We determined that it was the DAVE installer changing the User Authentication Search path from "Custom path" to "Local directory" (in Directory Utility).
So that people aren't struggling with this, the solution is to run the following afterwards:
This changes the Search Path (SearchPolicy) from Local (LSPSearchPath) to Custom (CSPSearchPath). It does not change the Custom path itself; you should find that your custom Search Path survived the DAVE installation intact - it's just the setting to actually use the Custom path that is removed/altered/borked by the DAVE installer. This command also does not do anything if SearchPolicy is already set to CSPSearchPath, or any other value - it specifically looks for "LSPSearchPath".
Code: Select all
dscl /Search -change / SearchPolicy dsAttrTypeStandard:LSPSearchPath dsAttrTypeStandard:CSPSearchPath
Of note, "Custom" is a misnomer, and refers to anything that is not Local-only, or Automatic. We have not hacked together our own search path in a non-standard, highly customized way. When dsconfigad or any other normal admin tool is used to add a Mac to Active Directory, DirectoryServices/OpenDirectory will automatically create and activate the necessary so-called "custom" search path.
In any event, this sort of system-level configuration trouncing is Bad Form, Thursby. Very Bad Form.
BTW, this also occurs on uninstallation.