Documentation for Crowd 1.5. Documentation for other versions of Crowd is available too.

This page provides configuration notes for Apple OS X Open Directory, in relation to Configuring an LDAP Directory Connector.

Crowd supports read-only connections to Apple OS X Open Directory services.

Crowd's Apple Open Directory support is read-only

Currently, you cannot add or update user details or group details in a Crowd-connected Apple OS X Open Directory server. Users will not be able to change their passwords from Crowd or from Crowd-connected applications.

Screenshot: Connector — Apple OS X Open Directory



属性

説明

Connector

The directory connector to use when communicating with the directory server.

URL

The connection URL to use when connecting to the directory server, e.g.: ldap://localhost:389, or port 639 for SSL.

Secure SSL

Specifies whether the connection to the directory server is an SSL connection.

Use Node Referrals

Specifies whether to use the JNDI lookup java.naming.referral option.

Use Nested Groups

Not applicable. The RFC 2307 schema does not support nesting of groups, so we do not have support for nested groups in Apple OS X Open Directory.

Use the User Membership Attribute

Put a tick in the checkbox if your directory supports the group membership attribute on the user. (By default, this is the 'memberOf' attribute.) For instructions on enabling this feature in your directory, please refer to the OpenLDAP documentation.
(info) This feature is available in Crowd 1.5.2 and later.

  • If this checkbox is ticked, Crowd will use the group membership attribute on the user when retrieving the members of a given group. This will result in a more efficient retrieval.
  • If this checkbox is not ticked, Crowd will use the members attribute on the group ('member' by default) for the search.
  • If the 'Use Nested Groups' checkbox is ticked, Crowd will ignore the 'Use the User Membership Attribute' option and will use the members attribute on the group for the search.

ページングされた結果を使用

Specifies whether to use the LDAP control extension for simple paged results option. Retrieves chunks of data rather than all of the results at once.

ベース DN

The root distinguished name to use when running queries against the directory server, e.g.: o=acmecorp,c=com.

ユーザー DN

The distinguished name of the user that Crowd will use when connecting to the directory server.

パスワード

The password that Crowd will use when connecting to the directory server.

Group Relationships

Crowd は gidNumbermemberUid 属性の両方を確認し、ユーザーがグループのメンバーかどうかを判断します。gidNumber 属性の名前を変更することはできません。Crowd はメンバーシップの確認に必ずこの属性を使用します。

The RFC 2307 schema does not support nesting of groups, so we do not have support for nested groups in the Posix schema.

次のステップ

Go back to Configuring an LDAP Directory Connector.

関連トピック

Using Apache Directory Studio for Crowd LDAP Configuration
Crowd Documentation