I recently updated to MacOS 15.0.1 and it seems Directory Utility doesn't work for me any longer. How can I fix this? **MacOS 15.0.1** **MacOS 10.13.6** **EDIT I** Confirm that the path is correct. Here's the "About": The folder ~/Library/Saved Application State/com.apple.DirectoryUtility.savedState seems to only exist while Directory Utility is running. When I quit the program it disappears...

I have an LDAP server (OpenLDAP) running under Ubuntu 20.04 that I use for user authentication in my network, which consists of Linux servers and MacOS 11 clients. On my desktop, which runs MacOS 11.1, I can use Directory Utility to access the LDAP database without any problems. I have a MacMini that I upgraded last week to MacOS 11.2. When I try to use Directory Utility on that machine, I get the error "Connection failed to the directory server (2100)" as soon as I select the LDAP server (as "/LDAPv3/*servername*") and before any prompt for username and password. There is a known problem with logging in to remote LDAP servers that can be resolved by executing the following script:

#! /bin/bash

for f in /Library/Preferences/OpenDirectory/Configurations/LDAPv3/*
do
  LDAP_SERVER=/usr/bin/basename $f ".plist"
  echo $LDAP_SERVER

  SASL_MECHANISMS="/usr/bin/ldapsearch -x -h $LDAP_SERVER -b '' -s base -LLL "(objectclass=*)" supportedSASLMechanisms | awk '{if($2 != "") printf "%s ",$2}'"
  echo "  $SASL_MECHANISMS"

  /usr/bin/odutil set configuration /LDAPv3/$LDAP_SERVER  module ldap option "Denied SASL Methods" $SASL_MECHANISMS

done

I have executed this on both the desktop and the MacMini. So it seems that I have a different problem. I looked at the log file of the LDAP server to see what happened when I selected /LDAPv3/servername and got the following:

Feb  7 01:42:17 s-tow-00 slapd: conn=1266 fd=16 ACCEPT from IP=192.168.1.32:54621 (IP=0.0.0.0:389)
Feb  7 01:42:17 s-tow-00 slapd: conn=1266 fd=16 closed (connection lost)

Feb  7 01:42:28 s-tow-00 slapd: conn=1267 fd=16 ACCEPT from IP=192.168.2.127:65230 (IP=0.0.0.0:389)
Feb  7 01:42:28 s-tow-00 slapd: conn=1267 fd=16 closed (connection lost)
Feb  7 01:42:28 s-tow-00 slapd: conn=1268 fd=16 ACCEPT from IP=192.168.2.127:65231 (IP=0.0.0.0:389)
Feb  7 01:42:28 s-tow-00 slapd: conn=1268 op=0 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
Feb  7 01:42:28 s-tow-00 slapd: conn=1268 op=0 SRCH attr=supportedSASLMechanisms defaultNamingContext namingContexts schemaNamingContext saslRealm
Feb  7 01:42:28 s-tow-00 slapd: conn=1268 op=0 ENTRY dn=""
Feb  7 01:42:28 s-tow-00 slapd: conn=1268 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=

The MacMini (conn=1266, IP=192.168.1.32) returns immediately, whereas the desktop (1267, 1268, 192.168.2.127) proceeds to initiate a query. I looked at the files in /Library/Preferences/OpenDirectory/Configurations/LDAPv3 on both machines to see if there was any difference there. Both contain entries for my LDAP servers (let's call them *server1* and *server2*). On the desktop, their permissions were 0644, whereas on the MacMini they were 0600. I cannot change the permissions with chmod (thank you, SIP), so I started Directory Utility with sudo, but the problem still persisted, so I conclude that it has nothing to do with permissions. I then experimented with dscl in interactive mode. On the desktop I got the following:

> ls /LDAPv3/server1
Automount
AutomountMap
CertificateAuthorities
Groups
Mounts
OrganizationalUnit
People
Users

whereas all the MacMini could manage was

> ls /LDAPv3/server1
ls: Invalid Path
 DS Error: -14009 (eDSUnknownNodeName)

