- Challenges of File Sharing
- Different Protocols for Different Clients
- Planning File Services
- Using Apple Filing Protocol
- Configuring Apple File Service
- Monitoring AFP Activity
- Using Windows File Service
- Configuring Windows File Service
- Configuring Access and Starting Windows File Services
- Using NFS Share Point Access
- Configuring NFS
- Using FTP File Service
- Configuring FTP Service
- Network-Mounted Share Points
- Preparing for a Network Home Folder
- Configuring Network Mounts
- Controlling Access to Shared Folders
- Troubleshooting File Services
- What Youve Learned
- Chapter Review
Configuring Network Mounts
Next, you’ll configure the /Users folder to be used for network home folders. This is required for your users to log in to local computers using network accounts maintained on the server.
- If you have turned on Fast User Switching, you may encounter errors, which will prevent users from logging in to the Network account if they switch from a local account. Log off all users on your Mac OS X computer except your initial administrator account.
- On your Mac OS X computer, open and authenticate as ladmin to Server Admin.
- Click the File Sharing button in the toolbar, click the Share Points button, and then click the List button.
- Select the Users folder, and then click Share Point.
- Select the Enable Automount checkbox.
- Confirm that AFP is chosen in the Protocol pop-up menu.
- Select “User home folders and group folders.”
- Click OK.
- Authenticate as diradmin if prompted (password: diradmin).
- Click Save.
Configuring Users to Use Network Home Folders
In addition to configuring the file server to share /Users for network home folders, you must also use the Home pane for a user account in Workgroup Manager to select the Users automount share point as the location for the user’s home folder.
When storing home folders on a server, the disk space can be used up very quickly. You can use the Disk Quota field to limit the disk space a user can consume to store files in the partition where the user’s home folder resides.
For example, when user Sharon places files in user Rafael’s folder, the size of the files affects either Sharon’s or Rafael’s disk quota, depending on the protocol Sharon uses to transfer the files:
- If Sharon uses AFP to drop files in Rafael’s drop box, Rafael’s quota is affected because the owner of the drop box (Rafael) becomes the owner of the files.
- If Sharon uses NFS to copy the files to Rafael’s folder, Sharon is still the owner, and so copying affects Sharon’s quota, not Rafael’s.
You must set each user account record to indicate the server and share point that contains their home folder. To set up a home folder for a network user in Workgroup Manager, follow these steps:
- On your Mac OS X client computer, open Workgroup Manager.
- Connect to your Open Directory server as diradmin (password: diradmin).
- Click the Accounts button in the toolbar, and make sure you are viewing the LDAP Directory, not the Local Directory. Authenticate
This is the shared Open Directory domain you created in Chapter 3. User accounts defined in this domain are accessible from your Mac OS X computer via the network.
- Click the Users button in the toolbar, and select all the users except Directory Administrator. Click the Home tab and select the Users share point for your server.
- Enter a Disk Quota of 200 MB for all of the selected users.
- Click Save.
If you do not click Create Home Now before clicking Save, the home folder is created the next time the user restarts the client computer and logs in remotely. The home folder has the same name as the user’s first short name. When having Windows users connect, the home folder must be created in advance of the Windows users’ initial login.
- Click Student One and verify that the values for Home URL and Full Path look like the values in the figure below:
- On your Mac OS X computer, open the Accounts preference, then click Login Options to verify that you are still bound to your server.
- Click Edit, then click Open Directory Utility.
- In Open Directory, click Search Policy, and verify that your server is still listed in the Authentication path for your Mac OS X computer.
- On your Mac OS X computer, log out as ladmin.
- On your Mac OS X computer at the login window, click Other, then log in as student1 (password: network).
- After you log in, the Finder should display a window with student1’s network home folder.
Option-click the student1 proxy icon in the title bar of the Finder window, and verify that the hierarchy displays that your home folder is located on the network share point rather than directly in the /Users folder on your Mac OS X computer, as shown in the figure below:
- Log out as student1.
Verify that a new home folder is created in the /Users folder on your server computer.
- Log in to your Mac OS X computer as cadmin (password: cadmin).
- Open Server Admin, connect to your server and authenticate as ladmin (password: ladmin).
- Select your server, click File Sharing in the toolbar, click Share Points, then click Browse.
- Select the Users share point, then select the student1 home folder.
- Verify that the name of the new home folder matches the short name of the user (in this case, student1).
Using Automounts for Other Folders
Automounts can be used for more than just user home folders. Presets exist for creating shared Applications and Library folders, but any folder can be set to automount at any path. Next, you’ll create a new folder, copy some applications into it, and share its contents as a network mount.
- On your Mac OS X computer, use Server Admin to create two new folders in /Shared Items. Name the folders Applications and Library.
To create new items in /Shared Items, click File Sharing, click Volumes, then click Browse. Navigate to /Shared Items, and click New Folder to create a new folder.
- Choose Server > Share Server’s Screen.
- Authenticate as ladmin (password: ladmin). Log in on your server as ladmin.
- Copy Calculator and Stickies from /Applications to /Shared Items/Applications. Make a copy, rather than moving the application, by holding down the Option key while dragging.
- Log out as admin on your Mac OS X Server, and quit Screen Sharing.
- On your Mac OS X computer, in Server Admin’s Computers & Services list, select AFP. Click the Settings button, and then click the Access tab to verify that “Enable Guest access” is selected; if it isn’t, select it and click Save. Start the AFP service if it is not already running.
- Click File Sharing in the toolbar, then click the Volumes button followed by the Browse button just below the toolbar. Navigate to /Shared Items/Applications, click the Share button, and then click Save. Do the same for the /Shared Items/Library folder.
- Reselect the Applications folder. In the Share Point pane at the bottom, select the Enable Automount checkbox.
- Choose your LDAP directory in the pop-up menu. If your server were bound to several other servers, you would see them in the Directory pop-up menu. In this case, all you see is the /LDAPv3/127.0.0.1 directory.
- Confirm that AFP is chosen in the Protocol pop-up menu, and select “Shared Applications folder.”
- Click OK. Authenticate to your directory if prompted.
- Click Save.
- Select the /Shared Items/Library folder. In the Share Point pane at the bottom, select the Enable Automount checkbox.
- Select your LDAP directory in the pop-up menu, confirm that AFP is chosen in the Protocol pop-up menu, and select “Shared Library folder.”
- Click OK. Authenticate to your directory if prompted.
The shared Library folder can be used for giving your client computers access to a shared set of fonts, preferences, or other objects that normally reside in your Library folder.
- Click Save in Server Admin to save the changes to the automount.
- On your Mac OS X computer, switch to the Finder.
- Chose Go > Go to Folder and type /Network.
- The Finder opens a new window. In the Network folder, click Applications, and note that the two sample applications you copied
to /Shared Items/Applications are visible here. The applications you place in this folder are available to all Mac OS X and
Mac OS X Server computers bound to the Open Directory service.
Note that these resources are available to local users as well as network users; you should be logged in as Client Administrator, a local user account on your Mac OS X computer, and see the two applications you made available in /Network/Applications.