Use Profile Manager or Wiki service with Active Directory or third-party LDAP services

In some networks, not all clients are bound to the same Active Directory domain as the server. Learn how to set up macOS Server to use the Profile Manager or Wiki service in these networks.

In macOS Server, Profile Manager and the Wiki service support Digest MD5 authentication. The Active Directory connector also supports this authentication. 

In some cases, all users and the server are bound to the same Active Directory domain. If so, you don’t have to set up macOS Server to support Active Directory users.

Use these Terminal commands to set up macOS Server if:

  • You authenticate with Active Directory in a multidomain environment. The server that runs the Profile Manager or Wiki service is on a different domain than the clients.
  • Your Profile Manager or Wiki service authenticates with a third-party LDAP server.

These Terminal commands set the Profile Manager and Wiki services to use plain text authentication instead of digest authentication. To protect passwords that are sent over the network, turn on SSL encryption for the Profile Manager and Wiki websites.  

macOS Server (including OS X Server Mavericks and later)

Use these Terminal commands:

sudo serveradmin stop wiki
sudo /usr/libexec/PlistBuddy -c 'set :Auth:Authenticator plaintext' /Library/Server/Wiki/Config/collabd.plist
sudo serveradmin start wiki

Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Risks are inherent in the use of the Internet. Contact the vendor for additional information. Other company and product names may be trademarks of their respective owners.

Published Date: