Document Outline

• Mac OS X Server Administrator’s Guide
  • Contents
    • Preface How to Use This Guide 39
      • What’s Included in This Guide 39
      • Using This Guide 40
      • Setting Up Mac OS X Server for the First Time 41
      • Getting Help for Everyday Management Tasks 41
      • Getting Additional Information 41
    • 1 Administering Your Server 43
      • Highlighting Key Features 43
        • Ease of Setup and Administration 43
        • Networking and Security 44
        • File and Printer Sharing 44
        • Open Directory Services 45
        • Comprehensive Management of Macintosh Workgroups 45
        • High Availability 46
        • Extensive Internet and Web Services 46
      • Highlighting Individual Services 46
        • Directory Services 47
        • File Services 48
        • Print Service 50
        • Web Service 51
        • Mail Service 51
        • Macintosh Workgroup Management 52
        • Network Services 53
        • QuickTime Streaming Service 55
      • Highlighting Server Applications 56
        • Administering a Server From Different Computers 58
        • Server Assistant 58
        • Open Directory Assistant 58
        • Directory Access 59
        • Workgroup Manager 59
        • Server Settings 60
        • Server Status 61
        • Macintosh Manager 62
        • NetBoot Administration Tools 62
        • Network Install Administration Application 62
        • Server Monitor 62
        • Streaming Server Admin 63
      • Where to Find More Information 64
        • If You’re New to Server and Network Management 64
        • If You’re an Experienced Server Administrator 64
    • 2 Directory Services 65
      • Storage for Data Needed by Mac OS X 66
      • A Historical Perspective 67
        • Data Consolidation 68
        • Data Distribution 69
      • Uses of Directory Data 70
      • Inside a Directory Domain 71
      • Discovery of Network Services 72
      • Directory Domain Protocols 73
      • Local and Shared Directory Domains 74
        • Local Data 74
        • Shared Data 75
        • Shared Data in Existing Directory Domains 78
      • Directory Domain Hierarchies 78
        • Two-Level Hierarchies 79
        • More Complex Hierarchies 81
      • Search Policies for Directory Domain Hierarchies 82
        • The Automatic Search Policy 83
        • Custom Search Policies 84
      • Directory Domain Planning 85
        • General Planning Guidelines 85
        • Controlling Data Accessibility 86
        • Simplifying Changes to Data in Directory Domains 86
        • Identifying Computers for Hosting Shared Domains 87
      • Open Directory Password Server 87
        • Authentication With a Password Server 88
        • Network Authentication Protocols 88
        • Password Server Database 88
        • Password Server Security 89
      • Overview of Directory Services Tools 89
      • Setup Overview 90
      • Before You Begin 91
      • Setting Up an Open Directory Domain and Password Server 92
      • Deleting a Shared Open Directory Domain 93
      • Configuring Open Directory Service Protocols 93
      • Setting Up Search Policies 94
        • Using the Automatic Search Policy 95
        • Defining a Custom Search Policy 95
        • Using a Local Directory Search Policy 96
      • Changing Basic LDAPv3 Settings 97
        • Enabling or Disabling Use of DHCP-Supplied LDAPv3 Servers 97
        • Showing or Hiding Available LDAPv3 Configurations 97
      • Configuring Access to Existing LDAPv3 Servers 98
        • Creating an LDAPv3 Configuration 98
        • Editing an LDAPv3 Configuration 99
        • Duplicating an LDAPv3 Configuration 99
        • Deleting an LDAPv3 Configuration 100
        • Changing an LDAPv3 Configuration’s Connection Settings 100
        • Configuring LDAPv3 Search Bases and Mappings 101
        • Populating LDAPv3 Domains With Data for Mac OS X 103
      • Using an Active Directory Server 104
        • Creating an Active Directory Server Configuration 104
        • Setting Up an Active Directory Server 105
        • Populating Active Directory Domains With Data for Mac OS X 105
      • Accessing an Existing LDAPv2 Directory 106
        • Setting Up an LDAPv2 Server 106
        • Creating an LDAPv2 Server Configuration 106
        • Changing LDAPv2 Server Access Settings 107
        • Editing LDAPv2 Search Bases and Data Mappings 108
      • Using NetInfo Domains 110
        • Creating a Shared NetInfo Domain 110
        • Configuring NetInfo Binding 111
        • Adding a Machine Record to a Parent NetInfo Domain 113
        • Configuring Static Ports for Shared NetInfo Domains 113
        • Viewing and Changing NetInfo Data 114
        • Using UNIX Utilities for NetInfo 114
      • Using Berkeley Software Distribution (BSD) Configuration Files 115
        • Mapping BSD Configuration Files 115
        • Setting Up Data in BSD Configuration Files 118
      • Configuring Directory Access on a Remote Computer 118
      • Monitoring Directory Services 119
      • Backing Up and Restoring Directory Services Files 119
    • 3 Users and Groups 121
      • How User Accounts Are Used 122
        • Authentication 122
        • Password Validation 123
        • Information Access Control 124
        • Administration Privileges 125
        • Home Directories 126
        • Mail Settings 127
        • Resource Usage 127
        • User Preferences 127
      • How Group Accounts Are Used 127
        • Information Access Control 127
        • Group Directories 128
        • Workgroups 128
        • Computer Access 128
      • Kinds of Users and Groups 128
        • Users and Managed Users 128
        • Groups, Primary Groups, and Workgroups 129
        • Administrators 129
        • Guest Users 129
        • Predefined Accounts 130
      • Setup Overview 132
      • Before You Begin 135
      • Administering User Accounts 137
        • Where User Accounts Are Stored 137
        • Creating User Accounts in Directory Domains on Mac OS X Server 137
        • Creating Read-Write LDAPv3 User Accounts 138
        • Changing User Accounts 138
        • Working With Read-Only User Accounts 139
      • Working With Basic Settings for Users 139
        • Defining User Names 139
        • Defining Short Names 140
        • Choosing Stable Short Names 141
        • Avoiding Duplicate Names 141
        • Avoiding Duplicate Short Names 143
        • Defining User IDs 144
        • Defining Passwords 145
        • Assigning Administrator Rights for a Server 145
        • Assigning Administrator Rights for a Directory Domain 145
      • Working With Advanced Settings for Users 146
        • Defining Login Settings 146
        • Defining a Password Validation Strategy 147
        • Editing Comments 147
      • Working With Group Settings for Users 147
        • Defining a User’s Primary Group 148
        • Adding a User to Groups 148
        • Removing a User From a Group 149
        • Reviewing a User’s Group Memberships 149
      • Working With Home Settings for Users 149
      • Working With Mail Settings for Users 150
        • Disabling a User’s Mail Service 150
        • Enabling Mail Service Account Options 150
        • Forwarding a User’s Mail 151
      • Working With Print Settings for Users 151
        • Disabling a User’s Access to Print Queues Enforcing Quotas 152
        • Enabling a User’s Access to Print Queues Enforcing Quotas 152
        • Deleting a User’s Print Quota for a Specific Queue 153
        • Restarting a User’s Print Quota 153
      • Working With Managed Users 154
      • Defining a Guest User 154
      • Deleting a User Account 154
      • Disabling a User Account 155
      • Administering Home Directories 155
        • Distributing Home Directories Across Multiple Servers 156
        • Setting Up Home Directories for Users Defined in Existing Directory Servers 157
        • Choosing a Protocol for Home Directories 160
        • Setting Up AFP Home Directory Share Points 160
        • Setting Up NFS Home Directory Share Points 160
        • Creating Home Directory Folders 161
        • Defining a User’s Home Directory 161
        • Defining No Home Directory 162
        • Defining a Home Directory for Local Users 162
        • Defining a Network Home Directory 163
        • Defining an Advanced Home Directory 163
        • Setting Disk Quotas 164
        • Defining Default Home Directories for New Users 165
        • Using Import Files to Create AFP Home Directories 165
        • Moving Home Directories 165
        • Deleting Home Directories 165
      • Administering Group Accounts 165
        • Where Group Accounts Are Stored 165
        • Creating Group Accounts in a Directory Domain on Mac OS X Server 165
        • Creating Read-Write LDAPv3 Group Accounts 166
        • Changing Group Accounts 167
        • Working With Read-Only Group Accounts 167
      • Working With Member Settings for Groups 167
        • Adding Users to a Group 168
        • Removing Users From a Group 168
        • Naming a Group 169
        • Defining a Group ID 170
      • Working With Volume Settings for Groups 170
        • Creating Group Directories 171
        • Automatically Creating Group Directories 171
        • Customizing Group Directory Settings 172
      • Working With Group and Computer Preferences 173
      • Deleting a Group Account 173
      • Finding User and Group Accounts 173
        • Listing Users and Groups in the Local Directory Domain 174
        • Listing Users and Groups in Search Path Directory Domains 174
        • Listing Users and Groups in Available Directory Domains 174
        • Refreshing User and Group Lists 175
        • Finding Specific Users and Groups in a List 175
        • Sorting User and Group Lists 175
      • Shortcuts for Working With Users and Groups 176
      • Editing Multiple Users Simultaneously 176
      • Using Presets 176
        • Creating a Preset for User Accounts 176
        • Creating a Preset for Group Accounts 177
        • Using Presets to Create New Accounts 177
        • Renaming Presets 178
        • Deleting a Preset 178
        • Changing Presets 178
      • Importing and Exporting User and Group Information 178
        • Understanding What You Can Import 179
        • Using Workgroup Manager to Import Users and Groups 179
        • Using Workgroup Manager to Export Users and Groups 181
        • Using dsimportexport to Import Users and Groups 181
        • Using dsimportexport to Export Users and Groups 184
        • Using XML Files Created With Mac OS X Server 10.1 or Earlier 186
        • Using XML Files Created With AppleShare IP 6.3 186
        • Using Character-Delimited Files 187
      • Understanding Password Validation 189
        • Contrasting Password Validation Options 191
