Apple Mac OS X Server (Administrator’s Guide) User Manual
Mac os x server
This manual is related to the following products:
Table of contents
Document Outline
- Mac OS X Server
Administrator’s Guide
- Contents
- Preface How to Use This Guide 39
- 1 Administering Your Server 43
- Highlighting Key Features 43
- Highlighting Individual Services 46
- Highlighting Server Applications 56
- Administering a Server From Different Computers 58
- Server Assistant 58
- Open Directory Assistant 58
- Directory Access 59
- Workgroup Manager 59
- Server Settings 60
- Server Status 61
- Macintosh Manager 62
- NetBoot Administration Tools 62
- Network Install Administration Application 62
- Server Monitor 62
- Streaming Server Admin 63
- Where to Find More Information 64
- 2 Directory Services 65
- Storage for Data Needed by Mac OS X 66
- A Historical Perspective 67
- Uses of Directory Data 70
- Inside a Directory Domain 71
- Discovery of Network Services 72
- Directory Domain Protocols 73
- Local and Shared Directory Domains 74
- Directory Domain Hierarchies 78
- Search Policies for Directory Domain Hierarchies 82
- Directory Domain Planning 85
- Open Directory Password Server 87
- Overview of Directory Services Tools 89
- Setup Overview 90
- Before You Begin 91
- Setting Up an Open Directory Domain and Password Server 92
- Deleting a Shared Open Directory Domain 93
- Configuring Open Directory Service Protocols 93
- Setting Up Search Policies 94
- Changing Basic LDAPv3 Settings 97
- Configuring Access to Existing LDAPv3 Servers 98
- Creating an LDAPv3 Configuration 98
- Editing an LDAPv3 Configuration 99
- Duplicating an LDAPv3 Configuration 99
- Deleting an LDAPv3 Configuration 100
- Changing an LDAPv3 Configuration’s Connection Settings 100
- Configuring LDAPv3 Search Bases and Mappings 101
- Populating LDAPv3 Domains With Data for Mac OS X 103
- Using an Active Directory Server 104
- Accessing an Existing LDAPv2 Directory 106
- Using NetInfo Domains 110
- Using Berkeley Software Distribution (BSD) Configuration Files 115
- Configuring Directory Access on a Remote Computer 118
- Monitoring Directory Services 119
- Backing Up and Restoring Directory Services Files 119
- 3 Users and Groups 121
- How User Accounts Are Used 122
- How Group Accounts Are Used 127
- Kinds of Users and Groups 128
- Setup Overview 132
- Before You Begin 135
- Administering User Accounts 137
- Working With Basic Settings for Users 139
- Working With Advanced Settings for Users 146
- Working With Group Settings for Users 147
- Working With Home Settings for Users 149
- Working With Mail Settings for Users 150
- Working With Print Settings for Users 151
- Working With Managed Users 154
- Defining a Guest User 154
- Deleting a User Account 154
- Disabling a User Account 155
- Administering Home Directories 155
- Distributing Home Directories Across Multiple Servers 156
- Setting Up Home Directories for Users Defined in Existing Directory Servers 157
- Choosing a Protocol for Home Directories 160
- Setting Up AFP Home Directory Share Points 160
- Setting Up NFS Home Directory Share Points 160
- Creating Home Directory Folders 161
- Defining a User’s Home Directory 161
- Defining No Home Directory 162
- Defining a Home Directory for Local Users 162
- Defining a Network Home Directory 163
- Defining an Advanced Home Directory 163
- Setting Disk Quotas 164
- Defining Default Home Directories for New Users 165
- Using Import Files to Create AFP Home Directories 165
- Moving Home Directories 165
- Deleting Home Directories 165
- Administering Group Accounts 165
- Working With Member Settings for Groups 167
- Working With Volume Settings for Groups 170
- Working With Group and Computer Preferences 173
- Deleting a Group Account 173
- Finding User and Group Accounts 173
- Shortcuts for Working With Users and Groups 176
- Editing Multiple Users Simultaneously 176
- Using Presets 176
- Importing and Exporting User and Group Information 178
- Understanding What You Can Import 179
- Using Workgroup Manager to Import Users and Groups 179
- Using Workgroup Manager to Export Users and Groups 181
- Using dsimportexport to Import Users and Groups 181
- Using dsimportexport to Export Users and Groups 184
- Using XML Files Created With Mac OS X Server 10.1 or Earlier 186
- Using XML Files Created With AppleShare IP 6.3 186
- Using Character-Delimited Files 187
- Understanding Password Validation 189
- Storing Passwords in User Accounts 193
- Using a Password Server 195
- Making a Password Server More Secure 197
- Monitoring a Password Server 197
- Using Kerberos 197
- Understanding Kerberos 198
- Integrating Mac OS X With a Kerberos Server 199
- Enabling Kerberos Authentication for Mail 200
