User manual APPLE TIGER

[. . . ] Mac OS X Server Version 10. 4 Technology Overview August 2006 Technology Overview Mac OS X Server 2 Contents Page 3 Page 5 Page 7 Introduction New in Version 10. 4 Operating System Fundamentals UNIX-Based Foundation 64-Bit Computing Advanced BSD Networking Architecture Robust Security Directory Integration High Availability Integrated Management Tools Server Admin Workgroup Manager Service Deployment and Administration Open Directory Server File and Print Services Mail Services Web Hosting Enterprise Applications Media Streaming iChat Server Software Update Server NetBoot and NetInstall Networking and VPN Distributed Computing Product Details Open Source Projects Additional Resources Page 10 Page 14 Page 29 Page 31 Page 35 Technology Overview Mac OS X Server 3 Introduction Mac OS X Server version 10. 4 Tiger gives you everything you need to manage servers in a mixed-platform environment and to congure, deploy, and manage powerful network services. Featuring the renowned Mac OS X interface, Mac OS X Server streamlines your management tasks with applications and utilities that are robust yet easy to use. Apple's award-winning server software brings people and data together in innovative ways. Whether you want to empower users with instant messaging and blogging, gain greater control over email, reduce the cost and hassle of updating software, or build your own distributed supercomputer, Mac OS X Server v10. 4 has the tools you need. The Universal release of Mac OS X Server runs on both Intel- and PowerPC-based Mac desktop and Xserve systems. The power and simplicity of Mac OS X Server are a reection of Apple's operating system strategy--one that favors open industry standards over proprietary technologies. [. . . ] Such versatility makes Mac OS X Server the ultimate platform for le sharing in mixed-platform workows. File system access controls Mac OS X Server v10. 4 supports both traditional UNIX le permissions and access control lists, o!ering administrators an exceptional level of control over le and folder permissions. Most UNIX- and Linux-based operating systems are constrained by the UNIX le permissions model, also known as Portable Operating System Interface (POSIX) permissions. Standard UNIX le permissions allow you to assign one access privilege to the le's owner, one to a group, and one to everyone on the network. Access by multiple users or multiple groups is not allowed, nor is ownership by a group. The traditional UNIX model also lacks some other important le access features. It supports only three permissions (read, write, and execute) and does not support permission inheritance, which enables new or copied les to automatically inherit the access controls of the parent directory. To provide greater exibility in complex computing environments, Apple has added support for ACLs in Mac OS X Server v10. 4. With le system ACLs, any le object can be assigned multiple users and groups, including groups within groups. Each le object can also be assigned both allow and deny permissions, as well as a granular set of permissions for administrative control, read, write, and delete operations. For added security, Mac OS X Server now supports a le permission inheritance model, ensuring that user permissions are inherited when les are moved to the server and rewritten when les are copied to the server. CUPS print services At the heart of the print services in Mac OS X Server is the Common UNIX Printing System (CUPS), an open source printing architecture that supports standard crossplatform print protocols, including IPP, LPR, SMB/CIFS, and AppleTalk PAP. Using Open Directory and Workgroup Manager, Mac OS X Server provides centralized, directory-based management of printer resources. Printers can be assigned to any combination of users, groups, and computers, and print quotas can be enforced on a per-user and per-queue basis. Flexible queue management and remote monitoring tools allow management of high-volume, cross-platform printing for Mac, Windows, and Linux clients from a single, intuitive interface. Settings and access policies are stored in any LDAP server using Open Directory. Mail Services · · · · · · · · Mail services SMTP (Postx) POP and IMAP (Cyrus) Berkeley DB for indexing SSL/TLS encryption (OpenSSL) Junk mail ltering (SpamAssassin) Virus detection (ClamAV) Mailing lists (Mailman) Webmail (SquirrelMail) Mac OS X Server combines several robust technologies from the open source community to deliver comprehensive, easy-to-use mail server solutions. Full support for Internet mail protocols--Internet Message Access Protocol (IMAP), Post O"ce Protocol (POP), and Simple Mail Transfer Protocol (SMTP)--ensures compatibility with standardsbased mail clients on Mac, Windows, and Linux systems. With support for thousands of users per server and no per-user licensing fees, these high-performance mail services o!er signicant cost savings for small organizations and large enterprises alike. Core mail services Mac OS X Server uses the high-speed Postx server for SMTP messaging and the Cyrus mailbox server for scalable, enterprise-class POP and IMAP mail. Flexible mail storage makes it easy to scale the mail server to meet growing needs, and highperformance Berkeley DB indexing ensures continued responsiveness when clients access their mail, delete messages, and move les on the mail server. To protect your network mail services from unauthorized access or abuse, Mac OS X Server includes built-in SSL/TLS encryption, strong authentication, junk mail and virus ltering, and exible mail quota handling capabilities. Technology Overview Mac OS X Server 18 Postx and Cyrus are easy to congure and manage using the Server Admin utility. Protection against junk mail and viruses To defend your servers and clients against unwanted mail and destructive viruses, Mac OS X Server v10. 4 integrates two popular open source projects: SpamAssassin for adaptive junk mail ltering and ClamAV for virus detection and quarantine. SpamAssassin enables Mac OS X Server to analyze the content of each mail message. Using a wide variety of local and network tests, SpamAssassin assigns a probability rating that the mail is spam. [. . . ] In addition, Apple o!ers consultative phone and email support for advanced server migration and integration issues. Customers can choose from three levels of AppleCare technical support: · Select covers up to 10 incidents with 4-hour response for priority 1 issues (server down), 12 hours a day, 7 days a week. 6 Additional incidents can be purchased as needed. · Preferred covers an unlimited number of incidents with 2-hour response for priority 1 issues, 12 hours a day, 7 days a week, 6 and assigns a technical account manager to the organization. · Alliance covers an unlimited number of incidents at multiple locations with 1-hour response for priority 1 issues, 24 hours a day, 7 days a week. 6 This plan includes an onsite review by an Apple technical support engineer. [. . . ]