[stepansae]

[QUOTE][u]Quote by: ybekkering[/u][p]For example I want to make it possible to the clients that the can’t use USB-sticks, but the can access the CD/DVD. I also want to control their dock and the applications they may use. And I want to control their access to the system preferences (the only can manage background and screensaver).

Is it useful to install WGM 10.5 local and then go with WGM 10.5 to their local dir and create the proper managed prefs (and then delete the program WGM 10.5) of can I edit the files in the library/managed preferences on the MacHD ?

Or just use parental controls (they are adult users, so isn’t that a bit strange ?).[/p][/QUOTE]

Better install Mac OS X server and manage your clients from the server (WGM & OD). If you don’t have you managed preferences centralised, you will have to deal with every single machine individualy. When you useres start complaining that they need this particular SW to run, you will have to update this manualy on every single workstation.

Parental controls will not provide you with all the features of WGM.

Stepan Raichl

[stepansae]

[QUOTE][u]Quote by: ybekkering[/u][p]I have a OSX 10.4.7-server and lots of OSX 10.4 clients. However, I want to setup 25 MacBooks for mobile users. On the MacBooks is 10.5.

I want to setup the MacBooks with 3 users: root (for special occassions), admin (for installing needs) and a standard user. The standard user has to be controlled by managed prefs.
I don’t have 10.5 server.
My own MacBook also runs 10.5 and I use WGM and so on to administer my 10.4.7-server.

Here are my questions:
– is it smart to download the admin tools for 10.5 and then use WGM to manage the prefs locally on the MacBooks ? Can I run more versions of WGM ?

I got both 10.4 and 10.5 servers and clients and so far I discovered that no. Using 10.5 WGM on 10.4 doesn’t fully work for me. You can still manage enven 10.5 clients with your 10.4

– is it better to use just the parental controls ?

What are actually your objectives?

– is there another way to go deeper in the managed prefs of the MacBooks ?

What do you mean? You can add any com.apple setting using WGM even if it is not in the GUI.

Stepan Raichl

Any tips are welcome !

Kind regards, Y Bekkering, NL[/p][/QUOTE]

[stepansae]

Which login does not work? On the server direcly, using ssh, or over RD?

Stepan

[stepansae]

[QUOTE][u]Quote by: jerkyjerk[/u][p]You said performance isn’t great across 4 drives and you are currently using 8 drives. Using 8 drives do you a see a difference at all between 4 and 8? or is it just a marginal difference?

Thanks for the feedback s

jerky[/p][/QUOTE]

Huge difference. I don’t exactly remember the measured values before expanding to 8 drives, but was something about 3/5 of performance of 8 dirves now (ending at 310MB/s read with 1/3 of the array size free (tested with simple AJA Kona Test, all 8 drives are WD Raid Edition 2)).

Im using this array for network home directories of about 700 users. I have noticed that Rocket Raid performs satifactory for video aplications (final cut), but multiple read and write situations lack performance. XRaid in my scenario performs better (we have some campuses with Xraid, hence the comparison).

s.

[stepansae]

I have that one running for about 2 years now, and can’t complain. WWW interface is not great, CLI would be nice sometimes, Performance across 4 drives in RAID 5 is not great. I run 2.6 TB RAID 5 array across 8 drives. I had one HDD failiure and recoverd from that without a single problem.

s.

[stepansae]

This really did not make much difference, but at least now I know more about the BIND on OS X.

What made another huge difference was update on my other OS X DNS servers (forwarders) and then after 2 days the performance shoot up.

[stepansae]

coincidently, apple has released 10.4.9 server update yesterday. BIND was updated to 9.3 and update description stated that unusually long lookup times have been fixed …

I did update and my issue gone better … but I’m still not happy, I’m still looking into the way how to change NS to those provided by my ISPs ….

[stepansae]

Hi All,
you were no help 🙂 but I found finally solution … So in case someone has decided to take the same path as me:

Now I know that EAP-TLS does not support passwords (!) so that method is useless for me.

A sollution is to use EAP-TTLS with PAP. My posted configuration is correct, only connection method is different. On OS X 10.4.8 when connecting to WiFi instead of Automatic select “TTLS-PAP” and enter username and password.

freeRadius binds to LDAP with WiFi user username and password so if the user is disabled ie via WGM, bind fails and user is not granted WiFi access.

So in my scenario, students will be using TTLS-PAP and members of staff can still be issued personal client certificate and enjoy EAP-TLS.

More details about auth. protocols on http://deployingradius.com/documents/protocols/compatibility.html
thanks to Alan Dekok.

Stepan

[stepansae]

Hi,

What about FreeRadius?

You can compile for Tiger …

I use it for WiFi authentification, but it doesn’t matter, will work with CISCO VPN as well.

[stepansae]

Hi Ylon,

I use very cheap hardware solution …

HighPoint RocketRAID + 2x 4xMultilane SATA cables + cheap SATA HDD external enclosure (for up to 8 drives) fited with SATA hard drives.

I got RAID5 accross 8 drives but I originaly started with 4 only and expanded later …

Array is mounted like any other external drive, and I don’t have to worry about any NFS or other connections to another machine.

One might find a drawback in a fact that RocketRAID has only WEB based managment.

I got the card in G5 Xserve but I also tested it on standard tower G5 …

[stepansae]

So let me reply to myself 🙂 …

Rebuilding the directory stucture using TechTools Pro (same process using other similar SWs destroyed everything:-) sorted out the issue on 2/3 of our computers …

If you have any idea regarding the cause (maye because I have broadcasted the images? (those need to be differently prepared than the usual images)) please let me know. Thanks …

[Author]

Posts