- Enabling Kerberos Authentication for AFP 200
- Enabling Kerberos Authentication for FTP 200
- Enabling Kerberos Authentication for Login Window 200
- Enabling Kerberos Authentication for Telnet 201
- Solving Problems With Kerberos 201
- Using LDAP Bind Authentication 201
- Backing Up and Restoring Files 201
- Supporting Client Computers 202
- Solving Problems 202
- You Can’t Modify an Account Using Workgroup Manager 202
- A Password Server User’s Password Can’t Be Modified 203
- Users Can’t Log In or Authenticate 203
- You Can’t Assign Server Administrator Privileges 204
- Users Can’t Access Their Home Directories 204
- MacOSX User in Shared NetInfo Domain Can’t Log In 204
- Kerberos Users Can’t Authenticate 204
- 4 Sharing 205
- Privileges 205
- Network Globe Contents 207
- Setup Overview 208
- Before You Begin 209
- Setting Up Sharing 211
- Creating Share Points and Setting Privileges 211
- Configuring Apple File Protocol (AFP) Share Points 212
- Configuring Server Message Block (SMB) Share Points 212
- Configuring File Transfer Protocol (FTP) Share Points 213
- Sharing (Exporting) Items Using Network File System (NFS) 213
- Automounting Share Points 214
- Resharing NFS Mounts as AFP Share Points 215
- Managing Sharing 215
- Turning Sharing Off 216
- Removing a Share Point 216
- Browsing Server Disks 216
- Viewing Share Points 216
- Copying Privileges to Enclosed Items 217
- Viewing Share Point Settings 217
- Changing Share Point Owner and Privilege Settings 217
- Changing the Protocols for a Share Point 218
- Deleting an NFS Client from a Share Point 218
- Creating a Drop Box 218
- Supporting Client Computers 219
- Solving Problems 219
- 5 File Services 221
- 6 Client Management: Mac OS X 267
- The User Experience 268
- Before You Begin 269
- Designating Administrators 270
- Setting Up User Accounts 270
- Setting Up Group Accounts 271
- Setting Up Computer Accounts 271
- Creating a Computer Account 272
- Creating a Preset for Computer Accounts 273
- Using a Computer Accounts Preset 273
- Adding Computers to an Existing Computer Account 274
- Editing Information About a Computer 274
- Moving a Computer to a Different Computer Account 275
- Deleting Computers From a Computer List 275
- Deleting a Computer Account 276
- Searching for Computer Accounts 276
- Managing Guest Computers 277
- Working With Access Settings 278
- Managing Portable Computers 280
- How Workgroup Manager Works With System Preferences 281
- Managing Preferences 282
- About the Preferences Cache 283
- Updating the Managed Preferences Cache 283
- Updating Cached Preferences Manually 283
- How Preference Management Works 284
- Preference Management Options 284
- Managing User Preferences 285
- Managing Group Preferences 286
- Managing Computer Preferences 286
- Editing Preferences for Multiple Records 287
- Disabling Management for Specific Preferences 287
- Managing Applications Preferences 288
- Applications Items Preferences 288
- Creating a List of Approved Applications 288
- Preventing Users From Opening Applications on Local Volumes 289
- Managing Application Access to Helper Applications 289
- Applications System Preferences 290
- Managing Access to System Preferences 290
- Managing Classic Preferences 291
- Classic Startup Preferences 291
- Making Classic Start Up After a User Logs In 291
- Choosing a Classic System Folder 291
- Classic Advanced Preferences 292
- Allowing Special Actions During Restart 292
- Keeping Control Panels Secure 292
- Preventing Access to the Chooser and Network Browser 293
- Making Apple Menu Items Available in Classic 293
- Adjusting Classic Sleep Settings 294
- Managing Dock Preferences 294
- Managing Finder Preferences 296
- Finder Preferences 296
- Keeping Disks and Servers From Appearing on the User’s Desktop 296
- Controlling the Behavior of Finder Windows 297
- Making File Extensions Visible 298
- Selecting the User Environment 298
- Hiding the Alert Message When a User Empties the Trash 298
- Finder Commands Preferences 299
- Controlling User Access to an iDisk 299
- Controlling User Access to Remote Servers 299
- Controlling User Access to Folders 300
- Preventing Users From Ejecting Disks 300
- Hiding the Burn Disc Command in the Finder 301
- Removing Restart and Shut Down Commands From the Apple Menu 301
- Finder Views Preferences 302
- Adjusting the Appearance and Arrangement of Desktop Items 302
- Adjusting the Appearance of Finder Window Contents 303
- Managing Internet Preferences 304
- Managing Login Preferences 305
- Managing Media Access Preferences 308
- Managing Printing Preferences 311
- 7 Print Service 315
- 8 Web Service 337
- Before You Begin 338
- Setting Up Web Service for the First Time 341
- Managing Web Service 342
- Starting or Stopping Web Service 343
