[rfn]

[QUOTE BY= rcr]
Is Apple’s documentation just flat out wrong here, or is there a piece of the puzzle missing?
[/QUOTE]

This made me wonder too the first time I tried it. The documentation is just wrong. You don’t have to edit a lot of files, it’s just the wrong file that they’re referencing.

When you add a domain as a virtual host is should only be listed in virtual hosts in Server Admin. No domains should be listed in both local hosts and virtual hosts.

Then, when the domain is in virtual hosts, you should fire up the terminal and type:

sudo pico /etc/postfix/virtual

In this file you enter the accounts like this:

alias@virtualhost user

As an example, if a user on your system was called bob and was supposed to receive mail for the address [email protected] then you would write:

[email protected] bob

domain.tld should of course be a domain in the virtual hosts list.

When finished writing all the aliases you type these too commands:

sudo postmap /etc/postfix/virtual
sudo postfix reload

That’s it. For more information you should read the file /etc/postfix/virtual.default.

[rfn]

Regarding DNS: The server is working behind a router with NAT, so it has a local IP called 10.0.0.5 and that is what I wrote in Network in System Preferences.

I have just wiped the server agan (I have done that a LOT of times) and now it works, but it has worked sporadically before and then just stopping.

I can now log on to the server and it automatically mounts the networked home-folder. With the Kerberos.app I can see that I have got a ticket. SSH also works without a password.

This is great, but I’m not completely sure that everything is right yet. Here you can see the contents of edu.mit.kerberos:

# WARNING This file is automatically created, if you wish to make changes
# delete the next two lines
# autogenerated from : /LDAPv3/127.0.0.1
# generation_id : 1265068861
[libdefaults]
default_realm = G4SERVER.RFN.DK
[realms]
G4SERVER.RFN.DK = {
kdc = g4server.rfn.dk
admin_server = g4server.rfn.dk
}
[domain_realm]
rfn.dk = G4SERVER.RFN.DK
.rfn.dk = G4SERVER.RFN.DK
[logging]
admin_server = FILE:/var/log/krb5kdc/kadmin.log
kdc = FILE:/var/log/krb5kdc/kdc.log

The client has the same values, now that it works.

The system.log shows this after startup:

May 26 18:52:51 g4server mDNSResponder: Update _kerberos._tcp.G4SERVER.RFN.DK. refused
May 26 18:52:51 g4server mDNSResponder: Registration of record _kerberos._tcp.G4SERVER.RFN.DK. type 33 failed with error -65553
May 26 18:52:51 g4server mDNSResponder: Update _kerberos._udp.G4SERVER.RFN.DK. refused
May 26 18:52:51 g4server mDNSResponder: Registration of record _kerberos._udp.G4SERVER.RFN.DK. type 33 failed with error -65553
May 26 18:52:51 g4server mDNSResponder: ERROR: Only name server claiming responsibility for "_kerberos.g4server." is "."!

slapconfig log show this:

2005-05-26 17:54:45 +0200 – command: /usr/sbin/sso_util configure -r G4SERVER.RFN.DK -f /LDAPv3/127.0.0.1 -a diradmin -p **** -v 1 ldap
2005-05-26 17:54:46 +0200 – sso_util command output:
Contacting the directory server
Creating the service list
Creating the service principals
WARNING: no policy specified for ldap/[email protected]; defaulting to no policy
Creating the keytab file
kadmin: No entry for principal ldap/[email protected] exists in keytab WRFILE:/etc/krb5.keytab
Configuring services
WriteSetupFile: setup file path = /temp.h8wO/setup
Cleaning up
2005-05-26 17:54:46 +0200 – command: /sbin/kerberosautoconfig -u -v 1
2005-05-26 17:54:46 +0200 – kerberosautoconfig command output:
The machine is standalone
Removing /Library/Preferences/edu.mit.Kerberos
2005-05-26 17:54:46 +0200 – kerberosautoconfig command failed with status 255
2005-05-26 17:54:46 +0200 – command: /usr/sbin/mkpassdb -kerberize
2005-05-26 17:54:46 +0200 – mkpassdb command output:
kadmin.local: unable to get default realm
kadmin.local: unable to get default realm
2005-05-26 17:54:46 +0200 – command: /usr/sbin/vpnaddkeyagentuser -q /LDAPv3/127.0.0.1
2005-05-26 17:54:48 +0200 – slapconfig -setldapconfig
2005-05-26 17:54:48 +0200 – command: /usr/sbin/mkpassdb -setreplicationinterval 86400 SyncAnytime

[Author]

Posts