.

My XPC service is a daemon with startup plist file in Library/LaunchDaemons and loaded by launchd upon product installation. I thought that every XPC service must be managed by launchd, because it's responsible for the routing from client according to mach service name.

Hi, I've followed you very useful command and found a field that represent the user full name (base name + domain) even when active directory is unreachable. the field is kODAttributeTypeAltSecurityIdentities and I can definitely recommend using it to extract domain name. 		NSError *err; 		 		ODNode * searchNode = [ODNode nodeWithSession:[ODSession defaultSession] name:@"/Search" error:&err]; 		if (err) { 				writeLog(LOG_ERROR, "error getting Search node : %s", [[err description] UTF8String]); 				return L""; 		} 		 		ODRecord *record = [searchNode recordWithRecordType:kODRecordTypeUsers 																									 name:username 																						 attributes:nil error:&err]; 		if (!record) { 				writeLog(LOG_ERROR, "error: couldn't find user %S in Search node : %s", username.c_str(), [[err description] UTF8String]); 				return L""; 		} 		ODQuery *query = [[ODQuery alloc] initWithNode:searchNode 																		forRecordTypes:kODRecordTypeUsers 																				 attribute:kODAttributeTypeRecordName 																				 matchType:kODMatchEqualTo 																			 queryValues:username 																	returnAttributes:@[kODAttributeTypeAltSecurityIdentities] 																		maximumResults:10 																						 error:&err]; 		 		NSArray* results = [query resultsAllowingPartial:NO error:&err]; 		for(ODRecord *record in results) { 				NSString * domainName = (NSString *)[record valuesForAttribute:kODAttributeTypeAltSecurityIdentities error:nil][0]; 				if (domainName != nil) { 						return [[domainName componentsSeparatedByString: @":"] lastObject]; 				} 		}

Hi, I've encountered similar error when loading my plugin which is being loaded as part of system.login.console authorization right reason: mapping process is a platform binary, but mapped file is not I've experienced this rejection only after the plugin was properly loaded. Any idea why ? is this a signing issue ?