Manuals / Apple / Computer Equipment / Server

Apple 10.6 manual Mac OS X Server’s Unix Heritage

Models: 10.6

1 197

Download 197 pages 50.37 Kb

Page 23

ÂÂ XMPP: Extensible Messaging and Presence Protocol (XMPP) is an open XML-based messaging protocol used for messaging and presence information. XMPP serves as the basis for Mac OS X Server’s Push Notification service, as well as iChat Server, and all publish and subscribe functions for the server.

Mac OS X Server’s UNIX Heritage

Mac OS X Server has a UNIX foundation built around the Mach microkernel and the latest advances from the Berkeley Software Distribution (BSD) open source community. This foundation provides Mac OS X Server with a stable, high-performance, 64-bit computing platform for deploying server-based applications and services.

Mac OS X Server is built on an open source operating system called Darwin, which is part of the BSD family of UNIX-like systems. BSD is a family of UNIX variants descended from Berkeley’s version of UNIX. Also, Mac OS X Server incorporates more than

100 open source projects in addition to proprietary enhancements and extended functionality created by Apple.

The BSD portion of the Mac OS X kernel is derived primarily from FreeBSD, a version of 4.4BSD that offers advanced networking, performance, security, and compatibility features.

In general, BSD variants are derived (sometimes indirectly) from 4.4BSD-Lite Release 2 from the Computer Systems Research Group (CSRG) at the University of California at Berkeley.

Although the BSD portion of Mac OS X is primarily derived from FreeBSD, some changes have been made. To find out more about the low-level changes made, see Apple’s Developer documentation for Darwin.