I'm at a bit of a loss knowing how to proceed. I thought about exporting the configuration from the desktop using Directory Utility's "Write to Server" and then importing it on the MacMini, but I get "Operation is not supported by the directory node.", which I guess means that I have configured something incorrectly. I *can* "Save Template...", but the directory that I was told was intended for templates (~/Library/Application Support/Directory Access/LDAPv3/Templates) is stubbornly ignored on the MacMini. Does anyone have any suggestions, please, as to how to proceed? Steve

Is there a way to import and export LDAP settings in macOS Catalina? In previous OS versions, when installing a new laptop, we will connect it to our LDAP server simply by copying some files with our settings like: /Library/Preferences/OpenDirectory/Configurations/LDAPv3/ldap_server_fqdn.plist /Library/Preferences/OpenDirectory/Configurations/Search.plist Since Catalina, this solution doesn't work anymore. We always have to register the configuration/bindings manually.

Trying to modify the view of a directroy, I prefer this view: But I hate the right part where we see the info on each app. Is it possible to modify it to be on default like this (without the information part on the right):

When trying to rearrange user accounts, I deleted some data using the Directory Utility (data on a user account under "Users" in the Node "Local/Default"). I would like to restore this data. I have a Time Machine Backup available from before the change. What file would I need to look for to restore, or what other steps must I take?

I've been working on an Ubuntu 16.04 server that has LDAPv3 active via OpenLDAP, my client machines are all macOS from El Capitan upto High Sierra. On the server I have the samba schema implemented, along with the apple schema implemented: serveradmin@Magic:~$ sudo ldapsearch -Q -LLL -Y EXTERNAL -H ldapi:/// -b cn=schema,cn=config dn dn: cn=schema,cn=config dn: cn={0}core,cn=schema,cn=config dn: cn={1}cosine,cn=schema,cn=config dn: cn={2}nis,cn=schema,cn=config dn: cn={3}inetorgperson,cn=schema,cn=config dn: cn={4}ppolicy,cn=schema,cn=config dn: cn={5}samba,cn=schema,cn=config dn: cn={6}apple,cn=schema,cn=config serveradmin@Magic:~$ On my client machine I am able to connect to the LDAPv3 server from the Directory Utility by changing the connection type to RFC2307 and editing the base to be ou=People,dc=salty,dc=domain,dc=com. I can see my users in the Directory Editor: I can connect to my file share over smb://. However, when I try to log in as one of my users it will not allow me to log in. The log files show something like the following: CDT - AID 0x000..26 93.7657.7246, Node: /LDAPv3/10.0.1.57, Module ldap __odnode_copy_record_block_invoke: 4101: No predicates provided or CDT - AID 0x000..1042 394.3858, Node: /LDAPv3/10.0.1.57, Module: ldap - failed to retrieve password for credential No matter what I do it seems like I keep getting the same error message. What is causing this problem, and how can I fix it?

How do I enable the root account ? I don't see any options related the system user. Do I enter the server as "localhost"? What do I select here? System Software Overview: System Version: OS X 10.10.2 (14C1510) Kernel Version: Darwin 14.1.0 Boot Volume: Mac OSx Boot Mode: Normal Computer Name: A MacBook Pro User Name: thufir (thufir) Secure Virtual Memory: Enabled Time since boot: 1:03 Hardware Overview: Model Name: MacBook Pro Model Identifier: MacBookPro9,1 Processor Name: Intel Core i7 Processor Speed: 2.3 GHz Number of Processors: 1 Total Number of Cores: 4 L2 Cache (per Core): 256 KB L3 Cache: 6 MB Memory: 4 GB Boot ROM Version: MBP91.00D3.B08 SMC Version (system): 2.1f175 Serial Number (system): C02HH5JQDV33 Hardware UUID: FBB1FF0A-6EAC-5423-9E8F-405B181EF5F3 Sudden Motion Sensor: State: Enabled

I have created an ldap server (hosted externally with a domain name) on a ubuntu 18.04 machine with openLDAP. I configured linux machines to allow my users to connect using ldap and it works as expected (the user can log-in on the machine, and it creates a new home directory). However on mac, I can list my users in the Directory Utility : And I can get my user information (with his group declared in ldap) bash$ id -p hlarget uid hlarget groups sysadmin everyone netaccounts com.apple.sharepoint.group.1 But when I try to login as the admin user to edit my directory, I have a 2100 error. And when I try to log using ssh hlarget@localhost, or even in session manager, I cannot : failed CRAM-MD5 authentication for authzid - 'dn:cn=hlarget+o=example+ou=users,ou=users,dc=example,dc=com' authcid - 'hlarget' error 49 I'm pretty sure it's an encryption error (I use ssha encryption for my UserPassword). How can i figure out what the problem is? And how to fix it?

