Open Directory, Using Apple Directories | Apple 10.3 manual

30

Open Directory

Open Directory is Mac OS X Server’s directory services framework.

Directory services are the means by which a server and its clients (users and services) locate and retrieve information needed for authentication, network resource discovery, and other crucial system activities. User and group information is needed to authenticate users when they log in and to authorize their access to services and files. Information about network resources is used to make printers and other devices visible for browsing.

Directory services retrieve this information from directories—repositories of information about users and computing resources.

Open Directory lets your server retrieve information from:

•Directories on Mac OS X Server computers

•Directories on non-Apple servers

•Configuration files on Mac OS X Server or other servers

Open Directory also supports several protocols for discovering network resources:

•Rendezvous

•Server Message Block (SMB)

•AppleTalk

•Service Location Protocol (SLP)

The Open Directory administration guide provides complete details about how to set up and use Open Directory. Some highlights of the many features that Open Directory offers follow.

Using Apple Directories

Mac OS X Server can host LDAP directories and legacy NetInfo domains:

•NetInfo is the legacy Mac OS X directory system. Every Mac OS X computer has a local NetInfo directory, which stores information visible only to the computer on which it resides.

While version 10.3 of Mac OS X Server can be configured to support existing NetInfo directories, Open Directory LDAP, based on OpenLDAP, is the primary way to store directory information that you want to share with other computers.

•Open Directory LDAP directories are LDAPv3 directories that host shared directory data—data you want to be used by other computers. Open Directory LDAP directories are easy to manage, can be replicated for performance and backup, and support a much higher volume of information than NetInfo directories.

Apple directories offer you read-write control over directory data.

Chapter 2 Inside Mac OS X Server

Image 30

Apple 10.3 manual Open Directory, Using Apple Directories

Contents

Mac OS X Server Getting Started Apple Computer, Inc Apple Computer, Inc. All rights reserved Contents Computers You Can Use to Administer a Server Server AdministrationUsing the Administration Tools Setting Up an Administrator Computer Local Installation From the Server Install Discs Installation and Setup OverviewInstalling Server Software Remote Installation From the Server Install Discs Appendix a Appendix B Glossary Index Page What’s New in Version Superior Performance and Scalability Improved Setup, Management, and Monitoring Enhanced Network and Directory Services Improved Windows Integration What’s Included in This Guide New Workgroup and Desktop Management FeaturesPart II Installation and Initial Setup Part I Introduction to Mac OS X Server Getting Additional Information This guide Tells you how to Preface About This Guide Page Part I Introduction to Mac OS X Server Page 1Mac OS X Server in Action Mac OS X Server addresses the needs of many environments Enterprise Organizations Workgroup servers Higher-Education Facilities Labs and Classrooms Directory server Small and Medium Businesses VPN Computational Clustering Applications Creative Businesses Web Service Providers Mac OS X Server in Action Core System Services 2Inside Mac OS X Server Using Apple Directories Open Directory Using Other Directories AuthenticationSearch Policies Single Signon Discovery of Network ServicesUser Management User Accounts Macintosh User Management Group AccountsHome Directories Preference Management Windows User Management System Image ServicesNetBoot Mobile Accounts File Services Network Install Apple File Service Windows ServicesSharing Network File System NFS Service File Transfer Protocol FTP Print Service Web Service Mail Service Network Services Dhcp Firewall NAT Media Streaming and Broadcasting IP Failover Application Server Support Apache Tomcat Integrating Into Existing Environments JBossWebObjects Server Administration High AvailabilityPage 3Server Administration Using the Administration Tools Computers You Can Use to Administer a Server Setting Up an Administrator Computer Using a Non-Mac OS X Computer for Administration Installer Directory AccessServer Assistant Opening and Authenticating in Workgroup Manager Workgroup Manager Using Workgroup Manager Server Administration Server Administration Server Admin Opening and Authenticating in Server AdminUsing Server Admin Server Administration Server Administration System Image Management Server Monitor Media Streaming Management Apple Remote Desktop Command-Line Tools Macintosh ManagerWorking With Version 10.2 Servers From Version 10.3 Servers Part II Installation and Initial Setup Page 4Installation and Setup Overview Planning Installing Server Software Local Installation From the Server Install Discs Remote Installation From the Server Install Discs Automating Server Installation With a Disk Image Initial Server Setup Setting Up Servers Interactively Welcome Automating Server Setup Using Setup Data Stored in a File Using Setup Data Stored in a Directory Then plug the iPod into the next server Using Encryption Setting Up Services Keeping Current Set Up a Planning Team 5Before You Begin Identify the Servers You’ll Need to Set Up Determine Services to Host on Each Server Define a Migration Strategy Define an Integration Strategy Define Physical Infrastructure Requirements Define Server Setup Infrastructure Requirements Determine the Installation and Setup Strategy to Use Make Sure Required Server Hardware Is AvailableCollect and Organize Information 6Installing Server Software Information You Need Upgrading From Version 10.1 or Preparing Disks for Installing Mac OS X Server Identifying Remote Servers When Installing Mac OS X Server Using Installer to Install Locally From the Install DiscsTo install server software locally To install to a remote server using the install discs Installing Server Software Automating Server Software Installation With a Disk Image To install server software on your computerTo use installer to install server software Volumes/Mount Volumes/Mount1 Volumes/Mount02 Ssh root@ip address Installing Optional Server Software 7Initial Server Setup Saving Setup Data How a Server Searches for Saved Setup DataUsing Setup Data Saved in a File Initial Server Setup Using Setup Data Saved in a Directory Keeping Backup Copies of Saved Setup Data Specifying Initial Open Directory Usage Not Changing Directory Usage When Upgrading Setting Up a Server as a Standalone Server Setting Up a Server to Host an Open Directory Master Setting Up a Server to Connect to a Directory System Using Interactive Server Setup Setting Up a Local Server InteractivelyTo set up a local server interactively Postponing Local Server Setups Following Installation Setting Up a Remote Server InteractivelyTo set up a remote server interactively Setting Up Multiple Remote Servers Interactively in a Batch To set up multiple remote servers interactively in a batch Initial Server Setup Using Automatic Server Setup Setting Up Servers Automatically Using Data Saved in a File To save and apply setup data in a file 102 To save and apply setup data in a directory record 104 105 Determining the Status of Setups Setting Up Open Directory To set up a user account Setting Up User ManagementSetting Up File Services To set up file sharing To set up a shared printer queue Setting Up Print ServiceSetting Up Web Service To turn on web service if it’s not running Setting Up System Image Services Setting Up Mail ServiceSetting Up Network Services Setting Up Media Streaming and Broadcasting Setting Up an Application Server To turn on JBoss if it’s not running Mac OS X Server Worksheet Appendix Disk format Computer name 114 Time zone Network interface data for this server is in the table below Appendix a Mac OS X Server Worksheet 118 BSetup Example Mac OS X Server in a Small Business How to Set Up the Server Set up the networkSet up the server and the master directory 121 Set up the firewall Set up DNS service Set up Dhcp service Set up NAT service Set up VPN service Set up productivity services Create user accounts and home directories Configure client computers Glossary Glossary Directory node See directory domain 129 Long name See user name Name server See DNS Domain Name System Realm See WebDAV realm Search path See search policy 133 134 135 Page Index 138 139