The opendirectory tag has no wiki summary.
1
vote
0answers
11 views
Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)
I'm setting up an application to authenticate to Open Directory using LDAP.
Open Directory stores groups in RFC 2307 posixGroups format, like this:
cn: mygroup
objectClass: top
objectClass: ...
3
votes
1answer
56 views
What are the differences in schemas of main directory servers?
Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished ...
0
votes
2answers
64 views
+50
Kerberos Login Failed: Cannot resolve network address for KDC in requested realm - Kerio and Open Directory
I'm attempting to connect Kerio to an Open Directory instance. I'm using kinit to test the setup, and I get the following:
$ kinit -V -S host/server.domain.co.uk@server.domain.co.uk ...
2
votes
1answer
36 views
How can I determine the last time an Open Directory network account was used on Mac OS X 10.7 Server?
How can I determine the last time an Open Directory network account was used? I am completing a user/group audit and am looking to identify users that have not used their network account recently.
2
votes
0answers
29 views
Add memberOf attribute to all users in OpenLDAP on OS X Lion Server Open Directory
Our school's website has the ability to pull user authentication from a LDAP source. They "support" and LDAP. Unfortunately, to pull group membership you must have a memberOf attribute in each users' ...
0
votes
0answers
48 views
Replacing HD in an MacOS 10.6.8 server caused all shares to fail
I'm hoping someone might have a helpful suggestion about this problem.
We have 2 MacOSX servers available for file sharing. (quad Xeons - 2GB RAM, both 10.6.8), No.1 is an Open Directory Master with ...
1
vote
0answers
398 views
why is Mac OSX Lion losing login/network credentials?
(moved from stackoverflow...)
Symptoms
So at work we have OSX 10.7.3 installed and every once in a while I will see the following behaviors:
1) if the screen is locked, then multiple tries of the ...
8
votes
2answers
194 views
Join ActiveDirectory (Win 2k8R2) to OpenDirectory(Snow Leopard)
The vast majority of questions and so on regarding the interoperability of Active and Open directories involves getting Mac clients to see an AD and auth against it.
What we'd like to do is get a ...
0
votes
0answers
40 views
host and domain naming questions
I'm the IT manager for a reasonably sided organization. We have 1 main office and 2 branch offices in different cities.
I've been managing things here for the last year or so and I inherited a ...
3
votes
2answers
257 views
How to use Google Apps as an OD/AD/LDAP Provider
I see tons of solutions for allowing Google Apps to use external AD and LDAP services for login.
However, I already have a ton of users setup in Google Apps already, and I'm trying to go the other ...
0
votes
1answer
137 views
OSX Server 10.5 - Cannot log into Workgroup Manager - diradmin password is correct
I've got a setup where I am trying to rescue a broken AD. We can no longer authenticate on the Workgroup manager, with passwords being rejected all the time - even though it is correct. I can connect ...
1
vote
0answers
205 views
“Password Server: Stopped” on Mac OS Lion Server. Stops with error -1 during startup
Since I've restored the Open Directory from an archive because my Server crashed and the DB was corrupt. The password server does not start anymore.
The log looks like this:
Feb 14 2012 21:41:20 ...
1
vote
0answers
97 views
Setting up single sign-on between Mac client & OS X Server
I'm not "single sign-on" is the right terminology for what I'm trying to accomplish, so please correct me if I'm wrong.
We have a Mac OS X Server and Mac clients. Kerberos and Open Directory are ...
1
vote
0answers
149 views
Why isn't Samba authenticating an Open Directory username that arrives in all caps?
I have a Mac OS X 10.6 server that acts as an Open Directory master and allows file sharing from the Open Directory users' home directories. Today, for unknown reasons, it's stopped permitting our ...
0
votes
1answer
125 views
How to use Open Directory login credentials when offline?
When using Active Directory, I can log into a machine while on the network using my AD credentials, then later take that machine offline and still be able to log into it.
I'd like to do the same ...
1
vote
1answer
85 views
Can I use Open Directory with a Leopard client and a Lion server?
I've looked around on the interwebs but I can't find any sort of answer.
I just picked up a Mac Mini and I'm going to throw Lion Server on it for my network.
Most of my computers are running either ...
1
vote
0answers
89 views
Disable OS X Portable Home Directories for specific hosts for all users, not just individuals? [closed]
Duplicate posting of:
http://apple.stackexchange.com/questions/35653/disable-os-x-portable-home-directories-for-specific-hosts-for-all-users-not-jus
Would it be possible to block any and all ...
