The owner or authorized user of a valid copy of
Mac OS X Server software may reproduce this
publication for the purpose of learning to use such
software. No part of this publication may be reproduced
or transmitted for commercial purposes, such as selling
copies of this publication or for providing paid-for
support services.
Every effort has been made to ensure that the
information in this manual is accurate. Apple Inc. is not
responsible for printing or clerical errors.
Because Apple periodically releases new versions and
updates to its software, images shown in this book may
be different from what you see on your screen.
Apple
1 Infinite Loop
Cupertino, CA 95014-2084
408-996-1010
www.apple.com
The Apple logo is a trademark of Apple Inc., registered
in the U.S. and other countries. Use of the “keyboard”
Apple logo (Option-Shift-K) for commercial purposes
without the prior written consent of Apple may
constitute trademark infringement and unfair
competition in violation of federal and state laws.
Apple, the Apple logo, AirPort, AirPort Express, AirPort
Extreme, Bonjour, FireWire, iCal, iPod, iSight, iTunes,
Keychain, Keynote, Mac, Mac OS, Macintosh, Panther,
Power Mac, QuickTime, Xcode, Xgrid, and Xserve are
trademarks of Apple Inc., registered in the U.S. and other
countries. Apple Remote Desktop, Apple TV, Finder,
iPhone, Leopard, Safari, Spotlight, and Tiger are
trademarks of Apple Inc.
Adobe and PostScript are trademarks of Adobe Systems
Incorporated.
Intel, Intel Core, and Xeon are trademarks of Intel Corp.
in the U.S. and other countries.
™
PowerPC
and the PowerPC logo™ are trademarks of
International Business Machines Corporation, used
under license therefrom.
UNIX is a registered trademark of The Open Group in the
U.S. and other countries.
Other company and product names mentioned herein
are trademarks of their respective companies. Mention
of third-party products is for informational purposes
only and constitutes neither an endorsement nor a
recommendation. Apple assumes no responsibility with
regard to the performance or use of these products.
034-4192-A/2007-09-01
Contents
9 Chapter 1: Introducing Mac OS X Server
10
What’s New in Leopard Server
11
Simple Setup
13
Server Preferences and Server Status
14
iCal Server
15
Group Services with Wikis and Blogs
16
Directory
17
Podcast Producer
18
Spotlight Server
19
UNIX Compliance
19
64-Bit Computing
20
Server Configurations
22
Leopard Server in Action
24
Leopard Server in a Workgroup
26
Services
28
Applications and Utilities
29
Advanced Tools and Applications
3
31 Chapter 2: Installing Mac OS X Server
32
What You Need to Install Leopard Server
34
Installing Locally
36
Preparing an Administrator Computer
37
Installing Remotely
41 Chapter 3: Setting Up Mac OS X Server
42
Setting Up a Server Locally
43
Keeping Your Server Secure
44
Protecting the System Administrator (root) Account
44
Setting Up a Server Remotely
47 Chapter 4: Managing Your Server
47
Using Server Preferences
49
Using the Server Status Widget
51
Finding Settings in Server Preferences
51
Connecting Server Preferences to a Remote Server
52
Closing a Server Preferences Connection
53
Backing Up and Restoring the Server
54
Keeping Leopard Server Up to Date
55 Chapter 5: Managing Users
56
About User Accounts
58
About Administrator Accounts
60
Adding a User Account
62
Importing Users
4
Contents
63
Importing Groups of Users Automatically
65
Deleting a User Account
66
Changing a User’s Account Settings
68
Changing a User’s Contact Info
69
Controlling a User’s Access to Services
70
Changing a User’s Group Membership
71
Changing a User’s Name or Password
73
Changing a User’s Picture
74
Customizing the Welcome Email
75
Customizing the Server Invitation Email
76
Customizing the Group Invitation Email
79 Chapter 6: Managing Users’ Computers
79
Setting Up Leopard Users’ Macs Automatically
