0
votes
0answers
18 views

Mini mac server returning:- attribute “entryCSN” index delete failure

I have an Open Directory(OD) server running on OSX 10.8.5. I have software connecting to it (a web interface) which is searching the LDAP for users. So I run the query on the web app, and look in ...
2
votes
1answer
137 views

Open Directory and SAML Identity Provider

Our office has switched almost entirely from Windows to Mac OS X, and our local server is due for replacement. We use Active Directory basically just for user authentication. We're considering ...
1
vote
2answers
325 views

Open Directory Password Location and Encryption Method

Background: I would like to use Google Apps Directory Sync (GADS) to synchronize user accounts and passwords from a Mac OS X Server (10.9) running Open Directory. GADS is installed on a Ubuntu 12.04 ...
0
votes
1answer
157 views

OSX 10.8 w/ OpenDirectory - Admin log in as user? and switch to Admin?

I now have a OSX 10.8 workstation environment where the clients are bound to OpenDirectory on an OSX 10.6 Server and their home directories are stored on another OSX server. Two questions: Is it ...
2
votes
1answer
3k views

Kerberos broken when upgrading Snow Leopard Server to Mountain Lion

I work for a small company where there's no dedicated system admin. I was tasked with upgrading our file and calendar server to 10.8, which I did by upgrading the OS then installing the server tools ...
0
votes
0answers
1k views

Creating an OS X Mountain Lion 10.8 OpenDirectory database with a specific domain in mind

Mountain Lion Server has been one of the most infuriating things ever recently. Above and beyond tons of crashing I've been completely unable to do the following in a way that makes sense to both me ...
0
votes
1answer
269 views

Will unbinding a server to an Open Directory Master remove its own file shares

According to this article: http://support.apple.com/kb/TS3180?viewlocale=en_US I am required to remove the ldap binding of my second Mac OS X Lion server before I set it up as a replica server. I ...
2
votes
0answers
613 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
3
votes
1answer
186 views

What are the differences in schemas of main directory servers?

Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished ...
2
votes
1answer
478 views

How can I determine the last time an Open Directory network account was used on Mac OS X 10.7 Server?

How can I determine the last time an Open Directory network account was used? I am completing a user/group audit and am looking to identify users that have not used their network account recently.
8
votes
3answers
338 views

Join ActiveDirectory (Win 2k8R2) to OpenDirectory(Snow Leopard)

The vast majority of questions and so on regarding the interoperability of Active and Open directories involves getting Mac clients to see an AD and auth against it. What we'd like to do is get a ...
11
votes
3answers
8k views

How to use Google Apps as an OD/AD/LDAP Provider

I see tons of solutions for allowing Google Apps to use external AD and LDAP services for login. However, I already have a ton of users setup in Google Apps already, and I'm trying to go the other ...
0
votes
1answer
1k views

OSX Server 10.5 - Cannot log into Workgroup Manager - diradmin password is correct

I've got a setup where I am trying to rescue a broken AD. We can no longer authenticate on the Workgroup manager, with passwords being rejected all the time - even though it is correct. I can connect ...
1
vote
2answers
1k views

“Password Server: Stopped” on Mac OS Lion Server. Stops with error -1 during startup

Since I've restored the Open Directory from an archive because my Server crashed and the DB was corrupt. The password server does not start anymore. The log looks like this: Feb 14 2012 21:41:20 ...
3
votes
1answer
2k views

Connecting FreeNAS 8 to Mac OS X Lion LDAP Server

I currently have Mac OS X Lion Server running from a MacMini and want to use it purely as an LDAP server for authentication for FreeNAS 8. I have FreeNAS setup and running on a VM, all features ...
0
votes
1answer
3k views

Automounting AFP Share For OpenDirectory Users (Mac Lion Server)

We're moving all our Mac's from local logins to OpenDirectory logins in an effort to keep everything secure and to also solve issues we have with a Tiger server buggering permissions on an AFP shared ...
5
votes
3answers
9k views

Does joining a Lion Open Directory with Windows actually work?

According to https://help.apple.com/advancedserveradmin/mac/10.7/#apd52648A71-571A-433C-81A8-2A7792333F22 it's possible to join a Lion Open Directory using a Windows machine, making it think it's ...
0
votes
1answer
2k views

How do I change the administrator username for authenticating to Mac OS X LDAPv3 directory?

We're a small company, and our IT manager is leaving. We trying to change all of the passwords for extra security and the administrator name for authenticating to the LDAP directory is his username ...
2
votes
2answers
3k views

How to rebuild/restart kerberos server on Mac 10.6.5 Server

I had DNS trouble which was causing delays for Open Directory users logging in from the GUI on their macs. I've fixed the DNS problems and the delay still remains. Is there a way to restart, or ...
2
votes
2answers
211 views

utility native to OS X for administering AD accounts (without “magic triangle”)

EDIT: So far I have explored Centrify Suite (Spoke with a rep who didnt believe they offered a solution for this) Thursby ADmitMac (I have seen evidence that a tool exsists, but I'm failing to find ...
4
votes
2answers
1k views

How do I determine if an Apple Open Directory user is disabled via LDAP?

I have an Open Directory user that has the "Access Account" box unchecked in Workgroup Manager so they cannot login. Is there a way to determine this using an LDAP query? It would also be good to be ...
3
votes
2answers
23k views

Listing group members using ldapsearch

Our corporate LDAP directory is housed on a Snow Leopard Server Open Directory setup. I'm trying to use the ldapsearch tool to export an .ldif file to import into another external LDAP server to ...