Specifications

90 Chapter 7 Managing Directory Access
To have a search policy use only the local directory domain:
1 In Directory Access, click the Authentication or click Contacts.
Authentication shows the search policy used for authentication and most other
administrative data.
Contacts shows the search policy used for contact information in applications such as
Address Book.
2 If the lock icon is locked, click it and type the name and password of an administrator.
3 Choose “Local directory” from the Search pop-up menu, then click Apply.
Accessing LDAP Directories
You can configure a server with Mac OS X Server or a computer with Mac OS X to
access specific LDAP directories, including the LDAP directory of a Mac OS X Server
Open Directory master. For task descriptions and instructions, see:
• “Enabling or Disabling Use of a DHCP-Supplied LDAP Directory” (next)
• “Showing or Hiding Options for LDAP Directories” on page 91
• “Configuring Access to an LDAP Directory” on page 92
• “Changing a Configuration for Accessing an LDAP Directory” on page 93.
• “Duplicating a Configuration for Accessing an LDAP Directory” on page 93.
• “Deleting a Configuration for Accessing an LDAP Directory” on page 94.
• “Changing the Connection Settings for an LDAP Directory” on page 95.
• “Configuring LDAP Searches and Mappings” on page 96
• “Mapping Config Record Attributes for LDAP Directories” on page 98
• “Editing RFC 2307 Mapping to Enable Creating Users” on page 98.
• “Populating LDAP Directories With Data for Mac OS X” on page 100.
In Mac OS X version 10.3, a single Directory Access plug-in named LDAPv3 provides
access to both LDAP versions 2 and 3. The LDAPv2 plug-in of Mac OS X version 10.2 is
not needed with Mac OS X version 10.3. Existing LDAPv2 configurations are
automatically converted to LDAPv3 when a computer is upgraded to Mac OS X version
10.3.
Note: Mac OS X Mail, Address Book and some similar applications can access LDAP
directories directly, without using Open Directory. You can configure these applications
to search specific LDAP directories. For instructions, open Mail and choose Help > Mail
Help or open Address Book and choose Help > Address Book Help; then search for help
on LDAP.
LL2352.Book Page 90 Friday, August 22, 2003 3:12 PM