Are there open directory "preferences" to configure NTP on client workstations?

A quick query, is there a way to set NTP settings for OD clients via preferences? or possibly a script that can be used to set the NTP server?
Thanks

If you have Apple Remote Desktop send this unix command.
systemsetup -setnetworktimeserver time.apple.com
Just change time.apple.com to your local time server.

Similar Messages

Do I need to configure Open Directory before I configure mail?

I am doing a slow step-by-step configuration of a new 10.6.2 box and I am marginally skilled. Before I migrate a handful of accounts from the old server to the new, I want to make sure mail services work on the new server. Later I would like to try experimenting with Open Directory. Since I will be creating local user accounts on the server to configure mail, will these migrate to Open Directory later or will I need to reconfigure the accounts? If the latter is true, it suggests I should install Open Directory first.
(I apologize if this belongs in another discussion group.)
Paul

I have discovered that the answer is that I do not have to configure Open Directory first. Found this on the OD discussion area:
http://discussions.apple.com/thread.jspa?threadID=2243066&tstart=0
Paul

My user's permissions are gone, open directory service was set to off

Mac Mini running OSX 10.9.2. OSX Server version 3.1.1.
I already repaired the disk permision via the disk utility, there was a lot that was wrong. I did not personally turn the open directory service off. I am able to turn the open directory service back on, but now it says "Unable to load replica list" and then promptly turns itself back off. It's almost like the service just lost all of it's settings, although the Status is green saying it is available at *******.******. before it switches off. Any ideas?

You can attempt a recovery. Follow these steps:
1: Stop Open Directory if it happens to still be running. This must be done using the command line.
sudo launchctl unload /System/Library/LaunchDaemons/org.openldap.slapd.plist
2: Run the db_recover tool and attempt to repair the damage.
sudo db_recover -v -h /var/db/openldap/openldap-data/
3:Reboot the server. Cross fingers.
R-
Apple Consultants Network
Apple Professional Services
Author "Mavericks Server – Foundation Services" :: Exclusively available in Apple's iBooks Store

Make Open Directory Users/Groups Administrators on Mac clients

I have setup a OS X 10.8 server with Open Directory and have 2 mac os x mountain lion clients. I would like for the user accounts I have created in the Open Directory to have admin access to the 2 mac client machines. How can I do this? I am new to OS X server. Is there a Group Policy type equivalent like in Windows?

Ah! Thanks! No wonder I cannot do this...
Unfortunately, the printers are all USB shared printers connected to computers on the network. Is there anyway to preset these printers? They don't show up in the Print manage settings at all.

Open directory server crashing every 30 days / clients unable to connect to calendar, contacts server

Hello everyone,
I am running an up to date Mavericks Server which serves exclusively as a calendar and contacts server for about two dozens devices. The server is reachable via DynDNS, however, the public IP hardly ever changes (only once or twice a year maybe). Tried setting the OS X DNS Server to serve "all clients" and "some clients".
For about 6 months (i.e. also under Mountain Lion), I am having a very strange problem. Roughly every 20-30 days, clients will not be able to connect to the server, instead getting a "wrong password" dialog. Restarting the open directory server will help for the next 30 days.
I have tried repairing the database as detailed here, however, the issue persists.
Any help would be highly appreciated!
I would have tried setting up a clean server installation, migrating calendars/contacts manually and re-adding all users by hand, however, I am not aware of an easy way to do so. The terminal command for calendar backup is broken under mavericks (might work with this workaround) and re-adding users manually would apparently involve correcting user UUIDs afterwards in order to match the migrated calendar data. Do you know of a better approach?
Thanks a lot!
DPSG-Scout

Hi Linc,
This looks the most relevant to me:
opendirectory.log
2014-03-11 11:13:09.460675 CET - 333.2628758.2628759 - Client: Python, UID: 93, EUID: 93, GID: 93, EGID: 93
2014-03-11 11:13:09.460675 CET - 333.2628758.2628759, Node: /Local/Default, Module: PlistFile - predicates with 'AND' are not supported
2014-03-11 12:09:00.296514 CET - State information (some requests have been active for extended period):
          Sessions: {
              28 -- opendirectoryd:
                          Session ID: 7BFBA6FE-A968-4399-A129-E3A5945E2A81
                          Refs: singleton
                          Type: Default
                          Target: localhost
          Nodes: {
              43 -- authd:
                          Node ID: 6D0E236D-6DBD-4E8C-BC01-B3F50C2C2D8E
                          Nodename: /LDAPv3/127.0.0.1
                          Session ID: <Default>
                          Refs: 1
                          Internal Use: X
an many more similar ones…
Thanks for your effort!

Are there diagrams of the internal configurations of ipods?

I'm looking for a diagram of the inside of a 3g ipod. Apple would charge too much to repair my ipod (its 3 years old and the repair is worth just as much as buying a similar functioning 3g on ebay). The controls don't work (with the exception of the hold switch). I want to open the unit and see if I can spot anything out of wack on my own.

Bump.

One Note documents on S/P 2013 are not opening/syncing with one note (2010) desktop clients

Hi,
We have S/p 2010 and S/P 2013 running in our company. we also have some computers with office 2010 and others with office 2013.
since a few days ago, the desktop one note apps are failing to open one note documents stored on S/P 2013. they can still access/sync oneNote docs on S/P 2010.
I can not trace back the problem to anything. and it happens to all stations having onenote 2010. the users running onenote 2013 are having no trouble with either S/P
Any ideas?
Thanks in advance

Hi Yiannis,
What was the error message when you opened the OneNote file from SharePoint 2013 in OneNote desktop?
I recommend to change the settings below in SharePoint document library where the OneNote file stores:
Turn off Required Check Out in the SharePoint Document Library.
Turn off Minor Versions in the SharePoint Document Library.
Turn off Required Properties in the SharePoint Document Library.
For detailed steps, please refer to the link below:
https://support.office.com/en-sg/article/Troubleshoot-errors-in-OneNote-40976dfa-818f-4e5f-b8fb-b0fbb9bf785a
If above cannot work, please check if the site in read-only mode.
http://blog.portiva.nl/2014/06/25/sharepoint-2013-site-stuck-in-read-only-mode/
If that is the case, then you need to ask your administrator to turn off read-only mode. However, if this is not an option, you can follow these steps in the link below to work around the issue.
https://support.microsoft.com/en-us/kb/2777002
Best regards,
Victoria
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Are there any known issues running MAC OS X 10.8.5 on my IMAC and MAC OS X 10.6.8 on my MAC Server?

Are there any known issues running MAC OS X 10.8.5 on my IMAC and MAC OS X 10.6.8 on my MAC Server?

To answer the obvious question. No. None that I've seen. But it may depend on what you mean exactly?
Connecting to file sharing service - None that I've seen
Connecting to Open Directory (assuming proper configuration) - None that I've seen
Using the Server's Mail Service (assuming proper configuration) - None that I've seen
I can say the same about anything else the Server may or may not be offering.

Open Directory groups not showing up in Windows

Hello,
we are using Open Directory on a Leopard 10.2 as a primary PDC for mac, linux and windows clients.
The Kerberos sign in works as expected, but we can not get any group created in the OD to be displayed (or selectable) from windows. All users show up, but no groups.
Anyone got an ides or the same problem?
Message was edited by: majs

Same problem here. On Windows client we see only domain users, no domain groups.
No solution yet.

Safari was very slow in opening up Google sites. I found a discussion thread that suggested changing the "Configure IPv6" setting to "Off" in the System Preferences, Network, Advanced, TCP/IP section. That seems to work well. Are there any risks?

Safari was very slow in opening up Google sites. I found a discussion thread that suggested changing the "Configure IPv6" setting to "Off" in the System Preferences, Network, Advanced, TCP/IP section. That seems to work well. Are there any risks to leaving the Configure IPv6 setting to Off?

Nope. You can always reverse that if you choose.

I need to change the display configuration of my macbook but I can't see to open the preferences (because the configuration is wrong!) - what can I do?

I need to change the display configuration of my macbook but I can't see to open the preferences (because the configuration is wrong!) - what can I do?

(cannot update previous post, exceeded timinout)
4. In case any of the previous operations work but the settings don't "stick". There are two plists associated with the settings:
/Library/Preferences/com.apple.windowserver.plist
~/Library/Preferences/ByHost/com.apple.windowserver.XXXXX-XXXXXXX.plist
The first is global to all accounts while the second is in your home directory. The X's are a sequence of hyphaninated letters and numbers. If you can get these removed then it will probably revert to a default resolution.

Open Directory Configuration Question

I've got a Mac-Mini based server running Mountain Lion (10.8.3) and Server.app (2.2.1). The server was migrated from Lion some weeks ago, the Server works OK, but seeing odd CPU usage and fairly frequent non-specific error reports which suggests that there are still a few odd gremlins lurking around that I'm trying to track down. So I'm trying to find things that appear odd. I've found one such in the reported configuration for Open Directory.
The server is configured to be an Open Directory master, and is the only Open Directory server we have. The panel for Open Directory in Server.app lists the single entry as follows:
* www.2gc.org (master)
* 10.0.1.2, 10.211.55.2, 10.37.129.2
The first IP address is the IP address of the server on our LAN. I have no idea what the second and third IP addresses are - they do not appear to have anything to do with any network we have configured. They are from the "private" address space - so I'm guessing they are non-functional since we don't have a network using either with these IP ranges within them - but they must have come from somewhere.
It is also not clear where / how these entries are set within ML.
It may be that this is all perfectly normal, or maybe symptomatic of something that can be cleaned up.
Would value any thoughts.
Thanks in advance.

Hi Simon
Thanks for the thoughts. There are no other servers on the network - this is an isolated computer parked on a fixed IP with no downstream LAN - the 10.0.1.2 address is the one assigned it by the router that connects it to the outside world - but no other devices are connected to the sub-net the machine sits on: all services are provided through the fixed IP to machines accessing it directly from internet via FQDN.
All of which makes the presence of the other two IPs curious, and apparently unnecessary.
Good housekeeping suggests they could be removed - but unclear how these entries are set. But in the interim good to know that the presence of these IPs is probalby harmless.

