I'm looking for an automated way to set up LDAPv3 on OSx Catalina.
There is an additional level of complexity as we need to set a custom search base for the Automount, Groups, and Users.
Prior to catalina:
/Library/Preferences/OpenDirectory/Configurations/Search.plist
/Library/Preferences/OpenDirectory/Configurations/LDAPv3/my_ldap_server.plist
These files are now write-protected, yet the OS is still capable of writing to them it seems(or rather the /System/Volumes/Data/Library/... variant)
I can't understand why sudo/root can't write to these files as I can't find a firm link that would limit this in /usr/share/firmlinks
I'm also open to other automated ways of setting up LDAP connections by the way :)
EDIT: Please note that I'm not looking to edit the files mentioned above. I'm trying to automate LDAP setup! It can be done in the system preferences, and I'm just looking for a terminal way to do the same.
sudo mount -uw /
. Upon reboot,/System
and the like will be read-only again, at which point, you may want to re-enable SIP.root
) has permissions to do so; only certain kernel tasks are able to write to such locations. That's the point of SIP. The only solution that doesn't require disabling SIP would be to write your own kernel extension which you would install via the DriverKit API.