Questions tagged [ldap]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
0 answers
368 views

Configure LDAP through command line (NOT Directory Utility) on Ventura and Monterey

I can configure Directory Utility to make Mac machines (Monterey and above) authenticate users through my OpenLDAP (Ubuntu-based) server and everything works perfectly fine. But I need to do it ...
2 votes
1 answer
670 views

OpenLDAP configuration via terminal on MacOS 12 and above (Monterey and Ventura)

I want to make Mac machines, in my network, use my LDAP Server to authenticate users. To do so, I tried the GUI tool "Directory Utility" and configured everything as desired and took a copy ...
1 vote
0 answers
81 views

How do I stop Safari from marking password "reused" on all sites using same LDAP

I have a few resources that are in different domains, but all use the same LDAP authentication. So I have company.com, sceretCompanyDomain.com, companyDomainForDevTools.com, etc. Which all use same me@...
1 vote
0 answers
155 views

Why does user authentication via OpenLDAP work everywhere except for MacOS 11 login and Time Machine?

I have an OpenLDAP directory on an Ubuntu server that I am trying to use for user management, authentication and various other goodies. I can use this directory and its authentication information to: ...
1 vote
1 answer
767 views

Authenticate SMB file sharing on MacOS 10.15 bound to openldap

We're running a file-sharing server running MacOS 10.15 that is bound (for reasons outside of my control) to a bare openldap (slapd) server running on Ubuntu Server 18.04. The LDAP server is using a &...
1 vote
1 answer
4k views

How can I verify if a group exists in Active Directory on a certain domain

In Windows you can use the "net" command to do this quite easily: net group /domain groupName Which checks if groupName exists in your current domain. Is there something equivalent in Mac?
2 votes
1 answer
2k views

Given the same remote LDAP server, why does Directory Utility work on one machine but not on the other?

I have an LDAP server (OpenLDAP) running under Ubuntu 20.04 that I use for user authentication in my network, which consists of Linux servers and MacOS 11 clients. On my desktop, which runs MacOS 11.1,...
1 vote
0 answers
214 views

MacOS Catalina ldap browser supporting certificate authentication?

I’m looking for an GUI based ldap browser here that supports certificate authentication I previously used softerra on windows. I’ve looked into: PhpLdap admin, Jxplorer, Ldapadmin tool. I checked ...
0 votes
1 answer
203 views

How to kerberize services on Mac bound to Kerberos KDC on Linux?

I'm trying to kerberize services on an iMac that is bound to an external Kerberos KDC on a Linux computer. I assume that I have to use sso_util and do it like this: sso_util configure -v 7 -r ...
1 vote
0 answers
179 views

Import and export LDAP settings from Directory utility

Is there a way to import and export LDAP settings in macOS Catalina? In previous OS versions, when installing a new laptop, we will connect it to our LDAP server simply by copying some files with our ...
2 votes
1 answer
963 views

LDAP users in Catalina cannot log in - CRAM-MD5 error in opendirectoryd

I'm using Catalina 10.15.4 OSX as client and FreeBSD 12-1 with openldap-sasl-server-2.4.48_1 as Openldap server. I've configured the LDAP server using Direct Utility. I can see the LDAP users on ...
4 votes
1 answer
630 views

Automated LDAP and Search setup on Catalina

I'm looking for an automated way to set up LDAPv3 on OSx Catalina. There is an additional level of complexity as we need to set a custom search base for the Automount, Groups, and Users. Prior to ...
2 votes
2 answers
1k views

Can't remove LDAP account from Internet Accounts

The goal: Remove LDAP Contacts account from list of the Internet Accounts. The problem: Removed LDAP account reappears in the Accounts list in 5 seconds after deletion. Current OS: macOS 10.13 High ...
1 vote
1 answer
311 views

Connecting to Ubuntu 16.04 LDAPv3 server from macOS clients

I've been working on an Ubuntu 16.04 server that has LDAPv3 active via OpenLDAP, my client machines are all macOS from El Capitan upto High Sierra. On the server I have the samba schema implemented, ...
1 vote
1 answer
811 views

How to store and retrieve S/MIME certificates in Open Directory (LDAP) of macOS Server?

Is it possible to use the Open Directory of the macOS Server app to store and retrieve S/MIME (X.509) certificates with the user data? Background: I would like to share our public S/MIME ...
3 votes
1 answer
11k views

Authenticate Mac users by LDAP

I connected to the LDAP server with a special account and searching password using the Directory Utility. When I set the LDAPv3 Service to RFC2307 LDAP Mappings, with SSL checked, I can move to ...
0 votes
2 answers
3k views

how do I enable the root user from the Directory Utility?

How do I enable the root account? I don't see any options related the system user. Do I enter the server as "localhost"? What do I select here? System Software Overview: System Version: OS X ...
1 vote
1 answer
649 views

ldap users cannot log in

I have created an ldap server (hosted externally with a domain name) on a ubuntu 18.04 machine with openLDAP. I configured linux machines to allow my users to connect using ldap and it works as ...
0 votes
1 answer
1k views

How to autocomplete with LDAP directory in Mail.app?

Is it possible to have Mail pull matches from an LDAP directory as I type them in the To/Cc/Bcc fields?
1 vote
1 answer
2k views

Do these messages in the LDAP log on OSX Mavericks Server mean anything?

