Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking for resources/suggestions/experience on administering a medium sized network of Macs (300ish) using Open LDAP on Linux rather than using Open or Active Directory.

Would like the following features:

  • Network accounts
  • Network home drives
  • Network group shares
  • Printers / Applications / Updates etc a bonus!

  • share|improve this question
    up vote 6 down vote accepted

    First off you really want to read Apple's Open Directory Administration Guide, this guide has a lot of information both on the Open Directory server, but also how Mac OS X authenticates to any directory system. Somewhat confusingly the name "Open Directory" is often used for both the client side and server side of this.

    The basic method you're after is this:

    1. Build OpenLDAP server, you may want to add Apple's schema extensions to your OpenLDAP database. You can find them at /etc/openldap/schema/apple.schema
    2. Bind Mac OS X computer to authenticate with LDAP (use /Applications/Utilities/Directory to configure the LDAPv3 plugin. The search mappings options are very important here, they tell Mac OS X what attribute to look at in LDAP for each attribute of the account it wants to know about. RFC2307 mappings are standard Unix, the Open Directory mappings contain more Mac specific stuff that come from the apple.schema file
    3. Test binding works with simple stuff: id username to see if the username maps correctly, then su - username to switch to that user.
    4. Now you can look at fancy stuff like pointing Workgroup Manager from Apple's Server Administration Tools [ not linkified due to new user restrictions :-( ] at localhost, then changing your directory to the LDAP host (look for a little globe under the toolbar). From here you should be able to edit users/groups etc once you've authenticated to your LDAP server and generally manage it like an Open Directory server (missing some parts naturally).

    Good luck!

    share|improve this answer

    Not sure if the following page will help you, it suggests that you can configure the LDAP client to look OpenLDAP

    Found > Here <


    Found > Here <

    Hope that helps

    share|improve this answer

    Your Answer


    By posting your answer, you agree to the privacy policy and terms of service.

    Not the answer you're looking for? Browse other questions tagged or ask your own question.