Specifications

Setting Up a Connection to a Directory Server
Using Server Admin, you can set up Mac OS X Server to get user records and other
directory information from another server’s shared directory domain. The other server
also provides authentication for its directory information.
Mac OS X Server still gets directory information from its own local directory domain
and provides authentication for this local directory information.
Important: Changing Mac OS X Server to be connected to another directory system
instead of being an Open Directory master will turn o its shared LDAP directory
domain, with the following ramications:
User records and other information in the shared directory domain are deleted. Â
If other servers were connected to the master directory domain, their services may Â
be disrupted when user accounts and other information in the deactivated directory
domain become unavailable.
Users who had accounts in the deactivated directory domain might not be able Â
to access les and folders on the Open Directory master and on other servers that
were connected to the master directory domain.
To congure a server to get directory services from an existing system:
1 Open Server Admin and connect to the server.
2 Click the triangle at the left of the server.
The list of services appears.
3 From the expanded Servers list, select Open Directory.
4 Click Settings, then click General.
5 Click Change.
The Open Directory Assistant opens.
6 Choose “Connected to another directory,” then click Continue.
7 Conrm the conguration settings, then click Continue.
8 If the server was an Open Directory master and you are sure that users and services no
longer need access to the directory data stored in the shared directory domain that
the server has been hosting, click Done.
9 Click the Open Directory Utility button to congure access to directory systems.
For more information about conguring access to a directory service, see
Chapter 8, “Advanced Directory Client Settings.”
If you connect Mac OS X Server v10.4 or later to a directory domain of Mac OS X Server
v10.3 or earlier, users dened in the older directory domain cannot be authenticated
with the NTLMv2 method. This method might be required to securely authenticate
some Windows users for the Windows services of Mac OS X Server v10.4 or later.
92 Chapter 5 Setting Up Open Directory Services