[calisurf]

What if they don’t have a DHCP type set-up, what if they have to configure PPOE, or dial-up? I assume the only way to allow them to manage these is to switch their mobile account to a local adminstrator of that machine? This way they can make all necessary changes?

I have them currently set-up with multiple locations, school and home, but as mentioned above some are still doing dial-up and need to change settings.

What about using the Adminstrator Group (GID 80), add students to that group, would that create a local admin when they log-in or will that hose the system? I also think this would allow them to manage the Directory Domain, not something I want happening.

[calisurf]

If I have the IP of the machines that I can not access on campus can I add a CNAME for them and point the XServe DNS at them?

[calisurf]

Any hints on getting the servers prepare to do the replication. I installed and configured the three servers today. (10.3.5) I made one machine the OD Master, it also contains the DNS for all three machines. Added a few users (5) to the OD Master and then made each of the other machines a replica. Here is where the problems arose.

1 of the replicas froze up and I could not gain access to the machine in anyway. Even the passwords that I had assigned earlier would not allow me to log-in to the machine. The other server could not connect via SSH, no matter what I did.

The second time I did all of the same things except with server 10.3.4. Still SSH problems?

Any ideas? Is there anything I should do to the servers before replicating the OD Master?

1. Should I updaate them all?
2. SSH was turned on on all machines, should I do anything else?

Basically is there anything I need to do before replicating?

Thanks

[calisurf]

Josh-point taken with the superiority of the replication route, I guess I was stuck in the 10.2 paradigm of parent/child relationships. I also thought, obviously incorrectly, the point of replication was to move directory information closer to a disparate population? After reading your last post, I understand the benefits of redundancy, that alone makes it worth while.

One problem, all three servers are in the same rack, if there is a fire, I am #$%#$.

Thanks.

[calisurf]

Are you saying that the “Connect to Open Directory Master” does not work within Open Directory? or are you saying it is more efficient to make each of the XServes a replica?

[calisurf]

I do not want the machines to be replicas, I simply want them to connect to th Open Directory Master. This was easily accomplished in 10.2 Server but I can only find a few pages of very vague documentation (60-65) in the Open Directory Documentation.

[calisurf]

I had tried “contacts” and mapped it to the server but to no avail and have yet to find an answer on any of the Apple lists. Thanks for your help.

[calisurf]

10.3 Server, Workgroup Manager.

Select a user account, select preferences, select Internet, select Email. According to Apple’s documentation you can push this information to the client machine/user upon log-in. It is done for Safari, it is just perplexing to me why Apple’s Mail application does not work with this?

Thanks.

[calisurf]

I am hoping this DNS fix is going to alleviate some of the log-in slowness of the client machines. When each client machine is turned on it is sending a lot of packets looking for a DNS server. This is a problem as there possibly 100 machines turned on at that same time and I have witnessed a massive slow down on just getting to the log-in screen as well as logging into the parent server.

Thanks Joel, I will try one of these ideas out.

[calisurf]

Setting up group folders on WGM is kind of tricky, especially using 10. 2 Server.

Here is how I get it working:

1. Create Group Folder
2. Run from commandline–> creategroupfolder
3. Under preferences in WGM, select Log-in, select Add group share point
4. Under preferences in WGM, select Dock, select Add group folder
5. Log-in on client and you should see your folder.

Remember, there is a bug in 10.2 Server that only will show a question mark in the dock if you are mounting the group folder under simplified finder. Click the question mark and the folder will appear…magically.

Let me know if you have any questions, I have many group folders functioning properly.

[calisurf]

Now, the network folks are claiming that the router does have a PTR record. But when I issue a dig command from a client I recieve the following back which I thought showed proved my point of no reverse records.

Thoughts?

; <<>> DiG 8.3 <<>> -x
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUERY SECTION:
;; 133.12.18.172.in-addr.arpa, type = ANY, class = IN

;; AUTHORITY SECTION:
18.172.in-addr.arpa. 3H IN SOA prisoner.iana.org. hostmaster.root-servers.org. (
2002040800 ; serial
30M ; refresh
15M ; retry
1W ; expiry
1W ) ; minimum

;; Total query time: 227 msec

[calisurf]

Some of our client machines do not have reverse records and I believed that could be the problem. When I asked our network people here is the response I received:

“These clients are supposed to be NATTED and on DHCP, and they should not have a reverse DNS entry in DNS. If you need to have a PTR for the router address(i.e., NATTED address for the client), we can add the PTR record.”

Would any of this affect the performance of our client machines?

Thanks for any help or suggestions.

[calisurf]

dig -x ipaddressofclient –> 23msec

I checked all servers for both forward and reverse DNS. Everything was working as it should.

I am statically binding clients to the server with IP.

My parent machine at peak shows a 15% CPU usage. My child servers are having major problems with CPU usage. (30 students connected, 80-95% CPU Usage, top commands show AFP process as being the culprit.)

I am just a consultant for this district and yesterday I went digging around and found some interesting network configurations. For example, I found one 100mb connection split via a 3Com Hub, so that 32 MacOS X clients could have connectivity. Might this be a problem? or part of the slowdown?

[calisurf]

I have one internal DNS server that does do forward and reverse lookups for the servers. The clients also use the same box.

I am using basic passwords.

[calisurf]

I am assuming that these setups are working at other locations because there is no way that Apple could be selling this in good faith. I am also seeing the sporadic mounting of home directories and extremely long log-in times.

I am not sure how to fix the Office and Safari caching issues under MCX? I am working on some possible scripts to do this and I will let you know if I find anything.

[Author]

Posts