Apple Mac OS X Server System Imaging and Software Update Administration For Version 10.4 or Later Manuel d'utilisateur télécharger pdf (Page 12)

R. Saeks July ’06 - 12 -

Desktop Setup

Once the login process is setup, the next area of focus is Desktop Setup and Management. A managed desktop can

exist for each user. The user that logs in belongs to a group, which is determined via the PrimaryGroupID number

in the UNIX profile of the user. That was indicated in the blue box in the section

Directory Setup

. Workgroup

Manager is used to manage preferences for the group and these are retrieved from the apple-group object that

resides in eDirectory. The apple-group is nothing more than an ordinary group that has the apple-group extension

added. In doing so, some additional mac-specific attributes can now be added to the group. Furthermore, the LDAP

lookup of the group is filtered by the mapping values in Directory Access. This is accomplished with the apple-group

filter that was entered in the

Directory Setup

section.

WorkGroup Manger functions with the Managed Client settings. An OS X server is not required to manage groups as

WorkGroup Manager can read and write data from and to the Novell LDAP database. Utilizing the same LDAP

mappings on all the OS X machines tell the Management parts where to store, and where to read settings. This will

be talked about further in the

Managing Preferences

section.

The file system has some items that can’t be managed from the network, such as file permissions. Some of these

can set using loginhooks. When a user successfully logs into the system, this is a script run with root privileges.

The login and logout hooks are set in com.apple.loginwindow.plist in /var/root/Library/Preferences. The values

in the plist can be set by the following UNIX command:

sudo defaults write /var/root/Library/Preferences/com.apple.loginwindow LoginHook /path/to/script

sudo defaults write /var/root/Library/Preferences/com.apple.loginwindow LogoutHook /path/to/script

You will need to make sure the execute bit is set on these scripts. Since this only runs as the root user, you can

further restrict access to this file by setting the execute bit only for this user and additional file permissions.

All of the items pertaining to user management are placed into a directory /Library/Management. Furthermore, a

directory called profiles was created to hold the studentuser profile. This allowed for all items relating to

management to be in one central location and makes them easy to find.

There is a relatively standard desktop for users that they will see the first time they log in to the machine. The idea

was taken from the setup University of Utah has on their machines with UlabMin. A link to their page is contained in

the

Additional Information

section at the end of this paper.

1 2 ... 7 8 9 10 11 12 13 14 15 16 17 ... 26 27

Pas de commentaire

Apple Mac OS X Server System Imaging and Software Update Administration For Version 10.4 or Later Manuel d'utilisateur Page 12