TweetFollow Us on Twitter

Taking Mac OS X Server for a ride

Volume Number: 20 (2004)
Issue Number: 1
Column Tag: Programming

Taking Mac OS X Server for a ride

by Schoun P. Regan

A brief look inside Panther, Apple's latest update to Mac OS X Server

It all began with Rhapsody. The green box with the gears, or, Mac OS X Server 1.0, as named by Apple. It had NetInfo at the core and support for LDAP. It supported Classic with OS version 8.6 and it introduced Macintosh users to the UNIX filing system.

A few years later, Apple introduced Mac OS X Server 10.1 which added a more refined GUI, enhanced administration tools, and withdrew, rightfully so, a default install of Classic.

Mac OS X Server 10.2, code named Jaguar, brought us Zero Conf in the form of a marketing term called Rendezvous, improved integration of Samba; the open source project responsible for sharing with Windows' computers, network installations, and Open Directory, the name Apple gave to Mac OS X's ability to talk to other directory services, such as LDAP, Active Directory, NetInfo, and NIS.

Enter Panther, Mac OS X Server 10.3. Panther changes the rules. Panther is the most open-sourced, well thought out, scalable software to come out of Apple's campus. But just like a car, reading the features list doesn't really give you a feel for the product. Let's take a look at how Mac OS X Server changes the rules, ups the ante, and stands up to the rest of the pack.

Taking the time to install the server the first time means answering questions about the network information of the server, the services, the directory setup, and a few more options. Reinstalling a server from scratch means that you must locate the piece of paper where you wrote down all the settings. If your office is as cluttered as mine, you'll never find it. Mac OS X Server now includes the ability to save the server settings setup, allowing you to instantly apply those settings to another server upon install. The property list configuration file can be encrypted and stuck on your iPod for safekeeping. This is an enormous advantage when setting up servers. A configuration file can be used to mirror a server setup across the country by emailing the configuration file to the remote server administrator. Better still; Mac OS X Server will search a network for this file when starting up, so starting over from scratch is not so difficult anymore.


Figure 1: Dialog permitting the saving of Mac OS X Server settings.

Once the server is up and running, three tools are utilized for the administration and monitoring of Mac OS X Server; Server Admin, Workgroup Manager, and Server Monitor. Server Admin is a conglomeration of the old Server Settings and Server Status tools, while Workgroup Manager and Server Monitor tasks remain unchanged.

Let's begin with Server Admin, which is used to configure and monitor services provided by Mac OS X Server. If you have a service you wish to add to Mac OS X Server, you now have the ability to manage that service from Server Admin by writing a plug-in for your service. For example, Sybase could write a plug-in for Server Admin, allowing the administration of that Sybase database from the Server Admin tool. Apple has provided a consistent and relatively easy to use interface in Server Admin. So, now any service can be carefully configured and tested. Their settings can saved to a small property list file by simply dragging a small icon off the service's window to the desktop. Again, we see that these small configuration files can be used to configure identical service settings on any other Mac OS X Server, or used to recover existing settings when additional configuration changes go terribly awry.


Figure 2: Small configuration box above the Save button.

Apple included BIND v9.2.2 with this version of Mac OS X Server and the interface for DNS now permits the creation of Zone files and their subsequent records. What is not automatic yet is the default creation of reverse lookup files and records. You must place a check box in the Address record setup indicating you want to have a reverse lookup file created. Since Mac OS X Server relies heavily on DNS, insuring your records are accurate is essential to keeping other dependant services running smoothly.


Figure 3: Adding a DNS Address record.

Two other GUI additions to Server Admin are NAT and VPN. Prior to this version of Mac OS X Server, if you wanted to do Network Address Translation, you needed to pop into the command line and configure your routing table. While the GUI for NAT is not particularly spectacular, you can choose the interface on which it runs, which is really all you need for basic NAT. The VPN piece includes the ability to setup both PPTP and L2TP over IPSec. Anyone with the authorization to tunnel into the network can now do so.