Chapter 1    System Overview and Supported Standards

23

Image 23

Apple 10.6 manual Mac OS X Server’s Unix Heritage

Contents

Mac OS X Server 019-1410/2009-08-15 Contents Enhancing Security Administration ToolsInstallation and Deployment Initial Server Setup Ongoing System Management Monitoring Your System Index Push Notification ServerContents What’s in This Guide About This GuideTo see the most recent server help topics Using Onscreen HelpGetting Started Document Road MapPreface About This Guide Getting Additional Information Getting Documentation UpdatesStandards System Requirements for Installing Mac OS X ServerÂÂ iCal Server What’s New in Mac OS X ServerUnderstanding Server Configuration Methods What’s New in Server AdminSnmp NFS Radius Supported StandardsSystem Overview and Supported Standards System Overview and Supported Standards Mac OS X Server’s Unix Heritage Determining Your Server Needs Planning Server UsageSetting Up a Planning Team Determining Whether to Upgrade or MigrateDetermining Services to Host on Each Server Identifying Servers to Set UpPlanning Server Usage Defining an Integration Strategy Defining a Migration StrategyMigrating from Windows Defining Physical Infrastructure Requirements Defining Server Setup Infrastructure RequirementsSetting up basic server infrastructure Making Sure Required Server Hardware Is Available Minimizing the Need to Relocate Servers After SetupDefining Backup and Restore Policies Understanding Backup and Restore Policies Understanding Backup Types Understanding Restores Understanding Backup SchedulingDefining a Backup Verification Mechanism Other Backup Policy ConsiderationsUnderstanding Time Machine as a Server Backup Tool Command-Line Backup and Restoration ToolsÂÂ Wiki ÂÂ Xgrid ÂÂ Remote Access Settings ÂÂ Software UpdateOpening and Authenticating in Server Admin Server AdminM N Server Admin InterfaceCustomizing the Server Admin Environment Server Assistant is used for Server AssistantWorkgroup Manager Server PreferencesWorkgroup Manager Interface Customizing the Workgroup Manager Environment Server MonitorFor additional information, see Server Monitor Help ICal Service Utility Interface ICal Service UtilityMedia Streaming Management System Image ManagementServer Status Widget Command-Line ToolsRAID Admin Podcast Capture, Composer, and Producer Xgrid AdminApple Remote Desktop About Physical Security Enhancing SecurityNetwork DMZ About Network SecurityFirewalls and Packet Filters MAC Filtering VLANsPayload Encryption Transport EncryptionAbout File Encryption About File SecurityFile and Folder Permissions Secure Delete About Authentication and AuthorizationÂÂ Secure Shell SSH You have several options for authenticating usersSingle Sign-On Public and Private Keys About Certificates, SSL, and Public Key InfrastructureAbout Certificate Authorities CAs CertificatesAbout Intermediate Trust About IdentitiesAbout Self-Signed Certificates From the command line Certificate Manager in Server AdminTo configure clients to trust a certificate Enhancing Security Readying Certificates To request a signed certificate Creating a Self-Signed CertificateRequesting a Certificate from a Certificate Authority To create a self-signed certificateTo create a CA Creating a Certificate AuthorityEnhancing Security To import an existing OpenSSL style certificate Using a CA to Create a Certificate for Someone ElseImporting a Certificate Identity To create a certificate for someone elseEditing a Certificate Managing CertificatesTo delete a certificate Distributing a CA Public Certificate to ClientsDeleting a Certificate To distribute your certificate to your clientsTo renew an expiring certificate Using CertificatesRenewing an Expiring Certificate Replacing an Existing CertificateGenerating a Key Pair for SSH Key-Based SSH LoginTo do this, run the following commands in Terminal SSH and SSH KeysKey-Based SSH with Scripting Sample Setting Administration Level Privileges Administration Level SecurityTo set Sacl permissions for a service Service Level SecuritySetting Sacl Permissions Security Best Practices Password Guidelines Creating Complex Passwords Gather your information Installation OverviewConfirm you meet the requirements Prepare the target disk Set up the environment Start up the computer from an installation disk Start the installerGathering the Information You Need Set Up ServicesSSH During Installation Setting Up Network ServicesAbout the Server Install Disc Connecting to the Directory During InstallationAdministration Tools CD Preparing an Administrator ComputerMac OS X Server Install Disc Before Starting Up About Starting Up for InstallationTo install Mac OS X Server v10.6 administration tools Starting Up from an Alternate Partition Starting Up from the Install DVDTo start up the computer with the installation disc Prepare the disks and partitions on the target computer Create a restorable image of the Install DVD Restore the image to the alternate partition To create an image of the Install DVDTo restore the image to a free volume To access the computer with Server Assistant Remotely Accessing the Install DVDTo access the computer with SSH To access the computer with VNCTo access the computer using Screen Sharing Identify the target server Identifying Remote Servers When Installing Mac OS X ServerStarting Up from a NetBoot Environment To create a NetInstall image from the Install DVD Preparing Disks for Installing Mac OS X Server Create a NetInstall image from the Install DVD Start up the computer from the NetBoot serverÂÂ Mac OS Extended Journaled, Case-Sensitive aka Hfsx Choosing a File SystemAbout Hard Disk Partitioning Partitioning a Disk To partition a disk using Disk UtilityAbout Creating a RAID Set So the command isYou cannot create a RAID set from the startup disk To create a RAID set using Disk UtilityDiskutil createRAID mirror setName format device device For example Installing Server Software InteractivelyTo install server software locally Installing Locally from the Installation DiscTo install on a remote server by using Server Assistant Installing Remotely with Server AssistantInstalling Remotely with Screen Sharing and VNC To change a remote computer’s startup disk