Open Directory is an ldap-based Apple technology that is the centerpiece of its OS X Server product. It manages users, groups, computers, policies, managed settings, authentication and more.

learn more… | top users | synonyms

1
vote
1answer
88 views

Open Directory and SAML Identity Provider

Our office has switched almost entirely from Windows to Mac OS X, and our local server is due for replacement. We use Active Directory basically just for user authentication. We're considering ...
0
votes
0answers
115 views

Open Directory crashing periodically on Mac Server OS X 10.8

I've had quite a fight with the server I'm trying to configure in the last few weeks and thanks to serverfault I've been able to smoke out a few issues (thank you for all the help on that!) I'm a ...
2
votes
1answer
421 views

OSX Server 3, Mac clients binding to OD and Profile Manager failing

I've made a setup containing a Mac Mini with OSX Server 3 (Mavericks 10.9.2) using Open Directory and Profile Manager (Mail, etc all set up and working). Now the thing is, internally on the local ...
0
votes
1answer
85 views

How to recognize windows' permissions on a OSX server share

I have a server running OSX (Mountain Lion), accessed by a Windows 7 box. Investigating a permissions problem from the Win client, I open the permissions dialog on a network share's directory and see ...
1
vote
2answers
288 views

Open Directory Password Location and Encryption Method

Background: I would like to use Google Apps Directory Sync (GADS) to synchronize user accounts and passwords from a Mac OS X Server (10.9) running Open Directory. GADS is installed on a Ubuntu 12.04 ...
0
votes
1answer
104 views

Accessing Active Directory list on Apple Remote Desktop 3

We are working on a project where a software needs to be deployed on a set of Mac clients connected to a Windows Active Directory server. Software will be pushed from a Mac machine using Apple Remote ...
0
votes
1answer
115 views

Syncrepl support in Mac OSx 10.8 OpenDirectory

From Ryan Faas's article Apple's OpenDirectory does support overlays but I can't seem to enable the syncprov or accesslog overlays. Adding following block to slapd_macosxserver.conf turns the server ...
0
votes
1answer
155 views

OSX 10.8 w/ OpenDirectory - Admin log in as user? and switch to Admin?

I now have a OSX 10.8 workstation environment where the clients are bound to OpenDirectory on an OSX 10.6 Server and their home directories are stored on another OSX server. Two questions: Is it ...
0
votes
1answer
151 views

How to deal with BYOD users with OSX Server (10.8) and Mobile Accounts

I am moving over to an open directory setup with users able to create mobile profiles to allow for syncing of their home directory on their own machines and the server. However, since we have been ...
0
votes
0answers
75 views

Debugging logon session errors when using Apple's Golden Triangle integration method

We are using the Golden Triangle setup for integrating our Mac OSX systems using a Lion (10.7) OpenDirectory server and a Windows 2008 Active Directory. We have been unable to modify the home ...
2
votes
0answers
103 views

SBS 2011 Essentials and too many new Mac users

We currently have about 15 users on a Windows SBS 2011 Essentials Server. I've just been informed that we plan to bring aboard about 15 more users that will be using Macs. We'll be using a Mac ...
2
votes
1answer
3k views

Kerberos broken when upgrading Snow Leopard Server to Mountain Lion

I work for a small company where there's no dedicated system admin. I was tasked with upgrading our file and calendar server to 10.8, which I did by upgrading the OS then installing the server tools ...
4
votes
1answer
348 views

What Is The Recommended Way To Backup OS X Open Directory?

We have recently bought a Mac Mini preloaded with Mountain Lion Server to use as an Open Directory master, and I'm not clear on how the data for Open Directory is supposed to be backed up. We are ...
3
votes
0answers
298 views

Open directory, external NFS file shares and automounter

This may be a big one. I've set up Open Directory on Mac OSX 10.8 (Mountain Lion) with users to allow everyone on the network to logon to any client with these centrally stored users. Before this ...
2
votes
1answer
420 views

Mac OSX 10.7 server with 10.6.8 clients - old network accounts work, now ones created since May do not

I have a Mac OS 10.7 server, and a number of 10.6.8 clients in a school. For the last year and half, network accounts could log into the clients with no problem. There is a set of presets in ...
0
votes
0answers
1k views

Creating an OS X Mountain Lion 10.8 OpenDirectory database with a specific domain in mind

