Apple oxs manuel d'utilisation

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175

Aller à la page of

Un bon manuel d’utilisation

Les règles imposent au revendeur l'obligation de fournir à l'acheteur, avec des marchandises, le manuel d’utilisation Apple oxs. Le manque du manuel d’utilisation ou les informations incorrectes fournies au consommateur sont à la base d'une plainte pour non-conformité du dispositif avec le contrat. Conformément à la loi, l’inclusion du manuel d’utilisation sous une forme autre que le papier est autorisée, ce qui est souvent utilisé récemment, en incluant la forme graphique ou électronique du manuel Apple oxs ou les vidéos d'instruction pour les utilisateurs. La condition est son caractère lisible et compréhensible.

Qu'est ce que le manuel d’utilisation?

Le mot vient du latin "Instructio", à savoir organiser. Ainsi, le manuel d’utilisation Apple oxs décrit les étapes de la procédure. Le but du manuel d’utilisation est d’instruire, de faciliter le démarrage, l'utilisation de l'équipement ou l'exécution des actions spécifiques. Le manuel d’utilisation est une collection d'informations sur l'objet/service, une indice.

Malheureusement, peu d'utilisateurs prennent le temps de lire le manuel d’utilisation, et un bon manuel permet non seulement d’apprendre à connaître un certain nombre de fonctionnalités supplémentaires du dispositif acheté, mais aussi éviter la majorité des défaillances.

Donc, ce qui devrait contenir le manuel parfait?

Tout d'abord, le manuel d’utilisation Apple oxs devrait contenir:
- informations sur les caractéristiques techniques du dispositif Apple oxs
- nom du fabricant et année de fabrication Apple oxs
- instructions d'utilisation, de réglage et d’entretien de l'équipement Apple oxs
- signes de sécurité et attestations confirmant la conformité avec les normes pertinentes

Pourquoi nous ne lisons pas les manuels d’utilisation?

Habituellement, cela est dû au manque de temps et de certitude quant à la fonctionnalité spécifique de l'équipement acheté. Malheureusement, la connexion et le démarrage Apple oxs ne suffisent pas. Le manuel d’utilisation contient un certain nombre de lignes directrices concernant les fonctionnalités spécifiques, la sécurité, les méthodes d'entretien (même les moyens qui doivent être utilisés), les défauts possibles Apple oxs et les moyens de résoudre des problèmes communs lors de l'utilisation. Enfin, le manuel contient les coordonnées du service Apple en l'absence de l'efficacité des solutions proposées. Actuellement, les manuels d’utilisation sous la forme d'animations intéressantes et de vidéos pédagogiques qui sont meilleurs que la brochure, sont très populaires. Ce type de manuel permet à l'utilisateur de voir toute la vidéo d'instruction sans sauter les spécifications et les descriptions techniques compliquées Apple oxs, comme c’est le cas pour la version papier.

Pourquoi lire le manuel d’utilisation?

Tout d'abord, il contient la réponse sur la structure, les possibilités du dispositif Apple oxs, l'utilisation de divers accessoires et une gamme d'informations pour profiter pleinement de toutes les fonctionnalités et commodités.

Après un achat réussi de l’équipement/dispositif, prenez un moment pour vous familiariser avec toutes les parties du manuel d'utilisation Apple oxs. À l'heure actuelle, ils sont soigneusement préparés et traduits pour qu'ils soient non seulement compréhensibles pour les utilisateurs, mais pour qu’ils remplissent leur fonction de base de l'information et d’aide.

Table des matières du manuel d’utilisation

  • Page 1

    Mac OS X Ser v er C ommand-Line Administr ation For Version 10.3 or Later 034-2454_Cvr 10/15/03 11:47 AM Page 1[...]

  • Page 2

     Apple Computer , Inc. © 2003 Apple C omputer , Inc. All rights reser ved. The owner or authoriz ed user of a valid copy of Mac OS X Ser ver software may reproduc e this publication for the purpose of learning to use such software. No part of this publication may be reproduced or transmitted for commercial purpose s, such as selling copies of t[...]

  • Page 3

    3 1 C on ten ts Prefac e 1 1 About This Book 11 Notation Con ventions 11 Summar y 11 Commands and Other T erminal T ex t 11 Command P arameters and Options 12 Default Settings 12 Commands Requiring Root P rivileges Chapter 1 1 3 T yping Commands 13 Using T erminal 14 Correcting T yping Errors 14 Repeating Commands 14 Including P aths Using Drag-and[...]

  • Page 4

    4 Contents 26 Viewing, V alidating , and S etting the Software Serial Number 26 Updating Ser ver Software 27 Moving a Server Chapter 3 29 Restarting or Shutting Down a Ser ver 29 Restarting a Ser ver 29 Examples 29 Automatic Restart 30 Changing a Remote Ser ver’ s Star tup Disk 30 Shutting Down a Ser ver 30 Examples Chapter 4 3 1 S etting General[...]

  • Page 5

    Contents 5 39 Changing Configuration P recedence 39 T CP/IP Settings 39 Changing a Ser ver ’ s IP Address 40 Viewing or Changing IP Address , Subnet Mask, or Router Address 41 Viewing or Changing DNS Ser vers 42 Enabling T CP/IP 42 Apple T alk Settings 42 Enabling and Disabling Apple T alk 42 Pr oxy Settings 42 Viewing or Changing FTP Proxy Setti[...]

  • Page 6

    6 Contents 57 User Attributes 62 Checking a Ser ver User ’ s Name, UID , or P assword 63 Creating a User’ s Home Direc tor y 63 Mounting a User’ s Home Direc tory 63 Creating a Group F older 63 Checking a User ’ s Administrator Privileges Chapter 8 65 W ork ing With F ile Ser vices 65 Share P oints 65 Listing Share P oints 66 Creating a Sha[...]

  • Page 7

    Contents 7 80 Checking SMB Ser vice Status 81 Viewing SMB Settings 81 Changing SMB Settings 82 List of SMB Ser vice Settings 84 List of SMB serveradmin Commands 84 Listing SMB Users 85 Disconnecting SMB Users 86 Listing SMB Ser vice Statistics 86 Updating Share P oint Information 87 Viewing SMB Ser vice Logs Chapter 9 89 W ork ing With Print Servic[...]

  • Page 8

    8 Contents 11 6 Mail serveradmin Commands 11 7 Listing Mail Ser vice Statistics 11 8 V iewing the Mail Ser vice Logs 11 9 Setting Up SSL for Mail Ser vice 11 9 Generating a CSR and Creating a Keychain 12 1 Obtaining an SSL Certificate 12 1 Impor ting an SSL Certificate Into the Keychain 12 2 Creating a P assphrase F ile 12 2 Setting Up SSL for Mail[...]

  • Page 9

    Contents 9 13 6 Firewall Service 13 6 Star ting and Stopping Firewall Service 13 7 Checking the Status of Firewall Service 13 7 Viewing Firewall Service Settings 13 7 Changing F irewall Service S ettings 13 7 F irewall Ser vice Settings 13 8 Defining Firewall Rules 141 IPFilter Rules Arra y 141 Firewall serveradmin C ommands 14 2 Viewing Firewall S[...]

  • Page 10

    10 Contents 15 7 A Note on Using ldapsearch 15 8 Idle Rebinding Options 15 8 Additional Inf ormation About LDAP 15 9 NetInfo 15 9 Configuring NetInfo 15 9 Passwor d Ser ver 15 9 Working With the P asswor d Ser ver 15 9 V iewing or Changing P assword P olicies 15 9 Enabling or Disabling Authentication Methods 16 0 Kerberos and Single Sign On Chapter[...]

  • Page 11

    11 Prefac e About T his Book Notation Con ventions The following con ven tions are used throughout this book. Summar y Commands and Other T erminal T ext Commands or command parameters that you might t ype, along with other tex t that normally appears in a T erminal window , are shown in this f ont. For example , Y ou can use the doit command to ge[...]

