Apple Training Series: Mac OS X Directory Services v10.5

433 Pages·2008·8.91 MB·English

Apple Training Series
Mac OS X
Directory Services
v10.5
Arek Dreyer
Apple Training Series: Mac OS X Directory Services v10.5
Arek Dreyer
Published by Peachpit Press. For information on Peachpit Press books, contact:
Peachpit Press
1249 Eighth Street
Berkeley, CA 94710
510/524-2178
510/524-2221 (fax)
Find us on the Web at: http://www.peachpit.com
To report errors, please send a note to [email protected]
Peachpit Press is a division of Pearson Education
Copyright © 2009 by Apple Inc. and Peachpit Press
Project Editors: Rebecca Freed, Kim Saccio-Kent
Editor: Linda Laflamme
Production Editor: Danielle Foster
Copyeditor: Kim Saccio-Kent
Tech Editors: Steve Brokaw, John Signa, Joel Rennich
Contributors: Andre LaBranche, David Colville
Proofreader: Emily K. Wolman
Compositor: Danielle Foster
Indexer: Karin Arrigoni
Cover design: Mimi Heft
Notice of Rights
All rights reserved. No part of this book may be reproduced or transmitted in any form by any means, electronic,
mechanical, photocopying, recording, or otherwise, without the prior written permission of the publisher. For infor-
mation on getting permission for reprints and excerpts, contact [email protected].
Notice of Liability
The information in this book is distributed on an “As Is” basis without warranty. While every precaution has been
taken in the preparation of the book, neither the author nor Peachpit shall have any liability to any person or entity
with respect to any loss or damage caused or alleged to be caused directly or indirectly by the instructions contained
in this book or by the computer software and hardware products described in it.
Trademarks
Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks.
Where those designations appear in this book, and Peachpit was aware of a trademark claim, the designations appear as
requested by the owner of the trademark. All other product names and services identified throughout this book are used
in editorial fashion only and for the benefit of such companies with no intention of infringement of the trademark. No
such use, or the use of any trade name, is intended to convey endorsement or other affiliation with this book.
ISBN 13: 978-0-321-50973-4
ISBN 10: 0-321-50973-0
9 8 7 6 5 4 3 2 1
Printed and bound in the United States of America
Acknowledgments
I want to thank my wife and love of my life, Heather Jagman, who supported
me while I spent most of my waking hours working on, or thinking about,
this project.
This book is just part of a bigger project of producing instructional materials
for the four-day Directory Services class. Thanks to Steve Brokaw for put-
ting together the outline for the class so all I had to do was fill in the details.
Thanks to John Signa for stepping in for Brokaw and helping finish the proj-
ect. Thanks to LeRoy Dennison for trusting me to work on the project.
Thanks to Rebecca Freed and Kim Saccio-Kent for managing the project
despite my best efforts to stretch the deadlines out into the infinite future.
Thanks to Linda Laflamme for providing excellent corrections and feedback
that helped me throughout the entire process.
Thanks to Andre LaBranche for writing the exercises in the classroom work-
book; John Welch for composing and editing Keynote slides and instructor
notes; and Tycho Sjögren and David Colville for reviewing materials.
Thanks to Joel Rennich for providing technical review and corrections. Thanks
to Nicole Jacque, Randy Saeks, Michael Dhaliwal, Timo Perfitt, Nigel Kersten,
Ben Griesler, Adam Karneboge, Kevin White, and Paul Suh for their technical
help and encouragement.
Thanks to Schoun Regan for helping me get involved with this project, and for
trying to warn me how consuming it would be.
iii

