LDAP Directory Setup Instructions

LDAP Overview

The LDAP directory is used to store all sorts of information about members of the UNC-Chapel Hill community. Most importantly, it keeps contact information and when it is used in conjunction with your email addressbook, can become very useful. The following information will help you set up your email client to use the Campus LDAP server as an addressbook. Although the more client-specific instructions are listed at the end of this article, the following server settings should work for most any email client:

  • Hostname: ldap.unc.edu
  • Base DN: ou=people,dc=unc, dc=edu
  • Port number: 389 (the default port number).

LDAP Filters

Searches of an LDAP directory are submitted as text-based filters describing the desired result-set. Most directories store person-related data in standard objectclasses (or subclasses) such as inetOrgPerson so that addressbook applications can use preset filters that acquire contact info. For example, 'sn' is the standard attribute for surname (lastname). An addressbook may submit the search:

sn=smith

to acquire information about everyone in the directory with the lastname Smith (note: filters are not case-sensitive).

The UNC directory has defined objectclasses that provide contact information to standard applications and add useful information for campus organizations and developers. For instance, to limit your search to UNC employees, use this filter:

objectclass=uncstaff

This yields a large list -- filter constraints can be combined logically; this search returns all UNC employees named Smith:

(& (objectclass=uncstaff)(sn=smith) )

Similarly, employees with an affiliation to a particular department, eg. Biology - #3267, are returned using:

(& (objectclass=uncstaff)(departmentnumber=3267) )

This result set is not guaranteed to consist exclusively of employees of the Department of Biology. At this time, employees of other departments who are pursuing a degree in Biology will be returned by this query. Also be aware that excluding students in the filter:
(& (objectclass=uncstaff)(departmentnumber=3267)(! (objectclass=uncstudent)) )
may erroneously exclude Biology staffmembers who are taking a class (in any department) This ambiguity can be avoided with compound searches that utilize position-specific subobjects. Please contact directory services for more information.

For more information on LDAP filters, see the LDAP Filter RFC.

Application-specific Configuration

The following sections describe the configuration of several common LDAP client applications.

Thunderbird

1. Open Thunderbird.

2. Open the Address Book by clicking on the Tools > Address Book menu item from the toolbar.

3. In the Address Book, click on the File > New > LDAP Directory... menu item from the toolbar.

4. Fill in the fields with the information from the LDAP Overview above. The Bind Dn field should be left blank and the Use Secure Connection box should be left unchecked.

5. If you want to limit LDAP searches so that they only return information about employees, click the Advanced tab. In the Search filter: box, enter (objectclass=uncstaff).

6. Click OK to close each of the open windows.

Mozilla

1. Open Mozilla.

2. Open the Address Book by clicking on the Window > Address Book menu item from the toolbar.

3. In the Address Book, click on the Edit > Preferences menu item from the toolbar.

4. Choose the category under .

5. Place a checkmark next to Directory Server and click on Edit Directories .

6. Click the Add button and enter a name for your Directory entry ("UNC Directory" for example).

7. Fill in the fields with the information from the LDAP Overview above. The Bind Dn field should be left blank and the Use Secure Connection box should be left unchecked.

8. If you want to limit LDAP searches so that they only return information about employees, click the Advanced tab. In the Search filter: box, enter (objectclass=uncstaff).

9. Click OK to close each of the open windows.

Netscape 7

1. Open Netscape Navigator.

2. Open Netscape Mail by clicking on the Window > Mail & Newsgroups menu item from the toolbar.

3. Click on the Edit > Preferences menu item from the toolbar.

4. Choose the category under .

5. Place a checkmark next to Directory Server and click on Edit Directories .

6. Click the Add button and enter a Name for your Directory List ("UNC Directory", for example).

7. Fill in the fields with the information from the LDAP Overview above. The Bind Dn field should be left blank and the Use Secure Connection box sould be left unchecked.

8. If you want to limit LDAP searches so that they only return information about employees, click the Advanced tab. In the Search filter: box, enter (objectclass=uncstaff).

9. Click OK to close each of the open windows.

Netscape Communicator 4.x

1. Open Netscape Navigator.

2. Open the Address Book by clicking on the Communicator > Address Book menu item from the toolbar.

3. In the Address Book, click on the File > New Directory... menu item from the toolbar.

4. On the General tab, fill in the fields with the information from the LDAP Overview above. Use the Description field to enter a name for your Directory entry ("UNC Directory", for example). Leave the other settings as they are.

5. Now click on the Edit > Preferences menu from the toolbar.

6. Under the category, click on .

7. Place a checkmark next to Directory Server and chose the appropriate Directory from the drop-down box.

8. Click OK to close each of the open windows.

Outlook

1. Start Outlook and choose Tools > Email Accounts... .

2. Select the Add button and choose Directory Service .

3. Fill in the screens with the information from above.

4. Click Yes and then Next on the Check E-Mail addresses Dialog box.

5. Click Finish and you will then see the updated accounts screen.

6. Click on the new account that was created ("UNC Directory") and press the Properties button.

7. Change returned matches to 500 and fill in the search base (Base DN) exactly as shown above and press the OK button.

Mulberry

Please note that the version of Mulberry that is found on the Shareware site comes preconfigured with the LDAP settings.

Top
University of North Carolina - Chapel Hill