Editing RFC 2307 Mapping to Enable Creating Users


Before you can use Workgroup Manager to create users on a non-Apple LDAP directory server that uses RFC 2307 (UNIX) mappings, you must edit the mapping of the Users record type. You do this with the Directory Access application.

  1. In Directory Access, click Services.
  2. If the lock icon is locked, click it and type the name and password of an administrator.
  3. Select LDAPv3 in the list of services, then click Configure.
  4. If the list of server configurations is hidden, click Show Options.
  5. Select the directory configuration with RFC 2307 mappings, then click Edit.
  6. Click Search & Mappings.
  7. Select Users in the list on the left.

    By default, "Map to __ items in list" is set to Any and the list on the right includes posixAccount, inetOrgPerson, and shadowAccount.

  8. Change "Map to __ items in list" to All and change the list on the right to the exact set of LDAP object classes to which you want the Users record type mapped.

    For example, you could delete shadowAccount from the list so that Users maps to only posixAccount and inetOrgPerson. Or you could map Users to account, posixAccount, and shadowAccount.

    To change an item on the list, double-click it.

    To add an item to the list, click Add.

    To delete the selected item from the list, click Delete.

    To change the order of listed items, drag items up or down in the list.

    You can find out the object classes of existing user records in the LDAP directory by using the UNIX tool ldapsearch in a Terminal window. The following example would display the object classes for a user record whose cn attribute is "Leonardo da Vinci:"

    ldapsearch -x -h ldapserver.example.com -b "dc=example, dc=com" 'cn=Leonardo da Vinci' objectClass

    The output displayed for this example command could be something similar to the following:

    # Leonardo da Vinci, example.com
    dn: cn=Leonardo da Vinci, dc=example, dc=com
    objectClass: inetOrgPerson
    objectClass: posixAccount