What You ve Learned

What You've Learned

• Open Directory replication applies to three primary technologiesLDAP, Password Server, and KDCwhich are integrated to provide the best possible set of features while maintaining the Apple signature ease of use.

• Server Admin can promote an Open Directory replica to an Open Directory master to specify when data should be replicated to connected replicas.

• A Mac OS X computer goes through various steps during startup when it is bound to an Open Directory replica system.

• Custom directory-service ACLs are copied to each replica from the master in a replica system.

• When a user changes their password on a Mac OS X computer bound to a replica system, the password is changed on the bound replica and then passed to the master, which then updates all other replicas in the system.

References

Administration Guides

"Mac OS X Server Open Directory Administration": http://images.apple.com/server/pdfs/Open_Directory_v10.4.pdf

"Mac OS X Server Command-Line Administration": http://images.apple.com/server/pdfs/Command_Line_v10.4.pdf

"Mac OS X Server Upgrading and Migrating for Version 10.4 or Later": http://images.apple.com/server/pdfs/Migration_v10.4.pdf

Apple Knowledge Base Document

The following Knowledge Base document (located at www.apple.com/support) provides further information about Kerberos authentication.

Document 107702, "Mac OS X Server 10.3 or later: Kerberos authentication may not work after changing to LDAP master or replica, or Kerberizing a particular service"