        • The Authentication Authority Attribute 192
        • Choosing a Password 192
        • Migrating Passwords 193
        • Setting Up Password Validation Options 193
      • Storing Passwords in User Accounts 193
        • Enabling Basic Password Validation for a User 193
        • The Problem With Readable Passwords 194
      • Using a Password Server 195
        • Setting Up a Password Server 196
        • Enabling the Use of a Password Server for a User 196
        • Exporting Users With Password Server Passwords 197
      • Making a Password Server More Secure 197
      • Monitoring a Password Server 197
      • Using Kerberos 197
        • Understanding Kerberos 198
        • Integrating Mac OS X With a Kerberos Server 199
        • Enabling Kerberos Authentication for Mail 200
        • Enabling Kerberos Authentication for AFP 200
        • Enabling Kerberos Authentication for FTP 200
        • Enabling Kerberos Authentication for Login Window 200
        • Enabling Kerberos Authentication for Telnet 201
        • Solving Problems With Kerberos 201
      • Using LDAP Bind Authentication 201
      • Backing Up and Restoring Files 201
        • Backing Up a Password Server 201
        • Backing Up Root and Administrator User Accounts 202
      • Supporting Client Computers 202
      • Solving Problems 202
        • You Can’t Modify an Account Using Workgroup Manager 202
        • A Password Server User’s Password Can’t Be Modified 203
        • Users Can’t Log In or Authenticate 203
        • You Can’t Assign Server Administrator Privileges 204
        • Users Can’t Access Their Home Directories 204
        • MacOSX User in Shared NetInfo Domain Can’t Log In 204
        • Kerberos Users Can’t Authenticate 204
    • 4 Sharing 205
      • Privileges 205
      • Network Globe Contents 207
      • Setup Overview 208
      • Before You Begin 209
        • Organize Your Shared Information 210
        • Security Issues 210
      • Setting Up Sharing 211
        • Creating Share Points and Setting Privileges 211
        • Configuring Apple File Protocol (AFP) Share Points 212
        • Configuring Server Message Block (SMB) Share Points 212
        • Configuring File Transfer Protocol (FTP) Share Points 213
        • Sharing (Exporting) Items Using Network File System (NFS) 213
        • Automounting Share Points 214
        • Resharing NFS Mounts as AFP Share Points 215
      • Managing Sharing 215
        • Turning Sharing Off 216
        • Removing a Share Point 216
        • Browsing Server Disks 216
        • Viewing Share Points 216
        • Copying Privileges to Enclosed Items 217
        • Viewing Share Point Settings 217
        • Changing Share Point Owner and Privilege Settings 217
        • Changing the Protocols for a Share Point 218
        • Deleting an NFS Client from a Share Point 218
        • Creating a Drop Box 218
      • Supporting Client Computers 219
      • Solving Problems 219
    • 5 File Services 221
      • Before You Begin 221
        • Security Issues 222
        • Client Computer Requirements 223
      • Setup Overview 223
      • Apple File Service 224
        • Before You Set Up Apple File Service 225
        • Setting Up Apple File Service 225
        • Managing Apple File Service 229
      • Windows Services 235
        • Before You Set Up Windows Services 236
        • Setting Up Windows Services 237
        • Managing Windows Services 240
      • File Transfer Protocol (FTP) Service 244
        • Secure FTP Environment 244
        • Before You Set Up FTP Service 248
        • Setup Overview 249
        • Setting Up File Transfer Protocol (FTP) Service 250
        • Managing File Transfer Protocol (FTP) Service 252
      • Network File System (NFS) Service 256
        • Before You Set Up NFS Service 256
        • Setup Overview 256
        • Setting Up NFS Service 257
        • Managing NFS Service 258
      • Supporting Client Computers 259
        • Supporting Mac OS X Clients 259
        • Supporting Mac OS 8 and Mac OS 9 Clients 260
        • Supporting Windows Clients 261
        • Supporting NFS Clients 262
      • Solving Problems With File Services 263
        • Solving Problems With Apple File Service 263
        • Solving Problems With Windows Services 263
        • Solving Problems With File Transfer Protocol (FTP) 264
      • Where to Find More Information About File Services 265
    • 6 Client Management: Mac OS X 267
      • The User Experience 268
      • Before You Begin 269
      • Designating Administrators 270
      • Setting Up User Accounts 270
      • Setting Up Group Accounts 271
      • Setting Up Computer Accounts 271
        • Creating a Computer Account 272
        • Creating a Preset for Computer Accounts 273
        • Using a Computer Accounts Preset 273
        • Adding Computers to an Existing Computer Account 274
        • Editing Information About a Computer 274
        • Moving a Computer to a Different Computer Account 275
        • Deleting Computers From a Computer List 275
        • Deleting a Computer Account 276
        • Searching for Computer Accounts 276
      • Managing Guest Computers 277
      • Working With Access Settings 278
        • Restricting Access to Computers 278
        • Making Computers Available to All Users 279
        • Using Local User Accounts 279
      • Managing Portable Computers 280
        • Using Wireless Services 281
      • How Workgroup Manager Works With System Preferences 281
      • Managing Preferences 282
        • About the Preferences Cache 283
        • Updating the Managed Preferences Cache 283
        • Updating Cached Preferences Manually 283
        • How Preference Management Works 284
        • Preference Management Options 284
        • Managing User Preferences 285
        • Managing Group Preferences 286
        • Managing Computer Preferences 286
        • Editing Preferences for Multiple Records 287
        • Disabling Management for Specific Preferences 287
      • Managing Applications Preferences 288
        • Applications Items Preferences 288
        • Creating a List of Approved Applications 288
        • Preventing Users From Opening Applications on Local Volumes 289
        • Managing Application Access to Helper Applications 289
        • Applications System Preferences 290
        • Managing Access to System Preferences 290
        • Managing Classic Preferences 291
        • Classic Startup Preferences 291
        • Making Classic Start Up After a User Logs In 291
        • Choosing a Classic System Folder 291
        • Classic Advanced Preferences 292
        • Allowing Special Actions During Restart 292
        • Keeping Control Panels Secure 292
        • Preventing Access to the Chooser and Network Browser 293
        • Making Apple Menu Items Available in Classic 293
        • Adjusting Classic Sleep Settings 294
      • Managing Dock Preferences 294
        • Dock Display Preferences 294
        • Controlling the User’s Dock 294
        • Dock Items Preferences 295
        • Adding Items to a User’s Dock 295
        • Preventing Users From Adding Additional Dock Items 296
      • Managing Finder Preferences 296
        • Finder Preferences 296
        • Keeping Disks and Servers From Appearing on the User’s Desktop 296
        • Controlling the Behavior of Finder Windows 297
        • Making File Extensions Visible 298
        • Selecting the User Environment 298
        • Hiding the Alert Message When a User Empties the Trash 298
        • Finder Commands Preferences 299
        • Controlling User Access to an iDisk 299
        • Controlling User Access to Remote Servers 299
        • Controlling User Access to Folders 300
        • Preventing Users From Ejecting Disks 300
        • Hiding the Burn Disc Command in the Finder 301
        • Removing Restart and Shut Down Commands From the Apple Menu 301
        • Finder Views Preferences 302
        • Adjusting the Appearance and Arrangement of Desktop Items 302
        • Adjusting the Appearance of Finder Window Contents 303
      • Managing Internet Preferences 304
        • Setting Email Preferences 304
        • Setting Web Browser Preferences 304
      • Managing Login Preferences 305
        • Login Window Preferences 305
        • Deciding How a User Logs In 305
        • Helping Users Remember Passwords 306
        • Preventing Restarting or Shutting Down the Computer at Login 306
        • Login Items Preferences 307
        • Opening Applications Automatically After a User Logs In 307
      • Managing Media Access Preferences 308
        • Media Access Disc Media Preferences 308
        • Controlling Access to CDs and DVDs 308
        • Controlling the Use of Recordable Discs 309
        • Media Access Other Media Preferences 309
        • Controlling Access to Hard Drives and Disks 309
        • Ejecting Items Automatically When a User Logs Out 310
      • Managing Printing Preferences 311
        • Printer List Preferences 311
        • Making Printers Available to Users 311
        • Preventing Users From Modifying the Printer List 312
        • Restricting Access to Printers Connected to a Computer 312
        • Printer Access Preferences 313
        • Setting a Default Printer 313
        • Restricting Access to Printers 313
    • 7 Print Service 315
      • Setup Overview 317
      • Before You Begin 319
        • Security Issues 319
      • Setting Up Print Service 319
        • Starting Up and Configuring Print Service 319
        • Adding Printers 320
        • Configuring Print Queues 320
        • Adding Print Queues to Shared Open Directory Domains 321
      • Setting Up Print Quotas 322
        • Enforcing Quotas for a Print Queue 322
      • Setting Up Printing on Client Computers 323
        • Mac OS X Clients 323
        • Mac OS 8 and Mac OS 9 Clients 324
        • Windows Clients 325
        • UNIX Clients 325
      • Managing Print Service 325
        • Monitoring Print Service 325
        • Stopping Print Service 326
        • Setting Print Service to Start Automatically 326
      • Managing Print Queues 326
        • Monitoring a Print Queue 326
        • Putting a Print Queue on Hold (Stopping a Print Queue) 327
        • Restarting a Print Queue 327
        • Changing a Print Queue’s Configuration 327
        • Renaming a Print Queue 328
        • Selecting a Default Print Queue 329
        • Deleting a Print Queue 329
      • Managing Print Jobs 329
        • Monitoring a Print Job 329
        • Stopping a Print Job 330
        • Putting a Print Job on Hold 330
        • Restarting a Print Job 330
        • Holding All New Print Jobs 331
        • Setting the Default Priority for New Print Jobs 331
        • Changing a Print Job’s Priority 331
        • Deleting a Print Job 332
      • Managing Print Quotas 332
