Used by ldapsearch 157 scripts, 174 | Apple oxs guide

S

SASL

used by ldapsearch 157 scripts

adding a website 127 Secure Sockets Layer. See SSL serial number, server software 26 serveradmin utility

usage notes 19 server configuration file

example 22 naming 25 saving 21

Server Message Block. See SMB serversetup utility

usage notes 19

Service Location Protocol. See SLP share points

creating 66 listing 65

updating SMB service after change 86 sharing command 65, 66

shell prompt 13 shortcuts

typing commands 14 shutdown command 30 restarting a server 29

single sign-on 160 slapadd tool 157 slapcat tool 157 slapconfig utility 157 slapindex tool 157 slappasswd tool 157 sleep settings 33

SLP (Service Location Protocol) registering URLs 156

slp_reg command 156 SMB (Server Message Block)

changing service settings 81 checking service status 80 disconnecting users 85 listing service users 84 service settings 82 starting service 80 stopping service 80 viewing service logs 87 viewing service settings 81 viewing service statistics 86

SOCKS firewall proxy settings 44 softwareupdate command 26 ssh command 16

SSL 17

SSL (secure Sockets Layer) using with Mail service 119

SSLOptions 17

SSLRequire 17

sso_util utility 160 startup disk 34 statistics

AFP 75

DNS 136

Mail service 117 QTSS 167 SMB 86

Web service 126 streaming proxy settings 43 subnet mask

validating 40 su command 15 sudo command 15

T

tail command

viewing AFP service logs 76 viewing DHCP service logs 134 viewing DNS service logs 135 viewing FTP service logs 80 viewing IPFilter service logs 142 viewing Mail service logs 118 viewing NAT service logs 144 viewing Print service logs 95 viewing QTSS service logs 168 viewing SMB service logs 87 viewing VPN service logs 149 viewing Web service logs 125

TCP/IP settings 39, 40 Telnet 18 Terminal

using 13 throughput. See statistics time 31, 32

time server 31, 33 time zone 31, 32

U

users attributes 57

checking admin privileges 63 checking name, id, or password 62 creating administrators 53 creating home directory 63 importing 54–57

V

Virtual Private Network. See VPN volumes, mounting and unmounting 47 VPN (Virtual Private Network)

changing service settings 145 checking service status 145 service settings 146

174

Index

Image 174

Apple oxs manual Used by ldapsearch 157 scripts, 174

Contents

Mac OS X Server Command-Line Administration 034-2354/10-24-03 Contents Viewing or Changing Sleep Settings Setting General System PreferencesEnergy Saver Settings Power Management Settings Mounting Volumes Working With Disks and VolumesMounting and Unmounting Volumes Unmounting Volumes Starting and Stopping AFP Service Working With File ServicesAFP Service Checking AFP Service Status Checking the Status of Print Service Working With Print ServiceStarting and Stopping Print Service Viewing Print Service Settings Changing Settings Using serveradmin 156 Changing Open Directory Service Settings 157 157 Configuring Ldap Index 171 Notation Conventions Commands and Other Terminal TextCommand Parameters and Options Summary Default Settings Commands Requiring Root Privileges Using Terminal To open Terminal Including Paths Using Drag-and-Drop Correcting Typing ErrorsRepeating Commands To type a command $ sudo serveradmin list Example ssh -l admin Sending Commands to a Remote ServerSending a Single Command To open a connection to a remote server Updating SSH Key Fingerprints To enable Telnet access Getting Online Help for CommandsUsing Telnet To disable Telnet access Serversetup Determining Whether a Service Needs to be RestartedPage Creating a Configuration File Template Installing Server SoftwareAutomating Server Setup To save a template configuration file during server setup Installing Server Software and Finishing Basic Setup Installing Server Software and Finishing Basic Setup Installing Server Software and Finishing Basic Setup Changing Server Settings Naming Configuration FilesStoring a Configuration File in an Accessible Location Viewing, Validating, and Setting the Software Serial Number Updating Server Software Moving a Server Page To restart the local server ExamplesAutomatic Restart To restart a remote server immediately To change the startup disk Changing a Remote Server’s Startup DiskShutting Down a Server To shut down a remote server immediately Viewing or Changing the Computer Name Computer NameDate and Time To display the server’s computer name Viewing or Changing the System Date Viewing or Changing the System TimeViewing or Changing the System Time Zone Viewing or Changing Automatic Restart Settings Energy Saver SettingsViewing or Changing Sleep Settings Viewing or Changing Network Time Server Usage Power Management Settings Startup Disk SettingsViewing or Changing the Startup Disk Viewing or Changing Remote Login Settings Sharing SettingsInternational Settings Viewing or Changing Language Settings Login Settings To view the current settingDisabling the Restart and Shutdown Buttons Viewing Port Names and Hardware Addresses Creating or Deleting Port Configurations Network Port ConfigurationsViewing or Changing Media Settings Activating Port Configurations TCP/IP Settings Changing Configuration PrecedenceChanging a Server’s IP Address To view TCP/IP settings for a particular port or device To list TCP/IP settings for a configurationTo view TCP/IP settings for port en0 To change TCP/IP settings for a particular port or device Viewing or Changing DNS Servers Viewing or Changing FTP Proxy Settings AppleTalk SettingsProxy Settings Enabling TCP/IP Viewing or Changing Streaming Proxy Settings Viewing or Changing Web Proxy SettingsViewing or Changing Secure Web Proxy Settings Viewing or Changing Gopher Proxy Settings Viewing or Changing Airport Settings AirPort SettingsViewing or Changing Socks Firewall Proxy Settings Computer, Host, and Rendezvous Name Viewing or Changing the Local Host Name Viewing or Changing the Rendezvous NamePage Checking for Disk Problems Mounting VolumesUnmounting Volumes Monitoring Disk Space Reclaiming Disk Space Using Log Rolling Scripts Managing Disk Journaling Checking to See if Journaling is EnabledTurning on Journaling for an Existing Volume Example Erasing, Partitioning, and Formatting Disks Enabling Journaling When You Erase a DiskSetting Up a Case-Sensitive HFS+ File System Disabling Journaling To restore a volume from an image Imaging and Cloning Volumes Using ASRTo image a boot volume Hdiutil convert -format Udzo pathtoimage -o compressedimage To create a user To create a user with a specific UIDTo create a user with a specific UID and home directory Importing Users and Groups To import users and groups Use the shorthand StandardGroupRecord Creating a Character-Delimited User Import FileWriting a Record Description DSRecTypeStandardGroups Using the StandardUserRecord Shorthand User Attributes AttributeFormat Sample values Attribute Format Sample values Authentication MCXSettingsAdminLimits AuthenticationHint Mail Attributes in User Records MailAttribute field Description Sample values NotificationOff is assumed NotificationStaticIP NotificationStateKNotificationState Value Checking a Server User’s Name, UID, or Password Creating a Group Folder Checking a User’s Administrator PrivilegesCreating a User’s Home Directory Mounting a User’s Home DirectoryPage Listing Share Points To list existing share points Creating a Share Point To create a share pointExamples AFP Service Changing AFP Settings List of AFP Settings AllowRootLogin Admin31GetsSpAdminGetsSp AttemptAdminAuth Default = afpserver GuestAccessAdminUsers LogLogin Noadminkills UnixwithclassicadminpermissionsDefault = classicpermissions SpecialAdminPrivs To list connected users List of AFP serveradmin CommandsListing Connected Users Output To send a message Disconnecting AFP UsersSending a Message to AFP Users To disconnect users Canceling a User Disconnect To cancel a disconnectValue Description Listing AFP Service Statistics To list samples Checking NFS Service Status NFS ServiceStarting and Stopping NFS Service Viewing NFS Settings FTP Service Changing FTP Settings FTP SettingsParameter ftp List of FTP serveradmin Commands Ftpcommand= DescriptionPage To list all SMB service settings Viewing SMB SettingsChanging SMB Settings Or see List of SMB Service Settings on List of SMB Service Settings Parameter smb Description Log level Netbios nameLocal master Max smbd processes List of SMB serveradmin Commands Smbcommand= DescriptionListing SMB Users Disconnecting SMB Users Value returned by getConnectedUsers Listing SMB Service Statistics Updating Share Point Information Var/log/samba/log.smbd Viewing SMB Service LogsSmb-log Name-logPage Checking the Status of Print Service Viewing Print Service Settings Changing Print Service Settings Print Service SettingsParameter print Description Queue Data Array Parameter printDescription Here is an example of a queue array parameter block Listing Queues Print Service serveradmin CommandsPausing a Queue To pause a queue Listing Jobs and Job Information Holding a JobTo hold a job Viewing Print Service Log Files To release the jobPage Checking NetBoot Service Status Viewing NetBoot Settings General Settings Changing NetBoot SettingsNetBoot Service Settings Parameter netboot Description Storage Record Array Filters Record Array Image Record Array Port Record Array NetBootPortsRecordsArrayarrayindexmIsEnabledAtIndex EthernetPage Checking the Status of Mail Service Viewing Mail Service Settings Changing Mail Service Settings Mail Service SettingsParameter mail Description Postfixsmtpsaslpasswordmaps PostfixdisablevrfycommandPostfixlmtpsaslpasswordmaps Postfixsmtpsaslauthenable Postfixdefaultverpdelimiters PostfixdeliverlockdelayPostfixmailboxcommand Postfixcleanupservicename Postfixsmtpdtimeout PostfixforkdelayPostfixdisablemimeoutputconversion Postfixsmtpderrorsleeptime Postfixrelaytransport PostfixdelaywarningtimePostfixtriggertimeout Postfixaliasmaps Postfixdefaulttransport PostfixsmtpdnoopcommandsPostfixalternateconfigdirectories Postfixsmtpddelayreject Postfixdefaultprivs PostfixqueueservicenamePostfixipctimeout Postfixinflowdelay Postfixqmqpdtimeout PostfixshowqservicenamePostfixsmtppixworkarounddelaytime Postfixignoremxlookuperror Postfixqmqpderrordelay PostfixbounceservicenamePostfixcontentfilter Postfixsmtpdsenderloginmaps Postfixlmtpdataxfertimeout PostfixdefaultextrarecipientlimitPostfixlmtpdatadonetimeout Postfixsmtpdatadonetimeout Imaptimeout ImappoptimeoutImapmupdateserver Imapenablepop Imapenableimap ImapdefaultpartitionImapsrvtab Default = /etc/srvtab Imapimapauthlogin Imapallowanonymouslogin Mail serveradmin Commands Command Listing Mail Service Statistics Viewing the Mail Service Logs To display the log locations Setting Up SSL for Mail Service Generating a CSR and Creating a Keychain 120 Obtaining an SSL Certificate Importing an SSL Certificate Into the Keychain Setting Up SSL for Mail Service on a Headless Server Creating a Passphrase File Checking Web Service Status Viewing Web Settings Changing Settings Using serveradmin Changing Web SettingsServeradmin and Apache Settings An appropriate value for the setting Listing Hosted Sites Web serveradmin CommandsViewing Service Logs To list sites Cacherequestspersecond for Viewing Service StatisticsRequestspersecond for Cachethroughput for Example Script for Adding a Website Addsite FileAddsite.in File Port To run the scriptIpaddress Root Checking the Status of Dhcp Service Dhcp ServiceStarting and Stopping Dhcp Service Viewing Dhcp Service Settings Changing Dhcp Service Settings Dhcp Service SettingsParameter dhcp Description Dhcp Subnet Settings Array About Subnet IDsSubnet Parameter Netmask LeasetimesecsNetaddress Netrangeend WINSscopeid Adding a Dhcp SubnetTo add a subnet WINSsecondaryserver Command Dhcpcommand=Description List of Dhcp serveradmin CommandsViewing the Dhcp Service Log Location of the DNS service log DNS Service Starting and Stopping Firewall Service Firewall ServiceListing DNS Service Statistics Sample Output Changing Firewall Service Settings Checking the Status of Firewall ServiceViewing Firewall Service Settings Firewall Service Settings Adding Rules by Modifying ipfw.conf Defining Firewall RulesIPFilter Groups With Rules Array Parameter ipfilter Description Unmodified ipfw.conf file Adding Rules Using serveradmin ExampleRule Firewall serveradmin Commands IPFilter Rules Array NAT Service Changing NAT Service Settings NAT Service SettingsParameter nat Description NAT serveradmin Commands Viewing the NAT Service LogParameter natDescription Checking the Status of VPN Service VPN ServiceStarting and Stopping VPN Service Viewing VPN Service Settings List of VPN Service Settings Parameter vpnServers Description PPPLCPEchoEnabled Com.name.ppp.l2tp PPPDSACLEnabled Com.name.ppp.l2tpPPPAuthenticatorPlugins Arrayindex n Com.name.ppp.l2tp PPPVerboseLogging Com.name.ppp.l2tp PPPLCPEchoEnabled Com.name.ppp.pptp PPPDSACLEnabled Com.name.ppp.pptpPPPAuthenticatorPlugins Arrayindexn Com.name.ppp.pptp PPPCCPEnabled Com.name.ppp.pptp VPN Service Log on this List of VPN serveradmin CommandsViewing the VPN Service Log Be restarted. See Determining Whether a Service Needs to be Failover Operation IP FailoverRequirements Hardware To enable IP failover Enabling IP Failover Configuring IP Failover Notification OnlyPre and Post Scripts Enabling PPP Dial-In Page General Directory Tools Testing Your Open Directory ConfigurationTesting Open Directory Plugins Modifying an Open Directory Node Registering URLs With Service Location Protocol SLP Changing Open Directory Service SettingsParameter dirserv Description Configuring Ldap Standard Distribution ToolsProgram Used to Idle Rebinding Options Delay RebindIdle Timeout Additional Information About Ldap Password Server NetInfo Kerberos and Single Sign On KdcsetupKerberosautoconfig Tool in usr/sbin Description Stopping Qtss Service Checking Qtss Service Status To list all Qtss service settings Viewing Qtss SettingsChanging Qtss Settings $ sudo serveradmin settings qtss Qtss parameters you might change Qtss SettingsDescriptions of Settings Parameter qtss Description Authenticate ModulesarrayidQTSSAdminModule ModulesarrayidQTSSAdminModuleAdministratorGroup ModulesarrayidQTSSAdminModule Enableremoteadmin ModulesarrayidQTSSAdminModule Enablebroadcastpush ModulesarrayidQTSSReflectorModule Disableoverbuffering ModulesarrayidQTSSReflectorModuleEnablebroadcastannounce ModulesarrayidQTSSReflectorModule Serverdefaultauthorizationrealm Qtss serveradmin Commands Listing Current Connections Viewing Qtss Service Statistics To force Qtss to re-read its preferences Error.logForcing Qtss to Re-Read its Preferences Library/QuickTimeStreaming/Logs To set up /Sites/Streaming in older home directories Preparing Older Home Directories for User StreamingCreated Page Index Installer command 21 IP address Kdcsetup utility 160 KerberosKerberosautoconfig tool 173 Used by ldapsearch 157 scripts 174 175