0
votes
0answers
42 views

OD Upgrade: The Home Folder Can't Be Accessed

We moved our Open Directory server from an Xserve running 10.6.8 to a new Mac Mini running 10.9 with Server installed. After much ado, this was done as a fairly clean install. Meaning instead of ...
0
votes
0answers
35 views

10.9 Server DNS Server Having Intermittent Issues with Open Directory

I work for a school and we're undertaking the large task of moving from Xserves running 10.6.8 to Mac Minis running 10.9. I have a lot of experience with OS X Server (I held ACSA up until they ditched ...
2
votes
1answer
155 views

Open Directory and SAML Identity Provider

Our office has switched almost entirely from Windows to Mac OS X, and our local server is due for replacement. We use Active Directory basically just for user authentication. We're considering ...
0
votes
0answers
179 views

Open Directory crashing periodically on Mac Server OS X 10.8

I've had quite a fight with the server I'm trying to configure in the last few weeks and thanks to serverfault I've been able to smoke out a few issues (thank you for all the help on that!) I'm a ...
0
votes
1answer
111 views

How to recognize windows' permissions on a OSX server share

I have a server running OSX (Mountain Lion), accessed by a Windows 7 box. Investigating a permissions problem from the Win client, I open the permissions dialog on a network share's directory and see ...
1
vote
2answers
339 views

Open Directory Password Location and Encryption Method

Background: I would like to use Google Apps Directory Sync (GADS) to synchronize user accounts and passwords from a Mac OS X Server (10.9) running Open Directory. GADS is installed on a Ubuntu 12.04 ...
0
votes
1answer
118 views

Syncrepl support in Mac OSx 10.8 OpenDirectory

From Ryan Faas's article Apple's OpenDirectory does support overlays but I can't seem to enable the syncprov or accesslog overlays. Adding following block to slapd_macosxserver.conf turns the server ...
0
votes
1answer
160 views

How to deal with BYOD users with OSX Server (10.8) and Mobile Accounts

I am moving over to an open directory setup with users able to create mobile profiles to allow for syncing of their home directory on their own machines and the server. However, since we have been ...
2
votes
0answers
105 views

SBS 2011 Essentials and too many new Mac users

We currently have about 15 users on a Windows SBS 2011 Essentials Server. I've just been informed that we plan to bring aboard about 15 more users that will be using Macs. We'll be using a Mac ...
2
votes
1answer
3k views

Kerberos broken when upgrading Snow Leopard Server to Mountain Lion

I work for a small company where there's no dedicated system admin. I was tasked with upgrading our file and calendar server to 10.8, which I did by upgrading the OS then installing the server tools ...
4
votes
1answer
367 views

What Is The Recommended Way To Backup OS X Open Directory?

We have recently bought a Mac Mini preloaded with Mountain Lion Server to use as an Open Directory master, and I'm not clear on how the data for Open Directory is supposed to be backed up. We are ...
3
votes
0answers
298 views

Open directory, external NFS file shares and automounter

This may be a big one. I've set up Open Directory on Mac OSX 10.8 (Mountain Lion) with users to allow everyone on the network to logon to any client with these centrally stored users. Before this ...
0
votes
0answers
1k views

Creating an OS X Mountain Lion 10.8 OpenDirectory database with a specific domain in mind

Mountain Lion Server has been one of the most infuriating things ever recently. Above and beyond tons of crashing I've been completely unable to do the following in a way that makes sense to both me ...
2
votes
0answers
615 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
0
votes
4answers
8k views

Kerberos Login Failed: Cannot resolve network address for KDC in requested realm - Kerio and Open Directory

I'm attempting to connect Kerio to an Open Directory instance. I'm using kinit to test the setup, and I get the following: $ kinit -V -S host/server.domain.co.uk@server.domain.co.uk ...
0
votes
1answer
1k views

OSX Server 10.5 - Cannot log into Workgroup Manager - diradmin password is correct

I've got a setup where I am trying to rescue a broken AD. We can no longer authenticate on the Workgroup manager, with passwords being rejected all the time - even though it is correct. I can connect ...
1
vote
2answers
1k views

“Password Server: Stopped” on Mac OS Lion Server. Stops with error -1 during startup

Since I've restored the Open Directory from an archive because my Server crashed and the DB was corrupt. The password server does not start anymore. The log looks like this: Feb 14 2012 21:41:20 ...
1
vote
0answers
251 views

Setting up single sign-on between Mac client & OS X Server

I'm not "single sign-on" is the right terminology for what I'm trying to accomplish, so please correct me if I'm wrong. We have a Mac OS X Server and Mac clients. Kerberos and Open Directory are ...
2
votes
0answers
350 views

Why isn't Samba authenticating an Open Directory username that arrives in all caps?

