Set Up SAN Users and Groups
Here are several ways you can set up users and groups for your SAN:
If you’re setting up a new primary metadata controller or one you’ve just performed
m
a clean installation of Mac OS X Server on, select an option in the “Users and Groups”
pane of the Mac OS X Server setup assistant.
Manage users and groups with Xsan Admin: Select this option to have the server
setup assistant create a centralized directory of users and groups on the primary
metadata controller. You can select this option only while setting up Mac OS X Server
on the primary metadata controller. You can’t configure this option after using the
Mac OS X Server setup assistant on the primary controller.
After setup, you use Xsan Admin to create and delete users and groups and to change
group membership. For information about Open Directory servers, see “Directory
Services” on page 24.
Use existing users and groups from an Open Directory server: Select this option to
have the Mac OS X Server setup assistant configure the primary metadata controller to
connect to the Open Directory server whose DNS name or IP address you specify.
If you select this option, Xsan Admin configures all other SAN computers with Xsan 2
to use the Open Directory server.
To set up an Open Directory domain, use Mac OS X Server’s Server Admin
application. Then use the Workgroup Manager application to manage users and
groups. For information, see Open Directory Administration and User Management at
www.apple.com/server/resources/.
Connect to a directory server later: Select this option if you have another type of
directory server, such as Active Directory.
After setting up the primary metadata controller, use System Preferences > Accounts
> Login Options > Network Account Server on each SAN computer (Directory Utility in
Mac OS X v10.5) to connect the computer to your directory server.
If you choose not to use a directory service, you must create the same set of users and
m
groups in System Preferences on each SAN computer.
Important:
If you create users and groups on each SAN computer, make sure each user
and group has a numeric user ID (UID) or group ID (GID) that is unique throughout the
SAN, and make sure all SAN users and groups have the same UID or GID on all SAN
computers. One way to do this is to create an identical list of users and groups in the
same order on each computer, following a clean installation of the operating system.
Step 5: