Change IP Address in Snow Leopard Server
I have a client who has been operating naked on the Internet for years. Every machine in their office has its own public IP address. They have had some issues with former employees accessing their machines and are becoming a bit more security minded. I have purchased an Airport Extreme for them to use as their firewall and provide wireless for the growing number of laptops and iPhones.
My question is as follows:
If I set up their AE to provide NAT for them and change the IP addresses from the public 67.xxx.xxx.xxx to a private network 192.168.xxx.xxx, how is this going to effect name resolution on the network? Will it cause any other issues that I should be aware of before making the change?
Thanks for any help and insight you can provide
SK
It very much depends whether you plan to put the SLS within the Airport LAN or not. You could easily leave it parked on its current public IP, and simply put the rest of the computers in the Airport LAN.
If you do that, it probably won't make any difference at all to the users - they'll pick up DNS information from the Airport Extreme rather than the server, but still be looking at the same location for any server based services they use (e.g. iCal server, mail etc.).
If you move the server to be within the Airport LAN then you will have to make a number of changes to the configuration of the server. Which ones need updating depends on what the server is used for. If you look on pages 132 to 144 of the manual Mac OS X Server - Advanced Server Management - which you can download from the documentation section of the Apple Support web site (http://manuals.info.apple.com/enUS/ServerAdminv10.6.pdf) you get a clear discussion of what services are affected by a change in IP address, and how to update the server to reflect such changes.
Hope this helps.
Similar Messages
-
Change user account in snow leopard server??
Trying to change a user account picture in snow leopard server. Have couple computers that are on snow leopard and it uses the the network server that has all the login in. I can't change the user icon within system prefernces. Please help me!
There are server user accounts and computer user accounts. System Preferences is for creating and managing computer user accounts. Server Preferences and Workgroup Manager are for creating and managing server user accounts. If you created the account in System Preferences, you won't be able to manage it with Server Preferences or Workgroup Manager.
-
Setting up Snow Leopard Server with Address Book, iCal for Small Business
Hello Folks,
I have a small business with 2-3 people and I want to setup Snow Leopard Server on a Mac Mini. I have everything in place, RAID, Backup drive etc.
What I need is a guide on how to setup the server correctly and how to setup Address Book Server, iCal Server, DNS, etc. I was in IT a long while back but have gone back to my creative roots and sworn off IT but I am in a situation where my IT guy's wife is pregnant so he is busy painting the baby's room, etc.
I was looking at Snow Leopard Server for Dummies and a few other books. Do you guys have any suggestions on resources for me to read or research that would give me very straightforward steps in getting this setup. I am at a point where I can re-install from scratch if needed.
For the ease of those that might respond let's assume I know my way around Mac and general networking as a whole.
Thanks in advance for any advice.
Cheers,
JasonHi Guys,
First of, I will give you a brief background on me regarding networking as a mac user since 1994. I can setup and network multiple macs without a server in our home and small office. Turning file, print and internet sharing with a regular Mac OS X client version at no problem at all. This would be my first time setting up a Mac OS X Snow Leopard Server.
I'm in the same boat as Jakekub but we do not have a static IP from our DSL provider. We just bought a Mac Mini Server for our small office with 3 iMacs and 1 MacBook. We will just use the server for internal usage and to centralized things out and use some of server's features like Address Book, Mail, iCal etc. I've search the forums and found Orhidy's post here:
http://discussions.apple.com/thread.jspa?threadID=2148553
I even followed the sample IP Address, Subnet Mask, Router, DNS Server and I think I had it correctly setup initially. And I think I got it all running on the basic setup base on his instructions. So I tried to test my DNS settings via Terminal > hostname then got answer as
servername.companyname.private
And double checking DNS again with a command: sudo changeip - checkhostname and was given an answer of:
Primary address = 192.168.1.192
Current Hostname = servername.companyname.private
DNS Hostname = servername.companyname.private
The names match. There is nothing to change
dirserv:success = "success"
But here's another one that bugs me. I tried to follow from "Mac OS X Snow Leopard for Dummies" the command line:
NSLOOKUP hostname
and got an answer of:
;; Got SERVFAIL reply from 192.168.1.192, trying next server
Server: 192.168.1.1
Address: 192.168.1.1#53
** server can't find hostname: NXDOMAIN
So does it mean that I still haven't configured my server properly?
Thank you all for the help in advance!
dive -
Question about changing a Snow Leopard Server network settings
We have an Xserve running Mac OS X Server 10.6.8, the primary services running on it are afp, smb, dhcp, dns, jabber and the calendar sever.
Right now we have a router connecting two networks together, 192.168.0.0/24 and 192.168.1.0/24. The Xserve has a static IP address in the 192.168.0.0/24 range.
In order to combine two phone systems into one I am required to combine the above networks, this will involve removing the router and changing the subnet mask on every device from 255.255.255.0 to 255.255.254.0, any device that is currently part of the 192.168.1.0/24 network will also need to have it's router setting changed from 192.168.1.1 to 192.168.0.1. That part should all be easy.
However, this is my first experience expanding a network past a standard class C and am wondering if there is anything I need to watch for on my Snow Leopard Sever.
Specifically I wonder about dhcp settings, right now there are two dhcp servers, the Xserve which provides dhcp for 192.168.0.0/24 and the router that provides dhcp for 192.168.1.0/24. Once the router is removed the Xserve will need to provide dhcp for the entire network.
Looking at the Xserve dhcp configuration right now I have one subnet defined providing addresses 192.168.0.5 to 192.168.0.125.
Can I simply click the + to add another subnet and add for instance a range of 192.168.1.5 to 192.168.1.125?
