Specifications

88 Chapter 7 Managing Directory Access
Each search policy, authentication and contacts, can be set to Automatic, Local
directory, or Custom path.
• Automatic starts with the local directory domain and can include an LDAP directory
supplied automatically by DHCP and NetInfo domains to which the computer is
bound. An automatic search policy is the default setting for Mac OS X version 10.2
and later and offers the most flexibility for mobile computers.
• Local directory includes only the local directory domain.
• Custom path starts with the local directory domain and includes your choice of
LDAP directories, an Active Directory domain, NetInfo domains, BSD configuration
files, and an NIS domain.
Defining Automatic Search Policies
Using Directory Access, you can configure a Mac OS X computer’s authentication and
contacts search policies to be defined automatically. An automatically defined search
policy includes the local directory domain. It can also include an LDAP directory server
specified by DHCP service and shared NetInfo domains to which the computer is
bound. This is the default configuration for both the authentication and the contacts
search policy.
Note: Some applications, such as Mac OS X Mail and Address Book, can access LDAP
directories directly, without using Open Directory. To set up one of these applications
to access LDAP directories directly, open the application and set the appropriate
preference.
To have a search policy defined automatically:
1 In Directory Access, click Authentication or click Contacts.
Authentication shows the search policy used for authentication and most other
administrative data.
Contacts shows the search policy used for contact information in applications such as
Address Book.
2 If the lock icon is locked, click it and type the name and password of an administrator.
3 Choose Automatic from the Search pop-up menu, then click Apply.
4 In System Preferences, make sure the computer’s Network preferences are configured
to use DHCP or DHCP with manual IP address.
5 If you want the DHCP service of Mac OS X Server to supply its clients with a particular
LDAP server’s address for their automatic search policies, you need to configure the
LDAP options of DHCP service.
For instructions, see the DHCP chapter of the network services administration guide.
LL2352.Book Page 88 Friday, August 22, 2003 3:12 PM