Applies to: CentrifyDirect Control 5.1.x and higher on Mac OS X
Activity Monitor is displaying that the opendirectoryd process is using 100-400% CPU usage.
This could be caused by having voluminous amounts of Active Directory groups. In order to determine group membership, instead of looking at the individual computer object, or the individual user to determine group membership; the machine has to check every AD group in the environment to determine what group(s) the machine or user may be a part of. This is a limitation of OS X and AD, and not Centrify.
Configure the auto.schema.groups parameter in the centrifydc.conf file located at /etc/centrifydc/centrifydc.conf.
This limits the number of AD groups that have to be searched in order to determine group membership.
- This parameter can also be set with group policy by configuring:
- Computer Settings> Centrify Settings> DirectControl Settings> Adclient Settings> "Specify AD Groups"
If using an earlier version of the Centrify Mac agent, see the following KB: