Specifications

4
Contents
36
Contents of Open Directory Password Server Database
37
Kerberos Authentication
37
Kerberized Services
37
Kerberos Principals and Realms
38
Kerberos Authentication Process
39
Single Signon
39
Shadow and Crypt Passwords
40
Encrypting Shadow and Crypt Passwords in User Accounts
41
Cracking Readable Passwords
42
LDAP Bind Authentication
Chapter 4 43 Open Directory Planning
43
General Planning Guidelines
44
Controlling Data Accessibility
45
Simplifying Changes to Data in Directories
45
Estimating Directory and Authentication Requirements
46
Identifying Servers for Hosting Shared Domains
47
Replicating Open Directory Services
47
Replication in a Multi-Building Campus
48
Improving Performance and Redundancy
49
Open Directory Security
50
Tools for Managing Open Directory Services
50
Server Admin
51
Directory Access
51
Workgroup Manager
51
Command-Line Tools
52
NetInfo Manager
Chapter 5 53 Setting Up Open Directory Services
53
Setup Overview
54
Before You Begin
54
Setting Up Open Directory With Server Assistant
55
Managing Open Directory on a Remote Server
55
Setting Up a Standalone Server
56
Setting Up an Open Directory Master
57
Setting Up an Open Directory Replica
59
Setting Up Open Directory Failover
60
Setting Up a Connection to a Directory System
61
Setting Up Single Signon and Kerberos
61
Setting Up an Open Directory Master for Single Signon and Kerberos
62
Delegating Authority to Join an Open Directory Master for Single Signon and
Kerberos
63
Joining a Server to an Open Directory Master for Single Signon and Kerberos
LL2352.Book Page 4 Friday, August 22, 2003 3:12 PM