Lion Server: how best to backup user mail?

What's the best way to backup user Mail on Lion Server?
Currently I do a nightly rsync of the /Library/Server/Mail directory to another off-site machine, but it strikes me that I'm not entirely sure (a) if this is capturing all necessary info, and (b) even if it is, how precisely woudl I go about restoring user mail if, for example, the server blew up and I had to reinstall a new machine?
Thanks for any advice,

Another method would be to do regular copies / clones of your mail directory using Carbon Copy Cloner - I actually do this with the server boot volume regularly.
-Doug

Similar Messages

Just bought a Mac Mini lion server how do i make a lion backup?

Just bought a Mac Mini lion server how do i make a backup disk for lion?

I believe you will need a USB drive and can download and install something called Lion Recovery Disk Assistant from below.
http://support.apple.com/kb/dl1433
Also read the article from below which I believe will encourage your desire to do the backup.
http://www.macworld.com/article/161664/2011/08/hands_on_with_lion_recovery_disk_ assistant.html

How do you backup users emails?

Hello,
I wanted to know how do you backup users emails? We have around 30 users and they are using Outlook 2010 & Thunderbird to access POP/SMTP emails from hosting email server. Since they are using pop so their emails are stored locally on D: drive of their
systems. I want to backup them on our file server.
Any easy automated backup solution for this?
Thanks

Hi,
If you are using Exchange you could try backup on Exchange server side.
Found a tool which could help us merge emails. Please see if it could be considered as a backup:
Microsoft Exchange Server Mailbox Merge Wizard (ExMerge)
http://www.microsoft.com/en-us/download/details.aspx?id=2743
In addition the question is more suitable in Exchange or Outlook forum instead Windows Server forum:
Office:
http://social.technet.microsoft.com/Forums/office/en-US/home?category=officeitpro
Exchange:
http://social.technet.microsoft.com/Forums/exchange/en-US/home?category=exchangeserver
If you have any feedback on our support, please send to [email protected]

How best to screen junk mail in the mail application?

How best to screen junk mail in the mail application?

With the Mail program running, select Preferences from the Mail menu and then select the Junk Mail tab. Turn it on. This is a decent junk mail filter and fills the needs of many people. If you find too much junk mail still making its way into your in basket, there's a third party program called SpamSieve that takes filtering to another level.

How to extend Exchange User mail box session limit in Exchange 2013

Hi,
How to extend Exchange User mail box session limit in Exchange 2013??

To configure default mailbox session limit, check this well described MS-Library link :http://technet.microsoft.com/en-us/library/ff477612%28v=exchg.141%29.aspx#SL
Hope, this helps you.

How To Install A (Almost) Working Lion Server With Profile Management/SSL/OD/Mail/iCal/Address Book/VNC/Web/etc.

I recently installed a fresh version of Lion Server after attempting to fix a broken upgrade. With some help from others, I've managed to get all the new features working and have kept notes, having found that many or most of the necessary installation steps for both the OS and its services are almost entirely undocumented. When you get them working, they work great, but the entire process is very fragile, with simple setup steps causing breaks or even malicious behaviors. In case this is useful to others, here are my notes.
Start with an erased, virgin, single guid partitioned drive. Not an upgrade. Not simply a repartitioned drive. Erased. Clean. Anything else can and probably will break the Lion Server install, as I discovered myself more than once. Before erasing my drive, I already had Lion and made a Lion install DVD from instructions widely available on the web. I suppose you could also boot into the Lion recovery partition and use disk utility to erase the OS X partition then install a new partition, but I cut a DVD. The bottom line is to erase any old OS partitions. And of course to have multiple, independent backups: I use both Time Machine with a modified StdExclusions.plist and Carbon Copy Cloner.
Also, if you will be running your own personal cloud, you will want to know your domain name ahead of time, as this will be propagated everywhere throughout server, and changing anything related to SSL on Lion Server is a nightmare that I haven't figured out. If you don't yet have a domain name, go drop ten dollars at namecheap.com or wherever and reserve one before you start. Soemday someone will document how to change this stuff without breaking Lion Server, but we're not there yet. I'll assume the top-level domain name "domain.com" here.
Given good backups, a Lion Install DVD (or Recovery Partition), and a domain name, here are the steps, apparently all of which must be more-or-less strictly followed in this order.
DVD>Disk Utility>Erase Disk [or Recovery Partition>Disk Utility>Erase Partition]
DVD>Install Lion
Reboot, hopefully Lion install kicks in
Update, update, update Lion (NOT Lion Server yet) until no more updates
System Preferences>Network>Static IP on the LAN (say 10.0.1.2) and Computer name ("server" is a good standbye)
Terminal>$ sudo scutil --set HostName server.domain.com
App Store>Install Lion Server and run through the Setup
Download install Server Admin Tools, then update, update, update until no more updates
Server Admin>DNS>Zones [IF THIS WASN'T AUTOMAGICALLY CREATED (mine wasn't): Add zone domain.com with Nameserver "server.domain.com." (that's a FQDN terminated with a period) and a Mail Exchanger (MX record) "server.domain.com." with priority 10. Add Record>Add Machine (A record) server.domain.com pointing to the server's static IP. You can add fancier DNS aliases and a simpler MX record below after you get through the crucial steps.]
System Prefs>Network>Advanced>Set your DNS server to 127.0.0.1
A few DNS set-up steps and these most important steps:
A. Check that the Unix command "hostname" returns the correct hostname and you can see this hostname in Server.app>Hardware>Network
B. Check that DNS works: the unix commands "host server.domain.com" and "host 10.0.1.2" (assuming that that's your static IP) should point to each other. Do not proceed until DNS works.
C. Get Apple Push Notification Services CA via Server.app>Hardware>Settings><Click toggle, Edit... get a new cert ...>
D. Server.app>Profile Manager>Configure... [Magic script should create OD Master, signed SSL cert]
E. Server.app>Hardware>Settings>SSL Certificate> [Check to make sure it's set to the one just created]
F. Using Server.app, turn on the web, then Server.app>Profile Manager> [Click on hyperlink to get to web page, e.g. server.domain.com/profilemanager] Upper RHS pull-down, install Trust Profile
G. Keychain Access>System>Certificates [Find the automatically generated cert "Domain", the one that is a "Root certificate authority", Highlight and Export as .cer, email to all iOS devices, and click on the authority on the device. It should be entered as a trusted CA on all iOS devices. While you're at it, highlight and Export... as a .cer the certificate "IntermediateCA_SERVER.DOMAIN.COM_1", which is listed an an "Intermediate CA" -- you will use this to establish secure SSL connections with remote browsers hitting your server.]
H. iOS on LAN: browse to server.domain.com/mydevices> [click on LHS Install trust cert, then RHS Enroll device.
I. Test from web browser server.domain.com/mydevices: Lock Device to test
J. ??? Profit
12. Server Admin>DNS>Zones> Add convenient DNS alias records if necessary, e.g., mail.domain.com, smtp.domain.com, www.domain.com. If you want to refer to your box using the convenient shorthand "domain.com", you must enter the A record (NOT alias) "domain.com." FQDN pointing to the server's fixed IP. You can also enter the convenient short MX record "domain.com." with priority 11. This will all work on the LAN -- all these settings must be mirrored on the outside internet using the service from which you registered domain.com.
You are now ready to begin turning on your services. Here are a few important details and gotchas setting up cloud services.