- Starting Web Service Automatically 343
- Modifying MIME Mappings 343
- Setting Up Persistent Connections for Web Service 344
- Limiting Simultaneous Connections for Web Service 344
- Setting Up Proxy Caching for Web Service 345
- Blocking Web Sites From Your Web Server Cache 345
- Enabling SSL for Web Service 346
- Setting Up the SSL Log for a Web Server 346
- Setting Up WebDAV for a Web Server 346
- Starting Tomcat 347
- Checking Web Service Status 348
- Viewing Logs of Web Service Activity 348
- Setting Up Multiple IP Addresses for a Port 348
- Managing Web Sites 349
- Setting Up the Documents Folder for Your Web Site 349
- Changing the Default Web Folder for a Site 349
- Enabling a Web Site on a Server 350
- Setting the Default Page for a Web Site 351
- Changing the Access Port for a Web Site 351
- Improving Performance of Static Web Sites 351
- Enabling Access and Error Logs for a Web Site 352
- Setting Up Directory Listing for a Web Site 352
- Connecting to Your Web Site 353
- Enabling WebDAV 353
- Setting Access for WebDAV-Enabled Sites 354
- Enabling a Common Gateway Interface (CGI) script 354
- Enabling Server Side Includes (SSI) 355
- Monitoring Web Sites 356
- Setting Server Responses to MIME Types 356
- Enabling SSL 357
- Enabling PHP 357
- WebMail 358
- Setting Up Secure Sockets Layer (SSL) Service 361
- Solving Problems 364
- Installing and Viewing Web Modules 365
- Where to Find More Information 367
- 9 Mail Service 369
- Mail Service Protocols 370
- How Mail Service Uses SSL 372
- How Mail Service Uses DNS 372
- Where Mail Is Stored 373
- How User Account Settings Affect Mail Service 373
- What Mail Service Can Do About Junk Mail 373
- What Mail Service Doesn’t Do 376
- Mail Service Configuration in the Local Directory 376
- Overview of Mail Service Tools 376
- Setup Overview 377
- Overview of Ongoing Mail Service Management 379
- Before You Begin 379
- Working With General Settings for Mail Service 380
- Working With Settings for Incoming Mail 382
- Working With Settings for Incoming POP Mail 384
- Working With Settings for Incoming IMAP Mail 385
- Working With Settings for Outgoing Mail 387
- Working With Settings for SMTP Mail 389
- Working With the Mail Database 393
- Working With Network Settings for Mail Service 396
- Limiting Junk Mail 398
- Working With Undeliverable Mail 402
- Monitoring Mail Status 403
- Supporting Mail Users 405
- Performance Tuning 407
- Backing Up and Restoring Mail Files 408
- Where to Find More Information 408
- 10 Client Management: Mac OS 9 and OS 8 411
- The User Experience 412
- Before You Begin 414
- Inside Macintosh Manager 418
- Macintosh Manager Security 418
- About the Macintosh Manager Share Point 419
- The Multi-User Items Folder 419
- How Macintosh Manager Works With Directory Services 420
- How Macintosh Manager Works With Home Directories 422
- How Macintosh Manager Works With Preferences 422
- Using NetBoot With Macintosh Manager 423
- Setting Up Mac OS 9 or Mac OS 8 Managed Clients 424
- Logging In to Macintosh Manager as an Administrator 425
- Importing User Accounts 426
- Applying User Settings With a Template 426
- Importing All Users 427
- Importing One or More Users 427
- Collecting User Information in a Text File 428
- Importing a List of Users From a Text File 428
- Finding Specific Imported Users 429
- Providing Quick Access to Unimported Users 429
- Providing Access to Unimported Mac OS X Server Users 430
- Setting Up a Guest User Account 431
- Designating Administrators 431
- Working With User Settings 433
- Setting Up Workgroups 436
- Using Items Settings 438
- Using Privileges Settings 440
- Protecting the System Folder and Applications Folder 440
- Protecting the User’s Desktop 440
- Preventing Applications From Altering Files 441
- Preventing Access to FireWire Disks 441
- Allowing Users to Play Audio CDs 441
- Allowing Users to Take Screen Shots 442
- Allowing Users to Open Applications From a Disk 442
- Setting Access Privileges for Removable Media 442
- Setting Access Privileges for Menu Items 443
- Sharing Information in Macintosh Manager 443
- Using Volumes Settings 445
- Using Printers Settings 447
- Making Printers Available to Workgroups 447
- Setting a Default Printer 447
- Restricting Access to Printers 448
- Setting Print Quotas 448
- Allowing Users to Exceed Print Quotas 448
- Setting Up a System Access Printer 449
- Using Options Settings 449
- Choosing a Location for Storing Group Documents 450
- Making Items Open at Startup 450
- Checking for Email When Users Log In 451
- Creating Login Messages for Workgroups 451
- Setting Up Computer Lists 451
- Using Workgroup Settings for Computers 454
- Using Control Settings 454
- Disconnecting Computers Automatically to Minimize Network Traffic 454
- Setting the Computer Clock Using the Server Clock 455
- Using a Specific Hard Disk Name 455
- Creating Email Addresses for Managed Users 455
- Using Security Settings for Computers 456
- Keeping Computers Secure If a User Forgets to Log Out 456
- Allowing Access to All CDs and DVDs 457
- Allowing Access to Specific CDs or DVDs 457
- Choosing Computer Security Settings for Applications 457
- Allowing Specific Applications to Be Opened by Other Applications 458
- Allowing Users to Work Offline 458
- Allowing Users to Switch Servers After Logging In 459
- Allowing Users to Force-Quit Applications 459
- Allowing Users to Disable Extensions 459
- Using Computer Login Settings 460
- Managing Portable Computers 461
- Using Global Security Settings 462
- Using Macintosh Manager Reports 463
- Setting the Number of Items in a Report 463
- Keeping the Administration Program Secure 463
- Verifying Login Information Using Kerberos 464
- Preventing Users From Changing Their Passwords 464
- Allowing Administrators to Access User Accounts 464
- Copying Preferences for Mac OS 8 Computers 464
- Using Global CD-ROM Settings 465
- Managing Preferences 466
- Solving Problems 470
- I’ve Forgotten My Administrator Password 470
- Administrators Can’t Get to the Finder After Logging In 470
- Generic Icons Appear in the Items Pane 470
- Selecting “Local User” in the Multiple Users Control Panel Doesn’t Work 471
- Some Printers Don’t Appear in the Available Printers List 471
- Users Can’t Log In to the Macintosh Manager Server 471
- Users Can’t Log In as “Guest” on Japanese-Language Computers 471
- A Client Computer Can’t Connect to the Server 471
- The Server Doesn’t Appear in the AppleTalk List 472
- The User’s Computer Freezes 472
- Users Can’t Access Their Home Directories 472
- Users Can’t Access Shared Files 472
- Shared Workgroup Documents Don’t Appear in a Panels Environment 472
- Applications Don’t Work Properly or Don’t Open 472
- Users Can’t Drag and Drop Between Applications 473
- Users Can’t Open Files From a Web Page 473
- Sometimes the Right Application Doesn’t Open for Users 473
- Where to Find More Information 473
- 11 DHCP Service 475
- Before You Set Up DHCP Service 475
- Setting Up DHCP Service for the First Time 477
- Managing DHCP Service 478
- Starting and Stopping DHCP Service 478
- Setting the Default DNS Server for DHCP Clients 479
- Setting the LDAP Server for DHCP Clients 479
- Setting Up Logs for DHCP Service 480
- Deleting Subnets From DHCP Service 480
- Changing Lease Times for Subnet Address Ranges 480
- Monitoring DHCP Client Computers 481
- Creating Subnets in DHCP Service 481
- Changing Subnet Settings in DHCP Service 481
- Setting DNS Options for a Subnet 482
- Setting NetInfo Options for a Subnet 482
- Disabling Subnets Temporarily 483
- Viewing DHCP and NetBoot Client Lists 483
- Viewing DHCP Log Entries 483
- Solving Problems 484
- Where to Find More Information 484
- 12 NetBoot 485
- Prerequisites 486
- Capacity Planning 488
- NetBoot Implementation 489
- Security 493
- NetBoot and AirPort 493
- Setup Overview 493
- Setting Up NetBoot on a Mac OS X Server 496
- Creating a Mac OS X Disk Image 496
- Installing Classic (Mac OS 9) on a Mac OS X Disk Image 497
- Installing the Mac OS 9 Disk Image 497
- Modifying the Mac OS 9 Disk Image 498
- Specifying the Default NetBoot Disk Image 500
- Setting Up Multiple Disk Images 500
- Configuring NetBoot on Your Server 501
- Starting NetBoot on Your Server 501
- Enabling NetBoot Disk Images 502
- Managing NetBoot 502
- Load Balancing 504
- Supporting Client Computers 505
- Solving Problems 507
- 13 Network Install 509
- 14 DNS Service 515
- 15 Firewall Service 525
- Before You Set Up Firewall Service 527
- Setting Up Firewall Service for the First Time 530
- Managing Firewall Service 531
- Starting and Stopping Firewall Service 531
- Setting Firewall Service to Start Automatically 531
- Editing IP Filters 532
- Creating an IP Filter 532
- Searching for IP Filters 533
- Viewing the Firewall Log 533
- Configuring Firewall Service 533
- Setting Up Logs for Firewall Service 534
- Viewing Denied Packets 535
- Filtering UDP Ports in Firewall Service 535
- Blocking Multicast Services in Firewall Service 536
- Allowing NetInfo Access to Certain IP Addresses 536
- Changing the Any Port (Default) Filter 537
- Preventing Denial-of-Service Attacks 537
- Creating IP Filter Rules Using ipfw 538
- Port Reference 540
- Solving Problems 543
- Where to Find More Information 543
- 16 SLP DA Service 545
- SLP DA Considerations 545
- Before You Begin 545
- Managing Service Location Protocol (SLP) Directory Agent (DA) Service 547
- Starting and Stopping SLP DA Service 547
