Computer Laboratory

Information for Mac OS X users

Network connectivity

You should configure your machine to use DHCP to obtain its IP setup for whichever of the wireless or UTP networks you choose to use. Then request an address along using the web form.

Machines running Mavericks (or later) should ensure that they turn off the privacy features of IPv6. This can be applied as an immediate change on the running system with

sudo sysctl -w net.inet6.ip6.use_tempaddr=0

To make this change permanently you can add to /etc/sysctl.conf the line


This should be done as it is against CUDN and Janet policy to use network addresses that cannot be traced to a machine and we currently have no way of recording the temporary addresses used by machines on our network. (In practice, this is only done for desktop work stations; nobody bothers for personal laptops.)

Setting up a laptop

Follow the links below if you have a laptop and wish to access local services. Laptops should not normally be domain joined.

Setting up a desktop machine

When you have registered your machine you should then email the name of the machine (as it appears in the sharing folder in System Preferences to [Javascript required] along with a request to enable you to join the machine to the lab authentication domain. This will greatly simplify access to your lab filespace and other resources. When they reply that your machine is enabled to join you can then proceed following the instructions below.

Joining the AD Domain

Ensure that your machine is on the main lab network. Open System preferences and select Accounts.

system preferences accounts

Click on the Join button to Join a Network account server.

join domain

You should enter the machine name in the form show, then for AD Admin User use your CRSID and as the AD Admin password your normal computer laboratory password. You are not a Domain Administrator but have delegated rights for your machine account only to allow you to join and leave the domain. Then click on OK and you should see the following on the form you return to

domin joined

You should then logout and login using your domain account. Now go to System Preferences and choose 'Accounts' from the 'System' section and select your user account. Click the Allow user to adminster this computer. You will need to unclick the padlock and supply the administrator password to do this (this will be the account you first created on the machine). When you have done this logout and back in again to ensure you have appropriate group memberships.

Setting up access to CUPS printers

Login as a local machine administrator using either the local account or following adding administrator rights to your domain account. Start a terminal session (use spotlight and search for Terminal) and in it go to /etc/cups. As root (using sudo) edit or create the file client.conf and add this line:


File Server access

Your home share should be mounted at startup when you are logged in as a domain user. To see this go to Finder then Preferences and make sure that Hard Discs are selected to be shown on the desktop.

finder preferences

See also