Apple Mac OS X Server (version 10.2.3 or later) - Manual (Page 623)

Data Requirements of Mac OS X Directory Services 623
Standard Attributes in User Records
The following table specifies facts about the standard attributes, or data types, found in user
records of Mac OS X data services. Use these facts when mapping LDAP or Active Directory
domains to Mac OS X directory services.
Important When mapping Mac OS X user attributes to a read/write LDAPv3 directory
domain (an LDAPv3 domain that is not read-only), do not map the RealName and the first
RecordName attributes to the same LDAPv3 attribute. For example, do not map both
RealName and RecordName to the cn attribute. If RealName and RecordName are mapped to
the same LDAPv3 attribute, problems will occur when you try to edit the full (long) name or
the first short name in Workgroup Manager.
Mac OS X
user attribute
Format Sample values
RecordName:
a list of names
associated with a user;
the first is the user’s
short name, which is
also the name of the
user’s home directory
Important: All attributes
used for authentication
must map to
RecordName.
First value: ASCII
characters A–Z,
a–z, 0–9, _,-
Second value:
UTF-8 Roman
text
Dave
David Mac
DMacSmith
Non-zero length, 1 to 16 values. Maximum 255
bytes (85 triple-byte to 255 single-byte characters)
per instance. First value must be 1 to 30 bytes for
clients using Macintosh Manager, or 1 to 8 bytes
for clients using Mac OS X version 10.1 and earlier.
RealName:
a single name, usually
the user’s full name; not
used for authentication
UTF-8 text David L. MacSmith, Jr.
Non-zero length, maximum 255 bytes (85 triple-
byte to 255 single-byte characters).
UniqueID:
a unique user identifier,
used for access privilege
management
Unsigned 32-bit
ASCII string of
digits 0–9 Range is 100 to 2,147,483,648.
Values below 100 are typically used for system
accounts. Zero is reserved for use by the system.
Normally unique among entire population of
users, but sometimes can be duplicated.
Warning: A non-integer value is interpreted as 0,
which is the UniqueID of the root user.
PrimaryGroupID:
a user’s primary group
association
Unsigned 32-bit
ASCII string of
digits 0–9 Range is 1 to 2,147,483,648.
Normally unique among entire population of
group records. If blank, 20 is assumed.
LL0395.Book Page 623 Wednesday, November 20, 2002 11:44 AM