Document Outline

• Mac OS X Server Administrator's Guide
  • Contents
  • How to Use This Guide
    • What’s Included in This Guide
    • Using This Guide
    • Setting Up Mac OS X Server for the First Time
    • Getting Help for Everyday Management Tasks
    • Getting Additional Information
  • Administering Your Server
    • Highlighting Key Features
      • Ease of Setup and Administration
      • Password Security
      • Networking Security
      • File and Printer Sharing
      • Open Directory Services
      • Comprehensive Management of Macintosh Workgroups
      • High Availability
      • Extensive Internet and Web Services
    • Highlighting Individual Services
      • Directory Services
      • Password Validation
      • File Services
      • Print Service
      • Web Service
      • Mail Service
      • Macintosh Workgroup Management
      • Network Services
      • QuickTime Streaming Service
    • Highlighting Server Applications
      • Administering a Server From Different Computers
      • Server Assistant
      • Open Directory Assistant
      • Directory Access
      • Workgroup Manager
      • Server Settings
      • Server Status
      • Macintosh Manager
      • NetBoot Administration Tools
      • Network Install Administration Application
      • Server Monitor
      • Streaming Server Admin
    • Where to Find More Information
      • If You’re New to Server and Network Management
      • If You’re an Experienced Server Administrator
  • Directory Services
    • Storage for Data Needed by Mac OS X
    • A Historical Perspective
      • Data Consolidation
      • Data Distribution
    • Uses of Directory Data
    • Inside a Directory Domain
    • Discovery of Network Services
    • Directory Domain Protocols
    • Local and Shared Directory Domains
      • Local Data
      • Shared Data
      • Shared Data in Existing Directory Domains
    • Directory Domain Hierarchies
      • Two-Level Hierarchies
      • More Complex Hierarchies
    • Search Policies for Directory Domain Hierarchies
      • The Automatic Search Policy
      • Custom Search Policies
    • Directory Domain Planning
      • General Planning Guidelines
      • Controlling Data Accessibility
      • Simplifying Changes to Data in Directory Domains
      • Identifying Computers for Hosting Shared Domains
    • Open Directory Password Server
      • Authentication With a Password Server
      • Password Server Authentication Methods
      • Password Server Database
      • Password Server Security
    • Overview of Directory Services Tools
    • Setup Overview
      • Step 1: Before you begin, do some planning
      • Step 2: Set up Open Directory domains and Password Servers
      • Step 3: Set up access to directory domains on other servers
      • Step 4: Implement search policies
      • Step 5: Configure Open Directory service protocols (optional)
    • Before You Begin
    • Setting Up an Open Directory Domain and Password Server
      • Using Another Server’s Shared Directory Domain
      • Hosting a Shared Directory Domain With a Password Server
      • Hosting a Shared Directory Domain and Using an Existing Password Server
      • Hosting a Shared Directory Domain With No Password Server
      • Using a Non-Shared Local Directory Domain With a Password Server
      • Using a Non-Shared Local Directory Domain and an Existing Password Server
      • Using a Non-Shared Local Directory Domain With No Password Server
      • Deleting a Shared Open Directory Domain
    • Configuring Open Directory Service Protocols
      • Configuring SMB Service Discovery
    • Setting Up Search Policies
      • Using the Automatic Search Policy
      • Defining a Custom Search Policy
      • Using a Local Directory Search Policy
    • Changing Basic LDAPv3 Settings
      • Enabling or Disabling Use of DHCP-Supplied LDAPv3 Servers
      • Showing or Hiding Available LDAPv3 Configurations
    • Configuring Access to Existing LDAPv3 Servers
      • Creating an LDAPv3 Configuration
      • Editing an LDAPv3 Configuration
      • Duplicating an LDAPv3 Configuration
      • Deleting an LDAPv3 Configuration
      • Changing an LDAPv3 Configuration’s Connection Settings
      • Configuring LDAPv3 Search Bases and Mappings
      • Mapping Config Record Attributes for LDAPv3 Directory Domains
      • Editing RFC 2307 Mapping to Enable Creating Users
      • Populating LDAPv3 Domains With Data for MacOSX
    • Using an Active Directory Server
      • Creating an Active Directory Server Configuration
      • Setting Up an Active Directory Server
      • Populating Active Directory Domains With Data for MacOSX
    • Accessing an Existing LDAPv2 Directory
      • Setting Up an LDAPv2 Server
      • Creating an LDAPv2 Server Configuration
      • Changing LDAPv2 Server Access Settings
      • Editing LDAPv2 Search Bases and Data Mappings
    • Using NetInfo Domains
      • Creating a Shared NetInfo Domain
      • Configuring NetInfo Binding
      • Adding a Machine Record to a Parent NetInfo Domain
      • Configuring Static Ports for Shared NetInfo Domains
      • Viewing and Changing NetInfo Data
      • Using UNIX Utilities for NetInfo
    • Using Berkeley Software Distribution (BSD) Configuration Files
      • Mapping BSD Configuration Files
      • Setting Up Data in BSD Configuration Files
    • Configuring Directory Access on a Remote Computer
      • Editing BSD Configuration Files of Remote Computers
    • Monitoring Directory Services
    • Backing Up and Restoring Directory Services Files
  • Users and Groups
    • How User Accounts Are Used
      • Authentication
      • Password Validation
      • Information Access Control
      • Administration Privileges
      • Home Directories
      • Mail Settings
      • Resource Usage
      • User Preferences
    • How Group Accounts Are Used
      • Information Access Control
      • Group Folders
      • Workgroups
      • Computer Access
    • Kinds of Users and Groups
      • Users and Managed Users
