6 votes

How to use Google Apps as an OD/AD/LDAP Provider

Google have just released Secure LDAP which does what you want. Note you'll need to have G Suite Enterprise, G Suite for Education or add Cloud Identity Premium to your domain
  • 2,574
3 votes

Listing group members using ldapsearch

ldapsearch -x \ -b "cn=<your group name>,ou=group,dc=<your org>,dc=com" \ -H ldaps://<ldap server>:<port> This works very well.
2 votes

How to use Google Apps as an OD/AD/LDAP Provider

I have also been looking at a solution for this and the only thing I can find is this https://jumpcloud.com/ It provides the LDAP and uses the Google directory for user information.
  • 29
2 votes
Accepted

How does data flow in a password change with Open Directory?

Not sure how much Apple has changed things from a typical LDAP/Kerberos setup. In LDAP, a password change would involve TCP client:highport -> server:389 (or the LDAPS equivalent port, or possibly ...
  • 1,636
1 vote

Create open directory replica of active directory server

There is no way to make this work. Open Directory is too different to be able to replicate from an Active Directory domain. It can only replicate from Open Directory, and even there it's (mostly) ...
1 vote

OS X Server NFS home directory mount options

You can change the options in the Directory Utility Command + Spacebar > Type and open 'Directory Utility' > Directory Editor > Viewing > Mounts > NFS mount > VFSOpts > Unlock the locker > Modify the ...
1 vote
Accepted

OS X Server NFS home directory mount options

You should be able to configure the default mount options that automountd applies using the AUTOMOUNTD_MNTOPTS option in /etc/autofs.conf. Alternatively, for just the home directory mounts, you can ...
  • 3,041
1 vote
Accepted

Authenticate Samba share via Kerberos using Open Directory

I found a solution to this problem. The critical point is that using kadmin on OS X Server is not enough to create a valid service principal that can be exported via keytab and used on a different ...
  • 119
1 vote
Accepted

Binding a Windows client to Open Directory

This is not possible with server versions after OS X Server Snow Leopard. Since the first release of the 'simple' server in OS X Lion, binding Windows clients to OS X Server is not possible anymore. ...
  • 266
1 vote

How can I disable a User Account from the CLI with Mac OS X Server Yosemite with pwpolicy deprecated?

In El Capitan, you can use this: pwpolicy -u target -disableuser To reverse pwpolicy -u target -enableuser
  • 111
1 vote

How to enable DIGEST-MD5 SASL mechanism in Open Directory?

Here's what worked for me solving this login issue on OS X 10.11.6 with Server 5.1.7. These steps also resolved several other problems like not being able to install profiles due to trust issues, user ...
1 vote

How to enable DIGEST-MD5 SASL mechanism in Open Directory?

Try listing the password server's supported hash types with pwpolicy -n /LDAPv3/127.0.0.1 -getglobalhashtypes ...and see if it includes RECOVERABLE (which I believe is needed for both DIGEST-MD5 and ...
1 vote

Can OpenDirectory on OS X reasonably be configured to use an intermediate CA cert from an existing CA?

Since I see nobody has answered this question... it seems that yes, this is a reasonable thing to do, and so long as you match the fields used in the automatically-generated certificate, it works. It'...

Only top scored, non community-wiki answers of a minimum length are eligible