Binding Clients to the Shared Domain

You share the directory by creating a binding between the client and the Open Directory domain. Binding creates a connection between the server and the client, enabling the client to read the LDAP database, send authentication requests, and interact with the Kerberos realm for service tickets. Regarding authentication, you see this interaction most frequently from the login screen in OS X, and most of that interaction is transparent to the user.

Any version newer than Mac OS X 10.2 can bind to Open Directory running on Mountain Lion Server. Your Mac OS X 10.7 and 10.8 client systems should not be bound to versions of OS X Server previous to 10.7 to best support the newest enhancements of Mac OS X.

Binding Mac OS X 10.6 and later clients

You can bind Mac OS X 10.6, 10.7, and 10.8 clients by using System Preferences. Follow these steps:

1. Select the Apple menu and choose System Preferences. Then click the Users & Groups icon in Mac OS X 10.7 or 10.8 (or Accounts in Mac OS X 10.6).

2. Click the lock icon, enter a password, and then click Login Options.

If the client has never previously bound to a directory, you see a Join button next to Network Account Server at the bottom of the Login Options window. If a current binding exists, you see an Edit button.

3. Click the Join or Edit button.

4. In the Server field, shown in Figure 5-6, enter the Open Directory master’s fully qualified host name.

If you previously enabled service discovery on ...

Get OS X Mountain Lion Server For Dummies now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.