Open Directory is an ldap-based Apple technology that is the centerpiece of its OS X Server product. It manages users, groups, computers, policies, managed settings, authentication and more.

learn more… | top users | synonyms

2
votes
2answers
211 views

utility native to OS X for administering AD accounts (without “magic triangle”)

EDIT: So far I have explored Centrify Suite (Spoke with a rep who didnt believe they offered a solution for this) Thursby ADmitMac (I have seen evidence that a tool exsists, but I'm failing to find ...
4
votes
2answers
1k views

How do I determine if an Apple Open Directory user is disabled via LDAP?

I have an Open Directory user that has the "Access Account" box unchecked in Workgroup Manager so they cannot login. Is there a way to determine this using an LDAP query? It would also be good to be ...
2
votes
1answer
790 views

Correct/Optimized Binding of Open Directory clients?

I have have three locations with an OD Master in our primary location and OD Replicas in each off-site location. I've always bound clients to our OD Master because the Open Directory Admin ...
1
vote
1answer
171 views

DirectoryService hogging memory

My DirectoryService memory usage goes as high as 1GB, with nothing interesting happening to cause it to get that high. It is a stock macos server configuration on the mac mini What is the problem and ...
0
votes
1answer
385 views

How to build a PDC connected to Open DIrectory on OS X 10.6

Since OS X Server has an older version of Samba that cannot be used with Windows 7, I want to setup a newer (3.5.5) Samba server as a PDC. I want to continue to use Open Directory on the 10.6 OS X ...
3
votes
1answer
186 views

Lag in MCX (Workgroup Manager) controlled Macs

At the beginning of the day and on semi-random days, some of my Mac users are experiencing heavy lag. For example, 5-10 minutes to login, several minutes for Safari to load, visible delays while ...
2
votes
1answer
118 views

WinXP logins no longer fully functional

Summary: Users with Roaming Profiles on my XP workstations appear to be unable to do various things, e.g. set a default printer, disable toolbars in IE8, or see icons on the left side of the Start ...
1
vote
2answers
823 views

Manage same MCX setting on multiple Open Directory Masters

In the school division I work for, we have an Open Directory Master in each of a dozen schools. There are settings I'd like to manage in multiple directories for multiple work or computer groups. ...
2
votes
2answers
11k views

How to resolve “HTTP/1.1 403 Forbidden” errors from iCal/CalDAV server after upgrade to Snow Leopard Server?

We recently upgraded our Open Directory Master & Replica to Mac OS X 10.6.4 Snow Leopard Server. We had a mismatched server FQDN & LDAP Search Base/Kerberos Realm, so we exported all users ...
2
votes
1answer
893 views

Windows Server 2008 SBS bind to OS X Server Open Directory

I'm trying to bind Windows 2008 SBS server to OS X Open Directory, but the Change domain button is grayed out with this message: Note: The identification of the computer cannot be changed because: - ...
1
vote
2answers
2k views

Ubuntu 10.04: Restrict LDAP Access by Group (OpenDirectory on Mac OS X Server)

In a nutshell, I want to authenticate users of a Ubuntu 10.04 Server against a Mac OS X Server's OpenDirectory LDAP but ONLY allow them access if they are a member of a group on the LDAP side. ...
1
vote
2answers
3k views

Snow Leopard Server in 'Magic Triangle' setup not allowing managed preferences in WM to be saved

I have setup a new Snow Leopard Server (10.6.4) in a Magic Triangle setup (Dual Directory Integration), but am not able to manage preferences from within Workgroup Manager and am wondering if I might ...
4
votes
3answers
2k views

Mac OS X Server add server user

What's the recommended way to add a user to Mac OS X Server that doesn't need all the hoopla associated with Workgroup Manager? There are many users pre-configured in Mac OS X Server (www, root, ...
3
votes
1answer
585 views

Repercussions of Raising Domain Functional Level to 2008 on Mac computers running 10.6.2 with OD

We have recently replaced all of our 2003 server domain controllers to 2008 r2 and have tried to implement PSO's but have found that the domain functional level must be raised to 2008. We have a mac ...
3
votes
2answers
24k views

Listing group members using ldapsearch

Our corporate LDAP directory is housed on a Snow Leopard Server Open Directory setup. I'm trying to use the ldapsearch tool to export an .ldif file to import into another external LDAP server to ...
2
votes
1answer
1k views

Mail Server setup under Mac OS X Server Snow Leopard (10.6)

I'm currently setting up a number of new Xserve boxes running Mac OS X Server Snow Leopard. One of these machines will be replacing our current (ageing) Linux mail server. The Linux box is running an ...
1
vote
2answers
578 views

How do I force an iCal server to only allow SSL connections?

I have an OS X 10.6 Server running the iCal service. When users on machines that are bound to Open Directory open their iCal client, it automatically configures their connections to the iCal server at ...
0
votes
2answers
2k views

Mac Client LoginWindow fails but SSH Works

I'm upgrading my desktop clients to use Mac OS X 10.6.2, and I'm having real trouble. Network users can't login using the login window. This works fine with 10.5.x clients. I can also ssh as a ...
1
vote
1answer
665 views

Leopard Server (10.5.8) Screen Sharing with Open Directory Authentication

I have an OS X 10.5.8 Leopard Server that I manage here in the office. Right now it has just the standard VNC single password style of authentication for authenticating for screen sharing. Our ...
3
votes
4answers
1k views

Easiest option for sharing users across linux machines?

On windows there's active directory. On Linux there are several options, but what's the dead simplest option to set up? I'd like to manage users and groups centrally, but don't need anything fancy ...
2
votes
2answers
1k views

Locked out of Snow Leopard Server. How do I get back in?

I have an XServe running Snow Leopard Server (10.6.2). It has some local administrator accounts on it and it is also an OpenDirectory master. I noticed earlier today that I was not able to login with ...
1
vote
1answer
464 views

Tiger Client Bound to Leopard Open Directory Server

I am trying to get my tiger clients to bind to an open directory server on leopard. I am able to bind the computer to the directory and when I look in Workgroup Manager the computer shows up ...
1
vote
2answers
4k views

Unable to remove users in Workgroup Manager, they just keep coming back!

When I try to remove a user in the Workgroup Manager on OS X Server 10.6.2, it looks as though the user is removed correctly at first. But when refreshing, the user pops right back into view without ...
1
vote
1answer
381 views

Why do mcxquery and system profiler sometimes give different results?

When you manage a setting on a mac client through workgroup manager/open directory, you can verify its effect on the client in two ways. Open a Terminal and run mcxquery Run System Profiler, and ...
1
vote
1answer
797 views

resolving DNS issues behind firewall on OS X Server

I have a problem that has recently broken single sign-on with our Mac clients (10.5 & 10.6) to an OS X Server (10.5). hosts seem to resolve on clients & server both forward & reverse. ...
1
vote
1answer
502 views

dsimport fails to set GeneratedUID for Computers

I'm populating machines into our Apple OpenDirectory (running on a 10.5 Server). My script will output a file like this: 0x0A 0x5C 0x3A 0x2C dsRecTypeStandard:Computers 6 ...
3
votes
3answers
9k views

How can I disable a User Account from the CLI with Mac OS X Server?

Is there any possible solution to disable a User from the CLI e.g. over SSH? There has to be a dscl command for that. Or is there a dsAttrTypeStandard attribute that I can set accordingly? Any ...
2
votes
4answers
7k views

What commands will change Open Directory passwords?

I understand Open Directory to be OpenLDAP + SASL (Password Server) + Kerberos. It appears that OpenLDAP defers to SASL for authentication; I don't know about Kerberos. I want to change user ...
0
votes
1answer
1k views

Open Directory password expiration warnings

I have authentication for Linux, Macs and Windows hanging off of an Apple OS X Server via open directory. I want to expire passwords for my users every 180 days, which is set up and works fine. The ...
3
votes
5answers
6k views

Mac OS X Server user unable to log in though log appears fine

Trying to troubleshoot a user who is unable to log into our server from a client. Client is bound to server and other users can authenticate. ApplePasswordServer.Server.log says the following when ...
3
votes
4answers
4k views

OS X Login Authentication Against Leopard Server

I am doing a few tests with OS X Server before I have to do a deploy in a few months. I have configured Open Directory, and created a few users. I've configured Directory Utility on a 10.5 client, ...
1
vote
2answers
822 views

Open Directory Failover

We have a network based on OSX, including using OpenDirectory as our directory service. Our network consists of one OD master and a pair of OD replicas. We've been trying to set it up so that when the ...