Mac® Security Bible

30.1. Configuring Web Options

For each site you run on your server, you can turn on or off any of five (in Snow Leopard Server) or six (in Leopard Server) different site-wide options, each of which increases the capabilities of your web server in some way but also has the potential to open security holes. As a result, you should stick with the general principle of leaving everything turned off unless you're certain that you need to have it turned on.

To adjust your per-site options, follow these steps:

1. Open Server Admin, which is located in /Applications/Server.

2. In the sidebar on the left, select your server.

3. If no services are listed under the server name, click the disclosure triangle next to the server name to reveal them.

4. If the service names are dimmed, choose Server Connect, type your username and password if they're not already filled in, and then click Connect. The list of services refreshes, and those currently running appear with a green dot next to them.

5. In the sidebar under your server name, select Web. If Web doesn't appear in the list, you must first add it by selecting your server name, clicking Settings, clicking Services, clicking the check box next to Web, and then clicking Save.

   NOTE

   For more on modifying the list of services, see Chapter 25.

6. If the web server isn't already running (that is, the dot next to Web in the list isn't green), click the Start Web button ...