You are previewing Apple Pro Training Series: OS X Server 5.0 Essentials - Using and Supporting OS X Server on El Capitan, Third Edition.
O'Reilly logo
Apple Pro Training Series: OS X Server 5.0 Essentials - Using and Supporting OS X Server on El Capitan, Third Edition

Book Description

This is officially-authorized Apple Pro Training Series work is a top-notch primer for anyone who needs to implement, administer, or maintain a network that uses OS X Server on El Capitan. This book provides comprehensive coverage of OS X Server and is part of the Apple Pro Training series—the only Apple-certified books on the market. Designed for help desk specialists, technical coordinators, and entry-level system administrators, this guide teaches you how to install and configure OS X Server on El Capitan to provide network-based services. You’ll also learn to use tools for efficiently managing and deploying OS X Server. In addition to learning key concepts and experiencing hands-on, practical exercises throughout.

This book provides comprehensive coverage of OS X Server and is part of the Apple Pro Training series—the only Apple-certified books on the market. This guide teaches students how to install and configure OS X Server on El Capitan to provide network-based services. They’ll learn to use tools for efficiently managing and deploying OS X Server. You will learn key concepts and experience hands-on, practical exercises.

  • Provides authoritative explanations of OS X Server setup and management on El Capitan

  • Focused lessons take you step by step through practical, real-world exercises

  • Lesson review questions summarize what you learn to prepare you for the Apple certification exam

  • Lesson files available for download

  • Table of Contents

