Open Directory is an ldap-based Apple technology that is the centerpiece of its OS X Server product. It manages users, groups, computers, policies, managed settings, authentication and more.

learn more… | top users | synonyms

8
votes
2answers
248 views

Prompt for user group when logging into OSX domain

When a user is a member of more than one group, when logging in to a 10.6 machine, it shows a prompt asking for what group to apply settings for. We're using the groups to mount different shares, e.g....
1
vote
2answers
502 views

How can I disable a User Account from the CLI with Mac OS X Server Yosemite with pwpolicy deprecated?

Prior to Mac OS X Yosemite, admins were able to disable a Open Directory user by taking advantage of the pwpolicy command below: pwpolicy -a diradmin -p password -u username -disableuser or ...
3
votes
1answer
931 views

Add memberOf attribute to all users in OpenLDAP on OS X Lion Server Open Directory

Our school's website has the ability to pull user authentication from a LDAP source. They "support" and LDAP. Unfortunately, to pull group membership you must have a memberOf attribute in each users' ...
3
votes
1answer
191 views

Lag in MCX (Workgroup Manager) controlled Macs

At the beginning of the day and on semi-random days, some of my Mac users are experiencing heavy lag. For example, 5-10 minutes to login, several minutes for Safari to load, visible delays while ...
2
votes
1answer
557 views

Mac OSX 10.7 server with 10.6.8 clients - old network accounts work, now ones created since May do not

I have a Mac OS 10.7 server, and a number of 10.6.8 clients in a school. For the last year and half, network accounts could log into the clients with no problem. There is a set of presets in ...
1
vote
1answer
159 views

2 identical Snow Leopard iMacs. One refreshes MCX records, one does not. Why?

Identical model 2.4 GHz iMacs, using the same image, being imaged in the same exact way on the same subnet. One will refresh and download group policy records (MCX) and the other does not. Both bind ...
1
vote
1answer
2k views

Mac OS X Server Open Directory does not push Software Update settings to clients

I have an Xserve G5 running Mac OS X Server 10.5.8 configured as an Open Directory master. I have also enabled and configured Software Update service on the machine. The SUS is configured to serve ...
0
votes
1answer
31 views

Open Directory won't authenticate

I have 2 servers running Open Directory (Mac OS X). One is running the master Open Directory(OD) server, the other is running a replica. For a little while, the master has been down to Apple ...
0
votes
1answer
389 views

Accessing Active Directory list on Apple Remote Desktop 3

We are working on a project where a software needs to be deployed on a set of Mac clients connected to a Windows Active Directory server. Software will be pushed from a Mac machine using Apple Remote ...
0
votes
1answer
147 views

Syncrepl support in Mac OSx 10.8 OpenDirectory

From Ryan Faas's article Apple's OpenDirectory does support overlays but I can't seem to enable the syncprov or accesslog overlays. Adding following block to slapd_macosxserver.conf turns the server ...
0
votes
1answer
395 views

How to build a PDC connected to Open DIrectory on OS X 10.6

Since OS X Server has an older version of Samba that cannot be used with Windows 7, I want to setup a newer (3.5.5) Samba server as a PDC. I want to continue to use Open Directory on the 10.6 OS X ...
4
votes
0answers
373 views

Open directory, external NFS file shares and automounter

This may be a big one. I've set up Open Directory on Mac OSX 10.8 (Mountain Lion) with users to allow everyone on the network to logon to any client with these centrally stored users. Before this ...
3
votes
0answers
1k views

Ubuntu server + Samba + PAM + Apple OpenDirectory

Due to various reasons, we are looking to migrate our file servers from OS X Server 10.9 over to a true Samba implementation running on Ubuntu 14.04LTS. We have Ubuntu up and running with Samba ...
3
votes
0answers
953 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: apple-...
2
votes
0answers
138 views

SBS 2011 Essentials and too many new Mac users

We currently have about 15 users on a Windows SBS 2011 Essentials Server. I've just been informed that we plan to bring aboard about 15 more users that will be using Macs. We'll be using a Mac ...
2
votes
0answers
409 views

Why isn't Samba authenticating an Open Directory username that arrives in all caps?

I have a Mac OS X 10.6 server that acts as an Open Directory master and allows file sharing from the Open Directory users' home directories. Today, for unknown reasons, it's stopped permitting our ...
1
vote
0answers
60 views

How to get Kerberos tickets in sync with OS X password changes?

I've traced an issue that's been plaguing us down to a "simple" problem: Kerberos tickets are not syncing with OS X Open Directory password changes. Another way to put this: Expired/expiring ticket ...
1
vote
0answers
90 views

How can I make Kerberos flush the credential cache when a user changes their password?

We've got a fun new issue after upgrading to OS X 10.10 client and server with Open Directory (from 10.8). When a user changes their password (using System Preferences or at the Login screen) it ...
1
vote
0answers
30 views

OpenVPN and oLDAP configuration

I have a Linux VM setup with OpenVPN on Debian 7.8. I copied the client files over to my MacBook and iPhone and I'm successfully able to create a VPN connection without any issues. However, I'd like ...
1
vote
0answers
497 views

Mini mac server returning:- attribute “entryCSN” index delete failure

I have an Open Directory(OD) server running on OSX 10.8.5. I have software connecting to it (a web interface) which is searching the LDAP for users. So I run the query on the web app, and look in "...
1
vote
0answers
287 views

Open Directory authenticated bind succeeds, but creates incomplete record

I have about a dozen Macs running 10.6.7 or 10.6.8, which are all failing to bind properly to my new 10.7.4 Server OD. I can bind them just fine via Directory Utility or dsconfigldap, and it reports ...
1
vote
0answers
435 views

Setting up single sign-on between Mac client & OS X Server

I'm not "single sign-on" is the right terminology for what I'm trying to accomplish, so please correct me if I'm wrong. We have a Mac OS X Server and Mac clients. Kerberos and Open Directory are ...
1
vote
0answers
137 views

Problems with virtual eth interfaces on an Mac 10.6 OD Master

I've been trying to setup multiple virtual interfaces (virtual ethernet ports) on a 10.6.8 OS X Server - this server is our Open Directory master. I want to set up additional IPs on the server because ...
1
vote
0answers
412 views

crontabs not firing on mac osx server under a non root account

I'd like to run a crontab but it is never fired. It's on a mac osx server 10.5.6 Accounts on mac are not defined in /etc/passwd. So their is no use in adding my account in /usr/lib/cron/cron.allow. I ...
0
votes
0answers
15 views

Can I manage sudoers from Open Directory?

I have configured Open Directory & integrated it with Microsoft Active Directory so that the users sync with Open Directory. Now I want to manage sudo commands from Open Directory. Is this ...
0
votes
0answers
95 views

OSX Server NFS v4 Server

we are using an OS X Server for distributing home directories in our office with OpenDirectory. The protocol of choice became after a long way of painful testing NFS - not kidding - the only ...
0
votes
0answers
94 views

OS X 10.10 Server SMB3 homes issues

we are a small company with up to 8 developers using 8 imacs. To switch the desks we dreamed of remote mounted network homes (NFS/NIS like in linux / SMB ActiveDirectory like in Microsoft) and decided ...
0
votes
0answers
238 views

OwnCloud on Synology-NAS should use OpenDirectory-Server (LDAP)

I got a little problem: I want to configure LDAP with OwnCloud. The LDAP-Service is my OS X Open Directory-Server. OwnCloud runs on Synology DS214play. Well, I got the domain bureau.example.com ...
0
votes
0answers
177 views

10.9 Server DNS Server Having Intermittent Issues with Open Directory

I work for a school and we're undertaking the large task of moving from Xserves running 10.6.8 to Mac Minis running 10.9. I have a lot of experience with OS X Server (I held ACSA up until they ditched ...
0
votes
0answers
84 views

Debugging logon session errors when using Apple's Golden Triangle integration method

We are using the Golden Triangle setup for integrating our Mac OSX systems using a Lion (10.7) OpenDirectory server and a Windows 2008 Active Directory. We have been unable to modify the home ...