Manuals / Apple / Computer Equipment / Server

Apple 10.6 manual ÂÂ Remote Access Settings ÂÂ Software Update, ÂÂ Wiki ÂÂ Xgrid

Models: 10.6

1 197

Download 197 pages 50.37 Kb

Page 37

For example, Time Machine doesn’t back up user and group directory records, email, DNS records, Address Book shared groups, iCal Server calendars, and so forth. It only saves the settings made in Server Preferences and Server Admin, and whether a service is on or off. The following service settings and statuses are preserved:

ÂÂ Address Book Server

ÂÂ DHCP

ÂÂ DNS

ÂÂ File Services (AFP, SMB, NFS, and FTP) ÂÂ Firewall

ÂÂ iCal Server

ÂÂ iChat Server ÂÂ Mail

ÂÂ Mobile Access ÂÂ MySQL

ÂÂ NAT

ÂÂ Network Settings

ÂÂ Podcast Producer ÂÂ Print

ÂÂ Push Notification

ÂÂ QTSS

ÂÂ RADIUS

ÂÂ Remote Access Settings

ÂÂ Software Update

ÂÂ VPN

ÂÂ Web

ÂÂ Wiki

ÂÂ Xgrid

For more information about where the necessary data files are stored for backup via other means, see “Critical Configuration and Data Files” on page 155.

Note: You can use the launchctl command to automate data backup using the aforementioned commands. For more information about using launchctl and launchd, see their respective man pages.