    1. Title Page
    2. Copyright Page
    3. Dedication Page
    4. Acknowledgments
    5. Contents at a Glance
    6. Table of Contents
    7. About This Guide
      1. Learning Methodology
      2. Lesson Structure
      3. Exercise Setup
        1. Mandatory Requirements
        2. Optional Add-Ons
        3. Exercise Order
    8. Configuring and Monitoring OS X Server
      1. Lesson 1. Installing OS X Server
        1. Reference 1.1 Evaluating OS X Server Requirements
          1. Defining the Minimum Hardware Requirements
          2. Verifying System Requirements
          3. Addressing Other Hardware Considerations
        2. Reference 1.2 Preparing to Install OS X Server
          1. Formatting/Partitioning Disks
          2. Configuring Naming and Networking
          3. Changing Names and Addresses
          4. Downloading OS X Server
        3. Reference 1.3 Installing OS X Server
        4. Reference 1.4 Upgrading or Migrating to OS X Server
        5. Reference 1.5 Updating OS X Server
        6. Reference 1.6 Troubleshooting
          1. Inspecting Logs
        7. Exercise 1.1 Configure OS X Before Installing OS X Server on Your Server Computer
          1. Establish Your Student Number
          2. Configure OS X
          3. Confirm Your Computer Is Qualified to Run OS X Server
          4. Change Your Startup Volume Name
          5. Set the Computer Name
          6. Update Software
          7. Download Student Materials
        8. Exercise 1.2 Perform the Initial Installation of OS X Server on Your Server Computer
          1. Install Server
          2. Open Server
          3. Configure Your Server’s Host Name and DNS Records
        9. Exercise 1.3 Configure Your Client Computer
          1. Option 1: Configure OS X on Your Client Computer with Setup Assistant
          2. Option 2: Configure an Existing OS X System for Your Client Computer
          3. Set the Computer Name
          4. Configure Networking
          5. Confirm DNS Records
          6. Update Software
        10. Exercise 1.4 Configure Your Client iOS Device
          1. Optional: Make an iCloud Backup of Your Production iOS Device
          2. Reset Your iOS Device
          3. Set Up Your iOS Device
          4. Configure Your iOS Device to Use Your Server’s DNS
      2. Lesson 2. Providing DNS Records
        1. Reference 2.1 What Is DNS?
        2. Reference 2.2 Evaluating OS X DNS Hosting Requirements
          1. Dealing with Internal and External DNS
        3. Reference 2.3 Configuring DNS Service in OS X Server
        4. Reference 2.4 Troubleshooting DNS Service in OS X Server
        5. Exercise 2.1 Create DNS Zones and Records
          1. Collect DNS Configuration Data
          2. Configure Forwarding Servers
          3. Inspect the Limited Default Zones
          4. Configure DNS Hosts
        6. Exercise 2.2 Restrict Access to the DNS Service
          1. Configure Recursive Lookup Restrictions
          2. Configure DNS Service Permissions
          3. Clean Up DNS Permissions
      3. Lesson 3. Exploring the Server App
        1. Reference 3.1 Allowing Remote Access
        2. Reference 3.2 Using Server Sidebar Elements
          1. Server
          2. AirPort
          3. Accounts
          4. Services
        3. Reference 3.3 Using the Manage Menu
        4. Reference 3.4 Using the Tools Menu
        5. Reference 3.5 Using Help and Server Tutorials
        6. Reference 3.6 Troubleshooting
        7. Exercise 3.1 Turn On Remote Access
          1. Turn On Access for Screen Sharing and Apple Remote Desktop
          2. Confirm You Can Make a Screen-Sharing Connection
        8. Exercise 3.2 Inspect the Service Data Volume
          1. Inspect Options to Move the Service Data to a Different Volume
        9. Exercise 3.3 Explore the Access Tab
          1. Modify Default Access Rules
          2. Modify Custom Access Rules
          3. Restore Default Access
      4. Lesson 4. Configuring SSL Certificates
        1. Reference 4.1 Describe SSL Certificate Basics
          1. Deciding What Kind of Certificate to Use
        2. Reference 4.2 Configuring SSL Certificates
          1. Viewing Your Server’s Default Certificate
          2. Explaining Options for Adding New Certificates
          3. Obtaining a Trusted Certificate
          4. Importing a Signed Certificate
          5. Generating a Self-Signed Certificate
          6. Inspecting a Certificate
          7. Archiving Your Certificate
          8. Renewing Your Certificate
          9. Configuring OS X Server Services to Use a Certificate
          10. Following the Certificate Chain
          11. Configuring Trust
        3. Reference 4.3 Troubleshooting
        4. Exercise 4.1 Examine the Default SSL Certificate
        5. Exercise 4.2 Configure an Open Directory Certificate Authority
