Specifications

Chapter 8 Advanced Directory Client Settings 133
Enabling or Disabling LDAP Directory Services
You can use Directory Utility to enable or disable access to directory services that use
LDAPv2 and LDAPv3. A single Directory Utility plug-in named LDAPv3 provides access
to both LDAP2 and LDAPv3.
The directory services provided by Mac OS X Server use LDAPv3, as do many other
servers. LDAPv3 is an open standard common in mixed networks of Macintosh,
UNIX, and Windows systems. Some servers use the older version, LDAPv2, to provide
directory service.
If you disable LDAP directory services and LDAP directories are part of a custom search
policy, they are listed in red in the Authentication or Contacts pane of Search Policy in
Directory Utility.
To enable or disable LDAP directory services:
1 Open System Preferences and click Accounts.
2 If the lock icon is locked, unlock it by clicking it and entering the name and password
of an administrator.
3 Click Login Options, then click Join or Edit.
4 Click Open Directory Utility.
5 If the lock icon is locked, unlock it by clicking it and entering the name and password
of an administrator.
6 Click Services.
7 Next to LDAPv3, select or deselect the checkbox and click Apply.
For conguration instructions, see Using Advanced LDAP Service Settings on page 133.
Using Advanced LDAP Service Settings
You can congure a server with Mac OS X Server or a computer with Mac OS X to
access specic LDAP directories, including the LDAP directory of a Mac OS X Server
Open Directory master.
For task descriptions and instructions, see:
 Accessing LDAP Directories in Mail and Address Book on page 134
 Showing or Hiding Congurations for LDAP Servers on page 134
 Conguring Access to an LDAP Directory” on page 135
 Conguring Access to an LDAP Directory Manually on page 137
 Changing a Conguration for Accessing an LDAP Directory on page 140
 Duplicating a Conguration for Accessing an LDAP Directory” on page 141
 Deleting a Conguration for Accessing an LDAP Directory” on page 143