Apple Mac OS X Server (Administrator’s Guide) - Manual (Page 104)

104 Chapter 2
Using an Active Directory Server
Your Mac OS X Server, like any computer with Mac OS X version 10.2, can use Open
Directory to access an Active Directory domain hosted by a Microsoft Windows server. This
section explains how to configure your Mac OS X Server and client Mac OS X computers to
access an Active Directory server. This section also explains how to use your Mac OS X Server
to populate the Active Directory domain with records and data.
In addition, you can edit, duplicate, or delete an Active Directory server configuration. You
can also change the connection settings and customize the mappings of an Active Directory
server configuration. The procedures for all these tasks are the same for Active Directory
servers as for LDAPv3 servers. For instructions, see “Configuring Access to Existing LDAPv3
Servers” on page 98.
Creating an Active Directory Server Configuration
You can use Directory Access to create a configuration for an Active Directory server.
To create an Active Directory server configuration:
1 In Directory Access, click the Services tab.
2 If the lock icon is locked, click it and type the name and password of a server administrator.
3 Select LDAPv3 in the list of services, then click Configure.
4 If the list of server configurations is hidden, click Show Options.
5 Click New and enter a name for the configuration.
6 Press Tab and enter the Active Directory server’s DNS name or IP address.
7 Click the inline pop-up menu and choose Active Directory.
8 Enter the search base for your Active Directory server, then click OK.
9 Select the SSL checkbox if you want Open Directory to use Secure Sockets Layer (SSL) for
connections with the Active Directory server.
Important
Open Directory uses the LDAPv3 protocol, not Microsoft’s proprietary Active
Directory Services Interface (ADSI), to connect to Microsoft’s Active Directory. This chapter
does not explain how to configure Active Directory on a Windows server for LDAPv3 read/
write access. If you need assistance, consult an individual with Windows and Active Directory
expertise, refer to the documentation for these products, or go to the Microsoft Web site:
www.microsoft.com/support/