Getting Started Guide Cloud Server powered by Mac OS X Getting Started Guide Page 1
Getting Started Guide: Cloud Server powered by Mac OS X Version 1.0 (02.16.10) Copyright 2010 GoDaddy.com Software, Inc. All rights reserved. Distribution of this work or derivative of this work is prohibited unless prior written permission is obtained from the copyright holder. Trademarks used in this book Linux is a registered trademark of Linus Torvalds. SSH and Secure Shell are trademarks of SSH Communications Security, Inc. Mac, Mac OS, ichat, ical, and the Apple logo are registered trademarks of Apple Computer, Inc. UNIX is a registered trademark of The Open Group. Windows is a registered trademark of Microsoft Corporation in the United States and/or other countries. All other trademarks and copyrights are the property of their respective owners. Getting Started Guide Page 2
Table of Contents Introduction 6 SECURITY INFORMATION! 7 REPROVISIONING YOUR SERVER! 7 GETTING HELP! 8 OTHER RESOURCES! 10 Setting Up Your Server 11 CHOOSING A HOST NAME AND PASSWORD! 11 LOGGING IN TO YOUR MANAGER FOR THE FIRST TIME! 13 Connecting to Your Server Powered by Mac OS X 14 CONNECTING USING VNC! 15 CONNECTING TO YOUR SERVER USING SSH! 16 GAINING ROOT ACCESS ON YOUR SERVER! 18 Getting Started Guide Page 3
CONNECTING USING SERVER ADMIN! 20 Understanding Your Server's Administration Tools 21 Setting Up DNS for Your Domains 22 CHANGING YOUR A RECORD! 23 CHANGING YOUR MX RECORD! 24 Installing an SSL Certificate on Your Server 26 INSTALLING YOUR SSL CERTIFICATE! 26 ASSIGNING THE CERTIFICATE TO SERVICES! 29 Managing Services (Email, Web, ichat, and More) 30 USING PREFERENCES TO MANAGE SERVICES! 30 USING SERVER ADMIN TO MANAGE SERVICES! 31 MODIFYING FIREWALL SETTINGS FOR SERVICES! 32 Setting Up Users and Workgroups 33 Getting Started Guide Page 4
CREATING AND DELETING USERS! 33 WORKING WITH WORKGROUP MANAGER! 36 ASSIGNING PERMISSIONS TO USERS! 37 CREATING AND DELETING WORKGROUPS! 38 Setting Up the Mail Service 40 STARTING THE MAIL SERVICE! 40 MODIFYING A USERʼS MAILBOX SIZE! 42 CREATING OR MODIFYING USER EMAIL ADDRESSES! 43 Managing Your Website and Other Web Services 45 SETTING UP A WEBSITE! 45 SETTING UP WIKIS, BLOGS, AND OTHER WEB SERVICES! 47 Setting Up File Sharing 49 STARTING THE AFP AND FILE SHARING SERVICES! 49 Getting Started Guide Page 5
Introduction Congratulations! You're a server administrator. Not only that you're a network administrator. Using the Cloud Server powered by Mac OS X, you can set up a network for your business that includes instant messaging with ichat, file sharing, group calendars, wikis, and more. In addition to connecting users, you can also power your website and your email using your server. It's like having an IT department in a box. In this guide, you'll learn how to: Set up the server Connect to the server Set up DNS for your domain names Install an SSL certificate Manage services Set up users and groups Manage your email and website Set up file sharing Getting Started Guide Page 6
SECURITY INFORMATION Compared to shared hosting, administering a server offers more power and more versatility. You can run and install virtually anything on your server. However, with this added control comes added responsibility: You are responsible for the security, backup, and maintenance of your server. Keep your administrator password secure. Anyone with administrative access to your server can manipulate its software and content. REPROVISIONING YOUR SERVER If, at any time, you want to revert to a clean setup on your server, you can reprovision it. Reprovisioning erases all of the content on your server s hard drive. Your server resets to its state at the time you first purchased it. You can reprovision your server by using the Hosting Control Center. Getting Started Guide Page 7
To Reprovision Your Server 1. Log in to your account. 2. Under the My Products section, select Servers. 3. Click Launch Manager next to the server you want to reprovision. The Hosting Control Center displays. 4. Under the Support section, click Reprovision Server. The Reprovision Server page displays. 5. If you want to, enter a new host name and user name. These values default to the current host name and user name for the account. 6. Enter and confirm a new password, and then click Continue. You receive a confirmation notice once your server is reprovisioned and ready to go. Typically, this takes less than five hours. GETTING HELP After you set up your server, you can easily get help by submitting a trouble ticket or initiating a chat session using the Hosting Control Center. Alternatively, you can contact Customer Support directly. Getting Started Guide Page 8