Figure 4: IPsec and PPTP options

Now, it's time to welcome back Open Directory, nenamed called Open Directory2, Apple's marketing name for how Mac OS X integrates with other directory services, such as NIS, NetInfo, LDAP, and Active Directory. Apple has included an Active Directory plug-in that requires no schema modifications on the AD server, a Windows Active Directory administrator's dream. If the Active Directory schema has been changed, the plug-in module will access information within the modified schema, including any MCX settings that may have previously existed. If schema modifications have not been done, the plug-in will automatically generate the required attributes needed. Advanced options include caching user logon information for laptops, multiple domain authentication, and group administration settings. This feature is available on both Mac OS X and Mac OS X Server 10.3.


Figure 5: The Active Directory PAM (plug-in Authentication Module) for Open Directory

Another part of Open Directory's job is to assist the administrator when creating a secondary database on Mac OS X Server. When you first install Mac OS X Server, a local NetInfo database is created. This database is for local users, which are usually server administrators. Creating a Master database creates an LDAP database for networked users. Once a Master database is created, system administrators have the ability to configure various attributes via the built-in GUI, which also adds a new Inspector window (under Workgroup Manager Preferences). Once your Master is configured, add all the users, configure all their options, and then you can replicate that server to any other server, allowing both redundancy and speed of authentication since a network user does not have to cross subnets to authenticate against the Master if the Replica is nearby. So, for example, the Master server could reside in the school IT administrator's office downtown while one or two replicas exist in each school building. This permits students in one school building to authenticate locally, without sending the IP traffic downtown. This could be done in prior versions of Mac OS X Server with NetInfo. It was called cloning a database but there was no documentation for it. Master/Replica configurations rely on DNS and can be configured to update automatically as the Master changes or periodically, based on the Master settings.


Figure 6: Open Directory configuration as a Master.


Figure 7: The Inspector tab of Workgroup Manager

Security rules in Mac OS X Server. Not only does Apple now create a Kerberos KDC every time you create a Master, but they have cleaned up some older, less secure authentication methods. Mac OS X Server can use Kerberos, Password Server, and ShadowHash passwords to authenticate users. It does support crypt passwords if you are importing users from previous NetInfo databases, but you cannot create new users and assign them a crypt password. Password limitations have also been altered to include a 511 byte length for Password Server. Bytes length limitations are used instead of character limitations in case UNICODE fonts are used. Suffice to say that the password can be longer that you ever thought possible for a typical user. Encryption methods supported include DHX, CRAM-MD5 and Digest-MD5, SMB-NT, SMB-LAN Manager, and MS-CHAPv2.

Mac OS X Server does Windows like before, but again, support is improved. In previous versions you've been able to let Windows users authenticate against a Mac OS X Server and share files across platforms, but that's where it ended in the GUI. Now you can add a Windows Primary Domain Controller to the mix. This helps you close the gap on that single sign-on utopia most IT managers yearn for.


Figure 8: Windows PDC Setup window

There are other services worthy of mention, DHCP, NetBoot, Firewall, QuickTime Streaming Server, Mail, and more. But what stands out about the latest incarnation of Mac OS X Server boils down to one word: interoperability. Being able to use open standards, communicate with other systems, and scale well are all hallmarks of what we look for in robust, commercial, full-grade server systems. Apple has hit the mark this time, and has the server world square in its sights.


Schoun P. Regan is CEO of The Mac Trainers, which specializes in Mac OS X training and consulting. He speaks regularly to CEOs and CFOs on how to control IT department spending, the myths surrounding cross-platform integration, and the lunacy of expected lost revenue stemming from a culture bred to tolerate IT staff, and operating system, inadequacies as "normal". He seeks to change self-fulfilling IT departments that breed complacency for their jobs and contempt for the end user, neither of which are conducive to business.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

