Apple Pro Training Series: OS X Lion Server Essentials Arek Dreyer and Ben Greisler Apple Pro Training Series: OS X Lion Server Essentials Arek Dreyer and Ben Greisler Copyright © 2012 by Peachpit Press Published by Peachpit Press. For information on Peachpit Press books, contact: Peachpit Press 1249 Eighth Street Berkeley, CA 94710 (510) 524-2178 www.peachpit.com To report errors, please send a note to [email protected]. Peachpit Press is a division of Pearson Education. Apple Series Editor: Lisa McClain Production Coordinator: Kim Elmore, Happenstance Type-O-Rama Technical Editor: Andrina Kelly Apple Reviewer: John Signa Apple Project Manager: Judy Lawrence Copy Editor: Jessica Grogan Proofreader: Jessica Grogan Compositor: Chris Gillespie, Happenstance Type-O-Rama Indexer: Jack Lewis Cover Illustration: Kent Oberheu Cover Production: Chris Gillespie, Happenstance Type-O-Rama Notice of Rights All rights reserved. No part of this book may be reproduced or transmitted in any form by any means, electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of the publisher. For information on getting permission for reprints and excerpts, contact [email protected]. Notice of Liability The information in this book is distributed on an “As Is” basis, without warranty. While every precaution has been taken in the preparation of the book, neither the authors nor Peachpit Press shall have any liability to any person or entity with respect to any loss or damage caused or alleged to be caused directly or indirectly by the instructions contained in this book or by the computer software and hardware products described in it. Trademarks Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks. Where those designations appear in this book, and Peachpit was aware of a trademark claim, the designations appear as requested by the owner of the trademark. All other product names and services identified throughout this book are used in editorial fashion only and for the benefit of such companies with no intention of infringement of the trademark. No such use, or the use of any trade name, is intended to convey endorsement or other affiliation with this book. ISBN 13: 978-0-321-77508-5 ISBN 10: 0-321-77508-2 9 8 7 6 5 4 3 2 1 Printed and bound in the United States of America Acknowledgments We extend a big thank you to all the people at Apple for getting Lion and Lion Server out the door, and of course to Steve Jobs, for inspiring us all. Thanks to the Mac sysadmin community for always striving to better serve your users. Thanks to Lisa McClain for gently making sure these materials made it into your hands, and to Jessica Grogan and Kim Elmore for working their editorial and production magic. Thank you, also, to the following people. Without your help, this book would be much less than what it is: David Colville, Gordon Davisson, John DeTroye, Andre LaBranche, Charles Edge, Matthias Fricke, Allen Hancock, Aaron Hix, Eric Hemmeter, Jason Johnson, Adam Karneboge, Andrina Kelly, Ian Kelly, Bob Kite, Judy Lawrence, Chad Lawson, Woody Lidstone, David Long, Tip Lovingood, Duane Maas, Andrew MacKenzie, Jussi-Pekka Mantere, Steve Markwith, Kim Mitchell, Nader Nafissi, Tim Perfitt, Mike Reed, Schoun Regan, Jeremy Robb, John Signa, Chris Silvertooth, David Starr, Kevin White, Simon Wheatley, and Josh Wisenbaker. Arek Dreyer Thanks to my lovely wife, Heather Jagman, for her love and support. Ben Greisler My love and appreciation to my wife, Ronit, and my children, Galee and Noam, for supporting me through this project. Contents at a Glance Getting Started Chapter 1 Installing and Configuring OS X Lion Server Chapter 2 Authenticating and Authorizing Accounts Chapter 3 Using Open Directory Chapter 4 Managing Accounts Chapter 5 Implementing Deployment Solutions Chapter 6 Providing File Services Chapter 7 Managing Web Services Chapter 8 Using Collaborative Services Index Table of Contents Getting Started Chapter 1 Installing and Configuring OS X Lion Server Evaluating Lion Server Requirements Installing Lion Server Configuring an Administrator Computer Initial Lion Server Configuration Using Tools for Monitoring Configuring SSL Certificates Troubleshooting What You’ve Learned References Chapter Review Chapter 2 Authenticating and Authorizing Accounts Managing Access to Services Creating and Administering User and Administrator Server Accounts Controlling Access With Server Access Control Lists (SACLs) Configuring Virtual Private Network (VPN) Service Troubleshooting What You’ve Learned References Chapter Review Chapter 3 Using Open Directory Introducing Directory Services Concepts What Is Open Directory? Overview of Open Directory Service Components Preparing to Configure Open Directory Services Configuring Open Directory Services