Manuel d'utilisation / d'entretien du produit oxs du fabricant Apple
Aller à la page of 175
Mac OS X Ser v er C ommand-Line Administr ation For Version 10.3 or Later 034-2454_Cvr 10/15/03 11:47 AM Page 1.
Apple Computer , Inc. © 2003 Apple C omputer , Inc. All rights reser ved. The owner or authoriz ed user of a valid copy of Mac OS X Ser ver software may reproduc e this publication for the purpose of learning to use such software.
3 1 C on ten ts Prefac e 1 1 About This Book 11 Notation Con ventions 11 Summar y 11 Commands and Other T erminal T ex t 11 Command P arameters and Options 12 Default Settings 12 Commands Requiring Ro.
4 Contents 26 Viewing, V alidating , and S etting the Software Serial Number 26 Updating Ser ver Software 27 Moving a Server Chapter 3 29 Restarting or Shutting Down a Ser ver 29 Restarting a Ser ver .
Contents 5 39 Changing Configuration P recedence 39 T CP/IP Settings 39 Changing a Ser ver ’ s IP Address 40 Viewing or Changing IP Address , Subnet Mask, or Router Address 41 Viewing or Changing DN.
6 Contents 57 User Attributes 62 Checking a Ser ver User ’ s Name, UID , or P assword 63 Creating a User’ s Home Direc tor y 63 Mounting a User’ s Home Direc tory 63 Creating a Group F older 63 .
Contents 7 80 Checking SMB Ser vice Status 81 Viewing SMB Settings 81 Changing SMB Settings 82 List of SMB Ser vice Settings 84 List of SMB serveradmin Commands 84 Listing SMB Users 85 Disconnecting S.
8 Contents 11 6 Mail serveradmin Commands 11 7 Listing Mail Ser vice Statistics 11 8 V iewing the Mail Ser vice Logs 11 9 Setting Up SSL for Mail Ser vice 11 9 Generating a CSR and Creating a Keychain.
Contents 9 13 6 Firewall Service 13 6 Star ting and Stopping Firewall Service 13 7 Checking the Status of Firewall Service 13 7 Viewing Firewall Service Settings 13 7 Changing F irewall Service S etti.
10 Contents 15 7 A Note on Using ldapsearch 15 8 Idle Rebinding Options 15 8 Additional Inf ormation About LDAP 15 9 NetInfo 15 9 Configuring NetInfo 15 9 Passwor d Ser ver 15 9 Working With the P ass.
11 Prefac e About T his Book Notation Con ventions The following con ven tions are used throughout this book. Summar y Commands and Other T erminal T ext Commands or command parameters that you might t ype, along with other tex t that normally appears in a T erminal window , are shown in this f ont.
12 Preface About This Book Pa rameters Y ou Must T ype as Shown If you need to type a parameter as shown, it appears following the command in the same font. For example , $ doit -w later -t 12:30 T o use the command in the above example , t ype the entire line as shown.
1 13 1 T yping C ommands How to use T erminal to execute commands , connect to a remote server , and view online information about commands and utilities . T o access a UNIX shell command prompt, you open the T erminal application. In T erminal, you can use the ssh command to log in to other servers.
14 Chapter 1 Typing Commands T o t ype a command: m W ait for a prompt t o appear in the T erminal window , then type the command and press Return. If you get the message command not found , check your spelling. If the error recurs, the program you’ re tr ying to run might not be in your default search path.
Chapter 1 Typing Commands 15 Commands Requiring Root P rivileges Many commands used to manage a server must be executed by the r oot user . If you get a message such as “permission denied,” the command probably require s root privileges. T o issue a single command as the root user , begin the command with sudo .
16 Chapter 1 Typing Commands Sending Commands to a Remot e Ser ver Secure Shell (SSH) lets you send secure, encr ypted commands to a ser ver over the network. Y ou can use the ssh command in T erminal to open a command-line connection to a remote ser ver .
Chapter 1 Typing Commands 17 Updating SSH Key F ingerprints The first time you connec t to a remote ser ver using SSH, the local computer asks if it can add the remote server ’ s “fingerprint” (a securit y key) to a list of k nown remote computers.
18 Chapter 1 Typing Commands Using T elnet Because it isn ’t as secure as SSH, T elnet access isn ’t enabled by default. T o enable T elnet access: $ service telnet start T o disable T elnet access: $ service telnet stop Getting Online Help for Commands Onscreen help is av ailable for most commands and utilities .
Chapter 1 Typing Commands 19 Notes About Specific C ommands and T ools serversetup The serversetup utility is located in /System/Library/S er verSetup.
LL2354.book Page 20 Monday, October 20, 2003 9:47 AM.
2 21 2 Installing Ser ver Software and F inishing Basic S etup Commands you can use to install, set up , and update Mac OS X Ser ver software on local or remote comput ers. Installing Ser ver Software Y ou can use the installer c ommand to install Mac OS X Server or other software on a computer .
22 Chapter 2 Installing Server Software and Finishing Basic Setup T o create a template configur ation file at an y time after initial setup: 1 Open the Ser ver Assistant (in /Applications/Server). 2 In the W elcome pane , choose “Save setup information in a file or directory record” and click Continue .
Chapter 2 Installing Server Software and Finishing Basic Setup 23 <key>DS</key> <dict> <key>DSClientInfo</key> <string>2 - NetInfo client - broadcast dhcp static -192.
24 Chapter 2 Installing Server Software and Finishing Basic Setup <string></string> <key>Type</key> <string>DHCP Configuration</string> </dict> </dict> .
Chapter 2 Installing Server Software and Finishing Basic Setup 25 Naming Configur ation F iles The Ser ver Assistant r ecognizes configuration files with the se names: • MAC-address-of-server.plist • IP-address-of-server.plist • hardware-serial-number-of-server.
26 Chapter 2 Installing Server Software and Finishing Basic Setup Viewing, V alidating , and Setting the Sof tware Serial Number Y ou can use the serversetup command to view or set the server ’ s sof tware serial number or to validat e a ser ver software serial number .
Chapter 2 Installing Server Software and Finishing Basic Setup 27 Moving a Ser ver T r y to place a ser ver in its final network location (subnet) before setting it up f or the first time. If you’ re concerned about unauthorized or premature access, you can set up a firewall to protect the ser ver while you're finalizing its configuration.
LL2354.book Page 28 Monday, October 20, 2003 9:47 AM.
3 29 3 Restar ting or Shutting Down a Serve r Commands y ou can use to shut down or r estart a local or remote server . Restarting a S er ver Y ou can use the reboot or shutdown -r command to restart a ser ver at a specific time. For more inf ormation, see the man pages.
30 Chapter 3 Restarting or Shutting Down a Server Changing a Remote Ser ver ’ s Star tup Disk Y ou can change a remote server ’ s star tup disk using SSH.
4 31 4 Setting G eneral S ystem P ref erenc es Commands y ou can use to set system pr efer ences , usually set using the System P reference s GUI application.
32 Chapter 4 Setting General System Preferences Viewing or Changing the System Da te T o view the current system date: $ sudo systemsetup -getdate or $ serversetup -getDate T o set the current system .
Chapter 4 Setting General System Preferences 33 Viewing or Changing Network Time Ser ver Usage T o see if a network time ser ver is being used: $ sudo systemsetup -getusingnetworktime T o enable or di.
34 Chapter 4 Setting General System Preferences T o set how long the system waits to restart after a power failure: $ sudo systemsetup -setWaitForStartupAfterPowerFailure seconds T o see if the system.
Chapter 4 Setting General System Preferences 35 Sharing Settings Y ou can use the systemsetup command to view or change settings that would other wise be set using the Sharing pane of System Prefer ences. Viewing or Changing Remote Log in Settings Y ou can use SSH to log in to a remote server if remote login is enabled .
36 Chapter 4 Setting General System Preferences Login Settings Disabling the Restart and Shutdown Buttons T o disable or enable the Restar t and Shutdown buttons in the login dialog: $ sudo serversetup -setDisableRestartShutdown (0|1) 0 disables the buttons.
5 37 5 Network P refer ence s Commands y ou can use to change a server ’ s network settings. Network In ter face Information This section describes commands you address to a specific hardware device (for example , en0 ) or por t (for example , Built-in Ethernet ).
38 Chapter 5 Network Preferences Viewing or Changing MTU V alues Y ou can use these commands to change the maximum transmission unit (MTU) size f or a port.
Chapter 5 Network Preferences 39 T o enable or disable a por t configuration: $ sudo networksetup -setnetworkserviceenabled configuration (on|off) Changing C onfiguration P recedenc e T o list the con.
40 Chapter 5 Network Preferences Viewing or Changing IP Addre ss, Subnet Mask, or Router A ddress Y ou can use the serversetup and networksetup commands to change a computer’ s T CP/IP settings. Important: Changing a server ’ s IP address isn ’t as simple as changing the TCP/IP settings.
Chapter 5 Network Preferences 41 Viewing or Changing DNS Ser vers T o view the DNS ser vers for port en0: $ serversetup -getDefaultDNSServer (devicename|"portname") T o change the DNS ser vers for port en0: $ sudo serversetup -setDefaultDNSServer (devicename|"portname ") server1 [server2 ] [ .
42 Chapter 5 Network Preferences Enabling TCP/IP T o enable T CP/IP on a par ticular por t: $ serversetup -EnableTCPIP [(devicename |"portname")] If you don’ t provide an inter face, en0 is assumed.
Chapter 5 Network Preferences 43 T o view the FTP passive setting for a configuration: $ sudo networksetup -getpassiveftp "configuration " T o enable or disable FTP passive mode for a config.
44 Chapter 5 Network Preferences Viewing or Changing SOCKS Fir ewall Pr oxy Settings T o view the SOCKS firewall proxy information for a configur ation: $ sudo networksetup -getsocksfirewallproxy &quo.
