Mac OS X Server,  Mac Security

OD: Password Server Stats

mkpassdb is the command line front end for the Password Server in Mac OS X Server. When you are using the mkpassdb command, you can get a number of statistics, including the type of authentication used and total connections. To see the statistics you would use the following command (run with elevated permissions):

mkpassdb -getstats

The listing shows good authentications (successful) and bad authentications (unsuccessful) and is then broken down by each encryption type: apop, cram-md5, digest-md5, mschap-v2, smb-lm (hope there aren’t many of those), smb-nt, smb-ntlm-v2, webdav-digest-md5 and the ubiquitous other.  These stats can be pretty useful when troubleshooting authentication errors, looking at the security of the environment, etc.