        • Suspending Quotas for a Print Queue 332
      • Managing Print Logs 332
        • Viewing Print Logs 333
        • Archiving Print Logs 333
        • Deleting Print Log Archives 334
      • Solving Problems 334
    • 8 Web Service 337
      • Before You Begin 338
        • Configuring Web Service 338
        • Providing Secure Transactions 338
        • Setting Up Web Sites 338
        • Hosting More Than One Web Site 339
        • Understanding WebDAV 339
        • Understanding Multipurpose Internet Mail Extension (MIME) 340
      • Setting Up Web Service for the First Time 341
      • Managing Web Service 342
        • Starting or Stopping Web Service 343
        • Starting Web Service Automatically 343
        • Modifying MIME Mappings 343
        • Setting Up Persistent Connections for Web Service 344
        • Limiting Simultaneous Connections for Web Service 344
        • Setting Up Proxy Caching for Web Service 345
        • Blocking Web Sites From Your Web Server Cache 345
        • Enabling SSL for Web Service 346
        • Setting Up the SSL Log for a Web Server 346
        • Setting Up WebDAV for a Web Server 346
        • Starting Tomcat 347
        • Checking Web Service Status 348
        • Viewing Logs of Web Service Activity 348
        • Setting Up Multiple IP Addresses for a Port 348
      • Managing Web Sites 349
        • Setting Up the Documents Folder for Your Web Site 349
        • Changing the Default Web Folder for a Site 349
        • Enabling a Web Site on a Server 350
        • Setting the Default Page for a Web Site 351
        • Changing the Access Port for a Web Site 351
        • Improving Performance of Static Web Sites 351
        • Enabling Access and Error Logs for a Web Site 352
        • Setting Up Directory Listing for a Web Site 352
        • Connecting to Your Web Site 353
        • Enabling WebDAV 353
        • Setting Access for WebDAV-Enabled Sites 354
        • Enabling a Common Gateway Interface (CGI) script 354
        • Enabling Server Side Includes (SSI) 355
        • Monitoring Web Sites 356
        • Setting Server Responses to MIME Types 356
        • Enabling SSL 357
        • Enabling PHP 357
      • WebMail 358
        • Enabling WebMail 359
        • Configuring WebMail 360
      • Setting Up Secure Sockets Layer (SSL) Service 361
        • Generating a Certificate Signing Request (CSR) for Your Server 361
        • Obtaining a Web Site Certificate 362
        • Installing the Certificate on Your Server 363
        • Enabling SSL for the Site 363
      • Solving Problems 364
        • Users Can’t Connect to a Web Site on Your Server 364
        • A Web Module Is Not Working as Expected 364
        • A CGI Will Not Run 364
      • Installing and Viewing Web Modules 365
        • Macintosh-Specific Modules 365
        • Open-Source Modules 366
        • MySQL 367
      • Where to Find More Information 367
    • 9 Mail Service 369
      • Mail Service Protocols 370
        • Post Office Protocol (POP) 370
        • Internet Message Access Protocol (IMAP) 371
        • Simple Mail Transfer Protocol (SMTP) 371
        • SMTP Alternatives: Sendmail and Postfix 371
      • How Mail Service Uses SSL 372
      • How Mail Service Uses DNS 372
      • Where Mail Is Stored 373
      • How User Account Settings Affect Mail Service 373
      • What Mail Service Can Do About Junk Mail 373
        • SMTP Authentication 374
        • Restricted SMTP Relay 374
        • SMTP Authentication and Restricted SMTP Relay Combinations 375
        • Rejected SMTP Servers 375
        • Mismatched DNS Name and IP Address 375
        • Blacklisted Servers 375
      • What Mail Service Doesn’t Do 376
      • Mail Service Configuration in the Local Directory 376
      • Overview of Mail Service Tools 376
      • Setup Overview 377
      • Overview of Ongoing Mail Service Management 379
      • Before You Begin 379
      • Working With General Settings for Mail Service 380
        • Starting and Stopping Mail Service 380
        • Starting Mail Service Automatically 380
        • Requiring or Allowing Kerberos Authentication 381
        • Adding or Removing Local Names for the Mail Server 381
        • Changing Protocol Settings for Mail Service 382
        • Monitoring and Archiving Mail 382
      • Working With Settings for Incoming Mail 382
        • Limiting Incoming Message Size 383
        • Deleting Email Automatically 383
        • Notifying Users Who Have New Mail 383
      • Working With Settings for Incoming POP Mail 384
        • Requiring Authenticated POP (APOP) 384
        • Changing the POP Response Name 384
        • Changing the POP Port Number 385
      • Working With Settings for Incoming IMAP Mail 385
        • Requiring Secure IMAP Authentication 385
        • Changing the IMAP Response Name 386
        • Using Case-Sensitive IMAP Folder Names 386
        • Controlling IMAP Connections Per User 386
        • Terminating Idle IMAP Connections 387
        • Changing the IMAP Port Number 387
      • Working With Settings for Outgoing Mail 387
        • Sending Nonlocal Mail 388
        • Sending Only Local Mail 388
        • Suspending Outgoing Mail Service 388
      • Working With Settings for SMTP Mail 389
        • Requiring SMTP Authentication 389
        • Sending SMTP Mail via Another Server 389
        • Changing the SMTP Response Names 390
        • Changing the Incoming SMTP Port Number 391
        • Changing the Outgoing SMTP Port Number 391
        • Enabling an Alternate Mail Transfer Agent 391
        • Starting Sendmail 392
      • Working With the Mail Database 393
        • Converting the Mail Database From an Earlier Version 393
        • Changing Where Mail Is Stored 394
        • Configuring Automatic Mail Deletion 394
        • Allowing Administrator Access to the Mail Database and Files 394
        • Cleaning Up the Mail Files 395
      • Working With Network Settings for Mail Service 396
        • Specifying DNS Lookup for Mail Service 396
        • Updating the DNS Cache in Mail Service 397
        • Changing Mail Service Timeouts 397
      • Limiting Junk Mail 398
        • Restricting SMTP Relay 398
        • Rejecting SMTP Connections From Specific Servers 399
        • Checking for Mismatched SMTP Server Name and IP Address 399
        • Rejecting Mail From Blacklisted Senders 401
        • Allowing SMTP Relay for a Backup Mail Server 401
        • Filtering SMTP Connections 401
      • Working With Undeliverable Mail 402
        • Forwarding Undeliverable Incoming Mail 402
        • Limiting Delivery Attempts in Mail Service 402
        • Sending Nondelivery Reports to Postmaster 403
      • Monitoring Mail Status 403
        • Viewing Overall Mail Service Activity 404
        • Viewing Connected Mail Users 404
        • Viewing Mail Accounts 404
        • Reviewing Mail Service Logs 404
        • Reclaiming Disk Space Used by Mail Service Logs 405
      • Supporting Mail Users 405
        • Configuring Mail Settings for User Accounts 405
        • Configuring Email Client Software 406
        • Creating Additional Email Addresses for a User 407
      • Performance Tuning 407
      • Backing Up and Restoring Mail Files 408
      • Where to Find More Information 408
        • Books 408
        • Internet 409
    • 10 Client Management: Mac OS 9 and OS 8 411
      • The User Experience 412
      • Before You Begin 414
        • Using Update Packages 417
        • Choosing a Language for Macintosh Manager Servers and Clients 417
        • Changing the Apple File Service Language Script 418
      • Inside Macintosh Manager 418
        • Macintosh Manager Security 418
        • About the Macintosh Manager Share Point 419
        • The Multi-User Items Folder 419
        • How Macintosh Manager Works With Directory Services 420
        • How Macintosh Manager Works With Home Directories 422
        • How Macintosh Manager Works With Preferences 422
        • Using NetBoot With Macintosh Manager 423
      • Setting Up Mac OS 9 or Mac OS 8 Managed Clients 424
      • Logging In to Macintosh Manager as an Administrator 425
        • Working With Macintosh Manager Preferences 426
      • Importing User Accounts 426
        • Applying User Settings With a Template 426
        • Importing All Users 427
        • Importing One or More Users 427
        • Collecting User Information in a Text File 428
        • Importing a List of Users From a Text File 428
        • Finding Specific Imported Users 429
        • Providing Quick Access to Unimported Users 429
        • Providing Access to Unimported Mac OS X Server Users 430
        • Setting Up a Guest User Account 431
      • Designating Administrators 431
        • Creating a Macintosh Manager Administrator 432
        • Creating a Workgroup Administrator 432
        • Changing Your Macintosh Manager Administrator Password 433
      • Working With User Settings 433
        • Changing Basic User Settings 433
        • Allowing Multiple Logins for Users 434
        • Granting a User System Access 434
        • Changing Advanced Settings 434
        • Limiting a User’s Disk Storage Space 435
        • Updating User Information From Mac OS X Server 435
      • Setting Up Workgroups 436
        • Types of Workgroup Environments 436
        • Creating a Workgroup 436
        • Using a Template to Apply Workgroup Settings 437
        • Creating Workgroups From an Existing Workgroup 437
        • Modifying an Existing Workgroup 438
      • Using Items Settings 438
        • Setting Up Shortcuts to Items for Finder Workgroups 438
        • Making Items Available to Panels or Restricted Finder Workgroups 439
        • Making Items Available to Individual Users 440
      • Using Privileges Settings 440
        • Protecting the System Folder and Applications Folder 440
        • Protecting the User’s Desktop 440
        • Preventing Applications From Altering Files 441
        • Preventing Access to FireWire Disks 441
        • Allowing Users to Play Audio CDs 441
        • Allowing Users to Take Screen Shots 442
        • Allowing Users to Open Applications From a Disk 442
        • Setting Access Privileges for Removable Media 442
        • Setting Access Privileges for Menu Items 443
      • Sharing Information in Macintosh Manager 443
        • Selecting Privileges for Workgroup Folders 444
        • Setting Up a Shared Workgroup Folder 444
        • Setting Up a Hand-In Folder 445
      • Using Volumes Settings 445
        • Connecting to AFP Servers 445
        • Providing Access to Server Volumes 446
      • Using Printers Settings 447
        • Making Printers Available to Workgroups 447
        • Setting a Default Printer 447
        • Restricting Access to Printers 448
        • Setting Print Quotas 448