Contents
Getting Started ..............................ix
Accessing the Local Directory Service ........... 1
Chapter 1
Exploring Directory Services ............................. 2
Creating and Editing Local Users ........................ 17
Creating and Editing Local Groups. . . . . . . . . . . . . . . . . . . . . . . 41
Troubleshooting Directory Services ...................... 52
What You’ve Learned .................................. 56
References ........................................... 57
Review Quiz .......................................... 58
Accessing an Open Directory Server ........... 61
Chapter 2
Configuring Open Directory Clients ..................... 62
Configuring Directory Services Search Paths ............... 72
Troubleshooting Binding Issues ......................... 78
Troubleshooting Login Issues ........................... 88
What You’ve Learned ................................. 105
References .......................................... 106
Review Quiz ......................................... 106
Accessing a Third-Party LDAP Service ........ 109
Chapter 3
Populating an LDAP Server for Network Login ........... 110
Configuring Mac OS X to Log In Using a Standard
LDAP Server ........................................ 122
Troubleshooting Binding Issues ........................ 141
Troubleshooting Login Issues .......................... 144
What You’ve Learned ................................. 150
References .......................................... 151
Review Quiz ......................................... 152
v
vi Contents
Accessing an Active Directory Service ......... 155
Chapter 4
Configuring Mac OS X to Log In Using Active Directory ... 156
Troubleshooting Binding Issues ........................ 175
Troubleshooting Login Issues .......................... 182
What You’ve Learned ................................. 186
References .......................................... 187
Review Quiz ......................................... 188
Configuring Open Directory Server .......... 191
Chapter 5
Configuring Mac OS X Server as an Open
Directory Master ..................................... 192
Configuring Mac OS X Server as a Primary
Domain Controller (PDC) ............................. 215
Managing Data Stored in an Open Directory Master ....... 221
Troubleshooting Issues Promoting Mac OS X Server
to an Open Directory Master ........................... 238
What You’ve Learned ................................. 246
References .......................................... 247
Review Quiz ......................................... 249
Configuring Open Directory Replicas ......... 251
Chapter 6
Configuring Mac OS X Server as an Open
Directory Replica .................................... 252
Troubleshooting Open Directory Replication ............. 267
What You’ve Learned ................................. 279
References .......................................... 280
Review Quiz ......................................... 281
Connecting Mac OS X Server to
Chapter 7
Open Directory ........................... 285
Configuring a Mac OS X Server to Connect to an
Existing Open Directory Master ........................ 286
Configuring a Service to Use an Open Directory
Network User or Group Record ........................ 294
Contents vii
Troubleshooting Binding Issues ........................ 304
Troubleshooting Authentication Issues .................. 312
What You’ve Learned ................................. 335
References .......................................... 337
Review Quiz ......................................... 338
Integrating Mac OS X Server with
Chapter 8
Other Systems ............................ 341
Configuring Mac OS X Server to Supplement a
Third-Party Directory Service .......................... 342
Configuring Mac OS X Server Services to Authenticate
in a Third-Party Kerberos Realm ....................... 368
Configuring a Third-Party Server to Use an Open
Directory KDC ...................................... 375
What You’ve Learned ................................. 378
References .......................................... 379
Review Quiz ......................................... 380
Extending Your Novell eDirectory Schema ..... 383
Appendix A
Confirm That You Need to Extend Your Schema .......... 384
Extend Your eDirectory Schema ........................ 385
Extending Your Active Directory Schema ...... 389
Appendix B
Confirm That You Need to Extend Your Schema .......... 390
Extend Your Active Directory Schema ................... 393
Understanding the Local KDC ............... 397
Appendix C
Index .................................... 403

Getting Started
Mac OS X Directory Services v10.5 is based on the same criteria used for
Apple’s official training course, Mac OS X Directory Services v10.5, an
in-depth exploration of the technical architecture of directory services
for Mac OS X and Mac OS X Server. This reference guide serves as a
self-paced tour of directory services in Mac OS X and Mac OS X Server.
It begins at the basic level of accessing user accounts stored in a stand-
alone Mac OS X computer, moves on to using the directory services of
an Open Directory master or replica hosted by Mac OS X Server, and
then finishes up with third-party directory services, with an emphasis
on Microsoft’s Active Directory.
The book’s primary goal is to prepare system administrators and IT
professionals to run a robust, scalable directory system using Apple’s
Open Directory services. Along the way, you will learn how to enable
users to log in with a network user account and access a network home
folder, whether the user account is defined in a standalone Mac OS X
computer, an Open Directory master or replica hosted by Mac OS X
Server, a standard LDAP server, or Microsoft’s Active Directory. You will
also gain the ability to augment an existing directory service infrastruc-
ture with information to be used by Mac OS X.
ix