<!--
{
  "availability" : [
    "macCatalyst: -",
    "macOS: -"
  ],
  "documentType" : "symbol",
  "framework" : "OpenDirectory",
  "identifier" : "/documentation/OpenDirectory/kODAttributeTypeAuthenticationAuthority",
  "metadataVersion" : "0.1.0",
  "role" : "Global Variable",
  "symbol" : {
    "kind" : "Global Variable",
    "modules" : [
      "Open Directory"
    ],
    "preciseIdentifier" : "c:@kODAttributeTypeAuthenticationAuthority"
  },
  "title" : "kODAttributeTypeAuthenticationAuthority"
}
-->

# kODAttributeTypeAuthenticationAuthority

The attribute type used to specify the mechanism used to verify or set a user’s password. Typically found in records of type `kODRecordTypeUsers`

```
let kODAttributeTypeAuthenticationAuthority: String
```

## Discussion

An authentication authority is a multi-part string divided by semicolons. The “type” component of the string can have the following values:

- `basic` indicates a `crypt` password.
- `ShadowHash` indicates a hashed password stored in a secure location.
- `ApplePasswordServer` indicates a password originating from password server.
- `Kerberosv5` indicates a Kerberos V5 password.
- `LocalCachedUser` indicates a cached user account from another node that uses a `ShadowHash` password.
- `DisabledUser` indicates a disabled account.

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)