A couple of questions about openldap on MacOS X Panther

[Toby Blake <toby@inf.ed.ac.uk>]

Hi there,

I apologise if these questions are more Mac-related than openldap
related, but I haven't been able to find this information out on any
Mac type resources, so I'm hoping somebody here can point me in the
right direction.

- It would appear that the openldap installation that comes supplied
  with MacOS X hasn't been compiled with kerberos/gssapi support.
  e.g. if I try to connect to our (RH9) ldap server with an
  authenticated connection I get a "no worthy mechs found" error
  message.  So, can I compile my own ldap and use it to replace the
  apple-supplied one, or will it break things?

- On a similar line, the OSX Directory Access utility has a "Use
  authentication when connecting" section, allowing you to specify a
  distinguished name and password to use when connecting to the ldap
  server.  Does anyone know how this is actually used - the 'dscl'
  utility seems to get data OK, with a correct and incorrect password
  set here, suggesting that it's not being used.

I suppose what I really want is something that tells me how Apple's
system software interacts with openldap beneath, as Apple's docs seem
extremely limited in this respect.

Many thanks

Toby Blake
University of Edinburgh