Sample Header Ad - 728x90

OpenLDAP configuration via terminal on MacOS 12 and above (Monterey and Ventura)

2 votes
1 answer
1336 views
I want to make Mac machines, in my network, use my LDAP Server to authenticate users. To do so, I tried the GUI tool "Directory Utility" and configured everything as desired and took a copy of following files which were created/modified after the attributes mappings and LDAP configuration:
/Library/Preferences/OpenDirectory/Configurations/Contacts.plist
/Library/Preferences/OpenDirectory/Configurations/Search.plist
/Library/Preferences/OpenDirectory/Configurations/LDAPv3/ldapserver.mycompany.com.plist
Now I want to deploy these files to the other Mac machines through Puppet to configure all of Mac machines to do the authentication process via the Ldap Server. But the problem is I do not have permission to write into those paths (even as a root). Apparently (I guess) the paths can be written through tools like Directory Utility (and maybe
). I used to use this approach before Big Sur and it was working perfectly fine but now I can't get it work. I need a way to configure this through terminal so I can automate (puppetise) the process. I googled it a lot but the only useful thing was
command which does not sound like it can be used to configure an LDAP node. I'm completely open to any other way to configure this and the only requirement is that it should be done through terminal. In another sense, is there any equivalent command-line utility for Directory Utility GUI?
Asked by Roozbeh (41 rep)
Dec 15, 2022, 03:41 PM
Last activity: Dec 15, 2022, 04:03 PM