Specifications
Chapter 8 Advanced Directory Client Settings 147
The mapping of Mac OS X data types, or attributes, to LDAP attributes for each Â
record type
The LDAP search base and search scope that determine where Mac OS X looks for a Â
Mac OS X record type in an LDAP directory
When mapping Mac OS X user attributes to a read/write LDAP directory domain (an
LDAP domain that is not read-only), the LDAP attribute mapped to RealName must not
be the same as the rst attribute in a list of LDAP attributes mapped to RecordName.
For example, the cn attribute must not be the rst attribute mapped to RecordName if
cn is also mapped to RealName.
If the LDAP attribute mapped to RealName is the same as the rst attribute mapped to
RecordName, problems will occur when you try to edit the full (long) name or the rst
short name in Workgroup Manager.
For more information about Mac OS X record types and attributes, see
Appendix B, “Mac OS X Directory Data.”
To edit search bases and mappings for an LDAP server:
1 Open System Preferences and click Accounts.
2 If the lock icon is locked, unlock it by clicking it and entering the name and password
of an administrator.
3 Click Login Options, then click Edit.
4 Click Open Directory Utility.
5 If the lock icon is locked, unlock it by clicking it and entering the name and password
of an administrator.
6 Click Services.
7 In the list of services, select LDAPv3 and click the Edit (/) button.
8 If the list of server congurations is hidden, click Show Options.
9 In the list, select a server conguration and click Edit.
10 Click Search & Mappings.
11 Select the mappings you want to use as a starting point; otherwise, choose Custom to
begin with no predened mappings.
If you choose one of the LDAP mapping templates, a search base sux that you can
change appears, or you can accept the default search base sux by clicking OK.
Click the “Access this LDAPv3 server using” pop-up menu and choose a mapping
template to use its mappings as a starting point.
12 Add record types and change their search bases as needed: