[withayanda]

Yes, we have OSX Server in place, but I’ve been told to recommission the Mac Pro that it’s on back to a workstation. What’s stopping me? Office politics.

I’m having a bit of difficulty in understanding what the difference is between these 3 products. It does seem as though you can’t manage MCX settings with EZIP.

[withayanda]

I’m just too uneasy about installing this remotely, so I’m going to take your advice and go on-site with an image on a FW drive.

The only question that I have now is what’s the best way to create an image that you’ve created on one particular machine, say a Powerbook, but need to install on an Xserve (both PPC)? Will ASR take care of the hardware differences automatically when I create the image (of course booting from a different startup disk)? Or do I have to use something like CCC to copy everything, remove the hardware specific stuff, and then create an ASR image out of that copy? I worry about this part because I’ve noticed that Netboot/Netinstall ask you to specify targeted hardware.

Sorry for all of the amateur questions, but I’m coming from quite a few years in the Linux & Solaris world. Some of these Mac-specific details escape me.

[withayanda]

Now that you mention it, that doesn’t make sense. It’s authenticating against the SASL Password Server. Mea culpa.
So I really do have 2 separate issues here: needing to rebuild Kerberos and needing to redo Samba. Yes, I need to rebuild Kerberos because there aren’t any service principals, most of the configuration files are now absent, and I would like to go back to using Kerberos for the Macs here.
Would the rest of my thought process be true with that one exception?

[withayanda]

Thanks for the response, Josh. Here’s a log of the latest attempt. I let mkpassdb run for 30 minutes before finally killing it. If it matters at all, there are only about 40 users defined on this.

2006-05-02 13:27:28 -0400 – slapconfig -kerberize
2006-05-02 13:27:38 -0400 – command: /sbin/kerberosautoconfig -r EXAMPLE.COM -m server01.example.com -u -v 1
2006-05-02 13:27:38 -0400 – command: /usr/sbin/kdcsetup -f /LDAPv3/127.0.0.1 -w -a diradmin -p **** -v 1 EXAMPLE.COM
2006-05-02 13:27:44 -0400 – kdcsetup command output:
Contacting the Directory Server
Authenticating to the Directory Server
Creating Kerberos directory
Creating KDC Config File
Creating Admin ACL File
Creating Kerberos Master Key
Creating Kerberos Database
Creating Kerberos Admin user
WARNING: no policy specified for diradmin@EXAMPLE.COM; defaulting to no policy
Adding kerberos auth authority to admin user
Creating keytab for the admin tools
Adding KDC & kadmind to launchd
edu.mit.kadmind: Already loaded
Adding the new KDC into the KerberosClient config record
com.apple.kdcmond: Already loaded
AddKDCToConfig: KDC is already present in record
Finished
2006-05-02 13:27:44 -0400 – command: /usr/sbin/sso_util configure -r EXAMPLE.COM -f /LDAPv3/127.0.0.1 -a diradmin -p **** -v 1 all
2006-05-02 13:27:45 -0400 – sso_util command output:
Contacting the directory server
Creating the service list
Creating the service principals
kadmin: Incorrect password while initializing kadmin interface
kadmin: Incorrect password while initializing kadmin interface
kadmin: Incorrect password while initializing kadmin interface
kadmin: Incorrect password while initializing kadmin interface
kadmin: Incorrect password while initializing kadmin interface
kadmin: Incorrect password while initializing kadmin interface
kadmin: Incorrect password while initializing kadmin interface
kadmin: Incorrect password while initializing kadmin interface
kadmin: Incorrect password while initializing kadmin interface
kadmin: Incorrect password while initializing kadmin interface
kadmin: Incorrect password while initializing kadmin interface
kadmin: Incorrect password while initializing kadmin interface
2006-05-02 13:27:45 -0400 – sso_util command failed with status 2
2006-05-02 13:27:45 -0400 – command: /usr/sbin/sso_util configure -r EXAMPLE.COM -f /LDAPv3/127.0.0.1 -a diradmin -p **** -v 1 ldap
2006-05-02 13:27:45 -0400 – sso_util command output:
Contacting the directory server
Creating the service list
Creating the service principals
kadmin: Incorrect password while initializing kadmin interface
2006-05-02 13:27:45 -0400 – sso_util command failed with status 2
2006-05-02 13:27:45 -0400 – command: /usr/sbin/mkpassdb -kerberize

[Author]

Posts