[Anonymous]

Hi Joel

Thanks for that, that did the trick for some users, who can now see my calendar fine.

However when subscring to my calendar from another computer using ical, it fails with after creating a calendar called untitled1. Any ideas?

Stephen

[Anonymous]

No dice on these certs. I think it is beacause the way these things are being created. (Basically registry entries for a windows box). I am going to have to find another way in. Thanks for your help though…

[Anonymous]

That Joel…. guess I need to learn more about configuring first. I added the cert to the ID tab, but the program errors on trying to parse the racoon file. I’ll read up more to see what I am doing wrong.

[Anonymous]

I used the Server Admin Guide provided by Apple. It can be found at:

http://docs.info.apple.com/article.html?artnum=120174

[Anonymous]

Anyone have anything else to help me with this?….please?

[Anonymous]

Thank you for your response. Here is where I am at.

I had the certificate verified and I am told it is fine.

I was told to be sure to paste in the lines with

—–BEGIN CERTIFICATE REQUEST—–

and

—–END CERTIFICATE REQUEST—–

as well as all data in between. I checked the contents of server.key and server.crt and they seem correct.

Then I was wondering about the permissions causing an “unable to read error”. Do these permissions seem correct?

-rw-r–r– 1 root wheel 777 Sep 29 13:47 server.crt
-rwx—— 1 root wheel 777 Sep 29 13:49 server.crt102
-rw-r–r– 1 root wheel 1109 Sep 26 17:04 server.crt102.save

and

-rw-r–r– 1 root wheel 958 Sep 26 11:57 server.key
-rwx—— 1 root wheel 958 Sep 29 13:33 server.key102

[Anonymous]

Hello,

This is possible using the IP Failover feature of Mac OS X Server. To find out how to implement IP Failover, read the Mac OS X Server Administrator’s Guide which is available at:

[url]http://www.apple.com/server/macosx/pdfs/MacOSX_Server_Admin_Guide.pdf[/url]

You will also need multiple redundant bandwidth providers and a redundant data center to achieve maximum redundancy.

HTH

Regards,
Aaron Faby

[Anonymous]

I’m trying to do the same thing as the original poster of this thread. I have a g4 tower and a g4 laptop. I’d like to be able to connect to the tower through a vpn.

As you describe, the two machines both need VaporSec running and will have specific entries in the top part of the new dialogue box. It makes sense to me from a client perspective but not so for a server perspective.

My specs:
g4 tower info: eth0 a.b.c.d inet #, http://www.domain.com, eth1 10.0.1.1 lan # (NAT router)
g4 laptop info: eth0 192.168.0.211, no domain name, router: w.x.y.z inet IP#.

I’m thinking I would enter into each VaporSec forms:
laptop:
Remote IPSec device: http://www.domain.com
Remote Network: 10.0.1.1/24
Local Network Mask: 32

g4 tower:
Remote IPSec device: w.x.y.z ??
Remote Network: 192.168.0.1/24 ??
Remote Network Mask: 32 ??

(Question marks added out of confusion).

And then, if I have both machines configured properly, I click Vaporize? Maybe I could help out with the usability of this. 😀

In the readme, is says:
7. Wait until the button begins to flash again which symbolizes that everything has been set up. Then try to connect to the remote network.

How do I try to connect to the remote network?

Thanks for making this radical gui. I hope to get it working.

Al

[Anonymous]

Thanks for your response! I can and do use option b) but I need to be able to mount the nonpublic ip NT shares at work in the finder of my G4 at home. The iMac at work has a public ip but alas it is only 10.1.5. Since last post I discovered Apple doc which showed me how to run my Appletalk alongside PPPoE by creating a second network port configuration that uses Appletalk and shares the en0 with PPPoE, it seems to work and does not disconnect home G4 from isp. Having done this…could I route AppleShare over Appletalk from work NT thru work iMac to home G4?

I may be asking the impossible here, but in a nutshell I would like to create a “mini” VPN of Appletalk from work to home using just ssh and port forwarding so that I can mount remote nonpublic NT shares at home in the FINDER.

[Anonymous]

Hi Joe,

Actually, the BCCM – as limiting as it is – works fine with your configuration. The idea is to generate a normal environment and let cron take care of the specifics.

If you drum through chapter 3 in the BRU CLI guide PDF, you’ll find a full description of the files that are actually manipulated when you configure things through the BCCM GUI.

Basically, there are 6 script pieces and 1 config file that come into play in your situation:

/bru/paths
/bru/schedules
/bru/checkschedules
/bru/mountcmd0.sh
/bru/unmountcmd0.sh
/bin/incbru
&
/bru/brulib0.conf

[b:d6fac64bfb]/bru/paths[/b:d6fac64bfb] – contains the list of volumes/paths that you want backed up.
[b:d6fac64bfb]/bru/schedules[/b:d6fac64bfb] – contains the level, day, and time info for the backups to occur.
[b:d6fac64bfb]/bru/checkschedules[/b:d6fac64bfb] – the script that cron executes every 5 minutes.
[b:d6fac64bfb]/bru/mountcmd0.sh[/b:d6fac64bfb] – this is the “load a tape” script that controls loading tapes in your library.
[b:d6fac64bfb]/bru/unmountcmd0.sh[/b:d6fac64bfb] – this script is responsible for unloading the tapes in your library.
[b:d6fac64bfb]/bin/incbru[/b:d6fac64bfb] – incbru does all of the actual BRU work.
[b:d6fac64bfb]/bru/brulib0.conf[/b:d6fac64bfb] – contains the information used to automate tape changes by the mountcmd and unmountcmd tools.

