Apple 10.3 manual

Mac OS X Ser v er Getting Star ted For Version 10.3 or Later 034-2412_Cvr 9/12/03 10:19 AM Page 1[...]

K Apple Computer , Inc. © 2003 Apple C omputer , Inc. All rights reser ved. The owner or authoriz ed user of a valid copy of Mac OS X Ser ver software may reproduc e this publication for the purpose of learning to use such software. No part of this publication may be reproduced or transmitted for commercial purpose s, such as selling copies of thi[...]

3 1 C on ten ts Prefac e 9 About This Guide 9 What’ s New in V ersion 1 0.3 9 Superior P erformance and Scalability 10 Improved Setup , Management , and Monitoring 11 Enhanced Network and Directory Ser vices 12 Improved Windows Integration 13 New W orkgroup and Desktop Management Featur es 13 What’ s Included in T his Guide 13 P art I: Introduc[...]

4 Contents 32 Discovery of Network Ser vices 32 User Management 32 User Accounts 33 Group Accounts 33 Home Directories 33 Macintosh User Management 34 Windows User Management 34 System Image Services 34 NetBoot 35 Network Install 35 File Services 36 Sharing 36 Apple F ile Ser vice 36 Windows Ser vices 37 Network F ile System (NFS) Service 37 File T[...]

Contents 5 51 W orkgroup Manager 51 Opening and Authenticating in Workgr oup Manager 52 Using W orkgroup Manager 55 Ser ver Admin 55 Opening and Authenticating in Server Admin 55 Using Ser ver Admin 58 System Image Management 58 Ser ver Monitor 59 Media Streaming Management 59 Apple Remote Desktop 60 Command-Line T ools 60 Macintosh Manager 60 W or[...]

6 Contents 80 Information Y ou Need 80 Upgrading Fr om V ersion 1 0. 1 or 1 0.2 81 Pr eparing Disks for Installing Mac OS X Ser ver 82 Hardware-Specific Instructions for Installing Mac OS X Ser ver 82 Identifying Remote Servers When Installing Mac OS X Ser ver 82 Installing Ser ver Software Interactively F rom the Install Discs 82 Using Installer t[...]

Contents 7 12 0 How to Set Up the Ser ver Glossary 12 7 Index 13 7 LL2343.Book Page 7 Thursday, August 14, 2003 5:12 PM[...]

LL2343.Book Page 8 Thursday, August 14, 2003 5:12 PM[...]

9 Prefac e About This Guide This guide pro vides an orien tation to the featur es and initial setup of Mac OS X Ser ver version 1 0.3 . The guide will help you prepare your ser ver to star t ser ving your users and your business needs. What ’ s New in V ersion 1 0.3 Mac OS X Ser ver version 1 0.3 builds on the award-winning capabilities of versio[...]

10 Preface About This Guide • Optimized for the G5 . Mac OS X Server version 1 0.3 features support for Apple ’ s G5 systems. In addition to benefiting from the increased per formance and faster clock speed of the ultrafast 64-bit processor , Mac OS X Ser ver enables users to lev erage the advanced capabilities of the G5-based archit ecture, su[...]

Preface About This Guide 11 Enhanced Network and Dir ector y Ser vices Network and directory ser vices in Mac OS X Ser ver version 1 0.3 have been greatly enhanced to provide more scalability , per formance, and enterprise-strength capabilities: • Open Directory 2 —robust LDAP solution with Kerberos authentication. Mac OS X Ser ver version 1 0.[...]

12 Preface About This Guide • Support from home directories—Suppor t for streaming movies fr om users’ network home directories . • Apache web server deploymen t and configuration enhanc ements . Mac OS X Ser ver version 1 0.3 features an enhanced user in terface for configuring Apache—the world’ s most widely used web server . P ar t o[...]

Preface About This Guide 13 New W orkgroup and Desktop Managemen t F eatur es Mac OS X Ser ver version 1 0.3 improves your ability to manage M acintosh client desktops: • Enhanced image managemen t . Y ou can create a NetBoot or Network Install image that mimics an existing system. The source of the image can be a volume or a partition. Other ima[...]

14 Preface About This Guide Getting Additional Information Mac OS X Ser ver comes with a suite of guides that explain the services and provide instructions for configuring, managing, and troubleshooting them. Most of these documents come on the Mac OS X Ser ver Administration T ools disc. All of them are available in PDF f ormat from www .apple.com[...]

Preface About This Guide 15 F or more information, consult these resources: • Read Me documents contain important updates and special inf ormation. Look for them on the ser ver discs. • Online help , av ailable from the Help menu in all the server applications, provides onscreen instructions for administration tasks as well as late br eaking ne[...]

LL2343.Book Page 16 Thursday, August 14, 2003 5:12 PM[...]

I P ar t I: Intr oduction to Mac OS X Ser v er The chapters in this part of the guide introduce y ou to Mac OS X Ser ver and the applications and tools av ailable for administ ering its ser vices. Chapter 1 Mac OS X Ser ver in Action Chapter 2 Inside Mac OS X Ser ver Chapter 3 Ser ver Administr ation LL2343.Book Page 17 Thursday, August 14, 2003 5:[...]

LL2343.Book Page 18 Thursday, August 14, 2003 5:12 PM[...]

