Limiting Contact Results from OD

[ghostman]

We are running OS X Server 10.5.8 OD to authenticate our Mac and Linux clients. The nature of our business has many people coming on staff for a project and then leaving the after the project. We want to keep user accounts in the directory so we can track file ownership when we restore old file from a project. Our policy so far has been to deactivate the user’s login and change their primary group to None.

Now we want to also use the OD for a centralized company address book. It works great, but when I search through the contacts (Directory.app, Address Book.app, etc) I still get the records for the deactivated users.

What is the best way to limit contact searches to only a group (like only users with a primary group of Staff)?

[ghostman]

I’ll answer my own question…

There doesn’t seem to be a way to do this using the default container “users”. Our solution was to use the container “people” strictly for the company address book. It doesn’t pass the Jabber field correctly for iChat, but that is a small inconvenience.

[Author]

Posts