      • Groups, Primary Groups, and Workgroups
      • Administrators
      • Guest Users
      • Predefined Accounts
    • Setup Overview
      • Step 1: Before you begin, do some planning
      • Step 2: Set up directory domains in which user and group accounts will reside
      • Step 3: Set up Open Directory Password Server
      • Step 4: Configure server search policies so servers can find user and group accounts
      • Step 5: Create users
      • Step 6: Create groups
      • Step 7: Set Up Client Computers
      • Step 8: Review user and group account information as needed
      • Step 9: Update users and groups as needed
      • Step 10: Perform ongoing user and group account maintenance
    • Before You Begin
    • Administering User Accounts
      • Where User Accounts Are Stored
      • Creating User Accounts in Directory Domains on Mac OS X Server
      • Creating Read-Write LDAPv3 User Accounts
      • Changing User Accounts
      • Working With Read-Only User Accounts
    • Working With Basic Settings for Users
      • Defining User Names
      • Defining Short Names
      • Choosing Stable Short Names
      • Avoiding Duplicate Names
      • Avoiding Duplicate Short Names
      • Defining User IDs
      • Defining Passwords
      • Assigning Administrator Rights for a Server
      • Assigning Administrator Rights for a Directory Domain
    • Working With Advanced Settings for Users
      • Defining Login Settings
      • Defining a Password Validation Strategy
      • Editing Comments
    • Working With Group Settings for Users
      • Defining a User’s Primary Group
      • Adding a User to Groups
      • Removing a User From a Group
      • Reviewing a User’s Group Memberships
    • Working With Home Settings for Users
    • Working With Mail Settings for Users
      • Disabling a User’s Mail Service
      • Enabling Mail Service Account Options
      • Forwarding a User’s Mail
    • Working With Print Settings for Users
      • Disabling a User’s Access to Print Queues Enforcing Quotas
      • Enabling a User’s Access to Print Queues Enforcing Quotas
      • Deleting a User’s Print Quota for a Specific Queue
      • Restarting a User’s Print Quota
    • Working With Managed Users
    • Defining a Guest User
    • Deleting a User Account
    • Disabling a User Account
    • Administering Home Directories
      • Types of Home Directories
      • Distributing Home Directories Across Multiple Servers
      • Defining No Home Directory
      • Defining a Home Directory for Local Users
      • Defining a Network Home Directory for AFP Access
      • Defining a Network Home Directory for NFS Access
      • Defining an Advanced Home Directory for AFP Access
      • Defining an Advanced Home Directory for NFS Access
      • Using createhomedir to Create Home Directories
      • Setting Disk Quotas
      • Defining Default Home Directories for New Users
      • Moving Home Directories
      • Deleting Home Directories
    • Administering Group Accounts
      • Where Group Accounts Are Stored
      • Creating Group Accounts in a Directory Domain on Mac OS X Server
      • Creating Read-Write LDAPv3 Group Accounts
      • Changing Group Accounts
      • Working With Read-Only Group Accounts
    • Working With Member Settings for Groups
      • Adding Users to a Group
      • Removing Users From a Group
      • Naming a Group
      • Defining a Group ID
    • Working With Folder Settings for Groups
      • Defining a Network Group Folder
      • Defining an Advanced Group Folder
    • Working With Group and Computer Preferences
    • Deleting a Group Account
    • Finding User and Group Accounts
      • Listing Users and Groups in the Local Directory Domain
      • Listing Users and Groups in Search Path Directory Domains
      • Listing Users and Groups in Available Directory Domains
      • Refreshing User and Group Lists
      • Finding Specific Users and Groups in a List
      • Sorting User and Group Lists
    • Shortcuts for Working With Users and Groups
    • Editing Multiple Users Simultaneously
    • Using Presets
      • Creating a Preset for User Accounts
      • Creating a Preset for Group Accounts
      • Using Presets to Create New Accounts
      • Renaming Presets
      • Deleting a Preset
      • Changing Presets
    • Importing and Exporting User and Group Information
      • Understanding What You Can Import
      • Using Workgroup Manager to Import Users and Groups
      • Using Workgroup Manager to Export Users and Groups
      • Using dsimportexport to Import Users and Groups
      • Using dsimportexport to Export Users and Groups
      • Using XML Files Created With Mac OS X Server 10.1 or Earlier
      • Using XML Files Created With AppleShare IP 6.3
      • Using Character-Delimited Files
    • Understanding Password Validation
      • Contrasting Password Validation Options
      • The Authentication Authority Attribute
      • Choosing a Password
      • Using Authentication Manager
      • Providing Secure Authentication for Windows Users
      • Migrating Passwords
      • Setting Up Password Validation Options
    • Storing Passwords in User Accounts
      • Enabling Basic Password Validation for a User
      • Consequences of Readable Passwords
    • Using a Password Server
      • Setting Up a Password Server
      • Assigning Administrator Rights for a Password Server
      • Enabling the Use of a Password Server for a User
      • Exporting and Importing Users With Password Server Passwords
      • Resetting Passwords Before Discontinuing Use of a Password Server
      • Making a Password Server More Secure
      • Monitoring a Password Server
    • Using Kerberos
      • Understanding Kerberos
      • Integrating Mac OS X With a Kerberos Server
      • Enabling Kerberos Authentication for Mail
      • Enabling Kerberos Authentication for AFP
      • Enabling Kerberos Authentication for FTP
      • Enabling Kerberos Authentication for Login Window
