The remainder of this document assumes you have an LDAP server which contains user account information such as home directory pathname and group membership.

Open the Authentication Configuration utility as shown in the sequence below:

Under the User Information tab, click the Enable LDAP Support checkbox. Click the Configure LDAP... button. Check the Use TLS to encrypt connections checkbox. Press the Download CA Certificate button. Enter the URL to the the certificate in the Certificate URL textbox and click the OK button. For LDAP Search Base DN enter the search base. Enter the LDAP server in the LDAP Server textbox. Press the OK button to close LDAP Settings dialog box and the Authentication Configuration dialog box.

You should now be able to test basic LDAP functionality by using the id -Gn netid command to list the groups to which a NetID belongs. For further tests, you can install the openldap-clients package from the Terminal as follows:

Now you can confirm that the LDAP traffic is begin encrypted with TLS if the following shell command is successful:

You can also confirm encryption using a utility such as tcpdump to monitor the traffic as it flows through the network interface:

You would run this command in one Terminal window and then capture packets while running the ldapsearch command in another window.

This will enable a user with a UW NetID and account information in LDAP to log into the workstation.