Upon trying to login to an all domains in Directory Utility, I am alerted with a window saying the account has expired. How can I re-enable it or fix this problem another way? I am able to unlock it with my administrator password, but it will not work for all domains.

I find there's a global policy that can temporarily block/disable a user (only 1 minute) after authenticating with wrong passwords a few times. But what I want to do is to increase that 1 minute to a longer time, or permanently disable that user. Is it possible?

So, I thought this was the same issue I'd seen before with the old Home folder name conflicting , but it is not. The issue is the **the iMac "shakes" and refuses her password at login, but I am 100% certain it is correct AND she can login to her PC without issue** (and her AD account is not locked out from password attempts). The iMac is running OS X El Capitan, 10.11.6. Windows DC is on Server 2008 (SBS 2008 to be exact). The BIND from the Mac to our Active Directory (Windows) Domain seems fine since I can login as my AD user, but the owner of the Mac cannot login as herself, presumably because of something left over...? She is using a local account for now, but her Mapped Drives drop overnight, so we need to get her back to her AD account. So far I have tried: - Unbind/rebind the Mac to the domain - Checked to ensure all AD users can login to the Mac in System Preferences > Users & Groups > Login Options - Renamed her old local account AND the home folder and changed path - Disable "Force local home directory on startup disk" under Directory Utility > User Experience - Disable "Use UNC path from Active Directory to derive network home location" (also under Directory Utility > User Experience) I can't find anything in the Keychain, but I don't know where else to look. What could be the issue here? Thank you.

When I rejoined domain after already joined domain successfully with dsconfigad, it's failed with > dsconfigad: Node name wasn't found. (2000)

I found commands about how to create a user that is hidden, sudo dscl . create /Users/USERNAME IsHidden 1 but how can I hide an existing user?

When i tried to unzip using the Mac default Archive zip utility and the error message:
Error 1 - Operation not permitted. Then I tried using 7zx and got the error message:
Cannot open the files as archive file How can I retrieve image files from the damaged zip archive file? Are there any tools to retrieve at least some of my files from the damaged zip file?

I accidentally created a user with a duplicate UID. I need advice on how to fix this predicament. As you can see, running dscl shows two users with the same uid: dscl . -list /Users uid | sort -nrk 2 jenkins 9999 original-user 9999 This happened because I was tweaking a package installer script and incorrectly assigned an existing UniqueId when creating a new user. The UniqueId matches the uid for my own account. Now when I login to OSX (with my own account), OSX has lost all of my profile settings (ie. Finder shows home for the new user instead of my own, browser has lost my history, etc). Although OSX shows the profile for the new user, Terminal correctly recognizes the user that I logged in as. And therefore I'm able to confirm my old files (ie. Document, Downloads) still exist intact. This is what I ran to get myself in this situation: uid=9999 gid=$uid while dscl -search /Groups gid $gid | grep -q $gid; do echo "gid $gid is not free, trying next" gid=$(($gid + 1)) done echo "Using gid $gid for jenkins" dscl . -create /Groups/jenkins PrimaryGroupID $gid dscl . -create /Users/jenkins UserShell /bin/bash dscl . -create /Users/jenkins Password '*' dscl . -create /Users/jenkins UniqueID $uid dscl . -create /Users/jenkins PrimaryGroupID $gid dscl . -create /Users/jenkins NFSHomeDirectory "$JENKINS_HOMEDIR" dscl . -append /Groups/jenkins GroupMembership jenkins How can I recover?

