beautypg.com

Repairing a journaled volume, Setting up ssl for mail service, Generating a csr and creating a keychain – Apple Mac OS X Server (version 10.2.3 or later) User Manual

Page 614: Setting up ssl for mail service 614

background image

614

Chapter 17

To disable journaling for a volume called MyDisk, type “sudo /usr/sbin/diskutil disableJournal
/Volumes/MyDisk”.

Repairing a Journaled Volume

You can check and repair a journaled volume using fsck_hfs from the command line.

To repair a journaled disk:

1

Log in to the server with the journaling disk as an administrator.

2

Make sure the server is in a quiescent state.

3

Open the Terminal application.

4

Type the fsck_hfs command using the -f option.

For example, to force checking a journaled volume on device /dev/disk0s11, type “fsck_hfs -f
/dev/disk0s11”.

Setting Up SSL for Mail Service

Mail service requires some configuration to provide Secure Sockets Layer (SSL) connections
automatically. The basic steps are as follows:

m Generate a Certificate Signing Request (CSR) and create a keychain.

m Obtain an SSL certificate from an issuing authority.

m Import the SSL certificate into the keychain.

m Create a passphrase file.

Generating a CSR and Creating a Keychain

To begin configuring mail service for SSL connections, you generate a CSR and create a
keychain by using the command-line tool certtool. A CSR is a file that provides information
needed to issue an SSL certificate.

1

Log in to the server as root.

2

In the Terminal application, type the following two commands, pressing Return after each
one:

cd /private/var/root/Library/Keychains/

/usr/bin/certtool r csr.txt k=certkc c

This use of the certtool command begins an interactive process that generates a Certificate
Signing Request (CSR) in the file csr.txt and creates a keychain named certkc.

LL0395.Book Page 614 Wednesday, November 20, 2002 11:44 AM