Apple Mac OS X Server Command-Line Spécifications Page 111
- Page / 295
- Table des matières
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
Chapter 6 Managing User Authentication Using Workgroup Manager 111
Administrator accounts are exempt from password policies. Each user can have an
individual password policy that overrides global password policy settings. For more
information, see “Setting Password Policies for Individual Users” on page 11 2 .
Kerberos and Open Directory Password Server maintain password policies separately.
Mac OS X Server synchronizes the Kerberos password policy rules with Open Directory
Password Server password policy rules.
To change the global password policy of user accounts in the same domain:
1 Open Server Admin and connect to an Open Directory master or replica server.
2 Click the triangle at the left of the server.
The list of services appears.
3 From the expanded Servers list, select Open Directory.
4 Click Settings, then click Policies.
5 Click Passwords, then set the password policy options you want enforced for users
who do not have individual password policies.
If you select an option that requires resetting the password, remember that some
service protocols don’t permit users to change passwords. For example, users can’t
change their passwords when authenticating for IMAP mail service.
6 Click Save.
Replicas of the Open Directory master inherit its global password policy.
From the command line:
To change the global password policy of user accounts: m
$ pwpolicy -a authenticator -setglobalpolicy "option=value..."
For example, to require that an authenticator’s password be a minimum of 12
characters and have no more than 3 failed login attempts, enter the following in a
Terminal window, where authenticator is the authenticator’s name.
$ pwpolicy -a authenticator -setglobalpolicy "minChars=12
maxFailedLoginAttempts=3"
Parameter Description
authenticator The authenticator’s name.
option The password policy option being changed. For
information about available policy options, see
the
pwpolicy man page.
value The value of the password policy.
For information about pwpolicy, see its man page. For the basics of command-line
tool usage, see Introduction to Command-Line Administration.
- Mac OS X Server 1
- Contents 3
- 4 Contents 4
- Contents 5 5
- 6 Contents 6
- Contents 7 7
- 8 Contents 8
- Contents 9 9
- 10 Contents 10
- About This Guide 11
- What’s in This Guide 12
- Using Onscreen Help 13
- Documentation Map 14
- Viewing PDF Guides Onscreen 15
- Printing PDF Guides 15
- Getting Documentation Updates 15
- Directory Services with Open 17
- Directory 17
- A Historical Perspective 19
- Data Distribution 21
- Uses of Directory Data 22
- Access to Directory Services 23
- Inside a Directory Domain 23
- Search Policy Levels 31
- Two-Level Search Policies 32
- Multilevel Search Policies 33
- Automatic Search Policies 34
- Custom Search Policies 36
- Open Directory Authentication 37
- About Shadow Passwords 39
- About Crypt Passwords 39
- Oine Attacks on Passwords 40
- About Password Policies 42
- About Kerberos Authentication 43
- Single Sign-On Experience 45
- Secure Authentication 45
- Moving Beyond Passwords 46
- Multiplatform Authentication 47
- Centralized Authentication 47
- About Kerberized Services 47
- LDAP Bind Authentication 54
- Open Directory Planning and 55
- Management Tools 55
- Replica Sets 61
- Cascading Replication 61
- Replica Services 65
- Open Directory Security 72
- Server Admin 74
- Directory Utility 75
- Workgroup Manager 76
- Command-Line Tools 76
- Setting Up Open Directory 77
- Before You Begin 78
- Turning Open Directory On 79
- OF.KERBEROSREALM 99
- Managing User Authentication 104
- Using Workgroup Manager 104
- Composing a Password 105
- Changing a User’s Password 105
- Passwords 114
- Authentication 115
- Accounts Preferences 119
- Automated Client Conguration 120
- About Active Directory Access 158
- Attribute 167
- Directory Attribute 168
- Directory Forest 170
- Specifying NIS Settings 174
- Maintaining Open Directory 177
- Services 177
- Monitoring Open Directory 180
- Deleting Records 184
- Changing a User’s Short Name 185
- Importing Records of Any Type 186
- Parameter Description 198
- The path to the archive le 198
- Managing OpenLDAP 199
- Idle Rebinding Options 200
- Searching the LDAP Server 201
- Using LDIF Files 204
- Maintaining Kerberos 205
- Managing Principals 206
- Using Directory Service Tools 208
- Command-Line Parameters for 218
- Open Directory 218
- Â slap 219
- Â ldap 219
- Mac OS X Directory Data 220
- Group Auxiliary Object Class 223
- Mount Object Class 224
- Printer Object Class 224
- Computer Object Class 225
- ComputerList Object Class 225
- Conguration Object Class 226
- Preset Computer Object Class 226
- Preset Group Object Class 227
- Preset User Object Class 228
- Location Object Class 229
- Service Object Class 229
- Neighborhood Object Class 229
- ACL Object Class 230
- Resource Object Class 230
- Augment Object Class 230
- Automount Map Object Class 230
- Machine Attributes 241
- Active Directory 253
- Attribute Mappings for Users 254
- Mappings for Groups 258
- Mappings for Mounts 259
- Mappings for Computers 260
- Mappings for ComputerLists 262
- Mappings for Cong 263
- Attribute Mappings for Cong 264
- Mappings for People 265
- Mappings for PresetGroups 267
- Mappings for PresetUsers 268
- Mappings for Printers 270
- Mappings for AutoServerSetup 272
- Mappings for Locations 272
- Â ShadowHash; 276
- Index 287 287
- 288 Index 288
- Index 289 289
- 290 Index 290
- Index 291 291
- 292 Index 292
- Index 293 293
- 294 Index 294
- Index 295 295
Produits connexes et manuels pour Serveurs Apple Mac OS X Server Command-Line
Serveurs Apple QuickTime Spécifications
(28 pages)
(28 pages)
Serveurs Apple Xserve RAID Spécifications
(25 pages)
(25 pages)
Serveurs Apple Darwin Manuel d'utilisateur
(68 pages)
(68 pages)
Melissa 635-073 manuali
Manuali dei proprietari e guide per l'utente per Asciugacapelli Melissa 635-073.
We fornisce 1 manuali pdf Melissa 635-073 per scaricare gratuitamente in base al tipo di documento: Manuale Utente
Commentaires sur ces manuels