  • Page 12

    12 Preface About This Book Pa rameters Y ou Must T ype as Shown If you need to type a parameter as shown, it appears following the command in the same font. For example , $ doit -w later -t 12:30 T o use the command in the above example , t ype the entire line as shown. Pa rameter Values Y ou P rovide If you need to supply a value, its placeholder [...]

  • Page 13

    1 13 1 T yping C ommands How to use T erminal to execute commands , connect to a remote server , and view online information about commands and utilities . T o access a UNIX shell command prompt, you open the T erminal application. In T erminal, you can use the ssh command to log in to other servers. Y ou can use the man command to view online docu[...]

  • Page 14

    14 Chapter 1 Typing Commands T o t ype a command: m W ait for a prompt t o appear in the T erminal window , then type the command and press Return. If you get the message command not found , check your spelling. If the error recurs, the program you’ re tr ying to run might not be in your default search path. Add the path before the program name o[...]

  • Page 15

    Chapter 1 Typing Commands 15 Commands Requiring Root P rivileges Many commands used to manage a server must be executed by the r oot user . If you get a message such as “permission denied,” the command probably require s root privileges. T o issue a single command as the root user , begin the command with sudo . F or example: $ sudo serveradmin[...]

  • Page 16

    16 Chapter 1 Typing Commands Sending Commands to a Remot e Ser ver Secure Shell (SSH) lets you send secure, encr ypted commands to a ser ver over the network. Y ou can use the ssh command in T erminal to open a command-line connection to a remote ser ver . While the connection is open, commands you type are per formed on the remote server . Note: Y[...]

  • Page 17

    Chapter 1 Typing Commands 17 Updating SSH Key F ingerprints The first time you connec t to a remote ser ver using SSH, the local computer asks if it can add the remote server ’ s “fingerprint” (a securit y key) to a list of k nown remote computers. Y ou might see a message like this: The authenticity of host "server1.company.com" ca[...]

  • Page 18

    18 Chapter 1 Typing Commands Using T elnet Because it isn ’t as secure as SSH, T elnet access isn ’t enabled by default. T o enable T elnet access: $ service telnet start T o disable T elnet access: $ service telnet stop Getting Online Help for Commands Onscreen help is av ailable for most commands and utilities . Note: Not all techniques work [...]

  • Page 19

    Chapter 1 Typing Commands 19 Notes About Specific C ommands and T ools serversetup The serversetup utility is located in /System/Library/S er verSetup. T o run this command, you can t ype the full path, f or example: $ /System/Library/ServerSetup/serversetup -getAllPort Or , if you want to use the utilit y to per form several commands, you can chan[...]

  • Page 20

    LL2354.book Page 20 Monday, October 20, 2003 9:47 AM[...]

  • Page 21

    2 21 2 Installing Ser ver Software and F inishing Basic S etup Commands you can use to install, set up , and update Mac OS X Ser ver software on local or remote comput ers. Installing Ser ver Software Y ou can use the installer c ommand to install Mac OS X Server or other software on a computer . F or more inf ormation, see the man page. Automating[...]

  • Page 22

    22 Chapter 2 Installing Server Software and Finishing Basic Setup T o create a template configur ation file at an y time after initial setup: 1 Open the Ser ver Assistant (in /Applications/Server). 2 In the W elcome pane , choose “Save setup information in a file or directory record” and click Continue . 3 Enter settings on the remaining panes,[...]

  • Page 23

    Chapter 2 Installing Server Software and Finishing Basic Setup 23 <key>DS</key> <dict> <key>DSClientInfo</key> <string>2 - NetInfo client - broadcast dhcp static -192.168.42.250 network</string> <key>DSClientType</key> <string>2</string> <key>DSType</key> <string>2 [...]

  • Page 24

    24 Chapter 2 Installing Server Software and Finishing Basic Setup <string></string> <key>Type</key> <string>DHCP Configuration</string> </dict> </dict> </array> <key>NetworkTimeProtocol</key> <dict> <key>UsingNTP</key> <false/> </dict> <key>Rendezv[...]

  • Page 25

    Chapter 2 Installing Server Software and Finishing Basic Setup 25 Naming Configur ation F iles The Ser ver Assistant r ecognizes configuration files with the se names: • MAC-address-of-server.plist • IP-address-of-server.plist • hardware-serial-number-of-server.plist • full-host-name-of-server.plist • generic.plist The Ser ver Assistant u[...]

  • Page 26

    26 Chapter 2 Installing Server Software and Finishing Basic Setup Viewing, V alidating , and Setting the Sof tware Serial Number Y ou can use the serversetup command to view or set the server ’ s sof tware serial number or to validat e a ser ver software serial number . The serversetup utilit y is located in /System/Library/Ser verSetup. T o disp[...]

  • Page 27

    Chapter 2 Installing Server Software and Finishing Basic Setup 27 Moving a Ser ver T r y to place a ser ver in its final network location (subnet) before setting it up f or the first time. If you’ re concerned about unauthorized or premature access, you can set up a firewall to protect the ser ver while you're finalizing its configuration. I[...]

  • Page 28

    LL2354.book Page 28 Monday, October 20, 2003 9:47 AM[...]

  • Page 29

    3 29 3 Restar ting or Shutting Down a Serve r Commands y ou can use to shut down or r estart a local or remote server . Restarting a S er ver Y ou can use the reboot or shutdown -r command to restart a ser ver at a specific time. For more inf ormation, see the man pages. Examples T o restar t the local ser ver: $ shutdown -r now T o restar t a remo[...]

  • Page 30

    30 Chapter 3 Restarting or Shutting Down a Server Changing a Remote Ser ver ’ s Star tup Disk Y ou can change a remote server ’ s star tup disk using SSH. T o change the star tup disk: Log in to the r emote server using SSH and t ype $ bless -folder "/Volumes/disk /System/Library/CoreServices" -setOF F or information on using SSH to l[...]

  • Page 31

    4 31 4 Setting G eneral S ystem P ref erenc es Commands y ou can use to set system pr efer ences , usually set using the System P reference s GUI application. Comput er Name Y ou can use the systemsetup command to view or change a server ’ s computer name (the name used to browse f or AFP share points on the server), which would otherwise be set [...]

  • Page 32

    32 Chapter 4 Setting General System Preferences Viewing or Changing the System Da te T o view the current system date: $ sudo systemsetup -getdate or $ serversetup -getDate T o set the current system date: $ sudo systemsetup -setdate mm:dd:yy or $ sudo serversetup -setDate mm/dd/yy Viewing or Changing the System Time T o view the current system tim[...]

  • Page 33

    Chapter 4 Setting General System Preferences 33 Viewing or Changing Network Time Ser ver Usage T o see if a network time ser ver is being used: $ sudo systemsetup -getusingnetworktime T o enable or disable use of a network time ser ver: $ sudo systemsetup -setusingnetworktime (on|off) T o view the current network time server: $ sudo systemsetup -ge[...]

  • Page 34

    34 Chapter 4 Setting General System Preferences T o set how long the system waits to restart after a power failure: $ sudo systemsetup -setWaitForStartupAfterPowerFailure seconds T o see if the system is set to restart af ter a system freez e: $ sudo systemsetup -getrestartfreeze T o set the system to restart af ter a system freez e: $ sudo systems[...]

  • Page 35

    Chapter 4 Setting General System Preferences 35 Sharing Settings Y ou can use the systemsetup command to view or change settings that would other wise be set using the Sharing pane of System Prefer ences. Viewing or Changing Remote Log in Settings Y ou can use SSH to log in to a remote server if remote login is enabled . T o see if the system is se[...]

  • Page 36

    36 Chapter 4 Setting General System Preferences Login Settings Disabling the Restart and Shutdown Buttons T o disable or enable the Restar t and Shutdown buttons in the login dialog: $ sudo serversetup -setDisableRestartShutdown (0|1) 0 disables the buttons. 1 enables the buttons. T o view the current setting: $ serversetup -getDisableRestartShutdo[...]

  • Page 37

    5 37 5 Network P refer ence s Commands y ou can use to change a server ’ s network settings. Network In ter face Information This section describes commands you address to a specific hardware device (for example , en0 ) or por t (for example , Built-in Ethernet ). If you prefer to work with network por t configurations following the approach used[...]

  • Page 38

    38 Chapter 5 Network Preferences Viewing or Changing MTU V alues Y ou can use these commands to change the maximum transmission unit (MTU) size f or a port. T o view the MTU value for a hardware port: $ sudo networksetup -getMTU (devicename |"portname") T o list valid MTU values for a har dware port: $ sudo networksetup -listvalidMTUrange[...]

  • Page 39

    Chapter 5 Network Preferences 39 T o enable or disable a por t configuration: $ sudo networksetup -setnetworkserviceenabled configuration (on|off) Changing C onfiguration P recedenc e T o list the configuration order: $ sudo networksetup -listnetworkserviceorder The configurations are listed in the order that they ’ re tried when a network connec[...]

  • Page 40

    40 Chapter 5 Network Preferences Viewing or Changing IP Addre ss, Subnet Mask, or Router A ddress Y ou can use the serversetup and networksetup commands to change a computer’ s T CP/IP settings. Important: Changing a server ’ s IP address isn ’t as simple as changing the TCP/IP settings. Y ou must first run the changeip utilit y to make sure [...]

  • Page 41

    Chapter 5 Network Preferences 41 Viewing or Changing DNS Ser vers T o view the DNS ser vers for port en0: $ serversetup -getDefaultDNSServer (devicename|"portname") T o change the DNS ser vers for port en0: $ sudo serversetup -setDefaultDNSServer (devicename|"portname ") server1 [server2 ] [ ... ] T o view the DNS ser vers for a[...]

  • Page 42

    42 Chapter 5 Network Preferences Enabling TCP/IP T o enable T CP/IP on a par ticular por t: $ serversetup -EnableTCPIP [(devicename |"portname")] If you don’ t provide an inter face, en0 is assumed. T o disable T CP/IP on a particular por t: $ serversetup -DisableTCPIP [(devicename |"portname")] If you don’ t provide an inte[...]

  • Page 43

    Chapter 5 Network Preferences 43 T o view the FTP passive setting for a configuration: $ sudo networksetup -getpassiveftp "configuration " T o enable or disable FTP passive mode for a configura tion: $ sudo networksetup -setpassiveftp "configuration" (on|off) T o enable or disable the FTP proxy for a configuration: $ sudo networ[...]

  • Page 44

    44 Chapter 5 Network Preferences Viewing or Changing SOCKS Fir ewall Pr oxy Settings T o view the SOCKS firewall proxy information for a configur ation: $ sudo networksetup -getsocksfirewallproxy "configuration " T o set the SOCKS firewall proxy information for a configur ation: $ sudo networksetup -setsocksfirewallproxy "configurati[...]

  • Page 45

    Chapter 5 Network Preferences 45 T o change the computer name: $ sudo systemsetup -setcomputername computername or $ sudo networksetup -setcomputername computername or $ sudo serversetup -setComputername computername T o validate a computer name: $ serversetup -verifyComputername computername Viewing or Changing the Local Host Name T o display the [...]

  • Page 46

    LL2354.book Page 46 Monday, October 20, 2003 9:47 AM[...]

  • Page 47

    6 47 6 W ork ing With Disks and V olumes Commands y ou can use to prepar e , use, and test disks and volume s. Mounting and Unmounting V olumes Y ou can use the mount_afp command to mount an AFP volume . For more inf ormation, typ e man mount_afp to see the man page . Mounting V olumes Y ou can use the mount command with parameters appropriate to t[...]

  • Page 48

    48 Chapter 6 Working With Disks and Volumes Monitoring Disk Space When you need more vigilant monitoring of disk space than the log rolling scripts provide , you can use the diskspacemonitor command-line tool. It lets you monitor disk s pace and take action more frequently than once a day when disk space is critically low , and gives you the opport[...]

  • Page 49

    Chapter 6 Working With Disks and Volumes 49 Reclaiming Disk Space Using L og Rolling Scripts Three predefined scripts ar e executed a utomatically to reclaim s pace used on your ser ver for log file s generated by • Apple file service • Windows service • W eb service • W eb performance cache • Mail ser vice • Print service The scripts u[...]

  • Page 50

    50 Chapter 6 Working With Disks and Volumes Managing Disk Journaling Checking to See if Journaling is Enabled Y ou can use the mount command to see if journaling is enable on a volume. T o see if journaling is enabled: $ mount Look f or journaled in the attributes in parenthe ses follo wing a volume. F or example: /dev/disk0s9 on / (local, journale[...]

  • Page 51

    Chapter 6 Working With Disks and Volumes 51 Enabling Journaling When Y ou Erase a Disk Y ou can use the newfs_hfs command to set up and enable journaling when you erase a disk. T o enable journaling when erasing a disk: $ newfs_hfs -J -v volname device Disabling Journaling T o disable journaling: $ diskutil disableJournal volume Erasing , P ar titi[...]

  • Page 52

    52 Chapter 6 Working With Disks and Volumes Imaging and Cloning V olumes U sing ASR Y ou can use Apple Software Restore (ASR) t o copy a disk image onto a volume or prepare existing disk images with checksum inf ormation for faster copie s. ASR can per form file copie s, in which individual file s are r estored to a volume unless an identical file [...]

  • Page 53

    7 53 7 W ork ing With Users and Groups Commands y ou can use to set up and manage users and groups in Mac OS X Ser ver . Creating Ser ver Administrat or Users Y ou can use the serversetup command to create administrator users f or a server . T o create regular users , see “Impor ting Users and Groups” on page 54. T o create a user: $ serversetu[...]

  • Page 54

    54 Chapter 7 Working With Users and Groups Impor ting Users and Groups Y ou can use the dsimportexport command to import user and group accounts. Note: Despite its name , dsimportexport can’t be used t o expor t user records. The utility is in /Applications/Ser ver/W orkgroup Manager .app/Conten ts/Resources . F or information on the formats of t[...]

  • Page 55

    Chapter 7 Working With Users and Groups 55 3 Open the T erminal application and t ype the dsimportexport command. T he tool is located in /Applications/Utilities/W orkgroup Manager .app/Con tents/Resour ces. T o include the space in the path name, precede it with a backslash (). For example: /Applications/Utilities/Workgroup Manager.app/Contents/[...]

  • Page 56

    56 Chapter 7 Working With Users and Groups In addition, you can include • UserShell (the default shell) • NFSHomeDirector y (the path to the user’ s home direc tory on the user ’ s computer) • Other user data t ypes, described under “User Attributes ” on page 57 F or group accounts , the list of attributes must include • RecordName [...]

  • Page 57

    Chapter 7 Working With Users and Groups 57 An example user account looks like this: jim:Adl47E$:408:20:J. Smith, Jr., M.D.:/Network/Servers/somemac/Homes/jim:/bin/csh Using the StandardGroupRecord Shorthand When the first record in a character-delimited import file contains StandardGroupRecord , the following record de scription is assumed: 0x0A 0x[...]

  • Page 58

    58 Chapter 7 Working With Users and Groups HomeDirectory: The location of an AFP-based home director y Structured UTF-8 text <home_dir> <url> afp://server/sharepoint </url> <path> usershomedirectory </path> </home_dir> In the following example, T om King’ s home directory is K-M/T om K ing, which resides beneat[...]

  • Page 59

    Chapter 7 Working With Users and Groups 59 MCXFlags: If present, MCXSettings is loaded; if absent, MCXSettings isn’ t loaded; required for a managed user. UTF-8 XML plist, single value MCXSettings : A user ’ s managed preferences UTF-8 XML plist, single value AdminLimits The privileges allowed by W orkgroup Manager to a user that can administer[...]

  • Page 60

    60 Chapter 7 Working With Users and Groups Mail Attributes in U ser Records The following table lists the standar d XML data structures for a user mail attribute , par t of a standard user record . MailAttribute field Description Sample values AttributeVersion A required case-insensitive value that must be set to AppleMail 1.0 . <key> kAttrib[...]

  • Page 61

    Chapter 7 Working With Users and Groups 61 NotificationState An optional keyword describing whether to notify the user whenever new mail arrives. If provided, it must be set to one of these values: NotificationOff , NotificationLastIP , or NotificationStaticIP . If this field is missing, NotificationOff is assumed. <key> kNotificationState &l[...]

  • Page 62

    62 Chapter 7 Working With Users and Groups Checking a S er ver User ’ s Name , UID , or P assw ord Y ou can use the following commands to check the name , UID , or passw ord of a user in the ser ver ’ s local director y . Note: The se tasks only apply to the local directory on the ser ver . T o see if a full name is already in use: $ serversetu[...]

  • Page 63

    Chapter 7 Working With Users and Groups 63 Creating a User’ s Home Director y Normally , you can create a user's home dir ector y by clicking the Create Home Now button on the Homes pane of Workgroup Manager . Y ou can also create home directory folders using the createhomedir tool. O ther wise, Mac OS X S er ver creates the user’ s home d[...]

  • Page 64

    LL2354.book Page 64 Monday, October 20, 2003 9:47 AM[...]

  • Page 65

    8 65 8 W ork ing With F ile Ser vice s Commands y ou can use to cr eate share poin ts and manage AFP , NFS, Windows (SMB), and FTP ser vices in Mac OS X Ser ver . Share P oints Y ou can use the sharing tool to list, create, and modify share points. Listing Share P oints T o list existing share points: $ sharing -l In the re sulting list, there ’ [...]

  • Page 66

    66 Chapter 8 Working With File Services Creating a Share P oint T o create a share point: $ sharing -a path [-n customname] [-A afpname] [-F ftpname ] [-S smbname ] [-s shareflags] [-g guestflags ] [-i inheritflags ] [-c creationmask ] [-d directorymask] [-o oplockflag ] [-t strictlockingflag ] Examples $ sharing -a /Volumes/100GB/Art Creates a sha[...]

  • Page 67

    Chapter 8 Working With File Services 67 Shares the directory named Windo ws Docs on the disk 1 00GB. T he share point is named WinDocs for server management purposes , but SMB users see it as Documents. It ’ s shared using only the SMB protocol with oplocks enabled . Modifying a Share P oint T o change share point settings: $ sharing -e sharepoin[...]

  • Page 68

    68 Chapter 8 Working With File Services T o list a par ticular setting: $ sudo serveradmin settings afp:setting T o list a group of settings: Y ou can list a group of settings that hav e par t of their names in common by typing only as much of the name as you want, stopping at a colon (:), and typing an asterisk (*) as a wildcard for the remaining [...]

  • Page 69

    Chapter 8 Working With File Services 69 activityLogSize Rollover size (in kilobytes) f or the activity log. Only used if activityLogTime isn’ t specified . Default = 1000 activityLogTime Rollover time (in days) f or the activit y log. Default = 7 admin31GetsSp Set to true to force administrative users on Mac OS X to see share points instead of al[...]

  • Page 70

    70 Chapter 8 Working With File Services guestAccess Allow guest users access to the server . Default = yes idleDisconnectFlag: adminUsers Enforce idle disconnect for administrative users . Default = yes idleDisconnectFlag: guestUsers Enforce idle disconnect for guest users. Default = yes idleDisconnectFlag: registeredUsers Enforce idle disconnect f[...]

  • Page 71

    Chapter 8 Working With File Services 71 maxThreads Maximum number of AFP threads. (Must be specified at startup.) Default = 40 noNetworkUsers Indication to client that all users are users on the server . Default = no permissionsModel How permissions are enforced . Can be set to: classic_permissions unix_with_classic_admin_permissions unix_permissio[...]

  • Page 72

    72 Chapter 8 Working With File Services List of AFP serveradmin Commands In addition to the standard start , stop , status , and settings commands, you can use serveradmin to issue the following service-specific AFP commands. Listing Connected Users Y ou can use the serveradmin getConnectedUsers command to retrieve inf ormation about connected AFP [...]

  • Page 73

    Chapter 8 Working With File Services 73 Sending a Message to AFP Users Y ou can use the serveradmin sendMessage command to send a text message to connected AFP users. Users are specified by session ID . T o send a message: $ sudo serveradmin command afp:command = sendMessage afp:message = "message-text " afp:sessionIDsArray:_array_index:0[...]

  • Page 74

    74 Chapter 8 Working With File Services Output afp:command = "disconnectUsers" afp:messageSent = "<message>" afp:timeStamp = "< time> " afp:timerID = <disconnectID> <user listing> afp:status = <status> Canceling a U ser Disconnect Y ou can use the serveradmin cancelDisconnect command to ca[...]

  • Page 75

    Chapter 8 Working With File Services 75 Listing AFP Ser vice Statistics Y ou can use the serveradmin getHistory command to display a log of periodic samples of the number of connections and the data throughput. Samples ar e taken once each minute. T o list samples: $ sudo serveradmin command afp:command = getHistory afp:variant = statistic afp:time[...]

  • Page 76

    76 Chapter 8 Working With File Services Viewing AFP Log F iles Y ou can use tail or any other file listing tool to view the con tents of the AFP service logs. T o view the latest entries in a log: $ tail log-file Y ou can use the serveradmin getLogPaths command to see where the current AFP error and activity logs are located. T o display the log pa[...]

  • Page 77

    Chapter 8 Working With File Services 77 Changing NFS Ser vice Settings Use the following parameters with the serveradmin command to change settings for the NFS ser vice. FTP Ser vice Star ting FTP Ser vice T o star t FTP ser vice: $ sudo serveradmin start ftp Stopping FTP Ser vice T o stop FTP ser vice: $ sudo serveradmin stop ftp Checking FTP Ser [...]

  • Page 78

    78 Chapter 8 Working With File Services Changing FTP Settings Y ou can change FTP ser vice settings using the serveradmin application. T o change a setting: $ sudo serveradmin settings ftp:setting = value T o change several settings: $ sudo serveradmin settings ftp:setting = value ftp:setting = value ftp:setting = value [...] Control-D FTP Settings[...]

  • Page 79

    Chapter 8 Working With File Services 79 List of FTP serveradmin Commands Y ou can use the following commands with the serveradmin application to manage FTP ser vice. logCommands:anonymous Default = no logCommands:guest Default = no logCommands:real Default = no loginFailuresPermitted Default = 3 logSecurity:anonymous Default = no logSecurity:guest [...]

  • Page 80

    80 Chapter 8 Working With File Services Viewing the FTP T ransfer Log Y ou can use tail or any other file listing tool to view the con tents of the FTP transf er log. T o view the latest entries in the transfer log: $ tail log-file The default location of log-file is /Library/Logs/FTP .transger .log. Y ou can use the serveradmin getLogPaths command[...]

  • Page 81

    Chapter 8 Working With File Services 81 Viewing SMB Settings T o list all SMB ser vice settings: $ sudo serveradmin settings smb T o list a par ticular setting: $ sudo serveradmin settings smb:setting T o list a group of settings: Y ou can list a group of settings that hav e par t of their names in common by typing only as much of the name as you w[...]

  • Page 82

    82 Chapter 8 Working With File Services List of SMB Ser vice Settings Use the following parameters with the serveradmin command to change settings for the SMB ser vice. Par ameter ( smb: ) Description adminCommands:homes Whether home directories are mounted aut omatically when Windows users log in so you don’ t have to set up individual share poi[...]

  • Page 83

    Chapter 8 Working With File Services 83 local master Whether the server is providing workgroup master browser service. C an be set to: yes | no Corres ponds to the W orkgroup Master Browser checkbox in the Advanced pane of Window ser vice settings in the Ser ver Admin GUI application. log level The amount of detail written to the service logs. Can [...]

