Questions tagged [open-directory]

Open Directory is Apple's LDAP-based directory provided in Server.app. Open Directory is most often used to manage user accounts, groups, but it also contains settings and information for the entire networked system.

Filter by
Sorted by
Tagged with
1 vote
1 answer
40 views

What are "Aliases" under Open Directory's local node?

If I run dscl . -readall Aliases I get the following: dsAttrTypeNative:members: root AppleMetaNodeLocation: /Local/Default RecordName: administrator RecordType: dsRecTypeStandard:Aliases - ...
user avatar
  • 344
0 votes
0 answers
10 views

How do I import Active Directory users to Open Directory?

I believe this is called "magic triangle" or "golden triangle", something like that. It's still referenced with pictures on the Server app 5.4's (the one I'm using) help but the ...
user avatar
  • 163
0 votes
0 answers
8 views

How can I open specific folder in VS Code from terminal using the open command?

I need to open a specific folder in VS Code using the open command. I would expect the statement below to work, but it doesn't. Instead of opening the folder ~/Library/Mobile Documents/com~apple~...
user avatar
2 votes
1 answer
188 views

Terminal equivalent command for Directory Utility View specific user OD data

I wonder if there's any equivalent terminal command that can output the same data displayed when the I search for the domain user Under Users in the OD node (/Active Directory/MYCOMP/...) the data is ...
user avatar
  • 493
0 votes
0 answers
29 views

Mobile Accounts from OpenDirectory get login refusal on Catalina SMB share

Here's the setup: we're an audio facility and all workstations are Macs. Our user directory is an Open Directory (OD) running on an old XServe 2,1 which runs Mac OS X Server 10.6.8. It's old but it's ...
user avatar
3 votes
0 answers
489 views

Saving documents from Word directly to SMB share makes them invisible

When saving a Microsoft Word document directly to a SMB share which was mounted using a bookmark and authenticated with an Open Directory "Network User Account", the saved document becomes ...
user avatar
0 votes
1 answer
42 views

Where is opendirectory/accounts/login information stored on macos

I have encountered this problem of slow login (How can I debug an extremely slow login?), and have not found a solution. However, this phenomenon does not exist if I boot up into a fresh system. Since ...
user avatar
  • 1,733
0 votes
2 answers
118 views

Turn off the ability for users to have a password hint

I am working on a security setting for my company that requires users to not have a password hint. Since we have several users that either ignore our security options and purposely go against ones ...
user avatar
2 votes
0 answers
731 views

Opendirectoryd uses up to 85% CPU. My mac heats up at a high temperature

I am using MacOs Hight Sierra version 10.13.6. For some time, the computer has been heating up to a high temperature and it may even shut down at times. After searching the web, I discovered that one ...
user avatar
2 votes
1 answer
600 views

LDAP users in Catalina cannot log in - CRAM-MD5 error in opendirectoryd

I'm using Catalina 10.15.4 OSX as client and FreeBSD 12-1 with openldap-sasl-server-2.4.48_1 as Openldap server. I've configured the LDAP server using Direct Utility. I can see the LDAP users on ...
user avatar
  • 181
0 votes
1 answer
186 views

How do I remove authenticated Open Directory binding to itself?

In attempts to solve my file sharing issues I have at some point on macOS Mojave + Server, using Directory Utility, bound the Open Directory server to itself using Directory Utility (I was quite ...
user avatar
  • 564
1 vote
1 answer
1k views

Mojave SMB file sharing authentication issues

I'm trying to set up SMB file sharing from one Mac running macOS Mojave to another. The serving Mac runs Server.app and an Open Directory master with Local Network Users. The client is bound to the ...
user avatar
  • 564
1 vote
1 answer
759 views

Setting up Open Directory for already existing user accounts

I work for a small business, for the few years we've been running we've had individual MacBooks with local user accounts. We need to formalise this a bit in order to get an industry security ...
user avatar
  • 11
2 votes
0 answers
22 views

Should I still use Open Directory? [duplicate]

I manage the IT systems for a small business with around 7 members of staff. They currently have a Mac running Server.app with Open Directory and the Home Folders are hosted on that Mac. They have ...
user avatar
  • 285
4 votes
1 answer
1k views

Why doesn't defaults read` work for obtaining ShadowHashData key in user.plist?

I've read how to obtain the user's password hash on OSX using sudo defaults read /var/db/dslocal/nodes/Default/users/user.plist ShadowHashData. However, after giving Terminal "Full Disk Access" on ...
user avatar
  • 991
2 votes
0 answers
97 views

Why don't new (service) accounts added by `dscl` don't show up in `/etc/paswd` after system reboot?

I've added some new (service) accounts to my macOS system using dscl with names like _www to run installed services. However, while the system recognizes the account names in commands (the accounts ...
user avatar
  • 991
2 votes
0 answers
155 views

Create Local Network Directory User on OS X server via Terminal

I found this post: How can I create an Open Directory network user with a command? but it didn't have any answers on it. I know there's a way to create a local network directory user, but I cannot ...
user avatar
  • 41
2 votes
1 answer
284 views

After Security Update 2019-003, OpenLDAP is corrupted. How can I recover?

I installed the Security Update 2019-003 this morning. The update went awry, and produced on (postgres) induced panic on the host, a second attempt succeeded. After the update, slapd will not launch ...
user avatar
  • 564
4 votes
1 answer
116 views

Online Open Directory services? Can we install profiles before setting up Macs?

So we're setting up a subsidiary company in another country, and we will be needing a bunch of Mac Minis that some part-time (hourly) employees will use. The employees will be rotating between the ...
user avatar
1 vote
0 answers
175 views

How can I create an Open Directory network user with a command?

I know I can create a local user with: sudo dscl . create /Users/firstlast RealName "FIRST LAST" How can I create a network user on Sierra or High Sierra?
user avatar
3 votes
2 answers
2k views

Why can't I access File Sharing when Open Directory is enabled in macOS Mojave?

Here's the procedure I have followed: Install a fresh copy of macOS Mojave to an APFS volume Perform initial OS configuration and create 'admin' user at first launch. Assign a static IP from 192.168....
user avatar
  • 73
3 votes
2 answers
1k views

Windows File Sharing for Local Network Directory accounts in macOS Mojave

I'm struggling with how directory services and local Mac accounts interact. I'm hoping to not have to specifically assign the 'Windows File Sharing' option to each user individually or Network ...
user avatar
  • 73
2 votes
1 answer
106 views

How to go level up in file select window

An application has the button to select folder. When I click it it opens a file/directory selection dialog. Is it possible to know the current path of directory I see in this dialog Is it possible ...
user avatar
  • 181
2 votes
1 answer
2k views

Sierra stuck at login screen - password doesn't work

This has happened to me twice in the past week. I put my MacBook Pro to sleep while my user account is logged in. When I return, I enter the correct password and it shakes, as if the password were ...
user avatar
  • 2,591
2 votes
1 answer
240 views

Profile installation failed: No user identifier found in record

I have a Mac High Sierra (10.13.2) connected to Open Directory. The server is a OpenLDAP Linux Server With Apple Configurator I created a Email Profile to config email account. In local users I don'...
user avatar
  • 121
0 votes
1 answer
41 views

How to remotely connect to a laptop's local users directory?

besides opening ssh- is there a way to connect and read local users defined in a machine? Edit - further info. My goal is to actually run an analysis on my network - to find out which local ...
user avatar
  • 111
0 votes
1 answer
625 views

How can I add another Directory Admin on OpenDirectory

Right now, I am planning to have another account on my OpenDirectory on our Mac Server. How can I add another Directory Admin on OpenDirectory? I already added a user but I thinks it's not it. I ...
user avatar
3 votes
1 answer
67 views

Are there any low-level settings in local Directory Service that can increase the blocking time after typing wrong password?

I find there's a global policy that can temporarily block/disable a user (only 1 minute) after authenticating with wrong passwords a few times. But what I want to do is to increase that 1 minute to a ...
user avatar
2 votes
2 answers
3k views

How to disable Open Directory to startup with Mac OS X

I was recently given a computer by the IT dept. at my company, right before the IT guy left for a few days... However it isn't configured to be used: From what I understand this is called "Open ...
user avatar
  • 3,203
3 votes
2 answers
2k views

Why is my Mac listening on port 625?

My Mac is listening on port 625. This listing by Apple of common ports used by macOS and Apple software claims that it has something to do with Open Directory. However, my machine doesn't have any ...
user avatar
2 votes
1 answer
226 views

Fixing error 73 AND Open Directory without Internet

I have been messing with an old PowerMac G4 running OSX 10.5 Leopard Server trying to get Open Directory running on a small network I set up for testing purposes. I can't find anything useful online ...
user avatar
9 votes
2 answers
3k views

Loads of opendirectoryd error messages in system log

I'm seeing these errors in my MacOS (10.12.1) system log files in big amounts. Any idea where this may coming from? Didn't have success finding anything usable on Google so far. They seem to persist ...
user avatar
  • 278
0 votes
1 answer
496 views

Device Manager fails to start on a macOS Server 5.2

I have setup a working Open Directory Master on on Mac-Server-1 running macOS Sierra and macOS Server 5.2 (latest as of today). I have also successfully started the Device Manager and enrolled a ...
user avatar
  • 634
0 votes
1 answer
6k views

How to initiate iOS software updates remotely on managed devices?