Mountain Lion Server has been one of the most infuriating things ever recently. Above and beyond tons of crashing I've been completely unable to do the following in a way that makes sense to both me ...
0
votes
1answer
256 views

Will unbinding a server to an Open Directory Master remove its own file shares

According to this article: http://support.apple.com/kb/TS3180?viewlocale=en_US I am required to remove the ldap binding of my second Mac OS X Lion server before I set it up as a replica server. I ...
1
vote
0answers
224 views

Open Directory authenticated bind succeeds, but creates incomplete record

I have about a dozen Macs running 10.6.7 or 10.6.8, which are all failing to bind properly to my new 10.7.4 Server OD. I can bind them just fine via Directory Utility or dsconfigldap, and it reports ...
1
vote
1answer
167 views

Making a mac network user administrator

I am attempting to setup an open directory authentication system for a small iMac laboratory. The open directory authenticates network users properly and allows a login on the Mac system although ...
2
votes
0answers
580 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
3
votes
1answer
183 views

What are the differences in schemas of main directory servers?

Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished ...
0
votes
4answers
8k views

Kerberos Login Failed: Cannot resolve network address for KDC in requested realm - Kerio and Open Directory

I'm attempting to connect Kerio to an Open Directory instance. I'm using kinit to test the setup, and I get the following: $ kinit -V -S host/server.domain.co.uk@server.domain.co.uk ...
2
votes
1answer
454 views

How can I determine the last time an Open Directory network account was used on Mac OS X 10.7 Server?

How can I determine the last time an Open Directory network account was used? I am completing a user/group audit and am looking to identify users that have not used their network account recently.
3
votes
1answer
514 views

Add memberOf attribute to all users in OpenLDAP on OS X Lion Server Open Directory

Our school's website has the ability to pull user authentication from a LDAP source. They "support" and LDAP. Unfortunately, to pull group membership you must have a memberOf attribute in each users' ...
13
votes
1answer
6k views

Why is Mac OSX Lion losing login/network credentials?

Symptoms At work we have OSX 10.7.3 installed and every once in a while I will see the following behaviors: If the the screen is locked, then multiple tries of the same user/pass are not accepted. ...
8
votes
3answers
334 views

Join ActiveDirectory (Win 2k8R2) to OpenDirectory(Snow Leopard)

The vast majority of questions and so on regarding the interoperability of Active and Open directories involves getting Mac clients to see an AD and auth against it. What we'd like to do is get a ...
11
votes
3answers
8k views

How to use Google Apps as an OD/AD/LDAP Provider

I see tons of solutions for allowing Google Apps to use external AD and LDAP services for login. However, I already have a ton of users setup in Google Apps already, and I'm trying to go the other ...
0
votes
1answer
999 views

OSX Server 10.5 - Cannot log into Workgroup Manager - diradmin password is correct

I've got a setup where I am trying to rescue a broken AD. We can no longer authenticate on the Workgroup manager, with passwords being rejected all the time - even though it is correct. I can connect ...
1
vote
2answers
1k views

“Password Server: Stopped” on Mac OS Lion Server. Stops with error -1 during startup

Since I've restored the Open Directory from an archive because my Server crashed and the DB was corrupt. The password server does not start anymore. The log looks like this: Feb 14 2012 21:41:20 ...
1
vote
0answers
244 views

Setting up single sign-on between Mac client & OS X Server

I'm not "single sign-on" is the right terminology for what I'm trying to accomplish, so please correct me if I'm wrong. We have a Mac OS X Server and Mac clients. Kerberos and Open Directory are ...
2
votes
0answers
338 views

Why isn't Samba authenticating an Open Directory username that arrives in all caps?

I have a Mac OS X 10.6 server that acts as an Open Directory master and allows file sharing from the Open Directory users' home directories. Today, for unknown reasons, it's stopped permitting our ...
0
votes
1answer
1k views

How to use Open Directory login credentials when offline?

When using Active Directory, I can log into a machine while on the network using my AD credentials, then later take that machine offline and still be able to log into it. I'd like to do the same ...
1
vote
1answer
211 views

Can I use Open Directory with a Leopard client and a Lion server?

