Skip to main content

Looked at dsconfigad hoping it would point upward to dsconfig.
Looked at dscl which I think just lists them in alphabetical order.
Looked at odutil which seems to only list connections and statistics.



Any help appreciated.

dscl /Search -read / CSPSearchPath



That was buried under a rock.

dscl /Search -read / CSPSearchPath



That was buried under a rock.



Thank you!   It seems so easy and yet it took a while to find this again...  It turns out the Internet is a big place...

Thank you!   It seems so easy and yet it took a while to find this again...  It turns out the Internet is a big place...


In an attempt to be helpful, here is what I did with this information:

I created an extension attribute - 

#!/usr/bin/env zsh
RESULT=""
authSearchPolicy=$(dscl /Search -read / SearchPolicy | awk '{print $NF}' | awk -F':' '{print $NF}')
if [ "$authSearchPolicy" = "LSPSearchPath" ]; then
RESULT="local"
fi
if [ "$authSearchPolicy" = "NSPSearchPath" ]; then
RESULT="auto"
fi
if [ "$authSearchPolicy" = "CSPSearchPath" ]; then
RESULT="custom"
fi
echo "<result>$RESULT</result>"

And I used this bit of shell script to change the Directory Services configuration in the ways I wanted. 

#!/usr/bin/env zsh

# Change it from Custom to Local
searchPathCheck=$(dscl /Search -read / SearchPolicy | grep "CSPSearchPath")
if [ "$searchPathCheck" != "" ]; then
dscl /Search -change / SearchPolicy "dsAttrTypeStandard:CSPSearchPath" "dsAttrTypeStandard:LSPSearchPath"
echo "Switched from the Custom Search Path to Local Search Path in Directory Services Authentication."
searchPathCheck=""
fi

And here are some notes I captured during testing. 

 

# Key = SearchPolicy
# Value options:
# dsAttrTypeStandard:CSPSearchPath = custom search Path
# dsAttrTypeStandard:LSPSearchPath = local search path
# dsAttrTypeStandard:NSPSearchPath = automatic search path

# delete AD from the custom search path
# dscl /Search -delete / CSPSearchPath "/Active Directory/YOURDOMAIN/All Domains"
Terms & ConditionsCookie settings