学步园

借鉴一下别人的脚本：

#!/bin/sh</p> <p># Patrick Gallagher<br /> # http://www.macadmincorner.com<br /> # Updated 12/11/2009</p> <p># These variables need to be configured for your env<br /> odAdmin="" #enter your OD admin name between the quotes<br /> odPassword="" # Enter your OD admin password between the quotes<br /> domain="od.school.edu" # FQDN of your OD domain<br /> oldDomain="oldod.school.edu" # If moving from another OD, enter that FQDN here<br /> oldODip="111.222.333.444" # Enter the IP of your old OD<br /> ADdomain="ad.school.edu" # Enter your AD domain here<br /> computerGroup=computers # Add appropriate computer group you want machines to be added to, case sensitive </p> <p># These variables probably don't need to be changed<br /> computerName=`/usr/sbin/scutil --get LocalHostName`<br /> nicAddress=`ifconfig en0 | grep ether | awk '{print $2}'`<br /> check4OD=`dscl localhost -list /LDAPv3`<br /> check4ODacct=`dscl /LDAPv3/${domain} -read Computers/${computerName} RealName | cut -c 11-`<br /> check4AD=`dscl localhost -list /Active/ Directory`<br /> osversionlong=`sw_vers -productVersion`<br /> osvers=${osversionlong:3:1}</p> <p># Check if on OD already<br /> if [ "${check4OD}" == "${domain}" ]; then<br /> echo "This machine is joined to ${domain} already."<br /> odSearchPath=`defaults read /Library/Preferences/DirectoryService/SearchNodeConfig "Search Node Custom Path Array" | grep $domain`<br /> if [ "${odSearchPath}" = "" ]; then<br /> echo "$domain not found in search path. Adding..."<br /> dscl /Search -append / CSPSearchPath /LDAPv3/$domain<br /> sleep 10<br /> fi<br /> else if [ "${check4OD}" == "${oldDomain}" ]; then<br /> echo "Removing from ${oldDomain}"<br /> dsconfigldap -r "${oldDomain}"<br /> dscl /Search -delete / CSPSearchPath /LDAPv3/"${oldDomain}"<br /> dscl /Search/Contacts -delete / CSPSearchPath /LDAPv3/"${oldDomain}"<br /> echo "Binding to $domain"<br /> dsconfigldap -v -a $domain -n $domain<br /> dscl /Search -create / SearchPolicy CSPSearchPath<br /> killall DirectoryService<br /> else if [ "${check4OD}" == "${oldODip}" ]; then<br /> echo "Removing from ${oldODip}"<br /> dsconfigldap -r "${oldODip}"<br /> dscl /Search -delete / CSPSearchPath /LDAPv3/"${oldODip}"<br /> dscl /Search/Contacts -delete / CSPSearchPath /LDAPv3/"${oldODip}"<br /> echo "Binding to $domain"<br /> dsconfigldap -v -a $domain -n $domain<br /> dscl /Search -create / SearchPolicy CSPSearchPath<br /> killall DirectoryService<br /> else<br /> echo "No previous OD servers found, binding to $domain"<br /> dsconfigldap -v -a $domain -n $domain<br /> dscl /Search -create / SearchPolicy CSPSearchPath<br /> sleep 10<br /> dscl /Search -append / CSPSearchPath /LDAPV3/$domain<br /> echo "Killing DirectoryService"<br /> killall DirectoryService<br /> fi<br /> fi<br /> fi</p> <p>if [ "${check4ODacct}" == "${computerName}" ]; then<br /> echo "This machine has a computer account on ${domain} already."<br /> else<br /> echo "Adding computer account to ${domain}"<br /> dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/${domain} -create /Computers/${computerName} ENetAddress "$nicAddress"<br /> dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/${domain} -merge /Computers/${computerName} RealName ${computerName}<br /> # Add computer to ComputerList<br /> dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/${domain} -merge /ComputerLists/${computerGroup} apple-computers ${computerName} </p> <p> # Set the GUID<br /> GUID="$(dscl /LDAPv3/${domain} -read /Computers/${computerName} GeneratedUID | awk '{ print $2 }')"<br /> # Add to computergroup<br /> dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/${domain} -merge /ComputerGroups/${computerGroup} apple-group-memberguid "${GUID}"<br /> dscl -u "${odAdmin}" -P "${odPassword}" /LDAPv3/${domain} -merge /ComputerGroups/${computerGroup} memberUid ${computerName}<br /> fi</p> <p>sleep 25 # Give DS a chance to catch up</p> <p># Fix DS search order<br /> echo "Checking DS search order..."<br /> if [ "${check4AD}" == "${adDomain}" ]; then<br /> dsconfigad -alldomains enable<br /> dscl /Search -delete / CSPSearchPath "/Active Directory/${adDomain}"<br /> dscl /Search/Contacts -delete / CSPSearchPath "/Active Directory/${adDomain}"<br /> dscl /Search -append / CSPSearchPath "/Active Directory/All Domains"<br /> if [ $osvers -eq 4 ]; then<br /> echo "OS detected as ${osversionlong}"<br /> echo "Setting AD, then OD to search order..."<br /> dscl localhost changei /Search CSPSearchPath 2 "/Active Directory/All Domains"<br /> dscl localhost changei /Search CSPSearchPath 3 /LDAPv3/$domain<br /> dscl /Search/Contacts -append / CSPSearchPath "/Active Directory/All Domains"<br /> else if [[ ${osvers} -eq 5 || 6 ]]; then<br /> echo "OS detected as ${osversionlong}"<br /> echo "Setting OD, then AD to search order..."<br /> dscl localhost changei /Search CSPSearchPath 3 "/Active Directory/All Domains"<br /> dscl localhost changei /Search CSPSearchPath 2 /LDAPv3/$domain<br /> dscl /Search/Contacts -append / CSPSearchPath "/Active Directory/All Domains"<br /> fi<br /> fi<br /> else if [ "${check4AD}" == "All Domains" ]; then<br /> dscl /Search -append / CSPSearchPath "/Active Directory/All Domains"<br /> sleep 15<br /> if [ $osvers -eq 4 ]; then<br /> echo "OS detected as ${osversionlong}"<br /> echo "Setting AD, then OD to search order..."<br /> dscl localhost changei /Search CSPSearchPath 1 "/Active Directory/All Domains"<br /> dscl localhost changei /Search CSPSearchPath 2 /LDAPv3/$domain<br /> else if [[ ${osvers} -eq 5 || 6 ]]; then<br /> echo "OS detected as ${osversionlong}"<br /> echo "Setting OD, then AD to search order..."<br /> dscl localhost changei /Search CSPSearchPath 2 /LDAPv3/$domain<br /> dscl localhost changei /Search CSPSearchPath 3 "/Active Directory/All Domains"<br /> dscl /Search/Contacts -append / CSPSearchPath "/Active Directory/All Domains"<br /> fi<br /> fi<br /> fi<br /> fi </p> <p>echo "Finished. Exiting..."<br /> exit 0

From: