[stmoddell]

thank you.

any idea if this will clear up my inability to get certs to work for vpn (client… server will accept a vpn server cert, but can’t get client to recognize any kind of cert for vpn)

[stmoddell]

any chance you’d provide ‘how to’ instructions, or point at some existing documentation on this?

thus far i found key chain access to work fine for creating the CA, ssl certs, and vpn server cert. Where it has all fallen down is trying to get cert to work on vpn client. From what i’ve been able to find online, it looks like no one is using certificate enabled VPN.

to clarify, I’ve been able to enable server side use of certificates on VPN, but unable to get client side to recognize any kind of certificate for use with VPN.

[stmoddell]

solved this issue, at least functionally. resolution posted on apple discussion forum
http://discussions.apple.com/thread.jspa?messageID=7434613#7434613

[stmoddell]

Should have posted this to general questions, not web. Sorry.

cross posted question to there, if moderator wants to kill this thread, feel free.

st

[stmoddell]

http://discussions.apple.com/thread.jspa?threadID=1267288

[stmoddell]

I am experiencing similar issue, and posted hoping for a reply. Haven’t seen one yet.

———–bump———-

[stmoddell]

Howdy,

So it appears I’m having issue with the DNS entry for the PDC. I’ve set the server up to be a PDC after I configured my DNS. DNS appears to be fine for the internal domain.

My issue is that my XP clients can’t be added to the PDC because they can’t find it. I’m not running WINS, so there is apparently some DNS entry I need to make, but I can’t sort it.

I’ve got osx server 10.3.4. Running OD master, and set to be PDC.
Primary domain for DNS is internal.foo.com
machine name is leo
Windows domain is TOPS

The error on the Windows side is that the client can’t find _ldap._tcp.dc._msdcs.TOPS. But I’ve set up DNS zone for TOPS and it still errors out. Any clues? Any hints? Anything I should read?

All was well until I tried adding windows clients, but that is somewhat the job of this box…

[stmoddell]

Joel,

Thanks, but the problem is that I can’t even connect with MacManager. I think that when I recreated the file, I might have the owner/group permissions wrong, and/or I might have the file in the wrong location.

I’m unable finishing launching the Mac Manager App, because it tries to connect with the server, and is unable to do so.

If you could tell me how the dir needs to be shared, and located, I’ll try again.

thanks,
st

[stmoddell]

So my DNS config was not quite as correct as I thought. It had issues as it had come forward thru BIND 8 versions. Lacked some items that is should have had.

I diffed my files with the info provided here http://www.tester.kicks-ass.net/dns2/dns.php once I added what was missing I had much more luck.

[stmoddell]

Excellent news. I’m assuming that script is somewhere in the knowledge base? If you have the url handy, I will save it for future use. Assuming of course that Panther continues with that issue.

ST

[stmoddell]

Ah, well that assumes I can get Panther Server. It is a tough sell as my managers are not happy with how “difficult” 10.2 was to get to function, and its limitations were more than they had expected. Trying to get them to spend to get new version, which I’m sure will fix most of their concerns , is not going well.

ST

[stmoddell]

Howdy,

Saw that posting about the article, but can’t find it. Any chance of getting an url?

ST

[stmoddell]

This would prove very useful, as I have client machines that are laptops, and this sounds like the solution to them being on the net, and off the net.

st

[stmoddell]

I’m kicking this around as well, and am certain that I’ve fouled the permissions, as I moved the folder as root. What I need to know is what should the befault permissions be? Currently they are root and wheel.

If as you are disussing your troubles with setting up or using Groups folders, could you elaborate? Is it that Group folders are not created when you create them using WorkGroup Manager? or that users don’t connect to them by default and using the described dock features?

I’d love to wait for Panther, but not certain that I’m willing to spend more for the license.
😈 [/code]

[stmoddell]

Ok, dumping the plist for loginwindow. As I’m doing that I’m wondering if I’m running into issues because I don’t have DNS set up for this internal private part of my network yet? I usually set up DNS right away, but after having my ass handed to me by netinfo time and again, I was doing this slowly.

Getting all the updates, then starting to build the server side. hmmm, just wondering.

Okay, loginwindow plist was dumped, and nothing changed. I’m stumped.

[Author]

Posts