beautypg.com

Apple Mac OS X v10.4 User Manual

Page 12

background image

12

Chapter 2

Setting Up Your Smart Card

Modifying the Configuration File for Attribute Lookup

In most directory services you will use a configuration file that contains a search key for
an Open Directory search. A configuration file is an array of dictionaries. Each
dictionary in this array contains one search key in an Open Directory search.

The default configuration file is:

/etc/caclogingconfig.plist

The following example shows a common configuration:

dsAttributeString

dsAttrTypeNative:userPrincipalName

fields

NT Principal Name

formatString

$1

The

dsAttrTypeNative:

string is followed by the

ntprincipalname

token, which

represents the name of the attribute to use in your directory schema.

When an Open Directory search is performed on the

ntprincipalname

token, it returns

is the ID. For example:

0123456789@mil

Another example shows multiple strings formatted to return the ID:

values

RFC 822 Name

NT Principal Name

Country

format

$1#$2/$3

directorySearchKey

dsAttrTypeNative:uniqueid

The

directorySearchKey

is the user’s lookup key. It specifies the directory key to search

for.

This example returns a combined search string:

[email protected]#0123456789@mil/US