Understanding the Inspector Tab


The Inspector tab in Workgroup Manager provides unlimited access to the directory database information. It gives you the ability to edit account information outside the confines of the standard user interface. Using the Inspector gives you the power to add, delete, or edit any attribute for any item in the directory database as well as add many new attributes.

However, with great power comes great responsibility. Because you're allowed unfettered access to the directory database, you can very easily mess things up (as in, you can lock yourself out of your own server!). Also keep in mind that any changes you make using the Inspector are made while the directory is live. In other words, you can change an attribute that is currently in use by a user or system process. Needless to say, proceed with caution!

To change attribute values for users:

1.

Launch the Workgroup Manager tool located in /Applications/Server, and authenticate as the administrator (Figure 4.95).

Figure 4.95. Open the Workgroup Manager tool, and authenticate as an administrator.


2.

If you haven't already enabled the All Records tab and Inspector, do so now (see Chapter 2, "Server Tools").

3.

Click the Accounts icon in the Toolbar and the User icon in the account types tab (Figure 4.96).

Figure 4.96. Click the Accounts button and the User tab in Workgroup Manager.


4.

Click the directory authentication icon , and select the appropriate directory database from the pop-up menu (Figure 4.97).

Figure 4.97. Select the appropriate directory database from the selection pop-up menu.


For this task, you should select the LDAP directory, listed as /LDAPv3/127.0.0.1.

5.

In the user list, select the user whose attributes you wish to edit, and then click the Inspector tab (Figure 4.98).

Figure 4.98. Select the user, and click the Inspector tab.


The Inspector frame displays the user's account information as it appears in the directory database.

6.

Find the value you wish to edit, and do one of the following:

  • If the attribute's value is short, double-click it to make changes (Figure 4.99).

    Figure 4.99. Double-click a value to make a change.


  • If the attribute's value is long (typically any value that contains XML code), click the Edit button to make changes. The attribute editing dialog drops down, in which you can make changes to more complicated values (Figure 4.100). Click OK when you've finished editing the value.

    Figure 4.100. You can make changes to more complicated values in the attribute editing dialog.


7.

When you've finished making changes, click the Save button .

Tips

  • Whenever you make account modifications with the Inspector, always thoroughly test your changes before you implement them on a wider scale. In fact, it's a good idea to create test user accounts so you can experiment with changes made using the Inspector.

  • Click the Options button to adjust how the Inspector list is presented. First-time users should deselect the two Prefix options under the Options tab (Figure 4.101).

    Figure 4.101. Clicking the Options button lets you specify what is shown in the Inspector frame.



Adding user attributes

Essentially, there is no limit to the number of attributes a record can have in either the local or the LDAP directory database provided by Mac OS X Server. You can configure as many attributes as you see fit. Keep in mind that attributes are nothing more than known storage locations for specific user account information.

Adding a custom user attribute to the directory is useful only if a specific system service or feature knows how to use that attribute. For example, you may need to add custom attributes in order for a Windows client to authenticate using your directory. (See Chapter 3, "Open Directory," for more information about directory services.)

Multiple-Value Attributes

Attributes can contain multiple separate values. To see a good example of this, use the Inspector to view the Authentication Authority attribute. Any attribute with more than one value shows the number of separate values in parentheses to the right of the attribute's name . There is also a small arrow to the left of the attribute's name; click it to reveal all the values for the attribute (Figure 4.102).

Figure 4.102. You can view all the values for an attribute.


You can create multiple separate values for any attribute by selecting the attribute from the Inspector window and clicking the New Value button .


To add user attributes:

1.

In Workgroup Manager, navigate to the Inspector, and select the user account you wish to edit (Figure 4.103).

Figure 4.103. Click the Accounts button and the Inspector tab in Workgroup Manager.


2.

Click the New Attribute button .

An Attribute dialog drops down (Figure 4.104).

Figure 4.104. Click the New Attribute button to add an attribute to the user account.


3.

From the Attribute Name menu, select one of the preset attribute types (Figure 4.105).

Figure 4.105. Choose an attribute type from one of the many preset attributes.


You can also enter a custom attribute type to the right of the menu.

4.

Enter the attribute's value in the Text field.

The system automatically populates the Hex field (Figure 4.106).

Figure 4.106. The system automatically populates the Hex field.


5.

When you've finished making changes, click the OK button to close the Attribute dialog, and then click the Save button .

6.

Locate your new attribute and associated value in the Inspector frame, and view the information (Figure 4.107).

Figure 4.107. Locate the new attribute and its associated value.


The actual name of the attribute may vary from the name you chose in the list and the name that appears when it's saved.

Remember to always thoroughly test directory modifications before you implement them.



    Mac OS X 10. 3 Server Panther. Visual QuickPro Guide
    Mac OS X Server 10.3 Panther: Visual QuickPro Guide
    ISBN: 0321242521
    EAN: 2147483647
    Year: 2004
    Pages: 105

    flylib.com © 2008-2017.
    If you may any questions please contact us: flylib@qtcs.net