Will it simply give out all of the ip addresses in the first range and then start with the 2nd? Or do I need to find a single range of ip addresses large enough to meet my needs? (e.g. 192.168.1.5 to 192.168.1.225 or something).
Is there anythign else to watch for after making this type of network setting change?
Thanks in advance.Thank you for your very detailed reply.
I understand the problems that can arise using 192.168.0.x and 192.168.1.x and if this were a new project I would definitely switch to something else, however in this case we have been using these ip ranges for years (they were in use here long before I started) and I don't want to have to redo all of my dns settings at the same time I make these other changes so I'm going to stick with the same ip's we are using at least for now. Anyone here needing vpn access has already dealt with this issue but we have very few vpn users so it has not been a major problem for us to date.
My biggest question is about increasing the size of the dhcp pool. For instance, after I change all the network settings and set up a /23 network is it possible to have a single dhcp pool that includes some ip's in the 192.168.0.x range and others in the 192.168.1.x range? I guess what I am asking is when I am in Server Admin and click on DHCP one of the tabs across the top is "Subnets". Right now there is a single "subnet" configured that provides addresses from 192.168.0.5 to 192.168.0.125.
Ideally I would like one dhcp pool that provides ip's in the range of 192.168.0.5 to 192.168.0.125 and then if all of those are used up, moves to 192.168.1.5 to 192.168.1.125. Can I do that by simply adding another "Subnet" so there are two? Or do I have to find one larger single range? (e.g. 192.168.1.5 to 192.168.1.225?) You may have already answered this indicating I have to have a single larger range but I just want to be sure.
The parts about changing subnet masks, and routers and all that I think I have a pretty good understanding of.
Your last paragraph is something I have been worried about, I do have a feeling that after making this change there will probably be unforseen issues that will need to be resolved, I'm just hoping it is not too many. For the scope of this thread I will just focus on issues that may arise with the Snow Leopard Server however.
Again, thank you for your help. -
Kadmin can't change dsimport'ed passwords in Snow Leopard Server
Hello, World.
I am attempting to manage user accounts in Open Directory from a non-Mac system. After a good deal of investigation on Leopard Server, I wound up ssh'ing to our Open Directory server to create new accounts with 'dsimport', and then to manage later changes to the account through LDAP (for non-password data) and through Kerberos with kadmin, on the theory that kadmind was supposed to propagate the encrypted plain text passwords into Password Service for all of P.S.'s hashing needs.
This worked great in Leopard Server, but under Snow Leopard Server, any attempt to change a user's password via kadmin fails with
'change_password: KDC policy rejects request while changing password for <principal name>'
At the same time, the system log (/var/log/system.log) shows
Nov 2 17:53:46 od1 sandboxd[76028]: mkpassdb(76026) deny file-read-data /usr/sbin/mkpassdb
Nov 2 17:53:46 od1 sandboxd[76028]: mkpassdb(76027) deny process-exec /usr/bin/ldapsearch
However, if I create a principal directly with kadmin, kadmin does allow me to change the password for the principal I just created.
Use modprinc to remove attributes (REQUIRESPREAUTH DISALLOW_SVR) from the dsimport'ed principals doesn't affect anything in any positive manner, though the principals I create manually in kadmin do lack these attributes.
So, does anyone know what the story is, here? Is there no supported API that I can use from a Solaris/Linux server to fully manage accounts under Open Directory?I have a Similar issue, Details below. the summary is that Using the Snow Leopard GUI interface I created 17 users with a generic low security Password. then transferred and converted some mail files to the server. Once the mail was working properly, I changed the passwords to a slightly more secure password, and set it so my users would have to change their password to a more secure password at log in.
Even after these password changes it is very easy to get other user's ticket information, if you know the original low Security Password with
kinit <other user name>
Details and demonstration.
oursvr:krb5kdc root# kpasswd someuser
Please enter the old password for [email protected]:
Please enter the new password for [email protected]:
Verifying, please re-enter the new password for
[email protected] again:
Server error
Unknown error code: 2802413321
KDC policy rejects request Unknown error code: 2802413326
Please enter the old password for [email protected]:
oursvr:krb5kdc root# kadmin.local
Authenticating as principal root/[email protected] with password.
kadmin.local: cpw [email protected]
Enter password for principal "[email protected]":
Re-enter password for principal "[email protected]":
ambiguous user name.
change_password: KDC policy rejects request while changing password for
"[email protected]".
kadmin.local: q
oursvr:krb5kdc root# kinit someuser/admin
Please enter the password for someuser/[email protected]:
oursvr:krb5kdc root# klist
Kerberos 5 ticket cache: 'API:Initial default ccache'
Default principal: someuser/[email protected]
Valid Starting Expires Service Principal
12/21/09 12:00:53 12/21/09 22:00:53
krbtgt/[email protected]
renew until 12/28/09 12:00:53
oursvr:krb5kdc root# kadmin
Authenticating as principal someuser/[email protected] with password.
Password for someuser/[email protected]:
kadmin: cpw someuser
Enter password for principal "someuser":
Re-enter password for principal "someuser":
change_password: Unknown error code: 2529638924 while changing password
for "[email protected]".
oursvr:krb5kdc root# kdestroy
oursvr:krb5kdc root# kinit otheruser
Please enter the password for [email protected]:
oursvr:krb5kdc root# klist
Kerberos 5 ticket cache: 'API:Initial default ccache'
Default principal: [email protected]
Valid Starting Expires Service Principal
12/21/09 12:07:55 12/21/09 22:07:50
krbtgt/[email protected]
renew until 12/28/09 12:07:55
CONFIGURATION
=============
Contents of /var/db/krb5kdc/kadm5.acl:
## This file autogenerated by KDCSetup ##
*/[email protected] * *
[email protected] * *
ADDITIONAL INFORMATION
======================
(1) Using 'passwd' to change the password does not change the Kerberos
password.