  • Page 84

    84 Chapter 8 Working With File Services List of SMB serveradmin Commands Y ou can use these commands with the serveradmin tool to manage SMB service. Listing SMB Users Y ou can use the serveradmin getConnectedUsers command to retrieve inf ormation about connected SMB users. For example , you can use this command to retrieve the session IDs you need[...]

  • Page 85

    Chapter 8 Working With File Services 85 Output The follo wing array of settings is displa yed for each connected user: smb:usersArray:_array_index:i:disconnectID = <disconnectID> smb:usersArray:_array_index:i:sessionID = <sessionID> smb:usersArray:_array_index:i:connectAt = <connect-time> smb:usersArray:_array_index:i:service = &l[...]

  • Page 86

    86 Chapter 8 Working With File Services Listing SMB Ser vice Statistics Y ou can use the serveradmin getHistory command to display a log of periodic samples of the number of SMB connections. Samples are taken once each minute. T o list samples: $ sudo serveradmin command smb:command = getHistory smb:variant = v1 smb:timeScale = scale Control-D Outp[...]

  • Page 87

    Chapter 8 Working With File Services 87 Viewing SMB Ser vice Logs Y ou can use tail or any other file listing tool to view the con tents of the SMB service logs. T o view the latest entries in a log: $ tail log-file Y ou can use the serveradmin getLogPaths command to see where the current SMB logs are located . T o display the log paths: $ sudo ser[...]

  • Page 88

    LL2354.book Page 88 Monday, October 20, 2003 9:47 AM[...]

  • Page 89

    9 89 9 W ork ing With Prin t Ser vice Commands y ou can use to manage the P rint service in Mac OS X Ser ver . Star ting and Stopping Prin t Ser vice T o star t Print service: $ sudo serveradmin start print T o stop Print service: $ sudo serveradmin stop print Checking the Status of Print Ser vice T o see summar y status of Print service: $ sudo se[...]

  • Page 90

    90 Chapter 9 Working With Print Service Changing Prin t Ser vice Settings T o change a setting: $ sudo serveradmin settings print:setting = value T o change several settings: $ sudo serveradmin settings print:setting = value print:setting = value print:setting = value [...] Control-D Prin t Ser vice Settings Use the following parameters with the se[...]

  • Page 91

    Chapter 9 Working With Print Service 91 Queue Data Arra y Print service settings include an array of value s for each existing print queue . T he array is a set of 1 4 parameters that define values for each queue. <id> is the queue ID , for example, 29D3ECF3-17C8-16E5-A330-84CEC733F249 . Par ameter ( print: ) Description queuesArray:_array_id[...]

  • Page 92

    92 Chapter 9 Working With Print Service Here is an example of a queue array parameter block: print:queuesArray:_array_id:29D3ECF3-17C8-16E5-A330- 84CEC733F249:quotasEnforced = no print:queuesArray:_array_id:29D3ECF3-17C8-16E5-A330- 84CEC733F249:sharingList:_array_index:0:service = "LPR" print:queuesArray:_array_id:29D3ECF3-17C8-16E5-A330-[...]

  • Page 93

    Chapter 9 Working With Print Service 93 Prin t Ser vice serveradmin Commands Y ou can use the following commands with the serveradmin application to manage Print service. Listing Queues Y ou can use the serveradmin getQueues command to list Prin t ser vice queues. $ sudo serveradmin command print:command = getQueues P ausing a Queue Y ou can use th[...]

  • Page 94

    94 Chapter 9 Working With Print Service Listing Jobs and Job Information Y ou can use the serveradmin getJobs command to list information about print jobs . $ sudo serveradmin command print:command = getJobs print:maxDisplayJobs = jobs print:queueNamesArray:_array_index:0 = queue Control-D F or each job , the command lists: • Document name • Nu[...]

  • Page 95

    Chapter 9 Working With Print Service 95 T o release the job for printing , change its state t o PENDING . T o release the job: $ sudo serveradmin command print:command = setJobState print:status = PENDING print:namesArray:_array_index:0:printer = queue print:namesArray:_array_index:0:idsArray:_array_index:0 = jobid Control-D Viewing Print Ser vice [...]

  • Page 96

    LL2354.book Page 96 Monday, October 20, 2003 9:47 AM[...]

  • Page 97

    10 97 10 W ork ing With NetBoot Ser vice Commands y ou can use to manage the NetBoot service in Mac OS X Ser ver . Star ting and Stopping NetBoot Ser vice T o star t NetBoot ser vice: $ sudo serveradmin start netboot If you get the following response: $ netboot:state = "STOPPED" $ netboot:status = 5000 you have not yet enabled NetBoot on [...]

  • Page 98

    98 Chapter 10 Working With NetBoot Service Changing NetBoot Settings Y ou can change NetBoot ser vice settings using the serveradmin command. T o change a setting: $ sudo serveradmin settings netboot:setting = value T o change several settings: $ sudo serveradmin settings netboot:setting = value netboot:setting = value netboot:setting = value [...][...]

  • Page 99

    Chapter 10 Working With NetBoot Service 99 Storage Recor d Arra y A volume parameter array: F ilters Record Arr ay An array of the follo wing values appears in the NetBoot service settings for each computer explicitly allowed or denied acce ss to images stored on the ser ver: Par ameter ( netboot: ) Description netBootStorageRecordsArray:_array_ind[...]

  • Page 100

    100 Chapter 10 Working With NetBoot Service Image Record Arra y An array of the follo wing values appears in the NetBoot service settings for each image stored on the server: Par ameter ( netboot: ) Description: netBootImagesRecordsArray: _array_index:<n>:Name Name of the image as it appears in the Star tup Disk control panel (Mac OS 9) or Pr[...]

  • Page 101

    Chapter 10 Working With NetBoot Service 101 P or t Record Array An array of the follo wing items is included in the NetBoot service settings for each network port on the ser ver set to deliver images: Par ameter ( netboot: ) Description netBootPortsRecordsArray:_array_index:<m>: isEnabledAtIndex First parameter in an arra y describing a netwo[...]

  • Page 102

    LL2354.book Page 102 Monday, October 20, 2003 9:47 AM[...]

  • Page 103

    11 103 11 W ork ing With Mail Ser vice Commands y ou can use to manage the Mail service in Mac OS X Ser ver . Star ting and Stopping Mail Ser vice T o star t Mail ser vice: $ sudo serveradmin start mail T o stop Mail ser vice: $ sudo serveradmin stop mail Checking the Status of Mail S er vice T o see summar y status of Mail ser vice: $ sudo servera[...]

  • Page 104

    104 Chapter 11 Working With Mail Service Changing Mail Ser vice Settings Y ou can use serveradmin to modify your ser ver ’ s mail configuration. However , if you want to work with the M ail ser vice from the command-line, you ’ll probably find it more straightforward to work directly with the underlying P ostfix and C yrus mail services. F or i[...]

  • Page 105

    Chapter 11 Working With Mail Service 105 postfix:error_notice_recipient Default = "postmaster" postfix:smtpd_sasl_local_domain Default = no postfix:strict_mime_encoding_domain Default = no postfix:unknown_relay_recipient_reject_code Default = 550 postfix:disable_vrfy_command Default = no postfix:unknown_virtual_mailbox_reject_code Default[...]

  • Page 106

    106 Chapter 11 Working With Mail Service postfix:line_length_limit Default = 2048 postfix:mailbox_transport Default = 0 postfix:deliver_lock_delay Default = "1s" postfix:best_mx_transport Default = 0 postfix:notify_classes Default = "resource,software" postfix:mailbox_command Default = "" postfix:mydomain Default = <[...]

  • Page 107

    Chapter 11 Working With Mail Service 107 postfix:local_transport Default = "local:$myhostname" postfix:smtpd_helo_restrictions Default = no postfix:fork_delay Default = "1s" postfix:disable_mime_output_conversion Default = no postfix:mynetworks:_array_index:0 Default = "127.0.0.1/32" postfix:smtp_never_send_ehlo Defaul[...]

