Apple Mac OS X Server (version 10.2.3 or later) - Manual (Page 75)

Directory Services 75
Hosting a Shared Directory Domain With a Password Server
Using the Open Directory Assistant application, you can set up a Mac OS X Server to provide
directory information and authentication information to other systems. The Mac OS X Server
provides directory information by hosting a shared Open Directory domain. In addition, the
server provides authentication information by hosting a Password Server. Other computers,
including Mac OS X Servers and Mac OS X clients, can be set up to access the shared
directory domain via LDAP and NetInfo. (LDAP access is optional.) Other Mac OS X Servers
can also be set up to use the Password Server.
If your Mac OS X Server currently gets directory information from another server and you
change to providing directory information to other computers, user records and other
information that is stored in the other server’s shared directory domain will no longer be
available. The user records and other information will still exist in the other shared directory
domain, but your Mac OS X Server will not access it.
To configure a server to host a shared Open Directory domain with a Password
Server:
1 Open the Open Directory Assistant application.
It is located in the /Applications/Utilities folder.
2 Enter the connection and authentication information for the Mac OS X Server that you want
to configure, then click Connect.
For Address, enter the DNS name or IP address of the server that you want to configure.
For User Name, enter the user name of an administrator on the server. This user account will
become an administrator of the Password Server.
For Password, enter the password for the user name you entered.
3 Click the right arrow to get to the Location step, and then select the setting that indicates the
server is at its permanent network location.
If a server is in a temporary location, you can’t configure the server to provide directory
services to other computers.
4 Advance to the Directory Use step, and then select the option “The server will provide
directory information to other computers.”
Important If you are changing a Mac OS X Server to no longer use an existing Password
Server, first change the password validation strategy of the Password Server administrator to
basic. You should also make the same change to any ordinary users whose passwords are
validated using the Password Server. Doing so ensures that these users can continue to log in
to Mac OS X Server. For instructions, see “Resetting Passwords Before Discontinuing Use of a
Password Server” on page 203 of Chapter 3, “Users and Groups.”
LL0395.Book Page 75 Wednesday, November 20, 2002 11:44 AM