Firewall
Server Admin>Firewall>Services> Open up all ports needed by whichever services you want to run and set up your router (assuming that your server sits behind a router) to port forward these ports to your router's LAN IP. This is most a straightforward exercise in grepping for the correct ports on this page, but there are several jaw-droppingly undocumented omissions of crucial ports for Push Services and Device Enrollment. If you want to enroll your iOS devices, make sure port 1640 is open. If you want Push Notifications to work (you do), then ports 2195, 2196, 5218, and 5223 must be open. The Unix commands "lsof -i :5218" and "nmap -p 5218 server.domain.com" (nmap available from Macports after installing Xcode from the App Store) help show which ports are open.
SSH
Do this with strong security. Server.app to turn on remote logins (open port 22), but edit /etc/sshd_config to turn off root and password logins.
PermitRootLogin no
PasswordAuthentication no
ChallengeResponseAuthentication no
I'm note sure if toggling the Allow remote logins will load this config file or, run "sudo launchctl unload -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist ; sudo launchctl load -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist" to restart the server's ssh daemon.
Then use ssh-keygen on remote client to generate public/private keys that can be used to remotely login to the server.
client$ ssh-keygen -t rsa -b 2048 -C client_name
[Securely copy ~/.ssh/id_rsa.pub from client to server.]
server$ cat id_rsa.pub > ~/.ssh/known_hosts
I also like DenyHosts, which emails detected ssh attacks to [email protected]. It's amazing how many ssh attacks there are on any open port 22. Not really an added security feature if you've turned off password logins, but good to monitor. Here's a Lion Server diff for the config file /usr/share/denyhosts:
$ diff denyhosts.cfg-dist denyhosts.cfg
12c12
< SECURE_LOG = /var/log/secure
> #SECURE_LOG = /var/log/secure
22a23
> SECURE_LOG = /var/log/secure.log
34c35
< HOSTS_DENY = /etc/hosts.deny
> #HOSTS_DENY = /etc/hosts.deny
40a42,44
> #
> # Mac OS X Lion Server
> HOSTS_DENY = /private/etc/hosts.deny
195c199
< LOCK_FILE = /var/lock/subsys/denyhosts
> #LOCK_FILE = /var/lock/subsys/denyhosts
202a207,208
> LOCK_FILE = /var/denyhosts/denyhosts.pid
> #
219c225
< ADMIN_EMAIL =
> ADMIN_EMAIL = [email protected]
286c292
< #SYSLOG_REPORT=YES
> SYSLOG_REPORT=YES
Network Accounts
User Server.app to create your network accounts; do not use Workgroup Manager. If you use Workgroup Manager, as I did, then your accounts will not have email addresses specified and iCal Server WILL NOT COMPLETELY WORK. Well, at least collaboration through network accounts will be handled clunkily through email, not automatically as they should. If you create a network account using Workgroup Manager, then edit that account using Server.app to specify the email to which iCal invitations may be sent. Server.app doesn't say anything about this, but that's one thing that email address entry is used for. This still isn't quite solid on Lion Server, as my Open Directory logs on a freshly installed Lion Server are filled with errors that read:
2011-12-12 15:05:52.425 EST - Module: SystemCache - Misconfiguration detected in hash 'Kerberos':
     User 'uname' (/LDAPv3/127.0.0.1) - ID 1031 - UUID 98B4DF30-09CF-42F1-6C31-9D55FE4A0812 - SID S-0-8-83-8930552043-0845248631-7065481045-9092
Oh well.
Email
Email aliases are handled with the file /private/etc/postfix/aliases. Do something like this
root:           myname
admin:          myname
sysadmin:       myname
certadmin:      myname
webmaster:      myname
my_alternate:   myname
Then run "sudo newaliases". If your ISP is Comcast or some other large provider, you probably must proxy your outgoing mail through their SMTP servers to avoid being blocked as a spammer (a lot of SMTP servers will block email from Comcast/whatever IP addresses that isn't sent by Comcast). Use Server.app>Mail to enter your account information. Even then, the Lion Server default setup may fail using this proxy. I had to do this with the file /private/etc/postfix/main.cf:
cd /etc/postfix
sudo cp ./main.cf ./main.cf.no_smtp_sasl_security_options
sudo echo 'smtp_sasl_security_options = noanonymous' >> ./main.cf
sudo serveradmin stop mail
sudo serveradmin start mail
Finally, make sure that you're running a blacklisting srevice yourself! Server Admin>Mail>Filter> Use spamhaus.org as a blacklister. Finally, set up mail to use strong Kerberos/MD5 settings under on Server Admin>Mail>Advanced. Turn off password and clear logins. The settings should be set to "Use" your SSL cert, NOT "Require". "Require" consistently breaks things for me.
If you already installed the server's Trust Certificate as described above (and opened up the correct ports), email to your account should be pushed out to all clients.
iCal Server
Server.app>Calendar>Turn ON and Allow Email Invitations, Edit... . Whatever you do, do NOT enter your own email account information in this GUI. You must enter the account information for local user com.apple.calendarserver, and the password for this account, which is stored in the System keychain: Keychain Access>System> Item com.apple.servermgr_calendar. Double-click and Show Password, copy and paste into Server.app dialog. This is all described in depth here. If you enter your own account information here (DO NOT!), the iCal Server will delete all Emails in your Inbox just as soon as it reads them, exactly like it works for user com.apple.calendarserver. Believe me, you don't want to discover this "feature", which I expect will be more tightly controlled in some future update.
Web
The functionality of Server.app's Web management is pretty limited and awful, but a few changes to the file /etc/apache2/httpd.conf will give you a pretty capable and flexible web server, just one that you must manage by hand. Here's a diff for httpd.conf:
$ diff httpd.conf.default httpd.conf
95c95
< #LoadModule ssl_module libexec/apache2/mod_ssl.so
> LoadModule ssl_module libexec/apache2/mod_ssl.so
111c111
< #LoadModule php5_module libexec/apache2/libphp5.so
> LoadModule php5_module libexec/apache2/libphp5.so
139,140c139,140
< #LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
< #LoadModule encoding_module libexec/apache2/mod_encoding.so
> LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
> LoadModule encoding_module libexec/apache2/mod_encoding.so
146c146
< #LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
> LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
177c177
< ServerAdmin [email protected]
> ServerAdmin [email protected]
186c186
< #ServerName www.example.com:80
> ServerName domain.com:443
677a678,680
> # Server-specific configuration
> # sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart
> Include /etc/apache2/mydomain/*.conf
I did "sudo mkdir /etc/apache2/mydomain" and add specific config files for various web pages to host. For example, here's a config file that will host the entire contents of an EyeTV DVR, all password controlled with htdigest ("htdigest ~uname/.htdigest EyeTV uname"). Browsing to https://server.domain.com/eyetv points to /Users/uname/Sites/EyeTV, in which there's an index.php script that can read and display the EyeTV archive at https://server.domain.com/eyetv_archive. If you want Apache username accounts with twiddles as in https://server.domain.com/~uname, specify "UserDir Sites" in the configuration file.
Alias /eyetv /Users/uname/Sites/EyeTV
<Directory "/Users/uname/Sites/EyeTV">
    AuthType Digest
    AuthName "EyeTV"
    AuthUserFile /Users/uname/.htdigest
    AuthGroupFile /dev/null
    Require user uname
    Options Indexes MultiViews
    AllowOverride All
    Order allow,deny
    Allow from all
</Directory>
Alias /eyetv_archive "/Volumes/Macintosh HD2/Documents/EyeTV Archive"
<Directory "/Volumes/Macintosh HD2/Documents/EyeTV Archive">
    AuthType Digest
    AuthName "EyeTV"
    AuthUserFile /Users/uname/.htdigest
    AuthGroupFile /dev/null
    Require user uname
    Options Indexes MultiViews
    AllowOverride All
    Order allow,deny
    Allow from all
</Directory>
I think you can turn Web off/on in Server.app to relaunch apached, or simply "sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart".
Securely copy to all desired remote clients the file IntermediateCA_SERVER.DOMAIN.COM_1.cer, which you exported from System Keychain above. Add this certificate to your remote keychain and trust it, allowing secure connections between remote clients and your server. Also on remote clients: Firefox>Advanced>Encryption>View Certificates>Authorities>Import...> Import this certificate into your browser. Now there should be a secure connection to https://server.domain.com without any SSL warnings.
One caveat is that there should be a nice way to establish secure SSL to https://domain.com and https://www.domain.com, but the automagically created SSL certificate only knows about server.domain.com. I attempted to follow this advice when I originally created the cert and add these additional domains (under "Subject Alternate Name Extension"), but the cert creation UI failed when I did this, so I just gave up. I hope that by the time these certs expire, someone posts some documentation on how to manage and change Lion Server SSL scripts AFTER the server has been promoted to an Open Directory Master. In the meantime, it would be much appreciated if anyone can post either how to add these additional domain names to the existing cert, or generate and/or sign a cert with a self-created Keychain Access root certificate authority. In my experience, any attempt to mess with the SSL certs automatically generated just breaks Lion Server.
Finally, if you don't want a little Apple logo as your web page icon, create your own 16×16 PNG and copy it to the file /Library/Server/Web/Data/Sites/Default/favicon.ico. And request that all web-crawling robots go away with the file /Library/Server/Web/Data/Sites/Default/robots.txt:
User-agent: *
Disallow: /
Misc
VNC easily works with iOS devices -- use a good passphrase. Edit /System/Library/LaunchDaemons/org.postgresql.postgres.plist and set "listen_addresses=127.0.0.1" to allow PostgreSQL connections over localhost. I've also downloaded snort/base/swatch to build an intrusion detection system, and used Macports's squid+privoxy to build a privacy-enhanced ad-blocking proxy server.

