8) OS X Client

Now that you’ve created an account for John Doe and designated a home directory and a share point, we’ll need to configure your client OS X machine to connect to OS X Server via LDAP binding. This is done through a program called Directory Access in the Applications/Utilities folder.

For this lesson, you’ll need to switch to another Mac running OS X client. So off you go.

Now that you’re back, open Network Preference and check to see if AppleTalk is active. All set?

Apple Talk Preference

  • Launch Directory Access and make sure NetInfo is unchecked. Select “LDAPv3″ and press Configure…

Directory Assistant Panel 1

  • Click on the Show Options triangle and press New…

Directory Assistant Panel 3

  • To set up LDAP binding, we can use the server name or IP address. Since we have DNS running, use the name of your OS X Server and press continue.

Directory Assistant Panel 2

  • From the LDAP Mappings drop down menu, select “From Server” and press OK.

Directory Assistant Panel 4
For convenience, open Accounts Preference so that we can enable fast user switching. This way, you can log in and out quickly to test out your network account.

Directory Assistant Panel 5

  • In the Finder, go to the fast user switching menu on the top right corner of your screen and select “Login Window”. You’re now taken to the login screen.
  • Now, the moment of truth. Log in as John Doe and put in your password. If all is well, you will have successfully logged in using your network account.

Seems familiar doesn’t it? You should have access to almost every application with a standard Dock since you didn’t alter any setting for John Doe in the Preferences section of the Workgroup Manager.

  • Check where your Home directory is. It’s in the Users folder under johndoe, just as you specified when you set up the account.
  • You’ll also notice that while you can launch any installed applications with access to most folders, you don’t have any administrative privileges so you’re restricted from making system level changes.

Again, you can use the Workgroup Manager to set rules and restrictions as you see fit for any account you create. You’re the master of your domain, right?

Next, we’ll connect to the share point we created in the previous lesson. There are several ways to go about this.

  • First, while you’re at your desktop in the Finder, select Go from the drop-down menu and select “Connect to server…”
  • You can connect using the server name or its IP address. Since we have DNS running, we’ll use the server name. Press Connect.

Server Connect 1

  • Log in as John Doe with a password. Press Connect.

Sever Connect 2

Now you’ll see the list of volumes that you have access to. Select the “Apple Share Files” share point we created in the last lesson and press OK.

Server Connect 3

Another way to mount your share point is to connect by selecting the Network Icon in the Finder.

Server Connect 4

If you created the optional text file in the previous lesson, you should be able to open it, alter it, and save it since you used ACL to give John Doe permission to “Read and Write” in the share point.

Everyone else would not have been able to do so since they lack the priviledge, unless he was the owner of the file, an admin, or a user who belongs in the admin group.

And there you have it. You’ve successfully created a network account, logged in, and accessed the share point you created. High five!

Previous | Next

No responses yet

Trackback URI | Comments RSS

Leave a Reply

You must be logged in to post a comment.