Apple provides a built-in Apple Directory plug-in that may interfere with the Centrify DirectControl Agent for Macinstallation and operation. Therefore, before installing the agent, disable Apple’s built-in Active Directory plug-in. In addition, remove Active Directory from the Authentication and Contacts search paths. If this plug-in is enabled and the Centrify DirectControl Agent for Mac has been installed, disable the plug-in, then reboot the Macintosh computer for reliable Centrify operation.
To disable the Apple Directory plug-in and remove Apple Directory from the Authentication and Contacts search paths:
- On a Mac computer, open the Directory Utility.
You can find the Directory Utility in one of these folders depending on the operating system that you are running:
/System/Library/CoreServices/Applications/Utilities
-
Click the lock icon and enter credentials to allow you to make changes.
-
Click the Search Policy icon.
-
Click the Authentication tab, then select Custom path in the Search box.
If Active Directory was previously enabled, Active Directory appears in the Directory Domains box; for example:
/Active Directory/All Domains
-
Select /Active Directory/All Domains and click Remove — or select the minus (‑) sign). Then click Apply.
-
Click the Contacts tab, then select Custom path in the Search box. If Active Directory was previously enabled, Active Directory shows (in red font) in the Directory Domains box; for example:
/Active Directory/All Domains
-
Select /Active Directory/All Domains and click Remove. Then click Apply.
-
Close the window.
-
If you have already installed the Centrify DirectControl Agent for Mac, reboot the computer.
Doc Feedback