Apple Mac OS X Server (Administrator’s Guide) - Manual (Page 44)

44 Chapter 1
Networking and Security
You can choose from several user authentication options, ranging from Kerberos or
Lightweight Directory Access Protocol (LDAP) to Mac OS X Server’s Open Directory
Password Server.
Password Server lets you implement password policies and supports a wide variety of client
protocols. The Password Server is based on a standard known as SASL (Simple
Authentication and Security Layer), so it can support a wide range of network user
authentication protocols that are used by clients of Mac OS X Server services, such as mail
and file servers, that need to authenticate users.
Kerberos authentication is available for file services—Apple Filing Protocol (AFP) and File
Transfer Protocol (FTP)—as well as for mail services (POP, IMAP, and SMTP).
External network communication requests can be controlled with built-in Internet Protocol
(IP) firewall management. And data communications can be encrypted and authenticated
with protocol-level data security provided with Secure Sockets Layer (SSL), Transport Layer
Security (TLS), and Secure Shell (SSH).
File and Printer Sharing
File sharing offers flexible support for various native protocols as well as security and high
availability:
m It’s easy to share files with Macintosh, Windows, UNIX, Linux, and anonymous Internet
clients.
m You can control how much file space individual users consume by setting up mail and file
quotas. Quotas limit the number of megabytes a user can use for mail or files.
m Kerberos authentication is available for AFP and FTP file servers.
m You can improve the security of NFS volumes by setting up share points on them that let
users access them using the more secure AFP protocol. This feature is referred to as
resharing NFS mounts.
m AFP autoreconnect lets client computers keep Apple file servers mounted after long
periods of inactivity or after sleep/wake cycles.
Mac OS X Server printer sharing includes
m the ability to set up print quotas. Print quotas can be set up for each user and each print
queue, letting you limit the number of pages that can be printed during a particular
period.
m support for sharing printers among Mac OS 9 users (AppleTalk and LaserWriter 8
support), Mac OS X, Windows, and UNIX users