82
Setting Up Services for New Leopard Users
84
Setting Up Leopard Users with an Invitation Email
85
Setting Up a Mac by Using Directory Utility
86
Setting Up Users’ Computers Manually
87
Setting Up a Mac User’s VPN Connection
89
Setting Up a User’s VPN Connection Manually
90
Working with Directory Information on Leopard Users’ Macs
93 Chapter 7: Managing Groups
94
Creating a New Group
96
Deleting a Group
97
Adding or Removing Members of a Group
Contents
5
99
Adding or Removing External Members of a Group
101
Changing Group Settings
10 2
Changing a Group’s Name
10 2
Setting Up a Group File Sharing Folder
10 3
Setting Up a Group Mailing List
10 3
Setting Up a Group Wiki Website
10 5
Setting Up a Group Calendar
10 6
Setting Up a Group Mailing List Archive
10 7 Chapter 8: Customizing Services
10 7
Managing File Sharing Service
10 8
About File Sharing Service
10 8
Adding a Shared Folder
10 9
Removing a Shared Folder
10 9
Controlling Access to a Shared Folder
110
Finding a Server’s File Sharing Address
111
Managing iCal Service
112
About iCal Service
113
Managing iChat Service
113
About iChat Service
11 4
Making All Users Buddies
115
Chatting with Users of Google Talk and Other XMPP Services
115
Saving and Archiving Instant Messages
11 6
Managing Mail Service
11 6
About Mail Service
6
Contents
117
Specifying a Mail Relay Server
118
About Junk Mail and Virus Filtering
118
Scanning for Incoming Junk Mail and Viruses
119
Managing Web Services
12 0
About Web Services
121
Finding the Server’s Website Address
121
Hosting a Conventional Website
12 2
Setting Up Group Wiki Service
12 3
Setting Up Webmail Service
12 3
Setting Up User Blogs
12 4
Managing VPN Service
12 4
About VPN Service
12 5
Changing the VPN Shared Secret
12 6
Creating a VPN Configuration File
12 7
Changing the IP Address Range for VPN
12 9
Providing VPN Service Through an Internet Router
13 0
Customizing Services Using Advanced Applications
131 Chapter 9: Managing Server Information
131
Managing Server Information
13 2
Changing the Serial Number or Site License Details
13 2
Changing the Notification Settings
13 3
Changing Your Server’s Name
13 4
Changing Your Server’s IP Address
Contents
7
13 5
Connecting to a Directory Server
13 6
Changing Firewall Settings
13 7
About the Firewall
13 8
Checking Server Logs
141
Monitoring Server Graphs
14 3 Chapter 10: Learning More
14 3
Using Onscreen Help
14 4
Mac OS X Server Administration Guides
14 7
Viewing PDF Guides Onscreen
14 7
Printing PDF Guides
14 8
Getting Documentation Updates
14 8
Getting Additional Information
14 9 Appendix A: Preparing Disks for Installing Mac OS X Server
15 0
Erasing with the Installer
151
Erasing with Server Assistant
151
Erasing with Disk Utility
152
Partitioning a Hard Disk
152
Creating a RAID Set
153 Appendix B: Configuring an Internet Router
153
Configuring Port Mapping on an AirPort Extreme Base Station
155
Manually Configuring Port Mapping on an Internet Router
157 Index
8
Contents
1
Introducing Mac OS X Server
1
Mac OS X Server has everything you need to provide
standards-based workgroup and Internet services, making it
ideal for education, small businesses, and large enterprises.
Mac OS X Server version 10.5 Leopard blends a mature, stable UNIX foundation with
open standards and Macintosh ease of use. It provides an extensive array of services
that support Macintosh, Windows, and UNIX client computers over a network.
With Leopard Server, small organizations and workgroups without an IT department
can take full advantage of the benefits of a server. Even a nontechnical user can set up
and manage Leopard Server for a group. Other users in the group can automatically
configure their Macs to get services from Leopard Server. Leopard Server has advanced
configuration options and management tools for IT professionals as well.
