address book can’t do ldap query – login doesn’t work too

[Anonymous]

I have set up an OS X 10.3.3 as OD Master with KDC working. Users can access network shares, mail and ssh with single sign on. But they can only login to their machines as local users.
What I just can’t figure out is why it’s not possible to login as an OD user with networked home folders. Also, I can’t configure Address Book to query the ldap server so that other users info can be retrieved. I tried every possible search base combination. I think the problem is that there are sub entries like uid=user_name which don’t fit into the search base scheme as described in various articles.
What does work is, if I create a new entry with phpldapadmin, e.g. “people” and manually add entries for users and their email, phone etc. These infos can be retrieved using the search base cn=people,dc=domain,dc=tld

I have tried configuring Directory Services, both manually and automatic (DHCP delivered OD server entry) to no avail.
What am I supposed to do, to get ldap authentication working? I truly appreciate any helping hand.

Hakan Kaya

[Anonymous]

If I understand your problem correctly, you cannot have an account with exactly the same name as a network account. If you do, it will log on to the local account first. One or the other must be different.

When I had that problem we decided to migrate the users’ home directories to the server and remove all accounts from the client machines except an administrator account.

[Author]

Posts