        • Allowing Users to Exceed Print Quotas 448
        • Setting Up a System Access Printer 449
        • Using Options Settings 449
        • Choosing a Location for Storing Group Documents 450
        • Making Items Open at Startup 450
        • Checking for Email When Users Log In 451
        • Creating Login Messages for Workgroups 451
      • Setting Up Computer Lists 451
        • Creating Computer Lists 451
        • Setting Up the All Other Computers Account 452
        • Duplicating a Computer List 452
        • Creating a Computer List Template 453
        • Disabling Login for Computers 453
      • Using Workgroup Settings for Computers 454
        • Controlling Access to Computers 454
      • Using Control Settings 454
        • Disconnecting Computers Automatically to Minimize Network Traffic 454
        • Setting the Computer Clock Using the Server Clock 455
        • Using a Specific Hard Disk Name 455
        • Creating Email Addresses for Managed Users 455
        • Using Security Settings for Computers 456
        • Keeping Computers Secure If a User Forgets to Log Out 456
        • Allowing Access to All CDs and DVDs 457
        • Allowing Access to Specific CDs or DVDs 457
        • Choosing Computer Security Settings for Applications 457
        • Allowing Specific Applications to Be Opened by Other Applications 458
        • Allowing Users to Work Offline 458
        • Allowing Users to Switch Servers After Logging In 459
        • Allowing Users to Force-Quit Applications 459
        • Allowing Users to Disable Extensions 459
      • Using Computer Login Settings 460
        • Choosing How Users Log In 460
        • Creating Login Messages for Computers 460
        • Customizing Panel Names 460
      • Managing Portable Computers 461
        • Portable Computers With Network Users 461
        • Portable Computers With Local Users 461
        • Letting Users Check Out Computers 462
        • Using Wireless Services 462
      • Using Global Security Settings 462
        • Using Macintosh Manager Reports 463
        • Setting the Number of Items in a Report 463
        • Keeping the Administration Program Secure 463
        • Verifying Login Information Using Kerberos 464
        • Preventing Users From Changing Their Passwords 464
        • Allowing Administrators to Access User Accounts 464
        • Copying Preferences for Mac OS 8 Computers 464
      • Using Global CD-ROM Settings 465
      • Managing Preferences 466
        • Using Initial Preferences 466
        • Using Forced Preferences 467
        • Preserved Preferences 468
      • Solving Problems 470
        • I’ve Forgotten My Administrator Password 470
        • Administrators Can’t Get to the Finder After Logging In 470
        • Generic Icons Appear in the Items Pane 470
        • Selecting “Local User” in the Multiple Users Control Panel Doesn’t Work 471
        • Some Printers Don’t Appear in the Available Printers List 471
        • Users Can’t Log In to the Macintosh Manager Server 471
        • Users Can’t Log In as “Guest” on Japanese-Language Computers 471
        • A Client Computer Can’t Connect to the Server 471
        • The Server Doesn’t Appear in the AppleTalk List 472
        • The User’s Computer Freezes 472
        • Users Can’t Access Their Home Directories 472
        • Users Can’t Access Shared Files 472
        • Shared Workgroup Documents Don’t Appear in a Panels Environment 472
        • Applications Don’t Work Properly or Don’t Open 472
        • Users Can’t Drag and Drop Between Applications 473
        • Users Can’t Open Files From a Web Page 473
        • Sometimes the Right Application Doesn’t Open for Users 473
      • Where to Find More Information 473
    • 11 DHCP Service 475
      • Before You Set Up DHCP Service 475
        • Creating Subnets 476
        • Assigning IP Addresses Dynamically 476
        • Using Static IP Addresses 476
        • Locating the DHCP Server 476
        • Interacting With Other DHCP Servers 477
        • Assigning Reserved IP Addresses 477
      • Setting Up DHCP Service for the First Time 477
      • Managing DHCP Service 478
        • Starting and Stopping DHCP Service 478
        • Setting the Default DNS Server for DHCP Clients 479
        • Setting the LDAP Server for DHCP Clients 479
        • Setting Up Logs for DHCP Service 480
        • Deleting Subnets From DHCP Service 480
        • Changing Lease Times for Subnet Address Ranges 480
        • Monitoring DHCP Client Computers 481
        • Creating Subnets in DHCP Service 481
        • Changing Subnet Settings in DHCP Service 481
        • Setting DNS Options for a Subnet 482
        • Setting NetInfo Options for a Subnet 482
        • Disabling Subnets Temporarily 483
        • Viewing DHCP and NetBoot Client Lists 483
        • Viewing DHCP Log Entries 483
      • Solving Problems 484
      • Where to Find More Information 484
    • 12 NetBoot 485
      • Prerequisites 486
      • Capacity Planning 488
      • NetBoot Implementation 489
      • Security 493
      • NetBoot and AirPort 493
      • Setup Overview 493
      • Setting Up NetBoot on a Mac OS X Server 496
        • Creating a Mac OS X Disk Image 496
        • Installing Classic (Mac OS 9) on a Mac OS X Disk Image 497
        • Installing the Mac OS 9 Disk Image 497
        • Modifying the Mac OS 9 Disk Image 498
        • Specifying the Default NetBoot Disk Image 500
        • Setting Up Multiple Disk Images 500
        • Configuring NetBoot on Your Server 501
        • Starting NetBoot on Your Server 501
        • Enabling NetBoot Disk Images 502
      • Managing NetBoot 502
        • Turning Off NetBoot 502
        • Disabling Disk Images 502
        • Updating Mac OS X Disk Images 503
        • Monitoring the Status of Mac OS X NetBoot Clients 503
        • Monitoring the Status of Mac OS 9 NetBoot Clients 503
        • Filtering NetBoot Client Connections 503
      • Load Balancing 504
        • Enabling Server Selection 504
        • Using Share Points to Spread the Load 505
      • Supporting Client Computers 505
        • Updating the Startup Disk Control Panel 505
        • Setting Up “System-Less” Clients 506
        • Selecting a NetBoot Startup Image (from Mac OS X) 506
        • Selecting a NetBoot Startup Image (from Mac OS 9) 506
        • Starting Up Using the N Key 507
      • Solving Problems 507
    • 13 Network Install 509
      • Understanding Packages 509
      • Setup Overview 510
      • Setting Up Network Install 511
        • Creating a Network Install Disk Image 511
        • Creating Custom Packages for Network Install 512
        • Including Packages in an Installer Disk Image 512
        • Enabling Installer Disk Images 513
    • 14 DNS Service 515
      • Before You Set Up DNS Service 516
        • DNS and BIND 516
        • Setting Up Multiple Name Servers 516
        • Using DNS With Mail Service 516
      • Setting Up DNS Service for the First Time 517
      • Managing DNS Service 518
        • Starting and Stopping DNS Service 518
        • Viewing DNS Log Entries 519
        • Viewing DNS Service Status 519
        • Viewing DNS Usage Statistics 519
      • Inside DNS Service (Configuring BIND) 520
        • What Is BIND? 520
        • BIND on Mac OS X Server 520
        • Practical Example 521
        • Load Distribution With Round Robin 523
      • Setting Up a Private TCP/IP Network 523
      • Where to Find More Information 524
    • 15 Firewall Service 525
      • Before You Set Up Firewall Service 527
        • What Is a Filter? 527
        • Using Address Ranges 528
        • IP Address Precedence 529
        • Multiple IP Addresses 529
        • Practical Examples 529
      • Setting Up Firewall Service for the First Time 530
      • Managing Firewall Service 531
        • Starting and Stopping Firewall Service 531
        • Setting Firewall Service to Start Automatically 531
        • Editing IP Filters 532
        • Creating an IP Filter 532
        • Searching for IP Filters 533
        • Viewing the Firewall Log 533
        • Configuring Firewall Service 533
        • Setting Up Logs for Firewall Service 534
        • Viewing Denied Packets 535
        • Filtering UDP Ports in Firewall Service 535
        • Blocking Multicast Services in Firewall Service 536
        • Allowing NetInfo Access to Certain IP Addresses 536
        • Changing the Any Port (Default) Filter 537
        • Preventing Denial-of-Service Attacks 537
        • Creating IP Filter Rules Using ipfw 538
      • Port Reference 540
      • Solving Problems 543
        • You Can’t Access the Server Over TCP/IP 543
        • You Can’t Locate a Specific Filter 543
      • Where to Find More Information 543
    • 16 SLP DA Service 545
      • SLP DA Considerations 545
      • Before You Begin 545
      • Managing Service Location Protocol (SLP) Directory Agent (DA) Service 547
        • Starting and Stopping SLP DA Service 547
        • Viewing Scopes and Registered Services in SLP 547
        • Creating New Scopes in SLP DA Service 548
        • Registering a Service With SLP DA 548
        • Deregistering Services in SLP DA Service 549
        • Setting Up Logs for SLP DA Service 549
        • Logging Debugging Messages in SLP DA Service 549
        • Viewing SLP DA Log Entries 549
        • Using the Attributes List 550
      • Where to Find More Information 550
    • 17 Tools for Advanced Users 551
      • Terminal 552
        • Using the Terminal Application 552
        • Understanding UNIX Command-Line Structure 553
      • Secure Shell (SSH) Command 553
        • Enabling and Disabling SSH Access 553
        • Opening an SSH Session 553
        • Executing Commands in an SSH Session 554
        • Closing an SSH Session 554
        • Understanding Key Fingerprints 554
      • dsimportexport 555
      • Log Rolling Scripts 555
      • diskspacemonitor 556
      • diskutil 557
      • installer 558
        • Using installer 558
        • Full Operating System Installation 559
      • softwareupdate 561
      • systemsetup 561
        • Working With Server Identity and Startup 561
        • Working With Date and Time Preferences 562
        • Working With Sleep Preferences 562
      • networksetup 562
        • Reverting to Previous Network Settings 563
        • Retrieving Your Server’s Network Configuration 563
        • Configuring TCP/IP Settings 564
        • Configuring DNS Servers and Search Domains 564
        • Managing Network Services 564
        • Designating Proxy Servers 565
      • MySQL Manager 565
      • Simple Network Management Protocol (SNMP) Tools 566
      • diskKeyFinder 566
      • Enabling IP Failover 567
        • Requirements 567
        • Failover Operation 567
        • Enabling IP Failover 569
