194 | Apple 10.6 guide

server 144 static 82

See also identity IPv6 addressing 22

J

journaling, file system 93 junk mail screening 139

K

Kerberos 21, 57, 58, 134 kernel panic 176, 178, 179, 180 key-based authentication 72, 73 Keychain Access Utility 66 keychain services 62, 155

L

LACP (Link Aggregation Control Protocol) 164 launchctl tool 36, 170

launchd daemon 36, 169

LDAP (Lightweight Directory Access Protocol) service 21

LDAPv3 access 58

link aggregation 163, 164, 165, 166, 167

Link Aggregation Control Protocol. See LACP load balancing 168

local computers installing on 100

local directory domain 112 login, authenticating 72, 73 logs

monitoring 173, 184, 185, 186, 187 web service 159

M

MAC (media access control) addresses 53, 90 Mac OS X

administration from 125 installation considerations 84

Mac OS X Server administration tools 38, 126 integration strategy 28 introduction 16, 17, 18 supported standards 20 system requirements 16 UNIX heritage 23

See also configuration, installation mail service 17, 21, 138, 155, 156 mailing lists 139

managed preferences, defining 153 media, streaming. See streaming media migration 25, 28

mirroring, disk 96

mobile accounts 17, 132, 135 Monitor permission level 149

MS-CHAPv2 authentication 111 multicore awareness 17 MySQL service 137, 157

N

Nagios application 187

naming conventions. See identity

NAT (Network Address Translation) 135, 157 NetBoot service 27, 47, 91, 135

NetInstall 47, 92

Network Address Translation. See NAT Network File System. See NFS network interfaces 132

network services DHCP 30, 82, 134

DNS 30, 82, 133, 134, 144 installation 82

NAT 135, 157

NTP 131, 132 planning for 30 VLAN 53

VPN 136

See also IP addresses network time protocol. See NTP networks

connection configurations 109, 164, 165 environment for installation 80 Ethernet 53, 109, 166

monitoring tools 174, 180 security 52, 53, 54, 55 See also identity

NFS (Network File System) 22 notification system

daemons 183

push notification 188, 189 Server Monitor 44 server settings 132, 158 server status 175

See also logs

NTP (network time protocol) 131, 132

O

Open Directory authentication 57 backup files 158 identity changes 134 logs 186

SACLs 75

setup 110, 112, 123 Open Directory master 82 Open Directory replica 57, 162 open source modules

Kerberos 21, 57, 58, 134 OpenLDAP 21 OpenSSL 54

PHP 158

194

Index

Image 194

Apple 10.6 manual 194

Contents

Mac OS X Server 019-1410/2009-08-15 Contents Administration Tools Enhancing Security Installation and Deployment Initial Server Setup Ongoing System Management Monitoring Your System Push Notification Server Index Contents About This Guide What’s in This Guide Using Onscreen Help To see the most recent server help topics Document Road Map Getting Started Preface About This Guide Getting Documentation Updates Getting Additional Information System Requirements for Installing Mac OS X Server Standards What’s New in Mac OS X Server ÂÂ iCal Server What’s New in Server Admin Understanding Server Configuration Methods Snmp NFS Supported Standards Radius System Overview and Supported Standards System Overview and Supported Standards Mac OS X Server’s Unix Heritage Planning Server Usage Determining Your Server Needs Determining Whether to Upgrade or Migrate Setting Up a Planning Team Identifying Servers to Set Up Determining Services to Host on Each Server Planning Server Usage Defining an Integration Strategy Defining a Migration StrategyMigrating from Windows Defining Server Setup Infrastructure Requirements Defining Physical Infrastructure Requirements Setting up basic server infrastructure Making Sure Required Server Hardware Is Available Minimizing the Need to Relocate Servers After SetupDefining Backup and Restore Policies Understanding Backup and Restore Policies Understanding Backup Types Understanding Backup Scheduling Understanding Restores Other Backup Policy Considerations Defining a Backup Verification Mechanism Command-Line Backup and Restoration Tools Understanding Time Machine as a Server Backup Tool ÂÂ Remote Access Settings ÂÂ Software Update ÂÂ Wiki ÂÂ Xgrid Server Admin Opening and Authenticating in Server Admin Server Admin Interface M N Customizing the Server Admin Environment Server Assistant Server Assistant is used for Server Preferences Workgroup Manager Workgroup Manager Interface Server Monitor Customizing the Workgroup Manager Environment For additional information, see Server Monitor Help ICal Service Utility ICal Service Utility Interface System Image Management Media Streaming Management Server Status Widget Command-Line ToolsRAID Admin Xgrid Admin Podcast Capture, Composer, and Producer Apple Remote Desktop Enhancing Security About Physical Security Network DMZ About Network SecurityFirewalls and Packet Filters VLANs MAC Filtering Transport Encryption Payload Encryption About File Encryption About File SecurityFile and Folder Permissions About Authentication and Authorization Secure Delete You have several options for authenticating users ÂÂ Secure Shell SSH Single Sign-On About Certificates, SSL, and Public Key Infrastructure Public and Private Keys Certificates About Certificate Authorities CAs About Intermediate Trust About IdentitiesAbout Self-Signed Certificates From the command line Certificate Manager in Server AdminTo configure clients to trust a certificate Enhancing Security Readying Certificates To create a self-signed certificate Creating a Self-Signed CertificateRequesting a Certificate from a Certificate Authority To request a signed certificate Creating a Certificate Authority To create a CA Enhancing Security To create a certificate for someone else Using a CA to Create a Certificate for Someone ElseImporting a Certificate Identity To import an existing OpenSSL style certificate Managing Certificates Editing a Certificate To distribute your certificate to your clients Distributing a CA Public Certificate to ClientsDeleting a Certificate To delete a certificate Replacing an Existing Certificate Using CertificatesRenewing an Expiring Certificate To renew an expiring certificate SSH and SSH Keys Key-Based SSH LoginTo do this, run the following commands in Terminal Generating a Key Pair for SSH Key-Based SSH with Scripting Sample Administration Level Security Setting Administration Level Privileges To set Sacl permissions for a service Service Level SecuritySetting Sacl Permissions Security Best Practices Password Guidelines Creating Complex Passwords Gather your information Installation OverviewConfirm you meet the requirements Start the installer Set up the environment Start up the computer from an installation disk Prepare the target disk Set Up Services Gathering the Information You Need Connecting to the Directory During Installation Setting Up Network ServicesAbout the Server Install Disc SSH During Installation Administration Tools CD Preparing an Administrator ComputerMac OS X Server Install Disc Before Starting Up About Starting Up for InstallationTo install Mac OS X Server v10.6 administration tools Starting Up from an Alternate Partition Starting Up from the Install DVDTo start up the computer with the installation disc To create an image of the Install DVD Create a restorable image of the Install DVD Restore the image to the alternate partition Prepare the disks and partitions on the target computer To restore the image to a free volume Remotely Accessing the Install DVD To access the computer with Server Assistant To access the computer with SSH To access the computer with VNCTo access the computer using Screen Sharing Identifying Remote Servers When Installing Mac OS X Server Identify the target server Starting Up from a NetBoot Environment Start up the computer from the NetBoot server Preparing Disks for Installing Mac OS X Server Create a NetInstall image from the Install DVD To create a NetInstall image from the Install DVD Choosing a File System ÂÂ Mac OS Extended Journaled, Case-Sensitive aka Hfsx About Hard Disk Partitioning To partition a disk using Disk Utility Partitioning a Disk So the command is About Creating a RAID Set To create a RAID set using Disk Utility You cannot create a RAID set from the startup disk Diskutil createRAID mirror setName format device device Installing Server Software Interactively For example Installing Locally from the Installation Disc To install server software locally Installing Remotely with Server Assistant To install on a remote server by using Server Assistant Installing Remotely with Screen Sharing and VNC Changing a Remote Computer’s Startup Disk To change a remote computer’s startup disk To use installer to install server software 105 More Interactive Methods of Installation Installing Multiple ServersMost Efficient Methods of Installation How to Keep Current Upgrading a Computer from Mac OS X to Mac OS X Server Information You Need Postponing Server Setup Following InstallationTo postpone setting up Mac OS X Server About Settings Established During Initial Server Setup Connecting to the Network During Initial Server SetupConfiguring Servers with Multiple Ethernet Ports Specifying Initial Open Directory Usage ÂÂ Create Users and Groups ÂÂ Import Users and Groups Not Changing Directory Usage When UpgradingÂÂ Configure Manually Setting Up a Server as a Standalone Server Binding a Server to Multiple Directory Servers Setting up Servers Interactively To interactively connect to an additional directory server To set up servers interactively Select the target servers from the configuration list Using Automatic Server Setup Creating and Saving Setup Data To create a setup data file Using Encryption with Setup Data Files How a Server Searches for Saved Setup Data Files Setting Up Servers Automatically Using Data Saved in a File Restart the remote server To use setup data from a file remotelyCreate the saved setup folder on the remote server To set the server serial number Handling Setup Errors To change services to administer Setting Up ServicesAdding Services to the Server View From the command-line Setting Up All Other Services Setting Up Open DirectorySetting Up User Management To set up a user account Computers You Can Use to Administer a Server Setting Up an Administrator Computer Using a Non-Mac OS X Computer for Administration Insert the Mac OS X Server Admin Tools CD Using the Administration Tools Working with Pre-v10.6 Computers from v10.6 Servers Ports Used for Administration Ports Open By Default Server Admin Basics Adding and Removing Servers in Server Admin To create a server group Grouping Servers Using Smart GroupsGrouping Servers Manually Working with Settings for a Specific Server To create a server smart group Toolbar button Shows 132 Understanding Mac OS X Server Names ÂÂ Directory Service ÂÂ Firewall ÂÂ Mobile AccessÂÂ NetBoot Directory Service and Kerberos Dhcp Firewall Mobile Access Proxy ServicesNetBoot ÂÂ MySQL Web Wiki Certificates for Web and Wiki ServicesMySQL 138 Imap and POP Certificates for Mail ServicesÂÂ Certificates for collaboration services Mailing List IChat Service Address Book ServiceICal Service Certificates for Collaboration Services To change the IP address of the Podcast Producer computer To change the DNS name of the Podcast Producer computer Push Notification Software Update ServerPrint Xgrid Changing the Server’s Computer Name and the Local Hostname Changing the Server’s DNS Name After SetupChanging the IP Address of a Server To change the DNS name To change computer name and local hostname Administering ServicesFrom the command line To add or remove a service in Server Admin Adding and Removing Services in Server AdminImporting and Exporting Service Settings To export service settings Controlling Access to Services To configure service access SACLs Using SSL for Remote Server Administration Managing Sharing Tiered Administration Permissions To assign permissions Defining Administrative PermissionsWorkgroup Manager Basics Working with Users and Groups Administering AccountsOpening and Authenticating in Workgroup Manager 152 Defining Managed Preferences Working with Directory Data To display the inspector Assistants are available for the following services Service Configuration AssistantsCritical Configuration and Data Files General IChat Server Firewall ServiceMail Service Mail-POP/IMAP Server Dovecot MySQL Service NAT Service QuickTime Streaming Server OpenDirectory ServiceNotifications Tomcat App Server Eliminating Single Points of Failure Improving Service AvailabilityWeb Service Wiki and Blog Server Using Xserve for High Availability Using UPS with Xserve Setting Up Your Server for Automatic RestartUsing Backup Power Following is the Energy Saver panel of System Preferences Providing Open Directory Replication To enable automatic restartEnsuring Proper Operational Conditions Automatic restart options are Link Aggregation About the Link Aggregation Control Protocol Lacp Link Aggregation Scenarios Computer to Switch Setting Up Link Aggregation in Mac OS X Server To create a link aggregate Monitoring Link Aggregation Status To monitor the status of a link aggregate Load Balancing Daemon Overview Using launchd for Daemon ControlÂÂ mDNSresponder local network service discovery process Viewing Running Daemons 170 Planning a Monitoring Policy Planning Monitoring Response To configure the Server Status widget Using with Server Status WidgetUsing Server Monitor Using Disk Monitoring Tools Using RAID Admin for Server MonitoringUsing Console for Server Monitoring Using Network Monitoring Tools To set a notification Using Server Status Notification in Server AdminMonitoring Server Status Overviews Using Server Admin To see a status overview for one server Using Remote Kernel Core Dumps Following shows a sample Overview pane for a single server 177 Setting Up a Core Dump Server Setting up a core dump server Restart the computer for the settings to take effect Setting Up a Core Dump ClientSetting up a core dump client Configuring Common Core Dump Options About Simple Network Management Protocol Snmp Enabling Snmp reporting Configuring snmpdTo enable Snmp Restart snmpd to take changes To enable and configure Snmp Customize data Tools to Use with Snmp About Notification and Event Monitoring DaemonsAdditional Information about Snmp There are two main notification daemons syslogd and emond Logging Syslog Open Directory Logging Directory Service Debug LoggingSyslog Configuration File To start debugging at startup AFP Logging To enable client-side loggingAdditional Monitoring Aids To run slapd in debugging mode Push Notification Server About Push Notification Server To enable Push Notification Starting and Stopping Push Notification To change the existing push notification server Changing a Service’s Push Notification ServerClick Save, then restart the service Index 192 193 194 195 196 197