User manual APPLE MAC OS X SERVER ADMINISTRATOR GUIDE

[. . . ] Mac OS X Server Administrator's Guide K Apple Computer, Inc. © 2002 Apple Computer, Inc. Under the copyright laws, this publication may not be copied, in whole or in part, without the written consent of Apple. The Apple logo is a trademark of Apple Computer, Inc. , registered in the U. S. Use of the "keyboard" Apple logo (Option-Shift-K) for commercial purposes without the prior written consent of Apple may constitute trademark infringement and unfair competition in violation of federal and state laws. [. . . ] Select a user, group, or computer account in the account list, then click the Media Access preference icon. Select the Allow checkbox next to CDs & CD-ROMs to let users access music, data, or applications on compact discs. To restrict access to compact discs, select Require Authentication to require an administrator user name and password. To prevent access to all compact discs, deselect Allow. 6 Choose settings for DVDs. Select the Allow checkbox next to DVDs to let users access movies and other information on digital video discs. To restrict access to DVDs, select Require Authentication to require an administrator user name and password. To prevent access to all DVDs, deselect Allow. 7 Click Apply Now. 308 Chapter 6 Controlling the Use of Recordable Discs If a computer has the appropriate hardware, users can "burn discs" or write information to a recordable disc such as a CD-R, CD-RW, or DVD-R. Users can burn CDs on computers with a CD-RW drive, Combo drive, or Superdrive. If you want to limit the ability to use recordable media, you can require an administrator's user name and password. Alternatively, you could allow users to read information on a recordable disc, but not allow them to burn a disc themselves. To control the use of recordable discs: 1 2 3 4 5 6 7 Open Workgroup Manager. Use the At pop-up menu to find the directory domain that contains the account you want, then click Preferences. Select a user, group, or computer account in the account list, then click the Media Access preference icon. Select the Allow checkbox next to Recordable Discs to let users use a CD-R, CD-RW, or DVD-R disc. Select the Authentication checkbox to require an administrator password to use the disc. To prevent users from recording information to compact discs or DVD-R discs, deselect Allow. 8 Click Apply Now. Media Access Other Media Preferences Settings in the Other Media pane affect internal hard disks and external disks other than CDs or DVDs. Controlling Access to Hard Drives and Disks Media Access settings selected in the Other Media pane let you control access to both a computer's hard disk and any external disks other than CDs and DVDs. If you don't allow access to external disks, users cannot use floppy disks, Zip disks, FireWire hard drives, or other external storage devices. Client Management: Mac OS X 309 To restrict access to internal and external disks: 1 2 3 4 5 6 7 Open Workgroup Manager. Use the At pop-up menu to find the directory domain that contains the account you want, then click Preferences. Select a user, group, or computer account in the account list, then click the Media Access preference icon. Select options for Internal Disks (the computer's hard disk and disk partitions). Select the Authentication checkbox to require a password to access the hard disk. If you select the Read-Only checkbox, users can view the contents of the hard disk but cannot modify them or save files on the hard disk. 8 Select options for External Disks (other than CDs or DVDs). Select the Authentication checkbox to require a password to access external disks. [. . . ] See Terminal Common Gateway Interface (CGI) defined 582 compressed files 247 computer accounts about 128 adding to 274 changing information 274 creating 272 defined 582 deleting 276 deleting computers from 275 Guest Computer 277 moving computers between 275 presets 273 searching for 276 computer accounts, Mac OS 9 and 8. See Macintosh Manager computer list, Mac OS 9 and 8 425 computer list, Mac OS X. See computer accounts computer lists, Mac OS 9 and 8 See also Macintosh