[fherbert]

Looking at my own ~/Library/Preferences/com.apple.SoftwareUpdate.plist, it has the same values as the one you mentioned, so I don’t think that is an issue.

You can try to manually see what updates your software update server is advertising by browsing to the page at : [url]http://your.softwareupdate.server:8088/index.sucatalog[/url]

Check this xml data for the update you are expecting your client to get. Also note that even though you may be setup to use the internal software update server, for some reason (maybe for security or whatever – maybe someone else could explain) the software update process still seems to connect to apple to see what updates it requires. So if you are blocking this somewhere on your network, this could be why your client is not “seeing” the 10.4.7 update.

Hope this helps.

[fherbert]

You could check out peachpit, they publish the Apple Training Series books which is essentially the material you get in the manuals when sitting the apple courses…
here

It may pay to shop around to get the best price.. amazon is usually a good start. The book linked to above basically covers 2 exams(Directory Services Integration and Administration and Security Best Practices for Mac OS X v10.4) required for ACSA.

[fherbert]

You may find that the userid for the 10.3 users does not exist – or does not relate to the correct user for some reason on the 10.4 server… only thing I can think of at the moment.

You can quickly check this out by opening terminal and getting a directory listing of the /Users/ folder (ls -la /Users/) to see who has been assigned ownership of each user folder. If you see a number instead of a name, then the userid – username has gotten out of sync for some reason during the upgrade. You can double check what the userid should be by viewing the list of users in workgroup manager and check the userid field next to the username in the userlist on the left hand side.

Have a look at that and see if this is causing your problem.

[fherbert]

You probably want to check your time as well. Make sure you are using your domain controller as your ntp-server, it will save you lots of trouble.

Also have a look at your log files, use the console utility found the /Applications/Utilities folder and check your system.log for any errors with directory access or active directory. It might help if you post some of your log files (only the part with the error messages).

I wouldn’t recommend moving the order of your local netinfo authentication, but remember if you have a local user with the same short name as a network user short name, it will login as the local user not the network user.

[fherbert]

I would have thought removing the ldap entry in directory access would have sorted that out.
You could also try opening netinfo on your laptop and deleting the mcxcache entry???
I take it you still want to use AD to authenticate?? Otherwise you can delete the /etc/krb5.keytab file (I think thats what its called).

At any rate, deleting the mcxcache entry in netinfo should force a refresh of the mcx settings.

You might also want to check the authentication tab of directory access and make sure the workgroup manager is not still there. If it is, delete it.

[fherbert]

A quick google search found this page: here

Then to use it, you will need to place it somewhere on your web server. maybe in the root directory, then configure your clients to use it.

Ie. if you place proxy.pac into your root web server directory and the web address for your web server is my.webserver.com then you would configure your clients to get the pac from http://my.webserver.com/proxy.pac

[fherbert]

Have you checked your system.log for any more detailed errors?

[fherbert]

You may be able to use ssh to run the script remotely using the softwareupdate command line tool. I haven’t tried it, but it should work with the software update server settings.
Something like this should do it:

softwareupdate -i -a

You could set it up as a cron job (or even using launchd) so it does it on a schedule. That way it could always be run as root.

[fherbert]

I agree, all of my restore images are created on the latest and greatest machine. Haven’t had any issues yet.

[fherbert]

I had the same sort of problem.. check this post for details: here

[fherbert]

I have modified my /etc/sudoers file but this still does not allow me as an admin to perform a restart from the command line. I believe I may need to modify /etc/authorization section “system.restart”. I have searched the web for any decent documentation on what exactly the “RestartAuthorization:restart” and other mechanisims are, but I am unable to find any info. Does anyone know how I can modify (or If I have to) /etc/authorization in order to allow an admin user to restart from the command line?

[fherbert]

Hi

Reading John De Troys Tips And Tricks 12.1b available here tells you what you need..

Page 31 tells us this:
[QUOTE]
The settings made are applied through a ‘chain of command’ with the settings for an individual user account having the highest priority, followed by computer account settings and finally by workgroup level settings.[/QUOTE]

[fherbert]

Yes, I’ve just read the new AD-OD paper with the section on using dscl for setting up the search path. I did check the man page for dscl but didn’t see any examples or stand out way to modify the search path…. I guess using dscl would be the better way??

[fherbert]

Excellent, that article explains all my questions.

Thanks.

[fherbert]

You can use the ‘defaults’ command as one way around this..

For the search path:

defaults write /Library/Preferences/DirectoryService/SearchNodeConfig "Search Node Custom Path Array" '("/Active Directory/All Domains")'

And for the contacts path:

defaults write /Library/Preferences/DirectoryService/ContactsNodeConfig "Search Node Custom Path Array" '("/Active Directory/All Domains")'

These settings will be available in Directory access after a restart. Take note that they will be accepted, even if that directory node is not configured/existing.

NOTE: This will remove any existing custom contact and search node path you have..

Let me know how you get on.

Cheers

[Author]

Posts