BusyContacts 1.6.4 - Fast, efficient con...
BusyContacts is a contact manager for OS X that makes creating, finding, and managing contacts faster and more efficient. It brings to contact management the same power, flexibility, and sharing... Read more
Steam 4.0 - Multiplayer and communicatio...
Steam is a digital distribution, digital rights management, multiplayer and communications platform developed by Valve Corporation. It is used to distribute a large number of games and related media... Read more
OmniGraffle Pro 7.19.3 - Create diagrams...
OmniGraffle Pro helps you draw beautiful diagrams, family trees, flow charts, org charts, layouts, and (mathematically speaking) any other directed or non-directed graphs. We've had people use... Read more
OmniGraffle 7.19.3 - Create diagrams, fl...
OmniGraffle helps you draw beautiful diagrams, family trees, flow charts, org charts, layouts, and (mathematically speaking) any other directed or non-directed graphs. We've had people use Graffle to... Read more
Hopper Disassembler 5.3.3- - Binary disa...
Hopper Disassembler is a binary disassembler, decompiler, and debugger for 32- and 64-bit executables. It will let you disassemble any binary you want, and provide you all the information about its... Read more
calibre 5.35.0 - Complete e-book library...
Calibre is a complete e-book library manager. Organize your collection, convert your books to multiple formats, and sync with all of your devices. Let Calibre be your multi-tasking digital librarian... Read more
Sound Studio 4.10.0 - Robust audio recor...
Sound Studio lets you easily record and professionally edit audio on your Mac. Easily rip vinyls and digitize cassette tapes, or record lectures and voice memos. Prepare for live shows with live... Read more
Sparkle Pro 4.0 - Visual website creator...
Sparkle Pro will change your mind if you thought building websites wasn't for you. Sparkle is the intuitive site builder that lets you create sites for your online portfolio, team or band pages, or... Read more
Dropbox 140.4.1951 - Cloud backup and sy...
Dropbox for Mac is a file hosting service that provides cloud storage, file synchronization, personal cloud, and client software. It is a modern workspace that allows you to get to all of your files... Read more
FotoMagico 6.0.5 - Powerful slideshow cr...
FotoMagico lets you create professional slideshows from your photos and music with just a few, simple mouse clicks. It sports a very clean and intuitive yet powerful user interface. High image... Read more

Latest Forum Discussions

See All

‘Horizon Chase’ China Spirit DLC Release...
Following the release of the excellent reveal of the Horizon Chase Senna Forever expansion, the game will be getting a new DLC on mobile platforms today. Today, the Horizon Chase China Spirit DLC pack will release on iOS and Android bringing in 9... | Read more »
‘PUZZLED’ from SNK and Hamster Is Out No...
Following ZED BLADE ACA NeoGeo earlier this month, SNK has brought over another game in the ACA NeoGeo series to both iOS and Android in the form of PUZZLED. SNK and Hamster originally brought the series to mobile with Samurai Shodown IV, Alpha... | Read more »
A House Full of Covid – The TouchArcade...
It’s been a rough week as both of our young children tested positive for Covid, and since recording this early on Friday my wife has tested positive now too. Thankfully the kids seemed to recover fairly quickly and are mostly back to normal, and I... | Read more »
TouchArcade Game of the Week: ‘Krispee S...
Krispee Street is a new hidden object game from Frosty Pop that is based on their popular and almost painfully sweet webcomic Krispee. This is one of the latest titles to be added to the Netflix Games catalog, which means you’ll need to log into... | Read more »
SwitchArcade Round-Up: ‘Escape Lala’, ‘B...
Hello gentle readers, and welcome to the SwitchArcade Round-Up for January 21st, 2022. In today’s article, we’ve got a lot of new releases. A lot. There were eight on the schedule when I went to bed last night. There were twenty-four when I woke up... | Read more »
Beta Testers Needed for Huge Version 2.0...
Ya’ll remember Dungeon Raid, right? The phenomenal matching RPG hybrid that launched on mobile more than a decade ago, but was more or less abandoned by its developer only to die a slow death on the App Store before the 32-bit Appocalypse finally... | Read more »
‘Ark Legends’ Gives Players a Chance to...
It’s Airpods and Amazon gift cards galore as Melting Games opens pre-registration for Ark Legends. The upcoming mobile RPG is giving away tons of in-game goodies such as gold, energy, iron core, hero summon chest and rare iron core to players who... | Read more »
‘Nickelodeon Extreme Tennis’ Out Now on...
Nickelodeon Extreme Tennis () from Old Skull Games and Nickelodeon is this week’s new Apple Arcade release. Nickelodeon Extreme Tennis features characters from old and new Nickelodeon shows including SpongeBob, TMNT, and many more. The tennis game... | Read more »
SwitchArcade Round-Up: ‘RPGolf Legends’,...
Hello gentle readers, and welcome to the SwitchArcade Round-Up for January 20th, 2022. In today’s article, we’ve got a massive amount of new releases to check out. We’ve got summaries of all of them, from heaven to hell. We also have the lists of... | Read more »
‘Zed Blade ACA NEOGEO’ Review – Well, It...
SNK’s NEOGEO platform played host to a great many classics, both famous and under-the-radar. The Metal Slug games. The King of Fighters series. Magician Lord. Shock Troopers. Sengoku 3. NEO Turf Masters. Fatal Fury. Samurai Shodown. Twinkle Star... | Read more »

