Summary of the content on the page No. 1
Mac OS X Server
iChat Service Administration
For Version 10.5 Leopard
Summary of the content on the page No. 2
K Apple Inc. © 2007 Apple Inc. All rights reserved. The owner or authorized user of a valid copy of Mac OS X Server software might reproduce this publication for the purpose of learning to use such software. No part of this publication might be reproduced or transmitted for commercial purposes, such as selling copies of this publication or for providing paid-for support services. Every effort has been made to guarantee that the information in this manual is correct. Apple Inc. is not r
Summary of the content on the page No. 3
1 Contents Preface 5 About This Guide 5 What’s New in Version 10.5 6 What’s in this Guide 6 Using Onscreen Help 7 Advanced Server Administration Guides 8 Viewing PDF Guides on Screen 8 Printing PDF Guides 9 Getting Documentation Updates 9 Getting Additional Information Chapter 1 11 Understanding iChat Service 11 How iChat Works 12 How iChat Users Are Authenticated 13 Using iChat in Small to Medium Organizations 13 Using iChat in Large
Summary of the content on the page No. 4
22 Setting Access Control for iChat 22 Setting SACL Permissions for Users and Groups 23 Setting SACL Permissions for Administrators 23 Using SSL for iChat 24 Locating iChat Configuration Files 25 Viewing iChat Logs 25 Turning Auto-Buddy Support On 25 Stopping iChat Chapter 3 27 Setting Up Advanced iChat Service Configurations 27 Linking Multiple Chat Servers (S2S) 27 Setting Up S2S Communication 28 Securing S2S Connections 28 Using Certificates to Secure S2S C
Summary of the content on the page No. 5
About This Guide This guide provides instructions for setting up, configuring, and administering iChat service on Mac OS X Server. Instant messaging involves live interactions between computer users exchanging text, pictures, audio, and video. Instant messaging is also known as chatting, because of its spontaneous, conversation-like qualities. iChat is the Apple instant messaging service that promotes real-time communication and information-sharing between diverse
Summary of the content on the page No. 6
What’s in this Guide This guide includes the following chapters: Â Chapter 1, “Understanding iChat Service,” highlights key concepts and provides basic information about iChat messaging in action, iChat messaging in organizations, and overviews of the iChat service. Â Chapter 2, “Setting Up and Managing iChat Service,” describes how to set up your iChat service for the first time and how to manage iChat settings and components. Â Chapter 3, “Setting Up Advanced iChat Se
Summary of the content on the page No. 7
Advanced Server Administration Guides Getting Started covers installation and setup for standard and workgroup configurations of Mac OS X Server. For advanced configurations, Server Administration covers planning, installation, setup, and general server administration. A suite of additional guides, listed below, covers advanced planning, setup, and management of individual services. You can get these guides in PDF format from the Mac OS X Server d
Summary of the content on the page No. 8
This guide... tells you how to: User Management Create and manage user accounts, groups, and computers. Set up managed preferences for Mac OS X clients. Web Technologies Administration Set up and manage web technologies, including web, blog, webmail, wiki, MySQL, PHP, Ruby on Rails, and WebDAV. Xgrid Administration and High Set up and manage computational clusters of Xserve systems and Performance Computing Mac computers. Mac OS X Server Glossary Learn about terms used for server and storag
Summary of the content on the page No. 9
Getting Documentation Updates Periodically, Apple posts revised help pages and new editions of guides. Some revised help pages update the latest editions of the guides. Â To view new onscreen help topics for a server application, make sure your server or administrator computer is connected to the Internet and click “Latest help topics” or “Staying current” in the main help page for the application. Â To download the latest guides in PDF format, go to the Mac OS X Server documentation websi
Summary of the content on the page No. 10
10 Preface About This Guide
Summary of the content on the page No. 11
1 Understanding iChat Service 1 Mac OS X iChat service provides secure instant messaging for users supported by Mac OS X Server. iChat is a service that permits users to collaborate by chatting and sharing information using instant messaging and data transfer. This real-time interaction between computer users promotes collaboration without the delay of mail responses and blog postings or the expense of telephone communication or face-to-face meetings. This collaboration might include: Â Brai
Summary of the content on the page No. 12
Apple uses the jabberd software, which implements the Jabber protocol. Jabber is a trademarked term given to this XMPP protocol by the Jabber Software Foundation. iChat provides peer-file transfer between users that can’t establish direct connections to a network because of intervening firewalls that block such connections. In the case of firewalls, iChat acts as a file-transfer proxy, using the Jabber Proxy65 module. To access messaging and file transfer services, users connect to iChat fr
Summary of the content on the page No. 13
Step 1: Initiating a chat To start a chat with another user, you must first know the user’s short name and the domain name that iChat is configured to use. Step 2: Verifying identity iChat verifies the identity of users by using Open Directory authentication. Users are authenticated only if they’re defined in a directory domain in the server’s Open Directory search path. Step 3: Authorizing the user iChat makes sure that users are authorized to use the service. The server administrator
Summary of the content on the page No. 14
You can also use Server Admin to create customized iChat configurations depending on your organizations requiremenets. For more details, see Chapter 3, “Setting Up Advanced iChat Service Configurations.” This includes setting up a server-to-server federation. When the server-to-server federation is enabled, communication with most other XMPP-compliant chat servers is also established, including the ability to federate with Google Talk. For servers on different networks to communicate, adm
Summary of the content on the page No. 15
Workgroup Manager Workgroup Manager provides comprehensive management of Mac OS X Server clients and users. For basic information about using Workgroup Manager, see User Management. This includes information such as:  Opening and authenticating in Workgroup Manager  Administering accounts  Customizing the Workgroup Manager environment Workgroup Manager is installed in the /Applications/Server/ folder. Command-Line Tools Command-line tools are available for administrators who prefer using
Summary of the content on the page No. 16
16 Chapter 1 Understanding iChat Service
Summary of the content on the page No. 17
2 Setting Up and Managing iChat Service 2 This chapter describes how to set up and manage iChat in Mac OS X Server. This chapter helps you perform the initial iChat service setup and provides information about using, managing, and administering iChat. Understanding iChat Screen Names iChat screen names are Jabber IDs and use the general format user-short-name@iChat- domain-name (for example, nancy@ichat.example.com). The user-short-name component is the short name of a user defined in the Op
Summary of the content on the page No. 18
Setup Overview Here is an overview of the steps for setting up iChat service: Step 1: Configure and start Open Directory iChat uses Open Directory to authenticate users and must be configured before setting up iChat. See “Configuring and Starting Open Directory” on page 18. Step 2: (Optional) Set up Firewall service If you are using a firewall, iChat requires specific ports to be open for iChat features to function. See “Opening Firewall Ports for iChat Service” on page 19. For more info
Summary of the content on the page No. 19
Opening Firewall Ports for iChat Service iChat requires specific ports to be open on your server. If you have a firewall configured or you are using the Mac OS X Server firewall, you must enable these ports before you can use iChat. Depending on the iChat functions you require, make sure the following ports are open. Ports Description 16384-16403 iChat audio/video RTP and RTCP 5060 iChat Session Initiation Protocol 5190 iChat Instant Messenger, file transfer 5222 iChat Server 5223 iChat Ser
Summary of the content on the page No. 20
 General. Use to set host domains, SSL certificate, authentication method, and XMPP server-to-server federation for iChat.  Logging. Use to configure message log settings for iChat. The following sections describe how to configure these settings, and a final section tells you how to start iChat when you finish. Configuring General Settings You use the General settings pane in iChat to add host domains, choose an SSL certificate and authentication method, and configure XMPP server-to-serve
