explaingit

heyitsbarish/nomad-classic

Analysis updated 2026-05-18

4SwiftAudience · ops devopsComplexity · 3/5LicenseSetup · moderate

TLDR

A revived, Apple Silicon-compatible fork of the original NoMAD v1 macOS tool that lets Macs use Active Directory Kerberos authentication without domain binding.

Mindmap

mindmap
  root((NoMAD Classic))
    What it does
      AD auth without binding
      Kerberos ticket renewal
      Password expiry warnings
    Fork changes
      Swift 5 port
      Apple Silicon support
      Bug fixes
    Features
      Password sync
      FileVault sync
      Custom menu items
    Audience
      Mac IT admins
      Corporate Mac users
Click or tap to explore — scroll the page freely

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

What do people build with it?

USE CASE 1

Allow Mac users to get Kerberos single sign-on from Active Directory without binding the Mac to the domain.

USE CASE 2

Warn users about expiring Active Directory passwords from a macOS menu bar app.

USE CASE 3

Sync an Active Directory password change to the local Mac account and FileVault password.

USE CASE 4

Run NoMAD on Apple Silicon Macs where the original Intel-only build no longer works.

What is it built with?

SwiftmacOSXcodeActive DirectoryKerberos

How does it compare?

heyitsbarish/nomad-classicaydahnizzy/calendar-drag-interactiondizzpy/boo
Stars444
LanguageSwiftSwiftSwift
Setup difficultymoderateeasyeasy
Complexity3/52/52/5
Audienceops devopsdevelopergeneral

Figures from each repo's GitHub metadata at analysis time.

How do you get it running?

Difficulty · moderate Time to first run · 30min

Requires Xcode to build from source, prebuilt binary is unsigned and triggers Gatekeeper warnings on first launch.

Use freely for any purpose, including commercial use, as long as you keep the copyright notice.

In plain English

NoMAD Classic is a fork of the original NoMAD v1 application for macOS, revived and updated to run on Apple Silicon and modern versions of macOS. The original NoMAD was a tool for IT administrators managing Macs in environments that use Microsoft Active Directory (the system many organizations use to manage user logins, passwords, and network access). NoMAD's main purpose is to let a Mac interact with Active Directory for authentication without the Mac actually being bound to the directory, which is a setup process that has historically caused problems on macOS. With NoMAD, a user can log into their corporate account to get Kerberos authentication credentials (a standard protocol that lets one login work across multiple services), automatically renew those credentials on a schedule, see when their password is about to expire, and sync their Active Directory password with their local Mac account and FileVault disk encryption password. Administrators can also push custom menu items and trigger scripts on network changes through configuration. The original project was archived by Jamf (the Mac management company that had been maintaining it) in 2022, and its intended successor never reached a stable state. This fork picks up the source code from that archive and updates it to build with current versions of Xcode. Specifically, it migrates the code from Swift 3 (which has not compiled since around 2017) to Swift 5, adds an arm64 code path to produce a universal binary for Apple Silicon, fixes a bug that left the menu bar item unclickable on modern macOS, and updates the status item API to use the current standard. Building from source is the preferred installation method. The README provides a single command for building, and a copy built on your own machine launches without the security warnings that unsigned downloads trigger. A prebuilt binary is also available, but the README is direct that running an unsigned binary from an unknown maintainer requires a trust decision. The MIT license carries over from the original project.

Copy-paste prompts

Prompt 1
Walk me through building NoMAD Classic from source with xcodebuild so I don't need to trust the prebuilt binary.
Prompt 2
How do I configure NoMAD Classic to automatically renew Kerberos tickets and sync AD password changes to the local Mac account?
Prompt 3
My NoMAD menu bar icon is unclickable after a macOS update. Is this the launch-sequence bug, and does NoMAD Classic fix it?
Prompt 4
What NoMAD Classic configuration keys should I deploy via MDM to point users at specific LDAP servers?
Prompt 5
Explain how NoMAD's no-bind approach to Active Directory differs from traditional macOS domain binding.

Frequently asked questions

What is nomad-classic?

A revived, Apple Silicon-compatible fork of the original NoMAD v1 macOS tool that lets Macs use Active Directory Kerberos authentication without domain binding.

What language is nomad-classic written in?

Mainly Swift. The stack also includes Swift, macOS, Xcode.

What license does nomad-classic use?

Use freely for any purpose, including commercial use, as long as you keep the copyright notice.

How hard is nomad-classic to set up?

Setup difficulty is rated moderate, with roughly 30min to a first successful run.

Who is nomad-classic for?

Mainly ops devops.

Open on GitHub → Explain another repo

This repo across BitVibe Labs

Scan in gitsafehub Deploy in gitdeployhub heyitsbarish on gitmyhub

Verify against the repo before relying on details.