Chapter 5 Network Preferences 45 T o change the computer name: $ sudo systemsetup -setcomputername computername or $ sudo networksetup -setcomputername computername or $ sudo serversetup -setComputern.
LL2354.book Page 46 Monday, October 20, 2003 9:47 AM.
6 47 6 W ork ing With Disks and V olumes Commands y ou can use to prepar e , use, and test disks and volume s. Mounting and Unmounting V olumes Y ou can use the mount_afp command to mount an AFP volume . For more inf ormation, typ e man mount_afp to see the man page .
48 Chapter 6 Working With Disks and Volumes Monitoring Disk Space When you need more vigilant monitoring of disk space than the log rolling scripts provide , you can use the diskspacemonitor command-line tool.
Chapter 6 Working With Disks and Volumes 49 Reclaiming Disk Space Using L og Rolling Scripts Three predefined scripts ar e executed a utomatically to reclaim s pace used on your ser ver for log file s.
50 Chapter 6 Working With Disks and Volumes Managing Disk Journaling Checking to See if Journaling is Enabled Y ou can use the mount command to see if journaling is enable on a volume. T o see if journaling is enabled: $ mount Look f or journaled in the attributes in parenthe ses follo wing a volume.
Chapter 6 Working With Disks and Volumes 51 Enabling Journaling When Y ou Erase a Disk Y ou can use the newfs_hfs command to set up and enable journaling when you erase a disk.
52 Chapter 6 Working With Disks and Volumes Imaging and Cloning V olumes U sing ASR Y ou can use Apple Software Restore (ASR) t o copy a disk image onto a volume or prepare existing disk images with checksum inf ormation for faster copie s.
7 53 7 W ork ing With Users and Groups Commands y ou can use to set up and manage users and groups in Mac OS X Ser ver . Creating Ser ver Administrat or Users Y ou can use the serversetup command to create administrator users f or a server . T o create regular users , see “Impor ting Users and Groups” on page 54.
54 Chapter 7 Working With Users and Groups Impor ting Users and Groups Y ou can use the dsimportexport command to import user and group accounts. Note: Despite its name , dsimportexport can’t be used t o expor t user records. The utility is in /Applications/Ser ver/W orkgroup Manager .
Chapter 7 Working With Users and Groups 55 3 Open the T erminal application and t ype the dsimportexport command. T he tool is located in /Applications/Utilities/W orkgroup Manager .app/Con tents/Resour ces. T o include the space in the path name, precede it with a backslash ().
56 Chapter 7 Working With Users and Groups In addition, you can include • UserShell (the default shell) • NFSHomeDirector y (the path to the user’ s home direc tory on the user ’ s computer) .
Chapter 7 Working With Users and Groups 57 An example user account looks like this: jim:Adl47E$:408:20:J. Smith, Jr., M.D.:/Network/Servers/somemac/Homes/jim:/bin/csh Using the StandardGroupRecord Sho.
58 Chapter 7 Working With Users and Groups HomeDirectory: The location of an AFP-based home director y Structured UTF-8 text <home_dir> <url> afp://server/sharepoint </url> <path&.
Chapter 7 Working With Users and Groups 59 MCXFlags: If present, MCXSettings is loaded; if absent, MCXSettings isn’ t loaded; required for a managed user.
60 Chapter 7 Working With Users and Groups Mail Attributes in U ser Records The following table lists the standar d XML data structures for a user mail attribute , par t of a standard user record . MailAttribute field Description Sample values AttributeVersion A required case-insensitive value that must be set to AppleMail 1.
Chapter 7 Working With Users and Groups 61 NotificationState An optional keyword describing whether to notify the user whenever new mail arrives. If provided, it must be set to one of these values: NotificationOff , NotificationLastIP , or NotificationStaticIP .
62 Chapter 7 Working With Users and Groups Checking a S er ver User ’ s Name , UID , or P assw ord Y ou can use the following commands to check the name , UID , or passw ord of a user in the ser ver ’ s local director y . Note: The se tasks only apply to the local directory on the ser ver .
Chapter 7 Working With Users and Groups 63 Creating a User’ s Home Director y Normally , you can create a user's home dir ector y by clicking the Create Home Now button on the Homes pane of Workgroup Manager . Y ou can also create home directory folders using the createhomedir tool.
LL2354.book Page 64 Monday, October 20, 2003 9:47 AM.
8 65 8 W ork ing With F ile Ser vice s Commands y ou can use to cr eate share poin ts and manage AFP , NFS, Windows (SMB), and FTP ser vices in Mac OS X Ser ver .
66 Chapter 8 Working With File Services Creating a Share P oint T o create a share point: $ sharing -a path [-n customname] [-A afpname] [-F ftpname ] [-S smbname ] [-s shareflags] [-g guestflags ] [-.
Chapter 8 Working With File Services 67 Shares the directory named Windo ws Docs on the disk 1 00GB. T he share point is named WinDocs for server management purposes , but SMB users see it as Documents. It ’ s shared using only the SMB protocol with oplocks enabled .