Privacy Enhancing Filtering Proxy and SSH Tunnel
Lion Server comes with its own web proxy, but chaining Squid and Privoxy together provides a capable and effective web proxy that can block ads and malicious scripts, and conceal information used to track you around the web. I've posted a simple way to build and use a privacy enhancing web proxy here. While you're at it, configure your OS and browsers to block Adobe Flash cookies and block Flash access to your camera, microphone, and peer networks. Read this WSJ article series to understand how this impacts your privacy. If you configure it to allow use for anyone on your LAN, be sure to open up ports 3128, 8118, and 8123 on your firewall.
If you've set up ssh and/or VPN as above, you can securely tunnel in to your proxy from anywhere. The syntax for ssh tunnels is a little obscure, so I wrote a little ssh tunnel script with a simpler flexible syntax. This script also allows secure tunnels to other services like VNC (port 5900). If you save this to a file ./ssht (and chmod a+x ./ssht), example syntax to establish an ssh tunnel through localhost:8080 (or, e.g., localhost:5901 for secure VNC Screen Sharing connects) looks like:
$ ./ssht 8080:[email protected]:3128
$ ./ssht 8080:alice@:
$ ./ssht 8080:
$ ./ssht 8018::8123
$ ./ssht 5901::5900 [Use the address localhost:5901 for secure VNC connects using OS X's Screen Sharing or Chicken of the VNC (sudo port install cotvnc)]
$ vi ./ssht
#!/bin/sh
# SSH tunnel to squid/whatever proxy: ssht [-p ssh_port] [localhost_port:][user_name@][ip_address][:remotehost][:remote_port]
USERNAME_DEFAULT=username
HOSTNAME_DEFAULT=domain.com
SSHPORT_DEFAULT=22
# SSH port forwarding specs, e.g. 8080:localhost:3128
LOCALHOSTPORT_DEFAULT=8080      # Default is http proxy 8080
REMOTEHOST_DEFAULT=localhost    # Default is localhost
REMOTEPORT_DEFAULT=3128         # Default is Squid port
# Parse ssh port and tunnel details if specified
SSHPORT=$SSHPORT_DEFAULT
TUNNEL_DETAILS=$LOCALHOSTPORT_DEFAULT:$USERNAME_DEFAULT@$HOSTNAME_DEFAULT:$REMOT EHOST_DEFAULT:$REMOTEPORT_DEFAULT
while [ "$1" != "" ]
do
case $1
in
    -p) shift;                  # -p option
        SSHPORT=$1;
        shift;;
     *) TUNNEL_DETAILS=$1;      # 1st argument option
        shift;;
esac
done
# Get local and remote ports, username, and hostname from the command line argument: localhost_port:user_name@ip_address:remote_host:remote_port
shopt -s extglob                        # needed for +(pattern) syntax; man sh
LOCALHOSTPORT=$LOCALHOSTPORT_DEFAULT
USERNAME=$USERNAME_DEFAULT
HOSTNAME=$HOSTNAME_DEFAULT
REMOTEHOST=$REMOTEHOST_DEFAULT
REMOTEPORT=$REMOTEPORT_DEFAULT
# LOCALHOSTPORT
CDR=${TUNNEL_DETAILS#+([0-9]):}         # delete shortest leading +([0-9]):
CAR=${TUNNEL_DETAILS%%$CDR}             # cut this string from TUNNEL_DETAILS
CAR=${CAR%:}                            # delete :
if [ "$CAR" != "" ]                     # leading or trailing port specified
then
    LOCALHOSTPORT=$CAR
fi
TUNNEL_DETAILS=$CDR
# REMOTEPORT
CDR=${TUNNEL_DETAILS%:+([0-9])}         # delete shortest trailing :+([0-9])
CAR=${TUNNEL_DETAILS##$CDR}             # cut this string from TUNNEL_DETAILS
CAR=${CAR#:}                            # delete :
if [ "$CAR" != "" ]                     # leading or trailing port specified
then
    REMOTEPORT=$CAR
fi
TUNNEL_DETAILS=$CDR
# REMOTEHOST
CDR=${TUNNEL_DETAILS%:*}                # delete shortest trailing :*
CAR=${TUNNEL_DETAILS##$CDR}             # cut this string from TUNNEL_DETAILS
CAR=${CAR#:}                            # delete :
if [ "$CAR" != "" ]                     # leading or trailing port specified
then
    REMOTEHOST=$CAR
fi
TUNNEL_DETAILS=$CDR
# USERNAME
CDR=${TUNNEL_DETAILS#*@}                # delete shortest leading +([0-9]):
CAR=${TUNNEL_DETAILS%%$CDR}             # cut this string from TUNNEL_DETAILS
CAR=${CAR%@}                            # delete @
if [ "$CAR" != "" ]                     # leading or trailing port specified
then
    USERNAME=$CAR
fi
TUNNEL_DETAILS=$CDR
# HOSTNAME
HOSTNAME=$TUNNEL_DETAILS
if [ "$HOSTNAME" == "" ]                # no hostname given
then
    HOSTNAME=$HOSTNAME_DEFAULT
fi
ssh -p $SSHPORT -L $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT -l $USERNAME $HOSTNAME -f -C -q -N \
    && echo "SSH tunnel established via $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT\n\tto $USERNAME@$HOSTNAME:$SSHPORT." \
    || echo "SSH tunnel FAIL."