- Viewing Scopes and Registered Services in SLP 547
- Creating New Scopes in SLP DA Service 548
- Registering a Service With SLP DA 548
- Deregistering Services in SLP DA Service 549
- Setting Up Logs for SLP DA Service 549
- Logging Debugging Messages in SLP DA Service 549
- Viewing SLP DA Log Entries 549
- Using the Attributes List 550
- Where to Find More Information 550
- 17 Tools for Advanced Users 551
- Appendix A Open Directory Data Requirements 573
- Glossary 581
- Index 591
- How to Use This Guide
- Administering Your Server
- Directory Services
- Storage for Data Needed by Mac OS X
- A Historical Perspective
- Uses of Directory Data
- Inside a Directory Domain
- Discovery of Network Services
- Directory Domain Protocols
- Local and Shared Directory Domains
- Directory Domain Hierarchies
- Search Policies for Directory Domain Hierarchies
- Directory Domain Planning
- Open Directory Password Server
- Overview of Directory Services Tools
- Setup Overview
- Before You Begin
- Setting Up an Open Directory Domain and Password Server
- Deleting a Shared Open Directory Domain
- Configuring Open Directory Service Protocols
- Setting Up Search Policies
- Changing Basic LDAPv3 Settings
- Configuring Access to Existing LDAPv3 Servers
- Using an Active Directory Server
- Accessing an Existing LDAPv2 Directory
- Using NetInfo Domains
- Using Berkeley Software Distribution (BSD) Configuration Files
- Configuring Directory Access on a Remote Computer
- Monitoring Directory Services
- Backing Up and Restoring Directory Services Files
- Users and Groups
- How User Accounts Are Used
- How Group Accounts Are Used
- Kinds of Users and Groups
- Setup Overview
- Step 1: Before you begin, do some planning
- Step 2: Set up directory domains in which user and group accounts will reside
- Step 3: Configure server search policies so servers can find user and group accounts
- Step 4: Set up share points for home directories
- Step 5: Set up share points for group directories
- Step 6: Create users
- Step 7: Create groups
- Step 8: Set Up Client Computers
- Step 9: Review user and group account information as needed
- Step 10: Update users and groups as needed
- Step 11: Perform ongoing user and group account maintenance
- Before You Begin
- Administering User Accounts
- Working With Basic Settings for Users
- Working With Advanced Settings for Users
- Working With Group Settings for Users
- Working With Home Settings for Users
- Working With Mail Settings for Users
- Working With Print Settings for Users
- Working With Managed Users
- Defining a Guest User
- Deleting a User Account
- Disabling a User Account
- Administering Home Directories
- Distributing Home Directories Across Multiple Servers
- Setting Up Home Directories for Users Defined in Existing Directory Servers
- Choosing a Protocol for Home Directories
- Setting Up AFP Home Directory Share Points
- Setting Up NFS Home Directory Share Points
- Creating Home Directory Folders
- Defining a User’s Home Directory
- Defining No Home Directory
- Defining a Home Directory for Local Users
- Defining a Network Home Directory
- Defining an Advanced Home Directory
- Setting Disk Quotas
- Defining Default Home Directories for New Users
- Using Import Files to Create AFP Home Directories
- Moving Home Directories
- Deleting Home Directories
- Administering Group Accounts
- Working With Member Settings for Groups
- Working With Volume Settings for Groups
- Working With Group and Computer Preferences
- Deleting a Group Account
- Finding User and Group Accounts
- Shortcuts for Working With Users and Groups
- Editing Multiple Users Simultaneously
- Using Presets
- Importing and Exporting User and Group Information
- Understanding What You Can Import
- Using Workgroup Manager to Import Users and Groups
- Using Workgroup Manager to Export Users and Groups
- Using dsimportexport to Import Users and Groups
- Using dsimportexport to Export Users and Groups
- Using XML Files Created With Mac OS X Server 10.1 or Earlier
- Using XML Files Created With AppleShare IP 6.3
- Using Character-Delimited Files
- Understanding Password Validation
- Storing Passwords in User Accounts
- Using a Password Server
- Making a Password Server More Secure
- Monitoring a Password Server
- Using Kerberos
- Understanding Kerberos
- Integrating Mac OS X With a Kerberos Server
- Enabling Kerberos Authentication for Mail
- Enabling Kerberos Authentication for AFP
- Enabling Kerberos Authentication for FTP
- Enabling Kerberos Authentication for Login Window
- Enabling Kerberos Authentication for Telnet
- Solving Problems With Kerberos
- Using LDAP Bind Authentication
- Backing Up and Restoring Files
- Supporting Client Computers
- Solving Problems