By passing a level for the backup (zero means full, one is everything since the last level 0, two is since the last level 1, etc.) to incbru – i.e.:
[code:1:d6fac64bfb]incbru 3[/code:1:d6fac64bfb]
You can provide full, incremental, and/or differential backup operations. As the incbru script runs, it monitors the output from the actual BRU executable engine and writes all of the data to a logfile. This file is created in /var/log and when the backup succeeds, the log is renamed to the archive ID (a unique value for every BRU archive), gizp’d and stored in /bru/logs.

The next bit of work is performed by the mountcmd0.sh and unmountcmd0.sh script files in the /bru directory. While BRU is running, it will request that media be made available or removed and these are the two members of the team that do the work. They work in conjuction with the values in the /bru/brulib0.conf file. This conf file [i:d6fac64bfb]SHOULD[/i:d6fac64bfb] have been created during the installation process. If it wasn’t created, you can execute [b:d6fac64bfb]/bru/osxscan.sh[/b:d6fac64bfb] (as root or with sudo) to create it. A valid brulib0.conf file should look like:
[code:1:d6fac64bfb]# BRU Library Config File for changer0
# Vendor = EXABYTE
# Model = Exabyte EZ17
NumDrives=1
NumSlots=7
FirstDrive=0
FirstSlot=1
ntape0=0
0_FirstSlot=1
0_LastSlot=7
[/code:1:d6fac64bfb]

This file tells the mountcmd0.sh and unmountcmd0.sh files how to do their jobs.

Let’s start with that example library setting above:

We have a simple /bru/paths file that contains [b:d6fac64bfb]/Volumes/RAID-1[/b:d6fac64bfb] as the only entry and a schedules file that contains one schedule:

0|Monday|01:00

Therefore, at 1am on Monday morning (Sunday night), a backup of /Volumes/RAID-1 will be executed.

01:00 – cron executes incbru with an argument of 0 (Full backup)
01:01 – (or there-about) incbru starts the backup passing BRU the filesystem listed and the setting to use the mountcmd and unmountcmd for manipulating the media it will require.
BRU executes /bru/mountcmd0.sh asking for volume 1 in your first drive (ntape0)
/bru/mountcmd0.sh looks into /bru/brulib0.conf and determines that tape 1 is in slot 1 of the library. It then calls libctl to load the tape from slot 1 into the drive. Once the tape is loaded, mountcmd returns control to BRU and teh actual backup begins.
At some point (if you have that much data), the tape will fill and BRU will then call unmountcmd to unload tape one in preparation for tape 2. After unmountcmd unloads the tape and returns it to its slot, the cycle repeats and mountcmd is called for tape 2. This cycle repeats until all of the data specified has been processed.
Once the backup is totally complete, the log file that was being generated within /var/log is renamed and gzip’d and stored in /bru/logs/. Such a log file will look like:
[code:1:d6fac64bfb]-rw-r–r– 1 root wheel 520543 Sep 11 15:44 BRU-3f60f9350d19.LOG.gz[/code:1:d6fac64bfb]
To parse the contents, you may either gunzip the file, or use tools such as zgrep to scan the contents.
I’ll monitor this thread and post more as time permits, but I must move on for the moment (phone calls …).

Tim Jones
TOLIS Group, inc.

[Anonymous]

Can you still add/delete share points on the original drive?

Yes

Also is the “Ignore Ownersip” box in the get info for the second drive checked?

Yes it is checked.

I have unchecked it but I still cannot set any sharpoints on it.
What should the setting be?

[Anonymous]

Actually I just did this project getting Mac OS X Client to work as a domain controller for Windows without having Server or without using LDAP.

You need to install Fink and get the newest version of samba. I was banging my head off the wall from that one. Service Pack 4 for Windows 2000 breaks older versions of samba. And XP really does stuff differently. You may even have to do a small registry hack.

If you want a really good article this will help you with the Netinfo stuff
https://www.afp548.com/Articles/Jaguar/sambapdc.html

Just follow that minus the LDAP stuff.

If you have any questions drop me an email.

[Anonymous]

Read over your article https://www.afp548.com/Articles/security/ssh-tunnels.html which is awesome!

Utilized your examples. At work I have remote tunnel from NT to iMac, and local tunnel on iMac listening to remote tunnel on iMac. Verified with netstat. Still can’t mount NT volume from home G4 in the Connect To Server window. Receive a can’t connect error -36 in the finder.

Stumped, could it be something to do with “Appletalk” vs. “Appletalk over TCP”? My home connection is adsl using PPoE which disables my Appletalk Services Tab in network control panel. But then how am I doing my normal non-tunneled mounts of the iMac on my G4 at home? I am going crazy here somebody PLEASE advise. Thanks!

NT4 sp6, iMac 10.1.5, G4 10.2.3

P.S. I forgot to mention in earlier post I am head of IT at work and have complete control over every piece of gear in the chain except for 3rd party SDSL router which they configure per my instructions and SW Bell home ADSL modem which I have no control over. So I can configure as needed.

[Anonymous]

I am having the exact same problem that putto describes. There seems to be no rhyme or reason for it occurring. I tried running Disk Warrior on our server, but that didn’t seem to help. Anyone know the cause or of a fix?

[Anonymous]

Acutally no, I am running Apple’s IMAP (where ever it actually comes from) with postfix installed instead of sendmail.

Thanks, Confused

[Author]

Posts