Specifications

276 Appendix B Mac OS X Directory Data
Mac OS X user attribute Format Example values
UserShell:
The location of the default shell
for command-line interactions
with the server.
Path name /bin/tcsh
/bin/sh
None. This value prevents users
with accounts in the directory
domain from accessing the
server remotely through a
command line.
Nonzero length.
Change:
Not used by Mac OS X, but
corresponds to part of standard
LDAP schema.
Number
Expire:
Not used by Mac OS X, but
corresponds to part of standard
LDAP schema.
Number
AuthenticationAuthority:
Describes the user’s
authentication methods, such
as Open Directory, shadow
password, or crypt password.
Not required for a user with only
a crypt password.
Absence of this attribute
signies legacy authentication
(crypt with Authentication
Manager, if it is available).
ASCII text Values describe the user’s
authentication methods.
Can be multivalued (for
example, ;ApplePasswordServer;
and ;Kerberosv5;).
Each value has the format vers;
tag; data (where vers and data
may be blank).
Crypt password: ;basic;
Open Directory
password: ;ApplePasswordServer;
HexID, server’s public key
IPaddress:port ;Kerberosv5;Kerberos
data
Shadow password (local
directory domain only):
;
 ShadowHash;
;
 ShadowHash;<list of enabled
authentication methods
AuthenticationHint:
Text set by the user to be
displayed as a password
reminder.
UTF-8 text Maximum 255 bytes.