book

Mac OS® X Snow Leopard™ Server For Dummies®

Name: Mac OS® X Snow Leopard™ Server For Dummies®
Author: John Rizzo
ISBN: 9780470450369

by John Rizzo

November 2009

Beginner

432 pages

9h 47m

English

For Dummies

Read now

Unlock full access

Copyright
About the Author
Author's Acknowledgments
Publisher's Acknowledgments
Introduction
About This BookConventions Used in This BookWhat You're Not to ReadFoolish AssumptionsHow This Book Is OrganizedPart I: Getting Snow Leopard Server Up and RunningPart II: Creating and Maintaining User Accounts and DirectoriesPart III: Serving Up Files and PrintersPart IV: Facilitating User CollaborationPart V: Managing ClientsPart VI: The Part of TensIcons Used in This BookWhere to Go from Here
I. Getting Snow Leopard Server Up and Running
1. Snow Leopard Server: An Overview
1.1. Why You Need a Server1.1.1. Top ten reasons you know it's time to buy a server1.1.2. Why you need a Snow Leopard Server1.1.2.1. The price is right, or which version is for me1.1.2.1.1. Windows server versus Snow Leopard Server1.1.2.1.2. Linux versus Snow Leopard Server1.1.2.1.3. Better service for Mac clients and iPhones1.2. What Comes with Snow Leopard Server1.2.1. Servers in Snow Leopard Server1.2.1.1. File server1.2.1.2. Print server1.2.1.3. Spotlight Server1.2.1.4. Directory services1.2.1.5. Address Book Server1.2.1.6. iCal Server1.2.1.7. iChat Server1.2.1.8. Internet gateway services1.2.1.9. E-mail server1.2.1.10. Web server1.2.1.11. Wiki Server and blogs1.2.1.12. QuickTime Streaming Server and QuickTime Broadcaster1.2.1.13. Podcast Producer1.2.1.14. Software update server1.2.1.15. NetInstall1.2.1.16. NetBoot1.2.2. Management tools1.2.2.1. Server Assistant1.2.2.2. Server Preferences1.2.2.3. Server Status Dashboard widget1.2.2.4. Server Admin1.2.2.5. Workgroup Manager1.2.2.6. System Image Utility1.2.2.7. RAID Admin1.2.2.8. Server Monitor1.2.2.9. Xgrid Admin1.3. What's New in the Snow Leopard Operating System1.3.1. 64-bit through and through1.3.2. Using multiple cores: Grand Central1.3.3. OpenCL (Open Computing Language)1.4. Running Snow Leopard Server Legally
2. Choosing Server Hardware
2.1. Criteria for Selecting Server Hardware2.1.1. Number of users2.1.2. Type of use2.1.2.1. Web servers: Lightweight server use2.1.2.2. File servers: Light on processor, big in storage2.1.2.3. Database server: Moving lots of data2.1.2.4. Podcast Producer: Processor-intensive requirements2.1.2.5. Directory services: Give it what it needs2.1.2.6. NetBoot: Heavy-duty server stress2.2. Hardware Requirements for Running Snow Leopard Server2.3. Selecting Processor, Memory, and Hard Drives2.3.1. Selecting processors for your Mac servers2.3.2. Putting enough RAM in your server2.3.3. Selecting hard drive storage2.3.3.1. Rotational speed2.3.3.2. Drive form factor2.3.3.3. Server-grade/enterprise-class drives2.3.3.4. RAID storage2.3.3.5. NAS and SAN2.4. Choosing the Right Mac for Your Server2.4.1. Mac mini as a server2.4.1.1. Best uses2.4.1.2. Pros2.4.1.3. Cons2.4.1.4. Upgrading Mac mini hard drive and RAM2.4.1.5. Replacing a Mac mini DVD drive with a second hard drive2.4.2. iMac as a server2.4.2.1. Best uses2.4.2.2. Pros2.4.2.3. Cons2.4.3. Mac Pro as a server2.4.3.1. Best uses2.4.3.2. Pros2.4.3.3. Cons2.4.4. Xserve as a server2.4.4.1. Best uses2.4.4.2. Pros2.4.4.3. Cons2.5. Considering Other Network Hardware2.5.1. Ethernet switches and cables2.5.1.1. Ethernet speeds2.5.1.2. Ethernet ports2.5.1.3. Cables2.5.2. Optional: Wireless equipment2.5.3. UPS for your server
3. Installation and Setup
3.1. A Roadmap to Installation and Setup3.2. Collecting Info with the Worksheet3.2.1. Locating Hardware ID numbers3.2.2. Network ID numbers3.3. Formatting Storage Drives3.3.1. The simple erase3.3.2. Partitioning a hard drive3.3.3. Creating a software RAID3.4. Installing and Configuring Locally3.4.1. Installing locally3.4.2. Installing, Part 2: Configuring locally3.4.2.1. Registration information and migration options3.4.2.2. The Network screen: Setting Network Addresses3.4.2.3. Setting Domain Name and Computer Name3.4.2.4. Directory services3.4.2.5. Final configuration tasks and review3.5. Installing and Configuring Remotely3.5.1. Connecting the server Mac to the network3.5.2. Setting up an administrator Mac3.5.3. The remote installation3.5.4. Configuring remotely3.6. Post-Configuration Setup3.6.1. Reviewing the Next Steps PDF file3.6.2. Creating users and group accounts3.6.3. Introducing DNS3.6.3.1. Understanding DNS concepts: Zones and records3.6.3.2. Using Server Admin to configure DNS zones and records3.6.3.2.1. Adding a zone3.6.3.2.2. Adding a record3.6.3.2.3. Testing DNS3.6.4. Keeping Snow Leopard Server up to date3.6.4.1. Researching the update3.6.4.2. Configure Software Update properly3.6.4.3. Downloading and testing updates3.6.5. Changing Ethernet addressing3.6.6. Installation problems
4. Running Servers in Virtual Machines
4.1. The Reality of Virtualization4.1.1. How virtualization works4.1.2. Benefits of virtualization4.1.2.1. Flexibility in testing servers4.1.2.2. Server consolidation4.1.2.3. Faster, easier deployment and disaster recovery4.1.2.4. Virtualizing Windows clients on Macs4.1.3. Virtual appliances4.1.4. Software licensing issues4.2. Choosing Virtualization Software4.2.1. Choosing a desktop virtualization package4.2.2. When you might use Parallels Server4.3. Real and Virtual Hardware Requirements4.3.1. Memory4.3.2. Processors4.3.3. Drive storage4.4. Installing an OS in a Virtual Machine4.4.1. Installing an OS in a desktop version4.4.2. Installing an OS in Parallels Server4.4.3. Distributing services in multiple VMs

II. Creating and Maintaining User Accounts and Directories
5. Controlling Access with Directories
5.1. Defining Directories5.1.1. Local and shared directories and domains5.1.2. Account types in a directory5.2. Binding Clients and Servers to Directories5.3. Authenticating with LDAP and Kerberos5.3.1. LDAP is the phone book5.3.2. Kerberos and single sign-on
6. Setting Up Open Directory
6.1. Introducing Open Directory6.2. Think Before You Jump: Planning for an Open Directory Deployment6.2.1. Starting an Open Directory checklist6.2.2. Master, replica, and relay servers6.2.2.1. Open Directory masters6.2.2.2. Open Directory replicas6.2.2.3. Open Directory relays6.2.2.4. Server connected to a directory, but not hosting one6.3. Prerequisites6.3.1. Checking for proper DNS setup6.3.2. Synchronizing time for Kerberos reliability6.3.2.1. Enabling time server synchronization6.3.2.2. Running network time protocol in Mac OS X Server6.4. Using Server Preferences to Configure Open Directory6.4.1. Creating an Open Directory master with Server Preferences6.4.2. Importing directory information with Server Preferences6.5. Using Server Admin to Configure Open Directory6.5.1. Working with Server Admin6.5.2. Connecting to an existing directory using Server Admin6.5.3. Creating an Open Directory master6.5.4. Attack of the clones: Creating Open Directory replica servers6.6. Creating a Primary Domain Controller for Windows Clients6.7. Backing Up and Restoring Open Directory with Archives6.7.1. Creating an archive in Server Admin6.7.2. Restoring from an archive6.8. Binding Clients to the Shared Domain6.8.1. Binding Mac OS X 10.6 clients6.8.2. Binding Mac OS X 10.5 and earlier clients6.8.3. Binding Windows clients
7. Integrating Open Directory with Active Directory
7.1. Doing the Directory Services Two-Step7.2. Binding Your Server to Active Directory7.2.1. Checking DNS configuration7.2.2. Binding the server7.3. Deciding whether to Muck Around with Advanced Configuration7.4. Managing User Groups with Workgroup Manager7.5. Configuring Single Sign-On for Mac Clients7.6. Troubleshooting and Getting Help
III. Serving Up Files and Printers
8. Controlling Access to Files and Folders
8.1. Owner, Group, and Others (Everyone)8.1.1. Owners8.1.2. Groups8.1.3. Everyone, Others, and Guests8.2. Permission Schemes: POSIX permissions and ACLs8.3. Standard POSIX Permissions8.4. Propagating POSIX Permissions8.4.1. Standard POSIX permissions behavior8.4.2. Inherit permissions from parent8.5. Access Control Lists8.5.1. ACL permissions8.5.2. ACL inheritance8.5.3. Allow and Deny permissions8.5.4. Using inherited and explicit ACEs together8.6. Rules of Precedence8.7. SACLs: Controlling Access to Protocols
9. Setting Up File Sharing
9.1. Setting Up File Sharing the Easy Way9.1.1. Turning on file sharing with Server Preferences9.1.2. Sharing a folder with Server Preferences9.1.3. Changing user access to a shared folder9.2. Protocol Soup: AFP, SMB, and Other File-Sharing Methods9.2.1. File-sharing protocols 1019.2.2. Security in file-sharing protocols9.3. Setting Up File Sharing with Server Admin9.3.1. Creating a share point with Server Admin9.3.2. Assigning file-sharing protocols to a share point9.3.3. Setting permissions for a share point9.3.3.1. Setting standard POSIX permissions with Server Admin9.3.3.2. Setting ACL permissions with Server Admin9.3.3.3. Checking ACL permissions with the Permissions Inspector9.3.3.4. Setting SACL permissions for limiting access to protocols9.3.4. Configuring AFP for Mac users9.3.4.1. Turning on and starting AFP service in Server Admin9.3.4.2. Configuring AFP9.3.4.2.1. AFP's Access settings9.3.4.2.2. AFP's Idle Users settings9.3.4.3. Configuring AFP guest access for individual share points9.3.5. Configuring SMB for Windows users9.3.5.1. Turning on and starting SMB service with Server Admin9.3.5.2. Configuring SMB9.3.5.2.1. General tab: Setting server NetBIOS name, workgroup, domain role9.3.5.2.2. Advanced tab: WINS registration, enabling virtual share points9.3.5.3. Changing SMB file-locking settings for individual share points9.3.6. Configuring FTP service9.3.6.1. FTP authentication and anonymous users9.3.6.2. Turning on and starting FTP service9.3.6.3. Configuring FTP9.3.6.3.1. The General tab: Security and limiting the number of FTP users9.3.6.3.2. The FTP Advanced tab: Adjusting the FTP root9.3.7. Configuring NFS for Unix clients9.3.7.1. Turning on and starting NFS service9.3.7.2. Exporting and configuring an NFS share point9.3.7.2.1. Selecting a share point for NFS9.3.7.2.2. Specifying client computers for access9.3.7.2.3. Selecting authentication
