Apple Mac OS X Server (Administrator’s Guide) - Manual (Page 133)

Users and Groups 133
Make sure that any user who will be using Workgroup Manager to add and change users and
groups in directory domains has directory domain administration privileges in the domains
for which the user is responsible. You can use Workgroup Manager to add and change user
and group accounts that reside in NetInfo or LDAPv3 directory domains.
If you will be using LDAPv2, read-only LDAPv3, BSD configuration file, or other read-only
directory domains, make sure the domains are configured to support Mac OS X Server access
and that they provide the data you need for user and group accounts. It may be necessary to
add, modify, or reorganize information in a directory to provide the information in the
format needed:
m Chapter 2, “Directory Services,” describes how to configure Mac OS X Server to access
remote servers on which these domains reside to retrieve information.
m Appendix A, “Open Directory Data Requirements,” describes the user and group account
data formats that Mac OS X expects. When you configure your Mac OS X Server directory
services to use directory domains that do not reside on Mac OS X Server, you may need to
refer to this appendix to determine the data mapping requirements for particular kinds of
directory domains.
Step 3: Configure server search policies so servers can find user and
group accounts
Make sure that the search policy of any server which needs to access user and group
information to provide services for particular users is configured to do so. Chapter 2,
“Directory Services,” tells you how to set up search policies.
Step 4: Set up share points for home directories
Before you assign a home directory to a user, you need to define the share point in which
the home directory will reside. You also need to configure the share point to automatically
mount on the user’s computer when he or she logs in. See “Distributing Home Directories
Across Multiple Servers” on page 156 through “Setting Up NFS Home Directory Share Points”
on page 160 for information about setting up share points.
Step 5: Set up share points for group directories
A group directory is like a home directory for group users. It is a directory for storing
documents, applications, and other items you want to share among group members. See
“Working With Volume Settings for Groups” on page 170 for information about setting up
group directories.
Step 6: Create users
You can use Workgroup Manager to create user accounts in directory domains that reside on
Mac OS X Server and in non-Apple LDAPv3 directory domains that have been configured for
write access. See these sections for instructions: