Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Use a free LDAP server with Address Book' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Use a free LDAP server with Address Book
Authored by: alexnegvesky on Apr 30, '08 06:51:37AM
LDAP command line utilities can be a pain. Give this a try to connect to your LDAP server:

ldapsearch -x -Z -h ds1.us.freeldap.org -b o=entic.net -D uid=myusername,ou=People,o=entic.net -W "(ou=People)" uid

A quick explanation of the options:
-x use simple authentication instead of default SASL
-Z startTLS. You can remove this option if it is unnecessary
-h hostname
-b search base
-D distinguished name to bind to LDAP. Usually your uniquer username
-W will prompt you for your password
"(ou=People)" search the People ou. Use "(objectClass=*)" to search everything
uid filter out attributes and return only the uid

I highly recommend reading the man page or running "ldapsearch --help" to learn more about using this tool. Also, you can save time in the future by configuring your ldap commands to default to many of these values. Look at the man pages for "ldap.conf" and take a look at /private/etc/openldap/ldap.conf.

[ Reply to This | # ]
Use a free LDAP server with Address Book
Authored by: meitar on Apr 30, '08 10:38:18AM

Thanks for this tip! It turns out the issues were mostly caused by Address Book's weird behavior, now documented over on FreeLDAP.org's site:

http://forum.entic.net/punbb/viewtopic.php?pid=118#p118

The issue turned out to be mostly confusion caused by the fact that in apply any changes to any of the LDAP directory server settings in Address Book, you need to quit the application, then relaunch it. If you just change the directory's LDAP settings, but don't quit the application, all your searches for that directory are still actually using the settings you had previously and not the ones that the LDAP settings preference sheet are displaying to you. How very un-Apple-like! And yes, I've reported this to Apple through their web site feedback form

Still, thank you!

---
-Meitar Moscovitz
Professional: http://MeitarMoscovitz.com/
Personal: http://maymay.net/

[ Reply to This | # ]