Download Apple Mac OS X Server Command-Line Specifications

ÂÂ The mapping of Mac OS X data types, or attributes, to LDAP attributes for each
record type
ÂÂ The LDAP search base and search scope that determine where Mac OS X looks for a
Mac OS X record type in an LDAP directory
When mapping Mac OS X user attributes to a read/write LDAP directory domain (an
LDAP domain that is not read-only), the LDAP attribute mapped to RealName must not
be the same as the first attribute in a list of LDAP attributes mapped to RecordName.
For example, the cn attribute must not be the first attribute mapped to RecordName if
cn is also mapped to RealName.
If the LDAP attribute mapped to RealName is the same as the first attribute mapped to
RecordName, problems will occur when you try to edit the full (long) name or the first
short name in Workgroup Manager.
For more information about Mac OS X record types and attributes, see
Appendix B, “Mac OS X Directory Data.”
To edit search bases and mappings for an LDAP server:
1 Open System Preferences and click Accounts.
2 If the lock icon is locked, unlock it by clicking it and entering the name and password
of an administrator.
3 Click Login Options, then click Edit.
4 Click Open Directory Utility.
5 If the lock icon is locked, unlock it by clicking it and entering the name and password
of an administrator.
6 Click Services.
7 In the list of services, select LDAPv3 and click the Edit (/) button.
8 If the list of server configurations is hidden, click Show Options.
9 In the list, select a server configuration and click Edit.
10 Click Search & Mappings.
11 Select the mappings you want to use as a starting point; otherwise, choose Custom to
begin with no predefined mappings.
If you choose one of the LDAP mapping templates, a search base suffix that you can
change appears, or you can accept the default search base suffix by clicking OK.
Click the “Access this LDAPv3 server using” pop-up menu and choose a mapping
template to use its mappings as a starting point.
12 Add record types and change their search bases as needed:
Chapter 8    Advanced Directory Client Settings
147