Connecting OS X Address to LDAP

Up until now, this posting to the openldap-software mailing list by Apple employee Gary La Voy is by far the most complete description I’ve ever seen of the LDAP fields supported by I suppose this is all there is to know about LDAP and Address Book – unless of course more has been added in Leopard.

Just now, I stumbled across this Ethereal dump of Address Book’s query to an LDAP server which is extremely valuable. This O’Reilly page also has a useful summary if you’re just getting started, but it’s really the Ethereal dump that’s going to save you. (You can install Ethereal via MacPorts)

Here’s the complete dump of the LDAP Connection from Address Book:

Lightweight Directory Access Protocol
    LDAP Message, Search Request
        Message Id: 2
        Message Type: Search Request (0x03)
        Message Length: 291
        Response In: 8
        Base DN: (null)
        Scope: Subtree (0x02)
        Dereference: Never (0x00)
        Size Limit: 0
        Time Limit: 30
        Attributes Only: False
        Filter: (|(givenname=carmo)(sn=carmo)(cn=carmo)(mail=carmo))
        Attribute: givenName
        Attribute: sn
        Attribute: cn
        Attribute: mail
        Attribute: telephoneNumber
        Attribute: facsimileTelephoneNumber
        Attribute: o
        Attribute: title
        Attribute: ou
        Attribute: buildingName
        Attribute: street
        Attribute: l
        Attribute: st
        Attribute: postalCode
        Attribute: c
        Attribute: jpegPhoto
        Attribute: mobile
        Attribute: co
        Attribute: pager
        Attribute: destinationIndicator
        Attribute: labeledURI
        Attribute: IMHandle

I just did some OpenLDAP debugging and got this list of attributes for Leopard 10.5.1:

givenName sn cn mail telephoneNumber facsimileTelephoneNumber o title ou buildingName street l st postalCode c jpegPhoto mobile co pager destinationIndicator labeledURI IMHandle

Once you get all of these popped into an LDAP directory entry, the result is something like this:

Note that IMHandle, buildingName, commonName, pager, ou and co fields do not get displayed on the contact card. Additionally, only one email address will be displayed (the first one) regardless of how many email addresses exist on the contact record. I’ve spent several hours trying to get IMHandle to work (apple-imhandle), but it never seems to populate. Apparently, I’m not the only one with this issue. Save yourself the trouble – don’t bother.

Apparently Mac OS X Server is required if you want to serve up Instant Messenger contact info.

15 thoughts on “Connecting OS X Address to LDAP”

  1. Full disk encryption is encryption in the hard disk level. This software performs by automatically converting data on a hard drive into a form that can not be comprehended by everybody who doesn’t have the essential to “undo” the conversion. Without the correct authentication essential, even when the difficult hard drive is taken away and used in a different machine, the data remains inaccessible.

  2. Goode !File Encryption is the best encryption software to encrypt, lock and hide files, folders, drives in a handy method. This encryption software is compatible with all popular versions of Windows operating system.

  3. Whole Disk Encryption Each day, millions of people go to online to work, do homework, purchase products, manage devices in their homes, and connect with friends. Technology such as the big information are modifying our everyday life at a quick speed, while exponentially increasing the quantity of private data that is attained, used, and shared.

  4. Nice article, If you would like set the access authorities for those files or programs, such as, to hide or lock them, to deny copy or delete etc, and likewise want to monitor their utilization, the File Encryption will probably be your best choice.

  5. Someone essentially help to make seriously articles I would state. This is the first time I frequented your web page and thus far? I surprised with the research you made to make this particular publish incredible. Magnificent job!

Leave a Reply

Your email address will not be published. Required fields are marked *