Use External Directory AD Group for FileMaker Admin Console Access on macOS

Besides using its own internal accounts, FileMaker Server supports centrally managed authentication using directory systems such as Active Directory. Using these systems can help control access to both FileMaker Server’s admin console and database files.

If you are using directory bound servers already, you’ll often want to add access to a FileMaker Server’s console using directory groups instead of adding in specific users. Previously this was easily done with either Workgroup Manager (no longer supported on macOS), or the Server application (still viable, but just in a vestigial form).

Here I’ll show how you can do the same thing using the dscl command.

Continue reading “Use External Directory AD Group for FileMaker Admin Console Access on macOS”

AD-bound macOS systems not authenticating? Restart opendirectoryd

We support quite a few macOS systems that are bound to an AD (Active Directory) domain. Occasionally, one, two, or perhaps several would lose the ability to authenticate users with AD credentials. Often this was with one of the FileMaker Servers, where external authentication was being used for either user access or FMS Admin Console access. I’ve explored ways to fix this, without restarting or disrupting other services.

Continue reading “AD-bound macOS systems not authenticating? Restart opendirectoryd”