      • Solving Problems With Kerberos
    • Using LDAP Bind Authentication
    • Backing Up and Restoring Files
      • Backing Up a Password Server
      • Backing Up Root and Administrator User Accounts
    • Supporting Client Computers
    • Solving Problems
      • You Can’t Modify an Account Using Workgroup Manager
      • A Password Server User’s Password Can’t Be Modified
      • A User’s Password Can’t Be Changed to Password Server Validation
      • A Password Server User Can’t Authenticate in NetInfo Manager
      • Users Can’t Log In or Authenticate
      • You Can’t Assign Server Administrator Privileges
      • Disconnecting the Password Server Computer
      • Users Can’t Access Their Home Directories
      • Mac OS X User in Shared NetInfo Domain Can’t Log In
      • Kerberos Users Can’t Authenticate
  • Sharing
    • Privileges
    • Network Globe Contents
    • Setup Overview
      • Step 1: Read “Before You Begin”
      • Step 2: Locate or create the information you want to share
      • Step 3: Designate share points and set privileges
      • Step 4: Turn file services on
    • Before You Begin
      • Organize Your Shared Information
      • Security Issues
    • Setting Up Sharing
      • Setting Up Share Points for Managed Mac OS X Admin Users
      • Creating Share Points and Setting Privileges
      • Configuring Apple File Settings for a Share Point
      • Configuring Windows File Settings for a Share Point
      • Configuring FTP Settings for a Share Point
      • Sharing (Exporting) Items Using Network File System (NFS)
      • Automounting Share Points
      • Resharing NFS Mounts as AFP Share Points
    • Managing Sharing
      • Turning Sharing Off
      • Removing a Share Point
      • Browsing Server Disks
      • Viewing Share Points
      • Copying Privileges to Enclosed Items
      • Viewing Share Point Settings
      • Changing Share Point Owner and Privilege Settings
      • Changing the Protocols for a Share Point
      • Deleting a Client from an NFS Export
      • Creating a Drop Box
      • Using Workgroup Manager With Mac OS X Server Version 10.1.5
    • Supporting Client Computers
    • Solving Problems
  • File Services
    • Before You Begin
      • Security Issues
      • Client Computer Requirements
    • Setup Overview
      • Step 1: Read “Before You Begin”
      • Step 2: Define users
      • Step 3: Create share points and set privileges
      • Step 4: Configure and start up file services
      • Step 5: Check client configurations
    • Apple File Service
      • Before You Set Up Apple File Service
      • Setting Up Apple File Service
      • Managing Apple File Service
    • Windows Services
      • Before You Set Up Windows Services
      • Setting Up Windows Services
      • Managing Windows Services
    • File Transfer Protocol (FTP) Service
      • Secure FTP Environment
      • Before You Set Up FTP Service
      • Setup Overview
      • Step 1: Before You Begin
      • Step 2: Configure FTP General settings
      • Step 3: Configure FTP Access settings
      • Step 4: Configure FTP Logging settings
      • Step 5: Configure FTP Advanced settings
      • Step 6: Create an “uploads” folder for FTP users (optional)
      • Step 7: Create share points and share them using FTP
      • Step 8: Start FTP service
      • Setting Up File Transfer Protocol (FTP) Service
      • Managing File Transfer Protocol (FTP) Service
    • Network File System (NFS) Service
      • Before You Set Up NFS Service
      • Setup Overview
      • Step 1: Before You Begin
      • Step 2: Configure NFS settings
      • Step 3: Create share points and share them using NFS
      • Setting Up NFS Service
      • Managing NFS Service
    • Supporting Client Computers
      • Supporting Mac OS X Clients
      • Supporting Mac OS 8 and Mac OS 9 Clients
      • Supporting Windows Clients
      • Supporting NFS Clients
    • Solving Problems With File Services
      • Solving Problems With Apple File Service
      • Solving Problems With Windows Services
      • Solving Problems With File Transfer Protocol (FTP)
    • Where to Find More Information About File Services
  • Client Management: Mac OS X
    • The User Experience
    • Before You Begin
      • Step 1: Make sure your computers meet minimum requirements
      • Step 2: Create a shared domain to store account information
      • Step 3: Make sure users and their home directories exist
    • Designating Administrators
    • Setting Up User Accounts
    • Setting Up Group Accounts
    • Setting Up Computer Accounts
      • Creating a Computer Account
      • Creating a Preset for Computer Accounts
      • Using a Computer Accounts Preset
      • Adding Computers to an Existing Computer Account
      • Editing Information About a Computer
      • Moving a Computer to a Different Computer Account
      • Deleting Individual Computers From a Computer Account
      • Deleting a Computer Account
      • Searching for Computer Accounts
    • Managing Guest Computers
    • Working With Access Settings
      • Restricting Access to Computers
      • Making Computers Available to All Users
      • Using Local User Accounts
    • Managing Portable Computers
      • Using Wireless Services
    • How Workgroup Manager Works With System Preferences
    • Managing Preferences
      • About the Preferences Cache
      • Updating the Managed Preferences Cache
      • Emptying the Preference Cache Manually
      • How Preference Management Works
      • Preference Management Options
      • Managing User Preferences
      • Managing Group Preferences
      • Managing Computer Preferences
      • Editing Preferences for Multiple Records
      • Disabling Management for Specific Preferences
    • Managing Applications Preferences
      • Applications Items Preferences
      • Creating a List of Approved Applications
      • Preventing Users From Opening Applications on Local Volumes
      • Managing Application Access to Helper Applications
      • Applications System Preferences
      • Managing Access to System Preferences
    • Managing Classic Preferences
      • Classic Startup Preferences
      • Making Classic Start Up After a User Logs In
      • Choosing a Classic System Folder
      • Classic Advanced Preferences
      • Allowing Special Actions During Restart
      • Keeping Control Panels Secure
      • Preventing Access to the Chooser and Network Browser
      • Making Apple Menu Items Available in Classic
      • Adjusting Classic Sleep Settings
    • Managing Dock Preferences
      • Dock Display Preferences
      • Controlling the User’s Dock
      • Dock Items Preferences
      • Adding Items to a User’s Dock
      • Providing Easy Access to Group Folders
      • Preventing Users From Adding Additional Dock Items
    • Managing Finder Preferences
      • Finder Preferences
      • Keeping Disks and Servers From Appearing on the User’s Desktop
      • Controlling the Behavior of Finder Windows
      • Making File Extensions Visible
      • Selecting the User Environment
      • Hiding the Alert Message When a User Empties the Trash
      • Finder Commands Preferences
      • Controlling User Access to an iDisk
      • Controlling User Access to Remote Servers
      • Controlling User Access to Folders
      • Preventing Users From Ejecting Disks
      • Hiding the Burn Disc Command in the Finder
      • Removing Restart and Shut Down Commands From the Apple Menu
      • Finder Views Preferences
      • Adjusting the Appearance and Arrangement of Desktop Items
      • Adjusting the Appearance of Finder Window Contents
    • Managing Internet Preferences
      • Setting Email Preferences
      • Setting Web Browser Preferences
    • Managing Login Preferences
      • Login Options Preferences
      • Deciding How a User Logs In
      • Helping Users Remember Passwords
      • Preventing Restarting or Shutting Down the Computer at Login
      • Login Items Preferences
      • Opening Applications Automatically After a User Logs In
      • Providing Easy Access to the Group Share Point
    • Managing Media Access Preferences
      • Media Access Disc Media Preferences
      • Controlling Access to CDs and DVDs
      • Controlling the Use of Recordable Discs
      • Media Access Other Media Preferences
      • Controlling Access to Hard Drives and Disks
      • Ejecting Items Automatically When a User Logs Out
    • Managing Printing Preferences
      • Printer List Preferences
      • Making Printers Available to Users
      • Preventing Users From Modifying the Printer List
      • Restricting Access to Printers Connected to a Computer
      • Printer Access Preferences
      • Setting a Default Printer
      • Restricting Access to Printers
    • Solving Problems
      • I Can’t Enforce Default Web Settings
      • I Can’t Enforce Default Mail Settings
      • Users Don’t See a List of Workgroups at Login
      • Users Cannot Open Files
      • Users Cannot Add Printers to a Printer List
      • Login Items Added by a User Do Not Open
      • Items Placed in the Dock by a User are Missing
      • New: Users See a Question Mark in the Dock
      • Users See a Message About an Unexpected Error
  • Print Service
    • Setup Overview
      • Step 1: Read “Before You Begin”
      • Step 2: Start up and configure print service
      • Step 3: Add printers and configure their print queues
      • Step 4: (Optional) Add print queues to a shared Open Directory domain
      • Step 5: (Optional) Set print quotas for users
      • Step 6: Set up printing on client computers
    • Before You Begin
      • Security Issues
    • Setting Up Print Service
      • Starting Up and Configuring Print Service
      • Adding Printers
      • Configuring Print Queues
      • Adding Print Queues to Shared Open Directory Domains
    • Setting Up Print Quotas
      • Enforcing Quotas for a Print Queue
    • Setting Up Printing on Client Computers
      • Mac OS X Clients
      • Mac OS 8 and Mac OS 9 Clients
      • Windows Clients
      • UNIX Clients
    • Managing Print Service
      • Monitoring Print Service
      • Stopping Print Service
      • Setting Print Service to Start Automatically
    • Managing Print Queues
      • Monitoring a Print Queue
      • Putting a Print Queue on Hold (Stopping a Print Queue)
      • Restarting a Print Queue
      • Changing a Print Queue’s Configuration
      • Renaming a Print Queue
      • Selecting a Default Print Queue
      • Deleting a Print Queue
    • Managing Print Jobs
      • Monitoring a Print Job
      • Stopping a Print Job
      • Putting a Print Job on Hold
      • Restarting a Print Job
      • Holding All New Print Jobs
      • Setting the Default Priority for New Print Jobs
      • Changing a Print Job’s Priority
      • Deleting a Print Job
    • Managing Print Quotas
      • Suspending Quotas for a Print Queue
    • Managing Print Logs
      • Viewing Print Logs
      • Archiving Print Logs
      • Deleting Print Log Archives
    • Solving Problems
  • Web Service
    • Before You Begin
      • Configuring Web Service
      • Providing Secure Transactions
      • Setting Up Web Sites
      • Hosting More Than One Web Site
      • Understanding WebDAV
      • Understanding Multipurpose Internet Mail Extension (MIME)
    • Setting Up Web Service for the First Time
      • Step 1: Set up the Documents folder
      • Step 2: Create a default page
      • Step 3: Assign privileges for your Web site
      • Step 4: Configure Web service
      • Step 5: Start Web service
      • Step 6: Connect to your Web site
    • Managing Web Service
      • Starting or Stopping Web Service
      • Starting Web Service Automatically
      • Modifying MIME Mappings
      • Setting Up Persistent Connections for Web Service
      • Limiting Simultaneous Connections for Web Service
      • Setting Up Proxy Caching for Web Service
      • Blocking Web Sites From Your Web Server Cache
      • Enabling SSL for Web Service
      • Setting Up the SSL Log for a Web Server
      • Setting Up WebDAV for a Web Server
      • Starting Tomcat
      • Viewing Web Service Status Overview
      • Viewing Detailed Web Service Status
      • Viewing Logs of Web Service Activity
      • Setting Up Multiple IP Addresses for a Port
    • Managing Web Sites
      • Setting Up the Documents Folder for Your Web Site
      • Changing the Default Web Folder for a Site
      • Enabling a Web Site on a Server
      • Setting the Default Page for a Web Site
      • Changing the Access Port for a Web Site
      • Improving Performance of Static Web Sites
      • Enabling Access and Error Logs for a Web Site
      • Setting Up Directory Listing for a Web Site
      • Connecting to Your Web Site
      • Enabling WebDAV
      • Setting Access for WebDAV-Enabled Sites
      • Enabling a Common Gateway Interface (CGI) Script
      • Enabling Server Side Includes (SSI)
      • Monitoring Web Sites
      • Setting Server Responses to MIME Types
      • Enabling SSL
      • Enabling PHP
    • WebMail
      • Enabling WebMail
      • Configuring WebMail
    • Setting Up Secure Sockets Layer (SSL) Service
      • Generating a Certificate Signing Request (CSR) for Your Server
      • Obtaining a Web Site Certificate
      • Installing the Certificate on Your Server
      • Enabling SSL for the Site
    • Solving Problems
      • Users Can’t Connect to a Web Site on Your Server
      • A Web Module Is Not Working as Expected
      • A CGI Will Not Run
    • Installing and Viewing Web Modules
      • Macintosh-Specific Modules
      • Open-Source Modules
      • MySQL
    • Where to Find More Information
  • Mail Service
    • Mail Service Protocols
      • Post Office Protocol (POP)
      • Internet Message Access Protocol (IMAP)
      • Simple Mail Transfer Protocol (SMTP)
      • SMTP Alternatives: Sendmail and Postfix
    • How Mail Service Uses SSL
    • How Mail Service Uses DNS
    • Where Mail Is Stored
    • How User Account Settings Affect Mail Service
    • What Mail Service Can Do About Junk Mail
      • SMTP Authentication
      • Restricted SMTP Relay
      • SMTP Authentication and Restricted SMTP Relay Combinations
      • Rejected SMTP Servers
      • Mismatched DNS Name and IP Address
      • Blacklisted Servers
    • What Mail Service Doesn’t Do
    • Mail Service Configuration in the Local Directory
    • Overview of Mail Service Tools
    • Setup Overview
      • Step 1: Before you begin, do some planning
      • Step 2: Set up MX records
      • Step 3: Start mail service
      • Step 4: Configure incoming mail service
      • Step 5: Configure outgoing mail service
      • Step 6: Configure additional settings for mail service
      • Step 7: Set up accounts for mail users
      • Step 8: Create a postmaster account
      • Step 9: Set up each user’s mail client software
    • Overview of Ongoing Mail Service Management
    • Before You Begin
    • Working With General Settings for Mail Service
      • Starting and Stopping Mail Service
      • Starting Mail Service Automatically
      • Requiring or Allowing Kerberos Authentication
      • Adding or Removing Local Names for the Mail Server
      • Changing Protocol Settings for Mail Service
      • Monitoring and Archiving Mail
      • Setting Up SSL for Mail Service
    • Working With Settings for Incoming Mail
      • Limiting Incoming Message Size
      • Deleting Email Automatically
      • Notifying Users Who Have New Mail
    • Working With Settings for Incoming POP Mail
      • Requiring Authenticated POP (APOP)
      • Changing the POP Response Name
      • Changing the POP Port Number
    • Working With Settings for Incoming IMAP Mail
      • Requiring Secure IMAP Authentication
      • Changing the IMAP Response Name
      • Using Case-Sensitive IMAP Folder Names
      • Controlling IMAP Connections Per User
      • Terminating Idle IMAP Connections
      • Changing the IMAP Port Number
    • Working With Settings for Outgoing Mail
      • Sending Nonlocal Mail
      • Sending Only Local Mail
      • Suspending Outgoing Mail Service
    • Working With Settings for SMTP Mail
      • Requiring SMTP Authentication
      • Sending SMTP Mail via Another Server
      • Changing the SMTP Response Names
      • Changing the Incoming SMTP Port Number
      • Changing the Outgoing SMTP Port Number
      • Enabling an Alternate Mail Transfer Agent
      • Starting Sendmail
    • Working With the Mail Database
      • Converting the Mail Database From an Earlier Version
      • Specifying the Location for a New Mail Database
      • Moving an Existing Mail Database
      • Configuring Automatic Mail Deletion
      • Allowing Administrator Access to the Mail Database and Files
      • Cleaning Up the Mail Files
    • Working With Network Settings for Mail Service
      • Specifying DNS Lookup for Mail Service
      • Updating the DNS Cache in Mail Service
      • Changing Mail Service Timeouts
    • Limiting Junk Mail
      • Restricting SMTP Relay
      • Rejecting SMTP Connections From Specific Servers
      • Checking for Mismatched SMTP Server Name and IP Address
      • Rejecting Mail From Blacklisted Senders
      • Allowing SMTP Relay for a Backup Mail Server
      • Filtering SMTP Connections
    • Working With Undeliverable Mail
      • Forwarding Undeliverable Incoming Mail
      • Limiting Delivery Attempts in Mail Service
      • Sending Nondelivery Reports to Postmaster
    • Monitoring Mail Status
      • Viewing Overall Mail Service Activity
      • Viewing Connected Mail Users
      • Viewing Mail Accounts
      • Reviewing Mail Service Logs
      • Reclaiming Disk Space Used by Mail Service Logs
    • Supporting Mail Users
      • Configuring Mail Settings for User Accounts
      • Configuring Email Client Software
      • Creating Additional Email Addresses for a User
    • Performance Tuning
    • Backing Up and Restoring Mail Files
    • Where to Find More Information
      • Books
      • Internet
  • Client Management: Mac OS 9 and OS 8
    • The User Experience
    • Before You Begin
      • Step 1: Make sure computers meet minimum requirements
      • Step 2: Install Macintosh Manager administrator software
      • Step 3: Set up client computers
      • Using Update Packages
      • Choosing a Language for Macintosh Manager Servers and Clients
      • Changing the Apple File Service Language Script
      • Step 4: Make sure you’ve set up users and their home directories
    • Inside Macintosh Manager
      • Macintosh Manager Security
      • About the Macintosh Manager Share Point
      • The Multi-User Items Folder
      • How Macintosh Manager Works With Directory Services
      • How Macintosh Manager Works With Home Directories
      • How Macintosh Manager Works With Preferences
      • Using NetBoot With Macintosh Manager
    • Setting Up Mac OS 9 or Mac OS 8 Managed Clients
      • Step 1: Make sure Macintosh Manager services are available
      • Step 2: Log in to Macintosh Manager Admin as an administrator
      • Step 3: Import user accounts
      • Step 4: Designate a Macintosh Manager administrator
      • Step 5: Designate workgroup administrators
      • Step 6: Create workgroups for users
      • Step 7: Create computer lists
      • Step 8: Select global settings and set up managed preferences folders
    • Logging In to Macintosh Manager as an Administrator
      • Working With Macintosh Manager Preferences
    • Importing User Accounts
      • Applying User Settings With a Template
      • Importing All Users
      • Importing One or More Users
      • Collecting User Information in a Text File
      • Importing a List of Users From a Text File
      • Finding Specific Imported Users
      • Providing Quick Access to Unimported Users
      • Providing Access to Unimported Mac OS X Server Users
      • Setting Up a Guest User Account
    • Designating Administrators
      • Creating a Macintosh Manager Administrator
      • Creating a Workgroup Administrator
      • Changing Your Macintosh Manager Administrator Password
    • Working With User Settings
      • Changing Basic User Settings
      • Allowing Multiple Logins for Users
      • Granting a User System Access
      • Changing Advanced Settings
      • Limiting a User’s Disk Storage Space
      • Updating User Information From Mac OS X Server
    • Setting Up Workgroups
      • Types of Workgroup Environments
      • Creating a Workgroup
      • Using a Template to Apply Workgroup Settings
      • Creating Workgroups From an Existing Workgroup
      • Modifying an Existing Workgroup
    • Using Items Settings
      • Setting Up Shortcuts to Items for Finder Workgroups
      • Making Items Available to Panels or Restricted Finder Workgroups
      • Making Items Available to Individual Users
    • Using Privileges Settings
      • Protecting the System Folder and Applications Folder
      • Protecting the User’s Desktop
      • Preventing Applications From Altering Files
      • Preventing Access to FireWire Disks
      • Allowing Users to Play Audio CDs
      • Allowing Users to Take Screen Shots
      • Allowing Users to Open Applications From a Disk
      • Setting Access Privileges for Removable Media
      • Setting Access Privileges for Menu Items
    • Sharing Information in Macintosh Manager
      • Selecting Privileges for Workgroup Folders
      • Setting Up a Shared Workgroup Folder
      • Setting Up a Hand-In Folder
    • Using Volumes Settings
      • Connecting to AFP Servers
      • Providing Access to Server Volumes
    • Using Printers Settings
      • Making Printers Available to Workgroups
      • Setting a Default Printer
      • Restricting Access to Printers
      • Setting Print Quotas
      • Allowing Users to Exceed Print Quotas
      • Setting Up a System Access Printer
    • Using Options Settings
      • Choosing a Location for Storing Group Documents
      • Making Items Open at Startup
      • Checking for Email When Users Log In
      • Creating Login Messages for Workgroups
    • Setting Up Computer Lists
      • Creating Computer Lists
      • Setting Up the All Other Computers Account
      • Duplicating a Computer List
      • Creating a Computer List Template
      • Disabling Login for Computers
    • Using Workgroup Settings for Computers
      • Controlling Access to Computers
    • Using Control Settings
      • Disconnecting Computers Automatically to Minimize Network Traffic
      • Setting the Computer Clock Using the Server Clock
      • Using a Specific Hard Disk Name
      • Creating Email Addresses for Managed Users
      • Using Security Settings for Computers
      • Keeping Computers Secure If a User Forgets to Log Out
      • Allowing Access to All CDs and DVDs
      • Allowing Access to Specific CDs or DVDs
      • Choosing Computer Security Settings for Applications
      • Allowing Specific Applications to Be Opened by Other Applications
      • Allowing Users to Work Offline
      • Switching to a Different Macintosh Manager Server
      • Allowing Users to Force-Quit Applications
      • Allowing Users to Disable Extensions
    • Using Computer Login Settings
      • Choosing How Users Log In
      • Creating Login Messages for Computers
      • Customizing Panel Names
    • Managing Portable Computers
      • Portable Computers With Network Users
      • Portable Computers With Local Users
      • Letting Users Check Out Computers
      • Using Wireless Services
    • Using Global Security Settings
      • Using Macintosh Manager Reports
      • Setting the Number of Items in a Report
      • Keeping the Administration Program Secure
      • Verifying Login Information Using Kerberos
      • Managing User Passwords
      • Allowing Administrators to Access User Accounts
      • Copying Preferences for Mac OS 8 Computers
    • Using Global CD-ROM Settings
    • Managing Preferences
      • Using Initial Preferences
      • Using Forced Preferences