9
What’s New in Leopard Server
Mac OS X Server v10.5 Leopard offers major enhancements in several key areas:
Â
Simple setup
 Server Preferences and Server Status
 iCal Server
 Group services with wikis and blogs
 Directory application
 Podcast Producer
 Spotlight Server
 UNIX compliance and 64-bit computing
Leopard Server also has significant performance and scalability improvements for key
services, such as file sharing and mail services, compared to earlier versions.
If you’re an experienced server administrator and want to set up an enterprise server or
have other advanced needs, you’ll find enhancements to file sharing services, web
technologies, media streaming, instant messaging, mail service, directory and network
authentication, system imaging, and client management. Server Admin, Workgroup
Manager, and System Image Utility are all improved. For more information, see Server Administration and the other advanced administration guides described in “Mac OS X
Server Administration Guides” on page 144.
10Chapter 1
Introducing Mac OS X Server
Simple Setup
Using Mac OS X Server is easier than ever. Server Assistant eliminates the complexities
of configuring a server. It walks you through the setup process and the configuration
of essential services. It automatically configures your AirPort Extreme Base Station
(802.11n) and runs a built-in network health check to verify local network and Internet
connectivity. In a few clicks, Leopard Server readies file sharing, email, group websites,
instant messaging, personal calendars, and remote access.
Chapter 1 Introducing Mac OS X Server11
Users can quickly and easily set up Macs with Mac OS X Leopard to get services from
the server. They click a button in an invitation email or open the Directory Utility
application to open an assistant that connects to the server and sets up applications to
use its services. In no time, Mail, iChat, iCal, and a VPN network connection are all ready
to use. iChat users see other users in their iChat buddy lists. Mail users are ready to
send email to anyone in their group. Address Book, Directory, and Mail are ready to
look up shared contact information in the server’s directory. A printer connected to the
server’s USB port is automatically available to users.
12Chapter 1 Introducing Mac OS X Server
Server Preferences and Server Status
Leopard Server is even easier to keep running. Need to change something? With Server
Preferences, you can quickly manage users, groups, services, and system information.
You can use Server Preferences on the server, or use it on another Mac to manage your
server over the network.
Find the setting you
need without knowing
its exact location
To monitor server performance and services, you can check graphs and statistics with
the Server Status Dashboard widget. Server Status works over the network, so you can
keep an eye on the server from another Mac.
Monitor processor,
network, or disk usage
Check service status
Chapter 1 Introducing Mac OS X Server13
iCal Server
iCal Server makes it easy to share calendars, schedule meetings, and coordinate events
within a workgroup, a small business, or a large organization. Colleagues can check
each other’s availability, propose and accept meetings, book conference rooms, reserve
projectors, and more. iCal Server sends meeting invitations with agendas or to-do lists,
and tabulates replies.
iCal Server integrates with leading calendar applications including iCal 3 in Leopard
and third-party calendar applications that support the standard CalDAV protocol.
14Chapter 1 Introducing Mac OS X Server
Group Services with Wikis and Blogs
Leopard Server includes a wiki service that makes it easy for groups to create and
distribute information through their own shared intranet websites. All members of a
group can easily view, search, and edit wiki content in their web browsers. By using
included templates, or by creating their own, they can add, delete, edit, and format
content naturally—without knowing markup codes or special syntax. With a few clicks,
they can attach files and images, publish to podcasts, assign keywords, and link to
other wiki pages or other websites. They can also review the wiki’s complete history of
changes and revert pages to a previous version. In addition, they can view and
contribute to shared calendars, blogs, and mailing list archives.
Each user can have a blog, which provides an easy way to keep colleagues up to date
with projects, the files they’re working on, and pictures or podcasts. A personal blog is
the perfect place to put information for your group, or just for your own reference.
Chapter 1 Introducing Mac OS X Server15
Directory
The Directory application gives users access to shared information about people,
groups, locations, and resources within the organization. Users can share contacts, add
groups, set up group services, and manage their own contact information.
16Chapter 1 Introducing Mac OS X Server
Podcast Producer
A video camera, a Mac, and Leopard Server are all you need to produce podcasts of
lectures, training, or any other audio and video projects. Podcast Producer automates
video and audio capture, encoding, and delivery.
