beautypg.com

Apple Mac OS X Server (version 10.2.3 or later) User Manual

Page 78

background image

78

Chapter 2

5

Go to the Configure step, where you specify how other computers can access the server’s
shared Open Directory domain.

Other computers can always access the server’s shared domain via NetInfo.

Select “Enable LDAP support on this server” if you want other computers to be able to access
the server’s shared domain via LDAP as well.

6

Advance to the first Security step and select “Password and authentication information will be
obtained from another system.”

7

Go to the next Security step and enter the connection and authentication information for the
Password Server host.

For Address, enter the DNS name or IP address of the Mac OS X Server whose Password
Server server you want to use.

For User Name, enter the user name of an administrator of the Password Server. This
administrator is a domain administrator for the directory domain with which the Password
Server is associated, and the administrator’s password is validated using that Password
Server. For more information on Password Server administrators, see “Assigning
Administrator Rights for a Password Server” on page 201 of Chapter 3, “Users and Groups.”

For Password, enter the password for the user name you entered.

8

In the next Security step, Open Directory Assistant displays the short name of the user
account that will become an administrator of the Password Server.

This user account is the one you used to authenticate when you started Open Directory
Assistant. You can make additional Password Server administrators by selecting the option
“User can administer this directory domain” in the Basic pane of Workgroup Manager. For
instructions, see “Assigning Administrator Rights for a Directory Domain” on page 142 of
Chapter 3, “Users and Groups.”

9

In the onscreen Finish Up step, click Go Ahead to configure the server with the displayed
settings.

Hosting a Shared Directory Domain With No Password Server

Using the Open Directory Assistant application, you can set up a Mac OS X Server to provide
directory information to other computers while it stores and accesses authentication
information locally in user records. The Mac OS X Server provides directory services by
hosting a shared Open Directory domain. This server obtains authentication information
directly from user records, without using a Password Server.

Other computers, including Mac OS X Servers and Mac OS X clients, can access the shared
directory domain via LDAP and NetInfo. (LDAP access is optional.)

LL0395.Book Page 78 Wednesday, November 20, 2002 11:44 AM