(2) Using "dscl /LDAPv3/127.0.0.1 -passwd Users/someuser" does not change
the Kerberos password.
(3)
(4) From /var/log/system.log:
Dec 21 11:57:01 oursvr edu.mit.Kerberos.kadmind[79131]: ambiguous user name.
Dec 21 11:57:01 oursvr sandboxd[82190]: mkpassdb(82189) deny file-read-data
/usr/sbin/mkpassdb
(5) From /var/log/krb5kdc/kadmin.log:
Dec 21 12:02:36 oursvr.sub.dom.tld kadmind[79131](Notice): Request:
kadm5chpassprincipal, [email protected], KDC policy rejects
request, client=someuser/[email protected],
service=kadmin/[email protected], addr=VVV.WWW.YYY.ZZ
Dec 21 12:02:36 oursvr.sub.dom.tld kadmind[79131](Notice): Request:
kadm5chpassprincipal, [email protected], KDC policy rejects
request, client=someuser/[email protected],
service=kadmin/[email protected], addr=VVV.WWW.YYY.ZZ
(6) From /var/log/krb5kdc/ldc.log:
Dec 21 11:56:51 oursvr.sub.dom.tld krb5kdc[62](info): AS_REQ (7 etypes {18
17 16 23 1 3 2}) VVV.WWW.YYY.ZZ: NEEDED_PREAUTH:
[email protected] for kadmin/[email protected],
Additional pre-authentication required
Dec 21 11:56:51 oursvr.sub.dom.tld krb5kdc[62](info): AS_REQ (7 etypes {18
17 16 23 1 3 2}) VVV.WWW.YYY.ZZ: NEEDED_PREAUTH:
[email protected] for kadmin/[email protected],
Additional pre-authentication required
Dec 21 11:56:51 oursvr.sub.dom.tld krb5kdc[62](info): AS_REQ (7 etypes {18
17 16 23 1 3 2}) VVV.WWW.YYY.ZZ: ISSUE: authtime 1261414611, etypes
{rep=18 tkt=16 ses=18}, [email protected] for
kadmin/[email protected]
Dec 21 11:56:51 oursvr.sub.dom.tld krb5kdc[62](info): AS_REQ (7 etypes {18
17 16 23 1 3 2}) VVV.WWW.YYY.ZZ: ISSUE: authtime 1261414611, etypes
{rep=18 tkt=16 ses=18}, [email protected] for
kadmin/[email protected]
(7) mkpassdb -dump 0x4b2bf32f30c3d4860000001e0000001e
slot 0030: 0x4b2bf32f30c3d4860000001e0000001e someuser 12/21/2009
12:28:17 PM
Last password change: 12/21/2009 11:00:36 AM
Last login: 12/21/2009 12:28:17 PM
Failed login count: 0
Disable reason: none
Hash-only bit: 0
Last Transaction ID: 2052
Transaction requires kerberos: 1
Record is dead: 0
Record is not to be replicated: 0
Access Features:
isDisabled=0 isAdminUser=0 newPasswordRequired=0 usingHistory=0
canModifyPasswordforSelf=1 usingExpirationDate=0 usingHardExpirationDate=0
requiresAlpha=0 requiresNumeric=0 expirationDateGMT=18446744073709551615
hardExpireDateGMT=18446744073709551615 maxMinutesUntilChangePassword=0
maxMinutesUntilDisabled=0 maxMinutesOfNonUse=0 maxFailedLoginAttempts=0
minChars=0 maxChars=0 passwordCannotBeName=0 requiresMixedCase=0
requiresSymbol=0 notGuessablePattern=0 isSessionKeyAgent=0
isComputerAccount=0 adminClass=0 adminNoChangePasswords=0
adminNoSetPolicies=0 adminNoCreate=0 adminNoDelete=0 adminNoClearState=0
adminNoPromoteAdmins=0
Group(s) for Administration: unrestricted
digest 0: method: *cmusaslsecretSMBNT
digest length: 16
digest: D6B093421FDF17380F0B695721F0F26A
digest 1: method: *cmusaslsecretSMBLM
digest length: 16
digest: 5C957C596B14237409A48A7AC23C7AB2
digest 2: method: *cmusaslsecretDIGEST
digest length: 16
digest: 8E9181A5F7697D7FB83BF2DA430CBB70
digest 3: method: *cmusaslsecretCRAM-M
digest length: 32
digest:
A08E4B9266A4B8676DEFA8584758F9013D29A479D81EE4E41D857D5A5CA4FA71
digest 4: method: KerberosRealmName
digest: OUR.KRB5.RLM
digest 5: method: KerberosPrincName
digest: someuser
digest 6: method: *cmusaslsecretPPS
digest length: 24
digest: A5AC9D1843D42ED4AF39EFB4AB91E536F733FB2580978860
digest 7: <empty>
digest 8: <empty>
digest 9: <empty>
slot checksum: 7DAA85870308B253D5A9294483A4B0EF
(8) dscl /LDAPv3/127.0.0.1 -read Users/someuser | grep -A 2 authAuthority
dsAttrTypeNative:authAuthority:
;ApplePasswordServer;0x4b2bf32f30c3d4860000001e0000001e,1024 35
14773688809506996593092824880872774590718495204127440029375223520574013330136617 78685429961896612181406054801454823310071429734609519569726042321602422714273008 59946509691313082062885828226653436410277560435615063784052163315144051817774743 254036483144235604939879290290235050919364398951613699884041179183857
[email protected]:VVV.WWW.YYY.ZZ
;Kerberosv5;0x4b2bf32f30c3d4860000001e0000001e;[email protected];OUR.KRB5.R LM;1024
35
14773688809506996593092824880872774590718495204127440029375223520574013330136617 78685429961896612181406054801454823310071429734609519569726042321602422714273008 59946509691313082062885828226653436410277560435615063784052163315144051817774743 254036483144235604939879290290235050919364398951613699884041179183857
[email protected]:VVV.WWW.YYY.ZZ -
How do I remotely access my Snow Leopard server from my Mountain Lion MacBook Air
Does anyone know of an idiot's guide to setting up a VPN to access my server? I'm running Snow Leopard server in the office and I'd like to be able to access the server, probably just from one computer (MacBook Air runnung Mountain Lion) from home.
I'm not sure if it complicates things or not, but the office is in an area with poor broadband and so the internet connection is via satellite broadband. The set up is a satellite modem into a Gigabit router and the server is connected to the router via an unmanaged switch.
As an aside, I'm considering changing this set up so that the modem plugs into a Time Capsule and the server will connect directly into the TC. The desktops will then run into the server via the unmanaged switch or wirelessly via TC - any thoughts on the best set up here? Are cables into a switch better/worse than using TC's wireless facility.
Is this something that I, as a reasonably competent computer operator but definitely not an IT expert, could do, or should I get someone in to set it up for me?
Thanks in advance
JimVPNs aren't particularly special or weird or secret or such. They're "just" a network connection. A sometimes very fussy network connection, but a network connection.
My preference is to use a firewall that includes an embedded VPN server. This for several reasons, as it avoids trying to forward the VPN through a device that's using NAT [1], and it means you can connect to multiple devices on the target LAN, and you can connect even if the OS X Server box is down.
Other folks will forward the VPN through NAT, and use the VPN server that's available in various versions of OS X Server.
Forwarding a VPN through NAT does work, but can also sometimes not work. NAT can cause some types of VPNs to get tossed off when (for instance) there's a second VPN connection arriving.
In various cases everything connects and works the first time, and in other cases it's trial-and-error.
With a VPN-capable firewall (which is a step above your average residential firewall), usually configuring the firewall as a L2TP server or the Cisco protocol, if you want to use the standard OS X or iOS clients. Or PPTP — which is easier to get working — but less secure. Once the firewall and the VPN server is set up — and that's where most of the "fun" is — then the set-up in Network Preferences is (usually) pretty simple.
There are thousands of OS X VPN set-up articles around, but the details all hinge on the particular VPN server, and whether you're going to try to push the VPN through (for instance) that Tome Capsule and its NAT. Until you sort out your VPN target and/or VPN client, and what sort of attacks you're securing against...
As for this case, satellite latency is large. The latency involved is the time it takes to the command or the text from your local Mac to the satellite ~35,786 kilometers up and then ~35,786 kilometers back down, and then the response back again. That's about a quarter second, each way, at the speed of light. Transferring big files is fine (once the connection is open and the transfer gets rolling), but anything interactive — such as a typical use of a VPN — is going to have a noticable lag.
Yes, it'll be easiest to get somebody to work through your requirements and expectations, and initially set this up for you. Or you can use this as an opportunity to read about and learn more about IP routing and networking and VPNs, too.
[1] VPNs seek to ensure that the network connection is secure, and from a known client IP source address to the IP address of the target VPN server. NAT explicitly obscures the network connections, and often has multiple client hosts located behind one IP address. Put another way, the VPN and NAT software implementations are working at cross-purposes. -
Complications migrating from Snow Leopard Server to Mountain Lion Server.
I'm migrating from Snow Leopard Server to Mountain Lion Server. The article "OS X Server: Upgrade and migration" (http://support.apple.com/kb/HT5381) says
"Make sure that any DNS or DHCP servers on which your server depends remain running during the upgrade"
This advice is reinforced by the details of the article "OS X Server: Steps to take before upgrading or migrating the Open Directory database" (http://support.apple.com/kb/HT5300).
As the server I'm migrating from provides these services it will need to be running during the migration process. This would seem to limit my options to doing the migration from a Time Machine backup (or, making a seperate clone of the server's drive and connecting it externally to the new box)
My main concern is the seemingly inevitable clash that is going to occur on the network as the new server takes on the roles of the old one - while it is still running.
What are my options here ?
This is my second attempt as on my first try I did the migration from the TM backup with the network down - and none of my local network users or their home directories were migrated, although the settings for the mount points were, but there were no actual directories where they pointed to!
Clear directions on how to procede would be VERY MUCH appreciated
Thank you.Moving from Snow Leopard to Mountain Lion means first installing the client (non-Server) version of Mountain Lion and then install Server.app this means that for at least part of the process you will not be running DNS, DHCP or Open Directory.
If you are going to end up using the same DNS name and IP address after the change then an approach you could follow would be as follows.
Destroy any Open Directory replicas
Archive your Open Directory Master (to make a backup)
Note down your DNS records in case they get messed up
Export via Workgroup Manager your users, and groups (you might not need this but better safe than sorry), make sure you do not include the diradmin account
Keep a full back of the server (you should always have backups)
Note down your DHCP server settings in case they get messed up
Note down any other service settings
Install Mountain Lion
Install Server.app
Install Workgroup Manager (extra free download)
Run Server.app
Make sure settings for services are as much as possible the same as before
If your lucky that may be all you need to do, otherwise...
Restore Open Directory archive, if your lucky that will be all you need to do, otherwise...
