IT organizations that have been using Apple® macOS® Server are wondering what’s in store for them in the future. Apple has been quietly shifting away from macOS Server and deprecating various components on a regular basis. For those IT organizations that are using macOS Open Directory, there is great concern. Should IT organizations replace macOS Open Directory?
The short answer is yes. While it isn’t clear if Apple is stepping away from Open Directory, it is clear that they are taking a step back from macOS Server. It is doubtful that Apple will continue to invest in macOS Server and consequently Open Directory over the long term. Of course, it is difficult to get any confirmation from Apple. But if we assume that is all true, what should IT admins do to replace macOS Open Directory?
Complexities with Replacing macOS Open Directory
For most IT organizations, the reason they chose Open Directory in the first place was likely because of their Mac infrastructure. Further, choosing Open Directory likely meant that the organization was not interested in using Microsoft® Active Directory®, the on-prem market share leader in directory services. OpenLDAP™ would have been an option, but Apple made it easier to provide LDAP authentication with Open Directory rather than using OpenLDAP.
Additionally, the IT landscape has shifted tremendously since Open Directory became popular. Linux laptops, desktops, and servers are more prevalent than ever. Data centers are being replaced with cloud infrastructure such as AWS® and Google Cloud Platform™. Microsoft Office® and Exchange® have been replaced by G Suite™ and Office 365™. Web applications are available for virtually any business function. All of these fundamental changes are causing IT admins to debate what the next generation of directory services looks like.
With Apple likely shifting away from Open Directory, now may be the perfect time to reevaluate the identity management strategy and approach. Modern, cloud forward organizations are leveraging cloud directory services instead of on-prem solutions such as Active Directory, Open Directory, and OpenLDAP. One cloud identity management solution (Read more...)
*** This is a Security Bloggers Network syndicated blog from Blog – JumpCloud authored by Natalie Bluhm. Read the original post at: https://jumpcloud.com/blog/replace-macos-open-directory/