I am trying to setup the so called "Profile Manager" in Apple's Server to manage a number of iOS devices for the family. The main purpose is for me to be able to (1) remotely restart the devices and (...
user avatar
  • 705
1 vote
2 answers
569 views

How to recover the built in Directory Service data?

AFAIU, OS X has a collection of built in users, and one of these users is 'mysql' user. The reason I am making this guess is, the first time I have installed mysql server using the dmg, it installed ...
user avatar
  • 374
1 vote
0 answers
1k views

Enable SSH and Remote Management via Profile Manager

I've been working on getting some iMacs enrolled on an Open Directory, and using Profile Manager to push some settings that are useful for our office (some essential Dock items, a few security ...
user avatar
3 votes
2 answers
3k views

Problems with creating Open Directory Replica on OS X Server 5.1

Background: Two Macs which are running the same Operation System: Mac OS X 10.11.6, OS X Server 5.1. When I try to set up the second Mac as a replica server, it always shows an error as the ...
user avatar
  • 550
1 vote
2 answers
3k views

Can not setup open directory due to host name

In activing Open Directory on a new install of OS X, I am able to put in a diradmin name/password, and they I get the following dialog: This computer's host name is invalid. The host name does ...
user avatar
0 votes
1 answer
149 views

Open Directory network user last logon time

I am looking for a bash command to query my LDAPv3 server from the client side in order to find the current user's last logon time.
user avatar
1 vote
1 answer
1k views

Cannot create new user in Single-user mode

I try to create new user using the following commands: /sbin/fsck -fy /sbin/mount -uw / launchctl load /System/Library/LaunchDaemons/com.apple.opendirectoryd.plist dscl . -create /Users/username But ...
user avatar
1 vote
2 answers
543 views

OS X Server: Open Directory PasswordService crashes

I'm running an OS X 10.9 Server (it's a Mac Mini) that is providing a few services (iCal, VPN, file sharing, etc.) to a small group of Local Network Users. After we installed a security update today, ...
user avatar
  • 1,169
0 votes
0 answers
28 views

Mavericks Open Directory: a user can't open or modify files he's created

The OS X server & clients are on 10.9.5. I've got a client who's had some issues, various corruptions, etc.. I had to re-create the entire user, and in doing so, have some permissions issues. ...
user avatar
4 votes
1 answer
4k views

How to open path in Double Commander from Terminal

If I type open $(pwd) or open /anypath/ I will get the path opened in Finder. How I can achieve similar results but with the path opening in Double Commander instead?
user avatar
4 votes
1 answer
357 views

Slow login and Terminal loading time in Yosemite, possibly related to open directory

I have a problem with slow login times in Yosemite. Logging in is speedy after booting, but after a while (a few days usually) it slows down and can take 20-30 seconds. The time to load a new ...
user avatar
  • 151
13 votes
2 answers
15k views

Opedirectoryd taking >90% of CPU + thousands of messages in console per second

Some time ago our company laptops started to overheat. At first it was nothing serious but after a while almost all our macbooks started to act more like ovens than computers. The issue seems to lie ...
user avatar
1 vote
1 answer
276 views

Using OS X Server resources on non-Macs

I currently have two Mac Mini servers with several Mac clients and everything works well (DNS, Open Directory, Contacts/Calendar/Messaging, File Sharing, Time Machine, etc). I'm open to introducing ...
user avatar
  • 111
0 votes
1 answer
112 views

Set user expiration Yosemite server.app

How do you set local network user expiration using server.app? This action would block the user to log in after a given date.
user avatar
  • 103
0 votes
1 answer
661 views

OS X client gets SSL certificate error when trying to join OD

I switched from self signed to signing my own certificates using a CA I created on the server. OS X Server has a list of the certificates outlined in blue now for its hostname, Code Signing ...
user avatar
0 votes
1 answer
65 views

OS X client to OD if master is down

When joining an OS X client to OD, it seems you use the server of the master OD. However, if the master is down for reboot or maintenance, how does the client know to contact the OD slave? Would it ...
user avatar
2 votes
0 answers
92 views

Read only user for Open Directory

I need to authenticate against Open Directory on a linux box that has open-ldap installed. The program wants me to enter a username and password that can authenticate against OD. However, I do not ...
user avatar