So it used to be we'd wait for machines that were bound to Active Directory running 10.10.0-10.10.2 to freeze during startup and we'd either perform CPR or apply rc.server script fixes. 'Things can only get better,' we said.
UPDATE January 20, 2015 - Some are reporting an opendirectoryd-related fix, featuring the very cool-looking darwinup. Let's hope it makes it into .2, and we're not all chomping at the bit for 10.10.3! People are noticing a symptom, branded LoginLockout (credit @andrewrose), where Yosemite seemingly freezes during startup.
For many reasons, you may find yourself needing to start a new Mavericks Open Directory server from scratch. In this article, I'll go over how to import your existing users from an older Open Directory server and import them to your new Mavericks server.
Working with Open Directory can be a great experience...until it isn't. When your database goes up in flames (or perhaps if), it can be frustrating and maddening.
Noel Alonso has a post outlining one way you could easily delete a machine out of Active Directory using ldapsearch and ldapdelete. This script could easily be modified and changed to do various other things, such as passing the hostname in as an argument or doing a different action upon the machine.
Paul Suh did a session at MacIT 2013 on Certificates, specifically in regards to Open Directory serving as a PKI. The session was only 45 minutes long, so he could not go into great detail. Thankfully, Paul has written a three part article that covers using an Open Directory-based PKI so that the details can be thoroughly covered.
One of the greatest new enterprise features in OS X Mt. Lion is its support of the DCE/RPC protocol in combination with Active Directory (AD) for use with 802.1x machine or user based certificate authentication.
Zack Smith - 318 If you do not have Active Directory within your environment to deal with, you are probably a happy Macintosh system admin. If you do have to face the Microsoft authentication system, then you have to look at Zack Smith’s presentations.
http://info.condreycorp.com/blog/2012/01/announcing-novell-kanaka-for-mac.html January 18, 2012Condrey Corporation announced yesterday, an agreement with Novell, Inc.
While in Snow Leopard you may have had to script you way to fame and money to get your Mac to get a certificate from a Microsoft CA, in Lion it's mostly done for you.Take a look at this support document for the gory details on using a profile to get your Mac to request a certificate.
