Apple Mac OS X Server Command-Line Spécifications Page 215
- Page / 295
- Table des matières
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
Chapter 10 Solving Open Directory Problems 215
For information that can help you solve problems, see the KDC log. Also see Â
“Viewing Open Directory Status and Logs” on page 181.
If Kerberos was not running when user records were created, imported, or updated from Â
an earlier Mac OS X version, they might not be enabled for Kerberos authentication:
A record isn’t enabled for Kerberos if its authentication authority attribute lacks Â
the ;Kerberosv5; value. Use the Inspector in Workgroup Manager to see the values
of a user record’s authentication authority attribute. For more information, see
“Showing the Directory Inspector” on page 182.
Enable Kerberos for a user record by changing its password type. First set Â
the password type to Crypt Password, then set it to Open Directory. For more
information, see “Changing the Password Type to Crypt Password” on page 109
and “Changing the Password Type to Open Directory” on page 107.
If users can’t authenticate using single sign-on or Kerberos for services provided by Â
a server that is joined to an Open Directory master’s Kerberos realm, the server’s
computer record might be incorrectly congured in the Open Directory master’s
LDAP directory. The server’s name in the computer group account must be the
server’s fully qualied DNS name, not just the server’s host name. For example, the
name could be server2.example.com but not just server2.
To recongure a server’s computer record for single sign-on Kerberos
authentication:
1 Delete the server from the computer group account in the LDAP directory.
For more information about this and the next step, see User Management.
2 Add the server to the computer group again.
3 Delegate authority again for joining the server to the Open Directory master’s
Kerberos realm.
For more information, see “Delegating Authority to Join an Open Directory Kerberos
Realm” on page 100.
4 Rejoin the server to the Open Directory Kerberos realm.
For more information, see “Joining a Server to a Kerberos Realm” on page 102.
- Mac OS X Server 1
- Contents 3
- 4 Contents 4
- Contents 5 5
- 6 Contents 6
- Contents 7 7
- 8 Contents 8
- Contents 9 9
- 10 Contents 10
- About This Guide 11
- What’s in This Guide 12
- Using Onscreen Help 13
- Documentation Map 14
- Viewing PDF Guides Onscreen 15
- Printing PDF Guides 15
- Getting Documentation Updates 15
- Directory Services with Open 17
- Directory 17
- A Historical Perspective 19
- Data Distribution 21
- Uses of Directory Data 22
- Access to Directory Services 23
- Inside a Directory Domain 23
- Search Policy Levels 31
- Two-Level Search Policies 32
- Multilevel Search Policies 33
- Automatic Search Policies 34
- Custom Search Policies 36
- Open Directory Authentication 37
- About Shadow Passwords 39
- About Crypt Passwords 39
- Oine Attacks on Passwords 40
- About Password Policies 42
- About Kerberos Authentication 43
- Single Sign-On Experience 45
- Secure Authentication 45
- Moving Beyond Passwords 46
- Multiplatform Authentication 47
- Centralized Authentication 47
- About Kerberized Services 47
- LDAP Bind Authentication 54
- Open Directory Planning and 55
- Management Tools 55
- Replica Sets 61
- Cascading Replication 61
- Replica Services 65
- Open Directory Security 72
- Server Admin 74
- Directory Utility 75
- Workgroup Manager 76
- Command-Line Tools 76
- Setting Up Open Directory 77
- Before You Begin 78
- Turning Open Directory On 79
- OF.KERBEROSREALM 99
- Managing User Authentication 104
- Using Workgroup Manager 104
- Composing a Password 105
- Changing a User’s Password 105
- Passwords 114
- Authentication 115
- Accounts Preferences 119
- Automated Client Conguration 120
- About Active Directory Access 158
- Attribute 167
- Directory Attribute 168
- Directory Forest 170
- Specifying NIS Settings 174
- Maintaining Open Directory 177
- Services 177
- Monitoring Open Directory 180
- Deleting Records 184
- Changing a User’s Short Name 185
- Importing Records of Any Type 186
- Parameter Description 198
- The path to the archive le 198
- Managing OpenLDAP 199
- Idle Rebinding Options 200
- Searching the LDAP Server 201
- Using LDIF Files 204
- Maintaining Kerberos 205
- Managing Principals 206
- Using Directory Service Tools 208
- Command-Line Parameters for 218
- Open Directory 218
- Â slap 219
- Â ldap 219
- Mac OS X Directory Data 220
- Group Auxiliary Object Class 223
- Mount Object Class 224
- Printer Object Class 224
- Computer Object Class 225
- ComputerList Object Class 225
- Conguration Object Class 226
- Preset Computer Object Class 226
- Preset Group Object Class 227
- Preset User Object Class 228
- Location Object Class 229
- Service Object Class 229
- Neighborhood Object Class 229
- ACL Object Class 230
- Resource Object Class 230
- Augment Object Class 230
- Automount Map Object Class 230
- Machine Attributes 241
- Active Directory 253
- Attribute Mappings for Users 254
- Mappings for Groups 258
- Mappings for Mounts 259
- Mappings for Computers 260
- Mappings for ComputerLists 262
- Mappings for Cong 263
- Attribute Mappings for Cong 264
- Mappings for People 265
- Mappings for PresetGroups 267
- Mappings for PresetUsers 268
- Mappings for Printers 270
- Mappings for AutoServerSetup 272
- Mappings for Locations 272
- Â ShadowHash; 276
- Index 287 287
- 288 Index 288
- Index 289 289
- 290 Index 290
- Index 291 291
- 292 Index 292
- Index 293 293
- 294 Index 294
- Index 295 295
Produits connexes et manuels pour Serveurs Apple Mac OS X Server Command-Line
Serveurs Apple QuickTime Spécifications
(28 pages)
(28 pages)
Serveurs Apple Xserve RAID Spécifications
(25 pages)
(25 pages)
Serveurs Apple Darwin Manuel d'utilisateur
(68 pages)
(68 pages)
© 2020, manymanuals.fr. Tous droits réservés | 0.034 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels