GuestAccess, IdleDisconnectFlag, AdminUsers, GuestUsers | Apple oxs

70

Parameter (afp:)	Description
guestAccess	Allow guest users access to the server.
	Default = yes

idleDisconnectFlag:	Enforce idle disconnect for administrative users.
adminUsers	Default = yes

idleDisconnectFlag:	Enforce idle disconnect for guest users.
guestUsers	Default = yes

idleDisconnectFlag:	Enforce idle disconnect for registered users.
registeredUsers	Default = yes

idleDisconnectFlag:	Enforce idle disconnect for users with open files.
usersWithOpenFiles	Default = yes

idleDisconnectMsg	The idle disconnect message.
	Default = ""

idleDisconnectOnOff	Enable idle disconnect.
	Default = no

idleDisconnectTime	Idle time (in minutes) allowed before disconnect.
	Default = 10

kerberosPrincipal	Kerberos server principal name.
	Default = "afpserver"

loggingAttributes:	Record directory creations in the activity log.
logCreateDir	Default = yes

loggingAttributes:	Record file creations in the activity log.
logCreateFile	Default = yes

loggingAttributes:	Record file deletions in the activity log.
logDelete	Default = yes

loggingAttributes:	Record user logins in the activity log.
logLogin	Default = yes

loggingAttributes:	Log user logouts in the activity log.
logLogout	Default = yes

loggingAttributes:	Log file opens in the activity log.
logOpenFork	Default = yes

loginGreeting	The login greeting message.
	Default = ""

loginGreetingTime	The last time the login greeting was set or updated.

maxConnections	Maximum number of simultaneous user sessions allowed by
	the server.
	Default = -1(unlimited)

maxGuests	Maximum number of simultaneous guest users allowed.
	Default = -1(unlimited)

Chapter 8 Working With File Services

Image 70

Apple oxs GuestAccess, IdleDisconnectFlag, AdminUsers, GuestUsers, RegisteredUsers, UsersWithOpenFiles, IdleDisconnectMsg

Contents

Mac OS X Server Command-Line Administration 034-2354/10-24-03 Contents Viewing or Changing Sleep Settings Setting General System PreferencesEnergy Saver Settings Power Management Settings Mounting Volumes Working With Disks and VolumesMounting and Unmounting Volumes Unmounting Volumes Starting and Stopping AFP Service Working With File ServicesAFP Service Checking AFP Service Status Checking the Status of Print Service Working With Print ServiceStarting and Stopping Print Service Viewing Print Service Settings Changing Settings Using serveradmin 156 Changing Open Directory Service Settings 157 157 Configuring Ldap Index 171 Notation Conventions Commands and Other Terminal TextCommand Parameters and Options Summary Default Settings Commands Requiring Root Privileges Using Terminal To open Terminal Including Paths Using Drag-and-Drop Correcting Typing ErrorsRepeating Commands To type a command $ sudo serveradmin list Example ssh -l admin Sending Commands to a Remote ServerSending a Single Command To open a connection to a remote server Updating SSH Key Fingerprints To enable Telnet access Getting Online Help for CommandsUsing Telnet To disable Telnet access Serversetup Determining Whether a Service Needs to be RestartedPage Creating a Configuration File Template Installing Server SoftwareAutomating Server Setup To save a template configuration file during server setup Installing Server Software and Finishing Basic Setup Installing Server Software and Finishing Basic Setup Installing Server Software and Finishing Basic Setup Naming Configuration Files Changing Server SettingsStoring a Configuration File in an Accessible Location Viewing, Validating, and Setting the Software Serial Number Updating Server Software Moving a Server Page To restart the local server ExamplesAutomatic Restart To restart a remote server immediately To change the startup disk Changing a Remote Server’s Startup DiskShutting Down a Server To shut down a remote server immediately Viewing or Changing the Computer Name Computer NameDate and Time To display the server’s computer name Viewing or Changing the System Time Viewing or Changing the System DateViewing or Changing the System Time Zone Viewing or Changing Automatic Restart Settings Energy Saver SettingsViewing or Changing Sleep Settings Viewing or Changing Network Time Server Usage Startup Disk Settings Power Management SettingsViewing or Changing the Startup Disk Viewing or Changing Remote Login Settings Sharing SettingsInternational Settings Viewing or Changing Language Settings To view the current setting Login SettingsDisabling the Restart and Shutdown Buttons Viewing Port Names and Hardware Addresses Creating or Deleting Port Configurations Network Port ConfigurationsViewing or Changing Media Settings Activating Port Configurations Changing Configuration Precedence TCP/IP SettingsChanging a Server’s IP Address To view TCP/IP settings for a particular port or device To list TCP/IP settings for a configurationTo view TCP/IP settings for port en0 To change TCP/IP settings for a particular port or device Viewing or Changing DNS Servers Viewing or Changing FTP Proxy Settings AppleTalk SettingsProxy Settings Enabling TCP/IP Viewing or Changing Streaming Proxy Settings Viewing or Changing Web Proxy SettingsViewing or Changing Secure Web Proxy Settings Viewing or Changing Gopher Proxy Settings Viewing or Changing Airport Settings AirPort SettingsViewing or Changing Socks Firewall Proxy Settings Computer, Host, and Rendezvous Name Viewing or Changing the Local Host Name Viewing or Changing the Rendezvous NamePage Mounting Volumes Checking for Disk ProblemsUnmounting Volumes Monitoring Disk Space Reclaiming Disk Space Using Log Rolling Scripts Managing Disk Journaling Checking to See if Journaling is EnabledTurning on Journaling for an Existing Volume Example Erasing, Partitioning, and Formatting Disks Enabling Journaling When You Erase a DiskSetting Up a Case-Sensitive HFS+ File System Disabling Journaling To restore a volume from an image Imaging and Cloning Volumes Using ASRTo image a boot volume Hdiutil convert -format Udzo pathtoimage -o compressedimage To create a user with a specific UID To create a userTo create a user with a specific UID and home directory Importing Users and Groups To import users and groups Use the shorthand StandardGroupRecord Creating a Character-Delimited User Import FileWriting a Record Description DSRecTypeStandardGroups Using the StandardUserRecord Shorthand Attribute User AttributesFormat Sample values Attribute Format Sample values Authentication MCXSettingsAdminLimits AuthenticationHint Mail Attributes in User Records MailAttribute field Description Sample values NotificationOff is assumed NotificationStaticIP NotificationStateKNotificationState Value Checking a Server User’s Name, UID, or Password Creating a Group Folder Checking a User’s Administrator PrivilegesCreating a User’s Home Directory Mounting a User’s Home DirectoryPage Listing Share Points To list existing share points To create a share point Creating a Share PointExamples AFP Service Changing AFP Settings List of AFP Settings AllowRootLogin Admin31GetsSpAdminGetsSp AttemptAdminAuth Default = afpserver GuestAccessAdminUsers LogLogin Noadminkills UnixwithclassicadminpermissionsDefault = classicpermissions SpecialAdminPrivs To list connected users List of AFP serveradmin CommandsListing Connected Users Output To send a message Disconnecting AFP UsersSending a Message to AFP Users To disconnect users To cancel a disconnect Canceling a User DisconnectValue Description Listing AFP Service Statistics To list samples Checking NFS Service Status NFS ServiceStarting and Stopping NFS Service Viewing NFS Settings FTP Service FTP Settings Changing FTP SettingsParameter ftp List of FTP serveradmin Commands Ftpcommand= DescriptionPage To list all SMB service settings Viewing SMB SettingsChanging SMB Settings Or see List of SMB Service Settings on List of SMB Service Settings Parameter smb Description Log level Netbios nameLocal master Max smbd processes Smbcommand= Description List of SMB serveradmin CommandsListing SMB Users Disconnecting SMB Users Value returned by getConnectedUsers Listing SMB Service Statistics Updating Share Point Information Var/log/samba/log.smbd Viewing SMB Service LogsSmb-log Name-logPage Checking the Status of Print Service Viewing Print Service Settings Print Service Settings Changing Print Service SettingsParameter print Description Queue Data Array Parameter printDescription Here is an example of a queue array parameter block Listing Queues Print Service serveradmin CommandsPausing a Queue To pause a queue Holding a Job Listing Jobs and Job InformationTo hold a job Viewing Print Service Log Files To release the jobPage Checking NetBoot Service Status Viewing NetBoot Settings General Settings Changing NetBoot SettingsNetBoot Service Settings Parameter netboot Description Storage Record Array Filters Record Array Image Record Array Port Record Array NetBootPortsRecordsArrayarrayindexmIsEnabledAtIndex EthernetPage Checking the Status of Mail Service Viewing Mail Service Settings Mail Service Settings Changing Mail Service SettingsParameter mail Description Postfixsmtpsaslpasswordmaps PostfixdisablevrfycommandPostfixlmtpsaslpasswordmaps Postfixsmtpsaslauthenable Postfixdefaultverpdelimiters PostfixdeliverlockdelayPostfixmailboxcommand Postfixcleanupservicename Postfixsmtpdtimeout PostfixforkdelayPostfixdisablemimeoutputconversion Postfixsmtpderrorsleeptime Postfixrelaytransport PostfixdelaywarningtimePostfixtriggertimeout Postfixaliasmaps Postfixdefaulttransport PostfixsmtpdnoopcommandsPostfixalternateconfigdirectories Postfixsmtpddelayreject Postfixdefaultprivs PostfixqueueservicenamePostfixipctimeout Postfixinflowdelay Postfixqmqpdtimeout PostfixshowqservicenamePostfixsmtppixworkarounddelaytime Postfixignoremxlookuperror Postfixqmqpderrordelay PostfixbounceservicenamePostfixcontentfilter Postfixsmtpdsenderloginmaps Postfixlmtpdataxfertimeout PostfixdefaultextrarecipientlimitPostfixlmtpdatadonetimeout Postfixsmtpdatadonetimeout Imaptimeout ImappoptimeoutImapmupdateserver Imapenablepop Imapenableimap ImapdefaultpartitionImapsrvtab Default = /etc/srvtab Imapimapauthlogin Imapallowanonymouslogin Mail serveradmin Commands Command Listing Mail Service Statistics Viewing the Mail Service Logs To display the log locations Setting Up SSL for Mail Service Generating a CSR and Creating a Keychain 120 Obtaining an SSL Certificate Importing an SSL Certificate Into the Keychain Setting Up SSL for Mail Service on a Headless Server Creating a Passphrase File Checking Web Service Status Viewing Web Settings Changing Settings Using serveradmin Changing Web SettingsServeradmin and Apache Settings An appropriate value for the setting Listing Hosted Sites Web serveradmin CommandsViewing Service Logs To list sites Cacherequestspersecond for Viewing Service StatisticsRequestspersecond for Cachethroughput for Addsite File Example Script for Adding a WebsiteAddsite.in File Port To run the scriptIpaddress Root Checking the Status of Dhcp Service Dhcp ServiceStarting and Stopping Dhcp Service Viewing Dhcp Service Settings Dhcp Service Settings Changing Dhcp Service SettingsParameter dhcp Description About Subnet IDs Dhcp Subnet Settings ArraySubnet Parameter Netmask LeasetimesecsNetaddress Netrangeend WINSscopeid Adding a Dhcp SubnetTo add a subnet WINSsecondaryserver Command Dhcpcommand=Description List of Dhcp serveradmin CommandsViewing the Dhcp Service Log Location of the DNS service log DNS Service Starting and Stopping Firewall Service Firewall ServiceListing DNS Service Statistics Sample Output Changing Firewall Service Settings Checking the Status of Firewall ServiceViewing Firewall Service Settings Firewall Service Settings Adding Rules by Modifying ipfw.conf Defining Firewall RulesIPFilter Groups With Rules Array Parameter ipfilter Description Unmodified ipfw.conf file Example Adding Rules Using serveradminRule Firewall serveradmin Commands IPFilter Rules Array NAT Service NAT Service Settings Changing NAT Service SettingsParameter nat Description Viewing the NAT Service Log NAT serveradmin CommandsParameter natDescription Checking the Status of VPN Service VPN ServiceStarting and Stopping VPN Service Viewing VPN Service Settings List of VPN Service Settings Parameter vpnServers Description PPPLCPEchoEnabled Com.name.ppp.l2tp PPPDSACLEnabled Com.name.ppp.l2tpPPPAuthenticatorPlugins Arrayindex n Com.name.ppp.l2tp PPPVerboseLogging Com.name.ppp.l2tp PPPLCPEchoEnabled Com.name.ppp.pptp PPPDSACLEnabled Com.name.ppp.pptpPPPAuthenticatorPlugins Arrayindexn Com.name.ppp.pptp PPPCCPEnabled Com.name.ppp.pptp VPN Service Log on this List of VPN serveradmin CommandsViewing the VPN Service Log Be restarted. See Determining Whether a Service Needs to be Failover Operation IP FailoverRequirements Hardware To enable IP failover Enabling IP Failover Notification Only Configuring IP FailoverPre and Post Scripts Enabling PPP Dial-In Page General Directory Tools Testing Your Open Directory ConfigurationTesting Open Directory Plugins Modifying an Open Directory Node Changing Open Directory Service Settings Registering URLs With Service Location Protocol SLPParameter dirserv Description Standard Distribution Tools Configuring LdapProgram Used to Idle Rebinding Options Delay RebindIdle Timeout Additional Information About Ldap Password Server NetInfo Kerberos and Single Sign On KdcsetupKerberosautoconfig Tool in usr/sbin Description Stopping Qtss Service Checking Qtss Service Status To list all Qtss service settings Viewing Qtss SettingsChanging Qtss Settings $ sudo serveradmin settings qtss Qtss parameters you might change Qtss SettingsDescriptions of Settings Parameter qtss Description Authenticate ModulesarrayidQTSSAdminModule ModulesarrayidQTSSAdminModuleAdministratorGroup ModulesarrayidQTSSAdminModule Enableremoteadmin ModulesarrayidQTSSAdminModule Enablebroadcastpush ModulesarrayidQTSSReflectorModule Disableoverbuffering ModulesarrayidQTSSReflectorModuleEnablebroadcastannounce ModulesarrayidQTSSReflectorModule Serverdefaultauthorizationrealm Qtss serveradmin Commands Listing Current Connections Viewing Qtss Service Statistics To force Qtss to re-read its preferences Error.logForcing Qtss to Re-Read its Preferences Library/QuickTimeStreaming/Logs Preparing Older Home Directories for User Streaming To set up /Sites/Streaming in older home directoriesCreated Page Index Kdcsetup utility 160 Kerberos Installer command 21 IP addressKerberosautoconfig tool 173 Used by ldapsearch 157 scripts 174 175