Mac OS X: Force LDAP Signing using dsconfigad
dsconfigad did not support signing of LDAP packets in 10.4.x. Â However, this was an upgrade that was introduced in the 10.5 version of the AD Plug-in. Â Provided that your Active Directory environment uses LDAP signing, a standard policy with DCs, you can mirror your settings on the DC in dsconfigad by using the -packetsigning option followed by either an allow, disable or require variable. Â To force LDAP signing, just run the following command:
dsconfigad -packetsigning required
To then disable signing if your environment doesn’t support it use the following command:
dsconfigad -packetsigning disable
The default variable is allow, which will use LDAP signing when possible.
Similar Articles:
- Disable SMB Signing
- Bind to AD Using the Command Line
- Mac OS X: Namespace support?
- Fun Times with the JAMF Binary
- Mac OS X Server 10.5: Customizing Trust Time for the adplugin
Posted on September 27, 2008 at 11:33 pm by admin · Permalink
In: Active Directory, Mac OS X, Mac OS X Server, Mac Security, Mass Deployment, Windows Server · Tagged with: Command line, dsconfigad, Mac OS X, Mac Security, packet signing
In: Active Directory, Mac OS X, Mac OS X Server, Mac Security, Mass Deployment, Windows Server · Tagged with: Command line, dsconfigad, Mac OS X, Mac Security, packet signing