        • Configuring IP Failover 569
    • Appendix A Open Directory Data Requirements 573
      • User Data That Mac OS X Server Uses 573
      • Standard Data Types in User Records 574
      • Format of the MailAttribute Data Type 577
      • Standard Data Types in Group Records 580
    • Glossary 581
    • Index 591
  • How to Use This Guide
    • What’s Included in This Guide
    • Using This Guide
    • Setting Up Mac OS X Server for the First Time
    • Getting Help for Everyday Management Tasks
    • Getting Additional Information
  • Administering Your Server
    • Highlighting Key Features
      • Ease of Setup and Administration
      • Networking and Security
      • File and Printer Sharing
      • Open Directory Services
      • Comprehensive Management of Macintosh Workgroups
      • High Availability
      • Extensive Internet and Web Services
    • Highlighting Individual Services
      • Directory Services
      • File Services
      • Print Service
      • Web Service
      • Mail Service
      • Macintosh Workgroup Management
      • Network Services
      • QuickTime Streaming Service
    • Highlighting Server Applications
      • Administering a Server From Different Computers
      • Server Assistant
      • Open Directory Assistant
      • Directory Access
      • Workgroup Manager
      • Server Settings
      • Server Status
      • Macintosh Manager
      • NetBoot Administration Tools
      • Network Install Administration Application
      • Server Monitor
      • Streaming Server Admin
    • Where to Find More Information
      • If You’re New to Server and Network Management
      • If You’re an Experienced Server Administrator
  • Directory Services
    • Storage for Data Needed by Mac OS X
    • A Historical Perspective
      • Data Consolidation
      • Data Distribution
    • Uses of Directory Data
    • Inside a Directory Domain
    • Discovery of Network Services
    • Directory Domain Protocols
    • Local and Shared Directory Domains
      • Local Data
      • Shared Data
      • Shared Data in Existing Directory Domains
    • Directory Domain Hierarchies
      • Two-Level Hierarchies
      • More Complex Hierarchies
    • Search Policies for Directory Domain Hierarchies
      • The Automatic Search Policy
      • Custom Search Policies
    • Directory Domain Planning
      • General Planning Guidelines
      • Controlling Data Accessibility
      • Simplifying Changes to Data in Directory Domains
      • Identifying Computers for Hosting Shared Domains
    • Open Directory Password Server
      • Authentication With a Password Server
      • Network Authentication Protocols
      • Password Server Database
      • Password Server Security
    • Overview of Directory Services Tools
    • Setup Overview
      • Step 1: Before you begin, do some planning
      • Step 2: Set up Open Directory domains and Password Servers
      • Step 3: Set up access to directory domains on other servers
      • Step 4: Implement search policies
      • Step 5: Configure Open Directory service protocols (optional)
    • Before You Begin
    • Setting Up an Open Directory Domain and Password Server
    • Deleting a Shared Open Directory Domain
    • Configuring Open Directory Service Protocols
    • Setting Up Search Policies
      • Using the Automatic Search Policy
      • Defining a Custom Search Policy
      • Using a Local Directory Search Policy
    • Changing Basic LDAPv3 Settings
      • Enabling or Disabling Use of DHCP-Supplied LDAPv3 Servers
      • Showing or Hiding Available LDAPv3 Configurations
    • Configuring Access to Existing LDAPv3 Servers
      • Creating an LDAPv3 Configuration
      • Editing an LDAPv3 Configuration
      • Duplicating an LDAPv3 Configuration
      • Deleting an LDAPv3 Configuration
      • Changing an LDAPv3 Configuration’s Connection Settings
      • Configuring LDAPv3 Search Bases and Mappings
      • Populating LDAPv3 Domains With Data for MacOSX
    • Using an Active Directory Server
      • Creating an Active Directory Server Configuration
      • Setting Up an Active Directory Server
      • Populating Active Directory Domains With Data for MacOSX
    • Accessing an Existing LDAPv2 Directory
      • Setting Up an LDAPv2 Server
      • Creating an LDAPv2 Server Configuration
      • Changing LDAPv2 Server Access Settings
      • Editing LDAPv2 Search Bases and Data Mappings
    • Using NetInfo Domains
      • Creating a Shared NetInfo Domain
      • Configuring NetInfo Binding
      • Adding a Machine Record to a Parent NetInfo Domain
      • Configuring Static Ports for Shared NetInfo Domains
      • Viewing and Changing NetInfo Data
      • Using UNIX Utilities for NetInfo
    • Using Berkeley Software Distribution (BSD) Configuration Files
      • Mapping BSD Configuration Files
      • Setting Up Data in BSD Configuration Files
    • Configuring Directory Access on a Remote Computer
    • Monitoring Directory Services
    • Backing Up and Restoring Directory Services Files
  • Users and Groups
    • How User Accounts Are Used
      • Authentication
      • Password Validation
      • Information Access Control
      • Administration Privileges
      • Home Directories
      • Mail Settings
      • Resource Usage
      • User Preferences
    • How Group Accounts Are Used
      • Information Access Control
      • Group Directories
      • Workgroups
      • Computer Access
    • Kinds of Users and Groups
      • Users and Managed Users
      • Groups, Primary Groups, and Workgroups
      • Administrators
      • Guest Users
      • Predefined Accounts
    • Setup Overview
      • Step 1: Before you begin, do some planning
      • Step 2: Set up directory domains in which user and group accounts will reside
      • Step 3: Configure server search policies so servers can find user and group accounts
      • Step 4: Set up share points for home directories
      • Step 5: Set up share points for group directories
      • Step 6: Create users
      • Step 7: Create groups
      • Step 8: Set Up Client Computers
      • Step 9: Review user and group account information as needed
      • Step 10: Update users and groups as needed
      • Step 11: Perform ongoing user and group account maintenance
    • Before You Begin
    • Administering User Accounts
      • Where User Accounts Are Stored
      • Creating User Accounts in Directory Domains on MacOSX Server
      • Creating Read-Write LDAPv3 User Accounts
      • Changing User Accounts
      • Working With Read-Only User Accounts
    • Working With Basic Settings for Users
      • Defining User Names
      • Defining Short Names
      • Choosing Stable Short Names
      • Avoiding Duplicate Names
      • Avoiding Duplicate Short Names
      • Defining User IDs
      • Defining Passwords
      • Assigning Administrator Rights for a Server
      • Assigning Administrator Rights for a Directory Domain
    • Working With Advanced Settings for Users
      • Defining Login Settings
      • Defining a Password Validation Strategy
      • Editing Comments
    • Working With Group Settings for Users
      • Defining a User’s Primary Group
      • Adding a User to Groups
      • Removing a User From a Group
      • Reviewing a User’s Group Memberships
    • Working With Home Settings for Users
    • Working With Mail Settings for Users
      • Disabling a User’s Mail Service
      • Enabling Mail Service Account Options
      • Forwarding a User’s Mail
    • Working With Print Settings for Users
      • Disabling a User’s Access to Print Queues Enforcing Quotas
      • Enabling a User’s Access to Print Queues Enforcing Quotas
      • Deleting a User’s Print Quota for a Specific Queue
      • Restarting a User’s Print Quota
    • Working With Managed Users
    • Defining a Guest User
    • Deleting a User Account
    • Disabling a User Account
    • Administering Home Directories
      • Distributing Home Directories Across Multiple Servers
      • Setting Up Home Directories for Users Defined in Existing Directory Servers
      • Choosing a Protocol for Home Directories
      • Setting Up AFP Home Directory Share Points
      • Setting Up NFS Home Directory Share Points
      • Creating Home Directory Folders
      • Defining a User’s Home Directory
      • Defining No Home Directory
      • Defining a Home Directory for Local Users
      • Defining a Network Home Directory
      • Defining an Advanced Home Directory
      • Setting Disk Quotas
      • Defining Default Home Directories for New Users
      • Using Import Files to Create AFP Home Directories
      • Moving Home Directories
      • Deleting Home Directories
    • Administering Group Accounts
      • Where Group Accounts Are Stored
      • Creating Group Accounts in a Directory Domain on Mac OS X Server
      • Creating Read-Write LDAPv3 Group Accounts
      • Changing Group Accounts
      • Working With Read-Only Group Accounts
    • Working With Member Settings for Groups
      • Adding Users to a Group
      • Removing Users From a Group
      • Naming a Group
      • Defining a Group ID
    • Working With Volume Settings for Groups
      • Creating Group Directories
      • Automatically Creating Group Directories
      • Customizing Group Directory Settings
    • Working With Group and Computer Preferences
    • Deleting a Group Account
    • Finding User and Group Accounts
      • Listing Users and Groups in the Local Directory Domain
      • Listing Users and Groups in Search Path Directory Domains
      • Listing Users and Groups in Available Directory Domains
      • Refreshing User and Group Lists
      • Finding Specific Users and Groups in a List
      • Sorting User and Group Lists
    • Shortcuts for Working With Users and Groups
    • Editing Multiple Users Simultaneously
    • Using Presets
      • Creating a Preset for User Accounts
      • Creating a Preset for Group Accounts
      • Using Presets to Create New Accounts
      • Renaming Presets
      • Deleting a Preset
      • Changing Presets
    • Importing and Exporting User and Group Information
      • Understanding What You Can Import
      • Using Workgroup Manager to Import Users and Groups
      • Using Workgroup Manager to Export Users and Groups
      • Using dsimportexport to Import Users and Groups
      • Using dsimportexport to Export Users and Groups
      • Using XML Files Created With Mac OS X Server 10.1 or Earlier
      • Using XML Files Created With AppleShare IP 6.3
      • Using Character-Delimited Files
    • Understanding Password Validation
      • Contrasting Password Validation Options
      • The Authentication Authority Attribute
      • Choosing a Password
      • Migrating Passwords
      • Setting Up Password Validation Options
    • Storing Passwords in User Accounts
      • Enabling Basic Password Validation for a User
      • The Problem With Readable Passwords
    • Using a Password Server
      • Setting Up a Password Server
      • Enabling the Use of a Password Server for a User
      • Exporting Users With Password Server Passwords
    • Making a Password Server More Secure
    • Monitoring a Password Server
    • Using Kerberos
      • Understanding Kerberos
      • Integrating Mac OS X With a Kerberos Server
      • Enabling Kerberos Authentication for Mail
      • Enabling Kerberos Authentication for AFP
      • Enabling Kerberos Authentication for FTP
      • Enabling Kerberos Authentication for Login Window
      • Enabling Kerberos Authentication for Telnet
      • Solving Problems With Kerberos
    • Using LDAP Bind Authentication
    • Backing Up and Restoring Files
      • Backing Up a Password Server
      • Backing Up Root and Administrator User Accounts
    • Supporting Client Computers
    • Solving Problems
      • You Can’t Modify an Account Using Workgroup Manager
      • A Password Server User’s Password Can’t Be Modified
      • Users Can’t Log In or Authenticate
      • You Can’t Assign Server Administrator Privileges
      • Users Can’t Access Their Home Directories
      • MacOSX User in Shared NetInfo Domain Can’t Log In
      • Kerberos Users Can’t Authenticate
  • Sharing
    • Privileges
    • Network Globe Contents
    • Setup Overview
      • Step 1: Read “Before You Begin”
      • Step 2: Locate or create the information you want to share
      • Step 3: Designate share points and set privileges
      • Step 4: Turn file services on
    • Before You Begin
      • Organize Your Shared Information
      • Security Issues
    • Setting Up Sharing
      • Creating Share Points and Setting Privileges
      • Configuring Apple File Protocol (AFP) Share Points
      • Configuring Server Message Block (SMB) Share Points
      • Configuring File Transfer Protocol (FTP) Share Points
      • Sharing (Exporting) Items Using Network File System (NFS)
      • Automounting Share Points
      • Resharing NFS Mounts as AFP Share Points
    • Managing Sharing
      • Turning Sharing Off
      • Removing a Share Point
      • Browsing Server Disks
      • Viewing Share Points
      • Copying Privileges to Enclosed Items
      • Viewing Share Point Settings
      • Changing Share Point Owner and Privilege Settings
      • Changing the Protocols for a Share Point
      • Deleting an NFS Client from a Share Point
      • Creating a Drop Box
    • Supporting Client Computers
    • Solving Problems
  • File Services
    • Before You Begin
      • Security Issues
      • Client Computer Requirements
    • Setup Overview
      • Step 1: Read “Before You Begin”
      • Step 2: Define users
      • Step 3: Create share points and set privileges
      • Step 4: Configure and start up file services
      • Step 5: Check client configurations
    • Apple File Service
      • Before You Set Up Apple File Service
      • Setting Up Apple File Service
      • Managing Apple File Service
    • Windows Services
      • Before You Set Up Windows Services
      • Setting Up Windows Services
      • Managing Windows Services
    • File Transfer Protocol (FTP) Service
      • Secure FTP Environment
      • Before You Set Up FTP Service
      • Setup Overview
      • Step 1: Before You Begin
      • Step 2: Configure FTP General settings
      • Step 3: Configure FTP Access settings
      • Step 4: Configure FTP Logging settings
      • Step 5: Configure FTP Advanced settings
      • Step 6: Create an “uploads” folder for FTP users (optional)
      • Step 7: Create share points and share them using FTP
      • Step 8: Start FTP service
      • Setting Up File Transfer Protocol (FTP) Service
      • Managing File Transfer Protocol (FTP) Service
    • Network File System (NFS) Service
      • Before You Set Up NFS Service
      • Setup Overview
      • Step 1: Before You Begin
      • Step 2: Configure NFS settings
      • Step 3: Create share points and share them using NFS
      • Setting Up NFS Service
      • Managing NFS Service
    • Supporting Client Computers
      • Supporting Mac OS X Clients
      • Supporting Mac OS 8 and Mac OS 9 Clients
      • Supporting Windows Clients
      • Supporting NFS Clients
    • Solving Problems With File Services
      • Solving Problems With Apple File Service
      • Solving Problems With Windows Services
      • Solving Problems With File Transfer Protocol (FTP)
    • Where to Find More Information About File Services
  • Client Management: Mac OS X
    • The User Experience
    • Before You Begin
      • Step 1: Make sure your computers meet minimum requirements
      • Step 2: Create a shared domain to store account information
      • Step 3: Make sure users and their home directories exist
    • Designating Administrators
    • Setting Up User Accounts
    • Setting Up Group Accounts
    • Setting Up Computer Accounts
      • Creating a Computer Account
      • Creating a Preset for Computer Accounts
      • Using a Computer Accounts Preset
      • Adding Computers to an Existing Computer Account
      • Editing Information About a Computer
      • Moving a Computer to a Different Computer Account
      • Deleting Computers From a Computer List
      • Deleting a Computer Account
      • Searching for Computer Accounts
    • Managing Guest Computers
    • Working With Access Settings
      • Restricting Access to Computers
      • Making Computers Available to All Users
      • Using Local User Accounts
    • Managing Portable Computers
      • Using Wireless Services
    • How Workgroup Manager Works With System Preferences
    • Managing Preferences
      • About the Preferences Cache
      • Updating the Managed Preferences Cache
      • Updating Cached Preferences Manually
      • How Preference Management Works
      • Preference Management Options
      • Managing User Preferences
      • Managing Group Preferences
      • Managing Computer Preferences
      • Editing Preferences for Multiple Records
      • Disabling Management for Specific Preferences
    • Managing Applications Preferences
      • Applications Items Preferences
      • Creating a List of Approved Applications
      • Preventing Users From Opening Applications on Local Volumes
      • Managing Application Access to Helper Applications
      • Applications System Preferences
      • Managing Access to System Preferences
      • Managing Classic Preferences
      • Classic Startup Preferences
      • Making Classic Start Up After a User Logs In
      • Choosing a Classic System Folder
      • Classic Advanced Preferences
      • Allowing Special Actions During Restart
      • Keeping Control Panels Secure
      • Preventing Access to the Chooser and Network Browser
      • Making Apple Menu Items Available in Classic
      • Adjusting Classic Sleep Settings
    • Managing Dock Preferences
      • Dock Display Preferences
      • Controlling the User’s Dock
      • Dock Items Preferences
      • Adding Items to a User’s Dock
      • Preventing Users From Adding Additional Dock Items
    • Managing Finder Preferences
      • Finder Preferences
      • Keeping Disks and Servers From Appearing on the User’s Desktop
      • Controlling the Behavior of Finder Windows
      • Making File Extensions Visible
      • Selecting the User Environment
      • Hiding the Alert Message When a User Empties the Trash
      • Finder Commands Preferences
      • Controlling User Access to an iDisk
      • Controlling User Access to Remote Servers
      • Controlling User Access to Folders
      • Preventing Users From Ejecting Disks
      • Hiding the Burn Disc Command in the Finder
      • Removing Restart and Shut Down Commands From the Apple Menu
      • Finder Views Preferences
      • Adjusting the Appearance and Arrangement of Desktop Items
      • Adjusting the Appearance of Finder Window Contents
    • Managing Internet Preferences
      • Setting Email Preferences
      • Setting Web Browser Preferences
    • Managing Login Preferences
      • Login Window Preferences
      • Deciding How a User Logs In
      • Helping Users Remember Passwords
      • Preventing Restarting or Shutting Down the Computer at Login
      • Login Items Preferences
      • Opening Applications Automatically After a User Logs In
    • Managing Media Access Preferences
      • Media Access Disc Media Preferences
      • Controlling Access to CDs and DVDs
      • Controlling the Use of Recordable Discs
      • Media Access Other Media Preferences
      • Controlling Access to Hard Drives and Disks
      • Ejecting Items Automatically When a User Logs Out
    • Managing Printing Preferences
      • Printer List Preferences
      • Making Printers Available to Users
      • Preventing Users From Modifying the Printer List
      • Restricting Access to Printers Connected to a Computer
      • Printer Access Preferences
      • Setting a Default Printer
      • Restricting Access to Printers
  • Print Service
    • Setup Overview
      • Step 1: Read “Before You Begin”
      • Step 2: Start up and configure print service
      • Step 3: Add printers and configure their print queues
      • Step 4: (Optional) Add print queues to a shared Open Directory domain
      • Step 5: (Optional) Set print quotas for users
      • Step 6: Set up printing on client computers
    • Before You Begin
      • Security Issues
    • Setting Up Print Service
      • Starting Up and Configuring Print Service
      • Adding Printers
      • Configuring Print Queues
      • Adding Print Queues to Shared Open Directory Domains
    • Setting Up Print Quotas
      • Enforcing Quotas for a Print Queue
    • Setting Up Printing on Client Computers
      • Mac OS X Clients
      • Mac OS 8 and Mac OS 9 Clients
      • Windows Clients
      • UNIX Clients
    • Managing Print Service
      • Monitoring Print Service
      • Stopping Print Service
      • Setting Print Service to Start Automatically
    • Managing Print Queues
      • Monitoring a Print Queue
      • Putting a Print Queue on Hold (Stopping a Print Queue)
      • Restarting a Print Queue
      • Changing a Print Queue’s Configuration
      • Renaming a Print Queue
      • Selecting a Default Print Queue
      • Deleting a Print Queue
    • Managing Print Jobs
      • Monitoring a Print Job
      • Stopping a Print Job
      • Putting a Print Job on Hold
      • Restarting a Print Job
      • Holding All New Print Jobs
      • Setting the Default Priority for New Print Jobs
      • Changing a Print Job’s Priority
      • Deleting a Print Job
    • Managing Print Quotas
      • Suspending Quotas for a Print Queue
    • Managing Print Logs
      • Viewing Print Logs
      • Archiving Print Logs
      • Deleting Print Log Archives
    • Solving Problems
  • Web Service
    • Before You Begin
      • Configuring Web Service
      • Providing Secure Transactions
      • Setting Up Web Sites
      • Hosting More Than One Web Site
      • Understanding WebDAV
      • Understanding Multipurpose Internet Mail Extension (MIME)
    • Setting Up Web Service for the First Time
      • Step 1: Set up the Documents folder
      • Step 2: Create a default page
      • Step 3: Assign privileges for your Web site
      • Step 4: Configure Web service
      • Step 5: Start Web service
      • Step 6: Connect to your Web site
    • Managing Web Service
      • Starting or Stopping Web Service
      • Starting Web Service Automatically
      • Modifying MIME Mappings
      • Setting Up Persistent Connections for Web Service
      • Limiting Simultaneous Connections for Web Service
      • Setting Up Proxy Caching for Web Service
      • Blocking Web Sites From Your Web Server Cache
      • Enabling SSL for Web Service
      • Setting Up the SSL Log for a Web Server
      • Setting Up WebDAV for a Web Server
      • Starting Tomcat
      • Checking Web Service Status
      • Viewing Logs of Web Service Activity
      • Setting Up Multiple IP Addresses for a Port
    • Managing Web Sites
      • Setting Up the Documents Folder for Your Web Site
      • Changing the Default Web Folder for a Site
      • Enabling a Web Site on a Server
      • Setting the Default Page for a Web Site
      • Changing the Access Port for a Web Site
      • Improving Performance of Static Web Sites
      • Enabling Access and Error Logs for a Web Site
      • Setting Up Directory Listing for a Web Site
      • Connecting to Your Web Site
      • Enabling WebDAV
      • Setting Access for WebDAV-Enabled Sites
      • Enabling a Common Gateway Interface (CGI) script
      • Enabling Server Side Includes (SSI)
      • Monitoring Web Sites
      • Setting Server Responses to MIME Types
      • Enabling SSL
      • Enabling PHP
    • WebMail
      • Enabling WebMail
      • Configuring WebMail
    • Setting Up Secure Sockets Layer (SSL) Service
      • Generating a Certificate Signing Request (CSR) for Your Server
      • Obtaining a Web Site Certificate
      • Installing the Certificate on Your Server
      • Enabling SSL for the Site
    • Solving Problems
      • Users Can’t Connect to a Web Site on Your Server
      • A Web Module Is Not Working as Expected
      • A CGI Will Not Run
    • Installing and Viewing Web Modules
      • Macintosh-Specific Modules
      • Open-Source Modules
      • MySQL
    • Where to Find More Information
  • Mail Service
    • Mail Service Protocols
      • Post Office Protocol (POP)
      • Internet Message Access Protocol (IMAP)
      • Simple Mail Transfer Protocol (SMTP)
      • SMTP Alternatives: Sendmail and Postfix
    • How Mail Service Uses SSL
    • How Mail Service Uses DNS
    • Where Mail Is Stored
    • How User Account Settings Affect Mail Service
    • What Mail Service Can Do About Junk Mail
      • SMTP Authentication
      • Restricted SMTP Relay
      • SMTP Authentication and Restricted SMTP Relay Combinations
      • Rejected SMTP Servers
      • Mismatched DNS Name and IP Address
      • Blacklisted Servers
    • What Mail Service Doesn’t Do
    • Mail Service Configuration in the Local Directory
    • Overview of Mail Service Tools
    • Setup Overview
      • Step 1: Before you begin, do some planning
      • Step 2: Set up MX records
      • Step 3: Start mail service
      • Step 4: Configure incoming mail service
      • Step 5: Configure outgoing mail service
      • Step 6: Configure additional settings for mail service
      • Step 7: Set up accounts for mail users
      • Step 8: Create a postmaster account
      • Step 9: Set up each user’s mail client software
    • Overview of Ongoing Mail Service Management
    • Before You Begin
    • Working With General Settings for Mail Service
      • Starting and Stopping Mail Service
      • Starting Mail Service Automatically
      • Requiring or Allowing Kerberos Authentication
      • Adding or Removing Local Names for the Mail Server
      • Changing Protocol Settings for Mail Service
      • Monitoring and Archiving Mail
    • Working With Settings for Incoming Mail
      • Limiting Incoming Message Size
      • Deleting Email Automatically
      • Notifying Users Who Have New Mail
    • Working With Settings for Incoming POP Mail
      • Requiring Authenticated POP (APOP)
      • Changing the POP Response Name
      • Changing the POP Port Number
    • Working With Settings for Incoming IMAP Mail
      • Requiring Secure IMAP Authentication
      • Changing the IMAP Response Name
      • Using Case-Sensitive IMAP Folder Names
      • Controlling IMAP Connections Per User
      • Terminating Idle IMAP Connections
      • Changing the IMAP Port Number
    • Working With Settings for Outgoing Mail
      • Sending Nonlocal Mail
      • Sending Only Local Mail
      • Suspending Outgoing Mail Service
    • Working With Settings for SMTP Mail
      • Requiring SMTP Authentication
      • Sending SMTP Mail via Another Server
      • Changing the SMTP Response Names
      • Changing the Incoming SMTP Port Number
      • Changing the Outgoing SMTP Port Number
      • Enabling an Alternate Mail Transfer Agent
      • Starting Sendmail
    • Working With the Mail Database
      • Converting the Mail Database From an Earlier Version
      • Changing Where Mail Is Stored
      • Configuring Automatic Mail Deletion
      • Allowing Administrator Access to the Mail Database and Files
      • Cleaning Up the Mail Files
    • Working With Network Settings for Mail Service
      • Specifying DNS Lookup for Mail Service
      • Updating the DNS Cache in Mail Service
      • Changing Mail Service Timeouts
    • Limiting Junk Mail
      • Restricting SMTP Relay
      • Rejecting SMTP Connections From Specific Servers
      • Checking for Mismatched SMTP Server Name and IP Address
      • Rejecting Mail From Blacklisted Senders
      • Allowing SMTP Relay for a Backup Mail Server
      • Filtering SMTP Connections
    • Working With Undeliverable Mail
      • Forwarding Undeliverable Incoming Mail
      • Limiting Delivery Attempts in Mail Service
      • Sending Nondelivery Reports to Postmaster
    • Monitoring Mail Status
      • Viewing Overall Mail Service Activity
      • Viewing Connected Mail Users
      • Viewing Mail Accounts
      • Reviewing Mail Service Logs
      • Reclaiming Disk Space Used by Mail Service Logs
    • Supporting Mail Users
      • Configuring Mail Settings for User Accounts
      • Configuring Email Client Software
      • Creating Additional Email Addresses for a User
    • Performance Tuning
    • Backing Up and Restoring Mail Files
    • Where to Find More Information
      • Books
      • Internet
  • Client Management: Mac OS 9 and OS 8
    • The User Experience
    • Before You Begin
      • Step 1: Make sure computers meet minimum requirements
      • Step 2: Install Macintosh Manager administrator software
      • Step 3: Set up client computers
      • Using Update Packages
      • Choosing a Language for Macintosh Manager Servers and Clients
      • Changing the Apple File Service Language Script
      • Step 4: Make sure you’ve set up users and their home directories
    • Inside Macintosh Manager
      • Macintosh Manager Security
      • About the Macintosh Manager Share Point
      • The Multi-User Items Folder
      • How Macintosh Manager Works With Directory Services
      • How Macintosh Manager Works With Home Directories
      • How Macintosh Manager Works With Preferences
      • Using NetBoot With Macintosh Manager
    • Setting Up Mac OS 9 or Mac OS 8 Managed Clients
      • Step 1: Make sure Macintosh Manager services are available
      • Step 2: Log in to Macintosh Manager Admin as an administrator
      • Step 3: Import user accounts
      • Step 4: Designate a Macintosh Manager administrator
      • Step 5: Designate workgroup administrators
      • Step 6: Create workgroups for users
      • Step 7: Create computer lists
      • Step 8: Select global settings and set up managed preferences folders
    • Logging In to Macintosh Manager as an Administrator
      • Working With Macintosh Manager Preferences
    • Importing User Accounts
      • Applying User Settings With a Template
      • Importing All Users
      • Importing One or More Users
      • Collecting User Information in a Text File
      • Importing a List of Users From a Text File
      • Finding Specific Imported Users
      • Providing Quick Access to Unimported Users
      • Providing Access to Unimported Mac OS X Server Users
      • Setting Up a Guest User Account
    • Designating Administrators
      • Creating a Macintosh Manager Administrator
      • Creating a Workgroup Administrator
      • Changing Your Macintosh Manager Administrator Password
    • Working With User Settings
      • Changing Basic User Settings
      • Allowing Multiple Logins for Users
      • Granting a User System Access
      • Changing Advanced Settings
      • Limiting a User’s Disk Storage Space
      • Updating User Information From Mac OS X Server
    • Setting Up Workgroups
      • Types of Workgroup Environments
      • Creating a Workgroup
      • Using a Template to Apply Workgroup Settings
      • Creating Workgroups From an Existing Workgroup
      • Modifying an Existing Workgroup
    • Using Items Settings
      • Setting Up Shortcuts to Items for Finder Workgroups
      • Making Items Available to Panels or Restricted Finder Workgroups
      • Making Items Available to Individual Users
    • Using Privileges Settings
      • Protecting the System Folder and Applications Folder
      • Protecting the User’s Desktop
      • Preventing Applications From Altering Files
      • Preventing Access to FireWire Disks
      • Allowing Users to Play Audio CDs
      • Allowing Users to Take Screen Shots
      • Allowing Users to Open Applications From a Disk
      • Setting Access Privileges for Removable Media
      • Setting Access Privileges for Menu Items
    • Sharing Information in Macintosh Manager
      • Selecting Privileges for Workgroup Folders
      • Setting Up a Shared Workgroup Folder
      • Setting Up a Hand-In Folder
    • Using Volumes Settings
      • Connecting to AFP Servers
      • Providing Access to Server Volumes
    • Using Printers Settings
      • Making Printers Available to Workgroups
      • Setting a Default Printer
      • Restricting Access to Printers
      • Setting Print Quotas
      • Allowing Users to Exceed Print Quotas
      • Setting Up a System Access Printer
      • Using Options Settings
