[haxie]

Were you ever able to resolve this issue?

I am having similar issues with my Tiger server and some VoIP hardware on my internal network. When I allow all traffic through the firewall the VoIP talks fine with the SIP server and I can process my audio and video calls just fine. When I only allow the traffic I want through the firewall that communication fails.

I have UDP Port 5060 open as per the devices documentation and UDP ports 10000 – 20000 as per customer supports help desk advice, but still no dice. If I disable the last advanced rule 65341 (it think) communication then works again, so I am pretty confused. i have opened these ports up, which I am assuming should allow access through the firewall, but for some reason this last rule keeps being used.

Does anyone have any suggestions as to what I am doing wrong here?

thx,

haxie

[haxie]

thanks for your reply…

I guess I always likened copying a file from a server share to the local drive like copying a file from a drive or other source to a location that I have write access to on my local machine – which will give the file the UMASK of the machine.

I have content that I am sharing out to my OD users that I don’t want them to be able to change on the server, so i gave these users Read only access. However, once the content reached their machines they were having troubles using it because they needed write access to the folder structure, which I assumed they would get as the Owner of the file once it reached their machines. How do you protect your content on your server from being inadvertently changed by your user base, but still give them the permissions they need to use it on their local machine, without telling them to go monkey with the downloaded file permissions? (the content they are downloading is a large folder structure with many sub folder filled with various files).

And here I though I had a good handle on permissions structures —
😕

shows what I know…

thx for your help,
haxie

[haxie]

My Issue has mysteriously disappeared… Last night I was tyring to trouble shoot the issue, and it seemed that when the airport card was turned off and no cable was plugged into the built in enet port, that the login would hang for a minute. When i turned airport on (but didn’t connect to a wireless network – still with no network to the built in enet) the login worked just fine. This seemed to work consistently… Turn the airport off and have no other network connection to the machine, the login would take a minute to complete. Turn aiport back on (with or without connection to a wireless network) or plugin a cable to the built in port, login would work fine. I left it at that and then went to bed…

This morning, I have been trying the same tests (after a reboot) and it doesn’t seem to matter if airport is on or off, connected or not, the login works fine??? I haven’t changed anything, except I did disable and then re-enable the LDAP server profile in Directory Access of the client laptop…

I believe that it must be something to do with DNS as well, but for whatever reason, the problem has resolved itself (the type of solution I hate…)

Anyway, I will keep testing. If you have any ideas on this phenomenon, I would love to hear them. I will try the /etc/hosts trick if the problem returns.

Thanks
haxie

[haxie]

Is the share automatically mounted on the client system?

If so here is a applescript that will handle creating the alias to the share… you could run this as a login hook. Open the script in Script Editor and then copy and paste this code into it.
Read the comments, you will need to change the path to the folder on the share you want an alias to. After you have changed the path, then save the script as an application, which you can then assign as a login item, or script with a login hook. post back if you don’t understand something or if you have troubles getting it to work…

(* 	written by: kdahlin
	Date:		10/24/05
	
	need the path to where the remote share is mounted on the 
	system.  The path needs to be a "Finder" type path, or 
	seperated with ":".  If the share is mounted in /Volumes, then
	 the path would be 
	 "ShareName:Path:To:SubFolder:You:Want:an:Alias:to"
	 
*)

-- replace the path below with the one to your share and subfolder
property remoteSharePath : "TestShare:TestFolder:TestSubFolder" --  <- change this path


tell application "Finder"
	-- get the path to the current users home folder
	
	set homeDirDesktop to home as string
	set homeDirDesktop to homeDirDesktop & "Desktop:" as string
	
	-- check if alias already exists, otherwise a duplicate will be made...
	
	(******  ATTENTION you need to change "TestSubFolder" to the name of the folder you are aliasing or to the name of the alias you are creating *****)
	if exists homeDirDesktop & "TestSubFolder" then
		
		-- if the alias exists, we don't do anything - quit
		log "Alias already exists"
		quit me
	else
		
		-- create the alias on the desktop
		try
			make new alias to remoteSharePath at folder homeDirDesktop
		on error
			log "failed to create remote share alias"
		end try
		
		-- you can also choose to name the alias something else with this code:
		-- make new alias to remoteSharePath at folder homeDirDesktop with properties {name:"Whatever name you want for the alias"}
		-- if you want to use this code instead, replace the line:
		-- make new alias to remoteSharePath at folder homeDirDesktop
		
		
	end if
end tell

hope this helps,

haxie

[haxie]

Thanks MacTroll…

Tried changing to the OD Server IP address in Directory Access, but it is still taking a minute + to login when the machine is offline. It takes about 3 seconds to login when the machine is online.

The time it takes to login offline is very consistent, seems to be 1:03 each time.

Thanks for the fast response and the ideas…

Regards

haxie

[haxie]

I am using the FQDN for the OD server in Directory Access, and the machines can resolve that address forward and backward just fine. Client login while connected to the network is very fast. The issue I am having is when I disconnect the client machines (laptops) from the network and try to login. The login process seems to stall at the login window and then takes about a minute before it finally finishes logging the user in?

Thanks for the fast response..

regards,
haxie

[haxie]

I have been researching this issue in more depth and have found that it is not possible for a user account to have more than one home folder path… So I think I am going to change my setup to have an OD Master server in each site. The one thing I lose with this setup is the ability to sync user/group/computer pref and mcx changes between the servers. Is there a way to still have changes made to these settings on one of the machines sync with the other?

Thanks

haxie

[Author]

Posts