[KLUG Members] NFS across platforms...and not!

Chris Goron members@kalamazoolinux.org
Wed, 31 Dec 2003 15:56:44 -0500


--=-/3jWiu5Ryt5w3Vtiflvh
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

Yes, I believe NetInfo is Apple's own implementation of the Ldapv2
protocol if I'm not mistaken. They seem to have made an effort with
wrapping most of the system up in the directory thus eliminating most of
the /etc file system. I would wager one could incorporate their nfs
exports in Openldap, I've never checked but I manage my autofs mount
points in Openldap.


On Wed, 2003-12-31 at 15:25, Adam Williams wrote:

> > The article is interesting in that it mentions having to update
> > NetInfo.  I run into netinfo stuff alot in researching LDAP related
> > items.  Apple's netinfo seems a conglomeration of NSS, NSCD, and
> > OpenLDAP;  they must have expanded it's functionality if it now has
> > something to do with NFS exports.
> > BTW, the Apple NetInfo people have contributed patches (and some nice
> > ones at that) back to OpenLDAP.  So kudos to them.
> > Is slapd running on a Mac OS X server and client?
> 
> Ah, here is an explanation of the situation (from the OpenRADIUS
> website).  Apparently Apple's got some Next-ian baggage in OS/X and has
> a rather Microsoft-ian approach to standards in this regard.
> 
> "Mac OSX Server 10.2 (aka Jaguar) has built-in LDAP server
> functionality.  It's not a real LDAP server, but instead it's an LDAP
> interface to the Mac OS Server's authentication system.  Jaguar uses
> NetInfo, which is a left-over from the NeXT days.  NetInfo was (and
> still is) a parallel to LDAP, and was based on X.500 just like LDAP. 
> But the implementation isn't quite compatible with LDAP.
> So Apple has written a set of API's called OpenDirectory, which is Apple's 
> new way of handling directories and authentication between applications.
> Apple's LDAP installation is a front-end only, and it uses OpenDirectory
> API to access the NetInfo directory.  Ya got all that?"
> 
> PADL's got a nice HOWTO on how to make something more resembling real LDAP available on Mac OS/X -
> http://www.padl.com/Articles/AdvancedOpenDirectoryConf.html
> 
> _______________________________________________
> Members mailing list
> Members@kalamazoolinux.org
> 
> 
> 

--=-/3jWiu5Ryt5w3Vtiflvh
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
  <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
  <META NAME="GENERATOR" CONTENT="GtkHTML/3.0.8">
</HEAD>
<BODY>
Yes, I believe NetInfo is Apple's own implementation of the Ldapv2 protocol if I'm not mistaken. They seem to have made an effort with wrapping most of the system up in the directory thus eliminating most of the /etc file system. I would wager one could incorporate their nfs exports in Openldap, I've never checked but I manage my autofs mount points in Openldap.<BR>
<BR>
<BR>
On Wed, 2003-12-31 at 15:25, Adam Williams wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE><FONT COLOR="#737373"><I>&gt; The article is interesting in that it mentions having to update
&gt; NetInfo.  I run into netinfo stuff alot in researching LDAP related
&gt; items.  Apple's netinfo seems a conglomeration of NSS, NSCD, and
&gt; OpenLDAP;  they must have expanded it's functionality if it now has
&gt; something to do with NFS exports.
&gt; BTW, the Apple NetInfo people have contributed patches (and some nice
&gt; ones at that) back to OpenLDAP.  So kudos to them.
&gt; Is slapd running on a Mac OS X server and client?

Ah, here is an explanation of the situation (from the OpenRADIUS
website).  Apparently Apple's got some Next-ian baggage in OS/X and has
a rather Microsoft-ian approach to standards in this regard.

&quot;Mac OSX Server 10.2 (aka Jaguar) has built-in LDAP server
functionality.  It's not a real LDAP server, but instead it's an LDAP
interface to the Mac OS Server's authentication system.  Jaguar uses
NetInfo, which is a left-over from the NeXT days.  NetInfo was (and
still is) a parallel to LDAP, and was based on X.500 just like LDAP. 
But the implementation isn't quite compatible with LDAP.
So Apple has written a set of API's called OpenDirectory, which is Apple's 
new way of handling directories and authentication between applications.
Apple's LDAP installation is a front-end only, and it uses OpenDirectory
API to access the NetInfo directory.  Ya got all that?&quot;

PADL's got a nice HOWTO on how to make something more resembling real LDAP available on Mac OS/X -</FONT>
<A HREF="http://www.padl.com/Articles/AdvancedOpenDirectoryConf.html"><U>http://www.padl.com/Articles/AdvancedOpenDirectoryConf.html</U></A>
<FONT COLOR="#737373">
_______________________________________________
Members mailing list
Members@kalamazoolinux.org</FONT>
<A HREF=""><U></U></A>
<FONT COLOR="#737373">
</I></FONT></PRE>
</BLOCKQUOTE>
</BODY>
</HTML>

--=-/3jWiu5Ryt5w3Vtiflvh--