The opendirectory tag has no wiki summary.
1
vote
0answers
36 views
Setting up single sign-on between Mac client & OS X Server
I'm not "single sign-on" is the right terminology for what I'm trying to accomplish, so please correct me if I'm wrong.
We have a Mac OS X Server and Mac clients. Kerberos and Open Directory are ...
1
vote
0answers
40 views
Why isn't Samba authenticating an Open Directory username that arrives in all caps?
I have a Mac OS X 10.6 server that acts as an Open Directory master and allows file sharing from the Open Directory users' home directories. Today, for unknown reasons, it's stopped permitting our ...
0
votes
1answer
40 views
How to use Open Directory login credentials when offline?
When using Active Directory, I can log into a machine while on the network using my AD credentials, then later take that machine offline and still be able to log into it.
I'd like to do the same ...
1
vote
1answer
40 views
Can I use Open Directory with a Leopard client and a Lion server?
I've looked around on the interwebs but I can't find any sort of answer.
I just picked up a Mac Mini and I'm going to throw Lion Server on it for my network.
Most of my computers are running either ...
1
vote
0answers
59 views
Disable OS X Portable Home Directories for specific hosts for all users, not just individuals? [closed]
Duplicate posting of:
http://apple.stackexchange.com/questions/35653/disable-os-x-portable-home-directories-for-specific-hosts-for-all-users-not-jus
Would it be possible to block any and all ...
2
votes
0answers
277 views
Connecting FreeNAS 8 to Mac OS X Lion LDAP Server
I currently have Mac OS X Lion Server running from a MacMini and want to use it purely as an LDAP server for authentication for FreeNAS 8. I have FreeNAS setup and running on a VM, all features ...
1
vote
0answers
52 views
Problems with virtual eth interfaces on an Mac 10.6 OD Master
I've been trying to setup multiple virtual interfaces (virtual ethernet ports) on a 10.6.8 OS X Server - this server is our Open Directory master. I want to set up additional IPs on the server because ...
0
votes
1answer
330 views
Difficulties setting up OD replica on Lion server
I am attempting to set up an Open Directory replica server in Mac OS X Lion server 10.7.1 I have the master set up and working (as far as I can tell) fine. When I go to the second machine and attempt ...
0
votes
0answers
38 views
Adding a user to a group using Workgroup Manager doesn't seem to add the user to the group
In Workgroup Manager, I created a new user "foo". I then added the user to group "bar", which has unix-permissions access to several folders.
After adding user "foo" to group "bar", user "foo" is ...
0
votes
1answer
942 views
Automounting AFP Share For OpenDirectory Users (Mac Lion Server)
We're moving all our Mac's from local logins to OpenDirectory logins in an effort to keep everything secure and to also solve issues we have with a Tiger server buggering permissions on an AFP shared ...
0
votes
0answers
70 views
Can Snow Leopard automount a AFP home folder from a Tiger Server?
I am running Open Directory Server on a Mac 10.4 Tiger Server, and when I have Tiger clients the share point containing the users' home folders automounted fine. I have bought new Snow Leopard ...
0
votes
1answer
240 views
Open Directory over SSL / Mobile Accounts not working on Snow Leopard Server
I have a fully updated Mac OS X server 10.6.8 running on a Mac mini which I have open directory running on.
I have 2 problems with the setup that the manual doesn't deal with and I can find any ...
0
votes
0answers
86 views
Managing Open Directory based ObjectClasses from 389 Directory Server interface
I want to produce a coherent directory services platform for every of MacOSX, Linux, Windows and Solaris based workstations. The LDAP implementation I use is 389 Directory Server. Authentication ...
3
votes
3answers
6k views
Does joining a Lion Open Directory with Windows actually work?
According to https://help.apple.com/advancedserveradmin/mac/10.7/#apd52648A71-571A-433C-81A8-2A7792333F22 it's possible to join a Lion Open Directory using a Windows machine, making it think it's ...
0
votes
1answer
340 views
How do I change the administrator username for authenticating to Mac OS X LDAPv3 directory?
We're a small company, and our IT manager is leaving. We trying to change all of the passwords for extra security and the administrator name for authenticating to the LDAP directory is his username ...
0
votes
0answers
49 views
Setup users home folders in open directory
I would like to setup open directory users home folders in a folder that is in a different hard drive from the startup disk. How do i setup the share point folder and the full path to a user account ...
2
votes
2answers
160 views
Can't log into OS X Server after restart
Just restarted our Mac OS X Server (Leopard), and we are no longer able to log into the default user account, srvadmin!
