You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

slapconfig -setauthmechanisms equivalent in OS X 10.9 ?

After creating an Open Directory using commandline slapconfig -createldapmasterandadmin I am missing SMB authentication for users created in OD.


Logs on server running file sharing service confirm that:

Node: /LDAPv3/example.com, Module: AppleODClientPWS - Audit - Credential method not supported (5100) - Modify password for record type Users 'testuser' node '/LDAPv3/example.com', using method dsAuthNodeNTLMv2


I tried running slapconfig -getauthmechanisms and slapconfig -setauthmechanisms commands, but these options seems to be missing since Lion.


dscl /LDAPv3/127.0.0.1 read / AuthMethod on master directory server gives me this:

AuthMethod: dsAuthMethodStandard:dsAuthGetGlobalPolicy dsAuthMethodStandard:dsAuthGetPolicy dsAuthMethodStandard:dsAuthSetGlobalPolicy dsAuthMethodStandard:dsAuthSetPolicyAsRoot dsAuthMethodStandard:dsAuthNodeCRAM-MD5 dsAuthMethodStandard:dsAuthSetPasswd dsAuthMethodStandard:dsAuthSetPasswdAsRoot dsAuthMethodStandard:dsAuthChangePasswd dsAuthMethodStandard:dsAuthClearText dsAuthMethodStandard:dsAuthCrypt dsAuthMethodStandard:dsAuthNodeNativeCanUseClearText dsAuthMethodStandard:dsAuthNodeNativeCannotUseClearText


While on another test installation with Open Directory created using Server.app GUI - and SMB authentication working - this dscl command results in:

AuthMethod: dsAuthMethodStandard:dsAuthGetGlobalPolicy dsAuthMethodStandard:dsAuthGetPolicy dsAuthMethodStandard:dsAuthSetGlobalPolicy dsAuthMethodStandard:dsAuthSetPolicyAsRoot dsAuthMethodStandard:dsAuthNodeCRAM-MD5 dsAuthMethodStandard:dsAuthSMBNTKey dsAuthMethodStandard:dsAuthNTWithSessionKey dsAuthMethodStandard:dsAuthMSCHAP2 dsAuthMethodStandard:dsAuthMPPEMasterKeys dsAuthMethodStandard:dsAuthNodeDIGEST-MD5 dsAuthMethodStandard:dsAuthNodeNTLMv2 dsAuthMethodStandard:dsAuthNodeNTLMv2WithSessionKey dsAuthMethodStandard:dsAuthAPOP dsAuthMethodStandard:dsAuthSetPasswd dsAuthMethodStandard:dsAuthSetPasswdAsRoot dsAuthMethodStandard:dsAuthChangePasswd dsAuthMethodStandard:dsAuthClearText dsAuthMethodStandard:dsAuthCrypt dsAuthMethodStandard:dsAuthNodeNativeCanUseClearText dsAuthMethodStandard:dsAuthNodeNativeCannotUseClearText


Notice a lot more authentication methods available.


So, how I can add missing authentication mechanisms?

Posted on Apr 2, 2014 8:37 AM

Reply
Question marked as Top-ranking reply

Posted on Apr 3, 2014 7:04 AM

Found the solution myself.

dscl -u diradmin -p /LDAPv3/127.0.0.1 -append /Config/dirserv apple-enabled-auth-mech SMB-NTLMv2


Then Open Directory service restart. That does the trick.

1 reply

slapconfig -setauthmechanisms equivalent in OS X 10.9 ?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.