Global Variable


The attribute type used to specify the mechanism used to verify or set a user’s password. Typically found in records of type kODRecordTypeUsers


let kODAttributeTypeAuthenticationAuthority: String


An authentication authority is a multi-part string divided by semicolons. The “type” component of the string can have the following values:

  • basic indicates a crypt password.

  • ShadowHash indicates a hashed password stored in a secure location.

  • ApplePasswordServer indicates a password originating from password server.

  • Kerberosv5 indicates a Kerberos V5 password.

  • LocalCachedUser indicates a cached user account from another node that uses a ShadowHash password.

  • DisabledUser indicates a disabled account.