mail config for mac os 10.5.7 xserver

Sorry everyone for taking my time to follow up on this too.
pablobm, that worked perfectly! (group membership).

So here is my setup for Mac OS X LDAP server.
Everything is STOCK except for 2 lines of custom code (a very small mod that would be easy to incorporate into the new code)

First Our setup:
-Webserver on Linux/Apache box
-xServe running stock OSX 10.4 Open Directory
-Users have multiple short names
the first name is their full name (ex. jacobredding)
the second is a short name of their choosing
**Users may have 3 or more short names (important later on)

Now Drupal's LDAP Module configuration (Drupal 4.7 but same setting for 4.6)
Server settings:
standard setup

Login Procedure:
edirectory/Active Directory
cn=users,dc=my,dc=domain
username attribute: uid

Groups and Roles:
Groups exist as LDAP entries where a multivalued attribute contains the members' CNs
cn=groupname,cn=groups,dc=my,dc=domain
ex. If you have a group name WebsiteEditors it would be
cn=WebsiteEditors,cn=groups,dc=my,dc=domain

Attribute holding group members: MemberUid

LDAP Attributes
mail = mail

That's it!! except for one little item.

The Mac Shortnames pose a slight problem.
Take this example
testuser is the long name
tuser is a short name
test is a short name

All three names can be used to log onto the Drupal system and they all map to the same user account, except that because the name used to login is different a separate drupal account will be created for each account logged into.
i.e.
on Day 1 I use testuser to login, a drupal account named testuser is created.
on Day 2 I user test to login, a second drupal account is created (identical to the other)

This is actually a very simple fix. In the function _ldap_integration_ldap_login() the system is using $login_string to do a user_load and a $tmp_user. I simply replaced this with the $name from the DN of the object that was authenticated against succesfully (handled by the AD functions).

Here's the code

function _ldap_integration_ldap_login($login_string, $pass) {
<snippity snip snip>

  if (ldap_integration_auth($name, $pass, $server)) {

//Patched May 4th, 2006 by Jacob Redding
//This patch changes the NAME variable to the 1st UID in the list.
//Why? IF Users have multiple UIDs they can log in with any of them
//without this 2 line path a drupal user account will be created for each of the UIDs
//with this 2 line path a single drupal user account will be created based on the 1st uid of the DN

    //--Begin Patch
      $dn = _ldap_integration_login2dn("$name$at$server");
      $login_string = $ldap->retrieveAttribute($dn, 'uid');
    //--End Path (see I told you it was only 2 lines)

    $user = user_load(array('name' => $login_string));
    $tmp_user->name = $login_string;
    if (!$user->uid) { // Register this new user.
      // Changes to this user_save():
      //   1. 'pass' => $pass . Obviously.
      //   2. 'mail' => value of the mail attribute in the LDAP directory
      //   3. 'init' => same. BTW: what's the use of this field?
      //   4. 'ldap_authentified' => TRUE . There is a need to mark
      //      people as externally authentified.
      $dn = _ldap_integration_login2dn($login_string);

<snippity snip snip>

Hopefully all of that made sense, if not let me know and Ill follow up. This should be an easy fix for the next version.

Thanks for all the hard work it is MUCH appreciated!!!!