68 Chapter 8 Working With File Services T o list a par ticular setting: $ sudo serveradmin settings afp:setting T o list a group of settings: Y ou can list a group of settings that hav e par t of thei.
Chapter 8 Working With File Services 69 activityLogSize Rollover size (in kilobytes) f or the activity log. Only used if activityLogTime isn’ t specified .
70 Chapter 8 Working With File Services guestAccess Allow guest users access to the server . Default = yes idleDisconnectFlag: adminUsers Enforce idle disconnect for administrative users . Default = yes idleDisconnectFlag: guestUsers Enforce idle disconnect for guest users.
Chapter 8 Working With File Services 71 maxThreads Maximum number of AFP threads. (Must be specified at startup.) Default = 40 noNetworkUsers Indication to client that all users are users on the server . Default = no permissionsModel How permissions are enforced .
72 Chapter 8 Working With File Services List of AFP serveradmin Commands In addition to the standard start , stop , status , and settings commands, you can use serveradmin to issue the following service-specific AFP commands.
Chapter 8 Working With File Services 73 Sending a Message to AFP Users Y ou can use the serveradmin sendMessage command to send a text message to connected AFP users.
74 Chapter 8 Working With File Services Output afp:command = "disconnectUsers" afp:messageSent = "<message>" afp:timeStamp = "< time> " afp:timerID = <disc.
Chapter 8 Working With File Services 75 Listing AFP Ser vice Statistics Y ou can use the serveradmin getHistory command to display a log of periodic samples of the number of connections and the data throughput.
76 Chapter 8 Working With File Services Viewing AFP Log F iles Y ou can use tail or any other file listing tool to view the con tents of the AFP service logs. T o view the latest entries in a log: $ tail log-file Y ou can use the serveradmin getLogPaths command to see where the current AFP error and activity logs are located.
Chapter 8 Working With File Services 77 Changing NFS Ser vice Settings Use the following parameters with the serveradmin command to change settings for the NFS ser vice.
78 Chapter 8 Working With File Services Changing FTP Settings Y ou can change FTP ser vice settings using the serveradmin application. T o change a setting: $ sudo serveradmin settings ftp:setting = value T o change several settings: $ sudo serveradmin settings ftp:setting = value ftp:setting = value ftp:setting = value [.
Chapter 8 Working With File Services 79 List of FTP serveradmin Commands Y ou can use the following commands with the serveradmin application to manage FTP ser vice.
80 Chapter 8 Working With File Services Viewing the FTP T ransfer Log Y ou can use tail or any other file listing tool to view the con tents of the FTP transf er log. T o view the latest entries in the transfer log: $ tail log-file The default location of log-file is /Library/Logs/FTP .
Chapter 8 Working With File Services 81 Viewing SMB Settings T o list all SMB ser vice settings: $ sudo serveradmin settings smb T o list a par ticular setting: $ sudo serveradmin settings smb:setting.
82 Chapter 8 Working With File Services List of SMB Ser vice Settings Use the following parameters with the serveradmin command to change settings for the SMB ser vice.
Chapter 8 Working With File Services 83 local master Whether the server is providing workgroup master browser service. C an be set to: yes | no Corres ponds to the W orkgroup Master Browser checkbox in the Advanced pane of Window ser vice settings in the Ser ver Admin GUI application.
84 Chapter 8 Working With File Services List of SMB serveradmin Commands Y ou can use these commands with the serveradmin tool to manage SMB service. Listing SMB Users Y ou can use the serveradmin getConnectedUsers command to retrieve inf ormation about connected SMB users.
Chapter 8 Working With File Services 85 Output The follo wing array of settings is displa yed for each connected user: smb:usersArray:_array_index:i:disconnectID = <disconnectID> smb:usersArray:.
86 Chapter 8 Working With File Services Listing SMB Ser vice Statistics Y ou can use the serveradmin getHistory command to display a log of periodic samples of the number of SMB connections.
Chapter 8 Working With File Services 87 Viewing SMB Ser vice Logs Y ou can use tail or any other file listing tool to view the con tents of the SMB service logs. T o view the latest entries in a log: $ tail log-file Y ou can use the serveradmin getLogPaths command to see where the current SMB logs are located .
LL2354.book Page 88 Monday, October 20, 2003 9:47 AM.
9 89 9 W ork ing With Prin t Ser vice Commands y ou can use to manage the P rint service in Mac OS X Ser ver . Star ting and Stopping Prin t Ser vice T o star t Print service: $ sudo serveradmin start.
90 Chapter 9 Working With Print Service Changing Prin t Ser vice Settings T o change a setting: $ sudo serveradmin settings print:setting = value T o change several settings: $ sudo serveradmin settings print:setting = value print:setting = value print:setting = value [.
