Hardware manual

Chapter 2 Inside Mac OS X Server 39
Sharing offers several features that make your shared-file environment more secure and
efficient:
 Access Control Lists (ACLs). ACLs give you a way to craft share point, folder, and file
access permissions with a high degree of precision. A wide range of permissions,
including the right to modify access permissions, the right to create and delete or
change files, the right to read permissions, and others, can be assigned to individual
users and to groups, which can be nested. In addition, you can use inheritance to
propagate permissions through a file system hierarchy.
 Unified file locking. Mac OS X Server unifies file locking across AFP and SMB/CIFS
protocols. This feature lets users working on multiple platforms simultaneously share
files without worrying about file corruption.
 Authentication options. Mac OS X Server’s Kerberos supports AFP and FTP
authentication. For Windows users, the server supports Active Directory’s Kerberos
authentication.
Apple File Service
Apple Filing Protocol (AFP) allows Macintosh client users to connect to the server and
access folders and files as if they were located on the user’s own computer.
AFP offers:
 File sharing support for Macintosh clients over TCP/IP
 Autoreconnect support when a file server connection is interrupted
 Encrypted file sharing (AFP through SSH)
 Automatic creation of user home directories
 Kerberos v5 authentication for Mac OS X version 10.2 and later clients
 Fine-grain access controls for managing client connections and guest access
 Automatic disconnect of idle clients
 IPv6 support for AFP clients and server
 ACLs
AFP also lets you reshare NFS mounts using AFP. This feature provides a way for clients
who aren’t on the local network to access NFS volumes via a secure, authenticated AFP
connection.
Windows Services
Windows file service in Mac OS X Server allows Windows clients to connect to
Mac OS X Server using SMB/CIFS over TCP/IP.
When you enable Windows file service, you can also enable several additional native
Windows services:
 Windows Internet Naming Service (WINS), which allows clients across multiple
subnets to perform name/address resolution