Next / Previous / Contents / TCC Help System / NM Tech homepage

2.2.  LDAP considerations

The TCC's LDAP server will be used as the authority for the current set of user account names. The name of the LDAP server, and the DN (distinguished name) of the account root, will be hardcoded into the script. For more information about LDAP, see the document on the proposed TCC Secure LDAP editing facility.

The server address is ldaps://ldap0.nmt.edu:636, and the base DN for accounts is ou=accounts,dc=tcc,dc=nmt,dc=edu. We need only two attributes:

The first version of this script caused a problem because it tried to look for user homepages for all the “machine accounts,” special accounts created for each user area workstation. Because such accounts have their home directories specified as /dev/null, the script caused many failures of the automounter to bind to /dev/null. We get around that by ignoring accounts whose uid attributes end with “$”.