Questions tagged [opendirectory]
Open Directory is an LDAP-based Apple technology that is the centerpiece of its macOS Server product. It manages users, groups, computers, policies, managed settings, authentication and more.
98
questions
0
votes
0
answers
37
views
Filter for User Domain Name in LDAPv3 (not AD)
I try to get my UID out of the LDAP by a filter that can recognize the whole user with the (internal) domain. For example: (Internal) LDAP Domain is "office.intern" and the user (uid) is &...
- 1
1
vote
1
answer
367
views
Suddenly RADIUS authentication is gone on macOS server (TLS session fails)
Suddenly my RADIUS authentication is gone on my MacOS Server running 10.13.6 and Server Version 5.6.1 (17S2109.
I already restored the Open Directory Server.
$ host name.domain.tld
name.domain.tld ...
- 111
0
votes
1
answer
81
views
Cannot setup password change policy on Yosemite server
We are running a Yosemite server 10.10.5 with Server.app 5.03.
I can setup network user and assign him a password, but regardless i set up policy to change password on next login user logins ...
- 1
0
votes
0
answers
2k
views
Connecting Outlook to Unix mail server
I notice that i am unable to connect Outlook (2013) users with my Unix mail server. I have tried from a remote computer and localhost at my local network with Mail App and its working fine except with ...
- 372
1
vote
0
answers
2k
views
Using Open Directory to automatically authenticate shares on QNAP NAS
I'm trying to get some client OS X machine to automatically authenticate to a QNAP share using a separate LDAP Open Directory server.
(Note: I'm using example.com below to hide the real server name ...
- 367
0
votes
0
answers
48
views
Can I manage sudoers from Open Directory?
I have configured Open Directory & integrated it with Microsoft Active Directory so that the users sync with Open Directory. Now I want to manage sudo commands from Open Directory. Is this ...
0
votes
1
answer
798
views
Open Directory won't authenticate
I have 2 servers running Open Directory (Mac OS X). One is running the master Open Directory(OD) server, the other is running a replica.
For a little while, the master has been down to Apple ...
- 145
1
vote
1
answer
172
views
Create open directory replica of active directory server
I have an active directory server running on windows server 2012, and a mac osx 10.6 server capable fo running open directory. Currently, my mac server is connected to my AD server, however I would ...
- 11
2
votes
2
answers
3k
views
OS X Server NFS home directory mount options
we are running a couple of OS X clients in an open directory OS X server environment with home directories provide via NFS.
The auto_home script allows to mount the home folder of the
user without ...
- 325
0
votes
1
answer
1k
views
Authenticate Samba share via Kerberos using Open Directory
I have an Open Directory master on a machine called "minime" (El Capitan, Server 5). I further have a Samba server "tricky", running Ubuntu and a Mac OS X client "wallace".
I want users on wallace to ...
- 119
1
vote
0
answers
229
views
How to get Kerberos tickets in sync with OS X password changes?
I've traced an issue that's been plaguing us down to a "simple" problem:
Kerberos tickets are not syncing with OS X Open Directory password changes.
Another way to put this:
Expired/expiring ticket ...
- 83
1
vote
1
answer
66
views
How does data flow in a password change with Open Directory?
I'm trying to troubleshoot an OS X OD issue and I'm having a hard time finding anything concrete about just how data flows between clients and server.
Specifically, I'd love to know what exactly ...
- 83
1
vote
0
answers
895
views
How can I make Kerberos flush the credential cache when a user changes their password?
We've got a fun new issue after upgrading to OS X 10.10 client and server with Open Directory (from 10.8).
When a user changes their password (using System Preferences or at the Login screen) it ...
- 83
0
votes
0
answers
440
views
OwnCloud on Synology-NAS should use OpenDirectory-Server (LDAP)
I got a little problem:
I want to configure LDAP with OwnCloud. The LDAP-Service is my OS X Open Directory-Server. OwnCloud runs on Synology DS214play.
Well, I got the domain bureau.example.com ...
- 893
1
vote
1
answer
1k
views
Binding a Windows client to Open Directory
Is it possible to bind Windows clients (to be specific Windows 8) to OS X Open Directory? The server is running OS X Yosemite.
I have not yet found any resources that give a clear answer about this.
- 286
0
votes
1
answer
76
views
OSX 10.6.8 can't find OD users after DNS change [duplicate]
I recently switched out a DNS server, to a more stable one, but now of my mac servers are giving me some trouble. When the network cable is in, I'm getting stuck at the login screen, even when trying ...
- 259
1
vote
0
answers
47
views
OpenVPN and oLDAP configuration
I have a Linux VM setup with OpenVPN on Debian 7.8. I copied the client files over to my MacBook and iPhone and I'm successfully able to create a VPN connection without any issues. However, I'd like ...
2
votes
2
answers
2k
views
How can I disable a User Account from the CLI with Mac OS X Server Yosemite with pwpolicy deprecated?
Prior to Mac OS X Yosemite, admins were able to disable a Open Directory user by taking advantage of the pwpolicy command below:
pwpolicy -a diradmin -p password -u username -disableuser
or
...
- 21
2
votes
2
answers
3k
views
How to enable DIGEST-MD5 SASL mechanism in Open Directory?
We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4:
$ sudo slapconfig -createldapmasterandadmin admin Administrator 1000
But it doesn't support DIGEST-MD5:
$ ldapsearch -x ...
- 392
1
vote
1
answer
140
views
Can OpenDirectory on OS X reasonably be configured to use an intermediate CA cert from an existing CA?
We're trying to set up OpenDirectory. It seems to want to create its own CA, and then an intermediate CA with a certificate signed by its own CA. I'd prefer to generate an intermediate CA certificate ...
3
votes
0
answers
2k
views
Ubuntu server + Samba + PAM + Apple OpenDirectory
Due to various reasons, we are looking to migrate our file servers from OS X Server 10.9 over to a true Samba implementation running on Ubuntu 14.04LTS. We have Ubuntu up and running with Samba ...
- 141
1
vote
0
answers
813
views
Mini mac server returning:- attribute "entryCSN" index delete failure
I have an Open Directory(OD) server running on OSX 10.8.5. I have software connecting to it (a web interface) which is searching the LDAP for users. So I run the query on the web app, and look in "...
- 145
0
votes
0
answers
197
views
10.9 Server DNS Server Having Intermittent Issues with Open Directory
I work for a school and we're undertaking the large task of moving from Xserves running 10.6.8 to Mac Minis running 10.9. I have a lot of experience with OS X Server (I held ACSA up until they ditched ...
- 11
4
votes
2
answers
4k
views
Open Directory and SAML Identity Provider
Our office has switched almost entirely from Windows to Mac OS X, and our local server is due for replacement. We use Active Directory basically just for user authentication. We're considering ...
- 213
4
votes
1
answer
4k
views
OSX Server 3, Mac clients binding to OD and Profile Manager failing
I've made a setup containing a Mac Mini with OSX Server 3 (Mavericks 10.9.2) using Open Directory and Profile Manager (Mail, etc all set up and working).
Now the thing is, internally on the local ...
- 143
0
votes
1
answer
2k
views
How to recognize windows' permissions on a OSX server share
I have a server running OSX (Mountain Lion), accessed by a Windows 7 box. Investigating a permissions problem from the Win client, I open the permissions dialog on a network share's directory and see ...
- 515
1
vote
2
answers
2k
views
Open Directory Password Location and Encryption Method
Background: I would like to use Google Apps Directory Sync (GADS) to synchronize user accounts and passwords from a Mac OS X Server (10.9) running Open Directory. GADS is installed on a Ubuntu 12.04 ...
- 833
0
votes
1
answer
786
views
Accessing Active Directory list on Apple Remote Desktop 3
We are working on a project where a software needs to be deployed on a set of Mac clients connected to a Windows Active Directory server. Software will be pushed from a Mac machine using Apple Remote ...
0
votes
1
answer
163
views
Syncrepl support in Mac OSx 10.8 OpenDirectory
From Ryan Faas's article Apple's OpenDirectory does support overlays but I can't seem to enable the syncprov or accesslog overlays. Adding following block to slapd_macosxserver.conf turns the server ...
- 1
0
votes
1
answer
206
views
OSX 10.8 w/ OpenDirectory - Admin log in as user? and switch to Admin?
I now have a OSX 10.8 workstation environment where the clients are bound to OpenDirectory on an OSX 10.6 Server and their home directories are stored on another OSX server.
Two questions:
Is it ...
- 181
0
votes
1
answer
272
views
How to deal with BYOD users with OSX Server (10.8) and Mobile Accounts
I am moving over to an open directory setup with users able to create mobile profiles to allow for syncing of their home directory on their own machines and the server. However, since we have been ...
2
votes
0
answers
151
views
SBS 2011 Essentials and too many new Mac users
We currently have about 15 users on a Windows SBS 2011 Essentials Server. I've just been informed that we plan to bring aboard about 15 more users that will be using Macs. We'll be using a Mac ...
- 203
2
votes
1
answer
5k
views
Kerberos broken when upgrading Snow Leopard Server to Mountain Lion
I work for a small company where there's no dedicated system admin. I was tasked with upgrading our file and calendar server to 10.8, which I did by upgrading the OS then installing the server tools ...