Price Scanner via MacPrices.net

Verizon’s 2022 iPad promo: $100-$310 off any...
Verizon has cellular-capable iPads on sale for $100-$310 off MSRP when purchased with an Unlimited service plan. Sale price is applied to your account monthly over a 24 or 30 month period, depending... Read more
Sunday Sale: Apple AirPods are on sale for up...
Amazon has Apple AirPods on sale for $10-$100 off MSRP today, depending on the model. All are in stock today with free delivery: – AirPods Max headphones (Blue): $449 $100 off MSRP – AirPods Max... Read more
These Apple resellers are offering 13″ M1 Mac...
Apple resellers are offering discounts on 13″ MacBook Pros with M1 Apple Silicon processors ranging up to $150 off MSRP. Here’s where to get one today: (1): Apple’s 13″ MacBook Pros with M1 Apple... Read more
Amazon lowers prices on select 13″ M1 MacBook...
Amazon has select Apple 13″ M1 MacBook Airs on sale for $150 off MSRP this weekend, starting at only $849. Their prices are the lowest available for new MacBook Airs today. Stock may come and go, so... Read more
Apple has 13″ M1 MacBook Airs back in stock s...
Apple has restocked a full line of 13″ M1 MacBook Airs, Certified Refurbished, starting at only $849 and up to $190 off original MSRP. These are the cheapest M1-powered MacBooks for sale today at... Read more
In stock and on sale! 16″ 10-Core M1 Pro MacB...
Amazon has new 16″ 10-Core/512GB M1 Pro MacBook Pros in stock today and on sale for $50 off MSRP including free shipping. Their prices are the lowest available for new M1 Pro 16″ MacBook Pro from any... Read more
Deal Alert!: 14″ M1 Pro with 10-Core CPU in s...
Amazon has the new 14″ M1 Pro MacBook Pro with a 10-Core CPU and 16-Core GPU in stock today and on sale for $2299.99 including free shipping. Their price is $200 off Apple’s standard MSRP, and it’s... Read more
Apple has 24-inch M1 iMacs (8-Core CPU/8-Core...
Apple has restocked a wide array of 24-inch M1 iMacs with 8-Core CPUs and 8-Core GPUs in their Certified Refurbished store. Models are available starting at only $1269 and range up to $260 off... Read more
Select 24″ M1 iMacs are on sale for $100 off...
Sales of Apple’s new 24″ M1 iMacs have been rare since its introduction, perhaps due to global supply issues. However, B&H is offering a $100 discount on select 24″ iMacs, and they’re in stock... Read more
M1 Mac minis are back in stock today at Apple...
Apple has M1-powered Mac minis available in their Certified Refurbished section starting at only $589 and up to $140 off MSRP. Each mini comes with Apple’s one-year warranty, and shipping is free: –... Read more

Jobs Board

Registered Nurse (RN) Employee Health PSJH -...
…is calling for a Registered Nurse (RN) Employee Health PSJH to our location in Apple Valley, CA.** We are seeking a Registered Nurse (RN) Employee Health PSJH to be Read more
Systems Administrator - Pearson (United State...
…and troubleshoot Windows operating systems (workstation and server), laptop computers, Apple iPads, Chromebooks and printers** + **Administer and troubleshoot all Read more
IT Assistant Level 1- IT Desktop Support Anal...
…providing tier-1 or better IT help desk support in a large Windows and Apple environment * Experience using IT Service Desk Management Software * Knowledge of IT Read more
Human Resources Business Partner PSJH - Provi...
…**is calling a** **Human Resources Business Partner, PSJH** **to our location in Apple Valley, CA.** **Applicants that meet qualifications will receive a text with Read more
Manager Community Health Investment Programs...
…is calling a Manager Community Health Investment Programs PSJH to our location in Apple Valley, CA.** **Qualified candidates will be invited to do a self-paced video Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.