Specifications

Chapter 7 Managing Directory Access 107
To create an Active Directory server configuration:
1 In Directory Access, click Services.
2 If the lock icon is locked, click it and type the name and password of an administrator.
3 Select LDAPv3 in the list of services, then click Configure.
4 If the list of server configurations is hidden, click Show Options.
5 Click New and enter a name for the configuration.
6 Press Tab and enter the Active Directory server’s DNS name or IP address.
7 Click the pop-up menu next to the DNS name or IP address and choose Active
Directory.
8 Enter the search base for the Active Directory domain, then click OK.
9 Select the SSL checkbox if you want Open Directory to use Secure Sockets Layer (SSL)
for connections with the Active Directory server.
The Active Directory mapping template for an LDAPv3 configuration maps some
Mac OS X record types and attributes to object classes and attributes that are not part
of a standard Active Directory schema. You can change the mappings defined by the
template or extend the Active Directory schema. (Alternatively, you may be able to
access your Active Directory domain via the Active Directory plug-in instead of
LDAPv3.)
If you want the computer to access the Active Directory domain for which you just
created an LDAPv3 configuration, you must add the directory to a custom search policy
in the Authentication or Contacts pane of Directory Access. You must also make sure
LDAPv3 is enabled in the Services pane. For instructions, see “Enabling or Disabling
LDAP Directory Services” on page 85 and “Defining Custom Search Policies” on
page 89.
Accessing an NIS Domain
Using Directory Access, you create a configuration that specifies how Mac OS X
accesses an NIS domain.
To create a configuration for accessing an NIS domain:
1 In Directory Access, click Services.
2 If the lock icon is locked, click it and type the name and password of an administrator.
3 Select “BSD Flat File and NIS” in the list of services, then click Configure.
4 Enter the NIS domain name.
Include the NIS server’s hostname or IP address if it is required for security or the server
is not on the same subnet as the computer you’re configuring.
LL2352.Book Page 107 Friday, August 22, 2003 3:12 PM