Make new Open Directory Master
Run Workgroup Manager
Import users and groups you previously exported
You will then have to set passwords for each user as these are not preserved via Workgroup Manager export
When I did this, I was also being forced to change all my IP addresses so I had no choice but to use Workgroup Manager to export and import accounts. -
Hosting IPv6 Website on Snow Leopard Server
I'm currently going through the IPv6 Certification offered by Hurricane Electric just for kicks and giggles. I already have a IPv6 tunnel running on my Time Capsule router(since my ISP is not providing IPv6 addresses yet) and have a valid IPv6 address manually assigned to my Snow Leopard Server.
I created an AAAA record (ipv6) on my external DNS host that points to the IPv6 address of my server. I also created a website at using the ipv6 subdomain, made sure the site pointed to the IPv6 address of the server and that it was hosted on TCP port 470 (I'm assuming this is the website port for IPv6 - at least Snow Leopard Server thinks so). I also made sure this port was being forwarded from my router.
When testing my website by using an external website tester it says that my AAAA hostname is correct but that it can't reach my website via IPv6. I did make sure to have an appropriate CNAME record for ipv6 on my internal DNS server but I can't add records - at least through Server Admin GUI - for IPv6 addresses. I know this isn't supported via Server Admin GUI but I can't find any documentation on how to add IPv6 addresses for the internal DNS server and if this is even necessary.
I can reach the site when I'm on my internal network - though I'm not sure if I'm reaching it via IPv6 or IPv4. Does anyone have any information or experience on hosting an IPv6 website on Snow Leopard Server?I found the issue was that I was blocking all incoming connections via IPv6. I edited the firewall to allow ports 80 and 443 and also changed the site to use port 80 (I don't know why Server Admin changed the port to 470 when choosing the IPv6 address) and I was then able to access the website via IPv6.
-
Creating a versatile DNS and redirection service on Snow Leopard Server
For the few of us who use Snow Leopard Server as a main DNS for our small network, the following is a workflow that I would like to share with the board for creating redirection services to not just sites found on the locally hosted apache but also external sites.
+IF you are adding a second domain name, the reverse domain lookup will not appear and you will need to add a Machine/A record with the fully qualified domain "domainname.com." (don't forget the . at the end) into the new zone and it will point to the "server" Machine/A record ip address.+
*DNS Portion* : (ServerAdmin > DNS > Zones >
Add Zone > Primary > Create a fully Qualified Domain name and dns "server" in the Machine / A Record
Create the (add Record > Alias/ CNAME) subdomain pointing to the server.domainname.com e.g. (library)
*Web / Apache Portion :*
Create a new site (ServerAdmin > Web > Sites > Plus button)
With General > host name exactly as spelled in above subdomain in full (library.domainname.com)
Select Web Folder where the site is hosted
If you are creating a redirection, create a folder on the server, add an index.php (with the script below)
Add Alias with the same subdomain as number 2
_PHP script :_
<?php
$location = "http://example.net";
header("Location: ".$location, "301 Moved Permanently");
?>
// Edit the "http://example.net" to which ever e.g. "http://apple.com"
_Alternatively you can also mask the page with :_
<html>
<head>
<title>Same Title As Your Homepage</title><!-->incase they have javascript turned off<!-->
<script type="text/javascript"><!-->changes title bar to match title on current page in frame<!-->
function changeTitle()
if (top.frames['main'].document.title)
top.document.title=top.frames['main'].document.title;
</script>
</head>
<frameset>
<frame name="main" src="http://actual-url.anotherhost.com/page.html"scrolling="auto" target="main" ONLOAD="changeTitle();"><!-->You need the onload handler to make the javascript work<!-->
<noframes>
<body>
Place a suitable message here for people with browsers that can't read frames.
</body>
</noframes>
</frameset>
</html>Ok, local DNS services (unicast DNS) are typically straightforward to set up, very useful to have, and can be necessary for various modern network services, so I'm unsure why this is even particularly an open question. Which leads me to wonder what other factors might be under consideration here; of what I'm missing.
The Bonjour mDNS stuff is certainly very nice, too. But not everything around supports Bonjour, unfortunately.
As for being authoritative, the self-hosted out-of-the-box DNS server is authoritative for its own zone. That's how DNS works for this stuff.
And as for querying other DNS servers from that local DNS server (or, if you decide to reconfigure it and deploy and start using DNS services on your LAN), then that's how DNS servers work.
And yes, the caching of DNS responses both within the DNS clients and within the local DNS server is typical. This also means that there is need no references to ISP or other DNS servers on your LAN for frequent translations; no other caching servers and no other forwarding servers are required. -
VPN Server in Snow Leopard Server not accepting connections
I've got some issues with a new Snow Leopard Server, running on a Mac mini Server, and VPN.
I have a Linksys WRT310N performing router duties. I have enabled the VPN Passthrough in the router's configuration pages (IPSec, PPTP and L2TP all Enabled). In the Applications and Gaming section, I have enabled ports 1723 (TCP and UDP) and 1701 (TCP and UDP) to go through to the mini Server. In order to have the VPN Passthrough enabled, I have to have the SPI Firewall enabled on the router.
I have both PPTP and L2TP enabled on the Server. When I first tested it, everything worked.
Within 24 hours, it stopped working, and I can't work out why.
On the Server, I can see in the logs the following messages: (server name and IPs changed to protect the guilty)
---BEGIN vpnd.log---
2009-11-03 20:03:32 EST Incoming call... Address given to client = 192.168.0.213
Tue Nov 3 20:03:32 2009 : Directory Services Authentication plugin initialized
Tue Nov 3 20:03:32 2009 : Directory Services Authorization plugin initialized
Tue Nov 3 20:03:32 2009 : PPTP incoming call in progress from '123.456.789.123'...