Changing a Remote Computer’s Startup DiskTo use installer to install server software 105 More Interactive Methods of Installation Installing Multiple ServersMost Efficient Methods of Installation Upgrading a Computer from Mac OS X to Mac OS X Server How to Keep CurrentInformation You Need Postponing Server Setup Following InstallationTo postpone setting up Mac OS X Server About Settings Established During Initial Server Setup Connecting to the Network During Initial Server SetupConfiguring Servers with Multiple Ethernet Ports ÂÂ Create Users and Groups Specifying Initial Open Directory UsageÂÂ Import Users and Groups Not Changing Directory Usage When UpgradingÂÂ Configure Manually Binding a Server to Multiple Directory Servers Setting Up a Server as a Standalone ServerTo interactively connect to an additional directory server Setting up Servers InteractivelySelect the target servers from the configuration list To set up servers interactivelyUsing Automatic Server Setup Creating and Saving Setup Data To create a setup data file How a Server Searches for Saved Setup Data Files Using Encryption with Setup Data FilesSetting Up Servers Automatically Using Data Saved in a File To set the server serial number To use setup data from a file remotelyCreate the saved setup folder on the remote server Restart the remote serverHandling Setup Errors From the command-line Setting Up ServicesAdding Services to the Server View To change services to administerTo set up a user account Setting Up Open DirectorySetting Up User Management Setting Up All Other ServicesSetting Up an Administrator Computer Computers You Can Use to Administer a ServerInsert the Mac OS X Server Admin Tools CD Using a Non-Mac OS X Computer for AdministrationWorking with Pre-v10.6 Computers from v10.6 Servers Using the Administration ToolsPorts Open By Default Ports Used for AdministrationAdding and Removing Servers in Server Admin Server Admin BasicsTo create a server group Grouping Servers Using Smart GroupsGrouping Servers Manually To create a server smart group Working with Settings for a Specific ServerToolbar button Shows 132 Understanding Mac OS X Server Names ÂÂ Directory Service ÂÂ Firewall ÂÂ Mobile AccessÂÂ NetBoot Dhcp Directory Service and KerberosFirewall Mobile Access Proxy ServicesNetBoot Web ÂÂ MySQLWiki Certificates for Web and Wiki ServicesMySQL 138 Mailing List Certificates for Mail ServicesÂÂ Certificates for collaboration services Imap and POPIChat Service Address Book ServiceICal Service Certificates for Collaboration Services To change the DNS name of the Podcast Producer computer To change the IP address of the Podcast Producer computerXgrid Software Update ServerPrint Push NotificationTo change the DNS name Changing the Server’s DNS Name After SetupChanging the IP Address of a Server Changing the Server’s Computer Name and the Local HostnameTo change computer name and local hostname Administering ServicesFrom the command line To export service settings Adding and Removing Services in Server AdminImporting and Exporting Service Settings To add or remove a service in Server AdminTo configure service access SACLs Controlling Access to ServicesManaging Sharing Using SSL for Remote Server AdministrationTiered Administration Permissions To assign permissions Defining Administrative PermissionsWorkgroup Manager Basics Working with Users and Groups Administering AccountsOpening and Authenticating in Workgroup Manager 152 Defining Managed Preferences To display the inspector Working with Directory DataGeneral Service Configuration AssistantsCritical Configuration and Data Files Assistants are available for the following servicesMail-POP/IMAP Server Dovecot Firewall ServiceMail Service IChat ServerNAT Service MySQL ServiceTomcat App Server OpenDirectory ServiceNotifications QuickTime Streaming ServerWiki and Blog Server Improving Service AvailabilityWeb Service Eliminating Single Points of FailureUsing Xserve for High Availability Following is the Energy Saver panel of System Preferences Setting Up Your Server for Automatic RestartUsing Backup Power Using UPS with XserveAutomatic restart options are To enable automatic restartEnsuring Proper Operational Conditions Providing Open Directory ReplicationLink Aggregation Link Aggregation Scenarios About the Link Aggregation Control Protocol LacpComputer to Switch To create a link aggregate Setting Up Link Aggregation in Mac OS X ServerTo monitor the status of a link aggregate Monitoring Link Aggregation StatusLoad Balancing Viewing Running Daemons Using launchd for Daemon ControlÂÂ mDNSresponder local network service discovery process Daemon Overview170 Planning Monitoring Response Planning a Monitoring PolicyTo configure the Server Status widget Using with Server Status WidgetUsing Server Monitor Using Disk Monitoring Tools Using RAID Admin for Server MonitoringUsing Console for Server Monitoring Using Network Monitoring Tools To see a status overview for one server Using Server Status Notification in Server AdminMonitoring Server Status Overviews Using Server Admin To set a notificationFollowing shows a sample Overview pane for a single server Using Remote Kernel Core Dumps177 Setting up a core dump server Setting Up a Core Dump ServerRestart the computer for the settings to take effect Setting Up a Core Dump ClientSetting up a core dump client About Simple Network Management Protocol Snmp Configuring Common Core Dump OptionsEnabling Snmp reporting Configuring snmpdTo enable Snmp Restart snmpd to take changes To enable and configure Snmp Customize data Tools to Use with Snmp About Notification and Event Monitoring DaemonsAdditional Information about Snmp There are two main notification daemons syslogd and emond Syslog LoggingTo start debugging at startup Directory Service Debug LoggingSyslog Configuration File Open Directory LoggingTo run slapd in debugging mode To enable client-side loggingAdditional Monitoring Aids AFP LoggingAbout Push Notification Server Push Notification ServerStarting and Stopping Push Notification To enable Push NotificationTo change the existing push notification server Changing a Service’s Push Notification ServerClick Save, then restart the service Index 192 193 194 195 196 197