I can't get Contacts to work with an Open LDAP server in OSX 10.9.2, apparently regardless of the settings that I use. I can query it from the command line, so it's definitely working. I have also tried using the Zimbra server (
CardDAV is disabled). Does anyone know a way to get this working, or see a problem in the settings below?
Zimbra of course uses the LDAP server for auth/contacts (apparently via a mirror). My colleagues using Outlook have no issue getting this to work, but I can't seem to get it to go.
- Command line works against OpenLDAP w/o auth or with auth
- Command line works against Zimbra server with auth
- Not many error messages
- Tried all scopes (base,onelevel,subtree)
- Tried many combinations of accounts
- Server does not use SSL
LDAP Server: (notice the
-D difference in the identifier & host address)
# also works without authentication ldapsearch -vLx -H ldap://ldap.company.com -b "ou=people,dc=company,dc=com" -D "cn=Andrew Backer,ou=people,dc=company,dc=com" -w secretpassword
ldapsearch -vLx -H ldap://mail.company.com -b "ou=people,dc=company,dc=com" -D "uid=andrewbacker,ou=people,dc=company,dc=com" -w secretpassword
- A filter of
(objectClass=person)works to just pull out the people
- Base and subtree queries work (e.g. without
I don't get many messages in the log file, most of the time. The few I have gotten seem to come when querying zimbra w/o a password, or when typing in the contacts search box.
# these two events occurred right after each other Mail : -[ABAddressBook save] failed.(<ABAddressBook: 0x6080000dd2d0>) sandboxd: () Contacts(74205) deny file-write-mode /Users/andrew/Library/Application Scripts/com.apple.AddressBook #=> Full Report (head 4) Process: Contacts  Path: /Applications/Contacts.app/Contents/MacOS/Contacts Load Address: 0x1006ef000 Identifier: com.apple.AddressBook #permissions on that folder: (it is empty) drwxr-xr-x@ 2 andrew admin 68 May 20 11:56 com.apple.AddressBook/ com.apple.preferences.internetaccounts.remoteservice: An instance 0x7fd1a49d3860 of class ABLDAPSource was deallocated while key value observers were still registered with it. Observation info was leaked, and may even become mistakenly attached to some other object. Set a breakpoint on NSKVODeallocateBreak to stop here in the debugger. Here's the current observation info: <NSKeyValueObservationInfo 0x7fd1a49d56b0> ( <NSKeyValueObservance 0x7fd1a499fdd0: Observer: 0x7fd1a49c5dd0, Key path: uidNext, Options: <New: NO, Old: NO, Prior: NO> Context: 0x7fff8a59d43b, Property: 0x7fd1a27d3840> )
** Additional Info: **
I realized now that these errors are related to this. When I set up a new account (ldap) I get these two errors. They both came up the last time after changing from a host name to an IP for the server.
secd: SecErrorGetOSStatus unknown error domain: com.apple.security.sos.error for error: The operation couldn’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call) secd: securityd_xpc_dictionary_handler com.apple.sbd DeviceInCircle The operation couldn’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call)
- Alternates between "can't establish secure connection" and "invalid account"
- No error messages in console
- Tried using both ldap
dns above, plain user name, etc
- CardDAV works fine with goooooooooogle
- Gave up
I don't much care if the contacts come from Zimbra or from LDAP (of course, Zimbra is preferred since it's also the mail server).