Configuring ldapv3 search bases and mappings – Apple Mac OS X Server (Administrator’s Guide) User Manual
Page 101

Directory Services
101
6
Click the Connection tab and change any of the settings.
Configuration Name identifies this configuration in the list of LDAPv3 configurations. ( You
can also change the name directly in the list of LDAPv3 configurations.)
Server Name or IP Address specifies the server’s DNS name or its IP address. ( You can also
change this directly in the list of LDAPv3 configurations.)
“Open/close times out in” specifies the number of seconds that Open Directory waits before
cancelling an attempt to connect to the LDAPv3 server.
“Connection times out in” specifies the number of seconds that Open Directory allows an
idle or unresponsive connection to remain open.
“Use authentication when connecting” determines whether Open Directory authenticates
itself as a user of the LDAPv3 server by supplying the Distinguished Name and Password
when connecting to the server.
“Encrypt using SSL” determines whether Open Directory encrypts communications with the
LDAPv3 server by using Secure Sockets Layer (SSL) connection. ( You can also change this
setting directly in the list of LDAPv3 configurations.)
“Use custom port” specifies a port number other than the standard port for LDAPv3
connections (389 without SSL or 636 with SSL).
Configuring LDAPv3 Search Bases and Mappings
Each LDAPv3 configuration that you create specifies where data needed by Mac OS X resides
on the LDAPv3 server. You can edit the LDAPv3 search base for each Mac OS X record type.
You can edit the mapping of each Mac OS X record type to one or more LDAPv3 object
classes. For each record type, you can also edit the mapping of Mac OS X data types, or
attributes, to LDAPv3 attributes. You edit search bases and mappings with the Directory
Access application.
Note: The mapping of Mac OS X data types to LDAPv3 attributes can be different for each
record type. Mac OS X has separate LDAPv3 mappings for each record type.
For detailed specifications of record types and attributes required by Mac OS X, see
Appendix A, “Open Directory Data Requirements.”
To edit the search bases and mappings for an LDAPv3 server:
1
In Directory Access, click the Services tab.
2
If the lock icon is locked, click it and type the name and password of a server administrator.
3
Select LDAPv3 in the list of services, then click Configure.
4
If the list of server configurations is hidden, click Show Options.
5
Select a server configuration in the list, then click Edit.