Chapter 2    Planning Server Usage

37

Image 37

Apple 10.6 manual ÂÂ Remote Access Settings ÂÂ Software Update, ÂÂ Wiki ÂÂ Xgrid

Contents

Mac OS X Server 019-1410/2009-08-15 Contents Enhancing Security Administration ToolsInstallation and Deployment Initial Server Setup Ongoing System Management Monitoring Your System Index Push Notification ServerContents What’s in This Guide About This GuideTo see the most recent server help topics Using Onscreen HelpGetting Started Document Road MapPreface About This Guide Getting Additional Information Getting Documentation UpdatesStandards System Requirements for Installing Mac OS X ServerÂÂ iCal Server What’s New in Mac OS X ServerUnderstanding Server Configuration Methods What’s New in Server AdminSnmp NFS Radius Supported StandardsSystem Overview and Supported Standards System Overview and Supported Standards Mac OS X Server’s Unix Heritage Determining Your Server Needs Planning Server UsageSetting Up a Planning Team Determining Whether to Upgrade or MigrateDetermining Services to Host on Each Server Identifying Servers to Set UpPlanning Server Usage Migrating from Windows Defining a Migration StrategyDefining an Integration Strategy Defining Physical Infrastructure Requirements Defining Server Setup Infrastructure RequirementsSetting up basic server infrastructure Defining Backup and Restore Policies Minimizing the Need to Relocate Servers After SetupMaking Sure Required Server Hardware Is Available Understanding Backup and Restore Policies Understanding Backup Types Understanding Restores Understanding Backup SchedulingDefining a Backup Verification Mechanism Other Backup Policy ConsiderationsUnderstanding Time Machine as a Server Backup Tool Command-Line Backup and Restoration ToolsÂÂ Wiki ÂÂ Xgrid ÂÂ Remote Access Settings ÂÂ Software UpdateOpening and Authenticating in Server Admin Server AdminM N Server Admin InterfaceCustomizing the Server Admin Environment Server Assistant is used for Server AssistantWorkgroup Manager Server PreferencesWorkgroup Manager Interface Customizing the Workgroup Manager Environment Server MonitorFor additional information, see Server Monitor Help ICal Service Utility Interface ICal Service UtilityMedia Streaming Management System Image ManagementRAID Admin Command-Line ToolsServer Status Widget Podcast Capture, Composer, and Producer Xgrid AdminApple Remote Desktop About Physical Security Enhancing SecurityFirewalls and Packet Filters About Network SecurityNetwork DMZ MAC Filtering VLANsPayload Encryption Transport EncryptionFile and Folder Permissions About File SecurityAbout File Encryption Secure Delete About Authentication and AuthorizationÂÂ Secure Shell SSH You have several options for authenticating usersSingle Sign-On Public and Private Keys About Certificates, SSL, and Public Key InfrastructureAbout Certificate Authorities CAs CertificatesAbout Self-Signed Certificates About IdentitiesAbout Intermediate Trust To configure clients to trust a certificate Certificate Manager in Server AdminFrom the command line Enhancing Security Readying Certificates Requesting a Certificate from a Certificate Authority Creating a Self-Signed CertificateTo create a self-signed certificate To request a signed certificateTo create a CA Creating a Certificate AuthorityEnhancing Security Importing a Certificate Identity Using a CA to Create a Certificate for Someone ElseTo create a certificate for someone else To import an existing OpenSSL style certificateEditing a Certificate Managing CertificatesDeleting a Certificate Distributing a CA Public Certificate to ClientsTo distribute your certificate to your clients To delete a certificateRenewing an Expiring Certificate Using CertificatesReplacing an Existing Certificate To renew an expiring certificateTo do this, run the following commands in Terminal Key-Based SSH LoginSSH and SSH Keys Generating a Key Pair for SSHKey-Based SSH with Scripting Sample Setting Administration Level Privileges Administration Level SecuritySetting Sacl Permissions Service Level SecurityTo set Sacl permissions for a service Security Best Practices Password Guidelines Creating Complex Passwords Confirm you meet the requirements Installation Overview Gather your information Start up the computer from an installation disk Set up the environment Start the installer Prepare the target diskGathering the Information You Need Set Up ServicesAbout the Server Install Disc Setting Up Network ServicesConnecting to the Directory During Installation SSH During InstallationMac OS X Server Install Disc Preparing an Administrator ComputerAdministration Tools CD To install Mac OS X Server v10.6 administration tools About Starting Up for InstallationBefore Starting Up To start up the computer with the installation disc Starting Up from the Install DVDStarting Up from an Alternate Partition Restore the image to the alternate partition Create a restorable image of the Install DVDTo create an image of the Install DVD Prepare the disks and partitions on the target computerTo restore the image to a free volume To access the computer with Server Assistant Remotely Accessing the Install DVDTo access the computer using Screen Sharing To access the computer with VNCTo access the computer with SSH Identify the target server Identifying Remote Servers When Installing Mac OS X ServerStarting Up from a NetBoot Environment Create a NetInstall image from the Install DVD Preparing Disks for Installing Mac OS X Server Start up the computer from the NetBoot server To create a NetInstall image from the Install DVDÂÂ Mac OS Extended Journaled, Case-Sensitive aka Hfsx Choosing a File SystemAbout Hard Disk Partitioning Partitioning a Disk To partition a disk using Disk UtilityAbout Creating a RAID Set So the command isYou cannot create a RAID set from the startup disk To create a RAID set using Disk UtilityDiskutil createRAID mirror setName format device device For example Installing Server Software InteractivelyTo install server software locally Installing Locally from the Installation DiscTo install on a remote server by using Server Assistant Installing Remotely with Server AssistantInstalling Remotely with Screen Sharing and VNC To change a remote computer’s startup disk Changing a Remote Computer’s Startup DiskTo use installer to install server software 105 Most Efficient Methods of Installation Installing Multiple ServersMore Interactive Methods of Installation Upgrading a Computer from Mac OS X to Mac OS X Server How to Keep CurrentTo postpone setting up Mac OS X Server Postponing Server Setup Following InstallationInformation You Need Configuring Servers with Multiple Ethernet Ports Connecting to the Network During Initial Server SetupAbout Settings Established During Initial Server Setup ÂÂ Create Users and Groups Specifying Initial Open Directory UsageÂÂ Configure Manually Not Changing Directory Usage When UpgradingÂÂ Import Users and Groups Binding a Server to Multiple Directory Servers Setting Up a Server as a Standalone ServerTo interactively connect to an additional directory server Setting up Servers InteractivelySelect the target servers from the configuration list To set up servers interactivelyUsing Automatic Server Setup Creating and Saving Setup Data To create a setup data file How a Server Searches for Saved Setup Data Files Using Encryption with Setup Data FilesSetting Up Servers Automatically Using Data Saved in a File Create the saved setup folder on the remote server To use setup data from a file remotelyRestart the remote server To set the server serial numberHandling Setup Errors Adding Services to the Server View Setting Up ServicesTo change services to administer From the command-lineSetting Up User Management Setting Up Open DirectorySetting Up All Other Services To set up a user accountSetting Up an Administrator Computer Computers You Can Use to Administer a ServerInsert the Mac OS X Server Admin Tools CD Using a Non-Mac OS X Computer for AdministrationWorking with Pre-v10.6 Computers from v10.6 Servers Using the Administration ToolsPorts Open By Default Ports Used for AdministrationAdding and Removing Servers in Server Admin Server Admin BasicsGrouping Servers Manually Grouping Servers Using Smart GroupsTo create a server group To create a server smart group Working with Settings for a Specific ServerToolbar button Shows 132 ÂÂ NetBoot ÂÂ Directory Service ÂÂ Firewall ÂÂ Mobile AccessUnderstanding Mac OS X Server Names Dhcp Directory Service and KerberosNetBoot Mobile Access Proxy ServicesFirewall Web ÂÂ MySQLMySQL Certificates for Web and Wiki ServicesWiki 138 ÂÂ Certificates for collaboration services Certificates for Mail ServicesImap and POP Mailing ListICal Service Address Book ServiceIChat Service Certificates for Collaboration Services To change the DNS name of the Podcast Producer computer To change the IP address of the Podcast Producer computerPrint Software Update ServerPush Notification XgridChanging the IP Address of a Server Changing the Server’s DNS Name After SetupChanging the Server’s Computer Name and the Local Hostname To change the DNS nameFrom the command line Administering ServicesTo change computer name and local hostname Importing and Exporting Service Settings Adding and Removing Services in Server AdminTo add or remove a service in Server Admin To export service settingsTo configure service access SACLs Controlling Access to ServicesManaging Sharing Using SSL for Remote Server AdministrationTiered Administration Permissions Workgroup Manager Basics Defining Administrative PermissionsTo assign permissions Opening and Authenticating in Workgroup Manager Administering AccountsWorking with Users and Groups 152 Defining Managed Preferences To display the inspector Working with Directory DataCritical Configuration and Data Files Service Configuration AssistantsAssistants are available for the following services GeneralMail Service Firewall ServiceIChat Server Mail-POP/IMAP Server DovecotNAT Service MySQL ServiceNotifications OpenDirectory ServiceQuickTime Streaming Server Tomcat App ServerWeb Service Improving Service AvailabilityEliminating Single Points of Failure Wiki and Blog ServerUsing Xserve for High Availability Using Backup Power Setting Up Your Server for Automatic RestartUsing UPS with Xserve Following is the Energy Saver panel of System PreferencesEnsuring Proper Operational Conditions To enable automatic restartProviding Open Directory Replication Automatic restart options areLink Aggregation Link Aggregation Scenarios About the Link Aggregation Control Protocol LacpComputer to Switch To create a link aggregate Setting Up Link Aggregation in Mac OS X ServerTo monitor the status of a link aggregate Monitoring Link Aggregation StatusLoad Balancing ÂÂ mDNSresponder local network service discovery process Using launchd for Daemon ControlDaemon Overview Viewing Running Daemons170 Planning Monitoring Response Planning a Monitoring PolicyUsing Server Monitor Using with Server Status WidgetTo configure the Server Status widget Using Console for Server Monitoring Using RAID Admin for Server MonitoringUsing Disk Monitoring Tools Using Network Monitoring Tools Monitoring Server Status Overviews Using Server Admin Using Server Status Notification in Server AdminTo set a notification To see a status overview for one serverFollowing shows a sample Overview pane for a single server Using Remote Kernel Core Dumps177 Setting up a core dump server Setting Up a Core Dump ServerSetting up a core dump client Setting Up a Core Dump ClientRestart the computer for the settings to take effect About Simple Network Management Protocol Snmp Configuring Common Core Dump OptionsTo enable Snmp Configuring snmpdEnabling Snmp reporting Customize data To enable and configure Snmp Restart snmpd to take changes Additional Information about Snmp About Notification and Event Monitoring DaemonsTools to Use with Snmp There are two main notification daemons syslogd and emond Syslog LoggingSyslog Configuration File Directory Service Debug LoggingOpen Directory Logging To start debugging at startupAdditional Monitoring Aids To enable client-side loggingAFP Logging To run slapd in debugging modeAbout Push Notification Server Push Notification ServerStarting and Stopping Push Notification To enable Push NotificationClick Save, then restart the service Changing a Service’s Push Notification ServerTo change the existing push notification server Index 192 193 194 195 196 197