The Podcast Capture application installed on every Mac with Leopard allows users to
record high-quality audio and video from a FireWire camera, USB microphone, iSight,
or other supported device attached to a local or remote Mac. Podcast Capture
automatically sends the completed recording to Podcast Producer on Leopard Server,
which encodes and publishes the recording based on your workflow selection in
Podcast Capture. Podcast Producer can add effects such as watermarks, titles, and
introductory video, and then publish the podcast to a webpage, blog, iTunes, iTunes U,
QuickTime streaming server, an iPod, Apple TV, iPhone, or other mobile phone. Leopard
Server’s mail service can even notify you when the job has completed.
Chapter 1 Introducing Mac OS X Server17
In addition to recording audio and video, you can use Podcast Capture to record screen
activity (for example a Keynote presentation) along with audio from a local or remote
source. You can also use Podcast Capture to share QuickTime movies with others.
Anyone with an Internet connection and authorization to use Podcast Capture can
start the whole process. Simply log in to Podcast Capture, make a few selections, and
click a button to start recording. Click another button to stop recording, enter a title
and description, and click a button to start the podcast publishing process. Podcast
Producer takes care of the rest.
Podcast Producer automatically uses your server’s Xgrid 2 service for high performance
podcast encoding. Xgrid distributes encoding jobs across the network to Macs that
have Leopard set up to share their spare processing power. You can accommodate
more podcasts by adding Macs, and Xgrid scales automatically.
Spotlight Server
Spotlight simplifies finding content on a Mac, and Leopard Server extends Spotlight
searching to the network. Spotlight Server lets Mac users quickly and easily find
documents, files, and other content stored on your server. It works the way people
think, by searching the content on mounted network volumes, not just looking at file
names. There is no need to remember what someone else named a particular shared
document, project, or file. Use Quick Look to view, play, and read found files without
opening them.
18Chapter 1 Introducing Mac OS X Server
Content indexing happens automatically and transparently on the server. No
configuration of the server or users’ Macs is necessary.
For security, Spotlight Server works with the file access controls and permissions of
Mac OS X Server. A user’s search lists only items to which the user has access, ensuring
that secrets stay secret. So everyone in a group can store files on the server. Group
members can easily find shared files, but outsiders can’t find them.
UNIX Compliance
Leopard Server is an Open Brand UNIX 03 Registered Product, conforming to the SUSv3
and POSIX 1003.1 specifications for the C API, Shell Utilities, and Threads. Leopard
Server can compile and run all your UNIX 03-compliant code, so it can be deployed in
environments that demand full conformance. Mac OS X Server also provides full
compatibility with your server and application software.
64-Bit Computing
For the first time in Leopard Server, key server software components take advantage of
64-bit computing to achieve higher performance and processing power and to work
with larger data sets. Leopard Server runs 64-bit applications alongside 32-bit
applications, optimized for each.
Chapter 1 Introducing Mac OS X Server19
Server Configurations
Leopard Server offers several options for setting up your server to suit your
circumstances. The table on the next page lists some reasons for choosing each of the
following configurations:
 Standard: A simplified configuration ideal for the first server or only server in a small
organization
 Workgroup: An easy-to-use setup ideal for a workgroup in an organization with an
existing directory server
 Advanced: A flexible configuration ideal for advanced, highly customized
deployments
You can change a standard configuration to a workgroup configuration by connecting
the server to a directory server in your organization. Conversely, you can change from
workgroup to a standard configuration by disconnecting the server from the directory
server. You can also convert to advanced from standard or workgroup (but not the
reverse, except by reinstalling Leopard Server). For information about changing
configurations, see “Connecting to a Directory Server” on page 135 and Server Administration (described in “Mac OS X Server Administration Guides” on page 144).