Manager computer preferences managing, Mac OS X 286 computers, Mac OS X controlling access to 278 configuration files. See BSD configuration files 594 Index Configure Web Service window 342 CRAM-MD5 385, 389 cross-platform issues for file service 236 CSR (certificate signing request) 361­362 custom FTP root 253 custom root in FTP 248 D daemon (predefined group account) 131 database directory domain 66 mail service 373 Password Server 88 data types group records 580 MailAttribute 577­579 user records 574­577 Desktop Printer Utility setting up LPR printing 324 DHCP about 54 defined 582 DHCP servers 476 interactions 477 network location 476 DHCP service 475­484 AirPort base stations 477 automatic search policy and 84 deleting subnets 480 described 475 DNS options for subnets 482 DNS Server for DHCP Clients 479 LDAP auto-configuration 477 LDAP server for DHCP clients 479 logs 480, 483 logs for 478 managing 478­484 managing subnets 481­483 monitoring clients 481 more information 484 NetInfo binding 112 NetInfo options for subnets 482 planning 475­477 preparing for setup 475­477 setting up 477­478 solving Problems 484 starting 478 stopping 478 subnet IP addresses lease times, changing 480 subnets 476 subnets, creating 481 uses for 475 viewing client lists 483 dialer (predefined group account) 131 Directory Access application 59 Active Directory server, adding 104 automatic search policy, using 95 BSD configuration files, mapping 116 custom search policies, defining 96 enabling and disabling protocols 94 LDAPv2 106­110 LDAPv2 access, changing 107 LDAPv2 configuration, adding 106 LDAPv2 search bases and data mapping, editing 108 LDAPv3 97­103 LDAPv3 access via DHCP 97 LDAPv3 configuration, adding 98 LDAPv3 configuration, changing 99 LDAPv3 configuration, deleting 100 LDAPv3 configuration, duplicating 99 LDAPv3 configurations, showing and hiding 97 LDAPv3 connections, changing 100 LDAPv3 search bases and mappings, editing 101 local domain search policy 96 NetInfo binding, configuring 112 remote administration 118 search policies 94­96 Directory Agent (DA) 547 directory domain defined 582 user accounts in 122 directory domain hierarchies about 78­84 data visibility in 81, 86 examples 79­80, 81 NetInfo 110, 111 Index 595 planning 82, 85­87, 91 search policies for 82­84 directory domain hierarchy defined 582 directory domains See also BSD configuration files, LDAPv2, LDAPv3, local directory domains, NetInfo, shared directory domains about 73 administrative data in 86 defined 45 information storage in 66, 71 limiting users in 91 mail service configuration in 376 security 87 simplifying changes to 86 tools for managing 89 user accounts in 66­67 directory node defined 582 directory services See also Open Directory about 47 administrators for 92 authentication 67 backing up 119 benefits of 65 defined 45, 582 information storage in 65 logs 119 network role of 66 planning 90, 91 setup overview 90 status 119 tools summary 89 disconnect messages 229 disk images 485, 492 disk images, Network Install creating 511 enabling 514 diskKeyFinder 566 disk space monitoring 555 reclaiming logs' use of 555 diskspacemonitor 556 diskutil 557 DNS (Domain Name System) defined 582 Rendezvous 72 DNS server default for DHCP 479 DNS servers 516 DNS service 515­524 A records 396 configuring BIND 520­523 described 515 junk mail prevention with 375, 399 load distribution 523 mail service and 372, 377 managing 518­520 more information 524 MX records 372, 377, 381, 396 planning 516­517 preparing for setup 516 problems with 264 reverse lookups 396 setting up 517 setup overview 517­518 starting 518, 519 stopping 518 strategies 516­517 usage statistics 519 uses for 515 with mail service 516 Documents folder 341 domain browsing services 240 domain names registering 517 Domain Name System (DNS) about 54 defined 582 DoS (Denial of Service) attacks preventing 537 DOS prompt 264 drop box 205 defined 582 DSFFPlugin. plist file 115 dsimportexport 555 exporting users and groups 184 export parameters 184 596 Index importing users and groups 181 import parameters 181 status information and logs 179 Dynamic Host Configuration Protocol. [. . . ]