      • Choosing a Location for Storing Group Documents
      • Making Items Open at Startup
      • Checking for Email When Users Log In
      • Creating Login Messages for Workgroups
    • Setting Up Computer Lists
      • Creating Computer Lists
      • Setting Up the All Other Computers Account
      • Duplicating a Computer List
      • Creating a Computer List Template
      • Disabling Login for Computers
    • Using Workgroup Settings for Computers
      • Controlling Access to Computers
    • Using Control Settings
      • Disconnecting Computers Automatically to Minimize Network Traffic
      • Setting the Computer Clock Using the Server Clock
      • Using a Specific Hard Disk Name
      • Creating Email Addresses for Managed Users
      • Using Security Settings for Computers
      • Keeping Computers Secure If a User Forgets to Log Out
      • Allowing Access to All CDs and DVDs
      • Allowing Access to Specific CDs or DVDs
      • Choosing Computer Security Settings for Applications
      • Allowing Specific Applications to Be Opened by Other Applications
      • Allowing Users to Work Offline
      • Allowing Users to Switch Servers After Logging In
      • Allowing Users to Force-Quit Applications
      • Allowing Users to Disable Extensions
    • Using Computer Login Settings
      • Choosing How Users Log In
      • Creating Login Messages for Computers
      • Customizing Panel Names
    • Managing Portable Computers
      • Portable Computers With Network Users
      • Portable Computers With Local Users
      • Letting Users Check Out Computers
      • Using Wireless Services
    • Using Global Security Settings
      • Using Macintosh Manager Reports
      • Setting the Number of Items in a Report
      • Keeping the Administration Program Secure
      • Verifying Login Information Using Kerberos
      • Preventing Users From Changing Their Passwords
      • Allowing Administrators to Access User Accounts
      • Copying Preferences for Mac OS 8 Computers
    • Using Global CD-ROM Settings
    • Managing Preferences
      • Using Initial Preferences
      • Using Forced Preferences
      • Preserved Preferences
    • Solving Problems
      • I’ve Forgotten My Administrator Password
      • Administrators Can’t Get to the Finder After Logging In
      • Generic Icons Appear in the Items Pane
      • Selecting “Local User” in the Multiple Users Control Panel Doesn’t Work
      • Some Printers Don’t Appear in the Available Printers List
      • Users Can’t Log In to the Macintosh Manager Server
      • Users Can’t Log In as “Guest” on Japanese-Language Computers
      • A Client Computer Can’t Connect to the Server
      • The Server Doesn’t Appear in the AppleTalk List
      • The User’s Computer Freezes
      • Users Can’t Access Their Home Directories
      • Users Can’t Access Shared Files
      • Shared Workgroup Documents Don’t Appear in a Panels Environment
      • Applications Don’t Work Properly or Don’t Open
      • Users Can’t Drag and Drop Between Applications
      • Users Can’t Open Files From a Web Page
      • Sometimes the Right Application Doesn’t Open for Users
    • Where to Find More Information
  • DHCP Service
    • Before You Set Up DHCP Service
      • Creating Subnets
      • Assigning IP Addresses Dynamically
      • Using Static IP Addresses
      • Locating the DHCP Server
      • Interacting With Other DHCP Servers
      • Assigning Reserved IP Addresses
    • Setting Up DHCP Service for the First Time
      • Step 1: Create subnets
      • Step 2: Set up logs for DHCP service
      • Step 3: Start DHCP Service
    • Managing DHCP Service
      • Starting and Stopping DHCP Service
      • Setting the Default DNS Server for DHCP Clients
      • Setting the LDAP Server for DHCP Clients
      • Setting Up Logs for DHCP Service
      • Deleting Subnets From DHCP Service
      • Changing Lease Times for Subnet Address Ranges
      • Monitoring DHCP Client Computers
      • Creating Subnets in DHCP Service
      • Changing Subnet Settings in DHCP Service
      • Setting DNS Options for a Subnet
      • Setting NetInfo Options for a Subnet
      • Disabling Subnets Temporarily
      • Viewing DHCP and NetBoot Client Lists
      • Viewing DHCP Log Entries
    • Solving Problems
    • Where to Find More Information
  • NetBoot
    • Prerequisites
    • Capacity Planning
    • NetBoot Implementation
    • Security
    • NetBoot and AirPort
    • Setup Overview
      • Step 1: Evaluate and update your network, servers, and client computers as necessary
      • Step 2: Create disk images for client computers
      • Step 3: Set up DHCP
      • Step 4: Configure and turn on the NetBoot service
      • Step 5: Set up NetBoot filtering (optional)
      • Step 6: Test your NetBoot setup
      • Step 7: Set up all client computers to use NetBoot
    • Setting Up NetBoot on a Mac OS X Server
      • Creating a Mac OS X Disk Image
      • Installing Classic (Mac OS 9) on a Mac OS X Disk Image
      • Installing the Mac OS 9 Disk Image
      • Modifying the Mac OS 9 Disk Image
      • Specifying the Default NetBoot Disk Image
      • Setting Up Multiple Disk Images
      • Configuring NetBoot on Your Server
      • Starting NetBoot on Your Server
      • Enabling NetBoot Disk Images
    • Managing NetBoot
      • Turning Off NetBoot
      • Disabling Disk Images
      • Updating Mac OS X Disk Images
      • Monitoring the Status of Mac OS X NetBoot Clients
      • Monitoring the Status of Mac OS 9 NetBoot Clients
      • Filtering NetBoot Client Connections
    • Load Balancing
      • Enabling Server Selection
      • Using Share Points to Spread the Load
    • Supporting Client Computers
      • Updating the Startup Disk Control Panel
      • Setting Up “System-Less” Clients
      • Selecting a NetBoot Startup Image (from Mac OS X)
      • Selecting a NetBoot Startup Image (from Mac OS 9)
      • Starting Up Using the N Key
    • Solving Problems
  • Network Install
    • Understanding Packages
    • Setup Overview
      • Step 1: Read the NetBoot chapter and enable NetBoot on your server
      • Step 2: Create a Mac OS X installer disk image
      • Step 3: (Optional) Create an application software package
      • Step 4: Enable installer disk images on your server
    • Setting Up Network Install
      • Creating a Network Install Disk Image
      • Creating Custom Packages for Network Install
      • Including Packages in an Installer Disk Image
      • Enabling Installer Disk Images
  • DNS Service
    • Before You Set Up DNS Service
      • DNS and BIND
      • Setting Up Multiple Name Servers
      • Using DNS With Mail Service
    • Setting Up DNS Service for the First Time
      • Step 1: Register your domain name
      • Step 2: Configure BIND
      • Step 3: Set up a mail exchange (MX) record (optional)
      • Step 4: Start DNS service
    • Managing DNS Service
      • Starting and Stopping DNS Service
      • Viewing DNS Log Entries
      • Viewing DNS Service Status
      • Viewing DNS Usage Statistics
    • Inside DNS Service (Configuring BIND)
      • What Is BIND?
      • BIND on Mac OS X Server
      • Practical Example
      • Load Distribution With Round Robin
    • Setting Up a Private TCP/IP Network
    • Where to Find More Information
  • Firewall Service
    • Before You Set Up Firewall Service
      • What Is a Filter?
      • Using Address Ranges
      • IP Address Precedence
      • Multiple IP Addresses
      • Practical Examples
    • Setting Up Firewall Service for the First Time
      • Step 1: Configure Firewall service
      • Step 2: Add filters to the IP filter list
      • Step 3: Start Firewall service
    • Managing Firewall Service
      • Starting and Stopping Firewall Service
      • Setting Firewall Service to Start Automatically
      • Editing IP Filters
      • Creating an IP Filter
      • Searching for IP Filters
      • Viewing the Firewall Log
      • Configuring Firewall Service
      • Setting Up Logs for Firewall Service
      • Viewing Denied Packets
      • Filtering UDP Ports in Firewall Service
      • Blocking Multicast Services in Firewall Service
      • Allowing NetInfo Access to Certain IP Addresses
      • Changing the Any Port (Default) Filter
      • Preventing Denial-of-Service Attacks
      • Creating IP Filter Rules Using ipfw
    • Port Reference
    • Solving Problems
      • You Can’t Access the Server Over TCP/IP
      • You Can’t Locate a Specific Filter
    • Where to Find More Information
  • SLP DA Service
    • SLP DA Considerations
    • Before You Begin
      • Step 1: Define scopes
      • Step 2: Check client and router compatibility
      • Step 3: Configure logging settings
      • Step 4: Create scopes for your network
      • Step 5: Assign network services to each scope
      • Step 6: Start SLP DA service
    • Managing Service Location Protocol (SLP) Directory Agent (DA) Service
      • Starting and Stopping SLP DA Service
      • Viewing Scopes and Registered Services in SLP
      • Creating New Scopes in SLP DA Service
      • Registering a Service With SLP DA
      • Deregistering Services in SLP DA Service
      • Setting Up Logs for SLP DA Service
      • Logging Debugging Messages in SLP DA Service
      • Viewing SLP DA Log Entries
      • Using the Attributes List
    • Where to Find More Information
  • Tools for Advanced Users
    • Terminal
      • Using the Terminal Application
      • Understanding UNIX Command-Line Structure
    • Secure Shell (SSH) Command
      • Enabling and Disabling SSH Access
      • Opening an SSH Session
      • Executing Commands in an SSH Session
      • Closing an SSH Session
      • Understanding Key Fingerprints
    • dsimportexport
    • Log Rolling Scripts
    • diskspacemonitor
    • diskutil
    • installer
      • Using installer
      • Full Operating System Installation
    • softwareupdate
    • systemsetup
      • Working With Server Identity and Startup
      • Working With Date and Time Preferences
      • Working With Sleep Preferences
    • networksetup
      • Reverting to Previous Network Settings
      • Retrieving Your Server’s Network Configuration
      • Configuring TCP/IP Settings
      • Configuring DNS Servers and Search Domains
      • Managing Network Services
      • Designating Proxy Servers
    • MySQL Manager
    • Simple Network Management Protocol (SNMP) Tools
    • diskKeyFinder
    • Enabling IP Failover
      • Requirements
      • Failover Operation
      • Enabling IP Failover
      • Configuring IP Failover
  • Open Directory Data Requirements
    • User Data That Mac OS X Server Uses
    • Standard Data Types in User Records
    • Format of the MailAttribute Data Type
    • Standard Data Types in Group Records
  • Glossary
  • Index