          1. Configure Open Directory
          2. Inspect the OD Certificates
        6. Exercise 4.3 Configure Your Client Computer to Trust an SSL Certificate
          1. Turn On the Web Service Temporarily
          2. Visit Your Server’s Website Protected by SSL
          3. Configure Your Client Computer to Trust This SSL Certificate
          4. Confirm That Your Mac Trusts the SSL Certificate
          5. Clean Up
      5. Lesson 5. Using Status and Notifications
        1. Reference 5.1 Using Monitoring and Status Tools
        2. Reference 5.2 Configuring OS X Server Alerts
        3. Reference 5.3 Using Logs in OS X Server
        4. Reference 5.4 Using Stats in OS X Server
        5. Reference 5.5 Viewing Storage Space
        6. Exercise 5.1 Use the Server App to Monitor Your Server
          1. Configure Alerts
          2. Send a Test Alert
          3. Perform Ongoing Monitoring
      6. Lesson 6. Backing Up OS X Server
        1. Reference 6.1 Describing Backup Concepts
          1. Backup Diversity
        2. Reference 6.2 Backing up with Time Machine
        3. Exercise 6.1 Use Time Machine to Back Up OS X Server
          1. Option 1: Use an External Disk as a Time Machine Destination
          2. Option 2: Use an Internal Volume as the Time Machine Destination
          3. Configure Time Machine
        4. Exercise 6.2 Inspect Time Machine Backup Files
          1. Use the Finder to Examine Backup Files
          2. Use the Logs Pane to View a Backup Log
    9. Configuring Accounts
      1. Lesson 7. Configuring Open Directory Services
        1. Reference 7.1 Introducing Directory Service Concepts
          1. What Is Open Directory?
          2. Overview of Open Directory Service Components
        2. Reference 7.2 Configuring Open Directory Services
          1. Configuring OS X Server as an Open Directory Master
          2. Creating an Open Directory Archive
          3. Configuring OS X Server as an Open Directory Replica
          4. Configuring OS X Server to Use Another Open Directory Server
          5. Using Directory Utility Remotely
          6. Binding OS X to Your Open Directory Service
        3. Reference 7.3 Troubleshooting
          1. Accessing Open Directory Log Files
          2. Troubleshooting Directory Services
        4. Exercise 7.1 Back Up and Restore Open Directory
          1. Temporarily Turn Off Time Machine
          2. Confirm Your Open Directory Backup Exists
          3. Remove Your Open Directory Domain
          4. Confirm the Open Directory Domain Is Removed
          5. Restore Your Open Directory
          6. Confirm Your Open Directory Domain Is Restored
          7. Restore Certificate Configuration
          8. Turn On Time Machine
      2. Lesson 8. Managing Users
        1. Reference 8.1 Describing Authentication and Authorization
          1. Using Authentication and Authorization
        2. Reference 8.2 Creating and Administering User and Administrator Server Accounts
          1. Using the Server App to Create User Accounts
          2. Importing Accounts
          3. Configuring User Accounts
          4. Using the Server App to Allow Access to Services for Accounts from Another Directory Node
        3. Reference 8.3 Managing Access to Services
          1. Manually Managing Service Access
          2. Using Groups to Manage Access to Files and Services
        4. Reference 8.4 Configuring Authentication Methods on OS X Server
          1. Disabling a User Account
          2. Setting Global Password Policies
        5. Reference 8.5 Using Single Sign-On and Kerberos
          1. Defining Kerberos Basics
          2. Examining Kerberos Tickets
        6. Reference 8.6 Troubleshooting
          1. Troubleshooting Importing Users
          2. Troubleshooting Accessing Services
          3. Troubleshooting Kerberos
        7. Exercise 8.1 Create and Edit User Accounts
          1. Create a New Folder for Home Folders
          2. Inspect the Group Workgroup
          3. Create a Group
          4. Create a New User
          5. Edit a User
          6. Add a Group to a Group
          7. Create a User Template
          8. Create a User from a Template
        8. Exercise 8.2 Import Accounts
          1. Import User Accounts from a Delimited Text File
          2. Import Users from an Exported Formatted File
          3. Review Import Logs
          4. Import a Group
          5. Verify That Newly Imported Users Can Connect to Your Server’s File Sharing Service
        9. Exercise 8.3 Configure Password Policies
          1. Configure Password Policy
          2. Confirm the Password
          3. Clean Up Password Policy
        10. Exercise 8.4 Manage Service Access
          1. Restrict Access to a Service
          2. Inspect Access to Services
