[eric_csm]

Hi,

many thanks, I’ll keep you updated.

Eric

[eric_csm]

Hi Patrick,

I’m not sure that’s the case since the symbolic link produces a relative path.

ln -s “$3/usr/share/zoneinfo/Europe/Dublin” “$3/etc/localtime”

would create a symlink to /Volumes/Macintosh \HD/usr/share/zoneinfo/Europe/Dublin instead of creating a symlink to /usr/share/zoneinfo/Europe/Dublin

in my case it looked like the postflight wasn’t executed at all, and I did check if the .sh was executable.

Going back to the netrestore post-action script, which I prefer in my case since I’m trying to keep as much scripting as I can outside of the InstaDMG build train, I tested with Geoff Lee’s code, provided in my previous post, and it is almost perfect, there is just one line of code to correct here and it applies to the symlink.

Instead of the line below, which creates a symlink to /Volumes/Macintosh \HD/usr/share/zoneinfo/Europe/Dublin

[code]## Set timezone by creating a symbolic link
ln -sf “${target_volume}/usr/share/zoneinfo/${timezone}” “${target_volume}/etc/localtime”[/code]

Use this one:

[code]## Set timezone by creating a symbolic link
ln -sf “/usr/share/zoneinfo/${timezone}” “${target_volume}/etc/localtime”[/code]

Note that ${target_volume} has been removed.

I did test and verified with ls -la /etc/l* and now /etc/localtime its symlinked where it should

Again, thank you all for your input with this issue.

[eric_csm]

[b]update[/b], packaging the NTP and timezone changes and running it within InstaDMG doesn’t work for me.

I’ll test with the neat Netrestore post-action script which Geoff Lee kindly sent me this morning.

[code]

#!/bin/bash
## To be run as a netrestore post-action script ##

target_volume=${1}
timezone=’Europe/Dublin’
timeserver=my.timeserver.ie

if [ -z “${target_volume}” ]
then
echo “No target volume supplied.”
exit 1
fi

## Remove trailing slash from target_volume (if there is one)
target_volume=`echo ${target_volume} | sed ‘s/\/$//’`

## Set timezone by creating a symbolic link
ln -sf “${target_volume}/usr/share/zoneinfo/${timezone}” “${target_volume}/etc/localtime”
if [ $? != 0 ]
then
echo “Setting timezone to ${timezone} failed”
exit 1
fi

## Create an appropriate ntpd.conf file
echo “server ${timeserver} iburst” > “${target_volume}/private/etc/ntp.conf”
## Update the hostconfig file to use NTP
sed -i .bak ‘s/TIMESYNC=-NO-/TIMESYNC=-YES-/’ “${target_volume}/etc/hostconfig”

[/code]

[eric_csm]

To avoid running the package on startup, following the example provided by Pete Akins in https://www.afp548.com/forum/viewtopic.php?showtopic=20328, I have created a package with the following modified files:

/private/etc/hostconfig

[code]
AFPSERVER=-NO-
AUTHSERVER=-NO-
AUTOMOUNT=-YES-
NFSLOCKS=-AUTOMATIC-
NISDOMAIN=-NO-
TIMESYNC=-YES-
QTSSERVER=-NO-
WEBSERVER=-NO-
SMBSERVER=-NO-
SNMPSERVER=-NO-
[/code]

/private/etc/ntp.conf

[code]server.time.euro.apple.com[/code]

/Resources/postflight.sh

[code]
#!/bin/sh

ln -s /usr/share/zoneinfo/Europe/Dublin “$3/etc/localtime”

exit 0

[/code]

I will test the build tonight and let you know if it works.

Eric

[eric_csm]

[quote]International: enable character palette and show input menu in menu bar[/quote]

Hi Knowmad,

which item should I add in WM to gain access to the international settings? I tried adding /S/L/CS/ManagedClient but no luck with that one…

tried also with “/S/L/CS/Language Chooser” but WM is not allowing me to add it

Eric

[eric_csm]

Thanks Patrick,

does this code look allright to you?

[code]

#!/bin/sh

###Postflight script to set time zone and start NTP (Leopard)

###Set variables
systemSetupLocation=”/usr/sbin/systemsetup”
timeZone=”Europe/Dublin”
networkTimeServer=”time.euro.apple.com”

###Set time zone, set time server, start NTP
$systemSetupLocation -settimezone $timeZone
$systemSetupLocation -setnetworktimeserver $networkTimeServer iburst
$systemSetupLocation -setusingnetworktime on

[/code]

[eric_csm]

This morning I created a new account to continue testing, and to check its records against an old account records.

Alas I decided to retest one of the old accounts by unchecking the “access account” checkbox, refreshing… and now the changes are stored! I closed WM, reopened it, went to the account and yes, the setting isEnabled=1 gets stored properly.

Although I’m happy that this is working again, I’m now even more worried since I don’t have the slightest clue of why or when the problem decided to disappear.

Questions arise:

Was creating a new account the trigger to get the cogs turning again?
Which entries should I look for in the logs for finding more about what really happened?

I’ve found that the ODR’s were promoted in June ’07 (I took over the systems in Sept ’07), then should I really worry about the LastSyncFailedAttempt2007-08-28T16:09:28Z or is just a timestamp that reflects the date when the ODR were promoted? This key is found at the WM inspector > Config > passwordserver > passwordserverlist. The ApplePasswordServer.Replication.log shows recent activity:

Apr 18 2008 09:30:56 SYNC PULL: providing data to 192.168.175.101 after 04/18/2008 09:25:13 AM
Apr 18 2008 09:30:56 SYNC PULL: updating 307 records
Apr 18 2008 09:31:09 SYNC PULL: providing data to 192.168.175.103 after 04/18/2008 09:25:50 AM
Apr 18 2008 09:31:09 SYNC PULL: updating 306 records
Apr 18 2008 09:31:46 SYNC PULL: providing data to 192.168.175.102 after 04/18/2008 09:25:24 AM
Apr 18 2008 09:31:46 SYNC PULL: updating 306 records
Apr 18 2008 09:33:57 SYNC PULL: providing data to 192.168.175.104 after 04/18/2008 09:25:42 AM
Apr 18 2008 09:33:57 SYNC PULL: updating 308 records

I am still worried about the /var/db/authserv/ sync files cleanup. As per my understanding there is a process in place that is in charge of cleaning up these files periodically.

[eric_csm]

Hi MacTroll,

Thanks for your quick reply

I have 4 ODR’s. All the machines are 10.4.9.

I’m afraid I’m hands tied when it comes to test out the OD without the replicas.

I can’t simply stop them since these are providing other services too.
Getting the SASL port temporarily disabled for the ODR machines at the main firewall, not easy, the network admin is quite busy and won’t be able to do that for me in the near future.
I don’t know if demoting them to standalone will be a good idea given the current state of the OD.

What would you suggest to test the OD without the ODR without disrupting other services?

Regarding the DNS problems… somebody has suggested me that these come by having a Windows DNS server as a nameserver for the zone… this is in fact the case my OSXS 10.4.9 DNS server has a Windows 2003 Server in its nameserver list.

[Author]

Posts