10. Sharing Printers Over a Network
10.1. A Second Helping of Protocol Soup: IPP, LPR, and SMB10.1.1. Communicating with the printer10.1.2. Communicating with the client10.2. Paving the Way to Painless Printing10.2.1. Before you start: Set up your printers10.2.2. Turning on and starting print service10.2.3. Setting up print queues10.2.4. Creating a printer pool10.2.5. Setting print quotas10.2.6. Publishing a printer to Open Directory10.3. Don't Forget Your Clients10.3.1. PPD files10.3.2. Enabling printer discovery10.3.3. Helping Mac clients print10.3.4. Helping Windows clients print10.4. Keeping Track of Network Printing
IV. Facilitating User Collaboration
11. Sharing Contacts with Address Book Server
11.1. Clients for Address Book Server11.2. A Prerequisite11.3. Turning on Address Book Server11.4. Changing Address Book Server's Default Settings11.4.1. Enabling users to search directories with Address Book using Directory Gateway11.4.2. Security: SSL and Authentication11.5. Upgrading Contacts from Mac OS X Server Version 10.511.6. Setting Up a User's Address Book 5 Client
12. Sharing Calendars with iCal Server
12.1. Clients for iCal Server12.2. Setting Up the Network for iCal Server12.2.1. Directory service for iCal service12.2.2. Setting up DNS for iCal service12.2.2.1. DNS SRV record format for iCal Server12.2.2.2. Sample DNS zone record file for Snow Leopard Server12.3. Using Admin Server for Administration12.3.1. Starting iCal and Push Notification with Server Admin12.3.2. Changing iCal Server's default settings12.3.2.1. Enabling e-mail notification12.3.2.2. Security: SSL and Authentication12.4. Creating Schedule Resources and Locations12.5. Supporting iCal 4 Clients12.5.1. Adding an iCal Server account to an iCal client12.5.2. Creating another server-based calendar using an iCal client12.5.3. Setting a delegate using iCal client
13. Hosting Web Sites and Wikis
13.1. The Prequel13.2. The Automatically Created Web Site13.2.1. Navigating My Page13.2.2. Creating a personal wiki13.2.3. Navigating a group wiki page13.2.4. Editing the built-in Web site13.2.5. Administering a wiki site from a browser13.2.5.1. Changing the site theme, name, and contact13.2.5.2. Turning blogs, calendars, mailing lists, and podcasts on and off13.2.5.2.1. Wiki calendars13.2.5.2.2. Blogs and podcasts13.2.5.2.3. Creating and using a mail list for the wiki13.2.5.3. Defining user permissions and site administrators13.2.5.4. The sidebar setting13.2.5.5. Configuring virtual hosts13.3. Server Preferences versus Server Admin13.4. Managing Web Services with Server Preferences13.4.1. Turning wikis, calendars, blogs, and Webmail on and off13.4.2. Creating a group wiki13.4.3. Changing the default home page13.4.4. Adding Web Sites with Server Preferences13.4.5. Running into DNS problems13.5. Configuring Web Services with Server Admin13.5.1. Creating one or more Web sites13.5.2. Using Server Admin for wikis, blogs, calendars, and Webmail13.5.3. Aliases and redirects13.5.3.1. Server aliases versus URL aliases and redirects13.5.3.2. Configuring aliases and redirects13.5.4. Tuning performance of your Web server13.6. Where Mac OS X Server Puts Web Files13.7. More Services
14. Running an E-Mail Server
14.1. Growing Your Own E-Mail14.1.1. Mail protocols14.1.2. Mail service and the Internet: DNS14.1.2.1. MX records14.1.2.2. Relay servers14.2. Setting Up Your E-Mail Server14.2.1. Mail tools: Server Preferences versus Server Admin14.2.2. Setting up mail with Server Preferences14.2.3. Turning on and starting Mail service with Server Admin14.2.4. Using Configuration Assistant to configure mail service14.2.5. Configuring e-mail with Server Admin's Settings window14.3. Configuring DNS for Use with E-Mail14.3.1. Turning on DNS service14.3.2. Creating an MX record14.3.3. Creating a DNS machine record for the Mail server14.4. E-Mail Security with Server Admin14.4.1. Securing mail authentication14.4.2. Securing e-mail messages with SSL14.5. Blocking Spam and Other Nasty Bits14.5.1. Statistical spam filtering14.5.2. Spam filtering exceptions by country or language14.5.3. Virus filtering14.6. Configuring User Accounts for E-Mail14.7. Creating New User E-Mail Addresses14.8. Setting Up a Mailing List
15. More Collaboration: iChat and Podcast Producer
