Apple Mac OS X v10.4 - Manual (Page 12)

12 Chapter 2 Setting Up Your Smart Card
Modifying the Configuration File for Attribute Lookup
In most directory services you will use a configuration file that contains a search key for
an Open Directory search. A configuration file is an array of dictionaries. Each
dictionary in this array contains one search key in an Open Directory search.
The default configuration file is:
/etc/caclogingconfig.plist
The following example shows a common configuration:
<dict>
<key>dsAttributeString</key>
<string>dsAttrTypeNative:userPrincipalName</string>
<key>fields</key>
<array>
<string>NT Principal Name</string>
</array>
<key>formatString</key>
<string>$1</string>
</dict>
The
dsAttrTypeNative:
string is followed by the
ntprincipalname
token, which
represents the name of the attribute to use in your directory schema.
When an Open Directory search is performed on the
ntprincipalname
token, it returns
is the ID. For example: 0123456789@mil
Another example shows multiple strings formatted to return the ID:
<dict>
<key>values</key>
<array>
<string>RFC 822 Name</string>
<string>NT Principal Name</string>
<string>Country</string>
</array>
<key>format</key>
<string>$1#$2/$3</string>
<key>directorySearchKey</key>
<string>dsAttrTypeNative:uniqueid</string>
</dict>
The
directorySearchKey
is the user’s lookup key. It specifies the directory key to search
for.
This example returns a combined search string:
[email protected]#0123456789@mil/US