1 19 1 Mac OS X Ser v er in Action Mac OS X Ser ver addresse s the needs of many envir onments . This chapter offers a brief graphical t our that highlights services and configurations of special inter est in some popular scenarios: • Enterprise organizations • Higher-education facilities • K-1 2 labs and classrooms • Small and medium busin[...]

20 Chapter 1 Mac OS X Server in Action Enterprise Or ganizations In large organizations, M ac OS X Ser ver helps you suppor t the special needs of depar tments and workgroups , but centralize corporate-level services. • Open Director y lets you manage directory data centrally , but distribute it geographically using replication. • Other enterpr[...]

Chapter 1 Mac OS X Server in Action 21 • Mac OS X Ser ver integrates w ell with existing corporate services, from director y systems to Simple Network Management P rotocol (SNMP) implementations . • In addition to hosting replicated Open Directory domains for local authentication, departmental ser vers can be tailored to support workgroup needs[...]

22 Chapter 1 Mac OS X Server in Action • The wide range of client computers—Macint osh, Windows, UNIX, Linux—demands flexible file access support. The highly scalable IP-based file services in Mac OS X Ser ver support file access fr om anywhere on the netw ork via A pple F iling P rotocol (AFP), Network F ile System (NFS), File T ransfer P ro[...]

Chapter 1 Mac OS X Server in Action 23 T eachers need file ser vices support so they can mak e lesson plans and teaching materials a vailable t o students online. T eachers also need a way to retriev e and perhaps update student recor ds and other administrative information that is cen tralized on a remote server . • Mac OS X Ser ver ’ s client[...]

24 Chapter 1 Mac OS X Server in Action Small and Medium Businesses Small businesses (fewer than 1 00 employees) and medium businesses (about 1 00 to 500 employees) benefit from cross-platform file and printer sharing, network ser vices, mail, web , and database applications. The directory and network ser vices in the following picture reside on one[...]

Chapter 1 Mac OS X Server in Action 25 • Network Address T ranslation (NA T ) ser vice lets employees share a single Internet connection. NA T converts all client IP addresses to one IP address f or Internet communications. Computational Clust ering Clusters of Xserves offer a high-performance, cost-effective approach to the computationally inten[...]

26 Chapter 1 Mac OS X Server in Action Y ou can write, compile, and debug using C, C++, Objective-C, or Java. Project Builder can be used to port command-line applications to Mac OS X and M ac OS X Ser ver or to enhance them with a Mac OS X user interface. • An administrator comput er , such as an iBook running Mac OS X Ser ver administrative app[...]

Chapter 1 Mac OS X Server in Action 27 W eb S er vice Pr oviders Mac OS X Ser ver provides the full range of ser vices you need if you host ecommerce websites or pr ovide other Internet services that require high a vailability and scalability . Y ou can configure Mac OS X Ser ver computers for shar ed access by multiple users and companies. The ter[...]

28 Chapter 1 Mac OS X Server in Action • Quick Time Streaming Ser ver lets you broadcast multimedia in real time, including live Quick Time Broadcaster streams. • Xser ve RAID provide s extended storage. • High availability support includes automatic restart following a service or power failure and IP failover . IP failover can be configured [...]

2 29 2 Inside Mac OS X Ser v er Mac OS X Ser ver blends a mature , stable UNIX foundation with open standards support and Macintosh ease of use. This chapter introduces the ser vices that Mac OS X S er ver offers and tells you where to find more information about them. Cor e System Ser vices Mac OS X Ser ver is built on top of Dar win—the core Ma[...]

30 Chapter 2 Inside Mac OS X Server Open Director y Open Director y is Mac OS X Ser ver ’ s director y ser vices framework. Director y ser vices are the means by which a server and its clients (users and services) locate and retrieve information needed for authentication, network resource discover y , and other crucial system activities. User and[...]

Chapter 2 Inside Mac OS X Server 31 Using Other Directories Open Director y lets you take advantage of information you have already set up in non- Apple directories and in flat files: • On other LDAPv3 ser vers • On Active Directory ser vers • In Berkeley Software Distribution (BSD) configuration files • In Sun Microsystems Network Informat[...]

32 Chapter 2 Inside Mac OS X Server The following services on Mac OS X Ser ver support Kerberos authentication: AFP , mail, FTP , SSH, and login window . • Storing passwords in user acc ounts . This approach ma y be useful when migrating user accounts from earlier server versions. However , this approach may not suppor t clients that require cert[...]

Chapter 2 Inside Mac OS X Server 33 Group Acc ounts Group accounts off er a simple way to manage a collection of users with similar needs. A group account stor es the identities of users who belong t o the group as well as information that lets you customize the work ing environment for members of a group. Home Directories A home director y is a fo[...]

34 Chapter 2 Inside Mac OS X Server • Y ou can set up mobile accounts to support users who use their computers both on and off the network. Mobile Accoun ts Mobile accounts let the user of a Mac OS X version 1 0.3 or later computers work offline but continue to • Log in using the network name and passw ord • Experience the same managed prefer[...]

Chapter 2 Inside Mac OS X Server 35 • NetBoot simplifies the administration of large-scale deploymen ts of network-based Macintosh systems or racks of Xserves. It ’ s ideal for an organization with a number of computers that need to be identically configur ed; for example , NetBoot can off er a web service provider a way to configure multiple w[...]

36 Chapter 2 Inside Mac OS X Server The file services administration guide describes how to set up and manage Mac OS X Ser ver file ser vices. The Windows services administration guide pro vides inf ormation on sharing files with Windows users. Sharing Y ou share files among users by de signating share points. A share point is a folder , har d disk[...]

Chapter 2 Inside Mac OS X Server 37 Windows file ser vice provides several wa ys to manage locks for Windows share points: • Opportunistic lock ing offers a way to optimize performance for share poin ts used only by W indows clients. Oppor tunistic locking is disabled by default because it is not compatible with NFS or AFP . Opportunistic locks, [...]

38 Chapter 2 Inside Mac OS X Server Mac OS X Ser ver suppor ts anonymous FTP and by defa ult prevents anon ymous FTP users from deleting files , renaming file s, overwriting files, and changing file permissions. Explicit ac tion must be taken by the ser ver administrator to allow uploads from anonymous FTP users , and then only into a specific shar[...]

Chapter 2 Inside Mac OS X Server 39 W eb service’ s Secure Sockets Layer (SSL) support enables secure encr yption and authentication for ecommerce website s and confidential materials. An easy-to-use digital cer tificate provides non-forgeable proof of your website identity . Mac OS X Ser ver offers extensive suppor t for dynamic websites: • W [...]

40 Chapter 2 Inside Mac OS X Server Network Ser vices Mac OS X Ser ver includes these network ser vices for helping you manage Internet communications on your T CP/IP network: • D ynamic Host Configuration P rotocol (DHCP) • Domain Name System (DNS) • Fir ewall • Network Addr ess T ranslation (NA T ) • Vir tual Priva te Network ( VPN) •[...]

Chapter 2 Inside Mac OS X Server 41 Mac OS X Ser ver provides administration tools f or service configuration management and zone control as w ell as for monitoring , pro viding a graphical way to: • Enable zone transfers and r ecursion • Specify interfaces on which to listen for DNS reque sts • Maintain blocked host lists • W ork with log [...]

42 Chapter 2 Inside Mac OS X Server VPN Y ou can set up a Vir tual Priv ate Network ( VPN) using Mac OS X Ser ver . VPN is a network transmission protocol that use s encr yption and other technologies to provide secure communications o ver a public network. T ypically the public network is the Inte rnet, but VPNs are also used to support connection[...]

Chapter 2 Inside Mac OS X Server 43 T wo Quick Time applications that come with Mac OS X S er ver help you prepare content for streaming: • QT SS Publisher lets you upload content to the streaming ser ver and prepare it for delivery . I t provides these key feature s: creation and management of pla ylists, generation of content dir ector y websit[...]

44 Chapter 2 Inside Mac OS X Server JBoss JBoss is a widely used full-featured Ja va application server . It provide s a full Java 2 Platform, Enterprise Edition (J2EE) technology stack with features such as: • An Enterprise Jav a Bean (EJB) container • Java Managemen t Extensions ( JMX) • Java C onnector Architecture (JCA) Mac OS X Ser ver p[...]

Chapter 2 Inside Mac OS X Server 45 F or Windows users, your ser ver can provide VPN ser vice, file and printer sharing, and Open Director y authentication. Y ou can also host Windows user home directories if you set up a Windows PDC on Mac OS X Server . Y ou’ll find instructions for setting up a server to work with other v endors’ products in [...]

LL2343.Book Page 46 Thursday, August 14, 2003 5:12 PM[...]

3 47 3 Ser ver A dministration Manage Mac OS X Ser ver using graphical applications or command-line tools . These tools off er a diversity of approaches to server administration: • Y ou can administer servers locally (directly on the ser ver you are using) or remotely—from another server , a Mac OS X computer , or a UNIX workstation. • Graphi[...]

48 Chapter 3 Server Administration The next sec tion describes how to set up a computer on which you can use these applications and tools. Comput ers Y ou Can Use t o Administer a Server When you want to administer a local ser ver using the graphical administration applications (they ’ re in /Applications/Server/), log in to the server as an admi[...]

Chapter 3 Server Administration 49 Setting Up an Administrat or Comput er An administrator computer is a computer with Mac OS X or Mac OS X Ser ver version 1 0.3 or later that you use to manage remote ser vers. Once you’v e installed and set up a M ac OS X Ser ver that has a display , keyboard, and optical drive , it is already an administrat or [...]

50 Chapter 3 Server Administration Installer Use the Installer to install server software on a local ser ver from the install discs that came with your ser ver . T he Installer lets you per form: • A clean installation of Mac OS X Ser ver , which installs version 1 0.3 after erasing and formatting a target disk • An upgrade installation, which [...]

Chapter 3 Server Administration 51 W orkgroup Manager Y ou use W orkgroup Manager to administ er user , group , and computer accounts, work with managed client pref erences for Mac OS X users , manage share points, and access the Inspector , an advanced feature that lets you do raw editing of Open Director y entries. Information about using Workgro[...]

52 Chapter 3 Server Administration Using W orkgroup Manager After login, the user account windo w appears, showing a list of user accounts. Initially , the accounts listed are those st ored in the last directory node of the ser ver ’ s search path. Here is ho w to get started with the major tasks you per form with this application: • T o admini[...]