Open Directory Active Directory users want to know Is there a method?

Help
Open Directory Active Directory users want to know Is there a method?
Or can I make the Active Directory users to share on the Open Directory.
My goal is to use our school Mac computers with SSO

If I understand your question correctly, using Active Directory with OSX, there are a few ways this can be accomplished.
One way is by joining each Mac directly to Active Directory. This doesn't take advantage of the additional managed preference available to OSX, but does allow AD users to authenticate on OSX. On each machine, one would open System Preferences > Accounts > Login Options > Click Join next to Network Account Server. Follow the prompts and provide the domain name of your Active Directory deployment to join the system.
Another method is to follow the steps above, but only after extending the Active Directory Schema to support the OSX-specific managed preferences. It's a mostly harmless operation and means that you'll have a single administration interface for both OSX and Windows systems. The AD Schema information is available from Apple Support, but may also be readily available on the Internet.
Because our Windows team preferred to not change our AD schema any more than we already had, we used a different method. We created an Open Directory Master on one of our OSX servers, then we joined it as a member server to Active Directory. Next, we join all of our OSX workstations and laptops as members to the Open Directory domain instead of to Active Directory. This way, SSO still works. New user accounts are added to Active Directory and all managed preferences for OSX can be managed through the native OSX Workgroup Manager tool.
I think there are some instructions in the User Management PDF (Mac OS X Server, User Management, Version 10.6 Snow Leopard) or in the Advanced Server Admin PDF (Mac OS X Server, Advanced Server Administration, Version 10.6 Snow Leopard) but not completely certain. This page might have the docs.

Configure Open Directory using CLI

We have a Leopard Server in Advanced Mode.
If you have a fresh install of Leopard Server with nothing configured, is there a way to configure Open Directory to be an Open Directory Master completely using CLI utilities?
Wasn't able to find anything in Apple's PDFs

I agree with Dal78 Apple using a base DN of servername.example.com rather than just example.com is illogical. In fact originally they did seem to use just example.com as the format but in recent years now use server.example.com as the format. When I first encountered this change it was still possible to overridge the use of servername.example.com and force it to use just example.com as the format. In more recent times I have decided to leave things the way Apple do it.
I don't know if there is an official answer as to why, but a possible guess is that you can now have multiple Open Directory servers for a single domain. This is the 'Locales' option in Server.app. It maybe that including the servername makes it possible/easier to implement this.
I also agree Strontium90 do not use a .local root domain for Open Directory. In theory there are hacks to (sort of) get this to work, but Apple engineers will typically run screaming for the woods when they encounter this.
PS. Briefly Apple also did the same illogical thing with DNS zones, whereby the zone name for a domain was servername.example.com instead of example.com this at least they have stopped doing.

How to configure Open Directory base DN

Hi,
I have been using OpenLDAP on a Synology NAS drive, but this has some serious shortcomings with Mac clients (eg. roaming profiles simply doesn't work).
So I have bought a MacMini which among other things will replace my existing LDAP server with Open Directory.
As a dry run, I enabled the Open Directory and went through the simple set up and I had a basic system up in no time. However I have come up against an annoying issue with the base DN used by Open Directory and I hope someone will be able to help me.
My existing LDAP has a base DN that looks like this: dc=myorg, dc=local
So when users log in, they can use a username which conforms to the following format: [email protected]
The problem is that Open Directory likes to set the base DN to: dc=macservername, dc=myorg, dc=local
meaning that a fully qualified user account name now becomes: [email protected]
This seems bonkers to me. For example, what would happen if I introduce a second Mac server into the mix and failover to it - the servername element of the DN becomes redundant or if it changes, I need to communicate with all users.
I must be missing something obvious - but there doesn't seem to be much in the way of configuration that I can see through the Server application.
So, my question is, how can I configure my base dn without the servername so that my existing username context remains the same?
Many thanks - I look forward to any responses.

I agree with Dal78 Apple using a base DN of servername.example.com rather than just example.com is illogical. In fact originally they did seem to use just example.com as the format but in recent years now use server.example.com as the format. When I first encountered this change it was still possible to overridge the use of servername.example.com and force it to use just example.com as the format. In more recent times I have decided to leave things the way Apple do it.
I don't know if there is an official answer as to why, but a possible guess is that you can now have multiple Open Directory servers for a single domain. This is the 'Locales' option in Server.app. It maybe that including the servername makes it possible/easier to implement this.
I also agree Strontium90 do not use a .local root domain for Open Directory. In theory there are hacks to (sort of) get this to work, but Apple engineers will typically run screaming for the woods when they encounter this.
PS. Briefly Apple also did the same illogical thing with DNS zones, whereby the zone name for a domain was servername.example.com instead of example.com this at least they have stopped doing.

Are there open directory "preferences" to configure NTP on client workstations?

Similar Messages

Maybe you are looking for