beautypg.com

Apple Mac OS X Server (version 10.2.3 or later) User Manual

Page 643

background image

Integrating Mac OS X Directory Services With Active Directory

643

2

Set up the Mac OS X Server that provides Apple file service so it can access the Active
Directory data.

Use the Directory Access application to create an LDAPv3 configuration for the Active
Directory domain on the Windows server. In addition, use Directory Access to include this
LDAPv3 configuration in the Mac OS X Server search policy. Chapter 2, “Directory Services,”
has detailed instructions for these tasks. Appendix A, “Data Requirements of Mac OS X
Directory Services,” has detailed specifications of record types and attributes required by
Mac OS X directory services.

3

Set up AFP share points and Apple file service on the Mac OS X Server.

Use the Sharing module of Workgroup Manager to set up share points. Use Server Settings to
set up Apple file service. For detailed instructions, see Chapter 4, “Sharing,” and Chapter 5,
“File Services.”

Hosting Home Directories for Users Defined in Active Directory
Domains

When you integrate Mac OS X Server into an environment with an Active Directory domain
that stores user information, Mac OS X client computers can use this information to
authenticate users who log in, while one or more Mac OS X Servers store home directories
for these users.

User record (class) attributes

Description

Example values

Mac OS X
attribute

Active Directory
attribute

User’s login names

jdm
JD Mankovsky

RecordName

sAMAccountName
name or displayName

UID

155

UniqueID

UniqueID

User’s full name

JD Mankovsky

RealName

name or displayName

User’s primary group ID

20

Primary
GroupID

primaryGroupID

LL0395.Book Page 643 Wednesday, November 20, 2002 11:44 AM