          3. Verify Authorization
    10. Managing Devices with Configuration Profiles
      1. Lesson 9. Configuring OS X Server to Provide Device Management
        1. Reference 9.1 Administering the Profile Manager Service
          1. Profile Manager Web App
          2. User Portal
          3. Device Management
        2. Reference 9.2 Configuring Profile Manager
          1. Terminology
          2. Preparations for Profile Manager
          3. Enabling the Profile Manager Service
          4. Enabling Volume Purchase Program (VPP)
          5. Enabling the Device Enrollment Program (DEP)
        3. Exercise 9.1 Turn On Profile Manager
          1. Turn On Basic Device Management
          2. Connect Profile Manager with Your Device Enrollment Program Account (Optional)
          3. Connect Profile Manager with Your Volume Purchase Program Account (Optional)
          4. Clean Up
      2. Lesson 10. Managing with Profile Manager
        1. Reference 10.1 Introducing Account Management
          1. Levels of Management
          2. Managing Preferences for Users in a Group
          3. Managing Device Group Accounts
          4. Managing Apps
          5. Delivering Profiles
          6. Remotely Locking or Wiping a Device
          7. Which Preferences Can Be Managed?
          8. Layering and Multiple Profiles Considerations
        2. Reference 10.2 Troubleshooting
          1. Viewing Logs
          2. Viewing Profiles
          3. Installing Profiles
          4. Problems Enrolling a Device
          5. Pushing Profiles
          6. Unexpected Profile Behavior
        3. Exercise 10.1 Use Profile Manager for Shared Devices
          1. Prepare Profile Manager for Shared Devices
          2. Clean Up
        4. Exercise 10.2 Use Profile Manager for One-to-One Devices
          1. Prepare Profile Manager for One-to-One Devices
          2. Enroll Using the User Portal
          3. Unenroll from the Profile Manager Service
    11. Sharing Files
      1. Lesson 11. Configuring the File Sharing Service
        1. Reference 11.1 Addressing the Challenges of File Sharing
          1. Defining File-Sharing Protocols
          2. Planning File-Sharing Services
        2. Reference 11.2 Creating Share Points
          1. Exploring File Sharing
          2. Using the Connected Users Pane
        3. Reference 11.3 Troubleshooting File-Sharing Services
        4. Reference 11.4 Providing FTP Service
        5. Exercise 11.1 Explore the File Sharing Service
          1. Stop and Start the File Sharing Service
          2. Create a New Location for Shared Folders
          3. Create a New Shared Folder
          4. Confirm Access to the Folder
          5. Give a Group a Shared Folder
          6. Move a File to the Shared Folder
          7. View and Disconnect Connected Users
          8. Clean Up
        6. Exercise 11.2 Access Files via iOS (Optional)
          1. Turn On iOS Access to the Groups Folder
          2. Get and Install Keynote for iOS
          3. Add OS X Server Account to iOS Device
          4. Edit a File on Your Server
          5. Confirm the Change from OS X
        7. Exercise 11.3 Use Logs to Troubleshoot Problems with File Sharing
          1. Inspect File Sharing Logs
          2. Inspect the AFP Error Log
          3. Inspect the iOS Log
      2. Lesson 12. Defining File Access
        1. Reference 12.1 Configuring Access to Share Points and Folders
          1. Configuring Basic Access with the Server App File Sharing Pane
          2. Configure Access with the Server App Storage Pane
        2. Reference 12.2 Comparing POSIX Permissions to ACL Settings
          1. Explaining POSIX Ownership and Permissions
          2. Defining Access Control Lists
          3. Features Common to POSIX and ACLs
          4. Describing POSIX and ACL Rules of Precedence
        3. Exercise 12.1 Configure Access Control
          1. Configure a Group and a Shared Folder
          2. Confirm Permissions Allow Desired Access
          3. Update Permissions Because of Evolving Needs
          4. Compare Views of Permissions
          5. Clean Up
    12. Implementing Deployment Solutions
      1. Lesson 13. Leveraging NetInstall
        1. Reference 13.1 Managing Computers with NetInstall
          1. Hardware Requirements
          2. Defining NetInstall Image Types
        2. Reference 13.2 Creating Images with System Image Utility
          1. Using NetInstall
          2. Using NetRestore
        3. Reference 13.3 Describing Shadow Files
        4. Reference 13.4 Troubleshooting NetInstall
        5. Exercise 13.1 Prepare the NetInstall Service
        6. Exercise 13.2 Create a Customized NetInstall Image
          1. Download the Trust Profile
          2. Create the Customized NetInstall Image
          3. Save the Workflow