Tue Nov 3 20:03:33 2009 : PPTP connection established.
Tue Nov 3 20:03:33 2009 : using link 0
Tue Nov 3 20:03:33 2009 : Using interface ppp0
Tue Nov 3 20:03:33 2009 : Connect: ppp0 <--> socket[34:17]
Tue Nov 3 20:03:33 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:33 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:33 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:33 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:36 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:36 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:36 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:36 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:39 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:39 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:39 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:39 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:42 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:42 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:42 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:42 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:45 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:45 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:45 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:45 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:48 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:48 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:48 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:48 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:51 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:51 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:51 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:51 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:54 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:54 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:54 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:54 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:57 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:57 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:57 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:57 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:04:00 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:04:00 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:04:00 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:04:00 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:04:03 2009 : LCP: timeout sending Config-Requests
Tue Nov 3 20:04:03 2009 : Connection terminated.
Tue Nov 3 20:04:03 2009 : PPTP disconnecting...
Tue Nov 3 20:04:03 2009 : PPTP disconnected
2009-11-03 20:04:03 EST --> Client with address = 192.168.0.213 has hungup
---END vpnd.log---
On the client I'm seeing this in the logs
--- BEGIN ---
3/11/09 8:03:32 PM pppd[12074] pppd 2.4.2 (Apple version 314.0.2) started by root, uid 502
3/11/09 8:03:32 PM pppd[12074] PPTP connecting to server 'server.example.com' (10.0.1.1)...
3/11/09 8:03:33 PM pppd[12074] PPTP connection established.
3/11/09 8:03:33 PM pppd[12074] Connect: ppp0 <--> socket[34:17]
3/11/09 8:04:03 PM pppd[12074] LCP: timeout sending Config-Requests
3/11/09 8:04:03 PM pppd[12074] Connection terminated.
3/11/09 8:04:03 PM pppd[12074] PPTP disconnecting...
3/11/09 8:04:03 PM pppd[12074] PPTP disconnected
3/11/09 8:04:03 PM pppd[12074] PPTP disconnected
3/11/09 8:04:03 PM pppd[12074] PPTP disconnected
--- END ---
Any ideas?Well, this didn't last long. The VPN is already down. Cannot connect to it again.Very Frustrating.
I know the actual server is receiving the requests (Server Log):
Jan 7 10:26:33 SnowServer racoon[118]: Connecting.
Jan 7 10:26:33 SnowServer racoon[118]: IKE Packet: receive success. (Responder, Main-Mode message 1).
Jan 7 10:26:33 SnowServer racoon[118]: IKE Packet: transmit success. (Responder, Main-Mode message 2).
Jan 7 10:26:33 SnowServer racoon[118]: IKE Packet: receive success. (Responder, Main-Mode message 3).
Jan 7 10:26:33 SnowServer racoon[118]: IKE Packet: transmit success. (Responder, Main-Mode message 4).
Jan 7 10:26:36 SnowServer racoon[118]: IKE Packet: transmit success. (Phase1 Retransmit).
Jan 7 10:26:55: --- last message repeated 6 times ---
Jan 7 10:26:55 SnowServer servermgrd[67]: servermgr_jabber[W]: detailed service status not available until network configuration completed
Jan 7 10:26:57 SnowServer racoon[118]: IKE Packet: transmit success. (Phase1 Retransmit).
Jan 7 10:27:03: --- last message repeated 1 time ---
Jan 7 10:27:03 SnowServer racoon[118]: IKEv1 Phase1: maximum retransmits. (Phase1 Maximum Retransmits).
Jan 7 10:27:03 SnowServer racoon[118]: Disconnecting. (Connection tried to negotiate for, 30.655020 seconds).
Jan 7 10:27:03 SnowServer racoon[118]: IKE Phase1 Failure-Rate Statistic. (Failure-Rate = 100.000).
Jan 7 10:27:57 SnowServer racoon[118]: Connecting.
Jan 7 10:27:57 SnowServer racoon[118]: IKE Packet: receive success. (Responder, Main-Mode message 1).
Jan 7 10:27:57 SnowServer racoon[118]: IKE Packet: transmit success. (Responder, Main-Mode message 2).
Jan 7 10:27:58 SnowServer racoon[118]: IKE Packet: receive success. (Responder, Main-Mode message 3).
Jan 7 10:27:58 SnowServer racoon[118]: IKE Packet: transmit success. (Responder, Main-Mode message 4).
Jan 7 10:28:01 SnowServer racoon[118]: IKE Packet: transmit success. (Phase1 Retransmit).
Jan 7 10:28:28: --- last message repeated 8 times ---
Jan 7 10:28:28 SnowServer racoon[118]: IKEv1 Phase1: maximum retransmits. (Phase1 Maximum Retransmits).
Jan 7 10:28:28 SnowServer racoon[118]: Disconnecting. (Connection tried to negotiate for, 30.993122 seconds).
Jan 7 10:28:28 SnowServer racoon[118]: IKE Phase1 Failure-Rate Statistic. (Failure-Rate = 100.000).
But the VPN Server never gets the connection request (VPN Log):
2010-01-07 10:12:13 EST Loading plugin /System/Library/Extensions/L2TP.ppp
2010-01-07 10:12:13 EST Listening for connections...
2010-01-07 10:12:13 EST Listening for connections...
I have a call with Apple Support this afternoon. Hopefully it will be fruitful. If I get anywhere, I will post it. If anyone has any bright ideas, they would be greatly appreciated.
Message was edited by: AeroJet -
Filemaker Pro 6 Client install on Snow Leopard Server on Parallels
Hey Gang,
As per MichaelLAX "Full installation instructions for Snow Leopard Server into Parallels", I have successfully installed SLS on an ML iMac using Parallels 8. Worked great, thank you.
The only issue I am runnig into is we require FileMaker Pro 6 client to be installed and functional. FM installs fine, but the client does not seem to be able to "see" the FM Server which is on the same local network all our other macs operate and access FM on.
I'm sure there is a preference somewhere that is preventing the SLS install of FM from accessing the local network computers as they are also not visible in finder as they would be normally. I have no experience with OS X Server in general, so any advice is greatly appreciated!
Thanks,
JoshOK: Here is what I did:
I installed FM7 on my Snow Leopard Mac Mini and created a small file called To Do List.fp7. I made it a FileMaker Network server file in the Sharing... Menu under FileMaker Pro menu.
I then opened FM7 in Snow Leopard Server in Parallels 8 on my Lion Mac Mini. Under the File Menu I selected Open Remote... I changed View to Favorite Hosts.
Then I clicked the Add button. Then for Host's Internet Address, I entered the IP for my Snow Leopard Mac Mini (in this case 192.168.0.151) and gave it a Favorite Host Name (To Do). I clicked Show All Available Files for this Host and clicked Save.
My server file To Do List.fp7 is now visible in the window and I can click Open.
In my case, since I have only one licensed serialized copy of FM7, it recognized that I was using it twice and told me that error and then quit.
But in your case, you should now be able to open your local area network served FM files!
[click on images to enlarge] -
Snow Leopard Server vs MobileMe
I am considering purchasing the new Mac Mini with Snow Leopard Server installed on it.
Our small two location office has been using MobileMe quite satisfactorily for the last two years and I wonder if Server could replace its functionality. We have about 4-6 people with MobileMe accounts.
Specifically. the ability to log into any Mac and setup a separate user account on that Mac to sync my email, contacts, calendar, and dock to automatically using the built in apps, NOT the web client. Will I be able to still do this with any Mac and can I also get access to this info from a PC based computer through a web browser if need be? We also have 3 people using iPod touches (since we don't have AT&T coverage in this area), will they be able to access the info as before?
Also, we have two offices in different geographic locations, thus one office would only be able to access the server via internet.
The mini-server seems like a great deal, I am just trying to financially justify it.
Thanks.......Difficulties is the wrong term. I could actually accomplish almost everything with a little time and effort--it just took longer than you may be willing to take away from your business. I'm a semi-retired geek hobbyist, not a businessman who needs it to work right away. I guess it was a matter of comparing Snow Leopard Server with what I already had (MobileMe)...
MobileMe e-mail works perfectly for multiple users on desktops and their laptops. Configuring DNS and DHCP on SLS is daunting. Then you have to tell everyone about your new addresses. Why go through the hassle of changing?
A common Address Book contact list works fine in MobileMe. Address Book is unique to each user in SLS.
We see all of our individual calendars overlaid on one calendar in MobileMe. In SLS, you have to create a Wiki page to see everybody at once.
My iPhone syncs just fine with our contacts, calendars, and multiple e-mail accounts. I didn't try with SLS.
Other SLS Pluses: File sharing is great on SLS. Centralized storage and backup with Time Machine is a real plus. Ditto for automatic backup when the laptops join the network. Our Windows laptops have no difficulties accessing the files on the server. I have approximately 300G of music and photos on the server--everyone can access them and I can use the server as a continuous streaming source for our AppleTV.
Other Negative: You cannot automatically backup a Windows machine (including Windows 7) to the server.
I'm not saying it's not a great product--it's been enjoyable and educational for me--but I suspect that the ROI is limited for a very small business operation. I've enjoyed playing with it--and my family web page and blog are open 24/7--but you can run a micro business operation for less money and less time/hassle.
C. -
Where is there a step by step setup for making my Snow Leopard Server with DNS? Essentially, I am looking to setup a mail server but seem to be missing what information I need to gather from the folks that host my domain and how to point traffic to my network.
When I started setting up my first Mac OS X Servers a few years ago I had to completely retrain my brain because the MacOS does not follow the traditional nomenclature of Windows Active Directory and DNS setup. That being said like AD for Windows MacOS relies very very heavily on a healthy and properly running DNS system, both internally and externally. So one great resource I found was about 10+ hours of training on Leopard Server over to Lynda.com. I think you can sign up for a month long membership but it's well worth the investment if your looking for some basics thru advanced setup of Leopard Server. Now SLS is much much easier at the setup and deployment and some of the fundamentals of the setup interface have changed greatly (as an improvement) but the videos are still very applicable.
Basically it comes down to the following steps in order to get your website/e-mail/wiki services working.
1. Purchase your .whatever with a registrar, godaddy, doster, network solutions ect...
2. Make sure you have a fully routable PUBLIC IP address from your ISP that you can assign to the WAN (internet side of your router)
3. Contact your ISP and ask then to create an rDNS entry for your .something to the IP address they assigned you. Usually this will look like xxx.xxx.xxx ---> mail.mydomain.com when you test later on.
4. Modify the DNS records with your registrar to point the MX & A record to your new IP. You will log in create an A record for mail.mydomain.com ---> xxx.xxx.xxx (your public IP on router) and then you will create an MX record for e-mail which will simply be mail.mydomain.com with a value of 10 (there is usually a screen for this).
5. Once all the DNS is setup and working properly (Can take several days for these changes to take affect and be visible by your ISP) then you can begin the configuration of your router. You will need to determine what IP internally you want your Mac to be. Usually 10.0.0.1 or 192.168.1.1 or other and document that. Program your router to port forward ports 25,110, 80, 143 to the IP that you decided your Mac will be at so those services will be publicly available to you to user. Otherwise nobody will ever be able to send you e-mail or visit your site.
6. This is a good time to check your work and settings by visiting www.mxtoolbox.com and you verify your rDNS (setup by ISP) and your DNS (Setup by you) before beginning your setup of OS X SLS. If everything checks out then start the install if not STOP HERE and fix it because it will haunt you in the long run.
7. Start the install of SLS and at some point the system will get you to the screens at which you input your domain information. If all was setup properly up to now SLS will auto-populate the domain and local hostname of your Mac Server. U can change the local hostname if you wish but the domain name information should reflect your rDNS and A record information of mail.mydomain.com and you can hit next and proceed with the rest of the install.
8. Once up and running you will need to make a small adjustment to the alias of your e-mail. For some reason the engineers at Apple left a flaw in (my opinion) that is as such. Whenever you send e-mail it will go as [email protected] instead of what you really want which is [email protected]. So follow this post below and you will be all fixed up in a jiffy.
http://discussions.apple.com/message.jspa?messageID=10110723#10110723
Hope this helps. -
Can't rename folders on Snow Leopard Server
I have 10.6.8 Snow Leopard Server running on a new Mac Mini server. Attached I have a Pegasus Raid storing all my files. I have a sharepoint set up for every project we work on but a couple act strangely. Users can create and delete folders but can not rename them once created. In order to rename they must drag the folder onto the desktop, rename and then replace the folder on the server. All permissions are set up identical to the other sharepoints which work fine. I have had a couple so-called "experts" look at the permissions in both the terminal and Server Admin. Everyone seems stumped. Any ideas?
Thanks for the input but I finally soved the problem. Here is what I found...
Although I had given users/group the ALLOW/FULL CONTROL premission with a sharepoint, I discovered that in Server Admin if you double-click on the User or Group name under the ACL permissions that a drop down box appears. This box allows you to fine tune the ACL but it appears that by default all of the boxes are not checked even though I granted the user Full Control. After checking all of the boxes I was able to create and rename folders in my share as expected.
This also had an similar effect if I denied Full Control. Some of the boxes remained unchecked and it left holes in my system where denied users could still access some files. Again by checking all boxes these holes were closed.
Does anyone know how to change the default so that all boxes are checked when assigning the Full Control permission? -
Snow Leopard Server running extremely slow all of a sudden!!
Hi, I'm not a qualified server technician but am currently trying my best to run a server in a Secondary School! Please help, need to fix ASAP.
So basically we've got a Mac Pro running Snow Leopard server which has become incredibly slow in the past week. Nothing has changed in our department to trigger this. Here's everything I know so far...
- If I try to log on to the admin account when "Some Network Accounts Are Available", log on will take under a minute. If I try to log on to the admin account when the light goes green and "Network Accounts Are Available" log on will take forever and eventually just crash and which point I have to just force a shutdown and try again.
- When I can log on, some aspects of the computing seems fast and other aspects are really slow. For example, a few programs open as soon as I log on no problem, however a simple spotlight search or trying to open Sytem Preferences will crash the computer completely.
- Have tried booting in Safe Mode, and everything ran fast and how it's mean to but once restarting and booting normally the problems remained.
Sorry for the lack of knowledge!!
Thanks in advance.Your comment indicates "crash the computer"? Do you mean that OS X Server itself fails, and you have to reboot? Or that the application crashes, and you have to restart it?
The following are some general approaches toward gathering some data:
Launch Console.app from Applications > Utilities and see if there are blocks of repeating errors.
Launch Terminal.app from Applications > Utilities and issue the following harmess, diagnostic command:
sudo changeip -checkhostname
After entering an administrative password and possibly seeing a one-time informational message about sudo, you should see some network configuration information and then an indication that no changes are required, or that there are DNS or network errors.
Boot from the Snow Leopard installation DVD and run a volume verification pass using Disk Utility, this from the Utilities menu of the installation disl.
FWIW...
If the applications or OS X Server are crashing, then you're generally heard toward either a reinstallation of the software, or a hardware repair, or quite possibly a combination of the two.
Forcing a hard shutdown can lead to corruptions, depending on exactly what's going on when the power drops out; that's probably best left as a last-resort approach and one best avoided.
Maybe you are looking for
-
Unable to restore from DVD set - ThinkPad keeps rebooting to Rescue and Recovery screen
Hello: Lenovo x140e laptop / 2.05 BIOS: (image link removed) I have used Lenovo Rescue / Recovery to make a full disk image backup to DVDs for installation of SSD drive. Attempting to boot from Rescue / Recovery DVD appears to load Windows files, sta
-
Two methods with same name but different return type?
Can I have two methods with same name but different return type in Java? I used to do this in C++ (method overloading or function overloading) Here is my code: import java.io.*; public class Test{ public static void main(String ar[]){ try{
-
Controlling Journal Import from Gl_INTERFACE
Hi All, We are moving data into GL_INterface through a conc program. All the not null fields are populated and when joournal Import is run, it is imported properly. The requirement: Now, we need a control, such that we will have a param, Yes_No, and
-
Smartform error of workarea..:no. cannot be converted
hii all , i have a smartform in which i have a rate field...and i have to club all the values cming in with respect t tat....i am getting an error like this..""wa_dia may not be converted into a number"" ...what should i do???? plss h
-
Hi All Can any1 tell me from where in the BI system can i save a .jpeg image of a Info Cube Starschema. I have been doin thru Metadata repository, I can see the star schema tof my cube there but when i copy that to a word file, most of the dimension