20Chapter 1 Introducing Mac OS X Server
Reasons to chooseStandardWorkgroup Advanced
Set up the first server or only server for a small
organization
Have all services set up automatically
Have only selected services set up automatically
Use existing user accounts from your organization’s
directory server
Use one simple application, Server Preferences, to
manage essential settings for user accounts, groups,
and services
Have Leopard users’ Macs automatically set up to use
the server
Need no server administration experience
Completely control hundreds of service configuration
settings for multiple servers
Manage user accounts, home folders, and preferences
for hundreds or thousands of users, groups, and
computers
Set up network home folders and mobile user
accounts
Use powerful applications, such as Server Admin and
Workgroup Manager, or command-line tools, to
configure services and manage clients
Save setup data for automatic setup of multiple servers
Upgrade existing servers
%
%
%
%
%%
%%
%%
%
%
%
%
%
%
Chapter 1 Introducing Mac OS X Server21
Leopard Server in Action
The following illustration shows a standard configuration of Mac OS X Server in a small
organization. The server connects to a local network together with some users’
computers. Other users’ computers connect to the local network wirelessly through an
AirPort Extreme Base Station. The AirPort Extreme connects to the Internet through a
DSL modem or cable modem and shares the Internet connection with the server and
users’ computers. The server and users’ computers get their network addresses from
the AirPort Extreme’s DHCP server. They get DNS name service from the Internet
service provider (ISP).
The server provides user and group accounts, shared folders, shared calendars, instant
messaging, and a wiki website with blogs. The ISP doesn’t provide enough email
addresses for everyone in the organization, so the server provides email addresses and
mail service.
Some users may check their email while away, but they don’t have portable computers
to take home or on the road. They can log in to the server’s webmail service from their
home computers or any borrowed computer with a web browser.
Other users have their portable computers and home computers set up to connect to
the server’s VPN via the Internet. This gives them secure remote access, while working
at home or traveling, to all the services that the server provides on the local network.
22Chapter 1 Introducing Mac OS X Server
AirPort
Extreme
Mac OS X
Server
DSL or
cable modem
The Internet
ISP’s DNS
server
VPN
Mac OS X
computer
Mac OS X computers
Chapter 1 Introducing Mac OS X Server23
Leopard Server in a Workgroup
The next illustration depicts a workgroup configuration of Mac OS X Server that serves
a department in a large organization. This organization has an IT group that provides
DHCP service for assigning network addresses, DNS name service, mail service, Internet
access, and a VPN.
Everyone in the department already has a user account provided by the organization’s
Open Directory server, so these user accounts have been imported to the workgroup
server. This means everyone simply uses the user name and password they already
know to authenticate for services provided by the workgroup server. Those services
were automatically set up to use the Kerberos authentication of the Open Directory
server, allowing users to log in once per session for all workgroup services.
The workgroup server provides calendar and instant messaging services that work with
the users’ Mac OS X iCal and iChat applications. The workgroup server also provides
shared folders and wiki websites for groups within the department. Some
departmental groups include participants from outside the department. A group’s
external members use their existing user accounts to access the group’s shared folder,
calendar, wiki, and blog.
The department has some Windows users, who use Internet Explorer and Safari to
access their group’s wiki, calendar, and blog. Shared folders appear as mapped drives in
their Network Places. They have also set up their PCs to use the workgroup server’s
Jabber instant messaging.
24Chapter 1 Introducing Mac OS X Server
Organization-wide servers
Organization
The intranet
Workgroup
The Internet
AirPort
Extreme
Mac OS X
server
Mac OS X
administrator computer
Mac OS X computersWindows computers
Chapter 1 Introducing Mac OS X Server25
Services
Leopard Server provides the services and system features shown in the following table.
Services and system information are set up automatically for a standard or workgroup
configuration, using information you provide during the initial server setup.
After setting up a standard or workgroup configuration, you can change service and
system settings. You can turn off services that you don’t need, perhaps because you
already have them. For example, a standard configuration doesn’t need to provide mail
service if you want to use the mail service provided by an Internet service provider. If
no one needs to access your server from home or while traveling, you can turn off VPN
service.
A workgroup configuration may not need to provide mail or VPN service if your
organization provides them. For information about service and system settings, see
Chapter 4, “Managing Your Server,” Chapter 8, “Customizing Services,” and Chapter 9,
“Managing Server Information.”
