AFP548 Changing the world one server at a time.

cyburk

Forum Replies Created

Viewing 7 posts - 1 through 7 (of 7 total)
  • Author
    Posts
  • in reply to: Need some advice adding a client #365848
    cyburk
    Participant

    This post might help.

    in reply to: Can Someone Check Workgroup Manager Group Listing #364851
    cyburk
    Participant

    If you mean under the All Records tab in the Accounts pane, then the answer is yes; I see both Admin and Staff.

    in reply to: DNS Configuration in Tiger – Still not working #364212
    cyburk
    Participant

    The fact that you have your name parked with and outside nameserver doesn’t make any difference, except that if you’re hosting your own website and you have a dynamic IP from your ISP you’ll run into the same problem I did:

    https://www.afp548.com/forum/viewtopic.php?forum=27&showtopic=9868

    Did you remember to tell your server to resolve to itself by entering 192.168.0.100 in the DNS server field in its Network Preferences?

    in reply to: Users network mount accessible as share #364146
    cyburk
    Participant

    cstcroix wrote:

    That’s a long preamble to say that while I’m testing this, I’ve realized that the /Users folder I use as the location of all the home folders, is available as a shared volume, and that read access is enabled for Everyone! Yeesh.

    That’s a normal setup, isn’t it? Let’s say we have a user named tomsmith. For /Users and /Users/tomsmith the permissions are for Owner to READ & WRITE, Group to READ and Everyone to READ. (That way people can get to tomsmith’s Public and Sites folders.) The restricted directories in /Users/tomsmith (Documents, Movies, Library, etc.) will change the permissions for Group and Everyone to NONE so that only tomsmith has access.

    Or have I misunderstood the question?

    in reply to: DNS Setup Breaks Internal Access to Our Own Site & Email #364103
    cyburk
    Participant

    Jimbo wrote:

    Just to clarify you are adding machines with the ip address of the www. record in the nameserver not the nameserver it’s self.

    Well, crud. This doesn’t give me joy. We have a dynamic IP address, so is the net effect of this that I’m going to have to manually update our www record in Server Admin everytime our WAN IP changes? Surely, if everyone else in the world can find us when our IP changes, there must be a way for our LAN machines to do it too…?

    in reply to: DNS Setup Breaks Internal Access to Our Own Site & Email #364088
    cyburk
    Participant

    Jimbo wrote:

    You need to add the records using the dns settings in Server Admin.

    Sheesh! Have I really been making it this hard? Before I haul off and get too excited, let me make sure I’ve got this straight:

    In Server Admin I stop DNS. I click on the ZONES tab and double-click the name of my existing zone file to edit it. Then I click the MACHINES tab and add a new entry for a machine called “www” with the IP address of a dyndns.org nameserver. I also create a new machine called “mail” with an IP address of the Godaddy mailserver, and enable “This machine is a mail server for the zone.” I click SAVE and then start DNS again.

    Can that really be all?

    Unless I’m completely off-base with the above I guess my only other question is whether/how I can add additional IP addresses for the “www” and “mail” machines. (I have 5 separate nameservers for dyndns.org and 2 mailservers at Godaddy.)

    Thanks again to everyone for being so patient and helpful. This whole site in general and these forums in particular are fantastic resources.

    in reply to: DNS Setup Breaks Internal Access to Our Own Site & Email #364070
    cyburk
    Participant

    James Turner wrote:

    If your zone files do not have a record for http://www.yourdomain.com pointing to the correct place your clients will not be able to find it. In my case I had the company web site hosted with the isp so had to put a record in pointing to the isp’s webserver external address

    For your email you will need to put in an mx record pointing to your isp’s email server.

    James,

    This does help a lot because it confirms the concept of what I figured to be the problem. I’m still at something of a loss, though, as to how to fix it. I’m guessing it has something to do with adding a couple of lines to either the “named.conf” file or a “resolv.conf” file, but beyond that I’m stuck. Would you or someone else be willing to do a little hand-holding on this point?

    If it makes any difference, our domain and email addresses were all set up with Godaddy, but we’re using dyndns.org’s nameservers and we have an MX record set up there so email still works from Godaddy’s mailservers.

    Thanks a bunch.

Viewing 7 posts - 1 through 7 (of 7 total)