  • Page 108

    108 Chapter 11 Working With Mail Service postfix:parent_domain_matches_subdomains Default = "debug_peer_list,fast_flu sh_domains,mynetworks,per mit_mx_backup_networks,qm qpd_authorized_clients,re lay_domains,smtpd_access_ maps" postfix:setgid_group Default = "postdrop" postfix:mime_header_checks Default = "$header_checks&qu[...]

  • Page 109

    Chapter 11 Working With Mail Service 109 postfix:virtual_mailbox_limit Default = 51200000 postfix:smtpd_noop_commands Default = 0 postfix:mail_release_date Default = "20030319" postfix:append_at_myorigin Default = yes postfix:body_checks_size_limit Default = 51200 postfix:qmgr_message_active_limit Default = 20000 postfix:mail_name Default[...]

  • Page 110

    110 Chapter 11 Working With Mail Service postfix:queue_service_name Default = "qmgr" postfix:transport_maps Default = "" postfix:smtp_destination_concurrency_limit Default = "$default_destination_con currency_limit" postfix:virtual_mailbox_lock Default = "fcntl" postfix:qmgr_fudge_factor Default = 100 postfix[...]

  • Page 111

    Chapter 11 Working With Mail Service 111 postfix:showq_service_name Default = "showq" postfix:smtp_pix_workaround_delay_time Default = "10s" postfix:lmtp_sasl_security_options Default = "noplaintext, noanonymous" postfix:bounce_size_limit Default = 50000 postfix:qmqpd_timeout Default = "300s" postfix:allow_ma[...]

  • Page 112

    112 Chapter 11 Working With Mail Service postfix:proxy_read_maps Default = "$local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetwo[...]

  • Page 113

    Chapter 11 Working With Mail Service 113 postfix:append_dot_mydomain Default = yes postfix:command_expansion_filter Default = "1234567890!@%- _=+:,./abcdefghijklmnopqr stuvwxyzABCDEFGHIJKLMNOPQ RSTUVWXYZ" postfix:default_extra_recipient_limit Default = 1000 postfix:lmtp_data_done_timeout Default = "600s" postfix:myorigin Default[...]

  • Page 114

    114 Chapter 11 Working With Mail Service imap:umask Default = "077" imap:tls_ca_path Default = "" imap:pop_auth_gssapi Default = yes imap:sasl_minimum_layer Default = 0 imap:tls_cert_file Default = "" imap:poptimeout Default = 10 imap:tls_sieve_require_cert Default = no imap:mupdate_server Default = "" imap:t[...]

  • Page 115

    Chapter 11 Working With Mail Service 115 imap:tls_ca_file Default = "" imap:sasl_pwcheck_method Default = "auxprop" imap:postuser Default = "" imap:sieve_maxscripts Default = 5 imap:defaultpartition Default = "default" imap:altnamespace Default = yes imap:max_imap_connections Default = 100 imap:tls_imap_cert_[...]

  • Page 116

    116 Chapter 11 Working With Mail Service Mail serveradmin Commands Y ou can use the following commands with the serveradmin application to manage Mail ser vice. imap:configdirectory Default = "/var/imap" imap:sasl_maximum_layer Default = 256 imap:sendmail Default = "/usr/sbin/sendmail" imap:loginuseacl Default = no imap:mupdate_[...]

  • Page 117

    Chapter 11 Working With Mail Service 117 Listing Mail Ser vice Statistics Y ou can use the serveradmin getHistory command to display a log of periodic samples of the number of user connections and the data throughput. Samples ar e taken once each minute. T o list samples: $ sudo serveradmin command mail:command = getHistory mail:variant = statistic[...]

  • Page 118

    118 Chapter 11 Working With Mail Service Viewing the Mail Ser vice L ogs Y ou can use tail or any other file listing tool to view the con tents of the Mail service logs. T o view the latest entries in a log: $ tail log-file Y ou can use the serveradmin getLogPaths command to see where the Mail ser vice logs are located . T o display the log locatio[...]

  • Page 119

    Chapter 11 Working With Mail Service 119 Setting Up SSL for Mail Ser vice Mail ser vice requires some configuration to provide Secure Sockets Layer (SSL) connections automatically . The basic steps are as follows: • Generate a Cer tificate Signing Request (CSR) and create a k eychain. • Obtain an SSL cer tificate from an issuing authorit y . ?[...]

  • Page 120

    120 Chapter 11 Working With Mail Service 7 Ty p e y when prompted to confirm the algorithm and key size, then press Return. You have selected algorithm RSA, key size (size entered above) bits. OK (y/anything)? 8 Ty p e b when prompted to specify how this certificate will be used, then press Return. Enter cert/key usage (s=signing, b=signing AND enc[...]

  • Page 121

    Chapter 11 Working With Mail Service 121 Obtaining an SSL Certificate After generating a CSR and a keychain, you continue configuring Mail ser vice for automatic SSL connections by purchasing an SSL certificate from a certificate authority such as V erisign or Tha wte. Y ou can do this by completing a f orm on the certificate authority ’ s w ebsi[...]

  • Page 122

    122 Chapter 11 Working With Mail Service Creating a P assphrase F ile T o create a passphrase file, you will use T extEdit, then change the privileges of the file using the T erminal application. This file contains the passphrase you specified when you created the keychain. Mail ser vice will automatically use the passphrase file to unlock the k ey[...]

  • Page 123

    12 123 12 W ork ing With W eb T echnologies Commands y ou can use to manage W eb ser vice in Mac OS X Ser ver . Star ting and Stopping W eb Ser vice T o star t Web service: $ sudo serveradmin start web T o stop W eb ser vice: $ sudo serveradmin stop web Checking W eb S er vice Status T o see if W eb ser vice is running: $ sudo serveradmin status we[...]

  • Page 124

    124 Chapter 12 Working With Web Technologies T o list a group of settings: Y ou can list a group of settings that hav e par t of their names in common by typing only as much of the name as you want, stopping at a colon (:), and typing an asterisk (*) as a wildcard for the remaining parts of the name. For example , $ sudo serveradmin settings web:IF[...]

  • Page 125

    Chapter 12 Working With Web Technologies 125 T o change several settings: $ sudo serveradmin settings web:setting = value web:setting = value web:setting = value [...] Control-D W eb serveradmin Commands Y ou can use the following commands with the serveradmin application to manage W eb service. Listing Hosted Site s Y ou can use the serveradmin ge[...]

  • Page 126

    126 Chapter 12 Working With Web Technologies Viewing S er vice Statistics Y ou can use the serveradmin getHistory command to display a log of periodic samples of the number of requests , cache per formance , and data throughput. Samples are taken once each minute. T o list samples: $ sudo serveradmin command qtss:command = getHistory qtss:variant =[...]

  • Page 127

    Chapter 12 Working With Web Technologies 127 Example Script for A dding a W ebsite The following script shows how you can use serveradmin to add a website to the ser ver’ s W eb ser vice configuration. The script uses two files: • addsite The actual script you run. It accepts values for the site’ s IP address, por t number , server name, and [...]

  • Page 128

    128 Chapter 12 Working With Web Technologies web:Sites:_array_id:_ipaddr:_port__servername:ErrorDocument:_array_index:0: StatusCode = 404 web:Sites:_array_id:_ipaddr:_port__servername:ErrorDocument:_array_index:0: Document = "/nwesite_notfound.html" web:Sites:_array_id:_ipaddr:_port__servername:LogLevel = "warn" web:Sites:_ar[...]

  • Page 129

    13 129 13 W ork ing With Network Ser vices Commands y ou can use to manage DHCP , DNS, F irewall, NA T , and VPN ser vice in Mac OS X Ser ver . DHCP Ser vice Star ting and Stopping DHCP Ser vice T o star t DHCP ser vice: $ sudo serveradmin start dhcp T o stop DHCP ser vice: $ sudo serveradmin stop dhcp Checking the Status of DHCP Ser vice T o see s[...]