I've looked around on the interwebs but I can't find any sort of answer. I just picked up a Mac Mini and I'm going to throw Lion Server on it for my network. Most of my computers are running either ...
3
votes
1answer
2k views

Connecting FreeNAS 8 to Mac OS X Lion LDAP Server

I currently have Mac OS X Lion Server running from a MacMini and want to use it purely as an LDAP server for authentication for FreeNAS 8. I have FreeNAS setup and running on a VM, all features ...
1
vote
0answers
114 views

Problems with virtual eth interfaces on an Mac 10.6 OD Master

I've been trying to setup multiple virtual interfaces (virtual ethernet ports) on a 10.6.8 OS X Server - this server is our Open Directory master. I want to set up additional IPs on the server because ...
0
votes
1answer
1k views

Difficulties setting up OD replica on Lion server

I am attempting to set up an Open Directory replica server in Mac OS X Lion server 10.7.1 I have the master set up and working (as far as I can tell) fine. When I go to the second machine and attempt ...
0
votes
1answer
2k views

Automounting AFP Share For OpenDirectory Users (Mac Lion Server)

We're moving all our Mac's from local logins to OpenDirectory logins in an effort to keep everything secure and to also solve issues we have with a Tiger server buggering permissions on an AFP shared ...
0
votes
1answer
751 views

Open Directory over SSL / Mobile Accounts not working on Snow Leopard Server

I have a fully updated Mac OS X server 10.6.8 running on a Mac mini which I have open directory running on. I have 2 problems with the setup that the manual doesn't deal with and I can find any ...
5
votes
3answers
9k views

Does joining a Lion Open Directory with Windows actually work?

According to https://help.apple.com/advancedserveradmin/mac/10.7/#apd52648A71-571A-433C-81A8-2A7792333F22 it's possible to join a Lion Open Directory using a Windows machine, making it think it's ...
0
votes
1answer
2k views

How do I change the administrator username for authenticating to Mac OS X LDAPv3 directory?

We're a small company, and our IT manager is leaving. We trying to change all of the passwords for extra security and the administrator name for authenticating to the LDAP directory is his username ...
2
votes
2answers
406 views

Can't log into OS X Server after restart

Just restarted our Mac OS X Server (Leopard), and we are no longer able to log into the default user account, srvadmin! This is an open directory account. We are presented with the login screen, but ...
1
vote
0answers
321 views

crontabs not firing on mac osx server under a non root account

I'd like to run a crontab but it is never fired. It's on a mac osx server 10.5.6 Accounts on mac are not defined in /etc/passwd. So their is no use in adding my account in /usr/lib/cron/cron.allow. I ...
1
vote
1answer
156 views

2 identical Snow Leopard iMacs. One refreshes MCX records, one does not. Why?

Identical model 2.4 GHz iMacs, using the same image, being imaged in the same exact way on the same subnet. One will refresh and download group policy records (MCX) and the other does not. Both bind ...
2
votes
2answers
3k views

How to rebuild/restart kerberos server on Mac 10.6.5 Server

I had DNS trouble which was causing delays for Open Directory users logging in from the GUI on their macs. I've fixed the DNS problems and the delay still remains. Is there a way to restart, or ...
1
vote
1answer
2k views

Mac OS X Server Open Directory does not push Software Update settings to clients

I have an Xserve G5 running Mac OS X Server 10.5.8 configured as an Open Directory master. I have also enabled and configured Software Update service on the machine. The SUS is configured to serve ...
7
votes
2answers
225 views

Prompt for user group when logging into OSX domain

When a user is a member of more than one group, when logging in to a 10.6 machine, it shows a prompt asking for what group to apply settings for. We're using the groups to mount different shares, ...
4
votes
1answer
2k views

Replication from OSX OpenDirectory to OpenLDAP

I have an OpenDirectory server running on an OSX Server machine, and I'd like to increase the reliability of the service by having a slave server. The problem is, I only have 1 OSX Server but I have ...
2
votes
2answers
211 views

utility native to OS X for administering AD accounts (without “magic triangle”)

EDIT: So far I have explored Centrify Suite (Spoke with a rep who didnt believe they offered a solution for this) Thursby ADmitMac (I have seen evidence that a tool exsists, but I'm failing to find ...
4
votes
2answers
1k views

How do I determine if an Apple Open Directory user is disabled via LDAP?

I have an Open Directory user that has the "Access Account" box unchecked in Workgroup Manager so they cannot login. Is there a way to determine this using an LDAP query? It would also be good to be ...
2
votes
1answer
778 views

Correct/Optimized Binding of Open Directory clients?

I have have three locations with an OD Master in our primary location and OD Replicas in each off-site location. I've always bound clients to our OD Master because the Open Directory Admin ...