Disclaimer- this is not a comprehensive backup plan.. this could be part of one- but it’s not complete…
It would be MUCH better than nothing though 🙂
At minimum, user SuperDuper to do automated nightly smart-backup (incremental vs erase/backup) to an external firewire drive.
Event better, do the same to more than 1 drive.
To backup OD automatically requires a script…. Unless you have frequent updates to your users/groups, why don’t you just make regular dumps via serveradmin (to a folder on your boot drive) then these dumps will be backed up with your clone routine.
I you are concerned, then boot from another volume when you make the clone… then you are sure that all files are not active.
There are many ways to do this- one option, you could boot from your installer CD and use Disk Util to clone (it’s called Restore in Disk Util)
That said….
I’ve never had an issue with a cloned OD Master, even when the clone was made while the system was live.
That’s not to say it won’t happen to you though 🙂
You are making backups of your OD (ldap) database, right?
You backup scheme should contain several layers…. app/db dumps, raid/mirror, clones, offsite
There are 100 ways of doing this… so I can’t say what is best for you.
Clones can save your butt.. you should be cloning at least 1 generation and ideally 2 or 3 generations of the OS so you have fall-back options.
Additionally, dump your OD (ldap) database and any other DB files on a regular schedule.
The best advice I can give you is to clone your drive(s) to another volume(s).
This allows you to roll-back should there by any issues with the update.
[b]You should be cloning for alot of reasons
[/b]It’s best to stop services during the clone, but not required….
Carbon Copy Cloner is nice/free but might leave you with more questions.
SuperDuper is easier and has a nice friendly (green or red) feedback after the clone is done.
The defaults in either program are fine.
Better late than never….. If you’re still having this issue, you’ll need to share your config for an assist. Please post the unmodified output of the following command run from Terminal:
postconf -n
Also, I’m assuming web and mail are on same machine..?
Of course, imap needs to be enabled on your server.
You need to add an account to /etc/imapd.conf which IS main ebaled (in WGM, mail is enabled). Neither root or the cyrusimap user would have mail enabled, so they won’t work.
It’s also a good idea not to use a real mail account (one which a person uses).
So here’s a suggestion.
In WGM, add a non-admin user ‘SirAdmin’, give it a password and make sure mail is enabled for that user.
in /etc/imapd.conf change:
admins: cyrusimap
to
admins: cyrusimap siradmin
Stop/Start mail service
Then you should be able to use SirAdmin with your new siradmin account.
Your other question, about enabling SMTP Auth.. Look in ServerAdmin
Mail:Settings:Advanced:Security
You will see checkboxes to enable SMTP Authentication.
I have several client using BEFVP41 routers with IPSecuritas 2.1
This setup has been very reliable, more reliable than the OS X Server’s VPN service.
According to one client, the connection is significantly faster when transferring files (AFP) over VPN using the Linksys/IpSecuritas vs Built-in VPN Server (PPTP).
If you want screen-shots of the router and IPSecuritas settings, contact me on email or iChat at jdj_at_mac.com
Recent Comments