Filter
Top Products
90 Chapter 5 Setting Up Group Accounts
Where Group Accounts Are Stored
Group accounts can be stored in any Open Directory domain. A directory domain can
reside on a Mac OS X computer (for example, an Open Directory domain) or it can
reside on a non-Apple server (for example, an LDAP or Active Directory server).
Workgroup Manager can work with accounts stored in any of these directory domains.
Group accounts must be stored in a directory domain accessible from the server that
needs them:
 For services provided by a Mac OS X Server PDC or Windows domain member server,
group accounts can be stored in the PDC LDAP directory.
 For services provided by an Active Directory domain member, group accounts can be
stored in the Active Directory domain.
 For services provided by a Windows standalone server, group accounts can be stored
in the server’s local directory domain.
 If a server is configured to access multiple directory domains, group accounts can be
stored in any of them.
For more information about the different kinds of Open Directory domains, see Open
Directory Administration.
Predefined Group Accounts
The following table describes most group accounts that are created when you install
Mac OS X Server. For a complete list, open Workgroup Manager and choose View >
Show System Users and Groups.
Predefined
group name
Group ID Use
admin 80 A group that users with administrator privileges belong to.
bin 7 A group that owns all binary files.
daemon 1 A group used by system services.
dialer 68 A group for controlling access to modems on a server.
kmem 2 A legacy group used to control access to reading kernel memory.
mail 6 A group historically used for access to local UNIX mail.
_mysql 74 A group that the MySQL database server uses for its processes that
handle requests.
network 69 A group that has no specific meaning.
nobody -2 A group used by system services.
nogroup -1 A group used by system services.
operator 5 A group that has no specific meaning.
smmsp 25 A group used by sendmail.
sshd 75 A group used for the sshd child processes that process network
data.