To Open a Trouble Ticket 1. Log in to your account. 2. Under the My Products section, select Servers. 3. Click Launch Manager next to the server account that you want help with. 4. In the Hosting Control Center, under Support, click Trouble Tickets. 5. Enter your contact information, including an email address and phone number. 6. Under Trouble Ticket Description, enter a summary and a detailed description of your issue. 7. Click Continue. 8. Review the information, and click Submit. To Open a Chat Session 1. Under the My Products section, select Servers. 2. Click Launch Manager next to the server account that you want help with. 3. In the Hosting Control Center, click Chat Now! Getting Started Guide Page 9
OTHER RESOURCES Apple has a robust resources page with separate user guides for all the services available for your server. Our user guide covers the basics to get you up and running for the nitty-gritty, check out Apple's resources page: http://www.apple.com/server/macosx/resources/documentation.html Getting Started Guide Page 10
Setting Up Your Server Once you have purchased your server and we ve worked on the initial configuration, you need to log in to your Hosting Control Center to finish setting things up. The Hosting Control Center is an easy place for you to set up your server s host name, user ID, and password. You can also use it to schedule server maintenance, reprovision your server, view bandwidth stats, request additional IPs, and submit trouble tickets. CHOOSING A HOST NAME AND PASSWORD When setting up your server, you create a host name and password. Your user ID is automatically admin. This is the user ID and password that you will use to connect to your server in the future. It s a good idea to have this information ready when you log in for the first time. Choosing a Host Name The server s host name (also known as your account name) is a unique name for your server. If you have multiple servers, the host names help you differentiate among them. A host name can be anything, as long as it: Contains 3-15 characters Starts with a letter Only includes letters, numbers, periods, or a hyphen Getting Started Guide Page 11
Does not start or end with a period or hyphen Does not include any spaces or any other special characters CAUTION! Due to security reasons, you cannot log in directly to your server as root. To learn more about root access, see Gaining Root Access on Your Servers. Choosing a Password for Your Server Your server s password, along with your user ID, is used to connect to or gain root access to your server. Keep in mind that Assisted Service Plan servers do not allow root access. To ensure your server is kept secure, your password must: Contain 7-14 characters Include lowercase letters, uppercase letters, and numbers Not begin with a number or symbol Not contain backslashes, colons, single quotes, double quotes, spaces, ampersands (&), or the caret symbol (^) Not contain your user name Getting Started Guide Page 12
LOGGING IN TO YOUR MANAGER FOR THE FIRST TIME Once you ve selected a host name, user ID, and password for your server, you can log in to the Hosting Control Center and finish setting up. To Finish Setting Up Your Server Account 1. Log in to your account. 2. Under the My Products section, select Servers. 3. Next to the server account you want to set up, click Set up Account. 4. On the Account Setup page, enter the host name for your server account.! 5. Enter the user name and password for your account. 6. Click Continue. 7. Confirm your settings and click Submit. Once you click Submit, your server should be ready to use in approximately 12 hours. You receive an email message once it is ready. Getting Started Guide Page 13
Connecting to Your Server Powered by Mac OS X As the server administrator, you can connect directly to your server to perform management functions such as: Creating new users Creating new groups Starting and stopping services (Mail, ichat, your website) Performing advanced server management How you connect to the server depends on whether your computer is running Windows, OS X, or Linux. All operating systems support connecting with SSH or VNC. If you are running OS X, you can use Apple Remote Desktop (which requires a software license from Apple), or Server Admin (which is free). When you connect to your server, the default user name is admin. Getting Started Guide Page 14
CONNECTING USING VNC You can manage your server by using a VNC client, which lets you see the server's screen as though you were sitting at its console, similar to remote desktop. You can download a VNC client, such as TightVNC (http://tightvnc.com) or Chicken of the VNC (http://sourceforge.net/ projects/cotvnc), from the Internet. To Connect to Your Server Using VNC 1. Start your VNC client. 2. Enter your server IP and admin password when prompted. 3. When you connect to the server, type admin for the user name, and then enter the password you created when you set up your server. Getting Started Guide Page 15