      • Preserved Preferences
      • Sharing Mac OS 9 Application Preferences in the Classic Environment
    • Solving Problems
      • I’ve Forgotten My Administrator Password
      • Administrators Can’t Get to the Finder After Logging In
      • Generic Icons Appear in the Items Pane
      • Selecting “Local User” in the Multiple Users Control Panel Doesn’t Work
      • Some Printers Don’t Appear in the Available Printers List
      • Users Can’t Log In to the Macintosh Manager Server
      • Users Can’t Log In as “Guest” on Japanese-Language Computers
      • A Client Computer Can’t Connect to the Server
      • The Server Doesn’t Appear in the AppleTalk List
      • The User’s Computer Freezes
      • Users Can’t Access Their Home Directories
      • Users Can’t Access Shared Files
      • Shared Workgroup Documents Don’t Appear in a Panels Environment
      • Applications Don’t Work Properly or Don’t Open
      • Users Can’t Drag and Drop Between Applications
      • Users Can’t Open Files From a Web Page
      • Sometimes the Right Application Doesn’t Open for Users
    • Where to Find More Information
  • DHCP Service
    • Before You Set Up DHCP Service
      • Creating Subnets
      • Assigning IP Addresses Dynamically
      • Using Static IP Addresses
      • Locating the DHCP Server
      • Interacting With Other DHCP Servers
      • Assigning Reserved IP Addresses
    • Setting Up DHCP Service for the First Time
      • Step 1: Create subnets
      • Step 2: Set up logs for DHCP service
      • Step 3: Start DHCP service
    • Managing DHCP Service
      • Starting and Stopping DHCP Service
      • Setting the Default DNS Server for DHCP Clients
      • Setting the LDAP Server for DHCP Clients
      • Setting Up Logs for DHCP Service
      • Deleting Subnets From DHCP Service
      • Changing Lease Times for Subnet Address Ranges
      • Monitoring DHCP Client Computers
      • Creating Subnets in DHCP Service
      • Changing Subnet Settings in DHCP Service
      • Setting DNS Options for a Subnet
      • Setting NetInfo Options for a Subnet
      • Disabling Subnets Temporarily
      • Viewing DHCP and NetBoot Client Lists
      • Viewing DHCP Log Entries
    • Solving Problems
    • Where to Find More Information
  • NetBoot
    • Before You Set Up NetBoot
      • Administrator Requirements
      • Server Requirements
      • Client Computer Requirements
      • Network Requirements
      • Capacity Planning
    • Inside NetBoot
      • NetBoot Image Folder
      • Property List File
      • Boot Server Discovery Protocol (BSDP)
      • TFTP and the Boot Files
      • Disk Images
      • Using Images Stored on Other Servers
      • Shadow Images
      • NetBoot Files and Directory Structure
      • Security
      • NetBoot and AirPort
    • Setup Overview
      • Step 1: Evaluate and update your network, servers, and client computers as necessary
      • Step 2: Create disk images for client computers
      • Step 3: Set up DHCP
      • Step 4: Configure and turn on the NetBoot service
      • Step 5: Set up Ethernet address filtering (optional)
      • Step 6: Test your NetBoot setup
      • Step 7: Set up all client computers to use NetBoot
    • Setting Up NetBoot
      • Creating a Mac OS X Disk Image
      • Installing Classic on a Mac OS X Disk Image
      • Updating an Existing Mac OS X NetBoot Disk Image
      • Creating a Mac OS X NetBoot Image From an Existing System
      • Installing a Mac OS 9 Disk Image
      • Modifying a Mac OS 9 Disk Image
      • Specifying the Default NetBoot Disk Image
      • Compressing Images to Save Server Disk Space
      • Configuring NetBoot on Your Server
      • Starting NetBoot on Your Server
      • Enabling NetBoot Disk Images
      • Setting Up Multiple Disk Images
    • Managing NetBoot
      • Turning Off NetBoot
      • Disabling Disk Images
      • Monitoring the Status of Mac OS X NetBoot Clients
      • Monitoring the Status of Mac OS 9 NetBoot Clients
      • Filtering NetBoot Client Connections
    • Load Balancing
      • Enabling Server Selection
      • Using Share Points to Spread the Shadow Image Load
    • Supporting Client Computers
      • Updating the Startup Disk Control Panel
      • Setting Up “System-Less” Clients
      • Selecting a NetBoot Startup Image (from Mac OS X)
      • Selecting a NetBoot Startup Image (from Mac OS 9)
      • Starting Up Using the N Key
    • Solving Problems
      • A NetBoot Client Computer Won’t Start Up
      • You Are Using Macintosh Manager and a User Can’t Log In to a NetBoot Client
  • Network Install
    • Before You Set Up Network Install
      • Image Size
    • Setup Overview
      • Step 1: Start the DHCP/NetBoot service
      • Step 2: Create an installer disk image
      • Step 3: (Optional) Add packages
      • Step 4: Enable the installer disk image
    • Setting Up Network Install
      • Creating a Network Install Disk Image
      • Enabling an Installer Disk Image
      • Unlocking an Image
      • About Packages
      • Creating Packages
      • Adding Packages to an OS Install Image
      • Adding Packages to a Custom Package Install Image
      • Installing Mac OS Updates
      • Automating Installation of an OS Image
      • Automating Installation of a Custom Package Install Image
      • About the minstallconfig.xml File
      • Selecting a Network Install Image (From a Mac OS X client)
  • DNS Service
    • Before You Set Up DNS Service
      • DNS and BIND
      • Setting Up Multiple Name Servers
      • Using DNS With Mail Service
    • Setting Up DNS Service for the First Time
      • Step 1: Register your domain name
      • Step 2: Configure BIND
      • Step 3: Set up a mail exchange (MX) record (optional)
      • Step 4: Start DNS service
    • Managing DNS Service
      • Starting and Stopping DNS Service
      • Viewing DNS Log Entries
      • Viewing DNS Service Status
      • Viewing DNS Usage Statistics
    • Inside DNS Service (Configuring BIND)
      • What Is BIND?
