12

I've got an answer to this problem for people coming here with this issue who aren't using Active Directory (meaning that it can't be the cause). For me the problem was my Dropbox was struggling with broken symlinks inside my Dropbox folder. I had about 20-25 of these broken symlinks. You can see if this is the problem for you by whether the problem goes ...


7

Here are the results of my investigation: https://superuser.com/a/426719/135263 -- As mentioned by @juanpablo, this may be caused by symlinks. Apparently, if a symlink points to /home, autofs or automountd fire and take a lot of CPU to figure out that the place indeed doesn't exist. Take a look at /etc/auto_home and /etc/autofs.conf. To see if you're ...


7

I can confirm that I see the identical problem with Safari 7.0.2 (9537.74.9), with all current Mac OS X Mavericks updates installed. (Thousands of request packets per second with the same kind of content as described above.) However, while this may or may not help the original poster, I have found that this problem only occurs if the Windows server has ...


6

dsconfigad -remove -u DomainAdminsUserName -p Password If that doesn't work, you may need to add -force.


5

I found out, that the following process adds a folder mounted on a samba share to the sidebar/favorites in my finder. They 'survive' a restart of my mac. I guess they also work as intended if you reboot the NAS/server/whatever. To achieve that, do execute the following steps: Mount the shared folder (it should be listed in the sidebar under 'Shared' within ...


4

Login to a different admin account. Delete your account, choosing "Don't change the home folder" option. Open Terminal and rename your home folder, eliminating the " (Deleted)" part -- sudo mv "/Users/yourshortname (Deleted)" /Users/yourshortname Unbind your machine (Login Options tab, at the bottom) Create a new account with the same short name. Use the ...


4

I have encountered the same issue with our Mountain Lion image for our Macbook Pro machines when they are connected to our (2008 R2) Domain. When connected they are able to Administer, but when disconnected the ability to Administer is removed. I even enabled administration by the Domain Users Security Group, but this did not help. What I do to correct this ...


4

There's a simpler way: Log in as a different, admin, user. Delete the account in question; select the option "Don't change the home folder" Go to /Users and rename the home folder from username+deleted to the original, desired, short name. Add a new local user with the same short name; you will be asked would you like to use the existing folder. Agree to ...


4

Well, I figured it out! Our Active Directory is very large. I'm actually only technically a container admin deep within a large tree of Colleges within the University so I believe that had something to do with it. Instead of using the easy quick Join interface I had to open up Directory Utility and join this way. When I pressed 'Bind' I typed in the ...


3

dsconfigad -preferred ads01.example.com -a COMPUTERNAME –domain example.com -u administrator -p "password" For more information just check the manual (Integrating Active Directory)


3

Safari 7.0.5 still has the issue: authentication breaks down if finder shares network resources via SMB: (or CIFS:). once all connected network volumes are unmounted, Safari resumes proper authentication. Regression: present in Yosemite 10.10.1/Safari 8.0.2 present in El Capitan 10.11.2/Safari 9.0.2 present in Safari 10.0.1 The corresponding Apple bug ...


3

in my case, I got this error when tried to Bind MacBook Pro to Windows Domain. I had to shorten Mac Computer name by few characters to make it work. I guess there is a limitation in Windows AD on computer names.


3

OS X: If the opendirectoryd process CPU utilization is high after updating to OS X v10.9.5 You might see an increase in CPU utilization of the opendirectoryd process on systems bound to Active Directory that are updated to OS X v10.9.5. After updating to OS X v10.9.5, Activity Monitor might report high CPU utilization for the process "...


3

Open System Preferences → Users & Groups. Click Login Options. Click the Join button after Network Account Server Bind your Mac to the directory. (You may have to click the lock to unlock System Preferences first. The AD will then show up in the search paths in directory utility, and be available for selection in nodes.


3

I used this procedure to change uid's on macOS Tiger and Ubuntu. The info on passwords has changed. Ok, so how can I check my UID? I've heard that it's dangerous to change the UID, so how should I do if I want the permissions to work in both OSes? You can change the permissions of files and directories in either OS. I suggest that you make a ...


