slapd

executablemacOS5.7 MBx86_64, arm64

System network and security configuration daemon — manages connectivity, certificates, and reachability

Configures and monitors network connectivity across interfaces, manages system reachability state, and handles certificate validation and keychain operations. Communicates with hardware drivers for network device control and exposes configuration through XPC services for system preferences and other clients. Collects telemetry on network behavior and maintains connections to multiple remote endpoints for system updates and service validation. Enforces security policies through code signing and certificate checks.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 5.7 MB
UUID: 296FAB3B-8F80-3519-8815-F02EC7385289
Analyzed: 2026-04-09T10:04:41Z
CDHash: 2e0eb68c27ad4c52b43eb2a03aa741eb6d5f1a399d7f5d52d266b75ae47f55b2

Capabilities

NetworkNetwork configuration and reachability

/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration

HardwareDirect hardware/driver communication

/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

SecurityKeychain, certificates, code signing

/System/Library/Frameworks/Security.framework/Versions/A/Security

Frameworks13

CoreFoundation Security SystemConfiguration IOKit Heimdal OpenDirectory HeimODAdmin CommonAuth PasswordServer AccountPolicy libsasl2.2.dylib libresolv.9.dylib libSystem.B.dylib

Entitlements1

com.apple.security.cs.allow-in-chroottrue

Interesting Strings

Bundle IDs(14)

%com.apple.security.cs.allow-in-chroot /private/var/run/com.apple.slapd.start <key>com.apple.security.cs.allow-in-chroot</key>cn=com.apple.access_disabled,cn=groups,%s cn=com.apple.access_sessionkey,cn=groups,%s

File Paths(18)

/Library/Keychains/System.keychain /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory /System/Library/Frameworks/Security.framework/Versions/A/Security

telemetry(3)

connection_op_activate: submit failed (%d) for conn=%lu connection_read_activate(%d): submit failed (%d)slap_listener_activate(%d): submit failed (%d)

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0 root@2hxmh.p1s.plx.sd.apple.com:/AppleInternal/Library/BuildRoots/4~B_wougCJzfnfGpTsnt971aKVd4XkW4x0vj04KxE/Library/Caches/com.apple.xbs/Binaries/OpenLDAP/install/TempContent/Objects/servers/slapd

Network Surface

Networking Frameworks

Endpoints(169)

Ipv4115.121.1.27

Ipv4115.121.1.34

Ipv4115.121.1.12

Ipv6FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF

Ipv4115.121.1.8

Ipv4115.121.1.9

Ipv4115.121.1.44

Ipv4115.121.1.17

Ipv4115.121.1.38

Ipv4115.121.1.3

Ipv4115.121.1.16

Ipv4115.121.1.54

Ipv4115.121.1.30

Ipv4115.121.1.31

Ipv4115.121.1.35

Ipv4115.121.1.37

Ipv4115.121.1.1

Ipv4115.121.1.2

Ipv4115.121.1.4

Ipv4115.121.1.5

Ipv4115.121.1.6

Ipv4115.121.1.7

Ipv4115.121.1.10

Ipv4115.121.1.13

Ipv4115.121.1.14

Ipv4115.121.1.15

Ipv4115.121.1.19

Ipv4115.121.1.20

Ipv4115.121.1.21

Ipv4115.121.1.22

Ipv4115.121.1.23

Ipv4115.121.1.24

Ipv4115.121.1.25

Ipv4115.121.1.26

Ipv4115.121.1.28

Ipv4115.121.1.29

Ipv4115.121.1.32

Ipv4115.121.1.33

Ipv4115.121.1.36

Ipv4115.121.1.39

Ipv4115.121.1.40

Ipv4115.121.1.41

Ipv4115.121.1.42

Ipv4115.121.1.43

Ipv4115.121.1.11

Ipv4115.121.1.45

Ipv4115.121.1.49

Ipv4115.121.1.50

Ipv4115.121.1.51

Ipv4115.121.1.52

Ipv4115.121.1.55

Ipv4115.121.1.56

Ipv4115.121.1.57

Ipv4115.121.1.58

HostnameclientInfo.Name

Hostname2hxmh.p1s.plx.sd.apple.com

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

1

Storage

0

Hardware

1

IPC

0

Analytics

0

Security

1

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

3

File Paths

18

Bundle IDs

14

IOKit Constants

0

Library Functions

3

Structural HashesSHA-256

Codea2b79bedc1c22124da0897ebf881651c902e733760f261ba2506349ef67f9d0c

Importsb3d8aaa42c85747e3baa01ce80861eb1e5307dbbb56dc891b74a606fe6e391db

Frameworks7a8b4b039812f66f8dd0c60bd47dffbd702daef1ddf61087095ef09ebc101b2b

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementsd30b103895449ce1cf3619d8c9c33cc936b17360f86718cafc39d4b36a761f07

Symbolsb3d8aaa42c85747e3baa01ce80861eb1e5307dbbb56dc891b74a606fe6e391db

Static Libraries3 / 5969 functions identified

Identified Libraries

harfbuzz 12.3.0 (2 fn)unistring 1.4.1 (1 fn)

Function Matches(1)

PEM_read_bioopenssl 3.2High

Functions(5969)

0x100000cc0sub_100000cc0

0x100000cf0sub_100000cf0

0x100000db0sub_100000db0

0x100000e70sub_100000e70

0x100000f1csub_100000f1c

0x100001078sub_100001078

0x10000249csub_10000249c

0x100002528sub_100002528

0x100002584sub_100002584

0x10000269csub_10000269c

0x10000280csub_10000280c

0x1000028dcsub_1000028dc

0x100002908sub_100002908

0x1000029b8sub_1000029b8

0x100002a5csub_100002a5c

0x100002b80sub_100002b80

0x100002c1csub_100002c1c

0x100002d7csub_100002d7c

0x100002e20sub_100002e20

0x100002e58sub_100002e58

Imports490 symbols from 10 dylibs

libSystem.B.dylib279 CoreFoundation62 Security61 AccountPolicy27 libsasl2.2.dylib27

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

PasswordService