- You Can’t Modify an Account Using Workgroup Manager
- A Password Server User’s Password Can’t Be Modified
- Users Can’t Log In or Authenticate
- You Can’t Assign Server Administrator Privileges
- Users Can’t Access Their Home Directories
- MacOSX User in Shared NetInfo Domain Can’t Log In
- Kerberos Users Can’t Authenticate
- Sharing
- Privileges
- Network Globe Contents
- Setup Overview
- Before You Begin
- Setting Up Sharing
- Creating Share Points and Setting Privileges
- Configuring Apple File Protocol (AFP) Share Points
- Configuring Server Message Block (SMB) Share Points
- Configuring File Transfer Protocol (FTP) Share Points
- Sharing (Exporting) Items Using Network File System (NFS)
- Automounting Share Points
- Resharing NFS Mounts as AFP Share Points
- Managing Sharing
- Supporting Client Computers
- Solving Problems
- File Services
- Before You Begin
- Setup Overview
- Apple File Service
- Windows Services
- File Transfer Protocol (FTP) Service
- Secure FTP Environment
- Before You Set Up FTP Service
- Setup Overview
- Step 1: Before You Begin
- Step 2: Configure FTP General settings
- Step 3: Configure FTP Access settings
- Step 4: Configure FTP Logging settings
- Step 5: Configure FTP Advanced settings
- Step 6: Create an “uploads” folder for FTP users (optional)
- Step 7: Create share points and share them using FTP
- Step 8: Start FTP service
- Setting Up File Transfer Protocol (FTP) Service
- Managing File Transfer Protocol (FTP) Service
- Network File System (NFS) Service
- Supporting Client Computers
- Solving Problems With File Services
- Where to Find More Information About File Services
- Client Management: Mac OS X
- The User Experience
- Before You Begin
- Designating Administrators
- Setting Up User Accounts
- Setting Up Group Accounts
- Setting Up Computer Accounts
- Creating a Computer Account
- Creating a Preset for Computer Accounts
- Using a Computer Accounts Preset
- Adding Computers to an Existing Computer Account
- Editing Information About a Computer
- Moving a Computer to a Different Computer Account
- Deleting Computers From a Computer List
- Deleting a Computer Account
- Searching for Computer Accounts
- Managing Guest Computers
- Working With Access Settings
- Managing Portable Computers
- How Workgroup Manager Works With System Preferences
- Managing Preferences
- About the Preferences Cache
- Updating the Managed Preferences Cache
- Updating Cached Preferences Manually
- How Preference Management Works
- Preference Management Options
- Managing User Preferences
- Managing Group Preferences
- Managing Computer Preferences
- Editing Preferences for Multiple Records
- Disabling Management for Specific Preferences
- Managing Applications Preferences
- Applications Items Preferences
- Creating a List of Approved Applications
- Preventing Users From Opening Applications on Local Volumes
- Managing Application Access to Helper Applications
- Applications System Preferences
- Managing Access to System Preferences
- Managing Classic Preferences
- Classic Startup Preferences
- Making Classic Start Up After a User Logs In
- Choosing a Classic System Folder
- Classic Advanced Preferences
- Allowing Special Actions During Restart
- Keeping Control Panels Secure
- Preventing Access to the Chooser and Network Browser
- Making Apple Menu Items Available in Classic
- Adjusting Classic Sleep Settings
- Managing Dock Preferences
- Managing Finder Preferences
- Finder Preferences
- Keeping Disks and Servers From Appearing on the User’s Desktop
- Controlling the Behavior of Finder Windows
- Making File Extensions Visible
- Selecting the User Environment
- Hiding the Alert Message When a User Empties the Trash
- Finder Commands Preferences
- Controlling User Access to an iDisk
- Controlling User Access to Remote Servers
- Controlling User Access to Folders
- Preventing Users From Ejecting Disks
- Hiding the Burn Disc Command in the Finder
- Removing Restart and Shut Down Commands From the Apple Menu
- Finder Views Preferences
- Adjusting the Appearance and Arrangement of Desktop Items
- Adjusting the Appearance of Finder Window Contents
- Managing Internet Preferences
- Managing Login Preferences
- Managing Media Access Preferences
- Managing Printing Preferences
- Print Service
- Web Service
- Before You Begin
- Setting Up Web Service for the First Time
- Managing Web Service
- Starting or Stopping Web Service
- Starting Web Service Automatically
- Modifying MIME Mappings
- Setting Up Persistent Connections for Web Service
- Limiting Simultaneous Connections for Web Service
- Setting Up Proxy Caching for Web Service
- Blocking Web Sites From Your Web Server Cache
- Enabling SSL for Web Service
- Setting Up the SSL Log for a Web Server
