MSAD Login is a system that connects a Macintosh OS X machine to a Windows server running Active Directory and mounts shares using Samba (SMB).
If you use your Macintosh in a Windows environment that is controlled by a Windows server, MSAD Login can connect to that server allowing you to mount shares or your home drive and get notifications when your password is about to expire (or even when it is has expired). The log in process can use TLS encryption and can also create and renew Kerberos tickets making network connections easier.
MSAD Login's method of logging into a Windows network is very different from the specified method documented by Apple in that accounts are not tied to the server, this means that when you are not connected to the network (e.g. when you are using a laptop on the road) you can still log into your local account and access all your files. You can even pause MSAD Login to stop it refreshing the share list or checking the connection to the server.
Another benefit of MSAD Login is if you accidentally type in the wrong password, you will not be instantly locked out of your Windows account and your Macintosh, which will help keep network administrators happy and save you the hassle of requesting your account to be unlocked.
The major benefit for network administrators, is that no changes are needed in the Active Directory schema to support the Macintosh account and as TLS and Kerberos are supported, the Windows server can keep LDAP signing enabled.
When the MSAD Login system is installed and multiple computers are used, it will keep the password in sync with the server, this means that when the password is changed using another computer you will be informed that the password needs updating.
When the option is used to set the local Macintosh password to the same as the network password, both passwords will be changed when the network password is changed. This option will also change the default keychain password removing the need to manually set the keychain password.
The MSAD Login system can also use accounts that do not expire, such as administrator accounts.
What is new in this release:
- Fixed a problem where checking the share list could hang for a long time and make the menu unresponsive.
- Fixed a high CPU issue with the account alert.
- Changed the main helper to use a newer Samba for improved connections.
- Fixed issues under Mountain Lion and Gatekeeper.
- Added support for true Kerberos ticket support.
- Added support for clustered shares.
- Fixed a TLS issue and provided optional support.
- Added support for listing shares not part of the logon server.
- Added support for pausing connections in the menu.
- Added starting and stopping in the preferences.
- Fixed a Unicode share name issue.
Limitations:
30-day or 50-mounts trial
Comments not found