Lion Server: How can I restore OD after a crash ?

Hello all,
the issue is not new but I found no way how to repair the OD database. I admit I am no expert and I rely upon senior advice.
I ran the restore command as described here to no avail:
http://www.prestonlee.com/2009/07/08/recovering-a-corrupt-openldap-database-on-o sx-server/
What happened ?
After a Finder crash we had to re-boot our Lion Server (10.7.5) with the power button and after that the Network Accounts were all gone because OD's LDAP, Kerberos and Password Server were no longer running.
I re-stored the server from a TM back-up just the day before and I got back the network accounts but this is probably just a last resort.
What is the quickest way to restore OD services in Lion Server ?
Thanks for your help,
Twistan
P.S.
The TM restore from the previous day's backup did NOT RESTORE the following:
1) calendars of network accounts
2) Enrolled devices (profile manager)
I shall post these experiences in a separate thread.

If you originally bought the iWork apps through the Mac App Store (doubtful based on your profile) you can reinstall from the Mac App Store using your Apple ID. The Mac App Store does require at least Mac OS 10.6.6.
If you originally installed from a retail boxed DVD, use that DVD to reinstall.
If you downloaded the trial & bought a serial number electronically, you can redownload the trial & apply the serial number you were given. If you do not have the e-mail with the serial number you can get the serial number from the list of online purchases in your Apple Store account. You do not need a new serial number from Apple. Go to the Store tab at the top of this page, click Account (small, faint gray word next to the cart icon in the upper right), click on Downloadable Software Purchases & sign in.

OSX Mountain Lion Server - how do you uninstall this including services

Hi All,
Sorry if the question has been asked before.
I have Mountain Lion 10.8.5 and installed OSX Mountain Lion Server (2.2.2) and run into a couple of issues after installed successfully.
* I no longer can add users and groups.
* Open Directory fails to connect.
So I read some forums and uninstalled the server by trashing it, deleting /Libaray/Server, empty trash and reboot. But when I reinstalled the server it renabled all the services that I had previously and still not able to add users and groups. Open Directory fails to connect "not able to load replica" So I try to create a new OD and get an error the server is already a Network Server.
So basicaly I want to start from scratch and need some assistance how to get rid of OSX Server.
Thanks
Sahid

Wipe the disk, and reinstall OS X. (Not fun, of course. I just created a bootable USB disk for this purpose, and nuked an errant server configuration. A "target practice" server used for testing purposes had gone awry, and needed to be wholly reset. So I know what you're going through. Visit here or here for some instructions.)
FWIW, usual trigger for problems with OS X Server on a NAT'd network is bad DNS. That step gets skipped, or folks think they can refer to ISP or off-LAN DNS servers, and problems ensue. OS X Server needs LAN-local DNS when NAT is in use.

Lion Server, SL Client - list of users not displaying - only 'other'

#1
So I've been running a SL Server at home without (many!) problems. All SL clients connected to server just fine and you always got a list of users to log in from (as you'd expect).
However, installed Lion Server from scratch on a my Mini Server (again without too much problems). All my client Macs (Macbook Air, Macbook, iMac - all core2duo etc) have been upgraded to Lion as well and they're all fine. You get a list of possible users to log on to - which is fine.
However, I have one core duo (white) 2.0Ghz iMac which (obviously) is remaining with Snow Leopard client but does not display a list of users -- just Admin and 'Other. I've triped check the settings and bearing mind this was ok with SL Server, I can't figure out why this is. I even re-installed SL client on said iMac and I still get no list of users.
I can log into the server using 'Other' i.e. specifiy full user name and password, so I know it is connecting to the lion server
So I am confused as to whether its a Client or Server problem (I presume server) -- any ideas?
#2
Less of a serious problem, I am still getting the old (SL server) welcome message on all my Lion Clients logon screen (i.e. on the list of users) - how can this be if the 'welcome to snow leopard server' has been completely erased with Lion server? (I assumed the message was stored in pram but again, zapping it, does not change it) I can't find in Lion server to config the welcome message either. Maybe zapping Pram of server? any ideas?
Thanks in advance
Rob

Hi
Managed Preferences are composited (combined) together and cached locally on client workstations. These are stored in /Library/Managed Preferences. Remove the folder and restart the workstation. Hopefully on next client login this should pick up what you've defined for MCX at User, Computer and Group level.
For your other problem on the 10.6 workstation issue these commands:
sudo rm -R -v /Library/Preferences/SystemConfiguration
sudo rm -R -v /Library/Preferences/DirectoryService
sudo rm -R -v /Library/Preferences/edu.mit.Kerberos
sudo rm -R -v /Library/Managed\ Preferences
sudo rm -R -v /Library/Caches/*
sudo rm -R -v /private/tmp/*
sudo reboot now
On successful reboot login as the local administrator and assign the workstation an appropriate name in the Sharing Preferences Pane. Make sure it's using the same NTP Server as your Server and then join it to the LDAP Server using the Accounts Preferences Pane > Login Options > Join. Hopefully this should get things back on track.
HTH?
Tony

Backup user mail

Hey,
Is there a way to manually backup the mails that have been sent/received by the users? And which directory do I have to safe?
My system blew up and I have to recover the mails and rebuild the system.

Another method would be to do regular copies / clones of your mail directory using Carbon Copy Cloner - I actually do this with the server boot volume regularly.
-Doug

How to recover backup user data after a restore

I had a disk fail and could not boot. while in the restore software I was able to backup user data to a USB drive. Now that I've restored from the restore partition and got it running windows 7 home again, I don;t see how to recover the user data made with the low level software. Windows back up doesn't seem to recognise it and I can't find an HP utility to get at it.
A program saved with the .wim back up files brought up an HP restore manager application that then copied the filed to my new C drive but how do I actually get it to recover them into their appropriate places and recreate users etc.
Or, should I just consider myself lucky to still have copies of the files at all? I'll not be real happy about that because it will be a tom of work to recreate everything manually even with the files.
I'm hoping someone out there has a better solution for recovering all my user data into my new restored initial image.
thanks,
-dcb

Hello dcbrower, You may be able to use the program Universal Extractor to extract the files in the .wim file.
This is a Free program that can be found at this Link. .
Just extract the files in the wim file to a location you would like.
Please click the White Kudos star on the left, to say thanks.
Please mark Accept As Solution if it solves your problem.

