How to verify or change Directory Access settings via UNIX command.

This document assumes you have a working knowledge of using command line applications via the terminal application or sending UNIX commands with ARD. If you are not comfortable using command line applications consult your system administrator.

The first thing to do is verify the current Directory Access settings. Send the following command to to the workstation (be sure to select Run command as: root):

dscl localhost -list /LDAPv3

change1.jpg

The result should return a server IP address or FQDN


change2.jpg

If this information is correct for your network. You're done!!

If the information is incorrect proceed to How to change Directory Access settings via UNIX command.

How to change Directory Access settings via UNIX command.

This document assumes you have a working knowledge of using command line applications via the terminal application or sending UNIX commands with ARD. If you are not comfortable using command line applications consult your system administrator.

The first thing to do is verify the current Directory Access settings. Once you have verified that the settings need to be changed send the following commands. Be sure to change the server name or IP address as needed.

dsconfigldap -v -r oldserver.somewhere.lan
dscl /Search -delete / CSPSearchPath /LDAPv3/oldserver.somewhere.lan
dsconfigldap -v -a newserver.somewhere.lan
dscl /Search -create / SearchPolicy CSPSearchPath
dscl /Search -append / CSPSearchPath /LDAPv3/newserver.somewhere.lan

change3.jpg

The result should look like this:

change4.jpg

You can then verify the settings again to make sure the changes were made correctly. The above settings change should verify as this:

change5.jpg

theprimaxgroup
650 Northland Blvd. Forest Park, Ohio 45240
P.513.772.1223 F.513.772.0261 Toll-Free.888.856.7377

e-mail:MoreHelp@AppleHelp.org