This is an open directory account. We are presented with the login screen, but ...
1
vote
0answers
152 views
crontabs not firing on mac osx server under a non root account
I'd like to run a crontab but it is never fired. It's on a mac osx server 10.5.6
Accounts on mac are not defined in /etc/passwd. So their is no use in adding my account in /usr/lib/cron/cron.allow. I ...
1
vote
1answer
98 views
2 identical Snow Leopard iMacs. One refreshes MCX records, one does not. Why?
Identical model 2.4 GHz iMacs, using the same image, being imaged in the same exact way on the same subnet. One will refresh and download group policy records (MCX) and the other does not. Both bind ...
0
votes
1answer
506 views
How to rebuild/restart kerberos server on Mac 10.6.5 Server
I had DNS trouble which was causing delays for Open Directory users logging in from the GUI on their macs.
I've fixed the DNS problems and the delay still remains.
Is there a way to restart, or ...
0
votes
1answer
890 views
Mac OS X Server Open Directory does not push Software Update settings to clients
I have an Xserve G5 running Mac OS X Server 10.5.8 configured as an Open Directory master. I have also enabled and configured Software Update service on the machine. The SUS is configured to serve ...
5
votes
2answers
151 views
Prompt for user group when logging into OSX domain
When a user is a member of more than one group, when logging in to a 10.6 machine, it shows a prompt asking for what group to apply settings for.
We're using the groups to mount different shares, ...
2
votes
1answer
525 views
Replication from OSX OpenDirectory to OpenLDAP
I have an OpenDirectory server running on an OSX Server machine, and I'd like to increase the reliability of the service by having a slave server. The problem is, I only have 1 OSX Server but I have ...
2
votes
2answers
162 views
utility native to OS X for administering AD accounts (without “magic triangle”)
EDIT: So far I have explored
Centrify Suite (Spoke with a rep who didnt believe they offered a solution for this)
Thursby ADmitMac (I have seen evidence that a tool exsists, but I'm failing to find ...
3
votes
2answers
409 views
How do I determine if an Apple Open Directory user is disabled via LDAP?
I have an Open Directory user that has the "Access Account" box unchecked in Workgroup Manager so they cannot login. Is there a way to determine this using an LDAP query?
It would also be good to be ...
2
votes
1answer
464 views
Correct/Optimized Binding of Open Directory clients?
I have have three locations with an OD Master in our primary location
and OD Replicas in each off-site location. I've always bound clients
to our OD Master because the Open Directory Admin ...
1
vote
1answer
110 views
DirectoryService hogging memory
My DirectoryService memory usage goes as high as 1GB, with nothing interesting happening to cause it to get that high. It is a stock macos server configuration on the mac mini
What is the problem and ...
0
votes
1answer
289 views
How to build a PDC connected to Open DIrectory on OS X 10.6
Since OS X Server has an older version of Samba that cannot be used with Windows 7, I want to setup a newer (3.5.5) Samba server as a PDC. I want to continue to use Open Directory on the 10.6 OS X ...
3
votes
1answer
151 views
Lag in MCX (Workgroup Manager) controlled Macs
At the beginning of the day and on semi-random days, some of my Mac users are experiencing heavy lag. For example, 5-10 minutes to login, several minutes for Safari to load, visible delays while ...
2
votes
1answer
105 views
WinXP logins no longer fully functional
Summary:
Users with Roaming Profiles on my XP workstations appear to be unable to do various things, e.g. set a default printer, disable toolbars in IE8, or see icons on the left side of the Start ...
1
vote
2answers
434 views
Manage same MCX setting on multiple Open Directory Masters
In the school division I work for, we have an Open Directory Master in each of a dozen schools. There are settings I'd like to manage in multiple directories for multiple work or computer groups.
...
1
vote
1answer
3k views
How to resolve “HTTP/1.1 403 Forbidden” errors from iCal/CalDAV server after upgrade to Snow Leopard Server?
We recently upgraded our Open Directory Master & Replica to Mac OS X 10.6.4 Snow Leopard Server. We had a mismatched server FQDN & LDAP Search Base/Kerberos Realm, so we exported all users ...
2
votes
1answer
599 views
Windows Server 2008 SBS bind to OS X Server Open Directory
I'm trying to bind Windows 2008 SBS server to OS X Open Directory, but the Change domain button is grayed out with this message:
Note: The identification of the computer cannot be changed because:
- ...
1
vote
2answers
1k views
Ubuntu 10.04: Restrict LDAP Access by Group (OpenDirectory on Mac OS X Server)
In a nutshell, I want to authenticate users of a Ubuntu 10.04 Server against a Mac OS X Server's OpenDirectory LDAP but ONLY allow them access if they are a member of a group on the LDAP side.
...
1
vote
2answers
1k views
Snow Leopard Server in 'Magic Triangle' setup not allowing managed preferences in WM to be saved
I have setup a new Snow Leopard Server (10.6.4) in a Magic Triangle setup (Dual Directory Integration), but am not able to manage preferences from within Workgroup Manager and am wondering if I might ...
4
votes
3answers
2k views
Mac OS X Server add server user
What's the recommended way to add a user to Mac OS X Server that doesn't need all the hoopla associated with Workgroup Manager? There are many users pre-configured in Mac OS X Server (www, root, ...
3
votes
1answer
282 views
Repercussions of Raising Domain Functional Level to 2008 on Mac computers running 10.6.2 with OD
We have recently replaced all of our 2003 server domain controllers to 2008 r2 and have tried to implement PSO's but have found that the domain functional level must be raised to 2008. We have a mac ...
1
vote
2answers
4k views
Listing group members using ldapsearch
Our corporate LDAP directory is housed on a Snow Leopard Server Open Directory setup. I'm trying to use the ldapsearch tool to export an .ldif file to import into another external LDAP server to ...
2
votes
1answer
1k views
Mail Server setup under Mac OS X Server Snow Leopard (10.6)
I'm currently setting up a number of new Xserve boxes running Mac OS X Server Snow Leopard. One of these machines will be replacing our current (ageing) Linux mail server.
The Linux box is running an ...
1
vote
2answers
436 views
How do I force an iCal server to only allow SSL connections?
I have an OS X 10.6 Server running the iCal service. When users on machines that are bound to Open Directory open their iCal client, it automatically configures their connections to the iCal server at ...
0
votes
2answers
1k views
Mac Client LoginWindow fails but SSH Works
I'm upgrading my desktop clients to use Mac OS X 10.6.2, and I'm having real trouble. Network users can't login using the login window. This works fine with 10.5.x clients.
I can also ssh as a ...
1
vote
1answer
480 views
Leopard Server (10.5.8) Screen Sharing with Open Directory Authentication
I have an OS X 10.5.8 Leopard Server that I manage here in the office. Right now it has just the standard VNC single password style of authentication for authenticating for screen sharing. Our ...
3
votes
4answers
257 views
Easiest option for sharing users across linux machines?
On windows there's active directory.
On Linux there are several options, but what's the dead simplest option to set up? I'd like to manage users and groups centrally, but don't need anything fancy ...
2
votes
2answers
851 views
Locked out of Snow Leopard Server. How do I get back in?
I have an XServe running Snow Leopard Server (10.6.2). It has some local administrator accounts on it and it is also an OpenDirectory master.
I noticed earlier today that I was not able to login with ...
1
vote
1answer
378 views
Tiger Client Bound to Leopard Open Directory Server
I am trying to get my tiger clients to bind to an open directory server on leopard.
I am able to bind the computer to the directory and when I look in Workgroup Manager the computer shows up ...
1
vote
2answers
3k views
Unable to remove users in Workgroup Manager, they just keep coming back!
When I try to remove a user in the Workgroup Manager on OS X Server 10.6.2, it looks as though the user is removed correctly at first. But when refreshing, the user pops right back into view without ...
1
vote
1answer
236 views
Why do mcxquery and system profiler sometimes give different results?
When you manage a setting on a mac client through workgroup manager/open directory, you can verify its effect on the client in two ways.
Open a Terminal and run mcxquery
Run System Profiler, and ...
1
vote
1answer
639 views
resolving DNS issues behind firewall on OS X Server
I have a problem that has recently broken single sign-on with our Mac clients (10.5 & 10.6) to an OS X Server (10.5). hosts seem to resolve on clients & server both forward & reverse. ...
1
vote
1answer
322 views
dsimport fails to set GeneratedUID for Computers
I'm populating machines into our Apple OpenDirectory (running on a 10.5 Server).
My script will output a file like this:
0x0A 0x5C 0x3A 0x2C dsRecTypeStandard:Computers 6 ...
2
votes
3answers
4k views
How can I disable a User Account from the CLI with Mac OS X Server?
Is there any possible solution to disable a User from the CLI e.g. over SSH?
There has to be a dscl command for that. Or is there a dsAttrTypeStandard attribute that I can set accordingly?
Any ...
