Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a few Macs standing around and would like to administer their users (my kids, wife and occasional guests) in one place. The closest thing to a server (always on) I have here is an openwrt router.

Is this doable at all? What protocols would such a server have to offer?

share|improve this question

migrated from Apr 3 '11 at 11:18

This question came from our site for system and network administrators.

up vote 2 down vote accepted

The easiest way is to use MacOS Server, which is too expensive at the moment, but might come for free with MacOS 10.7 "Lion". The only other option to do this with MacOS clients that might be doable for non-experts is a connection to a Windows Server via the Active Directory plugin, but this requires a Windows server, which is also expensive.

It should be possible to install an LDAP server on a OpenWRT router, but getting this to run well with MacOS clients is extremely involved and requires quite a lot of knowledge regarding MacOS's inner workings.

NIS might work as well, but I guess this will suffer from all the same drawbacks that makes a working LDAP solution so hard to achieve.

share|improve this answer

There are two separate services you need to set up:

  1. User directory – a central location where the user account information (uid, shell, homedir) could be looked up.

    • Hesiod is ancient, but works. All it needs is DNS. It's very easy to set up on Linux/glibc; no idea about OS X.

    • LDAP is very common, but can be hard to set up.

    • NIS/YP – I don't know much about this, but apparently it is commonly used.

  2. Authentication – a centralized service to verify the user's password.

    • Kerberos – probably the best choice (although at first it might seem complicated). OS X even uses this internally, and so does Windows Active Directory.

      (...but when choosing a KDC, choose carefully. I haven't yet found a way to convert between MIT Kerberos database and Heimdal's.)

share|improve this answer

I'm not an expert in this but i think you need a kerberos server on openwrt

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.