Specifications

Chapter 2 Open Directory Search Policies 31
Next the automatic search policy looks at the binding of shared NetInfo domains. The
computer’s local domain can be bound to a shared NetInfo domain, which can in turn
be bound to another shared NetInfo domain, and so on. The NetInfo binding, if any,
constitutes the second part of the automatic search policy. See “About NetInfo Binding”
on page 110 for additional information.
Finally, a computer with an automatic search policy can bind to a shared LDAP
directory. When the computer starts up, it can get the address of an LDAP directory
server from DHCP service. The DHCP service of Mac OS X Server can supply an LDAP
server address just as it supplies the addresses of DNS servers and a router. (A non-
Apple DHCP service may also be able to supply an LDAP server address; this feature is
known as DHCP option 95.)
If you want the DHCP service of Mac OS X Server to supply its clients with a particular
LDAP server’s address for their automatic search policies, you need to configure the
LDAP options of DHCP service. For instructions, see the DHCP chapter of the network
services administration guide.
If you want a Mac OS X computer to get the address of an LDAP server from DHCP
service:
• The computer must be configured to use an automatic search policy. Mac OS X
version 10.2 and later is initially configured to use an automatic search policy. See
“Setting Up the Authentication and Contacts Search Policies” on page 87 for more
information.
• The computer’s Network preferences must be configured to use DHCP or DHCP with
manual IP address. Mac OS X is initially configured to use DHCP. For information on
setting Network preferences, search Mac Help.
An automatic search policy offers convenience and flexibility and is the recommended
option, especially for mobile computers. If a computer with an automatic search policy
is disconnected from the network, connected to a different network, or moved to a
different subnet, the automatic search policy can change. If the computer is
disconnected from the network, it uses its local directory domain. If the computer is
connected to a different network or subnet, it can automatically change its NetInfo
binding and can get an LDAP server address from the DHCP service on the current
subnet. With an automatic search policy, a computer doesn’t have to be reconfigured
to get directory and authentication services in its new location.
LL2352.Book Page 31 Friday, August 22, 2003 3:12 PM