Chapter 9 Working With Print Service 91 Queue Data Arra y Print service settings include an array of value s for each existing print queue . T he array is a set of 1 4 parameters that define values for each queue. <id> is the queue ID , for example, 29D3ECF3-17C8-16E5-A330-84CEC733F249 .
92 Chapter 9 Working With Print Service Here is an example of a queue array parameter block: print:queuesArray:_array_id:29D3ECF3-17C8-16E5-A330- 84CEC733F249:quotasEnforced = no print:queuesArray:_ar.
Chapter 9 Working With Print Service 93 Prin t Ser vice serveradmin Commands Y ou can use the following commands with the serveradmin application to manage Print service. Listing Queues Y ou can use the serveradmin getQueues command to list Prin t ser vice queues.
94 Chapter 9 Working With Print Service Listing Jobs and Job Information Y ou can use the serveradmin getJobs command to list information about print jobs .
Chapter 9 Working With Print Service 95 T o release the job for printing , change its state t o PENDING . T o release the job: $ sudo serveradmin command print:command = setJobState print:status = PEN.
LL2354.book Page 96 Monday, October 20, 2003 9:47 AM.
10 97 10 W ork ing With NetBoot Ser vice Commands y ou can use to manage the NetBoot service in Mac OS X Ser ver . Star ting and Stopping NetBoot Ser vice T o star t NetBoot ser vice: $ sudo serveradm.
98 Chapter 10 Working With NetBoot Service Changing NetBoot Settings Y ou can change NetBoot ser vice settings using the serveradmin command. T o change a setting: $ sudo serveradmin settings netboot:setting = value T o change several settings: $ sudo serveradmin settings netboot:setting = value netboot:setting = value netboot:setting = value [.
Chapter 10 Working With NetBoot Service 99 Storage Recor d Arra y A volume parameter array: F ilters Record Arr ay An array of the follo wing values appears in the NetBoot service settings for each co.
100 Chapter 10 Working With NetBoot Service Image Record Arra y An array of the follo wing values appears in the NetBoot service settings for each image stored on the server: Par ameter ( netboot: ) D.
Chapter 10 Working With NetBoot Service 101 P or t Record Array An array of the follo wing items is included in the NetBoot service settings for each network port on the ser ver set to deliver images:.
LL2354.book Page 102 Monday, October 20, 2003 9:47 AM.
11 103 11 W ork ing With Mail Ser vice Commands y ou can use to manage the Mail service in Mac OS X Ser ver . Star ting and Stopping Mail Ser vice T o star t Mail ser vice: $ sudo serveradmin start ma.
104 Chapter 11 Working With Mail Service Changing Mail Ser vice Settings Y ou can use serveradmin to modify your ser ver ’ s mail configuration. However , if you want to work with the M ail ser vice from the command-line, you ’ll probably find it more straightforward to work directly with the underlying P ostfix and C yrus mail services.
Chapter 11 Working With Mail Service 105 postfix:error_notice_recipient Default = "postmaster" postfix:smtpd_sasl_local_domain Default = no postfix:strict_mime_encoding_domain Default = no p.
106 Chapter 11 Working With Mail Service postfix:line_length_limit Default = 2048 postfix:mailbox_transport Default = 0 postfix:deliver_lock_delay Default = "1s" postfix:best_mx_transport De.
Chapter 11 Working With Mail Service 107 postfix:local_transport Default = "local:$myhostname" postfix:smtpd_helo_restrictions Default = no postfix:fork_delay Default = "1s" postfix:disable_mime_output_conversion Default = no postfix:mynetworks:_array_index:0 Default = "127.
108 Chapter 11 Working With Mail Service postfix:parent_domain_matches_subdomains Default = "debug_peer_list,fast_flu sh_domains,mynetworks,per mit_mx_backup_networks,qm qpd_authorized_clients,re.
Chapter 11 Working With Mail Service 109 postfix:virtual_mailbox_limit Default = 51200000 postfix:smtpd_noop_commands Default = 0 postfix:mail_release_date Default = "20030319" postfix:appen.
110 Chapter 11 Working With Mail Service postfix:queue_service_name Default = "qmgr" postfix:transport_maps Default = "" postfix:smtp_destination_concurrency_limit Default = ".
Chapter 11 Working With Mail Service 111 postfix:showq_service_name Default = "showq" postfix:smtp_pix_workaround_delay_time Default = "10s" postfix:lmtp_sasl_security_options Defa.
112 Chapter 11 Working With Mail Service postfix:proxy_read_maps Default = "$local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_.
Chapter 11 Working With Mail Service 113 postfix:append_dot_mydomain Default = yes postfix:command_expansion_filter Default = "1234567890!@%- _=+:,.
114 Chapter 11 Working With Mail Service imap:umask Default = "077" imap:tls_ca_path Default = "" imap:pop_auth_gssapi Default = yes imap:sasl_minimum_layer Default = 0 imap:tls_ce.
Chapter 11 Working With Mail Service 115 imap:tls_ca_file Default = "" imap:sasl_pwcheck_method Default = "auxprop" imap:postuser Default = "" imap:sieve_maxscripts Defau.
