[ingenious7]

Thanks for your suggestion. We actually found the problem. I will have to consult our documentation on the problem but there was a line missing from the dhcpd.conf file which we had to edit from the terminal and add a couple lines that the OS had deleted but were required.

[ingenious7]

Thanks for your assistance. I re-established the automounts on my home directory shares by switching it off, saving, and switching it back on again (All in Server Admin > File Sharing).

Performance seems to be improved and when we get our OD replica set up an distribute the load of home directories things should be cruising.

[ingenious7]

All clients are authenticating through the ldap tree including notebooks so I would prefer not to use Guest access. It also seems to speed thing up with it turned off.

What would be the correct way to refresh the automounts? I am not sure how to do this.

[ingenious7]

More info – The server is a fairly new install and the person that did the work didn’t apply OS updates so I have updated to 10.5.2 Server, and AFP seems to be runnings much smoother, but I turn off Guest Access and some clients can log in, but the majority cannot. This surely couldn’t be client related could it?

[ingenious7]

Hi MacTroll

Yes I can manually authenticate and access network shares when Guest Access is switched off, but I still get the message saying that “this user account can not log in at this time”.

[ingenious7]

Hi Eric,

I have successfully been using Time Machine to back up all user data in advanced mode. It does a great job because of the frequency and the way it catalogues all of the data so it is readily available to restore.

I do not use it to back up the server operating system files. I use the third party SuperDuper! program to do a partition copy to external HDD once a week.

As far as I can see Time Machine is very stable in advanced mode.

[ingenious7]

We have just begun migrating our Mac notebook users to Mobile Accounts with PHDs. Originally the notebook users had a local account and connected to there network home on our sever to exchange files.

I wasn’t sure how to get the notebook to Sync with the local account at the creation stage of a PHD, so I manually copied everything that was different in the Local Home to the Network Home, and replaced the Network Home Library folder with the Local Home Library folder so all of their settings remained the same on the notebook and they didn’t have to get annoyed at changing their desktop background back to what it should be, etc.

We only have about 15 Mobile Mac users at the moment so it isn’t a big task like yours and I don’t know if their is an easier way for you to do it en mass.

[ingenious7]

I have found the solution, and it makes me feel a bit dumb, but at least I have learnt something I guess.

I am not exactly sure on how it works but from what I have read on the matter Leopard server is using Kerberos to do some level of MCX settings on a machine basis. I was using the Kerberos tool as someone mentioned on Apple Discussions to try and fix the problem, when I discovered that the reason it couldn’t do Kerberos correctly was that the time skew was too big. The system clock was out by two days!

We have been overhauling our network and introduced a new ntp server among other things and I had not entered this in on the image I created. As soon as I set the time correctly all managed computers in the lab were working correctly and applying MCX settings in the way I wanted.

I hope that this might help somebody with the same brain power as me!

[ingenious7]

I have ruled out the problem being related to the BootPicker program.

One other thing to note is that the Intel iMac that I set the image up on was a brand new machine that had not previously been managed by our network. Does Leopard server cache the computers and managed settings somewhere and can I flush these settings out.

[ingenious7]

OK, thanks I will check that out. I haven’t had it happen at all for the past week so fingers crossed!

[ingenious7]

I was maybe a little hasty in posting for help. I’ve given it a day, came back and did an unbind on the Leopard client I was testing with, (in Directory Utilities), and then went through the process to Bind to my OD and the computer is now coming up in the computer accounts like you said macshome and I can add it to a group. Seems strange that this would be changed from 10.4 Server to be much more involved, but hey, if it works, I’m happy. 😀

[ingenious7]

What is trusted binding and how can I set that up? Is it easy enough?

Thanks

[ingenious7]

My server is the Open Directory Master so that means they are using my directory I am assuming? I don’t really understand why it is not working. Could you elaborate?

[ingenious7]

Well, I’ve ‘cut my losses’ so to speak. My new Leopard Server Xserve arrive three days ago and I have most critical services up and running. 10.5 and 10.4 clients can both log in at speeds as if they were local accounts. Even the old G3s on Tiger are doing quite well ;). I am very impressed, but I still have an issue with my computer groups (albeit quite a different one). I’ve posted here if anybody thinks they are up for a challenge [url]https://www.afp548.com/forum/viewtopic.php?showtopic=19148&page=1#19148[/url]

[ingenious7]

Further developments.

Still haven’t got anywhere with the log in delay, but a little further with the preferences and MCX settings. Network accounts will not use the MCX managed settings I set in the WGM, yet any local accounts on the machine will. Is this related to the way Leopard now handles MCX settings and the new Parental Control features?

I never imagined something that was soooo simple in the past could be so complex and hard to set up now!

[Author]

Posts