  • Page 130

    130 Chapter 13 Working With Network Services Changing DHCP Ser vice Settings T o change a setting: $ sudo serveradmin settings dhcp:setting = value T o change several settings: $ sudo serveradmin settings dhcp:setting = value dhcp:setting = value dhcp:setting = value [...] Control-D DHCP Ser vice Settings Use the following parameters with the serve[...]

  • Page 131

    Chapter 13 Working With Network Services 131 DHCP Subnet Settings Array An array of the settings listed in the f ollowing table is included in the DHCP service settings for each subnet you define. Y ou can add a subnet to the DHCP configuration by using serveradmin to add an array of the se settings. About Subnet IDs In an actual list of settings, [...]

  • Page 132

    132 Chapter 13 Working With Network Services lease_time_secs Lease time in seconds. Default = "3600" Corresponds to the L ease Time pop-up menu and field in the General pane of the subnet settings in the Ser ver Admin GUI application. net_address The IPv4 network address for the subnet. net_mask The subnet mask for the subnet. Corresponds[...]

  • Page 133

    Chapter 13 Working With Network Services 133 Adding a DHCP Subnet Y ou may already ha ve a subnet for each port you enabled when you installed and set up the ser ver . Y ou can use the serveradmin settings command to check for subnets that the ser ver set up for you; see “ Viewing DHCP Ser vice S ettings” on page 1 29. Y ou can use the serverad[...]

  • Page 134

    134 Chapter 13 Working With Network Services List of DHCP serveradmin Commands Y ou can use the following command with the serveradmin application to manage DHCP ser vice. Viewing the DHCP Ser vice Log Y ou can use tail or any other file listing tool to view the con tents of the DHCP service log. T o view the latest entries in a log: $ tail log-fil[...]

  • Page 135

    Chapter 13 Working With Network Services 135 DNS Ser vice Star ting and Stopping the DNS Ser vice T o star t DNS ser vice: $ sudo serveradmin start dns T o stop DNS ser vice: $ sudo serveradmin stop dns Checking the Status of DNS Ser vice T o see summar y status of DNS ser vice: $ sudo serveradmin status dns T o see detailed status of DNS ser vice:[...]

  • Page 136

    136 Chapter 13 Working With Network Services T o view the latest entries in a log: $ tail log-file Y ou can use the serveradmin getLogPaths command to see where the current DNS log is located. The defa ult is /Library/Logs/named.log . T o display the log path: $ sudo serveradmin command dns:command = getLogPaths Listing DNS Ser vice Statistics Y ou[...]

  • Page 137

    Chapter 13 Working With Network Services 137 Checking the Status of Fir ewall Ser vice T o see summar y status of Firewall service: $ sudo serveradmin status ipfilter T o see detailed status of Firewall service, including rules: $ sudo serveradmin fullstatus ipfilter Viewing Firewall Service Settings T o list Firewall service configuration settings[...]

  • Page 138

    138 Chapter 13 Working With Network Services IPFilter Gr oups With Rules Arr ay An array of the follo wing settings is included in the IPFilt er settings for each defined IP address gr oup. These arrays aren ’t part of a standard ipfw configuration, but are cr eated by the Ser ver Admin GUI application t o implement the IP Addr ess groups on the [...]

  • Page 139

    Chapter 13 Working With Network Services 139 The unmodified ipfw .conf file: # ipfw.conf.default - Installed by Apple, never modified by Server Admin app # # ipfw.conf - The servermgrd process (the back end of Server Admin app) # creates this from ipfw.conf.default if it's absent, but does not modify # it. # # Administrators can place custom i[...]

  • Page 140

    140 Chapter 13 Working With Network Services Adding Rules U sing serveradmin If you prefer not to work with the ipfw.conf file, you can use the serveradmin settings command to add firewall rules to your configuration. Note: Be sure to include the special first setting (ending with = create ). This is how you tell serveradmin to create the necessary[...]

  • Page 141

    Chapter 13 Working With Network Services 141 IPF ilter Rules Arra y An array of the follo wing settings is included in the IPFilt er settings for each defined firewall rule. In an actual list of settings, <rule> is replaced with a rule number . Y ou can add a rule by using serveradmin to create such an arra y in the firewall settings (see “[...]

  • Page 142

    142 Chapter 13 Working With Network Services Viewing Firewall Service Log Y ou can use tail or an y other file listing tool t o view the contents of the ipfilt er service log. T o view the latest entries in the log: $ tail log-file Y ou can use the serveradmin getLogPaths command to see where the current ipfilter service log is located. T o display[...]

  • Page 143

    Chapter 13 Working With Network Services 143 Changing NA T S er vice Settings T o change a setting: $ sudo serveradmin settings nat:setting = value T o change several settings: $ sudo serveradmin settings nat:setting = value nat:setting = value nat:setting = value [...] Control-D NA T S er vice Settings Use the following parameters with the servera[...]

  • Page 144

    144 Chapter 13 Working With Network Services NA T serveradmin Commands Y ou can use the following commands with the serveradmin application to manage NA T ser vice. Viewing the NA T Ser vice Log Y ou can use tail or any other file listing tool to view the con tents of the NA T service log. T o view the latest entries in the log: $ tail log-file Y o[...]

  • Page 145

    Chapter 13 Working With Network Services 145 VPN Ser vice Star ting and Stopping VPN S er vice T o star t VPN ser vice: $ sudo serveradmin start vpn T o stop VPN service: $ sudo serveradmin stop vpn Checking the Status of VPN Ser vice T o see summar y status of VPN service: $ sudo serveradmin status vpn T o see detailed status of VPN service: $ sud[...]

  • Page 146

    146 Chapter 13 Working With Network Services List of VPN Service Settings Use the following parameters with the serveradmin command to change settings for VPN ser vice. Par ameter ( vpn:Servers: ) Description com.<name>.ppp.l2tp: Server:VerboseLogging Default = 1 com.<name>.ppp.l2tp: Server:MaximumSessions Default = 128 com.<name>[...]

  • Page 147

    Chapter 13 Working With Network Services 147 com.<name>.ppp.l2tp: PPP:DSACLEnabled Default = no com.<name>.ppp.l2tp: PPP:VerboseLogging Default = 1 com.<name>.ppp.l2tp: PPP:AuthenticatorPlugins: _array_index: n Default = "DSAuth" com.<name>.ppp.l2tp: PPP:LCPEchoInterval Default = 60 com.<name>.ppp.l2tp: PPP:L[...]

  • Page 148

    148 Chapter 13 Working With Network Services com.<name>.ppp.pptp: Interface:SubType Default = "PPTP" com.<name>.ppp.pptp: Interface:Type Default = "PPP" com.<name>.ppp.pptp: PPP:CCPProtocols:_array_index: n Default = "MPPE" com.<name>.ppp.pptp: PPP:LCPEchoFailure Default = 5 com.<name>.ppp[...]

  • Page 149

    Chapter 13 Working With Network Services 149 List of VPN serveradmin C ommands Y ou can use the following commands with the serveradmin application to manage VPN ser vice. Viewing the VPN Ser vice Log Y ou can use tail or any other file listing tool to view the con tents of the VPN ser vice log. T o view the latest entries in the log: $ tail log-fi[...]

  • Page 150

    150 Chapter 13 Working With Network Services IP F ailover IP failover allows a secondary ser ver to acquire the IP addre ss of a primary ser ver if the primar y server ceases to function. Once the primary ser ver returns to normal operation, the secondar y ser ver relinquishes the IP addr ess. This allows your w ebsite to remain available on the ne[...]

  • Page 151

    Chapter 13 Working With Network Services 151 Enabling IP F ailover Y ou enable IP failover by adding command line s to the file /etc/hostconfig on the primar y and the secondar y ser ver . Be sure to en ter these lines exactly as shown with regard to s paces and punctuation marks. T o enable IP failover: 1 At the primary ser ver , add the f ollowin[...]