I have a Mac OS X 10.6 server that acts as an Open Directory master and allows file sharing from the Open Directory users' home directories. Today, for unknown reasons, it's stopped permitting our ...
0
votes
1answer
2k views

How to use Open Directory login credentials when offline?

When using Active Directory, I can log into a machine while on the network using my AD credentials, then later take that machine offline and still be able to log into it. I'd like to do the same ...
3
votes
1answer
2k views

Connecting FreeNAS 8 to Mac OS X Lion LDAP Server

I currently have Mac OS X Lion Server running from a MacMini and want to use it purely as an LDAP server for authentication for FreeNAS 8. I have FreeNAS setup and running on a VM, all features ...
1
vote
0answers
114 views

Problems with virtual eth interfaces on an Mac 10.6 OD Master

I've been trying to setup multiple virtual interfaces (virtual ethernet ports) on a 10.6.8 OS X Server - this server is our Open Directory master. I want to set up additional IPs on the server because ...
0
votes
1answer
1k views

Difficulties setting up OD replica on Lion server

I am attempting to set up an Open Directory replica server in Mac OS X Lion server 10.7.1 I have the master set up and working (as far as I can tell) fine. When I go to the second machine and attempt ...
0
votes
1answer
760 views

Open Directory over SSL / Mobile Accounts not working on Snow Leopard Server

I have a fully updated Mac OS X server 10.6.8 running on a Mac mini which I have open directory running on. I have 2 problems with the setup that the manual doesn't deal with and I can find any ...
2
votes
2answers
414 views

Can't log into OS X Server after restart

Just restarted our Mac OS X Server (Leopard), and we are no longer able to log into the default user account, srvadmin! This is an open directory account. We are presented with the login screen, but ...
1
vote
0answers
327 views

crontabs not firing on mac osx server under a non root account

I'd like to run a crontab but it is never fired. It's on a mac osx server 10.5.6 Accounts on mac are not defined in /etc/passwd. So their is no use in adding my account in /usr/lib/cron/cron.allow. I ...
2
votes
2answers
3k views

How to rebuild/restart kerberos server on Mac 10.6.5 Server

I had DNS trouble which was causing delays for Open Directory users logging in from the GUI on their macs. I've fixed the DNS problems and the delay still remains. Is there a way to restart, or ...
1
vote
1answer
2k views

Mac OS X Server Open Directory does not push Software Update settings to clients

I have an Xserve G5 running Mac OS X Server 10.5.8 configured as an Open Directory master. I have also enabled and configured Software Update service on the machine. The SUS is configured to serve ...
7
votes
2answers
228 views

Prompt for user group when logging into OSX domain

When a user is a member of more than one group, when logging in to a 10.6 machine, it shows a prompt asking for what group to apply settings for. We're using the groups to mount different shares, ...
4
votes
2answers
1k views

How do I determine if an Apple Open Directory user is disabled via LDAP?

I have an Open Directory user that has the "Access Account" box unchecked in Workgroup Manager so they cannot login. Is there a way to determine this using an LDAP query? It would also be good to be ...
2
votes
1answer
789 views

Correct/Optimized Binding of Open Directory clients?

I have have three locations with an OD Master in our primary location and OD Replicas in each off-site location. I've always bound clients to our OD Master because the Open Directory Admin ...
0
votes
1answer
385 views

How to build a PDC connected to Open DIrectory on OS X 10.6

Since OS X Server has an older version of Samba that cannot be used with Windows 7, I want to setup a newer (3.5.5) Samba server as a PDC. I want to continue to use Open Directory on the 10.6 OS X ...
3
votes
1answer
186 views

Lag in MCX (Workgroup Manager) controlled Macs

At the beginning of the day and on semi-random days, some of my Mac users are experiencing heavy lag. For example, 5-10 minutes to login, several minutes for Safari to load, visible delays while ...
2
votes
1answer
118 views

WinXP logins no longer fully functional

Summary: Users with Roaming Profiles on my XP workstations appear to be unable to do various things, e.g. set a default printer, disable toolbars in IE8, or see icons on the left side of the Start ...
1
vote
2answers
823 views

Manage same MCX setting on multiple Open Directory Masters

In the school division I work for, we have an Open Directory Master in each of a dozen schools. There are settings I'd like to manage in multiple directories for multiple work or computer groups. ...
2
votes
2answers
11k views

How to resolve “HTTP/1.1 403 Forbidden” errors from iCal/CalDAV server after upgrade to Snow Leopard Server?

