Rich Trouton and Peter Bukowinski ran into an odd issue on some of their machines. They would time out while trying to connect to a SMB or AFP share with a known good Username/Pass. The problem? iDisk. The machines would try to connect to iDisk even if the share was an internal-only fileshare.
Apple didn't say anything in the keynote, but when the store came back, the Mac Pro has been updated! Looks like it was just the processor that got a change. No thunderbolt, but looks like the rumors of the MacPro's demise are premature.
Apple posted new whitepapers to http://training.apple.com/lion. The Configuration Profiles and 802.1X authentication whitepapers look brand spankin' new.
Mac OS X Server's adaptive firewall (afctl) does a good job of catching brute-force login attacks on most services, but it doesn't catch PPTP attacks. The script below checks the system log for such attacks, and then uses afctl to block offending hosts for a week (you can, of course, change the parameters if you wish).
If you're not familiar with the Pymacadmin project - you should be. Nigel Kersten and Chris Adams have created an awesome tool called crankd that will let you execute Python code or shell scripts in response to system events.What does this mean to you?Do you have laptop users that are bound to OD or AD?
DNS can always bite you in the rear. in some case you run your own DNS server and you can correct the issues. In other cases, you're beholden to the powers that be to determine your fate. All is not lost, however, it is possible to run your own DNS proxy to override specific answers.
I may have found a temporary solution to allow the Apple Software Update Service (ASUS) to work through a corporate proxy server.
The networksetup command is pretty useful for deploying static network information, which is otherwise tedious (to say the least). In Mac OS X 10.6 there are three major additions to networksetup that have not gotten a lot of attention yet.
On Mac OS X 10.5, if you connect two different ports on a host to two different networks and assign them with two different IP schemes then only one can act as the default gateway. This means that any incoming packets will all, by default, get responded to over the default gateway; despite which interface the packets came in on.
Ed. Note: This is interesting as otherwise you'll always be visible over WINS/NetBIOS whether you're actually sharing via SMB or not. Finally I believe I found the magic command to disable WINS on Leopard to stop it from showing on a Windows network.
