Chapter 3. Open Directory

Open Directory is Apple's way of implementing directory services. In order to understand Open Directory, you must first understand how directory services are set up and managed.

Think of a database, such as FileMaker Pro or Microsoft Excel. When you set up Microsoft Excel, you may have headers for each column, and the first column may contain a unique number for each entry in the table. FileMaker Pro can be set up to have data entered into fields, and the fields can be used to create forms, perhaps containing all information about a user or a product. A database is a container of information. A directory is really nothing more than a database that contains informationin this case, usually data about a user and/or group and other related facts.

The formation of directories structured in a certain fashion is called directory services. Some of the more popular directory services are Lightweight Directory Access Protocol (LDAP), NetInfo, eDirectory, and Active Directory. Both Active Directory and eDirectory are derivatives of LDAP, and Mac OS X Server uses LDAP as the basis of its Open Directory architecture. When you create a secondary directory for users (the initial directory service on both Mac OS X Client and Server is NetInfo), that directory is an Open Directory LDAP directory.

You can implement Open Directory a variety of ways, as you'll see in this chapter. Some of these techniques work with both Mac OS X and Mac OS X Server. One of the main differences between Mac OS X and Mac OS X Server with respect to Open Directory is the ability of Mac OS X Server to create the secondary directory for user information; this secondary directory is the focus of attention later, but for now this chapter will explore some basic functions of Open Directory.

Keep in mind that there are many potential types of configuration, and you should read this entire chapter before you attempt any tasks.