is anyone using google's secure LDAP for macOS authentication? i'm trying to make a decision for our upcoming summer deployment, but have concerns about deployment and potential stability...
google's solution offers a python script to deploy the directory settings which poses the deployment problem - apple has announced the sunset of built in python, and with it, the objective-c bridge that their deployment script utilizes. i'm working on migrating their script to swift, but am not a swift programmer...
i'm also on the fence about the lack of vetting and testing and dealing with potential (and widespread) issues when apple changes things... i.e. apple broke kerberos for anyone using their own AD directory plug-in preventing user logins/authentication after installing their last 10.14/15 security update. luckily, the AD user base is expansive and a fix was published quickly.
any feedback is appreciated.
Solved! Go to Solution.
You can use macadmin Python3 framework.
https://github.com/macadmins/python/releases/tag/v3.9.10.02082022223633
- Modify shebang in Google python script to use python3
#/usr/local/bin/managed_python3
- Change path on postinstall script to use python3
I believe pyobj is one of the common libraries already prebuilt in that python3 framework.
That should work on 12.3 (for now).