Active Directory Authentication/Contacts Search Path in Mavericks

mostlikelee
Contributor

Anyone else receiving the following error on 10.9.1 when scripting the Authentication and Contacts search paths for Active Directory?

dscl /Search -delete / SCPSearchPath "/Active Directory/MYDOMAIN/All Domains"
<main> attribute status: eDSReadOnly
<dscl_cmd> DS Error: -14121 (eDSReadOnly)

2 REPLIES 2

wyip
Contributor

I tried on one of my 10.9.1 test machines and it worked, except the attribute on my computer was named "CSPSearchPath" not "SCPSearchPath". Maybe try running a dscl /Search -read / to take a look at your attributes?

mostlikelee
Contributor

Thanks for your help. The issue ended up being due to improper permissions set on the OU for our Casper service account.