116 Chapter 11 Working With Mail Service Mail serveradmin Commands Y ou can use the following commands with the serveradmin application to manage Mail ser vice.
Chapter 11 Working With Mail Service 117 Listing Mail Ser vice Statistics Y ou can use the serveradmin getHistory command to display a log of periodic samples of the number of user connections and the data throughput. Samples ar e taken once each minute.
118 Chapter 11 Working With Mail Service Viewing the Mail Ser vice L ogs Y ou can use tail or any other file listing tool to view the con tents of the Mail service logs. T o view the latest entries in a log: $ tail log-file Y ou can use the serveradmin getLogPaths command to see where the Mail ser vice logs are located .
Chapter 11 Working With Mail Service 119 Setting Up SSL for Mail Ser vice Mail ser vice requires some configuration to provide Secure Sockets Layer (SSL) connections automatically . The basic steps are as follows: • Generate a Cer tificate Signing Request (CSR) and create a k eychain.
120 Chapter 11 Working With Mail Service 7 Ty p e y when prompted to confirm the algorithm and key size, then press Return. You have selected algorithm RSA, key size (size entered above) bits. OK (y/anything)? 8 Ty p e b when prompted to specify how this certificate will be used, then press Return.
Chapter 11 Working With Mail Service 121 Obtaining an SSL Certificate After generating a CSR and a keychain, you continue configuring Mail ser vice for automatic SSL connections by purchasing an SSL certificate from a certificate authority such as V erisign or Tha wte.
122 Chapter 11 Working With Mail Service Creating a P assphrase F ile T o create a passphrase file, you will use T extEdit, then change the privileges of the file using the T erminal application. This file contains the passphrase you specified when you created the keychain.
12 123 12 W ork ing With W eb T echnologies Commands y ou can use to manage W eb ser vice in Mac OS X Ser ver . Star ting and Stopping W eb Ser vice T o star t Web service: $ sudo serveradmin start we.
124 Chapter 12 Working With Web Technologies T o list a group of settings: Y ou can list a group of settings that hav e par t of their names in common by typing only as much of the name as you want, stopping at a colon (:), and typing an asterisk (*) as a wildcard for the remaining parts of the name.
Chapter 12 Working With Web Technologies 125 T o change several settings: $ sudo serveradmin settings web:setting = value web:setting = value web:setting = value [...] Control-D W eb serveradmin Commands Y ou can use the following commands with the serveradmin application to manage W eb service.
126 Chapter 12 Working With Web Technologies Viewing S er vice Statistics Y ou can use the serveradmin getHistory command to display a log of periodic samples of the number of requests , cache per formance , and data throughput. Samples are taken once each minute.
Chapter 12 Working With Web Technologies 127 Example Script for A dding a W ebsite The following script shows how you can use serveradmin to add a website to the ser ver’ s W eb ser vice configuration. The script uses two files: • addsite The actual script you run.
128 Chapter 12 Working With Web Technologies web:Sites:_array_id:_ipaddr:_port__servername:ErrorDocument:_array_index:0: StatusCode = 404 web:Sites:_array_id:_ipaddr:_port__servername:ErrorDocument:_array_index:0: Document = "/nwesite_notfound.
13 129 13 W ork ing With Network Ser vices Commands y ou can use to manage DHCP , DNS, F irewall, NA T , and VPN ser vice in Mac OS X Ser ver . DHCP Ser vice Star ting and Stopping DHCP Ser vice T o s.
130 Chapter 13 Working With Network Services Changing DHCP Ser vice Settings T o change a setting: $ sudo serveradmin settings dhcp:setting = value T o change several settings: $ sudo serveradmin settings dhcp:setting = value dhcp:setting = value dhcp:setting = value [.
Chapter 13 Working With Network Services 131 DHCP Subnet Settings Array An array of the settings listed in the f ollowing table is included in the DHCP service settings for each subnet you define. Y ou can add a subnet to the DHCP configuration by using serveradmin to add an array of the se settings.
132 Chapter 13 Working With Network Services lease_time_secs Lease time in seconds. Default = "3600" Corresponds to the L ease Time pop-up menu and field in the General pane of the subnet settings in the Ser ver Admin GUI application. net_address The IPv4 network address for the subnet.
Chapter 13 Working With Network Services 133 Adding a DHCP Subnet Y ou may already ha ve a subnet for each port you enabled when you installed and set up the ser ver . Y ou can use the serveradmin settings command to check for subnets that the ser ver set up for you; see “ Viewing DHCP Ser vice S ettings” on page 1 29.
134 Chapter 13 Working With Network Services List of DHCP serveradmin Commands Y ou can use the following command with the serveradmin application to manage DHCP ser vice. Viewing the DHCP Ser vice Log Y ou can use tail or any other file listing tool to view the con tents of the DHCP service log.
