Specifications

104
Use this chapter to learn how to reset user passwords,
change password types, set password policies, select
authentication methods, and perform other tasks using
Workgroup Manger.
Workgroup Manager provides a centralized method of managing Mac OS X computers
to control access to software and removable media, and to provide a consistent
environment for dierent users. You also use Workgroup Manager to manage user
authentication. For more information on Workgroup Manager, see User Management.
You can manage the user authentication information stored in directory domains.
For task descriptions and instructions, see:
“ Â Composing a Password” on page 105
“ Â Changing a User’s Password” on page 105
“ Â Resetting the Passwords of Multiple Users” on page 106
“ Â Changing a User’s Password Type” on page 107
This includes changing the password type to Open Directory, shadow password,
or crypt password, and enabling single sign-on Kerberos.
“ Â Enabling Single Sign-On Kerberos Authentication for a User” on page 110
“ Â Changing the Global Password Policy” on page 110
“ Â Setting Password Policies for Individual Users” on page 11 2
“ Â Selecting Authentication Methods for Shadow Password Users” on page 11 3
“ Â Selecting Authentication Methods for Open Directory Passwords” on page 114
“ Â Assigning Administrator Rights for Open Directory Authentication” on page 11 5
“ Â Keeping the Primary Administrator’s Passwords in Sync” on page 116
“ Â Enabling LDAP Bind Authentication for a User” on page 116
“ Â Setting Passwords of Exported or Imported Users” on page 11 7
“ Â Migrating Passwords from Mac OS X Server v10.1 or Earlier” on page 117
6
Managing User Authentication
Using Workgroup Manager