I have an OpenLDAP instance running on Amazon AWS. I've got a few users and groups set up, I'm able to use ldapsearch from my macbook to bind and search the server. I would like was trying to add my OpenLDAP server as a node in my Directory Services, and I provided all the necessary information, but it will not connect giving the oh so informative Connection failed to node '/LDAPv3/XX.XXX.XXX.X' ls /LDAPv3/ XX.XXX.XXX.X but if try to do anything with the node (cd, list, read, etc.), I get this: Invalid Path DS Error: -14009 (eDSUnknownNodeName) why is the nodename unknown? what am i doing wrong

I am trying to setup NIS on OS X 10.8 but it fails for some reasons. I tried to add the NIS domain using the Directory Utility.app but when I go to Directory Editor tab and select my NIS node, I do get an error: Connection failed to node '/NIS/uk.example.com' (2100) **On OS X 10.8 machine** * uk.example.com is the domainname (does *not* solve in DNS) * nis2.uk.example.com is the ypbind server (does solve in DNS) * I am already on corporate LAN and I can ping nis2.uk.example.com * domainname returns uk.example.com * ypbind -d prints 'ypbind: returned from 10.80.16.129 about uk.example.com' but it does not return, I need to press Ctrl-C.

dhcp-3-130:~ sorins$ rpcinfo -p
   program vers proto   port
    100000    2   udp    111  portmapper
    100000    3   udp    111  portmapper
    100000    4   udp    111  portmapper
    100000    2   tcp    111  portmapper
    100000    3   tcp    111  portmapper
    100000    4   tcp    111  portmapper
    100007    2   udp    845  ypbind
    100007    2   tcp   1009  ypbind

dhcp-3-130:~ sorins$ sudo automount -vc
automount: /net updated
automount: /home updated
automount: /Network/Servers updated
automount: no unmounts

ypwhich
nis2.uk.example.com

** On a reference Ubuntu, in the same LAN, where NIS works ** ypbind -d 31213: parsing config file 31213: Trying entry: domain uk.example.com server 10.80.16.129 31213: parsed domain 'uk.example.com' server '10.80.16.129' 31213: add_server() domain: uk.example.com, host: 10.80.16.129, slot: 0 31213: [Welcome to ypbind-mt, version 1.20.1] So Ubuntu works, but on OS X it doesn't. **Why?**

I am trying to setup OS X 10.7 Lion to work as an a NIS/NFS client but without too much success so far. ## Existing configuration that works on Ubuntu cat /etc/yp.conf domain uk.example.com server 10.80.16.129 cat /etc/auto.master /usr/groups yp:auto.groups --timeout=3600 /home yp:auto.home --timeout=3600 /nistest yp:auto.misc --timeout=3600 /misc yp:auto.misc --timeout=3600 >ypwhich nis2.uk.example.com ## Configuration on OS X (that does not work yet) I tried to add the NIS domain using System Preferences > Users & Groups > Unlock > Login Options > Join... > Open Directory Utility... (yes Apple did a great job on making this as hard as possible to access). There edit the NIS record and add the NIS domain uk.example.com (not the same as DNS domain) and the IP address of this NIS domain 10.80.16.129 and obviously checked the Use NIS for authentication. I rebooted but this did not help. Still, interesting on login screen there was a tooltip saying that network login is unavailable. I logged in with an admin account, logged out but the situation did not change. ## Debugging >ypwhich nis2.uk.example.com cat /var/log/opendirectory.log

2012-06-27 10:46:50.575 BST - opendirectoryd (build 172.13) launched...
2012-06-27 10:46:50.577 BST - Logging level limit changed to 'error'
2012-06-27 10:46:50.600 BST - Initialize trigger support
2012-06-27 10:46:50.610 BST - Registered node with name '/Active Directory' as hidden
2012-06-27 10:46:50.611 BST - Registered node with name '/Configure' as hidden
2012-06-27 10:46:50.612 BST - Discovered configuration for node name '/Contacts' at path '/Library/Preferences/OpenDirectory/Configurations//Contacts.plist'
2012-06-27 10:46:50.612 BST - Registered node with name '/Contacts'
2012-06-27 10:46:50.614 BST - Registered node with name '/LDAPv3' as hidden
2012-06-27 10:46:50.617 BST - Registered node with name '/Local' as hidden
2012-06-27 10:46:50.619 BST - Registered node with name '/NIS' as hidden
2012-06-27 10:46:50.620 BST - Discovered configuration for node name '/Search' at path '/Library/Preferences/OpenDirectory/Configurations//Search.plist'
2012-06-27 10:46:50.620 BST - Registered node with name '/Search'
2012-06-27 10:46:50.626 BST - Loaded bundle at path '/System/Library/OpenDirectory/Modules/legacy.bundle'
2012-06-27 10:46:50.632 BST - Loaded bundle at path '/System/Library/OpenDirectory/Modules/search.bundle'
2012-06-27 10:46:51.636 BST - '/Search' has registered, loading additional services
2012-06-27 10:46:51.636 BST - Initialize augmentation support
2012-06-27 10:46:51.642 BST - Loaded bundle at path '/System/Library/OpenDirectory/Modules/SystemCache.bundle'
2012-06-27 10:46:51.647 BST - Successfully registered for Kernel identity service requests
2012-06-27 10:46:51.653 BST - Loaded bundle at path '/System/Library/OpenDirectory/Modules/PlistFile.bundle'
2012-06-27 10:46:51.656 BST - Loaded bundle at path '/System/Library/OpenDirectory/Modules/FDESupport.bundle'
2012-06-27 10:46:51.707 BST - Loaded bundle at path '/System/Library/OpenDirectory/Modules/ConfigurationProfiles.bundle'
2012-06-27 10:46:51.708 BST - Registered subnode with name '/Local/Default'
2012-06-27 10:46:51.712 BST - Loaded bundle at path '/System/Library/OpenDirectory/Modules/nis.bundle'
2012-06-27 10:46:51.713 BST - Registered subnode with name '/NIS/uk.example.com'
2012-06-27 10:47:21.743 BST - 239.839.841.843 - Client: automount, UID: 0, EUID: 0, GID: 0, EGID: 0
2012-06-27 10:47:21.743 BST - 239.839.841.843, Node: /NIS/uk.example.com, Module: nis - could not determine map for rectype 'mounts' attribute 'byname'
2012-06-27 11:10:30.994 BST - Loaded bundle at path '/System/Library/OpenDirectory/Modules/configure.bundle'
2012-06-27 11:10:30.996 BST - Loaded bundle at path '/System/Library/OpenDirectory/Modules/keychain.bundle'
2012-06-27 11:10:31.010 BST - Loaded bundle at path '/System/Library/OpenDirectory/Modules/ldap.bundle'
2012-06-27 11:10:31.017 BST - Loaded bundle at path '/System/Library/OpenDirectory/Modules/ActiveDirectory.bundle'
2012-06-27 11:11:06.745 BST - 1801.3397 - Client: Directory Utili, UID: 501, EUID: 501, GID: 20, EGID: 20
2012-06-27 11:11:06.745 BST - 1801.3397, Node: /NIS/uk.example.com, Module: nis - could not determine map for rectype 'mounts' attribute 'byname'
2012-06-27 11:15:42.254 BST - 1801.4096 - Client: Directory Utili, UID: 501, EUID: 501, GID: 20, EGID: 20
2012-06-27 11:15:42.254 BST - 1801.4096, Node: /NIS/uk.example.com, Module: nis - could not determine map for rectype 'mounts' attribute 'byname'
 

When I go to the network browser (in the Finder, hit command K, then click the "Browse" button, or just shift-command K), I see three domain names from a network I used to connect to six years ago. The appear in a list with dropdown trinagles to the left: example.org
example.biz
example.com
How can I remove those? The computer was bound to an Active Directory domain, but nothing I try in the Directory Utility seems to remove them. This was true on 10.5, 10.6, 10.7, and now on 10.8. I will not wipe the system and start virgin for something like this that is not causing a problem but annoys me.

The older method of: dscl . -create /Users/username doesn't work because /System/Library/LaunchDaemons/com.apple.DirectoryServices.plist can't be found. From what I gather, OSX Lion doesn't use this method anymore. How can I create a new user solely from the Terminal?