Apple Mac OS X Server Version 10.3 or Later Spezifikationen Seite 106
- Seite / 190
- Inhaltsverzeichnis
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
106 Chapter 7 Managing Directory Access
To specify which groups of Active Directory user accounts have administrator
privileges:
1 In Directory Access, click Services.
2 If the lock icon is locked, click it and type the name and password of an administrator.
3 Select Active Directory in the list of services, then click Configure.
4 If the advanced options are hidden, click Show Advanced Options.
5 Select “Allow administration by” and enter the names of groups.
Use commas to separate group names. For security, group names must be qualified by
the domain name they are from (for example, ADS\Domain Admins,IL2\Domain
Admins).
Editing User Accounts and Other Records in Active Directory
You can use Workgroup Manager to make changes to user accounts, group accounts,
computer accounts, and other records in an Active Directory domain. You can also use
Workgroup manager to delete records in an Active Directory domain. For instructions,
see the user management guide.
To create user accounts, group accounts, computer accounts, and other records in an
Active Directory domain, use the Microsoft Active Directory administration tools on a
Windows server administration computer.
Setting Up LDAP Access to Active Directory Domains
Using Directory Access, you can set up an LDAPv3 configuration to access an Active
Directory domain on a Windows server. An LDAPv3 configuration gives you full control
over mapping of Mac OS X record types and attributes to Active Directory object
classes, search bases, and attributes. Mapping of some important Mac OS X record
types and attributes, such as the unique user ID (UID), requires extending the Active
Directory schema.
An LDAPv3 configuration does not include many features of the Active Directory plug-
in listed in Directory Access. These include dynamic generation of unique user ID and
primary group ID; creation of a local Mac OS X home directory; automatic mounting of
the Windows home directory; cached authentication credentials; discovery of all
domains in an Active Directory forest; and support for Active Directory replication and
failover. See “Learning About the Active Directory Plug-in” on page 101 for more
information.
You can use Directory Access to create a configuration that specifies how Mac OS X
accesses a particular LDAPv3 or LDAPv2 directory.
LL2352.Book Page 106 Friday, August 22, 2003 3:12 PM
- Mac OS X Server 1
- Open Directory 1
- Administration 1
- Contents 3
- Contents 7 7
- Glossary 179 8
- Index 185 8
- About This Guide 9
- Using This Guide 10
- Directory Service Concepts 13
- A Historical Perspective 16
- Data Consolidation 17
- Data Distribution 18
- Uses of Directory Data 19
- Inside a Directory Domain 21
- Access to Directory Services 25
- Discovery of Network Services 25
- 26 Chapter 1 26
- Open Directory searches them 27
- Search Policy Levels 27
- Local Directory Search Policy 28
- Two-Level Search Policies 28
- Multilevel Search Policies 29
- Automatic Search Policies 30
- Custom Search Policies 32
- User Authentication With 33
- Open Directory Authentication 35
- Kerberos Authentication 37
- • Realm: MYREALM.EXAMPLE.COM 38
- Single Signon 39
- Shadow and Crypt Passwords 39
- Cracking Readable Passwords 41
- LDAP Bind Authentication 42
- Open Directory Planning 43
- • Restricted physical access 46
- • Limited network access 46
- Open Directory Security 49
- Server Admin 50
- Directory Access 51
- Workgroup Manager 51
- Command-Line Tools 51
- NetInfo Manager 52
- Setting Up Open Directory 53
- Services 53
- Before You Begin 54
- Kerberos 61
- Signon and Kerberos 62
- Setting LDAP Options 63
- Managing User Authentication 71
- Composing a Password 72
- Changing a User’s Password 72
- • Shadow password 76
- • Crypt password 76
- • Open Directory 76
- Authentication 80
- Managing Directory Access 83
- Policies 87
- Accessing LDAP Directories 90
- Computer 105
- Accessing an NIS Domain 107
- Using BSD Configuration Files 108
- About NetInfo Binding 110
- Configuring NetInfo Binding 111
- Maintenance and Problem 115
- Changing a User’s Short Name 117
- LDAPSERVER=-YES 120
- LDAPSSL=-YES 120
- A Delay Occurs During Startup 121
- Mac OS X Directory Data 125
- Mount Object Class 128
- Printer Object Class 128
- Computer Object Class 128
- ComputerList Object Class 129
- Configuration Object Class 129
- Preset Group Object Class 130
- Preset User Object Class 130
- Location Object Class 131
- Active Directory 145
- Attribute Mappings for Users 146
- Mappings for Groups 149
- Mappings for Mounts 150
- Mappings for Computers 151
- Mappings for ComputerLists 153
- Mappings for Config 153
- Mappings for People 154
- Attribute Mappings for People 155
- Mappings for PresetGroups 156
- Mappings for PresetUsers 157
- Mappings for Printers 159
- Mappings for AutoServerSetup 160
- Mappings for Locations 160
- Authentication Methods 173
- APOP Password Validation 174
- CRAM-MD5 Password Validation 174
- DHX Password Validation 174
- MS-CHAPv2 Password Validation 175
- SMB-NT Password Validation 175
- Authentication Manager 177
- Glossary 179
- 180 Glossary 180
- Glossary 181 181
- 182 Glossary 182
- Glossary 183 183
- 186 Index 186
- Index 187 187
- 188 Index 188
- Index 189 189
- 190 Index 190
Verwandte Produkte und Handbücher für Server Apple Mac OS X Server Version 10.3 or Later
Server Apple Mac OS X Server Print Service Administration For Version 10.4 or Later Spezifikationen
(106 Seiten)
(106 Seiten)
Server Apple QuickTime Betriebsanweisung
(63 Seiten)
(63 Seiten)
Server Apple Mac OS X Server Print Service Administration For Version 10.4 or Later Bedienungsanleitung
(64 Seiten)
(64 Seiten)
Server Apple Mac OS X Server Print Service Administration For Version 10.4 or Later Bedienungsanleitung
(232 Seiten)
(232 Seiten)
Server Apple 8550 Spezifikationen
(121 Seiten)
(121 Seiten)
Server Apple Workgroup 9150 Spezifikationen
(130 Seiten)
(130 Seiten)
Server Apple Workgroup 9150 Bedienerhandbuch
(154 Seiten)
(154 Seiten)
Server Apple G5 G5 Betriebsanweisung
(96 Seiten)
(96 Seiten)
Motorola DCT6400 Phase III manuály
Uživatelské manuály a uživatelské příručky pro Digitální videorekordéry (DVR) Motorola DCT6400 Phase III.
Poskytujeme 1 manuály pdf Motorola DCT6400 Phase III ke stažení zdarma podle typů dokumentů: Uživatelský manuál
Kommentare zu diesen Handbüchern