Apple Mac OS X Server (version 10.2.3 or later) - Manual (Page 101)

Directory Services 101
m Create an LDAPv2 server configuration. For instructions, see “Creating an LDAPv2 Server
Configuration” on page 101.
m Change LDAPv2 server access settings as needed. For instructions, see “Changing LDAPv2
Server Access Settings” on page 102.
m Edit LDAPv2 search bases and data mappings as needed. For instructions, see “Editing
LDAPv2 Search Bases and Data Mappings” on page 103.
m Make sure the LDAPv2 server is included in a custom search policy. For more information,
see “Setting Up Search Policies” on page 87.
Setting Up an LDAPv2 Server
If you want a Mac OS X computer to get administrative data from an LDAPv2 server, the data
must exist on the LDAPv2 server in the format required by Mac OS X. You may need to add,
modify, or reorganize data on the LDAPv2 server. Mac OS X cannot write data to an LDAPv2
directory, so you must make the necessary modifications by using tools on the server that
hosts the LDAPv2 directory.
To set up an LDAPv2 server for Mac OS X:
1 Go to the LDAPv2 server and configure it to support LDAPv2-based authentication and
password checking.
2 Modify LDAPv2 server object classes and attributes as necessary to provide the data needed
by Mac OS X.
For detailed specifications of the data required by Mac OS X directory services, see
Appendix A, “Data Requirements of Mac OS X Directory Services.”
Creating an LDAPv2 Server Configuration
You need to create a configuration for an LDAPv2 server from which you want your computer
to get administrative data. Use the Directory Access application to create an LDAPv2
configuration.
To create an LDAPv2 server configuration:
1 In Directory Access, click the Services tab.
2 If the lock icon is locked, click it and type the name and password of a server administrator.
3 Select LDAPv2 in the list of services, then click Configure.
4 Create a new configuration or duplicate an existing configuration.
Click New to create a new configuration.
Click Duplicate to create a copy of the currently selected configuration.
5 Click the Identity tab, then enter a configuration name and server address.
LL0395.Book Page 101 Wednesday, November 20, 2002 11:44 AM