2
votes
1answer
72 views

How can I force a mac mobile account user to be logged out or locked out when their LDAP account is disabled?

I have a FREEIPA LDAP server and a Mavericks Client. I have bound my Mac to my ldap and created a mobile account. What I want is when someone is disabled it logs out the user or locks the screen.
0
votes
0answers
38 views

How can I set path for non-interactive user authenticated using LDAP?

On a Mac running OSX 10.7.5, I need to set the PATH for non-interactive users who connect via ssh and are authenticated using LDAP. It's the same question that was asked (and answered) here: Updating ...
1
vote
3answers
162 views

Reset Mac OS X Workstation After Logout

I'm setting up a computer lab in a private school. All the students have LDAP login credentials and they stored all their files on separate shared servers. After the student logs out, I would like the ...
0
votes
1answer
155 views

OSX 10.8 w/ OpenDirectory - Admin log in as user? and switch to Admin?

I now have a OSX 10.8 workstation environment where the clients are bound to OpenDirectory on an OSX 10.6 Server and their home directories are stored on another OSX server. Two questions: Is it ...
0
votes
1answer
1k views

OS X Server with Open Directory and Network Configuration

I am trying to use a Mac Mini as an Open Directory domain, however it fails on the Open Directory Setup. The exact error from the log is a below: Server[308]: An error occurred while configuring ...
4
votes
2answers
198 views

OSX Server - How to set environment variable on network user login

I have a group of users on my server, "Developers", and I would like an environment variable to be set for them whenever they login. More specifically, when anyone in this group logs in, I would ...
0
votes
1answer
256 views

Will unbinding a server to an Open Directory Master remove its own file shares

According to this article: http://support.apple.com/kb/TS3180?viewlocale=en_US I am required to remove the ldap binding of my second Mac OS X Lion server before I set it up as a replica server. I ...
0
votes
1answer
367 views

How to compile PHP with ldap support in PHP in a Mac ports Environment?

I had originally installed the LAMP stack using Mac Ports. Another project requires me to enable LDAP support. How do I get about installing it using Mac Ports? My PHP info file has no mention of ...
1
vote
2answers
1k views

Can't contact LDAP server remotely from Mac

I'm trying to configure a LDAP server with some basic security parameters, including TLS and required authenticated binding. I have started the server, and can access it from localhost with the ...
0
votes
1answer
876 views

It looks like somebody is using my Mac OS X server to brute force attack another server which is LDAP. What can I do to stop it?

An LDAP server on another is reporting an unusually large number of attempts to read the LDAP directory and attempting a number of users, all of which look like hacking attempts to read user/password ...
1
vote
1answer
164 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
1
vote
1answer
1k views

LDAP User Management Tool for Mac 10.7.1

I have been using Luma on Linux to create and manage LDAP user accounts. I've now a macbook pro, and am looking for an equivalent program for Macosx - something that will automatically and correctly ...
8
votes
2answers
612 views

What the heck is really going on in these Lion LDAP vulnerability reports?

Just read a Slashdot thread on LDAP brokenness on OSX. Can anyone explain exactly what is being secured by OpenLDAP and why anything other than data stored on a Lion machine might be at risk? A quote ...
0
votes
2answers
116 views

Cannot authenticate to 10.6 server

I have an OS X 10.6. server that I have created 400 users accounts on. It is configured as an Open Directory Master - Home Accounts were created with LDAP and can I see the Home Accounts on the share ...
5
votes
3answers
9k views

Does joining a Lion Open Directory with Windows actually work?

According to https://help.apple.com/advancedserveradmin/mac/10.7/#apd52648A71-571A-433C-81A8-2A7792333F22 it's possible to join a Lion Open Directory using a Windows machine, making it think it's ...
0
votes
1answer
2k views

How do I change the administrator username for authenticating to Mac OS X LDAPv3 directory?

We're a small company, and our IT manager is leaving. We trying to change all of the passwords for extra security and the administrator name for authenticating to the LDAP directory is his username ...
0
votes
0answers
1k views

How to migrate OSX Open Directory users/passwords from 10.5 --> 10.6 using slapcat and mkpassdb

I have an OSX 10.5 Leopard Server Open Directory master. I have an OSX 10.6 Snow Leopard Server Open Directory master into which I want to migrate all users. Stipulate that I don't want to use the ...
6
votes
3answers
401 views

Centralised Authentication - Recommendations?

I have a challenge presented before me, and that is to centralise authentication. Period. That's because me and my big mouth said I like LDAP, and anything can authenticate against it. I have pretty ...
3
votes
3answers
2k views

Is there an open-source alternative to Apple Open Directory?

On my company's network there are a small collection of iMacs. Currently they use Active Directory. We looked in to Apple Open Directory, but $500 for a copy of OSX Server (not to mention the Apple ...
1
vote
2answers
635 views

Able to configure/compile PHP --with-ldap, but LDAP is not listed in phpinfo()

I am trying to compile PHP with LDAP support using these lines: ./configure --prefix=/app/php --with-ldap=/usr sudo make sudo make install Everything appears to install fine without ...
1
vote
1answer
294 views

Can I extend the schema for my openldap server to store MCX records?

I'm beginning to deprecate my Apple XServers and thus MacOSX Server as well. I'm currently using AD for my authentication and authorization, and my Mac OS X Server box to hold the MCX records for the ...
0
votes
0answers
411 views

Windows server 2003SP2 as LDAP replica master for Mac OSX 10.6

we have a single domain controller with Windows 2003 with few child. All the users are in the main DC. We have already created a connection from AD to Mac Xserve 10.6 and can read all the users, but: ...
0
votes
0answers
395 views

Change a managed client to non-manged on Snow Leorpard

Is there a way to change a managed client account (on Snow Leopard) to an unmanaged account? The problem here is that the server broke down and now the client is unable to login. I can access the ...
2
votes
1answer
642 views

Mac OS X 10.5/6, authenticate against by NIS or LDAP when both servers have your username

We have an organization-wide LDAP server and a department-only NIS server. Many users have accounts with the same name on both servers. Is there any way to get Leopard/Snow Leopard machines to query ...
2
votes
0answers
2k views

TLS (STARTTLS) Failure After 10.6 Upgrade to Open Directory Master

Environment: Mac OS X 10.6.3 install/import of a MacOS X 10.5.8 Open Directory Master server. After that upgrade, LDAP+TLS fails on our MacOS X 10.5, 10.6, CentOS, Debian, and FreeBSD clients ...
0
votes
2answers
167 views

Active Directory or Mac configuration. Where to look?

I m a student at a university. There is a computer lab which has Mac computers. There is citrix account which is kinda VPN to school network. There is putty in citrix applications. When i use putty ...
2
votes
2answers
715 views

Snow Leopard Hangs when Using OpenLDAP on Linux for Authentication

We have a new iMac on Snow Leopard authenticating against an OpenLDAP directory. Homes are on (automounted) NFSv3 (Linux, kernel-server). NFS seems to work pretty well (if a bit slow, but we don't ...
1
vote
3answers
3k views

OS X Mounting Samba shares using logon script - Using Open LDAP

Is it possible to mount a Samba share at logon using a standard OS X logon script, when using an Open LDAP directory for authentication? Obviously you can get the username from the $1 variable, but ...
2
votes
2answers
2k views

Using Linux & Open LDAP for a Mac Network

I'm looking for resources/suggestions/experience on administering a medium sized network of Macs (300ish) using Open LDAP on Linux rather than using Open or Active Directory. Would like the following ...