How deploy my application in isp server how give javaderby backup to isp

hi master
sir i use stuido creator with derby database
sir test this web application in my computer that give me right result
sir how i deploy my this application in isp server,
which file i give to isp that they past in thier server and give me address that i use on net
how i give database to isp how i get backup of java derby and how add new table in java derby
please give me idea
thank's
aamir

I am new at this also, so I don't know if this helps... It is based on what I had experienced with...
There should be a "webapps" directory in any tomcat installation, I don't think it matters if it is a Linux server or NT server or a local box.
We put the WAR file inside the webapps directory, and I believed we had to restart the Tomcat service for tomcat to "recognize" the change and then automatically "expand" the war file. Accessing it from the Web will not cause the WAR file to expand... I think :D I don't think your "web hosting" company would have given you "admin" right to restart tomcat unless he/she is a good friend of yours; so you might have to ask them to do it for you... I know it sounds stupid, but I also think that tomcat need to connect with another server such as Apache, so Apache need to be running also (or some Web server that can deal connect to Tomcat); do you know what web server is running on this web hosting? I would assume Apache, but I am always paranoid about these things:D
Anyway, that's as much as I know about the subject...

Lion Server Mobile accounts for Macbook users

Hi All,
I'm looking for a 'Best Practice' when setting up mobile accounts for Macbook users who just want to be able to use their machine away from the office.
We DON'T want to sync anything, just create a mobile account on the Mac (a bit like a domain profile on a PC).
I understand that this can be configured through workgroup manager in preferences for either the machine or the user account.
What should the mobility settings be set to? Obviously the Account creation box is ticked but what should the 'Create home using' settings be ?
Thanks Trappers

I figured out how to delete the user from the command line.
I used Remote Desktop to send as Root: dscl . -delete /Users/userID
Where userID is the user's shortname.
You could also log in locally and use the terminal to send:
sudo dscl . -delete /Users/userID

Lion Server: How can i host multiple emailaccounts?

Hi there,
I've a problem.
I have installed Lion os x server with the latest updates.
I have the following domains that i want to host with emails.
www.example1.com
www.example2.com
Hosting of website is not a problem. I have it working including PHP+MYSQL.
But now..How can i setup to receive and send emails with both domains? (www.example1.com and www.example2.com)
I want to have something like this:
www.example1.com:
[email protected]
Hostname: server.example1.com
Outgoing: server.example1.com
and
www.example2.com:
[email protected]
Hostname: server.example2.com
Outgoing: server.example2.com
for www.example1.com it's the standard one and works fine (including apple Push). But realy confusing that i cannot get it work with example2.com.
Can anybody help me? I've searched the whole web but cannot find a good answer.
Thank you very much in advance!
JBressers

G'day mate,
You are posting in the 10.7 Lion client forum, rather than the 10.7 Lion Server forum.
Thus it's quite likely that no-one here know the answer.
Here's the link to the correct forum:
https://discussions.apple.com/community/servers_enterprise_software/mac_os_x_lio n_server
Good luck!
Rodney

Update to Mountain Lion Server kills Time Machine Backups

Okay, here's the scenario:
Client:
MacBook Pro running Mountain Lion
Server:
Mac Mini running Mountain Lion Server using an SSD boot and Promise Pegasus Thunderbolt RAID
Prior to updating the Mac Mini to Mountain Lion Server (previously just using regular Mountain Lion) I was happily backing up using Time Machine over AFP. Since the update to Server I get the Time Machine message:
"The network backup disk does not support the required AFP features."
The network drive is also no longer available for selection within Time Machine (once it's been deselected).
Any easy ideas on a fix?

Time Machine won't back up to Mountain...: Apple Support Communities

Lion Server: how best to backup user mail?

Similar Messages

Maybe you are looking for