          4. Inspect the Customized NetInstall Image
        7. Exercise 13.3 Start the NetInstall Service
          1. Configure the NetInstall Image Protocol
          2. Specify a Default Image
          3. Inspect the Shared Folders Related to the NetInstall Service
        8. Exercise 13.4 Start Up from a NetInstall Image
        9. Exercise 13.5 Monitor the NetInstall Service
          1. Monitor the NetInstall Service Log
          2. Use the NetInstall Connections Tab
          3. Clean Up
      2. Lesson 14. Caching Content from Apple
        1. Reference 14.1 Describing the Caching Service
        2. Reference 14.2 Configuring and Maintaining the Caching Service
        3. Reference 14.3 Comparing the Software Update and Caching Services
        4. Reference 14.4 Troubleshooting the Caching Service
          1. Deleting Items to Test the Caching Service
          2. Confirming the Basics
          3. Using the Caching Service Logs
          4. Recognizing Performance Bottlenecks
          5. Moving the Caching Service Data Volume
      3. Lesson 15. Implementing the Software Update Service
        1. Reference 15.1 Managing Software Updates
        2. Reference 15.2 Troubleshooting the Software Update Service
    13. Providing Network Services
      1. Lesson 16. Offering Time Machine Network Backup
        1. Reference 16.1 Configuring Time Machine as a Network Service
        2. Exercise 16.1 Configure and Use the Time Machine Service
          1. Configure an OS X Computer to Use the Time Machine Destination
          2. Inspect the Status of the Backup at the Server
          3. Clean Up
      2. Lesson 17. Providing Security via the VPN Service
        1. Reference 17.1 Describing VPNs
        2. Reference 17.2 Configuring the VPN Service with the Server App
          1. Using Advanced Configuration Options
          2. Saving a Configuration Profile
        3. Reference 17.3 Troubleshooting
        4. Exercise 17.1 Configure the VPN Service
          1. Configure and Start the VPN Service
          2. Copy the VPN Profile to Your Client Computer
          3. Install and Use the VPN Profile
          4. Examine Logs
        5. Exercise 17.2 Clean Up
      3. Lesson 18. Configuring DHCP
        1. Reference 18.1 Describing How DHCP Works
          1. Using DHCP Networks
          2. Defining Leases
          3. Comparing Static and Dynamic Address Assignments
          4. Serving Multiple Subnets
        2. Reference 18.2 Configuring DHCP Service
          1. Configuring Your Server’s Network Interface
          2. Editing a Subnet
          3. Starting the DHCP Service
          4. Monitoring and Configuring the DHCP Service
        3. Reference 18.3 Troubleshooting DHCP
          1. Examining the Logs
        4. Exercise 18.1 Configure the DHCP Service (Optional)
          1. Clean Up
      4. Lesson 19. Hosting Websites
        1. Reference 19.1 Identifying the Web Service Software
        2. Reference 19.2 Describing Basic Website Structure
          1. Turning Websites On and Off
          2. Managing Websites
        3. Reference 19.3 Monitoring Web Services
        4. Reference 19.4 Troubleshooting
        5. Exercise 19.1 Turn On Web Services
          1. View Default Website Parameters
          2. Explore the Default Websites
        6. Exercise 19.2 Modify the Default Websites
          1. Customize the Content of the Default Websites
        7. Exercise 19.3 Create and Remove a New Website
          1. Create a New DNS Record
          2. Configure Your Server to Use an Additional IPv4 Address
          3. Issue a New SSL Certificate
          4. Create the New Website
          5. Remove a Website
          6. Remove the Additional IPv4 Address
        8. Exercise 19.4 Restrict Access to a Website
          1. Manage Website Access
        9. Exercise 19.5 Monitor Web Services
          1. View the Server Website Access Log
    14. Using Collaborative Services
      1. Lesson 20. Providing Mail Service
        1. Reference 20.1 Hosting Mail Services
          1. Defining Mail Services
          2. Configuring DNS for Mail
          3. Configuring Access Permissions and Authentication Methods
          4. Relaying Outgoing Mail
          5. Setting Mail Quotas for Users
          6. Turning On Incoming Virus Scanning, Mail Blacklists, Greylists, and Junk Filtering
          7. Mail Domains
        2. Reference 20.2 Troubleshooting Mail Services
        3. Exercise 20.1 Turn On the Mail Service
          1. Start and Configure the Mail Service
          2. Turn On Mail for Domains and Accounts
          3. Confirm Mail Is Running
        4. Exercise 20.2 Create a Configuration Profile for Mail Settings
        5. Exercise 20.3 Send and Receive Mail
          1. Enroll Your Mac as Todd Porter
          2. Enroll Your iOS Device as Sue Wu
