[andrina]

I’ve only seen this once before, but for me it was actually the drive interconnect board in the xserve – moving the drive to another bay allowed me to rebuild the raid, and got rid of the issues (and of course replaced that part soon after!)… So, maybe a hardware test is required?

[andrina]

I’ve got something similar going on here – however, we’re not using static mounts, we have dynamic mounts instead – not sure that would really make a difference to the issue you’re seeing at the moment though.

FYI though – this is what one of our mounts looks like:

sudo nidump -r /mounts .
{
  "name" = ( "mounts" );
  CHILDREN = (
    {
      "name" = ( "servername:/mount/point" );
      "vfstype" = ( "nfs" );
      "opts" = ( "net" );
      "dir" = ( "/Network/Servers" );
    }, 

Your clients that are creating the scripts though – how do they have the NFS drives mounted? Are they being mounted by the client in the finder, or are the auto-mounted also?

We have found that Shake does tend to keep the whole /private/var/automount… in the script, even if your compositors select their file-in nodes from a simpler path. I.e. we have anything that’s automounted into /Network/Servers linked with symbolic links to /mnt/mountname and all of our paths are then called from /mnt – due to Shake and it’s want to include the whole path we wrote an in-house script that then got included in the render submit script to parse the Shake script, clean out the /private/automount mess and replace it with the correct paths… I don’t know if this sort of scripting may solve your issues.

[andrina]

there’s also /usr/sbin/lpadmin

as an example – this is similar to something I use for pushing out new printers:

/usr/sbin/lpadmin -p 192.168.1.30 -E -v lpd://192.168.1.30 -P /Library/Printers/PPDs/Contents/Resources/en.lproj/hp\ LaserJet\ 2300.gz -D B&W_Laser

The above shows setting up an HP LaserJet 2300 with IP printing where the printer type is LPD/LPR and giving it a custom name of B&W_Laser.

You can of course run this by SSH-ing into the machine, or using “Send UNIX Command” from ARD2

[andrina]

Xsan should do everything you’re looking for here – with a few points to ponder though – I assume only one of your servers is acting as an OD master? Are your other servers simply connected tot he directory structure, or are they replicas? I would make at least one of your other servers an OD replica.

Firewall should be set up on every machine if you don’t have a main firewall that all your traffic goes through at the moment – this is probably a bigger concern that you’ll want to speak to a networking guru about… the same goes for VPN – VPN hardware may be a better solution – otherwise, you may want to setup a machine as a failover for your VPN server, depending how crucial VPN is of course.

Mail and Web data should be fine on xsan – I haven’t personally tested this however.

I believe there was some hesitation about putting users home directories on an xsan volume – however, I don’t know if this hesitation was solely for directly attached clients, or if it applies to an xsan volume shared over AFP. The best way to find out, is of course going to be testing it.

FileMaker should be able to handle having it’s data on an xsan volume, but I’m sure a support question to FileMaker wouldn’t be a bad idea – a quick search for Xsan on FileMaker’s website yielded no answers for me.

Otherwise, there is also an Apple hosted mailing list for xsan (http://lists.apple.com/mailman/listinfo/xsan-users) with an awful lot of knowledgeable posters who may have already done exactly what you’re looking for.

Cheers,
Andrina

[andrina]

You may also find something of interest here – http://www.apple.com/itpro/articles/intrusionprotection/index.html

[andrina]

Not built in, but take a gander at http://www.phpbb.com/

[andrina]

Are you looking to authenticate for login, or just to mount volumes from the server on your linux machine? If you’re simply looking to mount a volume on your linux machine you can mount over SMB using any user account that you currently have, or you could share out over NFS for the linux machine. If you’re looking to authenticate the linux machine on login to your server then you’re looking at LDAP authentication.

To do this you’ll need to install openldap on your linux box, and then configure /etc/ldap.conf to look to your OS X server. You’ll then need to use authconfig to enable LDAP authentication.

[andrina]

Have a look at Bastille (http://www.bastille-linux.org/) and snort (http://www.snort.org/) – in fact there’s even a nice step-by-step for snort on OS X here – http://homepage.mac.com/duling/halfdozen/Snort-Howto.html

[andrina]

Have you tried clearing out the mcx_cache from netinfo?

[andrina]

Your best bet is to open WGM on the machine where the secondary drive is and try setting it up from there – I’ve had similar problems trying to manage system prefs that are not installed on the server, but are on the client machines…. WGM should then see the secondary drive – I’d hope!

[Author]

Posts