Chapter 13 Working With Network Services 135 DNS Ser vice Star ting and Stopping the DNS Ser vice T o star t DNS ser vice: $ sudo serveradmin start dns T o stop DNS ser vice: $ sudo serveradmin stop d.
136 Chapter 13 Working With Network Services T o view the latest entries in a log: $ tail log-file Y ou can use the serveradmin getLogPaths command to see where the current DNS log is located.
Chapter 13 Working With Network Services 137 Checking the Status of Fir ewall Ser vice T o see summar y status of Firewall service: $ sudo serveradmin status ipfilter T o see detailed status of Firewa.
138 Chapter 13 Working With Network Services IPFilter Gr oups With Rules Arr ay An array of the follo wing settings is included in the IPFilt er settings for each defined IP address gr oup.
Chapter 13 Working With Network Services 139 The unmodified ipfw .conf file: # ipfw.conf.default - Installed by Apple, never modified by Server Admin app # # ipfw.conf - The servermgrd process (the back end of Server Admin app) # creates this from ipfw.
140 Chapter 13 Working With Network Services Adding Rules U sing serveradmin If you prefer not to work with the ipfw.conf file, you can use the serveradmin settings command to add firewall rules to your configuration. Note: Be sure to include the special first setting (ending with = create ).
Chapter 13 Working With Network Services 141 IPF ilter Rules Arra y An array of the follo wing settings is included in the IPFilt er settings for each defined firewall rule.
142 Chapter 13 Working With Network Services Viewing Firewall Service Log Y ou can use tail or an y other file listing tool t o view the contents of the ipfilt er service log. T o view the latest entries in the log: $ tail log-file Y ou can use the serveradmin getLogPaths command to see where the current ipfilter service log is located.
Chapter 13 Working With Network Services 143 Changing NA T S er vice Settings T o change a setting: $ sudo serveradmin settings nat:setting = value T o change several settings: $ sudo serveradmin settings nat:setting = value nat:setting = value nat:setting = value [.
144 Chapter 13 Working With Network Services NA T serveradmin Commands Y ou can use the following commands with the serveradmin application to manage NA T ser vice. Viewing the NA T Ser vice Log Y ou can use tail or any other file listing tool to view the con tents of the NA T service log.
Chapter 13 Working With Network Services 145 VPN Ser vice Star ting and Stopping VPN S er vice T o star t VPN ser vice: $ sudo serveradmin start vpn T o stop VPN service: $ sudo serveradmin stop vpn C.
146 Chapter 13 Working With Network Services List of VPN Service Settings Use the following parameters with the serveradmin command to change settings for VPN ser vice. Par ameter ( vpn:Servers: ) Description com.<name>.ppp.l2tp: Server:VerboseLogging Default = 1 com.
Chapter 13 Working With Network Services 147 com.<name>.ppp.l2tp: PPP:DSACLEnabled Default = no com.<name>.ppp.l2tp: PPP:VerboseLogging Default = 1 com.<name>.ppp.l2tp: PPP:AuthenticatorPlugins: _array_index: n Default = "DSAuth" com.
148 Chapter 13 Working With Network Services com.<name>.ppp.pptp: Interface:SubType Default = "PPTP" com.<name>.ppp.pptp: Interface:Type Default = "PPP" com.<name>.ppp.pptp: PPP:CCPProtocols:_array_index: n Default = "MPPE" com.
Chapter 13 Working With Network Services 149 List of VPN serveradmin C ommands Y ou can use the following commands with the serveradmin application to manage VPN ser vice. Viewing the VPN Ser vice Log Y ou can use tail or any other file listing tool to view the con tents of the VPN ser vice log.
150 Chapter 13 Working With Network Services IP F ailover IP failover allows a secondary ser ver to acquire the IP addre ss of a primary ser ver if the primar y server ceases to function. Once the primary ser ver returns to normal operation, the secondar y ser ver relinquishes the IP addr ess.
Chapter 13 Working With Network Services 151 Enabling IP F ailover Y ou enable IP failover by adding command line s to the file /etc/hostconfig on the primar y and the secondar y ser ver . Be sure to en ter these lines exactly as shown with regard to s paces and punctuation marks.
152 Chapter 13 Working With Network Services Configuring IP F ailover Y ou configure failover beha vior using scripts. The scripts must be ex ecutable (for example, shell scripts, Perl, compiled C code, or executable AppleScripts). Y ou place these scripts in /Library/IPF ailover/<IP addre ss> on the secondary ser ver .
Chapter 13 Working With Network Services 153 F or example , your secondary ser ver may perform other services on the netw ork such as running a statistical analysis application and distributed image processing software. A preacquisition script quits the running applications to free up the CPU f or the W eb ser ver .
LL2354.book Page 154 Monday, October 20, 2003 9:47 AM.
14 155 14 W ork ing With Open Director y Commands y ou can use to manage the Open Dir ector y ser vice in Mac OS X Ser ver . This chapter includes de scriptions of general director y tools and tools for w orking with LDAP , NetInf o , and the P assword Ser ver .