CONNECTING TO YOUR SERVER USING SSH Typically, only advanced users who are familiar with Linux and shell commands connect to their servers using SSH. You should be able to take care of most of your server management tasks using Server Admin. If you are a more experienced user and are comfortable using a command-line interface, you can use the Secure Shell, or SSH, protocol to connect to your server. First, download and install an SSH client on your computer. We recommend PuTTY (http://www.putty.nl) for Windows, Mac SSH (http://www.macssh.com) for Mac, and OpenSSH (http://openssh.com) for Linux or UNIX. Once you have installed an SSH client, log in to your server using your IP address, user name, and password. In this example, we use PuTTY. Remember, before you log in to your server, make sure you have your IP address ready. You ll need to use your IP address to access your server. You can find the IP address to your server in the Hosting Control Center. Getting Started Guide Page 16
To Connect To Your Server Using SSH (PuTTY) 1. Open your SSH client (PuTTY). 2. In the Host Name (or IP dddress) field, type the IP address for your server. 3. Click Open. This is the basic SSH command-line interface. 4. Log in to your server with the user ID and password you created when you set up your account. 5. Once you log in, you can execute shell (Bash) commands to navigate and manage your server. Getting Started Guide Page 17
GAINING ROOT ACCESS ON YOUR SERVER On our dedicated Linux servers, root is the administrative user to access and edit all of the files on your server (this includes system-critical files). You can also use root to install and uninstall programs on your server. CAUTION! Using root on your server can be dangerous. When you work on your server as root, you could potentially destroy important files and delete programs by accident. Typically, you should only use root to make one or two changes to your system and then switch back to your normal user account. You cannot log in to your server remotely using root. If you need root access on your server, use the su - root command once you have logged in with your user ID. The su (short for substitute user) command makes it possible to become the root user, temporarily, while you are logged in with your normal user ID. Getting Started Guide Page 18
To use su to log in as root, type: su - By default, your root password is the same as the password you use with your normal user ID. CAUTION! When you are finished performing tasks as the root user, type exit to return to your normal user ID. To keep you data and server settings secure, only use root when necessary. Complete the task at hand, and then return to your normal user ID. Getting Started Guide Page 19
CONNECTING USING SERVER ADMIN Server Admin can be installed on a client computer, letting you connect to the server and manage the services that are running from a remote location. You can download Server Admin for free from Apple here: http://www.apple.com/downloads/macosx/apple/application_updates/ serveradmintools1062.html After installing Server Admin, you can launch it from the Applications folder. To Connect Using Server Admin 1. Open Server Admin. 2. In the Address field, enter your server IP. 3. In the User Name field, type admin. 4. In the Password field, enter your password. 5. Click Connect. Getting Started Guide Page 20
Understanding Your Server's Administration Tools There are several tools you can use to administer your server. SERVER PREFERENCES Server Preferences is a simplified management screen. It lets you start and stop services, add users, create workgroups and view system information, including information about the server, logs, graphs, and security. SERVER ADMIN Server Admin lets you start, stop, and add services not listed by default. In addition to controlling services, Server Admin lets you specify detailed configuration information, control SSL certificates, specify access levels, and more. You can remotely manage your server using Server Admin, or run it after logging in to the server using Remote Desktop or a similar tool. WORKGROUP MANAGER Workgroup Manager provides a centralized location to control permissions, control user experience, and enable services for users on an individual level. You can remotely manage permissions using Workgroup Manager, or run it after logging in to the server using Remote Desktop or a similar tool. Getting Started Guide Page 21
Setting Up DNS for Your Domains By default, your server is not configured to manage DNS. You can configure DNS, but that is beyond the scope of this guide and is not necessary to make your server work correctly. Instead, we recommend changing your domain name's A record and then pointing your MX record to the domain name. Once you configure your domain properly, your website works (if you created one) and you can send email to and from that domain name. You need to modify the DNS for each domain name you intend to use with the server. Changes made to your DNS take up to 48 hours to propagate. Getting Started Guide Page 22
