Apple Mac OS X Server (Administrator’s Guide) - Manual (Page 92)

92 Chapter 2
Decide whether to use an Open Directory Password Server. Decide which Mac OS X
Server will host the Password Server. See “Open Directory Password Server” on page 87.
m Consider the best equipment and location for your servers.
Choose computers and locations that are reliable and accessible.
If possible, use a dedicated Mac OS X Server for directory services.
Make the server physically secure. It shouldn’t have a keyboard or monitor, especially if it
hosts a Password Server.
m Pick server administrators very carefully. Give only trusted people administrator
passwords.
Have as few administrators as possible. Don’t delegate administrator access for minor
tasks, such as changing settings in a user record.
Always remember: directory information is authoritative. It vitally affects everyone whose
computers use it.
Setting Up an Open Directory Domain and Password Server
You can use the Open Directory Assistant application to configure how a Mac OS X Server
works with directory information and a Password Server. This application can configure a
server to use a directory domain in one of the following ways:
m Use a shared directory domain hosted by another server.
m Host a shared Open Directory domain.
m Use only the server’s own local directory domain.
m Delete the server’s shared directory domain.
In addition, Open Directory Assistant can configure a server to use a Password Server in one
of the following ways:
m Use an existing Password Server.
m Host a Password Server.
m Don’t use a Password Server.
Open Directory Assistant runs automatically as part of the installation and setup process of
Mac OS X Server. At any other time, you can open Open Directory Assistant from the Finder.
To configure how your server works with directory information and a Password
Server:
1 Open the Open Directory Assistant application.
It is located in the /Applications/Utilities folder.
2 Enter the connection and authentication information for the Mac OS X Server that you want
to configure, then click Connect.