Created
July 25, 2017 08:49
-
-
Save aduzsardi/b793587252d4f67b71297bb0b3943b73 to your computer and use it in GitHub Desktop.
Fixing OpenLDAP Authentication on OS X
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# You would want to do this only if you do 'simple bind' to your LDAP server , if you're using an SASL method for authentication | |
# it should work without doing this. | |
sudo su | |
/usr/libexec/PlistBuddy -c "add ':module options:ldap:Denied SASL Methods:' string CRAM-MD5" /Library/Preferences/OpenDirectory/Configurations/LDAPv3/yourldapserver.plist | |
/usr/libexec/PlistBuddy -c "add ':module options:ldap:Denied SASL Methods:' string NTLM" /Library/Preferences/OpenDirectory/Configurations/LDAPv3/yourldapserver.plist | |
/usr/libexec/PlistBuddy -c "add ':module options:ldap:Denied SASL Methods:' string GSSAPI" /Library/Preferences/OpenDirectory/Configurations/LDAPv3/yourldapserver.plist |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
http://blog.smalleycreative.com/administration/fixing-openldap-authentication-on-os-x-lion/