Clik here to view.
Finding your Active Directory Site and Domain Controllers
The AD Plugin uses information in Sites in your Active Directory Configuration to get a list of Domain Controllers to use for LDAP and Kerberos connections. Sites are a method of configuring Active...
View ArticleClik here to view.
Notes on Leopard AD Plugin 10.5.2
The Active Directory plugin is finally usable in 10.5.2, but some environments require workarounds. 1.) Your domain must resolve to the ip address of a domain controller. This was not a requirement in...
View ArticleClik here to view.
10.5 AD plugin slow logins related to macAddress query
The slow login times in the Leopard AD plugin seem to be related to a search by macAddress. If you killall -USR1 DirectoryService, and login on a Leopard machine bound to AD, you’ll notice a query on...
View ArticleClik here to view.
Notes on Leopard AD Plugin 10.5.3
All of the bugs listed here are fixed in 10.5.3. What isn’t fixed is the slow logins on AD environments with an R2 schema that hasn’t been extended with Mac attributes. Again, please file bug reports...
View ArticleClik here to view.
Fix for slow AD logins/joins caused by macAddress query
I’ve been hassling Apple about this issue for quite a while. Apple has two workarounds for this problem: 1.) Index the macAddress attribute in AD. Even though the macAddress is not part of the Computer...
View ArticleClik here to view.
AD Plugin Join Replication Issues
I was getting random AD plugin connection issues after joining to Active Directory. dsconfigad showed no errors, but sometimes I would not get a connection and I would have to rejoin. The problem...
View ArticleClik here to view.
Set DirectoryService debug level
Apple’s document on Extending and Troubleshooting Directory Services has a lot of good info. One correction though is that the debug level must be an integer. sudo defaults write...
View ArticleClik here to view.
Get and use secure supported LDAP SASL authentication mechanisms
You don’t have to use insecure clear text Simple BIND authentication for accessing your LDAP servers. Get list of supported authentication mechanisms: ldapsearch -h example.com -x -b "" -s base -LLL...
View ArticleClik here to view.
One Liner to get Active Directory Computer Account and Password on OS X
Does that count as a one liner?
View Article