- Setting Up WebDAV for a Web Server
- Starting Tomcat
- Checking Web Service Status
- Viewing Logs of Web Service Activity
- Setting Up Multiple IP Addresses for a Port
- Managing Web Sites
- Setting Up the Documents Folder for Your Web Site
- Changing the Default Web Folder for a Site
- Enabling a Web Site on a Server
- Setting the Default Page for a Web Site
- Changing the Access Port for a Web Site
- Improving Performance of Static Web Sites
- Enabling Access and Error Logs for a Web Site
- Setting Up Directory Listing for a Web Site
- Connecting to Your Web Site
- Enabling WebDAV
- Setting Access for WebDAV-Enabled Sites
- Enabling a Common Gateway Interface (CGI) script
- Enabling Server Side Includes (SSI)
- Monitoring Web Sites
- Setting Server Responses to MIME Types
- Enabling SSL
- Enabling PHP
- WebMail
- Setting Up Secure Sockets Layer (SSL) Service
- Solving Problems
- Installing and Viewing Web Modules
- Where to Find More Information
- Mail Service
- Mail Service Protocols
- How Mail Service Uses SSL
- How Mail Service Uses DNS
- Where Mail Is Stored
- How User Account Settings Affect Mail Service
- What Mail Service Can Do About Junk Mail
- What Mail Service Doesn’t Do
- Mail Service Configuration in the Local Directory
- Overview of Mail Service Tools
- Setup Overview
- Step 1: Before you begin, do some planning
- Step 2: Set up MX records
- Step 3: Start mail service
- Step 4: Configure incoming mail service
- Step 5: Configure outgoing mail service
- Step 6: Configure additional settings for mail service
- Step 7: Set up accounts for mail users
- Step 8: Create a postmaster account
- Step 9: Set up each user’s mail client software
- Overview of Ongoing Mail Service Management
- Before You Begin
- Working With General Settings for Mail Service
- Working With Settings for Incoming Mail
- Working With Settings for Incoming POP Mail
- Working With Settings for Incoming IMAP Mail
- Working With Settings for Outgoing Mail
- Working With Settings for SMTP Mail
- Working With the Mail Database
- Working With Network Settings for Mail Service
- Limiting Junk Mail
- Working With Undeliverable Mail
- Monitoring Mail Status
- Supporting Mail Users
- Performance Tuning
- Backing Up and Restoring Mail Files
- Where to Find More Information
- Client Management: Mac OS 9 and OS 8
- The User Experience
- Before You Begin
- Step 1: Make sure computers meet minimum requirements
- Step 2: Install Macintosh Manager administrator software
- Step 3: Set up client computers
- Using Update Packages
- Choosing a Language for Macintosh Manager Servers and Clients
- Changing the Apple File Service Language Script
- Step 4: Make sure you’ve set up users and their home directories
- Inside Macintosh Manager
- Setting Up Mac OS 9 or Mac OS 8 Managed Clients
- Step 1: Make sure Macintosh Manager services are available
- Step 2: Log in to Macintosh Manager Admin as an administrator
- Step 3: Import user accounts
- Step 4: Designate a Macintosh Manager administrator
- Step 5: Designate workgroup administrators
- Step 6: Create workgroups for users
- Step 7: Create computer lists
- Step 8: Select global settings and set up managed preferences folders
- Logging In to Macintosh Manager as an Administrator
- Importing User Accounts
- Applying User Settings With a Template
- Importing All Users
- Importing One or More Users
- Collecting User Information in a Text File
- Importing a List of Users From a Text File
- Finding Specific Imported Users
- Providing Quick Access to Unimported Users
- Providing Access to Unimported Mac OS X Server Users
- Setting Up a Guest User Account
- Designating Administrators
- Working With User Settings
- Setting Up Workgroups
- Using Items Settings
- Using Privileges Settings
- Protecting the System Folder and Applications Folder
- Protecting the User’s Desktop
- Preventing Applications From Altering Files
- Preventing Access to FireWire Disks
- Allowing Users to Play Audio CDs
- Allowing Users to Take Screen Shots
- Allowing Users to Open Applications From a Disk
- Setting Access Privileges for Removable Media
- Setting Access Privileges for Menu Items
- Sharing Information in Macintosh Manager
- Using Volumes Settings
- Using Printers Settings
- Making Printers Available to Workgroups
- Setting a Default Printer
- Restricting Access to Printers
- Setting Print Quotas
- Allowing Users to Exceed Print Quotas
- Setting Up a System Access Printer
- Using Options Settings
- Choosing a Location for Storing Group Documents
- Making Items Open at Startup
- Checking for Email When Users Log In
- Creating Login Messages for Workgroups
- Setting Up Computer Lists
- Using Workgroup Settings for Computers
- Using Control Settings
