Specifications

Chapter 5 Setting Up Open Directory Services 63
Administrator Name: Enter the name of an LDAP directory administrator on the Open
Directory master server.
Administrator Password: Enter the password of the administrator account you
entered.
Configuration Record Name: Enter the computer record name of the server for which
you are delegating authority to join Kerberos. The server’s computer record name is the
same as the server’s name in a computer account.
Delegated Administrators: Enter a short name or a long name for each user account
to which you want to delegate authority. Separate multiple names by pressing Return
after each name.
Joining a Server to an Open Directory Master for Single Signon
and Kerberos
Using Server Admin, a server administrator whose user account has the properly
delegated authority can join a server to an Open Directory master for single signon and
Kerberos authentication. This authority must be delegated in advance by an
administrator of the Open Directory master.
To join a server to an Open Directory master for single signon and Kerberos:
1 Open Server Admin and select Open Directory for the target server in the Computers &
Services list.
2 Click Settings (near the bottom of the window), then click General (near the top).
3 Confirm that the Role is Connected to a Directory System, then click Join Kerberos and
enter the name and password of a user account that has been delegated authority for
the target server.
Setting LDAP Options
You can set several options for LDAP directories of an Open Directory master or replica.
See the following:
• “Setting the Replication Frequency of an Open Directory Master” (next)
• “Changing the Location of an LDAP Database” on page 64
• “Limiting Search Results for LDAP Service” on page 65
• “Changing the Search Timeout for LDAP Service” on page 65
• “Setting up SSL for LDAP Service” on page 65
LL2352.Book Page 63 Friday, August 22, 2003 3:12 PM