      • BIND on Mac OS X Server
      • Practical Example
      • Load Distribution With Round Robin
    • Setting Up a Private TCP/IP Network
    • Where to Find More Information
  • Firewall Service
    • Before You Set Up Firewall Service
      • What Is a Filter?
      • Using Address Ranges
      • IP Address Precedence
      • Multiple IP Addresses
      • Practical Examples
    • Setting Up Firewall Service for the First Time
      • Step 1: Configure firewall service
      • Step 2: Add filters to the IP filter list
      • Step 3: Start firewall service
    • Managing Firewall Service
      • Starting and Stopping Firewall Service
      • Setting Firewall Service to Start Automatically
      • Editing IP Filters
      • Creating an IP Filter
      • Searching for IP Filters
      • Viewing the Firewall Log
      • Configuring Firewall Service
      • Setting Up Logs for Firewall Service
      • Viewing Denied Packets
      • Filtering UDP Ports in Firewall Service
      • Blocking Multicast Services in Firewall Service
      • Allowing NetInfo Access to Certain IP Addresses
      • Changing the Any Port (Default) Filter
      • Preventing Denial-of-Service Attacks
      • Creating IP Filter Rules Using ipfw
    • Port Reference
    • Solving Problems
      • You Can’t Access the Server Over TCP/IP
      • You Can’t Locate a Specific Filter
    • Where to Find More Information
  • SLP DA Service
    • SLP DA Considerations
    • Before You Begin
      • Step 1: Define scopes
      • Step 2: Check client and router compatibility
      • Step 3: Configure logging settings
      • Step 4: Create scopes for your network
      • Step 5: Assign network services to each scope
      • Step 6: Start SLP DA service
    • Managing Service Location Protocol (SLP) Directory Agent (DA) Service
      • Starting and Stopping SLP DA Service
      • Viewing Scopes and Registered Services in SLP
      • Creating New Scopes in SLP DA Service
      • Registering a Service With SLP DA
      • Deregistering Services in SLP DA Service
      • Setting Up Logs for SLP DA Service
      • Viewing SLP DA Log Entries
      • Using the Attributes List
    • Where to Find More Information
  • Tools for Advanced Administrators
    • Terminal
      • Using the Terminal Application
      • Understanding UNIX Command-Line Structure
    • Secure Shell (SSH) Command
      • Enabling and Disabling SSH Access
      • Opening an SSH Session
      • Executing Commands in an SSH Session
      • Closing an SSH Session
      • Understanding Key Fingerprints
    • dsimportexport
    • createhomedir
    • Log Rolling Scripts
    • diskspacemonitor
    • diskutil
    • installer
      • Using installer
      • Full Operating System Installation
    • softwareupdate
    • systemsetup
      • Working With Server Identity and Startup
      • Working With Date and Time Preferences
      • Working With Sleep Preferences
    • networksetup
      • Reverting to Previous Network Settings
      • Retrieving Your Server’s Network Configuration
      • Configuring TCP/IP Settings
      • Configuring DNS Servers and Search Domains
      • Managing Network Services
      • Designating Proxy Servers
    • MySQL Manager
    • Simple Network Management Protocol (SNMP) Tools
    • diskKeyFinder
    • Enabling IP Failover
      • Requirements
      • Failover Operation
      • Enabling IP Failover
      • Configuring IP Failover
    • Using Disk Journaling
      • Enabling Journaling Using Disk Utility
      • Disabling Journaling Using Disk Utility
      • Enabling Journaling Using diskutil or newfs_hfs
      • Disabling Journaling Using diskutil
      • Repairing a Journaled Volume
    • Setting Up SSL for Mail Service
      • Generating a CSR and Creating a Keychain
      • Obtaining an SSL Certificate
      • Importing an SSL Certificate Into the Keychain
      • Creating a Passphrase File
      • Setting Up SSL for Mail Service on a Headless Server
    • Setting Up Authentication Manager
    • ldapsearch
  • Data Requirements of Mac OS X Directory Services
    • User Data That Mac OS X Server Uses
    • Standard Attributes in User Records
    • Format of MailAttribute in User Records
    • Standard Attributes in Group Records
    • Standard Attributes in Computer Records
    • Standard Attributes in Computer List Records
    • Standard Attributes in Mount Records
    • Standard Attributes in Config Records
  • Integrating Mac OS X Directory Services With Active Directory
    • Prerequisites for Integrating Mac OS X With Active Directory
    • The Scenarios
      • Providing Apple File Service for Users Defined in Active Directory Domains
      • Hosting Home Directories for Users Defined in Active Directory Domains
  • Glossary
  • Index