Jan 26 06:23:05 server.mydoman.net slapd[329]: => bdb_idl_delete_key: c_get failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock (-30994) Jan 26 06:23:05 server.mydoman.net slapd[329]: ...
2 votes
2 answers
3k views

LDAP on non-Server OSX

I have read where Apple plans to stop making OSX server. What does this mean for LDAP services? Is it possible to install LDAP on a regular mac running High Sierra? Could my own iMac be the LDAP ...
0 votes
1 answer
406 views

Suggestd Crash due to SGSqliteDatabaseError

I'm currently working in an environment with some Openldap users and nfs mounted homes. Everything is working like a charm, but I'm facing some issues regarding some ReportCrash that keeps writing in ...
1 vote
1 answer
8k views

LDAP Network Account Logins in Mavericks

I'd like to be able to link an LDAP server to Mavericks to permit users to login with their LDAP credentials. I have the following problem: Although I know the fully qualified DN for a user (in the ...
0 votes
1 answer
778 views

SMB "home drive" mounts not being auto-mounted at ldap login, Mounts setup in User-group profiles

In Profile Manager to mount the default home drives set for the User in Server.app, you mark a checkbox "Add Network Home," but then. Does anyone know which plist in the system, etc, that is actually ...
8 votes
2 answers
6k views

Contacts LDAP Account on 10.11 (El Capitan)

I am trying to set up an LDAP account for the Contacts application in the 10.11 (El Capitan) OS X version. I need it, for example, to be able to autocomplete addresses via the Mail application. I've ...
1 vote
2 answers
1k views

Lion Server LDAP gone after restart - Error -14006

Similar to slapd daemon can't start but despite being accepted, the answer didn't really work for the asker. Shut down Lion Server 10.7.5 (on a 2011 Mini Server) today after Time Machine got itself ...
0 votes
1 answer
325 views

Is filevault compatible with LDAP configurations?

I turned on FileVault (on my Enterprise attached Mac) and it's no longer prompting me for my LDAP credentials. After the filevault login, it just tosses me straight into local administrator. LDAP ...
1 vote
1 answer
2k views

How to fix a user account screwed up by El Capitan?

I did a full backup before installing El Capitan, so a restore is available if nothing else. After the install, I was able to login, but found that the login group for my non-admin account had been ...
3 votes
0 answers
860 views

Directory Services with OpenLDAP

I have an OpenLDAP instance running on Amazon AWS. I've got a few users and groups set up, I'm able to use ldapsearch from my macbook to bind and search the server. I would like was trying to add my ...
1 vote
0 answers
689 views

Replacing samba.schema (LDAP) on Mavericks Server

I have a Mavericks Server with Open Directory, where all my user information is stored. I have an Ubuntu 14.04 server which has hitherto served up files using NFS. My Mavericks desktop is having ...
2 votes
0 answers
2k views

Contacts does not read properly from LDAP and/or Zimbra

I can't get Contacts to work with an Open LDAP server in OSX 10.9.2, apparently regardless of the settings that I use. I can query it from the command line, so it's definitely working. I have also ...
4 votes
1 answer
5k views

Unable to use SSL or TLS to access OpenDirectory ldap server

I am unable to connect with my openserver system using SSL/TLS connection. There are no issues communicating without SSL on port 389 and can connect and retrieve directory information without issue. ...
2 votes
0 answers
2k views

Login to OS X Server User Account from Local Computer

I have OS X Server installed on a Mac Mini. I've created several user accounts, one of which is: Account Name: Bob Password: abc123 From the Mac Mini's login screen I can choose "Server" (main ...
3 votes
0 answers
2k views

error: BerkeleyDB version incompatible with BDB/HDB backends [closed]

I've downloaded OpenLDAP sources from Apple Source for OSX 1.9. But I've the following error found in config.log when compiling using make: configure:27816: checking for db.h configure:27824: result:...
4 votes
2 answers
3k views

FileVault 2 Login Issues on OpenLDAP Network with Admin, Managed, Mobile Account on Lion 10.7.4

This issue occurs on any machine with Lion in my environment. I install Lion and connect to OpenLDAP for authentication. I enable FileVault. Some users were reporting that when they'd wake their ...
1 vote
1 answer
2k views

OSX 10.8 Contacts can't access Active Directory 2003 via LDAP

I've recently upgraded to OSX 10.8 and have discovered that the Contacts Application can no longer access our Active Directory 2003 domain via LDAP. I have confirmed that the exact same settings work ...
3 votes
1 answer
1k views

Problems with the LDAP address book in iOS 6

When configuring an LDAP addressbook with older iOS versions, the phone connects to port 389 for plain text and to port 636 when SSL is enabled. Our secure LDAP service runs on port 636 and before, it ...
1 vote
1 answer
899 views

Lion on LDAP Linux domain

I need to put a desktop Mac OS X Lion in the domain of a corporate network - Linux LDAP. The Mac is already picking up the IP and the DNS name released. But I can not log into the corporate network. ...
3 votes
2 answers
2k views

Can you connect iPhone to LDAP on a non-standard port?

In a nutshell, I believe I'm having issues configuring iOS to connect to LDAP on a non-standard port. I've tried a quite a few different sequences, such as appending the port to the server address, ...
4 votes
1 answer
742 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
2 votes
2 answers
1k views

Apple Directory / Profile Manager - Restricting simultaneous same user logins on multiple machines?

We are using Apple Directory for internal user authentication. We want to restrict a user to login from a single machine at any one time. I have been trying to find a way to do this in Apple Directory ...