Apple Mac OS X Server Version 10.3 or Later Specifikace Strana 98
- Strana / 190
- Tabulka s obsahem
- KNIHY
Hodnocené. / 5. Na základě hodnocení zákazníků
98 Chapter 7 Managing Directory Access
10 Click Write to Server if you want to store the mappings in the LDAP directory so that it
can supply them automatically to its clients.
You must enter a search base to store the mappings, a distinguished name of an
administrator (for example, cn=admin,dc=example,dc=com), and a password. If you are
writing mappings to an Open Directory LDAP server, the correct search base is
“cn=config, <suffix>” (where <suffix> is the server’s search base suffix, such as
“dc=example,dc=com”).
The LDAP directory supplies its mappings to clients that are configured to use an
automatic search policy. For instructions on configuring the client search policy, see
“Setting Up the Authentication and Contacts Search Policies” on page 87.
The LDAP directory also supplies its mappings to clients that have been configured
manually to get mappings from the server. For instructions on configuring client access
to the server, see “Configuring Access to an LDAP Directory” on page 92 through
“Changing the Connection Settings for an LDAP Directory” on page 95.
Mapping Config Record Attributes for LDAP Directories
If you want to store information for managed Mac OS X users in an LDAP directory,
make sure you map the following attributes of the Config record type: RealName and
DataStamp. If you do not map these attributes, the following error message will be
displayed when you use Workgroup Manager to change a user record that resides in
the LDAP directory:
The attribute with name “dsRecTypeStandard:Config” is not mapped.
You can ignore this message if you are not using Mac OS X client management, which
depends on the Config record type’s RealName and DataStamp attributes for a cache.
Editing RFC 2307 Mapping to Enable Creating Users
Before you can use Workgroup Manager to create users on a non-Apple LDAP directory
server that uses RFC 2307 (UNIX) mappings, you must edit the mapping of the Users
record type. You do this with the Directory Access application.
To enable creating user records in an LDAP directory with RFC 2307 mappings:
1 In Directory Access, click Services.
2 If the lock icon is locked, click it and type the name and password of an administrator.
3 Select LDAPv3 in the list of services, then click Configure.
4 If the list of server configurations is hidden, click Show Options.
5 Select the directory configuration with RFC 2307 mappings, then click Edit.
6 Click Search & Mappings.
7 Select Users in the list on the left.
By default, “Map to __ items in list” is set to Any and the list on the right includes
posixAccount, inetOrgPerson, and shadowAccount.
LL2352.Book Page 98 Friday, August 22, 2003 3:12 PM
- Mac OS X Server 1
- Open Directory 1
- Administration 1
- Contents 3
- Contents 7 7
- Glossary 179 8
- Index 185 8
- About This Guide 9
- Using This Guide 10
- Directory Service Concepts 13
- A Historical Perspective 16
- Data Consolidation 17
- Data Distribution 18
- Uses of Directory Data 19
- Inside a Directory Domain 21
- Access to Directory Services 25
- Discovery of Network Services 25
- 26 Chapter 1 26
- Open Directory searches them 27
- Search Policy Levels 27
- Local Directory Search Policy 28
- Two-Level Search Policies 28
- Multilevel Search Policies 29
- Automatic Search Policies 30
- Custom Search Policies 32
- User Authentication With 33
- Open Directory Authentication 35
- Kerberos Authentication 37
- • Realm: MYREALM.EXAMPLE.COM 38
- Single Signon 39
- Shadow and Crypt Passwords 39
- Cracking Readable Passwords 41
- LDAP Bind Authentication 42
- Open Directory Planning 43
- • Restricted physical access 46
- • Limited network access 46
- Open Directory Security 49
- Server Admin 50
- Directory Access 51
- Workgroup Manager 51
- Command-Line Tools 51
- NetInfo Manager 52
- Setting Up Open Directory 53
- Services 53
- Before You Begin 54
- Kerberos 61
- Signon and Kerberos 62
- Setting LDAP Options 63
- Managing User Authentication 71
- Composing a Password 72
- Changing a User’s Password 72
- • Shadow password 76
- • Crypt password 76
- • Open Directory 76
- Authentication 80
- Managing Directory Access 83
- Policies 87
- Accessing LDAP Directories 90
- Computer 105
- Accessing an NIS Domain 107
- Using BSD Configuration Files 108
- About NetInfo Binding 110
- Configuring NetInfo Binding 111
- Maintenance and Problem 115
- Changing a User’s Short Name 117
- LDAPSERVER=-YES 120
- LDAPSSL=-YES 120
- A Delay Occurs During Startup 121
- Mac OS X Directory Data 125
- Mount Object Class 128
- Printer Object Class 128
- Computer Object Class 128
- ComputerList Object Class 129
- Configuration Object Class 129
- Preset Group Object Class 130
- Preset User Object Class 130
- Location Object Class 131
- Active Directory 145
- Attribute Mappings for Users 146
- Mappings for Groups 149
- Mappings for Mounts 150
- Mappings for Computers 151
- Mappings for ComputerLists 153
- Mappings for Config 153
- Mappings for People 154
- Attribute Mappings for People 155
- Mappings for PresetGroups 156
- Mappings for PresetUsers 157
- Mappings for Printers 159
- Mappings for AutoServerSetup 160
- Mappings for Locations 160
- Authentication Methods 173
- APOP Password Validation 174
- CRAM-MD5 Password Validation 174
- DHX Password Validation 174
- MS-CHAPv2 Password Validation 175
- SMB-NT Password Validation 175
- Authentication Manager 177
- Glossary 179
- 180 Glossary 180
- Glossary 181 181
- 182 Glossary 182
- Glossary 183 183
- 186 Index 186
- Index 187 187
- 188 Index 188
- Index 189 189
- 190 Index 190
Související produkty a manuály pro Servery Apple Mac OS X Server Version 10.3 or Later
Servery Apple Mac OS X Server Print Service Administration For Version 10.4 or Later Specifikace
(106 stránky)
(106 stránky)
Servery Apple QuickTime Uživatelská příručka
(63 stránky)
(63 stránky)
Servery Apple Mac OS X Server Print Service Administration For Version 10.4 or Later Uživatelský manuál
(64 stránky)
(64 stránky)
Servery Apple Workgroup 9120 Uživatelský manuál
(6 stránky)
(6 stránky)
Servery Apple Mac OS X Server Print Service Administration For Version 10.4 or Later Uživatelský manuál
(232 stránky)
(232 stránky)
Servery Apple 8550 Specifikace
(121 stránky)
(121 stránky)
Servery Apple Workgroup 9150 Specifikace
(130 stránky)
(130 stránky)
Servery Apple Xserve Up Mac OS X Server Specifikace
(31 stránky)
(31 stránky)
Servery Apple Workgroup 9150 Manuál s instrukcemi
(154 stránky)
(154 stránky)
Servery Apple G5 G5 Uživatelská příručka
(96 stránky)
(96 stránky)
Servery Apple Mac OS X Server Command-Line Specifikace
(295 stránky)
(295 stránky)
Satel CA-5 P Quick User Guide Handbücher
Bedienungsanleitungen und Benutzerhandbücher für Sicherheit Satel CA-5 P Quick User Guide.
Wir stellen 1 PDF-Handbücher Satel CA-5 P Quick User Guide zum kostenlosen herunterladen nach Dokumenttypen zur Verfügung Bedienungsanleitung
Komentáře k této Příručce