<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> </head> <body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""> I am experiencing difficulty dragging this over the finish line. I have many CentOS hosts authenticating to IPA, but have hit the wall on OS-X. <div class="">I consider myself pretty strong on os-x, and have run OpenDirectory (though that was ten years ago). My issue appears to be the LDAP mapping between OD and IPA.</div> <div class="">System Intregrity Protection is disabled. Users can pull tickets fine, this snag is in login/createhomedir.<br class=""> <div class=""><br class=""> </div> <div class="">I initially posted this on the bug list, and was redirected here.</div> <div class="">You will find the details of this issue easiest to digest on the <a href="https://fedorahosted.org/freeipa/ticket/6581" class="">bug list</a> (wiki markup is better that what this maling list would retain).</div> </div> <div class=""><br class=""> </div> <div class="">Please take a glance and let me know what you think.</div> <div class=""><br class=""> </div> <div class="">Thank You for your attention.</div> <div class=""><br class=""> </div> <div class="">- grant</div> This e-mail and any attachments are intended only for use by the addressee(s) named herein and may contain confidential information. If you are not the intended recipient of this e-mail, you are hereby notified any dissemination, distribution or copying of this email and any attachments is strictly prohibited. If you receive this email in error, please immediately notify the sender by return email and permanently delete the original, any copy and any printout thereof. The integrity and security of e-mail cannot be guaranteed. </body> </html>