2
votes
0answers
351 views
Connecting FreeNAS 8 to Mac OS X Lion LDAP Server
I currently have Mac OS X Lion Server running from a MacMini and want to use it purely as an LDAP server for authentication for FreeNAS 8. I have FreeNAS setup and running on a VM, all features ...
1
vote
0answers
67 views
Problems with virtual eth interfaces on an Mac 10.6 OD Master
I've been trying to setup multiple virtual interfaces (virtual ethernet ports) on a 10.6.8 OS X Server - this server is our Open Directory master. I want to set up additional IPs on the server because ...
0
votes
1answer
537 views
Difficulties setting up OD replica on Lion server
I am attempting to set up an Open Directory replica server in Mac OS X Lion server 10.7.1 I have the master set up and working (as far as I can tell) fine. When I go to the second machine and attempt ...
0
votes
0answers
49 views
Adding a user to a group using Workgroup Manager doesn't seem to add the user to the group
In Workgroup Manager, I created a new user "foo". I then added the user to group "bar", which has unix-permissions access to several folders.
After adding user "foo" to group "bar", user "foo" is ...
0
votes
1answer
1k views
Automounting AFP Share For OpenDirectory Users (Mac Lion Server)
We're moving all our Mac's from local logins to OpenDirectory logins in an effort to keep everything secure and to also solve issues we have with a Tiger server buggering permissions on an AFP shared ...
0
votes
0answers
94 views
Can Snow Leopard automount a AFP home folder from a Tiger Server?
I am running Open Directory Server on a Mac 10.4 Tiger Server, and when I have Tiger clients the share point containing the users' home folders automounted fine. I have bought new Snow Leopard ...
0
votes
1answer
362 views
Open Directory over SSL / Mobile Accounts not working on Snow Leopard Server
I have a fully updated Mac OS X server 10.6.8 running on a Mac mini which I have open directory running on.
I have 2 problems with the setup that the manual doesn't deal with and I can find any ...
0
votes
0answers
110 views
Managing Open Directory based ObjectClasses from 389 Directory Server interface
I want to produce a coherent directory services platform for every of MacOSX, Linux, Windows and Solaris based workstations. The LDAP implementation I use is 389 Directory Server. Authentication ...
4
votes
3answers
7k views
Does joining a Lion Open Directory with Windows actually work?
According to https://help.apple.com/advancedserveradmin/mac/10.7/#apd52648A71-571A-433C-81A8-2A7792333F22 it's possible to join a Lion Open Directory using a Windows machine, making it think it's ...
0
votes
1answer
600 views
How do I change the administrator username for authenticating to Mac OS X LDAPv3 directory?
We're a small company, and our IT manager is leaving. We trying to change all of the passwords for extra security and the administrator name for authenticating to the LDAP directory is his username ...
0
votes
0answers
70 views
Setup users home folders in open directory
I would like to setup open directory users home folders in a folder that is in a different hard drive from the startup disk. How do i setup the share point folder and the full path to a user account ...
2
votes
2answers
186 views
Can't log into OS X Server after restart
Just restarted our Mac OS X Server (Leopard), and we are no longer able to log into the default user account, srvadmin!
This is an open directory account. We are presented with the login screen, but ...
1
vote
0answers
176 views
crontabs not firing on mac osx server under a non root account
I'd like to run a crontab but it is never fired. It's on a mac osx server 10.5.6
Accounts on mac are not defined in /etc/passwd. So their is no use in adding my account in /usr/lib/cron/cron.allow. I ...
1
vote
1answer
120 views
2 identical Snow Leopard iMacs. One refreshes MCX records, one does not. Why?
Identical model 2.4 GHz iMacs, using the same image, being imaged in the same exact way on the same subnet. One will refresh and download group policy records (MCX) and the other does not. Both bind ...
2
votes
2answers
638 views
How to rebuild/restart kerberos server on Mac 10.6.5 Server
I had DNS trouble which was causing delays for Open Directory users logging in from the GUI on their macs.
I've fixed the DNS problems and the delay still remains.
Is there a way to restart, or ...
1
vote
1answer
1k views
Mac OS X Server Open Directory does not push Software Update settings to clients
I have an Xserve G5 running Mac OS X Server 10.5.8 configured as an Open Directory master. I have also enabled and configured Software Update service on the machine. The SUS is configured to serve ...
6
votes
2answers
158 views
Prompt for user group when logging into OSX domain
When a user is a member of more than one group, when logging in to a 10.6 machine, it shows a prompt asking for what group to apply settings for.