15.1. iChat Instant Messaging and More15.1.1. Clients for iChat Server15.1.2. Prerequisites15.1.3. Turning on iChat service15.1.4. Changing iChat service's default settings15.1.4.1. Adding host domains15.1.4.2. Security and authentication15.1.4.3. Saving and archiving chat messages15.1.4.4. Server-to-server federation15.1.4.5. Turning autobuddy support on and off15.2. Podcast Producer15.2.1. New features15.2.2. What's in Podcast Producer15.2.3. Prerequisites15.2.4. Turning on and setting up Podcast Producer service15.2.5. Managing cameras15.2.5.1. Binding Macs to the server15.2.5.2. Limiting access to cameras15.2.6. Opening the Web-based Podcast Capture
V. Managing Clients
16. Managing Client Accounts
16.1. User, Group, and Computer Accounts16.2. Server Preferences versus Workgroup Manager16.3. Managing Accounts in Server Preferences16.3.1. Creating, deleting, and managing user accounts in Server Preferences16.3.2. Creating, deleting, and managing group accounts in Server Preferences16.4. Managing Accounts in Workgroup Manager16.4.1. Becoming familiar with the Workgroup Manager layout16.4.2. Creating user accounts with Workgroup Manager16.4.3. Changing default account settings16.4.3.1. Setting server administrators and directory administrators16.4.3.2. Editing group membership16.4.3.3. Setting the location of a user's home folder16.4.3.4. Other user account settings16.4.3.4.1. The Mail tab16.4.3.4.2. The Print tab16.4.3.4.3. The Info tab16.4.3.4.4. The Advanced tab16.4.4. Disabling and deleting user accounts with Workgroup Manager16.4.5. Creating group accounts with Workgroup Manager16.4.6. Editing and deleting group accounts with Workgroup Manager16.5. Importing and Exporting Accounts16.6. Setting Managed Preferences for Mac OS X Clients16.6.1. Inheriting, combining, and overriding preferences16.6.2. Enforcing managed preferences16.6.3. Creating computer and computer group accounts16.6.4. Working with managed preferences
17. Creating Mobile Accounts for Notebooks
17.1. Connecting Workgroup Manager to a Shared Domain17.2. The Nightmare of Networked Notebooks17.3. Planning and Deploying Mobile Accounts17.3.1. Simplifying mobile management with computer and group accounts17.3.2. Configuring mobility settings17.3.3. Taking data on the road with portable home folders17.3.3.1. Creating share points for use as mobile home folders17.3.3.2. Configuring the mobile home folder17.3.4. Putting sync to work on the client
18. Keeping Your Server Secure
18.1. Configuring the Firewall18.1.1. Setting firewalls with Server Preferences18.1.1.1. Network routers and firewalls18.1.1.2. Using an AirPort Extreme or Time Capsule firewall18.1.2. Configuring a firewall with Server Admin18.1.2.1. Enabling the firewall18.1.2.2. Allowing services through the firewall and editing ports18.1.2.3. Creating address groups18.1.2.4. Playing by your own rules18.2. Secure Certificates18.2.1. SSL certificates in Server Preferences18.2.1.1. Using an SSL certificate18.2.1.2. Creating a self-signed certificate18.2.1.3. Importing a certificate18.2.2. SSL certificates in Server Admin18.2.2.1. Creating a self-signed certificate with Server Admin18.2.2.2. Creating a request to a certificate authority18.2.2.3. Renewing/replacing an existing certificate18.2.3. Becoming a certificate authority18.3. Virtual Private Networks18.3.1. VPN protocols: L2TP/IPSec and PPTP18.3.2. The shared secret18.3.3. Getting your network ready for VPN18.3.4. Setting VPN in Server Preferences18.3.5. Setting VPN access with Server Admin18.3.5.1. Enabling VPN service18.3.5.2. Configuring VPN Protocols18.3.5.2.1. Enabling protocols and setting the IP address range18.3.5.2.2. L2TP load balancing, PPTP 40-bit encryption18.3.5.2.3. Selecting an authentication type18.3.5.2.4. Setting IPSec authentication: Shared secret versus certificate18.3.5.2.5. The Client Information tab, routing definitions18.3.5.2.6. Limiting VPN access to certain users and groups18.3.6. Configuring VPN clients
VI. The Part of Tens
19. Ten Things You Can Add to Snow Leopard Server
19.1. Antivirus for Your Server19.2. Kerio MailServer19.3. Network Backup19.4. Media Asset Management and Workflow19.5. General-Purpose Database Server19.6. Apple Remote Desktop19.7. InterMapper, a Network Monitor19.8. TechTool Pro19.9. iPhone Apps for Servers19.10. Dashboard Widgets
20. Ten Cool Things That Didn't Make It into the Book
20.1. One Site, Multiple Macs with Round Robin DNS20.2. User Home Folders on the Server20.3. Snow Leopard from the Command Line20.4. Changing the Server's Names: DNS, Computer, Local Host20.5. Clustering Mail Services20.6. Macs Losing Active Directory Binding20.7. Ruby on Rails20.8. Groups of Servers in Server Admin20.9. Set the Server to Auto-Restart20.10. Help at Apple.com

Content preview from Mac OS® X Snow Leopard™ Server For Dummies®

Chapter 8. Controlling Access to Files and Folders

In This Chapter

Working with standard POSIX permissions
Understanding access control list permissions
Inheriting permissions
Looking at the rules of precedence
Controlling access to protocols with service access control lists

If you're a strict egalitarian, you may be inclined to give everyone on the network complete access to everything on the server. This might work with a small office with a handful of users, but can be confusing to users if they have to sift through numerous server folders or if they find that someone accidentally moved a needed file.

Snow Leopard Server lets you control access by users to shared folders, files, and applications. You do this by assigning permissions, which grant users the ability to perform certain actions, such as open a folder or edit a file. Snow Leopard Server has permissions for files, folders, and applications.

You assign or change these user and group entities and permissions in Sever Admin's File Sharing pane in the Permissions tab, as shown in Figure 8-1 for reference. (Chapter 9 describes how to use Server Admin to set these permissions for shared folders.) In this chapter, I focus on describing the different types of permission schemes and their options.

Figure 8.1. Server Admin File Sharing pane.

Owner, Group, and Others (Everyone)

In file sharing, you set permissions for three user categories: ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9780470450369Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Mac OS® X Snow Leopard™ Server For Dummies®

by John Rizzo

Chapter 8. Controlling Access to Files and Folders

Owner, Group, and Others (Everyone)

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.