Specifications

68 Chapter 5 Setting Up Open Directory Services
6 After migration finishes, set up DHCP service to provide the LDAP server’s address to
client computers with automatic search policies.
Computers with Mac OS X or Mac OS X Server version 10.2 can have automatic search
policies. These computers don’t have to be configured individually to access the LDAP
server. When these computers start up, they try to get an LDAP server’s address from
DHCP service.
For instructions on setting up DHCP service to supply an LDAP server’s address, see the
network services administration guide.
Switching Directory Access From NetInfo to LDAP
After you migrate a shared directory domain of Mac OS X Server from NetInfo to LDAP,
some clients will switch to LDAP automatically, but you may have to configure other
clients to use LDAP and you may have to reconfigure DHCP service.
• Computers with an automatic authentication search policy get the address of their
directory server from DHCP service. Therefore, you need to change DHCP service to
supply the address of the migrated LDAP directory’s server.
• Computers with Mac OS X Server version 10.3 that were using NetInfo to access the
migrated directory domain can switch to LDAP automatically. Automatic switching
must be enabled when the directory domain is migrated from NetInfo to LDAP.
Mac OS X can no longer switch automatically to LDAP after you disable NetInfo on
the migrated directory domain’s server.
• You can manually switch a Mac OS X computer to LDAP by using Directory Access.
• You can configure the computer to use an automatic authentication search policy.
In this case, you also need to configure DHCP service to supply the migrated LDAP
directory server’s address to its clients.
• Alternatively, you can set up an LDAPv3 configuration on the computer and add
this LDAPv3 configuration to the computer’s custom authentication search policy.
• After you disable NetInfo on the server, make sure DHCP is not supplying the server’s
address for NetInfo binding.
For more information, see “Migrating a Directory Domain From Netinfo to LDAP” on
page 66, “Setting Up the Authentication and Contacts Search Policies” on page 87, and
“Accessing LDAP Directories” on page 90, and the DHCP chapter in the network
services administration guide.
LL2352.Book Page 68 Friday, August 22, 2003 3:12 PM