- 121
5
votes
1
answer
919
views
What Is The Recommended Way To Backup OS X Open Directory?
We have recently bought a Mac Mini preloaded with Mountain Lion Server to use as an Open Directory master, and I'm not clear on how the data for Open Directory is supposed to be backed up.
We are ...
- 151
4
votes
0
answers
448
views
Open directory, external NFS file shares and automounter
This may be a big one.
I've set up Open Directory on Mac OSX 10.8 (Mountain Lion) with users to allow everyone on the network to logon to any client with these centrally stored users.
Before this ...
- 179
2
votes
1
answer
579
views
Mac OSX 10.7 server with 10.6.8 clients - old network accounts work, now ones created since May do not
I have a Mac OS 10.7 server, and a number of 10.6.8 clients in a school. For the last year and half, network accounts could log into the clients with no problem. There is a set of presets in ...
0
votes
1
answer
959
views
Will unbinding a server to an Open Directory Master remove its own file shares
According to this article: http://support.apple.com/kb/TS3180?viewlocale=en_US
I am required to remove the ldap binding of my second Mac OS X Lion server before I set it up as a replica server. I ...
- 365
1
vote
0
answers
353
views
Open Directory authenticated bind succeeds, but creates incomplete record
I have about a dozen Macs running 10.6.7 or 10.6.8, which are all failing to bind properly to my new 10.7.4 Server OD.
I can bind them just fine via Directory Utility or dsconfigldap, and it reports ...
- 111
1
vote
1
answer
2k
views
Making a mac network user administrator
I am attempting to setup an open directory authentication system for a small iMac laboratory.
The open directory authenticates network users properly and allows a login on the Mac system although ...
- 83
5
votes
0
answers
2k
views
Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)
I'm setting up an application to authenticate to Open Directory using LDAP.
Open Directory stores groups in RFC 2307 posixGroups format, like this:
cn: mygroup
objectClass: top
objectClass: apple-...
- 453
3
votes
1
answer
264
views
What are the differences in schemas of main directory servers?
Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished ...
- 515
1
vote
6
answers
28k
views
Kerberos Login Failed: Cannot resolve network address for KDC in requested realm - Kerio and Open Directory
I'm attempting to connect Kerio to an Open Directory instance. I'm using kinit to test the setup, and I get the following:
$ kinit -V -S host/server.domain.co.uk@server.domain.co.uk igor@server....
- 1,148
2
votes
2
answers
2k
views
How can I determine the last time an Open Directory network account was used on Mac OS X 10.7 Server?
How can I determine the last time an Open Directory network account was used? I am completing a user/group audit and am looking to identify users that have not used their network account recently.
- 833
3
votes
0
answers
1k
views
Add memberOf attribute to all users in OpenLDAP on OS X Lion Server Open Directory
Our school's website has the ability to pull user authentication from a LDAP source. They "support" and LDAP. Unfortunately, to pull group membership you must have a memberOf attribute in each users' ...
13
votes
1
answer
9k
views
Why is Mac OSX Lion losing login/network credentials?
Symptoms
At work we have OSX 10.7.3 installed and every once in a while I will see the following behaviors:
If the the screen is locked, then multiple tries of the same user/pass are not accepted.
...
- 231
8
votes
3
answers
396
views
Join ActiveDirectory (Win 2k8R2) to OpenDirectory(Snow Leopard)
The vast majority of questions and so on regarding the interoperability of Active and Open directories involves getting Mac clients to see an AD and auth against it.
What we'd like to do is get a ...
- 27.4k
29
votes
5
answers
35k
views
How to use Google Apps as an OD/AD/LDAP Provider
I see tons of solutions for allowing Google Apps to use external AD and LDAP services for login.
However, I already have a ton of users setup in Google Apps already, and I'm trying to go the other ...
- 391
1
vote
2
answers
3k
views
"Password Server: Stopped" on Mac OS Lion Server. Stops with error -1 during startup
Since I've restored the Open Directory from an archive because my Server crashed and the DB was corrupt. The password server does not start anymore.
The log looks like this:
Feb 14 2012 21:41:20 ...
- 151
1
vote
0
answers
539
views
Setting up single sign-on between Mac client & OS X Server
I'm not "single sign-on" is the right terminology for what I'm trying to accomplish, so please correct me if I'm wrong.
We have a Mac OS X Server and Mac clients. Kerberos and Open Directory are ...
- 559
2
votes
1
answer
554
views
Why isn't Samba authenticating an Open Directory username that arrives in all caps?
I have a Mac OS X 10.6 server that acts as an Open Directory master and allows file sharing from the Open Directory users' home directories. Today, for unknown reasons, it's stopped permitting our ...
- 121