Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-5066: Activity Monitor is reporting high CPU usage of the opendirectoryd process

Centrify Identity Service, Mac Edition ,  

12 April,16 at 11:17 AM

Applies to: CentrifyDirect Control 5.1.x and higher on Mac OS X

Problem:

Activity Monitor is displaying that the opendirectoryd process is using 100-400% CPU usage.  


Cause:


This could be caused by having voluminous amounts of Active Directory groups.  In order to determine group membership, instead of looking at the individual computer object, or the individual user to determine group membership; the machine has to check every AD group in the environment to determine what group(s) the machine or user may be a part of.  This is a limitation of OS X and AD, and not Centrify. 


Workaround:

Configure the auto.schema.groups parameter in the centrifydc.conf file located at /etc/centrifydc/centrifydc.conf.  
This limits the number of AD groups that have to be searched in order to determine group membership.

Note:

  • This parameter can also be set with group policy by configuring:
    • Computer Settings> Centrify Settings> DirectControl Settings> Adclient Settings> "Specify AD Groups"
       


If using an earlier version of the Centrify Mac agent, see the following KB:

 

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.