          3. Send Mail to a Group as Todd Porter
          4. Reply to the Mail Message as Sue Wu
          5. Confirm the Message Was Scanned for Viruses
          6. Test the Spam Filter
        6. Exercise 20.4 Examine Mail Service Logs
          1. Examine Mail Service Logs
      2. Lesson 21. Configuring the Wiki Service
        1. Reference 21.1 Configuring and Managing a Wiki
        2. Reference 21.2 Troubleshooting the Wiki Service
        3. Exercise 21.1 Turn On the Wiki Service
          1. Use the Server App to Turn On and Configure the Wiki Service
          2. Configure Who Can Create a Wiki
          3. Create a Wiki for a Group
          4. Update Contractors Configuration Profile with a Web Clip for Wiki
        4. Exercise 21.2 Edit a Wiki
          1. Edit Wiki Text and Upload Documents
          2. Upload a Document to the Wiki
          3. Configure Wiki Settings
          4. Add a Blog for the Wiki
          5. View the Wiki and Blog as an Anonymous User
      3. Lesson 22. Implementing the Calendar Service
        1. Reference 22.1 Describing Calendar Service Data Locations
        2. Reference 22.2 Using the Calendar Service
        3. Reference 22.3 Troubleshooting the Calendar Service
        4. Exercise 22.1 Configure and Start the Calendar Service
          1. Inspect Email Invitation Settings
          2. Start the Calendar Service
          3. Create a Location
          4. Create a Resource
        5. Exercise 22.2 Use the Calendar Service
          1. Configure Calendar for OS X
          2. Send an Invitation
          3. Reply to the Invitation
      4. Lesson 23. Managing the Contacts Service
        1. Reference 23.1 Introducing the Contacts Service
        2. Reference 23.2 Troubleshooting the Contacts Service
        3. Exercise 23.1 Configure the Contacts Service
          1. Configure the Contacts Service
        4. Exercise 23.2 Use the Contacts Service
          1. Configure the Contacts App to Access the Contacts Service
          2. Set Up Contacts to Access Your CardDAV on Your Client Computer
          3. Create a New Contact
          4. Confirm Your Contacts Are Accessible on Multiple Devices
          5. Confirm Directory Searches
      5. Lesson 24. Providing the Messages Service
        1. Reference 24.1 Managing the Messages Service
          1. Configuring Messages Service Users
          2. Defining Messages Network Ports
          3. Illustrating Messages Logging
          4. Configuring Messages Federation
        2. Reference 24.2 Troubleshooting the Messages Service
        3. Exercise 24.1 Set Up the Messages Service
          1. Confirm the SSL Certificate
          2. Start the Messages Service
          3. Turn On Messages Service Archiving
        4. Exercise 24.2 Use the Messages Service
          1. Configure Messages on Your Client Computer
          2. Configure the Messages App on Your Server
          3. Send Messages from One Mac to Another Mac
          4. Restrict Messages Service Users
          5. Restrict Messages Federation
          6. View Messages Service and Chat Logs
    15. Using Command Line
      1. Lesson 25. Managing OS X Server with the Command-Line Interface
        1. Reference 25.1 Command-Line Basics
          1. Accessing the Command Line
          2. Working at the Command Line
          3. Learning About Commands
        2. Reference 25.2 Command-Line Navigation
          1. Understanding Navigation Concepts
          2. Using Navigation Commands
          3. pwd
          4. ls
          5. cd
          6. Using Special Characters
          7. Using Tab Completion
          8. Viewing Invisible Items
          9. Navigating to Other Volumes
        3. Reference 25.3 Command-Line File Manipulation
          1. File Examination Commands
          2. Using Wildcard Characters
          3. Using Recursive Commands
          4. Modifying Files and Folders
        4. Reference 25.4 Command-Line Administration
          1. Using su
          2. Using sudo
          3. Switching the Shell with sudo
          4. Managing sudo Access
        5. Reference 25.5 Command-Line Tips and Tricks
        6. Exercise 25.1 Explore the Command-Line Interface
          1. Turn On Remote Access via the Secure Shell
          2. Inspect the Public Key Fingerprint
          3. Open an SSH Connection and Confirm the SSH Fingerprint
          4. Close the SSH Shell and Inspect the Fingerprint File
          5. Use the Password Server Log
        7. Exercise 25.2 Explore the serveradmin Command
          1. Inspect AFP Settings
          2. Inspect AFP Logging Settings
          3. Turn Off the AFP Activity Log
          4. Modify What the AFP Activity Logs
          5. Confirm the AFP Log Displays Only Delete Entries
    16. Index
    17. Where are the Lesson Files?