Apple Mac OS X Server (version 10.2.3 or later) - Manual (Page 88)

88 Chapter 2
You can configure the authentication search policy for a Mac OS X Server or other Mac OS X
computer by using the Directory Access application. You can use the same application to
configure the computer’s contacts search policy. (The Open Directory Assistant application
also configures the authentication search policy of a Mac OS X Server, but does not offer as
many options as Directory Access.)
You can configure the search policy of the computer on which you are running Directory
Assistant as follows:
m Use the automatic search policy—shared NetInfo domains, list of LDAP servers supplied
by DHCP, or both.
m Define a custom search policy for the computer if it needs to search additional directory
servers, BSD configuration files, or service discovery protocols.
m Use only the computer’s local directory domain.
Using the Automatic Search Policy
You can configure a Mac OS X computer to use the automatic search policy. This is the
default configuration. You can configure a computer to use the automatic search policy by
using the Directory Access application on the computer.
The automatic search policy always includes the local directory domain. The automatic
search policy also includes shared NetInfo domains to which the computer is bound and
shared LDAPv3 domains supplied by DHCP. The shared NetInfo domains are optional, as are
the shared LDAPv3 domains. For more information, see “Using NetInfo Domains” on
page 105 and “Setting the LDAP Server for DHCP Clients” on page 505.
To use the automatic search policy supplied by DHCP:
1 In Directory Access, click the Authentication tab or the Contacts tab.
Click Authentication to configure the search policy used for authentication and most other
administrative data.
Click Contacts to configure the search policy used for contact information in some mail,
address book, and personal information manager applications.
2 If the lock icon is locked, click it and type the name and password of a server administrator.
3 Choose Automatic from the Search pop-up menu, then click Apply.
Defining a Custom Search Policy
You can configure a Mac OS X computer to search specific Open Directory servers, LDAP
servers, NetInfo domains, BSD configuration files, or directory service protocols in addition
to the servers in the automatic search policy. You define a custom search policy with the
Directory Access application on the computer that you want to configure.
LL0395.Book Page 88 Wednesday, November 20, 2002 11:44 AM