Apple Mac OS X Server (Administrator’s Guide) - Manual (Page 202)

202 Chapter 3
m To back up a Password Server, back up these two files: /var/db/authserver/
authservermain and /var/db/authserver/authserverfree. Make sure that your Password
Server backup files are as carefully secured as the computer hosting your Password Server.
m See Chapter 2, “Directory Services,” for information on backing up directory domains.
If you restore the Password Server, make sure you also restore the corresponding directory
domains at the same time.
Backing Up Root and Administrator User Accounts
System files are owned by root or system administrator user IDs that exist at the time they
are created. Should you need to restore system files, the same IDs should exist on the server
so that the original permissions are preserved.
To ensure that you can recreate these user IDs, periodically export the server’s user and
group information to a file as “Importing and Exporting User and Group Information” on
page 178 describes.
Supporting Client Computers
Validating Windows User Passwords
Using the Password Server is recommended for validating passwords of Windows users
supported by your server.
Windows users supported by Mac OS X Server 10.1 and earlier were optionally authenticated
using Authentication Manager, which offered encrypted password support. If you export
users such as these and import them, Basic password validation is assumed and the
Authentication Manager information is lost. You need to reset the passwords for such users
before they can be used with certain network protocols.
Setting Up Search Policies on Mac OS X Client Computers
Mac OS X client computer search policies must be set up so that accounts and shared
resources (such as network file servers and printers) are visible from the Mac OS X computer.
See Chapter 2, “Directory Services,” for client configuration options and instructions.
Solving Problems
Follow the suggestions in this section when problems with user and group account
administration arise.
You Can’t Modify an Account Using Workgroup Manager
Before you can modify an account using Workgroup Manager: