Mac® Security Bible

30.2. Configuring Web Services

Besides the content provided by the pages you or your users place on your websites, Mac OS X Server has several features you can optionally add to any hosted sites that rely on the web server, such as blogs and wikis. Although these extra features don't pose an intrinsic security risk, enabling them gives your users additional ways to publish information on your website, and you may want to avoid or restrict those capabilities.

To adjust the settings for these add-on web services, follow these steps:

1. Open Server Admin, which is located in /Applications/Server.

2. In the sidebar on the left, select your server.

3. If no services are listed under the server name, click the disclosure triangle next to the server name to reveal them.

4. If the service names are dimmed, choose Server Connect, type your username and password if they're not already filled in, and then click Connect. The list of services refreshes, and those currently running appear with a green dot next to them.

5. In the sidebar under your server name, select Web. If Web doesn't appear in the list, you must first add it by selecting your server name, clicking Settings, clicking Services, clicking the check box next to Web, and then clicking Save.

6. If the web server isn't already running (that is, the dot next to Web in the list isn't green), click the Start Web button at the bottom of the window.

7. Click the ...