2

My issue to high CPU utilization of opendirectoryd was that some robot on the Internet was trying different passwords to break into my computer via ssh. At least, that's what I think this meant: 8/25/15 12:20:51.173 PM sshd[66230]: error: PAM: authentication error for root from 222.186.21.218 via 192.168.0.3 8/25/15 12:20:51.189 PM sshd[66191]: error: PAM: ...


2

I don't see a way to do this. Since network accounts have their groups managed by the network account server, it doesn't look like this can be overridden locally. And since the user is part of the network account server they are technically not part of a local user group. As a test, I used Advanced Options to modify my network user to group 80 (local admins ...


2

If the VPN is working and the same as on the Windows side, you should be able to enter the server details in the Go > Connect to Server (⌘K) dialog in Finder. If it's a standard Windows file share, just enter in smb://server.local.blah and it should connect. However if that doesn't work, you'll need to provide more details on how your VPN and servers are ...


2

Have you looked into creating a local user template? Here for example: http://gigaom.com/apple/how-to-create-a-custom-user-template-in-snow-leopard/ The template folder is copied to the new user folder at first login. The problem now is how to deploy that user template to every new mac, but that's easily solved by other means (you can create a package and ...


2

If you're looking for a list of users at the login window (you said "able to select a user") then no, you won't find it unless you can manage MCX on the local machine (then, using Workgroup Manager, go to Preferences tab, Login options, Window tab, and select "show network users"). Otherwise, users have to enter their username (in many forms possible, like ...


2

I'm having the exact same problem on my client. Looking at a WireShark trace, there is always a 45 second delay in opening the connection the the file share (OSX Server 3.1.2). Using SMB1 (CIFS) does the same thing and WireShark confirms SMB vs. SMB2. Any other ideas out there?


2

You can modify the properties of com.apple.loginwindow.netaccounts and com.apple.access_loginwindow to create custom login access. This can also be achieve through third party vendors. Centrify is a good third party mac AD plugin that allows to set Zones(AD Users/groups) for login access. There are also MCX and profile options to set login window access. ...


2

It's caused by incorrect time, fixed by sudo ntpdate -u time.apple.com


2

You probably installed jq in /usr/local/bin (or any other directory outside of /bin:/sbin:/usr/bin:/usr/sbin). Usually this directory is not part of PATH so you need to specify the full path to run it (/usr/local/bin/jq).


2

The primary issue being pointed out is not really an AppleScript issue per se. In other words, while the do shell script command is an AppleScript command, nonetheless, the issue is that the command(s) called by the do shell script command are not AppleScript commands, they are shell commands and as such are subject to the environment passed to the shell ...


2

Ok! I have learned something. I will leave this here in hope it helps others who experience the same issue. When setting up the AD binding there was an option about "create mobile account at login" which I left off. I assumed it was like a Windows roaming user. However, it seems if you don't turn this on, OS X won't create a home directory for the user, or ...


2

At long last, yes you can set up management for zero touch deployment through a couple avenues. Use an Apple Service called Device Enrollment Program which is now part of the Apple Business Manager service / web app. https://business.apple.com Use a product to leverage the login process and install a tool like Jamf Connect which lets you run scripts and ...


1

This might be a long shot, but if you have a Kerberos ticket (from signing into another service), Safari might be trying to use that. Open /System/Library/CoreServices/Ticket Viewer.app to see if you have any Kerberos tickets. If so, click on the ticket, Remove Identity, and try again. Alternatively, if nothing is listed, try using Add Identity and seeing ...


1

We are having the same issue. Thus why we haven't upgraded our Macs to Mavericks yet. It appears to try to log into the Intranet without domain credentials(Intranet\'blank'). It should be using the domain\username. I can understand this can be frustrating but it seems that authentication is missing in safari. I just a few seconds it will blow away logs. ...


1

We have ended up getting around the issue by running the command: sudo /System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobileaccount –v –P –n networkusername We are still not sure why it wouldn't just automatically create the account but this has worked for what we needed. Thanks


Only top voted, non community-wiki answers of a minimum length are eligible