Apple 10.5 Leapard Model Vehicle User Manual


 
Chapter 5 Setting Up Group Accounts 91
Administering Group Accounts
Workgroup Manager lets you administer group accounts stored in multiple directory
domains.
Creating Group Accounts
To create a group account in a directory domain, you must have domain administrator
privileges.
You can also create group accounts on a non-Apple LDAPv3 server if the server is
configured for write access.
To create a group account:
1 In Workgroup Manager, click Accounts.
2 Make sure the directory services of the Mac OS X Server computer you’re using are
configured to access the directory domain.
For information about using Directory Utility to configure an LDAP connection, see
Open Directory Administration. For information about the group account elements that
may need to be mapped, see the appendix, “Importing and Exporting
Account Information.”
3 Click the globe icon and choose the domain where you want the group account to
reside.
4 To authenticate, click the lock and enter the name and password of a directory domain
administrator.
5 Click the Groups button.
6 Click New Group and then specify settings for the group in the panes provided.
staff 20 A default group that UNIX users are traditionally placed.
sys 3 A group that has no specific meaning.
tty 4 A group that owns special files such as the device file associated
with an SSH or telnet user.
_unknown 99 A group used when the system doesn’t know about the hard drive.
utmp 45 A group that controls who can update the system’s list of logged-in
users.
_uucp 66 A group used to control access to UUCP spool files.
wheel 0 A group (in addition to the admin group) that users with
administrator privileges belong to. Membership is required for
using the
su command.
_www 70 A nonprivileged group that Apache uses for its processes that
handle requests.
Predefined
group name
Group ID Use