
Kerberize your Open Directory server services with the Kerberos realm of your Active Directory server, see About Kerberized Services and Kerberizing Services with an Active Directory Server.
Use Account preferences (or Directory Utility for advanced connections) to connect your Mac OS X client computers to both the Active Directory and Open Directory servers, see Connecting Clients to Directory Servers and Configuring Access to Directories.