lightweight directory access protocol for mac

Lightweight Directory Access Protocol Mac OS Xs Native

These services provide a database for central account management for both user and computer, as well as a framework for sharing that information among workstations and servers.

Lightweight Directory Access Protocol Mac OS Xs Native

Mac OS Xs native directory service is called Open Directory.

This local domain allows each user to have a computing experience and home directory, and the local domain works with the file system to manage permissions on files and folders.

Mac OS X Server relies on shared Open Directory domains to provide network user accounts that can be used to log into computers that are bound to a shared domain.

The shared domain can also allow users to access resources on other servers that are bound to the domain.

Shared domains also allow systems administrators to define custom user environments.

It also has components that manage Mac OS Xs access to self-discovering network protocols including Apple Computer Inc.s Bonjour, Microsoft Corp.s Server Message BlockCommon Internet File System and the open standard Service Location Protocol.

When discussing Open Directory, however, the phrase typically refers to its function as Mac OS Xs native directory service.

This domain stores all information about local users as well as information about the machine itself.

NetInfo is a proprietary directory service originally developed by NeXT Computer Inc.

As Mac OS X Server evolved, Apple replaced NetInfo with a service based on the Lightweight Directory Access Protocol (LDAP) that is often referred to as simply Open Directory.

However, it is important to understand that the local domain is always the first source in which a Mac OS X computer will look for user information.

It is also important to know that the local domain is visible in Mac OS X Servers Workgroup Manager; this is the tool used for managing user, group and computer accounts.

User and group accounts stored in a servers local domain can access resources on the server, including share points, print queues and Internet services.

Local accounts are not part of a shared domain, however, so they cant be used for log-in at Mac OS X computers.

This requires that a search path be established that defines the order in which available domains will be searched for account information.

However, you can place any other domains in any order that you choose.

They allow you to have separate containers for different groups of users andor computers.

They also allow you to build support for multiple directory service platforms that can mix and match advantages of each system.

For example, you could rely on user accounts stored in Active Directory but manage computers using accounts stored in Open Directory, which enables you take advantage of Apples client management architecture.

Search paths are powerful tools, but it is important to recognize that if you have users with the same name in two domains in a search path, only the account in the first domain of the search path will actually be found.

The first, and simplest, is Dynamic Host Configuration Protocol (DHCP).

Lightweight Directory Access Protocol For Mac