- Disconnecting Computers Automatically to Minimize Network Traffic
- Setting the Computer Clock Using the Server Clock
- Using a Specific Hard Disk Name
- Creating Email Addresses for Managed Users
- Using Security Settings for Computers
- Keeping Computers Secure If a User Forgets to Log Out
- Allowing Access to All CDs and DVDs
- Allowing Access to Specific CDs or DVDs
- Choosing Computer Security Settings for Applications
- Allowing Specific Applications to Be Opened by Other Applications
- Allowing Users to Work Offline
- Allowing Users to Switch Servers After Logging In
- Allowing Users to Force-Quit Applications
- Allowing Users to Disable Extensions
- Using Computer Login Settings
- Managing Portable Computers
- Using Global Security Settings
- Using Global CD-ROM Settings
- Managing Preferences
- Solving Problems
- I’ve Forgotten My Administrator Password
- Administrators Can’t Get to the Finder After Logging In
- Generic Icons Appear in the Items Pane
- Selecting “Local User” in the Multiple Users Control Panel Doesn’t Work
- Some Printers Don’t Appear in the Available Printers List
- Users Can’t Log In to the Macintosh Manager Server
- Users Can’t Log In as “Guest” on Japanese-Language Computers
- A Client Computer Can’t Connect to the Server
- The Server Doesn’t Appear in the AppleTalk List
- The User’s Computer Freezes
- Users Can’t Access Their Home Directories
- Users Can’t Access Shared Files
- Shared Workgroup Documents Don’t Appear in a Panels Environment
- Applications Don’t Work Properly or Don’t Open
- Users Can’t Drag and Drop Between Applications
- Users Can’t Open Files From a Web Page
- Sometimes the Right Application Doesn’t Open for Users
- Where to Find More Information
- DHCP Service
- Before You Set Up DHCP Service
- Setting Up DHCP Service for the First Time
- Managing DHCP Service
- Starting and Stopping DHCP Service
- Setting the Default DNS Server for DHCP Clients
- Setting the LDAP Server for DHCP Clients
- Setting Up Logs for DHCP Service
- Deleting Subnets From DHCP Service
- Changing Lease Times for Subnet Address Ranges
- Monitoring DHCP Client Computers
- Creating Subnets in DHCP Service
- Changing Subnet Settings in DHCP Service
- Setting DNS Options for a Subnet
- Setting NetInfo Options for a Subnet
- Disabling Subnets Temporarily
- Viewing DHCP and NetBoot Client Lists
- Viewing DHCP Log Entries
- Solving Problems
- Where to Find More Information
- NetBoot
- Prerequisites
- Capacity Planning
- NetBoot Implementation
- Security
- NetBoot and AirPort
- Setup Overview
- Step 1: Evaluate and update your network, servers, and client computers as necessary
- Step 2: Create disk images for client computers
- Step 3: Set up DHCP
- Step 4: Configure and turn on the NetBoot service
- Step 5: Set up NetBoot filtering (optional)
- Step 6: Test your NetBoot setup
- Step 7: Set up all client computers to use NetBoot
- Setting Up NetBoot on a Mac OS X Server
- Creating a Mac OS X Disk Image
- Installing Classic (Mac OS 9) on a Mac OS X Disk Image
- Installing the Mac OS 9 Disk Image
- Modifying the Mac OS 9 Disk Image
- Specifying the Default NetBoot Disk Image
- Setting Up Multiple Disk Images
- Configuring NetBoot on Your Server
- Starting NetBoot on Your Server
- Enabling NetBoot Disk Images
- Managing NetBoot
- Load Balancing
- Supporting Client Computers
- Solving Problems
- Network Install
- DNS Service
- Firewall Service
- Before You Set Up Firewall Service
- Setting Up Firewall Service for the First Time
- Managing Firewall Service
- Starting and Stopping Firewall Service
- Setting Firewall Service to Start Automatically
- Editing IP Filters
- Creating an IP Filter
- Searching for IP Filters
- Viewing the Firewall Log
- Configuring Firewall Service
- Setting Up Logs for Firewall Service
- Viewing Denied Packets
- Filtering UDP Ports in Firewall Service
- Blocking Multicast Services in Firewall Service
- Allowing NetInfo Access to Certain IP Addresses
- Changing the Any Port (Default) Filter
- Preventing Denial-of-Service Attacks
- Creating IP Filter Rules Using ipfw
- Port Reference
- Solving Problems
- Where to Find More Information
- SLP DA Service
- SLP DA Considerations
- Before You Begin
- Managing Service Location Protocol (SLP) Directory Agent (DA) Service
- Starting and Stopping SLP DA Service
- Viewing Scopes and Registered Services in SLP
- Creating New Scopes in SLP DA Service
- Registering a Service With SLP DA
- Deregistering Services in SLP DA Service
- Setting Up Logs for SLP DA Service
- Logging Debugging Messages in SLP DA Service
- Viewing SLP DA Log Entries
- Using the Attributes List
- Where to Find More Information
- Tools for Advanced Users
- Open Directory Data Requirements
- Glossary
- Index
- Contents