Open Directory is an ldap-based Apple technology that is the centerpiece of its OS X Server product. It manages users, groups, computers, policies, managed settings, authentication and more.

learn more… | top users | synonyms

7
votes
2answers
228 views

Prompt for user group when logging into OSX domain

When a user is a member of more than one group, when logging in to a 10.6 machine, it shows a prompt asking for what group to apply settings for. We're using the groups to mount different shares, ...
3
votes
1answer
527 views

Add memberOf attribute to all users in OpenLDAP on OS X Lion Server Open Directory

Our school's website has the ability to pull user authentication from a LDAP source. They "support" and LDAP. Unfortunately, to pull group membership you must have a memberOf attribute in each users' ...
3
votes
1answer
186 views

Lag in MCX (Workgroup Manager) controlled Macs

At the beginning of the day and on semi-random days, some of my Mac users are experiencing heavy lag. For example, 5-10 minutes to login, several minutes for Safari to load, visible delays while ...
2
votes
1answer
429 views

Mac OSX 10.7 server with 10.6.8 clients - old network accounts work, now ones created since May do not

I have a Mac OS 10.7 server, and a number of 10.6.8 clients in a school. For the last year and half, network accounts could log into the clients with no problem. There is a set of presets in ...
1
vote
1answer
157 views

2 identical Snow Leopard iMacs. One refreshes MCX records, one does not. Why?

Identical model 2.4 GHz iMacs, using the same image, being imaged in the same exact way on the same subnet. One will refresh and download group policy records (MCX) and the other does not. Both bind ...
1
vote
1answer
2k views

Mac OS X Server Open Directory does not push Software Update settings to clients

I have an Xserve G5 running Mac OS X Server 10.5.8 configured as an Open Directory master. I have also enabled and configured Software Update service on the machine. The SUS is configured to serve ...
0
votes
1answer
115 views

Accessing Active Directory list on Apple Remote Desktop 3

We are working on a project where a software needs to be deployed on a set of Mac clients connected to a Windows Active Directory server. Software will be pushed from a Mac machine using Apple Remote ...
0
votes
1answer
116 views

Syncrepl support in Mac OSx 10.8 OpenDirectory

From Ryan Faas's article Apple's OpenDirectory does support overlays but I can't seem to enable the syncprov or accesslog overlays. Adding following block to slapd_macosxserver.conf turns the server ...
0
votes
1answer
159 views

How to deal with BYOD users with OSX Server (10.8) and Mobile Accounts

I am moving over to an open directory setup with users able to create mobile profiles to allow for syncing of their home directory on their own machines and the server. However, since we have been ...
0
votes
1answer
1k views

OSX Server 10.5 - Cannot log into Workgroup Manager - diradmin password is correct

I've got a setup where I am trying to rescue a broken AD. We can no longer authenticate on the Workgroup manager, with passwords being rejected all the time - even though it is correct. I can connect ...
0
votes
1answer
385 views

How to build a PDC connected to Open DIrectory on OS X 10.6

Since OS X Server has an older version of Samba that cannot be used with Windows 7, I want to setup a newer (3.5.5) Samba server as a PDC. I want to continue to use Open Directory on the 10.6 OS X ...
3
votes
0answers
298 views

Open directory, external NFS file shares and automounter

This may be a big one. I've set up Open Directory on Mac OSX 10.8 (Mountain Lion) with users to allow everyone on the network to logon to any client with these centrally stored users. Before this ...
2
votes
0answers
105 views

SBS 2011 Essentials and too many new Mac users

We currently have about 15 users on a Windows SBS 2011 Essentials Server. I've just been informed that we plan to bring aboard about 15 more users that will be using Macs. We'll be using a Mac ...
2
votes
0answers
614 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
2
votes
0answers
349 views

Why isn't Samba authenticating an Open Directory username that arrives in all caps?

I have a Mac OS X 10.6 server that acts as an Open Directory master and allows file sharing from the Open Directory users' home directories. Today, for unknown reasons, it's stopped permitting our ...
1
vote
0answers
225 views

Open Directory authenticated bind succeeds, but creates incomplete record

I have about a dozen Macs running 10.6.7 or 10.6.8, which are all failing to bind properly to my new 10.7.4 Server OD. I can bind them just fine via Directory Utility or dsconfigldap, and it reports ...
1
vote
0answers
249 views

Setting up single sign-on between Mac client & OS X Server

I'm not "single sign-on" is the right terminology for what I'm trying to accomplish, so please correct me if I'm wrong. We have a Mac OS X Server and Mac clients. Kerberos and Open Directory are ...
1
vote
0answers
114 views

Problems with virtual eth interfaces on an Mac 10.6 OD Master

I've been trying to setup multiple virtual interfaces (virtual ethernet ports) on a 10.6.8 OS X Server - this server is our Open Directory master. I want to set up additional IPs on the server because ...
1
vote
0answers
326 views

crontabs not firing on mac osx server under a non root account

I'd like to run a crontab but it is never fired. It's on a mac osx server 10.5.6 Accounts on mac are not defined in /etc/passwd. So their is no use in adding my account in /usr/lib/cron/cron.allow. I ...
0
votes
0answers
22 views

Mini mac server returning:- attribute “entryCSN” index delete failure

I have an Open Directory(OD) server running on OSX 10.8.5. I have software connecting to it (a web interface) which is searching the LDAP for users. So I run the query on the web app, and look in ...
0
votes
0answers
35 views

OD Upgrade: The Home Folder Can't Be Accessed

We moved our Open Directory server from an Xserve running 10.6.8 to a new Mac Mini running 10.9 with Server installed. After much ado, this was done as a fairly clean install. Meaning instead of ...
0
votes
0answers
25 views

10.9 Server DNS Server Having Intermittent Issues with Open Directory

I work for a school and we're undertaking the large task of moving from Xserves running 10.6.8 to Mac Minis running 10.9. I have a lot of experience with OS X Server (I held ACSA up until they ditched ...
0
votes
0answers
163 views

Open Directory crashing periodically on Mac Server OS X 10.8

I've had quite a fight with the server I'm trying to configure in the last few weeks and thanks to serverfault I've been able to smoke out a few issues (thank you for all the help on that!) I'm a ...
0
votes
0answers
76 views

Debugging logon session errors when using Apple's Golden Triangle integration method

We are using the Golden Triangle setup for integrating our Mac OSX systems using a Lion (10.7) OpenDirectory server and a Windows 2008 Active Directory. We have been unable to modify the home ...
0
votes
0answers
1k views

Creating an OS X Mountain Lion 10.8 OpenDirectory database with a specific domain in mind

Mountain Lion Server has been one of the most infuriating things ever recently. Above and beyond tons of crashing I've been completely unable to do the following in a way that makes sense to both me ...