We're using the groups to mount different shares, ...
3
votes
1answer
644 views
Replication from OSX OpenDirectory to OpenLDAP
I have an OpenDirectory server running on an OSX Server machine, and I'd like to increase the reliability of the service by having a slave server. The problem is, I only have 1 OSX Server but I have ...
2
votes
2answers
186 views
utility native to OS X for administering AD accounts (without “magic triangle”)
EDIT: So far I have explored
Centrify Suite (Spoke with a rep who didnt believe they offered a solution for this)
Thursby ADmitMac (I have seen evidence that a tool exsists, but I'm failing to find ...
3
votes
2answers
524 views
How do I determine if an Apple Open Directory user is disabled via LDAP?
I have an Open Directory user that has the "Access Account" box unchecked in Workgroup Manager so they cannot login. Is there a way to determine this using an LDAP query?
It would also be good to be ...
2
votes
1answer
563 views
Correct/Optimized Binding of Open Directory clients?
I have have three locations with an OD Master in our primary location
and OD Replicas in each off-site location. I've always bound clients
to our OD Master because the Open Directory Admin ...
1
vote
1answer
128 views
DirectoryService hogging memory
My DirectoryService memory usage goes as high as 1GB, with nothing interesting happening to cause it to get that high. It is a stock macos server configuration on the mac mini
What is the problem and ...
0
votes
1answer
305 views
How to build a PDC connected to Open DIrectory on OS X 10.6
Since OS X Server has an older version of Samba that cannot be used with Windows 7, I want to setup a newer (3.5.5) Samba server as a PDC. I want to continue to use Open Directory on the 10.6 OS X ...
3
votes
1answer
158 views
Lag in MCX (Workgroup Manager) controlled Macs
At the beginning of the day and on semi-random days, some of my Mac users are experiencing heavy lag. For example, 5-10 minutes to login, several minutes for Safari to load, visible delays while ...
2
votes
1answer
106 views
WinXP logins no longer fully functional
Summary:
Users with Roaming Profiles on my XP workstations appear to be unable to do various things, e.g. set a default printer, disable toolbars in IE8, or see icons on the left side of the Start ...
1
vote
2answers
497 views
Manage same MCX setting on multiple Open Directory Masters
In the school division I work for, we have an Open Directory Master in each of a dozen schools. There are settings I'd like to manage in multiple directories for multiple work or computer groups.
...
1
vote
1answer
4k views
How to resolve “HTTP/1.1 403 Forbidden” errors from iCal/CalDAV server after upgrade to Snow Leopard Server?
We recently upgraded our Open Directory Master & Replica to Mac OS X 10.6.4 Snow Leopard Server. We had a mismatched server FQDN & LDAP Search Base/Kerberos Realm, so we exported all users ...
2
votes
1answer
663 views
Windows Server 2008 SBS bind to OS X Server Open Directory
I'm trying to bind Windows 2008 SBS server to OS X Open Directory, but the Change domain button is grayed out with this message:
Note: The identification of the computer cannot be changed because:
- ...
1
vote
2answers
1k views
Ubuntu 10.04: Restrict LDAP Access by Group (OpenDirectory on Mac OS X Server)
In a nutshell, I want to authenticate users of a Ubuntu 10.04 Server against a Mac OS X Server's OpenDirectory LDAP but ONLY allow them access if they are a member of a group on the LDAP side.
...
1
vote
2answers
2k views
Snow Leopard Server in 'Magic Triangle' setup not allowing managed preferences in WM to be saved
I have setup a new Snow Leopard Server (10.6.4) in a Magic Triangle setup (Dual Directory Integration), but am not able to manage preferences from within Workgroup Manager and am wondering if I might ...
4
votes
3answers
2k views
Mac OS X Server add server user
What's the recommended way to add a user to Mac OS X Server that doesn't need all the hoopla associated with Workgroup Manager? There are many users pre-configured in Mac OS X Server (www, root, ...
3
votes
1answer
336 views
Repercussions of Raising Domain Functional Level to 2008 on Mac computers running 10.6.2 with OD
We have recently replaced all of our 2003 server domain controllers to 2008 r2 and have tried to implement PSO's but have found that the domain functional level must be raised to 2008. We have a mac ...
1
vote
3answers
5k views
Listing group members using ldapsearch
Our corporate LDAP directory is housed on a Snow Leopard Server Open Directory setup. I'm trying to use the ldapsearch tool to export an .ldif file to import into another external LDAP server to ...