156 Chapter 14 Working With Open Directory Registering URLs With Ser vice Location P rotocol (SLP) Y ou can use the slp_reg command to register service URLs using the Ser vice Location Prot ocol (SLP). F or more information, type man slp_reg to see the man page.
Chapter 14 Working With Open Directory 157 LDAP Configuring LDAP The follo wing tools are av ailable for configuring LDAP . F or more inf ormation, see the man page for each tool. slapconfig Y ou can use the slapconfig utility to configure the slapd and slurpd LDAP daemons and related search policies .
158 Chapter 14 Working With Open Directory The -x option force s ldapsearch to use simple authentication inst ead of SASL. Idle Rebinding Options The follo wing two LDAPv3 plugin parameters aren ’t documented in the open directory administration guide.
Chapter 14 Working With Open Directory 159 NetInfo Configuring NetInf o Y ou can use the following command-line utilities to manage the NetInfo direc tory .
160 Chapter 14 Working With Open Directory F or information on the a vailable methods , see the Open Directory administration guide. Kerberos and Single Sign On The following tools are av ailable for setting up your Kerberos and Single Sign-On environmen t.
15 161 15 W ork ing With QuickTime Streaming Ser ver Commands y ou can use to manage Q TSS ser vice in Mac OS X Ser ver . Star ting Q TSS Ser vice Y ou can use the serveradmin command to star t QTSS service, or you can use the quicktimestreamingserver command to specify additional service parameters when you star t the ser vice.
162 Chapter 15 Working With QuickTime Streaming Server Viewing QT SS Settings T o list all QTSS service settings: $ sudo serveradmin settings qtss T o list a par ticular setting: $ sudo serveradmin se.
Chapter 15 Working With QuickTime Streaming Server 163 Q TSS Settings Use the following parameters with the serveradmin command to change settings for the QT SS service. Descriptions of Settings T o see descriptions of most QTSS settings, you can look in the sample settings file /Librar y/Quick TimeStreaming/C onfig/streamingserver .
164 Chapter 15 Working With QuickTime Streaming Server modules:_array_id:QTSSAdminModule: AdministratorGroup Default = "admin " modules:_array_id:QTSSAdminModule: Authenticate Default = yes modules:_array_id:QTSSAdminModule: enable_remote_admin Default = yes modules:_array_id:QTSSAdminModule: IPAccessList Default = "127.
Chapter 15 Working With QuickTime Streaming Server 165 modules:_array_id:QTSSReflectorModule: allow_broadcasts Default = yes modules:_array_id:QTSSReflectorModule: allow_non_sdp_urls Default = yes mod.
166 Chapter 15 Working With QuickTime Streaming Server Q TSS serveradmin C ommands Y ou can use the following commands with the serveradmin application to manage QT SS service. Listing Curr ent C onnections Y ou can use the serveradmin getConnectedUsers command to retrieve inf ormation about QT SS connections.
Chapter 15 Working With QuickTime Streaming Server 167 Viewing QT SS Ser vice Statistics Y ou can use the serveradmin getHistory command to display a log of periodic samples of the number of connections and the data throughput. Samples ar e taken once each minute.
168 Chapter 15 Working With QuickTime Streaming Server Viewing Ser vice L ogs Y ou can use tail or any other file listing tool to view the con tents of the Q TSS ser vice logs. T o view the latest entries in a log: $ tail log-file Y ou can use the serveradmin getLogPaths command to see where the current Q TSS error and activity logs are located.
Chapter 15 Working With QuickTime Streaming Server 169 Pr eparing Older Home Directories f or User Streaming If you want to enable QT SS home director y streaming for home directories created using an earlier version of Mac OS X Ser ver (before version 1 0.
LL2354.book Page 170 Monday, October 20, 2003 9:47 AM.
171 Index Index A AFP (Apple Filing Protocol) canceling user disconnect 74 changing service settings 68 checking service status 67 disconnecting users 73 listing connected users 72 sending user messag.
172 Index F file system, case-sensitive 51 File Transfer Protocol. See FTP fingerprint, RSA 17 Firewall service. See IPFilter service fsck command 50 FTP (File Transfer Protocol) changing service sett.
Index 173 checking service status 142 service settings 143 starting service 142 stopping service 142 viewing service logs 144 viewing service settings 142 NeST tool 159 NetBoot service changing settin.
174 Index S SASL used by ldapsearch 157 scripts adding a website 127 Secure Sockets Layer. See SSL serial number, server software 26 serveradmin utility usage notes 19 server configuration file example 22 naming 25 saving 21 Server Message Block. See SMB serversetup utility usage notes 19 Service Location Protocol.
Index 175 starting service 145 stopping service 145 viewing service logs 149 viewing service settings 145 W web proxy settings 43 Web service changing settings 124 checking status 123 listing sites 12.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté Apple oxs c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du Apple oxs - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation Apple oxs, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le Apple oxs va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le Apple oxs, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du Apple oxs.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le Apple oxs. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei Apple oxs ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
