Groups
If you want groups to use new version 10.4 features such as nesting and stricter membership checking, upgrade group records using Workgroup Manager.
To upgrade a group record:
1Open Workgroup Manager.
2Open the directory that contains the groups of interest.
3Select one or more groups and click “Upgrade legacy group.”
4Click Save.
Directory Services
After upgrading, you may want to convert a shared NetInfo directory to LDAP. See the Open Directory administration guide for details about the advantages of using LDAP and how to use Server Admin to conduct the conversion.
You can also convert to Open Directory authentication from a different authentication strategy. For example, if any of the users in your upgraded server are configured to be authenticated using Authentication Manager, you can change their settings to Open Directory authentication. Authentication options and instructions appear in the Open Directory administration guide.
If you want to enable Kerberos for an Open Directory master on which it’s not enabled, you can use the following command, which maintains existing passwords and adds them to a new KDC.
slapconfig
If you have user accounts with crypt passwords and you don’t Kerberize them using the command above, you can use Workgroup Manager or the NeST command to use an Open Directory password:
ÂTo use Workgroup Manager, open the application and access the directory in which the user account resides. Authenticate as domain administrator, then select a user with a crypt password. Click Advanced, choose Open Directory from the User Password Type
ÂTo use the NeST tool, open the Terminal application and type:
NeST
For more information about NeST and slapconfig, see their man pages.
NetBoot Images
NetBoot images created using version 10.2 and 10.3 can be reused following the upgrade installation.
To manage Netboot images, you use System Image Utility, which replaces Network Image Utility during the upgrade installation.
Chapter 2 Upgrading Mac OS X Server Version 10.3
21