Chapter 3 Server Administration 53 • T o work with managed client pref erences f or user , group , or computer accounts, click the Pref erences icon in the t oolbar . • T o work with share points , click the Sharing icon in the toolbar . LL2343.Book Page 53 Thursday, August 14, 2003 5:12 PM[...]

54 Chapter 3 Server Administration • T o display the Inspector , choose Workgroup Manager > P ref erences. Enable the setting that shows the Inspector and click OK. Selec t the “ All recor ds” button (which looks like a bull’ s-eye) to access the Inspec tor . • T o control the W orkgroup M anager environment , you hav e several options[...]

Chapter 3 Server Administration 55 Ser ver Admin Y ou use Ser ver Admin to administ er ser vices on one or more Mac OS X Ser ver computers. Opening and Authen ticating in Ser ver A dmin Ser ver Admin is installed in /Applications/Server/. T o open Ser ver Admin, click the Ser ver Admin icon in the Dock or click the Admin butt on on the W orkgroup M[...]

56 Chapter 3 Server Administration T o add a ser ver to the Comput ers & Ser vices list, click Add Ser ver in the toolbar and log in to the ser ver . The next time you open Ser ver Admin, any server you have added is displayed in the list. T o limit the items that appear in the Computers & Services list, use the pop-up menu above the list t[...]

Chapter 3 Server Administration 57 • T o work with a particular ser vice on a ser ver , click the service in the list under the ser ver in the Comput ers & Ser vices list. Y ou can view information about a service (logs, graphs, and so f or th) and manage its settings. Administration guides for individual ser vices provide detailed instructio[...]

58 Chapter 3 Server Administration • T o access W orkgroup Manager , click the W orkgroup Manager icon in the toolbar . Syst em Image Management T o create and manage NetBoot and Network Install images, you use several applications: • NetBoot Desktop Admin lets you modify Mac OS 9 images. • Network Image Utility lets you create and modify Mac[...]

Chapter 3 Server Administration 59 • Use the “Update every ” pop-up menu in the Info pane to specify ho w often you want to refresh data. • Choose File > Expor t or File > Impor t to manage different lists of Xser ve ser vers you want to monitor . Choose File > Merge to consolidate lists int o one. • The system identifier lights [...]

60 Chapter 3 Server Administration Command-Line T ools If you are an administrator who prefers to work in a command-line environment , you can do so with Mac OS X Ser ver . Fr om the T erminal application in Mac OS X, you can use the built-in UNIX shells (sh, csh, tsh, zsh, bash) to use tools for installing and setting up server software and for co[...]

II P ar t II: Installation and Initial Setup The chapters in this part of this guide tell you how to install ser ver software and set up a ser ver for the first time. Chapter 4 Installation and Setup Overview Chapter 5 Before Y ou Begin Chapter 6 Installing Ser ver Software Chapter 7 Initial Ser ver Setup Appendix A Mac OS X Ser ver Worksheet Appen[...]

LL2343.Book Page 62 Thursday, August 14, 2003 5:12 PM[...]

4 63 4 Installation and Setup O verview Befor e installing and setting up Mac OS X Ser ver , take the time to do a little planning and to familiariz e yourself with your options . This chapter is a roadmap to details presen ted in later chapters. I t sur veys the stages of installation and initial ser ver setup and the options available to you duri[...]

64 Chapter 4 Installation and Setup Overview Installing Ser ver Software Some computers come with Mac OS X Ser ver version 1 0.3 software already installed. Nonetheless, there are several times you need to install ser ver sof tware, as when you want to upgrade from a v ersion 1 0. 1 or 1 0.2 ser ver , change a computer with Mac OS X into a server ,[...]

Chapter 4 Installation and Setup Overview 65 Remote Installation F rom the Ser ver Install Discs If the target server has no keyboard or display or if it’ s not the computer you are using , you can use an administrator computer to install ser ver sof tware from the ser ver install discs. An administrator computer is a version 1 0.3 Mac OS X Ser v[...]

66 Chapter 4 Installation and Setup Overview Alternatively , you can use the command line. After booting the target ser ver , from an administrator computer , connect to the target server using SSH and follow the instructions in “Using the installer Command-Line T ool to Install Server Software” on page 85. If you have multiple ser vers onto wh[...]

Chapter 4 Installation and Setup Overview 67 Initial Ser ver Setup After installing server software, the next task is to set up the server . During ser ver setup , basic ser ver characteristics are established. For example: • The language to use f or ser ver administration and the computer keyboard lay out are defined. • An administrator user i[...]

68 Chapter 4 Installation and Setup Overview When multiple remote ser vers can use the same setup data, you can supply the data, and then initiate setup of all the servers at once, using a batch approach. This technique , shown on the left side of the picture below , require s that network identifiers for all the target servers be set using DHCP or[...]

Chapter 4 Installation and Setup Overview 69 Automa ting Ser ver Setup When you have more than just a few ser vers to set up, consider using automated ser ver setup . T his approach also provide s a way to pre serve setup data so it can be reused should you want or need to reinstall ser ver software. Use Ser ver Assistant to s pecify setup data, th[...]

70 Chapter 4 Installation and Setup Overview Then plug the iP od int o the next ser ver . Each ser ver recognize s its own file , because it’ s been named using one of its identifiers and resides in a known location. For example , a ser ver with WXYZ1 234 as the first eight characters of its built-in serial number would use this setup file to set[...]

Chapter 4 Installation and Setup Overview 71 The most critical components of the infrastructure are DHCP and Open Director y , as the following picture illustrates . T he Open Directory ser ver in this example hosts an LDAP director y in which setup data has been saved . The address of the Open Dir ector y ser ver is register ed with DHCP ser vice,[...]

72 Chapter 4 Installation and Setup Overview Setting Up Ser vice s After initial ser ver setup is complete, you can: • Finish migrating data from a previous ser ver , if you still need to do so. • Set up individual ser vices you want to provide, using the ser ver administration tools described in Chapter 3, “Ser ver A dministration,” on pag[...]

5 73 5 Befor e Y ou Begin Befor e installing and setting up Mac OS X Ser ver , take the time to do a little planning . The major goals of the planning phase are to make sure that: • Ser ver user and administrator needs are addre ssed by the servers you deploy • Ser ver and service prerequisites that affect installation and initial setup are ide[...]

74 Chapter 5 Before You Begin • What user management requiremen ts need to be met? Will user computers need to be NetBooted? Will M acintosh client managemen t and network home directories be required? Individuals with server administration experience should work with server users who may not hav e a technical background , so that they better app[...]

Chapter 5 Before You Begin 75 • Home directories for netw ork users can be consolidated onto one server or distributed among various ser vers. While you can move home directories if you need to , you may need to change a large number of user and share point records, so devise a strategy that will persist for a r easonable amount of time. See the [...]

76 Chapter 5 Before You Begin When you can’ t use the upgrade approach, you can migrate data and settings. Y ou’ll need to migrate , not upgrade , when • A version 1 0. 1 or 1 0.2 ser ver ’ s hard disk needs reformatting , or does not meet the minimum version 1 0.3 hardware requirements (see “Understanding System Requirements f or Install[...]

Chapter 5 Before You Begin 77 • Are there air conditioning or pow er requirements that need t o be met? See the documentation that comes with server hardware for this kind of information. • Have you been thinking about upgrading elements such as cables, switches , and power supplies? No w may be a good time to do it. • Are your T CP/IP networ[...]

78 Chapter 5 Before You Begin 5 P opulate the directory with data, such as users, groups, and home director y data. This process in volve s, for example, impor ting users and groups, setting up share points, setting up managed preference s, and so forth. 6 Configure DHCP t o specify the address of the dir ector y ser ver so it can be served to DHCP[...]

6 79 6 Installing Ser ver Software Y ou can upgrade to Mac OS X Ser ver version 1 0.3 from version 1 0. 1 or 1 0.2 or you can per form a clean installation of Mac OS X Ser ver version 1 0.3 . Review the system requirements below and “Inf ormation Y ou Need ” on page 80 before using the detailed installation instructions, which you’ll find as [...]

80 Chapter 6 Installing Server Software The computer must hav e: • At least 1 28 megabytes (MB) of random access memory (RAM). At least 2 56 MB of RAM is required for high-demand servers running multiple services. • At least 4 gigabyte s (GB) of disk space av ailable. • A built-in USB port. A display and keyboard are optional. Y ou can instal[...]

Chapter 6 Installing Server Software 81 • NetBoot settings and images • DHCP settings Preparing Disks f or Installing Mac OS X Ser ver When you per form a clean installation, the target disk or par tition is erased and there are several disk-preparation tasks t o per form: • Pre serve any user data you want to sa ve on the tar get disk or par[...]

82 Chapter 6 Installing Server Software Hardware-Specific Instructions for Installing Mac OS X Ser ver When you install ser ver sof tware on Xser ve systems, the procedure you use when star ting the computer for installation is specific to the k ind of Xser ve hardware you have . Y ou may need to refer t o the “Xserve User ’ s Guide” or “Qu[...]

Chapter 6 Installing Server Software 83 3 Restart the computer while holding down the C key on the keyboard. T he computer boots from the install disc. Y ou can release the C key when you see the Apple logo . 4 When Installer opens, if you want to per form a clean installation, optionally use the Installer menu to open Disk Utility or T erminal to [...]

84 Chapter 6 Installing Server Software 2 Start the target computer from the first install disc. The procedure you use depends on the target server hardware. If the target server has a keyboard and an optical drive, inser t the first install disc into the optical drive. Then hold down the C key on the keyboard while restarting the computer . If the[...]

Chapter 6 Installing Server Software 85 Installing Ser ver Software on a Computer With Mac OS X V ersion 1 0.3 Preinstalled F ollow these instructions to install server software on a computer that came with Mac OS X version 1 0.3 installed. T o install server software on your computer: 1 Start up the computer from the hard disk, as you would for no[...]

86 Chapter 6 Installing Server Software If the target server has a keyboard and an optical drive, inser t the first install disc into the optical drive. Then hold down the C key on the keyboard while restarting the computer . If the target server is an Xser ve with a built-in optical drive, star t the ser ver using the first install disc by follo w[...]

Chapter 6 Installing Server Software 87 If you are installing a remote ser ver , from T erminal on an administrator computer or from a UNIX workstation, establish an SSH session as the root user with the target ser ver , substituting the target server ’ s actual IP address for <ip addre ss>: ssh root@<ip address> If you don’ t know [...]

88 Chapter 6 Installing Server Software Installing Optional Ser ver Software T o install Macintosh Manager , insert the M ac OS X Ser ver Administration T ools disc and read the installation information pro vided on the disc. T o install NetBoot for Mac OS 9, download a copy of the “NetBoot for Mac OS 9” CD image from www .info.apple.com. LL234[...]

7 89 7 Initial Ser ver Setup Basic characteristics of your Mac OS X Ser ver are established during initial server setup . Review “Information Y ou Need” on page 90 before using the detailed installation instructions, which you ’ll find as indicated in the following table. For inf ormation about See instructions for On Setting up servers inter[...]

90 Chapter 7 Initial Server Setup Information Y ou Need See Appendix A, “Mac OS X Ser ver Worksheet,” on page 1 1 1 to understand and r ecord information for each ser ver you want to set up. The information below pro vides supplemental explanations for some of the it ems on the worksheet. When you are upgrading from M ac OS X Ser ver version 1 [...]

Chapter 7 Initial Server Setup 91 The device that is mounted as a file system can be the ser ver ’ s hard drive or an iP od , CD , FireWir e drive, USB drive, or other device plugged in to the ser ver . F or example, /V olumes/A dminiP od/Auto Server Setup/myser ver .example.com.plist. • The setup file name is one of these; when searching for s[...]

92 Chapter 7 Initial Server Setup Using Setup Data Sav ed in a Directory Using this approach offers the most unattended wa y to set up multiple servers, but it requires that you have a DHCP and director y infrastructure in place. Using Ser ver Assistant, you save setup data to an existing director y the computer you are using is configured to acces[...]

Chapter 7 Initial Server Setup 93 The passphrase file can ha ve one of these names; target ser vers search for name s in the order listed: <MAC-address-of-server>.pass (include any leading zeros but omit colons). F or example, 0030654dbcef .pass. <IP-address-of-server>.pass. For example , 1 0.0.0.4.pass . <partial-host-name-of-ser ve[...]

94 Chapter 7 Initial Server Setup After setup , use the Direc tor y Access or Server Admin applications to refine the server ’ s director y configuration, if necessary . Director y Access lets you set up connections with multiple director y domains and specify a search policy—the order in which the server should search through the domains. Ser [...]

Chapter 7 Initial Server Setup 95 When a user attempts to log in to the server or use one of its ser vices that require authentication, the ser ver authenticate s the user by consulting the local database. If the user has an account on the system and supplies the appropriate password , authentication succeeds. Setting Up a Ser ver to Host an Open D[...]

96 Chapter 7 Initial Server Setup Y ou can set up a ser ver to use a NetInf o director y on Mac OS X Ser ver version 1 0.0 and later or an LDAP directory on version 1 0.2. However , you ma y not be able to take advantage of some v ersion 1 0.3 features: • Windows PDC ser vice requires a version 1 0.3 LDAP master directory . • VPN needs version [...]

Chapter 7 Initial Server Setup 97 P ostponing Local Ser ver Setups Follo wing Installation After installation of server software on a local computer is complete, the computer restarts and Ser ver Assistant opens automatically . If you want to postpone ser ver setup until a later time, press Command-Q. The computer shuts down. When it ’ s restarte[...]

98 Chapter 7 Initial Server Setup 11 T o save the setup data as a tex t file or in a form you can reuse (a setup file or direc tory record), click Save As. All the settings you specified except the ser ver serial number are saved . When you use setup data saved in a file or director y to set up a ser ver , you need to use Ser ver Admin t o enter th[...]

Chapter 7 Initial Server Setup 99 9 Enter the setup data as you move through the Assistant’ s panes, following the onscreen instructions. When prompt ed, enter the serial number for each tar get server . 10 After all setup data has been specified , review the summar y displayed by Server Assistant and optionally click Go Back to change data. 11 T[...]

100 Chapter 7 Initial Server Setup 8 In the Language pane, choose File > Open C onfiguration File or F ile > Open Direc tory Record to load the saved setup data you want to use. If the saved setup data is encr ypted , type the passphrase when prompted . Optionally choose View > Jump to Review to review the setup data, then use Go Back as n[...]

Chapter 7 Initial Server Setup 101 Setting Up Ser vers Automa tically Using Data Sav ed in a F ile After ser ver software has been installed on a ser ver , you can set it up automatically using data saved in a file . T o sav e and apply setup data in a file: 1 Fill out the Mac OS X Ser ver worksheet for each ser ver you want to set up. The workshee[...]

102 Chapter 7 Initial Server Setup 12 Click OK, navigate to the location where you want to save the file, name the file using one of the following options , and click Save; when searching for setup files , target ser vers search f or names in the order listed: <MAC-address-of-server>.plist (include any leading zeros but omit colons). F or exa[...]

Chapter 7 Initial Server Setup 103 generic.pass (a file that any server will recognize). Place the passphrase file on a volume moun ted locally on the target server in /V olumes/*/SA_Keys/<pass-phrase-file>, where * is any device mounted under /V olumes. 16 T o provide a passphrase interactively , use Ser ver Assistant on an administrator com[...]

104 Chapter 7 Initial Server Setup 7 Enter the setup data as you move through the Assistant’ s panes, following the onscreen instructions. 8 In the Language pane, choose File > Open C onfiguration File or F ile > Open Direc tory Record to load the saved setup data you want to work with. If the saved setup data is encr ypted , type the passp[...]

Chapter 7 Initial Server Setup 105 See “Define Ser ver Setup Infrastruc ture Requirements ” on page 7 7 for some additional infrastructure information. T he Open Directory and network ser vices administration guides provide instructions for setting up dir ectories and DHCP . 15 If the setup data is encr ypted, make the passphrase available t o [...]

106 Chapter 7 Initial Server Setup Determining the Status of Setups There are several wa ys to view setup status information in Ser ver Assistant: • After you’v e interactively initiated the setup of one or more ser vers, progress information is displayed . If setup is successful, a target ser ver reboots when setup is complete. If setup is not[...]

Chapter 7 Initial Server Setup 107 Setting Up User Management Unless you are using a ser ver exclusively to host Internet content (such as webpages) or per form computational clustering, you probably want to set up user accounts in addition to the administrator account cr eated during server setup. T o set up a user account: 1 Open W orkgroup Manag[...]

108 Chapter 7 Initial Server Setup Setting Up Print Service When you turn on print ser vice, ser ver users can share network PostScript printers or P ostscript and non-P ostscript printers connected directly to the ser ver . When you turn on print ser vice in S er ver Admin, a queue is set up for any USB printer connected to the ser ver . No printe[...]

Chapter 7 Initial Server Setup 109 3 In the list beneath the ser ver of inter est, click the button for web service. 4 If it is not running, click the Star t Ser vice button in the toolbar . The web technologie s administration guide describes the man y features of w eb ser vice, including how to set up SSL for a site , enable W ebMail, and use Web[...]

110 Chapter 7 Initial Server Setup Setting Up an Application Ser ver If you want to set up a Java application ser ver , see the JBoss administration guide. It tells you how to develop and deploy ser vlets, enterprise beans, and enterprise applications and how to configure and administer a Ja va application server . Use Ser ver Admin to administ er [...]

111 Appendix A A Mac OS X Ser v er W orksheet Identify the server for which information appears in the table below: Item Description Y our information Identity of server for installation and setup F or interactive installation and setup of a server on the local subnet, one of these value s for the server : - IP address in IPv4 format (000.000.000.0[...]

112 Appendix A Mac OS X Server Worksheet Disk format (for clean installations only) In most cases, use M ac OS Extended ( Journaled). Y ou can also use Mac OS Extended or case-sensitive HFS+. Disk partitioning (for clean installations only) The minimum recommended size of a target disk partition is 4 GB. Disk mirroring (for clean installations only[...]

Appendix A Mac OS X Server Worksheet 113 Administrator’ s short name A short name can contain as many as 25 5 Roman charac ters, typically eight or fewer . Use only a through z, A through Z, 0 through 9, or _ (underscore). Administrator’ s password If you record this value, be sure to keep this worksheet in a safe place. This v alue is case sen[...]

114 Appendix A Mac OS X Server Worksheet Open Directory usage Selec t one: - Standalone Ser ver (use only the local domain). - Connected to a Directory System (get inf ormation from an existing directory). If you choose this option, use one of the next four rows in this table to indicate how the server will locate the directory. - Open Directory M [...]

Appendix A Mac OS X Server Worksheet 115 Using “Open Director y Master” Optionally indicate you want to enable a Windows Primary Domain Con troller on the server . Pro vide a computer name and a domain name for the controller . The computer name can contain a-z, A-Z, 0-9, -, but no . or space and can ’t contain only numbers. Finish setting up[...]

116 Appendix A Mac OS X Server Worksheet Network interface data for this server is in the table below : Po r t Characteristic Y our information Built-in Ethernet (en0) Whether to use the port for TCP/IP connections Whether to use the port for Apple T alk connections. Mac OS 9 clients use Apple T alk for Chooser browsing , and some printers require [...]

Appendix A Mac OS X Server Worksheet 117 If TCP/IP connection is configured using DHCP with Manual IP address: IP address DNS servers Search domains (optional) If TCP/IP connection is configured using DHCP: DHCP client ID (optional) DNS servers Search domains (optional) If TCP/IP connection is configured using BootP: DNS servers Search domains (opt[...]

118 Appendix A Mac OS X Server Worksheet If TCP/IP connection is configured manually : IP address Subnet mask Router (use server IP address if in doubt) DNS servers Search domains (optional) If TCP/IP connection is configured using DHCP with Manual IP address: IP address DNS servers Search domains (optional) If TCP/IP connection is configured using[...]

119 Appendix B B Setup Example The setup example in this appendix illustrates one wa y to set up the directory and network infrastructure of Mac OS X Ser ver in a small business scenario . Mac OS X Ser ver in a Small Business In this example, Mac OS X Ser ver provides director y , network, and produc tivity ser vices to employees in a small busines[...]

120 Appendix B Setup Example • An Open Director y master LDAP domain on the server centralizes user management , including authentication of Mac OS X and Windows users. • The ISP’ s DNS ser vice provides a domain name for the compan y (example.com). • A DNS ser ver running on Mac OS X Ser ver provides name services for the server , the prin[...]

Appendix B Setup Example 121 “Using Ser ver Assistant to Install Remot ely F rom the Install Discs” on page 83 tells you how to start up other k inds of computers to install server software. 2 When the Installer opens, proceed through its panes by follo wing the onscreen instructions. If you need to format the target disk, see “Preparing Disk[...]

122 Appendix B Setup Example 9 In the Director y Usage P ane , choose Open Directory Master to set up a master LDAP director y on the ser ver . Select Enable Windows P rimar y D omain Controller and en ter a Domain/W orkgroup name. The se settings will set up a Windows PDC so that employees who use Windows NT , Windows 2000, and Windows XP workstat[...]

Appendix B Setup Example 123 5 T o define the master zone ’ s records , selec t the master zone in the Zone list. Y ou’ll see that a Name Ser ver (NS) record already exists; it was created when the zone was created . Click the Add button (+) under the Records in Zone list to add an A ddress (A) record for your ser ver . Enter these values , the[...]

124 Appendix B Setup Example 7 Click LDAP to configure DHCP to iden tify the ser ver you are configuring as the sour ce of director y information for clien ts who are served dynamic IP addresses. The ser ver you are setting up is automatically identified in the S er ver Name field, because you set up a master LDAP domain on the ser ver when you use[...]

Appendix B Setup Example 125 4 Enable PPTP (Poin t to P oint T unneling Protocol) if employees will need to access the intranet from Windows workstations other than Windows XP computers or from Mac OS X version 1 0.2 computers when they are away from the office . If you need to support older Windows clien ts that don ’t ha ve 1 28-bit PPTP suppor[...]

126 Appendix B Setup Example Step 1 0: C onfigure client computers The information that f ollows applies to Mac OS X version 1 0.3 computers. F or information about how to support Windows client comput ers, see the Windows administration guide. 1 If necessary , configure Mac OS X clients to retrieve information from the DHCP ser ver . Mac OS X vers[...]

127 Glossary Glossar y administrator A user with server or directory domain administration privileges. Administrators are alwa ys members of the predefined “ admin ” group . administrator c omputer A Mac OS X computer onto which you have installed the ser ver administration applications from the Mac OS X Ser ver Admin CD . AFP (Apple F iling Pr[...]

128 Glossary C GI (Common Gatewa y Interface) A script or program that adds dynamic functions to a website . A C GI sends information back and f orth between a website and an application that provides a service for the site. F or example, if a user fills out a form on the site, a CGI could send the me ssage to an application that processes the data[...]

Glossary 129 firewall Software that protects the network applications running on your ser ver . IP firewall service, which is part of Mac OS X S er ver software, scans incoming IP packets and rejects or accepts these pack ets based on a set of filters you create. FireWire A hardware technology for ex changing data with peripheral devices, defined b[...]

130 Glossary IP (Internet P rotocol) Also known as IPv4. A method used with T ransmission Control Pr otocol ( TCP) t o send data between computers ov er a local network or the Int ernet. IP delivers packets of data, while TCP keeps track of data packets. IP address A unique numeric address that iden tifies a computer on the In ternet. IP subnet A p[...]

Glossary 131 managed client A user , group , or comput er whose access privileges and/or preference s are under administrative contr ol. managed prefer ences Syst em or application pr eference s that are under administrative control. W orkgroup Manager allows administrators to control settings f or certain system prefer ences for Mac OS X managed c[...]

132 Glossary owner The person who creat ed a file or folder and who theref ore has the ability to assign access privileges for other users . T he owner of an item aut omatically has read/ write privileges for that it em. An owner can also transfer ownership of an item to another user . PHP (PHP: Hyper text Preprocessor) A scripting language embedde[...]

Glossary 133 search policy A list of director y domains searched by a Mac OS X computer when it needs configuration information; also the order in which domains are sear ched. Sometimes called a search path. shadow image A file, hidden from regular system and application software, used by NetBoot to write system-related inf ormation while a client [...]

134 Glossary T CP ( T ransmission Control P rotoc ol) A method used along with the Internet P rotocol (IP) to send data in the form of message units betw een computers ov er the Internet. IP takes care of handling the actual delivery of the data, and TCP takes care of keeping track of the individual units of data (called packets) into which a messa[...]

Glossary 135 workgroup A set of users for whom you define preferences and privileges as a group. Any pref erences you define f or a group are st ored in the group account. LL2343.Book Page 135 Thursday, August 14, 2003 5:12 PM[...]

LL2343.Book Page 136 Thursday, August 14, 2003 5:12 PM[...]

137 Index Index A Active Directory 31 administrator computer setup 49 AirPort 41 Apache 38 Apple File Service (AFP) 36 Apple LDAP 30 Apple Remote Desktop (ARD) 59 AppleTalk 32 application servers 43 AXIS 43 JBoss 44 SOAP 43 Tomcat 43 WebObjects 44 automatic restart 45 automating server setup 101 automating server software installation 85 B basic pa[...]

138 Index information you need 80 interactive remote installation 83 on Mac OS X version 10.3 computers 85 optional software installation 88 preset password 82 system requirements 79 using Installer locally 82 using the installer tool 85 integrating into existing networks 44 IP failover 45 J J2EE 44 Java 39 JBoss 44 journaled HFS disks 45 K Kerbero[...]

Index 139 keeping backup copies of saved setup data 93 local interactive setup 96 offline mode 100 Open Directory usage 93 remote interactive batch setup 98 remote interactive multiserver setup 99 remote interactive setup 97 saving setup data in a directory 92 saving setup data in a file 90 status monitoring 106 service discovery 30 Service Locatio[...]