We recently upgraded our Open Directory Master & Replica to Mac OS X 10.6.4 Snow Leopard Server. We had a mismatched server FQDN & LDAP Search Base/Kerberos Realm, so we exported all users ...
1
vote
2answers
2k views

Ubuntu 10.04: Restrict LDAP Access by Group (OpenDirectory on Mac OS X Server)

In a nutshell, I want to authenticate users of a Ubuntu 10.04 Server against a Mac OS X Server's OpenDirectory LDAP but ONLY allow them access if they are a member of a group on the LDAP side. ...
4
votes
3answers
2k views

Mac OS X Server add server user

What's the recommended way to add a user to Mac OS X Server that doesn't need all the hoopla associated with Workgroup Manager? There are many users pre-configured in Mac OS X Server (www, root, ...
3
votes
2answers
23k views

Listing group members using ldapsearch

Our corporate LDAP directory is housed on a Snow Leopard Server Open Directory setup. I'm trying to use the ldapsearch tool to export an .ldif file to import into another external LDAP server to ...
2
votes
1answer
1k views

Mail Server setup under Mac OS X Server Snow Leopard (10.6)

I'm currently setting up a number of new Xserve boxes running Mac OS X Server Snow Leopard. One of these machines will be replacing our current (ageing) Linux mail server. The Linux box is running an ...
1
vote
1answer
665 views

Leopard Server (10.5.8) Screen Sharing with Open Directory Authentication

I have an OS X 10.5.8 Leopard Server that I manage here in the office. Right now it has just the standard VNC single password style of authentication for authenticating for screen sharing. Our ...
2
votes
2answers
1k views

Locked out of Snow Leopard Server. How do I get back in?

I have an XServe running Snow Leopard Server (10.6.2). It has some local administrator accounts on it and it is also an OpenDirectory master. I noticed earlier today that I was not able to login with ...
1
vote
2answers
4k views

Unable to remove users in Workgroup Manager, they just keep coming back!

When I try to remove a user in the Workgroup Manager on OS X Server 10.6.2, it looks as though the user is removed correctly at first. But when refreshing, the user pops right back into view without ...
1
vote
1answer
797 views

resolving DNS issues behind firewall on OS X Server

I have a problem that has recently broken single sign-on with our Mac clients (10.5 & 10.6) to an OS X Server (10.5). hosts seem to resolve on clients & server both forward & reverse. ...
1
vote
1answer
502 views

dsimport fails to set GeneratedUID for Computers

I'm populating machines into our Apple OpenDirectory (running on a 10.5 Server). My script will output a file like this: 0x0A 0x5C 0x3A 0x2C dsRecTypeStandard:Computers 6 ...
3
votes
3answers
9k views

How can I disable a User Account from the CLI with Mac OS X Server?

Is there any possible solution to disable a User from the CLI e.g. over SSH? There has to be a dscl command for that. Or is there a dsAttrTypeStandard attribute that I can set accordingly? Any ...
2
votes
4answers
7k views

What commands will change Open Directory passwords?

I understand Open Directory to be OpenLDAP + SASL (Password Server) + Kerberos. It appears that OpenLDAP defers to SASL for authentication; I don't know about Kerberos. I want to change user ...
3
votes
5answers
6k views

Mac OS X Server user unable to log in though log appears fine

Trying to troubleshoot a user who is unable to log into our server from a client. Client is bound to server and other users can authenticate. ApplePasswordServer.Server.log says the following when ...
3
votes
4answers
4k views

OS X Login Authentication Against Leopard Server

I am doing a few tests with OS X Server before I have to do a deploy in a few months. I have configured Open Directory, and created a few users. I've configured Directory Utility on a 10.5 client, ...