Configuring Apple Mail for Directory Access

Overview

The following instructions describe how to configure the Contacts app/Address Book to access the Stanford directory. You can then retrieve email names and addresses from within Apple Mail, accessing the same information available from the Stanford.Who site.

Mac OS X 10.7 users can configure access to the Stanford-only directory, which is restricted to the Stanford community. However, a glitch in the Mac operating system prevents OS X 10.8 and 10.9 users from configuring access to the Stanford-only directory. OS X 10.8 and 10.9 users can access Stanford's public directory but it has fewer settings due to privacy reasons.

Configure access to Stanford's public directory

1. Launch  Contacts.
2. From the Contacts menu, click Preferences.
3. Click the Accounts tab and then click the + button to add an account.
4. When prompted to choose a contacts account to add, select Other contacts account and click Continue.
   
   
5. In next window, enter the following information:
   • LDAP
   • Description: Stanford Public
   • Search base: cn=people,dc=stanford,dc=edu
   • Scope: Subtree
   • Server Address: ldap.stanford.edu
   • Server Options: Port: 389
   • Server Options: Use SSL: unchecked
   • Authentication: None
      
   
6. Click Create.
7. Quit Contacts.

Search the directory from Mail

1. Launch  Mail.
2. Open a new message.
3. Start typing the name you want in the To:, Cc:, or Bcc: field.
   Tip: You can search by any portion of a name.
   
   

Configure access to the Stanford-only directory (OS X 10.7 only)

Add an account

1. Launch Address Book.
2. From the Address Book menu, choose Preferences.
3. Click the Accounts tab and then click the + button.
   
   
4. In the Add Account window, enter the following information:
   • Account type: LDAP
   • Server address: mothra.win.stanford.edu
   • Server Options: Port: 636
   • Server Options: Use SSL: checked
      
   
5. Click Continue.
6. In the Account Settings window, enter the following information:
   • Description: Stanford (or another name of your choosing)
   • Search base: ou=accounts,dc=win,dc=stanford,dc=edu
   • Scope: Subtree
   • Authentication: Simple
   • User name: yoursunetid@win.stanford.edu
   • Password: your SUNet ID password
     
      
   
7. Click Create. Your account information will display.
   
   
8. Quit the Address Book application. Reopen the application if you wish to use it immediately, but it must be closed once for these settings to take effect.
9. Follow the procedure, below, for trusting the SSL certificate.

Trust the SSL certificate (for Mac OS X 10.7 users only)

The Address Book in Mac OS X 10.7 does not allow automatic trusting of self-signed certificates. You need to take the following steps to trust the certificate so that Address Book and Mail can read from the Stanford LDAP directory.

1. Right-click (or CTRL + click) the following file and save it to your desktop: stanford-WIN-Root-CA.cer

   Note: Make sure that a .txt extension is not appended to the file.

2. Double-click the stanford-WIN-Root-CA.cer file to open it in Keychain Access.
3. Click Always Trust.
   
   
4. If prompted, enter your computer password.
   
   
5. Quit Keychain Access.