Network connectivity
Machines running Mavericks or newer should ensure that they turn off the privacy features of IPv6. This can be applied as an immediate change on the running system with
sudo sysctl -w net.inet6.ip6.use_tempaddr=0
To make this change permanently, you should add to /etc/sysctl.conf the line
net.inet6.ip6.use_tempaddr=0
This should be done as it is against CUDN and Janet policy to use network addresses that cannot be traced to a machine and we currently have no way of recording the temporary addresses used by machines on our network.
Setting up a laptop
Follow the links below if you have a laptop and wish to access local services. Laptops should not normally be domain joined.
Setting up a desktop machine
When you have registered your machine, you should email the name of the machine (as it appears in the sharing folder in System Preferences) to sys-admin along with a request to join the machine to the lab authentication domain. This will greatly simplify access to your lab filespace and other resources. When they reply that your machine is enabled to join, you can proceed following the instructions below.
Joining the Active Directory Domain
Ensure that your machine is on the main lab network. Open System preferences and select Accounts.
Click on the Join button to Join a Network account server.
You should enter the machine name in the form show, then for DC Admin User use your CRSID and as the DC Admin password your normal computer laboratory password. Then click on OK and you should see the following on the form you return to:
You should then log out and back in using your domain account. Now go to System Preferences and choose 'Accounts' from the 'System' section and select your user account. Click on 'Allow user to adminster this computer'. You will need to unclick the padlock and supply the administrator password to do this (this will be the account you first created on the machine). When you have done this , log out and back in again to ensure you have appropriate group memberships.
Setting up access to CUPS printers
Login as a local machine administrator using either the local account or following adding administrator rights to your domain account. Start a terminal session (use spotlight and search for Terminal) and in it go to /etc/cups. As root (using sudo) edit or create the file client.conf and add this line:
ServerName cups-serv.cl.cam.ac.uk
File Server access
Your home share should be mounted at startup when you are logged in as a domain user. To see this go to Finder then Preferences and make sure that Hard Discs are selected to be shown on the desktop.