CHANGING YOUR A RECORD If you are creating a website for your domain name, the website won't work until you point the A record to the server IP address. Before changing the A record, locate the server IP address in the Hosting Control Center. To Locate the Server IP 1. Log in to your Account Manager. 2. In the My Products section, select Servers. 3. Click Launch Manager next to the server you want to manage. 4. In the Account Summary section, locate your IP address. To Change Your A Record 1. Log in to your Account Manager. 2. In the My Products section, click Domain Manager. 3. Click the domain you want to modify. Getting Started Guide Page 23
4. In the Total DNS section, click Total DNS Control. 5. In the A (Host) area, locate the @ host. 6. From the Actions column, click the pencil icon to modify the @ host. CAUTION: This step will bring down any site you are currently hosting and point it to your server. 7. In the Points To Ip Address field, enter the IP for your server. 8. Click OK twice. CHANGING YOUR MX RECORD The MX record controls the email for the domain. Once you create an A record that points to the server IP, you can change the priority 0 MX record to point to the domain with the modified the A record. For example, if your domain is coolexample.com, and you already modified the A record, modify the priority 0 MX record to go to coolexample.com. Getting Started Guide Page 24
To Change Your MX Record 1. Log in to your Account Manager. 2. In the My Products section, click Domain Manager. 3. Click the domain you want to modify. 4. In the Total DNS section, click Total DNS Control. 5. In the MX (Mail Exchange) area, in the Actions column, click the X for the priority 10 MX record. 6. In the MX (Mail Exchange) area, in the Actions column, click the pencil icon for the priority 0 MX record. 7. In the Enter Goes To Address field, enter the domain name you modified the A record for. 8. Click OK twice. Getting Started Guide Page 25
Installing an SSL Certificate on Your Server SSL certificates protect information that is sent on the Internet. Without a certificate, information is transmitted in plain text, enabling someone to read everything that is coming to or from your organization. After installing the SSL, you need to specify which services will use it. INSTALLING YOUR SSL CERTIFICATE There are two certificates the intermediate certificate and your server certificate that you need to install. You can download these certificates in ZIP format from the admin interface you use to manage your certificates. Getting Started Guide Page 26
To Install the Intermediate Certificate 1. Copy the certificate files to your server. 2. Launch Keychain Access (/Applications/Utilities/Keychain Access). 3. If the button at the lower left of the Keychain Access window displays "Show Keychains," click it to show the Keychain list. 4. Select the System keychain. 5. Click the padlock at the top left to unlock the System keychain. Authenticate as a user with administrative privileges, if prompted. 6. Click File, and the select Import. Navigate to and select the gd_intermediate.crt that you copied to your server. 7. Verify that the "Go Daddy Secure Certification Authority" displays in the list. 8. Close the Keychain Access application. Getting Started Guide Page 27
To Install Your Server Certificate 1. Launch the Server Admin tool and connect to the server where you want to install the certificate. 2. In the Servers pane, select the server for the SSL certificate. 3. Select Certificates from the toolbar. 4. Select the certificate. Click the Gear button, and then select Add Signed or Renewed Certificate from Certificate Authority. 5. Drag the file containing your server certificate to the blue certificate icon that displays. Make sure to drag the file with your server certificate. Do NOT use the file containing the intermediate certificate. 6. Click Replace Certificate. Getting Started Guide Page 28
ASSIGNING THE CERTIFICATE TO SERVICES After installing the certificates, you can assign the server certificate to the desired services (Web, Mail, ichat, Open Directory, etc.). In Server Admin, select the service you want to use the SSL certificate for. Then, in the service's setting pane, select the certificate, and then click the Save button. Getting Started Guide Page 29
Managing Services (Email, Web, ichat, and More) As the server administrator, you control which services are running on the server. Because services consume server resources, you should only run them if you are going to use them. When the server is configured, the only running service is the firewall. If you want to provide address book, email, or Web services to your users, you need to start those services individually. We recommend starting these services before adding users. You can manage services in Server Preferences or Server Admin. Server Preferences gives you the basics in a simplified interface, while Server Admin lets you specify detailed settings. Services might not work properly until they are linked to your domain name. Go to Server Admin and enter your domain name in the Host Name field for each service you add. USING PREFERENCES TO MANAGE SERVICES Server Preferences is a simplified interface that lets you manage most common services. To Start or Stop Services in Server Preferences 1. In Server Preferences, click the service you want to start or stop. 2. Drag the slider to ON or OFF. Getting Started Guide Page 30
3. If starting the service, specify any available options. The selections you make are saved immediately. USING SERVER ADMIN TO MANAGE SERVICES Server Admin is a detailed interface that gives you total control of all the services your server is running. You can view error logs, current connections to the service, settings, and more. To Start or Stop Services in Server Admin 1. In Server Admin, in the Servers list, click the arrow to the left of your local computer to expand the list of services. 2. Click the name of the service you want to start. NOTE: If the service isn't listed, select Add Service from the Service menu. Select the service you want to add, and then click Save. 3. Click Start. Getting Started Guide Page 31
MODIFYING FIREWALL SETTINGS FOR SERVICES Some services will not work unless you modify the firewall settings. An example of a service that requires modified firewall settings is ichat. When you start a service that requires a firewall change, you see a warning. If you see a warning when starting a service, go to the Firewall service and open the ports required. To Modify Firewall Settings for Services 1. In Server Admin, click Firewall. 2. From the toolbar, click Settings. 3. Click Services. and then click Description to sort the port descriptions alphabetically. 4. Locate and select all ports that are associated with the service you started. For example, if you started ichat, locate all port descriptions that contain ichat in the description. 5. Click Save. Getting Started Guide Page 32
Setting Up Users and Workgroups To let users connect to your server, create user accounts. These accounts determine whether users can administer the server, which services they can access, and other preferences. Creating workgroups helps you connect a team or group of your users, so they can share folders and other resources. CREATING AND DELETING USERS Users cannot connect to the server until the Open Directory master is created. Fortunately, the first time a user is created, OS X automatically creates the Open Directory master, after asking for your permission, of course. Open Directory stores information about user accounts and lets each user have their own home directory and personalized desktop. It does a lot more, but these are the basics. Without Open Directory, you can't network users. Before adding users to the server, make sure you enable the services you want them to use. If you don t do this, your users might encounter additional setup steps. Getting Started Guide Page 33
After you add users to the server, they need to set up ichat, ical, Mail, and other applications on their computers to connect to the server. To Create a User Account 1. In Server Preferences, click Users. 2. Click the + below the Users area. 3. Complete the fields. 4. Specify whether you want to let users administer the server. Only users who need this option should be granted the privilege. 5. Click Create Account. After creating the user, with the user's name highlighted, you can update: Contact Info Services Groups Make any necessary updates. Verify the email address is using the correct domain name. If not, you can change it. Specify which services the user can access. Assign the user membership in groups. Getting Started Guide Page 34
To access detailed user settings, open Workgroup Manager and click the user name. For assistance with Workgroup Manager, see Working with Workgroup Manager. For the full user manual, read the Mac OS X Server User Management Guide. To Delete a User Account 1. In Server Preferences, click Users. 2. Select the user account you want to delete. 3. Click - below the Users area. 4. Click Delete User. Getting Started Guide Page 35
WORKING WITH WORKGROUP MANAGER To administer users with the full set of tools available, use Workgroup Manager. When you're using Workgroup Manager, make sure you are working in the /LDAPv3/127.0.0.1 directory node. If you get a message similar to the one shown here, you need to connect to /LDAPv3/127.0.0.1, and then authenticate as the directory administrator. Getting Started Guide Page 36
To Connect to /LDAPv3/127.0.0.1 and Authenticate as the Directory Administrator 1. In Workgroup Manager, click the globe and select Other. 2. Click LDAPv3, and then select 127.0.0.1. 3. Click OK. 4. To authenticate, click the padlock. 5. In the User Name field, type diradmin. 6. In the Password field, enter the password that you created when you set up the server. ASSIGNING PERMISSIONS TO USERS You can assign permissions to your users at any time based on the tasks they need to perform. "Administrative privileges" is the highest access level you can assign. Additionally, you can assign limited administration capabilities, which let you give a user privileges to manage one or more other user accounts that you specify. To Assign a User's Permissions 1. In Workgroup Manager, click the name of the user you want to assign permissions for. 2. Click Privileges. Getting Started Guide Page 37
