What You ve Learned

What You've Learned

• Apple's implementation of LDAP is OpenLDAP.

• An Open Directory master consists of an LDAP database, a Password Server, and a KDC.

• Some basic LDAP configuration information is kept in slapd.conf; however, most of the configuration for Open Directory is kept in slapd_macosxserver.conf.

• OpenLDAP does not support passphrases in SSL certificates.

• slapcat is primarily used to generate an LDIF file from an LDAP database.

• The schema files used by Mac OS X Server are located in /etc/openldap/schema/.

References

Administration Guides

"Mac OS X Server Open Directory Administration": http://images.apple.com/server/pdfs/Open_Directory_v10.4.pdf

"Mac OS X Server Command-Line Administration": http://images.apple.com/server/pdfs/Command_Line_v10.4.pdf

Apple Knowledge Base Documents

The following Knowledge Base documents (located at www.apple.com/support) provide further information about the BerkeleyDB database and LDAP databases.

Document 301264, "Mac OS X Server: How to change the default BerkeleyDB cache size"

Document 301490, "Mac OS X Server 10.4: Open Directory LDAP databases must be migrated using Setup Assistant"

Books

Carter, Gerald. LDAP System Administration (O'Reilly, 2003).

URLs

Open Directory: www.apple.com/support/macosxserver/opendirectory

OpenLDAP: www.openldap.org