Applies to: All version of Centrify Deployment Manager with all versions of Mac OS X.
When adding a Mac OS X machine to the computer list in Deployment Manager (DM), the process seems to take a long time and CPU usage maxes out to 100%.
Enabling debug logs in DM to capture this event will cause the log files to fill up the entire hard drive very quickly.
As part of the process of adding a Mac to the computer list - DM will query for a list of all the users and groups on the Mac. Normally this should only return a list of the local users and groups. However if the Mac is still currently joined to the domain using the Apple AD Plugin, then DM is unable to distinguish between which users are local accounts and which are AD accounts and so will therefore start pulling down the entire AD user directory.
Note that this does not happen if the Mac is joined to the domain with an existing Centrify agent.
The script file which performs this search in DM can be modified to force a local-only user search for all Mac machines:
- Open \Program Files\Centrify\Deployment Manager\Scripts\local_account.lua
- Search for two functions, "get_effective_users" and "get_effective_groups"
- In these two functions, change:
(just a dot inside quotation marks).
This will be fixed in a future version of Deployment Manager.