3. In the Administration Capabilities field, choose None, Limited, or Full. 4. If you choose Limited, click +, drag and drop users into the User can administer field, and then specify the allowed operations. 5. Click Save. CREATING AND DELETING WORKGROUPS Workgroups let you designate individuals who work together. When you create a workgroup and add users to it, you can specify that those users are automatically added to each others' ichat lists and that they have a shared group folder. Users can belong to multiple workgroups. To Create a Workgroup 1. In Server Preferences, click Groups. 2. Click +. 3. Complete the fields, and then click Create Group. 4. On the Group pane, specify the Group Services and whether you want to create a wiki. 5. On the Members pane, click Edit Membership, and then select the users you want to add to the group. Getting Started Guide Page 38
Group folders are located in a folder named Group, which is a top-level folder on the Macintosh HD. To Delete a Workgroup 1. In Server Preferences, click Groups. 2. Click the group you want to delete. 3. Click -. 4. Click Delete Group. Getting Started Guide Page 39
Setting Up the Mail Service Before you can use email, you need to make sure your domain name's MX record points to the server and that the Mail service is started in Server Admin. You also need to make sure your users have the correct settings to use their email clients. For more advanced email management, see Apple's Mac OS X Server Mail Service Administration guide. STARTING THE MAIL SERVICE It's best to start the Mail service using Server Admin. To Start the Mail Service in Server Admin 1. In Server Admin, in the Servers pane, click the arrow to the left of your local computer to expand the list of services. 2. Click Mail, and then click Start Mail. 3. Click Settings. Getting Started Guide Page 40
When we set up your server, we provided the default mail settings, including the relay server required to send mail. You can use Apple's documentation for detailed information about mail settings. 4. If you added a domain name to the server, and pointed the domain name to the server, specify it in the Domain Name and Host Name fields. 5. Click Save. Getting Started Guide Page 41
MODIFYING A USER S MAILBOX SIZE You can modify the size of a user's mailbox using Workgroup Manager. To Modify the Size of User's Mailbox 1. In Workgroup Manager, from the Accounts tab, click the user you want to modify. 2. Click Mail. 3. In the Mail Quota field, specify the size of the user's mailbox. 4. If necessary, make any other medications. 5. Click Save. Getting Started Guide Page 42
CREATING OR MODIFYING USER EMAIL ADDRESSES When you create a new user, the OS X Server creates an email address for the user based off of the default domain name. If you want to give a user another email address, you can modify the user's email address in Workgroup Manager. When adding new email addresses, make sure you point the domain name to the server and configure the MX records properly. For more information, see Setting Up DNS for Your Domains in this guide. Getting Started Guide Page 43
To Create a New Email Address for a User 1. In Workgroup Manager, select the user you want to modify. 2. Click Info. 3. To the right of the Email field, click +. 4. Enter the new email address, and then click Save. To Change a User's Email Address in Server Admin 1. In Workgroup Manager, select the user you want to modify. 2. Click Info. 3. In the Email field, double-click the email address you want to modify. 4. Enter the new address, and then click Save. Getting Started Guide Page 44
Managing Your Website and Other Web Services OS X Server makes it easy to get started with a website, blog, and wiki. You can quickly create a website for your company, and all your users have their own space set up at coolexample.com/ username (coolexample.com is your domain name, and username is the user s ID you created). Additionally, workgroups can share wikis. For detailed information about creating your website and Web presence, refer to Apple's Mac OS X Server Web Technologies Administration guide. SETTING UP A WEBSITE You can set up your website from Server Admin. When you set up a website, it is assigned a default folder. Place your website's files in that folder to publish your website. NOTE: If your website uses a MySQL database, make sure you turn on the MySQL service. Getting Started Guide Page 45
To Set Up a Website 1. In Server Admin, in the Servers pane, click the arrow to the left of your local computer to expand the list of services. 2. Click Web, and then click Start Web. 3. Click Sites. 4. Click + to create a site. 5. In the General pane, enter your domain name in the Host Name field. 6. Select the IP address and enter port number for the site. The IP address should be the same as the server IP. The default port number is 80. If you are using an SSL certificate, use port 443. Getting Started Guide Page 46