  • Page 152

    152 Chapter 13 Working With Network Services Configuring IP F ailover Y ou configure failover beha vior using scripts. The scripts must be ex ecutable (for example, shell scripts, Perl, compiled C code, or executable AppleScripts). Y ou place these scripts in /Library/IPF ailover/<IP addre ss> on the secondary ser ver . Y ou need to create a [...]

  • Page 153

    Chapter 13 Working With Network Services 153 F or example , your secondary ser ver may perform other services on the netw ork such as running a statistical analysis application and distributed image processing software. A preacquisition script quits the running applications to free up the CPU f or the W eb ser ver . A postacquisition script starts [...]

  • Page 154

    LL2354.book Page 154 Monday, October 20, 2003 9:47 AM[...]

  • Page 155

    14 155 14 W ork ing With Open Director y Commands y ou can use to manage the Open Dir ector y ser vice in Mac OS X Ser ver . This chapter includes de scriptions of general director y tools and tools for w orking with LDAP , NetInf o , and the P assword Ser ver . General Director y T ools T esting Y our Open Director y Configuration Y ou can use the[...]

  • Page 156

    156 Chapter 14 Working With Open Directory Registering URLs With Ser vice Location P rotocol (SLP) Y ou can use the slp_reg command to register service URLs using the Ser vice Location Prot ocol (SLP). F or more information, type man slp_reg to see the man page. SLP registration is handled by the SLP daemon slpd . For more inf ormation, type man sl[...]

  • Page 157

    Chapter 14 Working With Open Directory 157 LDAP Configuring LDAP The follo wing tools are av ailable for configuring LDAP . F or more inf ormation, see the man page for each tool. slapconfig Y ou can use the slapconfig utility to configure the slapd and slurpd LDAP daemons and related search policies . For more inf ormation, type man slapconfig to [...]

  • Page 158

    158 Chapter 14 Working With Open Directory The -x option force s ldapsearch to use simple authentication inst ead of SASL. Idle Rebinding Options The follo wing two LDAPv3 plugin parameters aren ’t documented in the open directory administration guide. The parameters are in, or can be added to, the file /librar y/preference s/directoryser vice/DS[...]

  • Page 159

    Chapter 14 Working With Open Directory 159 NetInfo Configuring NetInf o Y ou can use the following command-line utilities to manage the NetInfo direc tory . For more information about a utilit y , see the related man page. F or example, you can use the NeST -setprotocols command to specify which authentication methods the server ’ s Open Director[...]

  • Page 160

    160 Chapter 14 Working With Open Directory F or information on the a vailable methods , see the Open Directory administration guide. Kerberos and Single Sign On The following tools are av ailable for setting up your Kerberos and Single Sign-On environmen t. For more inf ormation on a tool, see the related man page. T ool (in usr/sbin/) Description [...]

  • Page 161

    15 161 15 W ork ing With QuickTime Streaming Ser ver Commands y ou can use to manage Q TSS ser vice in Mac OS X Ser ver . Star ting Q TSS Ser vice Y ou can use the serveradmin command to star t QTSS service, or you can use the quicktimestreamingserver command to specify additional service parameters when you star t the ser vice. T o star t QTSS ser[...]

  • Page 162

    162 Chapter 15 Working With QuickTime Streaming Server Viewing QT SS Settings T o list all QTSS service settings: $ sudo serveradmin settings qtss T o list a par ticular setting: $ sudo serveradmin settings qtss:setting T o list a group of settings: Y ou can list a group of settings that hav e par t of their names in common by typing only as much o[...]

  • Page 163

    Chapter 15 Working With QuickTime Streaming Server 163 Q TSS Settings Use the following parameters with the serveradmin command to change settings for the QT SS service. Descriptions of Settings T o see descriptions of most QTSS settings, you can look in the sample settings file /Librar y/Quick TimeStreaming/C onfig/streamingserver .xml-sample . Lo[...]

  • Page 164

    164 Chapter 15 Working With QuickTime Streaming Server modules:_array_id:QTSSAdminModule: AdministratorGroup Default = "admin " modules:_array_id:QTSSAdminModule: Authenticate Default = yes modules:_array_id:QTSSAdminModule: enable_remote_admin Default = yes modules:_array_id:QTSSAdminModule: IPAccessList Default = "127.0.0.* " [...]

  • Page 165

    Chapter 15 Working With QuickTime Streaming Server 165 modules:_array_id:QTSSReflectorModule: allow_broadcasts Default = yes modules:_array_id:QTSSReflectorModule: allow_non_sdp_urls Default = yes modules:_array_id:QTSSReflectorModule: BroadcasterGroup Default = "broadcaster" modules:_array_id:QTSSReflectorModule: broadcast_dir_list Defau[...]

  • Page 166

    166 Chapter 15 Working With QuickTime Streaming Server Q TSS serveradmin C ommands Y ou can use the following commands with the serveradmin application to manage QT SS service. Listing Curr ent C onnections Y ou can use the serveradmin getConnectedUsers command to retrieve inf ormation about QT SS connections. T o list connec ted users: $serveradmi[...]

  • Page 167

    Chapter 15 Working With QuickTime Streaming Server 167 Viewing QT SS Ser vice Statistics Y ou can use the serveradmin getHistory command to display a log of periodic samples of the number of connections and the data throughput. Samples ar e taken once each minute. T o list samples: $ sudo serveradmin command qtss:command = getHistory qtss:variant =[...]

  • Page 168

    168 Chapter 15 Working With QuickTime Streaming Server Viewing Ser vice L ogs Y ou can use tail or any other file listing tool to view the con tents of the Q TSS ser vice logs. T o view the latest entries in a log: $ tail log-file Y ou can use the serveradmin getLogPaths command to see where the current Q TSS error and activity logs are located. T [...]

  • Page 169

    Chapter 15 Working With QuickTime Streaming Server 169 Pr eparing Older Home Directories f or User Streaming If you want to enable QT SS home director y streaming for home directories created using an earlier version of Mac OS X Ser ver (before version 1 0.3), y ou need to set up the necessary streaming media folder in each user ’ s home director[...]

  • Page 170

    LL2354.book Page 170 Monday, October 20, 2003 9:47 AM[...]

  • Page 171

    171 Index Index A AFP (Apple Filing Protocol) canceling user disconnect 74 changing service settings 68 checking service status 67 disconnecting users 73 listing connected users 72 sending user message 73 service settings 68 starting service 67 stopping service 67 viewing service logs 76 viewing service settings 67 viewing service statistics 75 Air[...]

  • Page 172

    172 Index F file system, case-sensitive 51 File Transfer Protocol. See FTP fingerprint, RSA 17 Firewall service. See IPFilter service fsck command 50 FTP (File Transfer Protocol) changing service settings 78 checking connections 80 checking service status 77 service settings 78 starting service 77 stopping service 77 viewing service logs 80 viewing[...]

  • Page 173

    Index 173 checking service status 142 service settings 143 starting service 142 stopping service 142 viewing service logs 144 viewing service settings 142 NeST tool 159 NetBoot service changing settings 98 checking status 97 filters record array 99 general settings 98 image record array 100 port record array 101 starting 97 stopping 97 storage reco[...]

  • Page 174

    174 Index S SASL used by ldapsearch 157 scripts adding a website 127 Secure Sockets Layer. See SSL serial number, server software 26 serveradmin utility usage notes 19 server configuration file example 22 naming 25 saving 21 Server Message Block. See SMB serversetup utility usage notes 19 Service Location Protocol. See SLP share points creating 66 [...]

  • Page 175

    Index 175 starting service 145 stopping service 145 viewing service logs 149 viewing service settings 145 W web proxy settings 43 Web service changing settings 124 checking status 123 listing sites 125 script to add site 127 starting 123 stopping 123 viewing logs 125 viewing settings 123 viewing statistics 126 websites script for adding 127 Windows[...]