Apple Mac OS X Server Version 10.4 or Later Manual do Utilizador Página 10

  • Descarregar
  • Adicionar aos meus manuais
  • Imprimir
  • Página
    / 12
  • Índice
  • MARCADORES
  • Avaliado. / 5. Com base em avaliações de clientes
Vista de página 9
10
Technology Preview
Windows Compatibility and Mac OS X
Some organizations may also choose to use directory services to automate and
manage the full configuration of Mac OS X user, group, and computer accounts;
user home directories; and managed preference options. Directory services used in
this manner have several advantages: They present a uniform computing experience
to each user, help reduce troubleshooting and technical support costs, and provide
enhanced security.
For centralized management of Mac systems, Apple recommends Mac OS X Server
v10.4, which includes an array of tools that are unmatched for managing Mac clients in
a networked environment. However, Mac clients can also be managed on networks that
rely exclusively on Active Directory. Although some additional configuration is required
to the Active Directory schema to include the records and attributes necessary to man-
age Mac clients, it is easily accomplished, and Mac OS X even includes command-line
tools to assist administrators who prefer to use scripts to automate the process.
Authentication
Many network services and applications require you to authenticate your identity by
entering a user name and password before you can access or use them. For instance,
you need to authenticate to log in to a computer. To reduce the administrative over-
head of managing large numbers of users and applications, each with different authen-
tication credentials, many organizations centralize authentication using a Kerberos
server. One of the most significant benefits of a centralized Kerberos authentication
server is single sign-on. Simply entering your user name and password to log in allows
you to securely access “Kerberized” services on your network.
Mac OS X fully supports network-based authentication using MIT Kerberos and
Microsofts proprietary MSK server (included with Active Directory), and it includes
Kerberized applications such as Login, Mail, AFP, FTP, SMB, and SSH that can be accessed
via single sign-on.
If you use a portable computer, you can still enjoy the benefits of centrally managed
authentication and single sign-on. In this case, Mac OS X can be configured so that your
authentication credentials are securely cached on your Mac. This caching enables you
to continue to use your computer even when it is disconnected from the network—the
perfect solution for using an iBook or PowerBook on a managed network.
Mac OS X also includes support for the legacy Microsoft authentication protocols
NTLMv1 and NTLMv2. These protocols allow authentication to Windows file servers
on networks that do not have a Kerberos-based authentication server.
Network home directories
In conjunction with network authentication and network user accounts, many organiza-
tions implement network-based home directories. Instead of saving the files, applications,
preferences, and other contents of your home directory on your personal computer, the
contents are stored on a file server. This provides two benefits. You can access your
home directory from any computer that’s handy, and your files are typically backed
up when the server is backed up. For administrators, network home directories simplify
adding new computers to the network and reduce administrative overhead. Mac OS X
includes built-in support for network home directories stored on Apple (HFS), UNIX
(NFS), and Windows (SMB) servers. No changes are required to the server to support
the Mac.
Vista de página 9
1 2 ... 5 6 7 8 9 10 11 12

Comentários a estes Manuais

Sem comentários