If you select an advanced configuration during initial setup, services are not set up
automatically. You use advanced administration applications such as Server Admin and
Workgroup Manager, or command-line tools, to configure advanced settings for the
services you need the server to provide. For information about an advanced
configuration, see Server Administration and the other advanced administration guides
described in “Mac OS X Server Administration Guides” on page 144.
26Chapter 1 Introducing Mac OS X Server
ServiceStandardWorkgroup Advanced
File sharing (AFP and SMB protocols)IncludedOptionalOptional
File sharing (FTP and NFS protocols)Not usedNot usedOptional
Printer sharing (directly connected USB or FireWire
NetBoot and NetInstall (system imaging)Not usedNot usedOptional
Chapter 1 Introducing Mac OS X Server27
ServiceStandardWorkgroup Advanced
Spotlight (searching)Automatic AutomaticAutomatic
QuickTime StreamingNot usedNot usedOptional
Software updateNot usedNot usedOptional
Remote managementIncludedIncludedIncluded
Remote login (SSH)IncludedIncludedIncluded
Applications and Utilities
After setting up Leopard Server, you can change service settings and perform other
server administration tasks using the applications described below. You can also use
the Directory application, which is designed for users who aren’t administrators to
manage shared information in the server’s directory. It’s installed on all Macs with
Leopard as well as on your server. For information about using the Directory
application or Directory Utility, open it and then use the Help menu. For information
about using the other applications, see other chapters in this book.
Applications for standard and workgroup server administrators
Directory
(in /Applications/Utilities/)
Directory Utility
(in /Applications/Utilities/)
Server Assistant
(in /Applications/Server/)
28Chapter 1 Introducing Mac OS X Server
Gives users access to shared information about people,
groups, locations, and resources. Users can share
contacts, add groups set up group services, and
manage their own contact information.
Connect your server to a directory server in your
organization.
Install or set up Mac OS X Server on a remote
computer.
Applications for standard and workgroup server administrators
Server Preferences
(in /Applications/Server/)
Server Status widget for DashboardMonitor server activity from any Mac with Leopard.
Manage users and groups, customize services and
system information, and monitor server activity.
Advanced Tools and Applications
If you set up an advanced configuration of Leopard Server, you administer it using the
applications and tools listed below. For more information, see Server Administration and
the other advanced administration guides described in “Mac OS X Server
Administration Guides” on page 144.
Important: If you have administrative applications and tools from Mac OS X Server
version 10.4 Tiger or earlier, do not use them with Leopard Server.
Applications and tools for advanced server administrators
Directory Utility
(in /Applications/Utilities/)
Podcast Capture
(in /Applications/Utilities/)
QuickTime Broadcaster
(in /Applications/)
RAID Admin
(in /Applications/Server/)
Connect the server to a directory server in your
organization.
Lets users record high-quality audio and video from a
local or remote camera, capture screen activity, or
upload QuickTime files into Podcast Producer for
encoding and distribution.
Captures live audio and video and works seamlessly
with QuickTime Streaming Server for high-quality
network broadcasting.
Set up and monitor Xserve RAID hardware.
Chapter 1 Introducing Mac OS X Server29
Applications and tools for advanced server administrators
Server Admin
(in /Applications/Server/)
Set up services, manage file share points, change
service setup, and customize server settings. Monitor
server activity and view detailed service logs.
Server Assistant
(in /Applications/Server/)
Server Monitor
(in /Applications/Server/)
System Image Utility
(in /Applications/Server/)
Workgroup Manager
(in /Applications/Server/)
Install or set up Mac OS X Server on a remote
computer.
Remotely monitor and manage one or more Xserve
systems.
Create and customize NetBoot and NetInstall images
for Mac OS X and Mac OS X Server computers.
Manage users, groups, computers, and computer
groups in advanced server deployments. Manage
preferences for Mac OS X users.
Xgrid Admin
(in /Applications/Server/)
Remotely manage clusters and monitor the activity of
controllers, agents, and the status of jobs on the grid.
Command-line toolsUse UNIX tools to install and set up server software,
administer services, manage users, and so forth.
30Chapter 1 Introducing Mac OS X Server
Loading...
+ 138 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.