Lion Server with PCs on Network
This setup would be a Mac mini running OS X Lion Server serving only PCs.
Anyone have experience and comments/suggestions on using Lion Server to serve PCs in a classroom environment? (Small school)
What do you do about virus protection for PCs? Local installation on each?
What additional software would you recommend for this type of setup?
Any ideas or suggestions would be greatly appreciated!!!
My office has 4 Macs and 3 PC's. We use a Mac Mini running Lion Server. The Sharing of files and assigning users and permissions is no problem. However, because I run just 3 PCs I have each with their own Anti-virus and their own backup software, backing up to a shared drive on the server.
Similar Messages
-
Mountain Lion Server with Network User
I have a Mountain Lion Server with a network user. The whole system has been redone from Lion Server and on top of that I moved location, ISP, hardware and a few other things. The way I used the setup on Lion was to bind my MBP to the server and login from the MBP login window with the network account. If for whatever reason I wanted to look at the network account on the server, I could fast user swtich and everything that was open ie Safari, Mail, etc would be the same as it was on the MBP.
Now if I'm logged into the network user on the MBP and then go to the server, it logs in as if I've just booted. They share the home folder and any new files/folders created on one shows on the other. But if Mail is open on the MBP it won't be open on the server.
Does anyone have any ideas or suggestions?Thanks for your reply.
I believe I got it to work, but,... How do you get the network account users to show up on the login window of the client computer? The login window shows the name of the client computer and the local accounts on the client computer. When I select Other in the login list I can login using a network account user id and it logs in. The network account user names do not show up on the login window -
Screen sharing to OS X Lion Server with non-admin account
I have set up a Lion Server with one admin (in addition to the root user) and several non-admin normal accounts. In Server.app, I have enabled remote login with ssh, and remote management via screen sharing. I am unable to use Screen Sharing to connect to the server from the non-admin accounts, but able to use the admin account. I've read that it is only enabled for admin users, but need to access from non-admin accounts, and I can't add these accounts to the admin group. Is there a way to do this with Workgroup Manager? I tried changing the Remote Management settings in System Preferences by adding the non-admin, but when selecting 'Observe' and 'Control' in the options for the user, they are not saved.
I resolved this issue by deselecting the "Enable screen sharing and remote management" in Server.app and going to System Preferences, Sharing Preferences, Screen Sharing, and allowing access for "All Users". If you have some users you want to allow VNC, you can create a group, add the allowed users to the group, and add the group under "Only these users".
-
I just purchased the Mac Mini Server with the intention of replacing Lion Server with Lion for the first hard drive while installing Windows 7 thru Bootcamp on the second hard drive. Is it possible for me to do this? Thanks.
I would use Parallels or VMWare and use the second drive to hold the virtual machine. That way the VM only uses the space that it needs and you can still use the remainder of the drive for other things, not to mention that you would not need to reboot to run windows.
Also Time Machine does not back up a boot camp partition. -
Restore a user's Address Book on Lion Server with TimeMachine available
Has anybody found the solution to restore a single user's Address Book on Lion Server with TimeMachine available
I recently needed to restore an older version (by a few hours) of my AddressBook DB (on Lion Client) and Time Machine simply kept crashing! Finally, what I had to do to get it going was to quit AddressBook, delete the contents of ~/Library/Application Support/AddressBook, and then open that folder within Time Machine (via Finder), so as to only restore (an older version of) the "MetaData" folder within (and nothing else).
Hope this helps. -
Sharing a Calendar from Mountain Lion server with Snow Leopard users on local network
Hello.
I have a new Mac Mini Server running Mountain Lion Server and I want to create a shared calender for a mix of Lion, Mountain Lion and Snow Leopard users on our local network. Does anyone have any info on how to do this? I have tried using the Server App and Calender Help within the applications, but the content isn't available. I have managed to create a Shared Calender from the Mini's Calendar App where I've added users and I can see a 'wireless' transmit icon to the right of the Calendar name - but I cant get any of the users' iCal or Calendar apps to recognise the Calendar on the local network. I've also created a Location in the Server App under Calendar and still can't see anything on the local network. Am I missing something really obvious?
Thanks in advance!Sorry, I hadn't explained everything fully. I don't want to open up my VPN to friends and family. I do have the router assigning the NAS a fixed IP, so that when I connect over the VPN I can use the local IP address to connect, as you have mentioned.
What I would like is for my friends or family to connect to my server over AFP or SMB using the public IP of my network, which my router then forwards onto my server, and display the available sharepoints configured using Mountain Lion server. However, the NAS drive is not an available option this way as it has a separate IP to the server.
As the NAS alllows guest access, I also don't want to configure the router to forward a specific port to it, as this way it will be open to the internet. I wanted to try and use my server as an authentication point, with profiles set using Mountain Lion server, and limited to file sharing services only.
Hope this makes sense. -
I recently installed a fresh version of Lion Server after attempting to fix a broken upgrade. With some help from others, I've managed to get all the new features working and have kept notes, having found that many or most of the necessary installation steps for both the OS and its services are almost entirely undocumented. When you get them working, they work great, but the entire process is very fragile, with simple setup steps causing breaks or even malicious behaviors. In case this is useful to others, here are my notes.
Start with an erased, virgin, single guid partitioned drive. Not an upgrade. Not simply a repartitioned drive. Erased. Clean. Anything else can and probably will break the Lion Server install, as I discovered myself more than once. Before erasing my drive, I already had Lion and made a Lion install DVD from instructions widely available on the web. I suppose you could also boot into the Lion recovery partition and use disk utility to erase the OS X partition then install a new partition, but I cut a DVD. The bottom line is to erase any old OS partitions. And of course to have multiple, independent backups: I use both Time Machine with a modified StdExclusions.plist and Carbon Copy Cloner.
Also, if you will be running your own personal cloud, you will want to know your domain name ahead of time, as this will be propagated everywhere throughout server, and changing anything related to SSL on Lion Server is a nightmare that I haven't figured out. If you don't yet have a domain name, go drop ten dollars at namecheap.com or wherever and reserve one before you start. Soemday someone will document how to change this stuff without breaking Lion Server, but we're not there yet. I'll assume the top-level domain name "domain.com" here.
Given good backups, a Lion Install DVD (or Recovery Partition), and a domain name, here are the steps, apparently all of which must be more-or-less strictly followed in this order.
DVD>Disk Utility>Erase Disk [or Recovery Partition>Disk Utility>Erase Partition]
DVD>Install Lion
Reboot, hopefully Lion install kicks in
Update, update, update Lion (NOT Lion Server yet) until no more updates
System Preferences>Network>Static IP on the LAN (say 10.0.1.2) and Computer name ("server" is a good standbye)
Terminal>$ sudo scutil --set HostName server.domain.com
App Store>Install Lion Server and run through the Setup
Download install Server Admin Tools, then update, update, update until no more updates
Server Admin>DNS>Zones [IF THIS WASN'T AUTOMAGICALLY CREATED (mine wasn't): Add zone domain.com with Nameserver "server.domain.com." (that's a FQDN terminated with a period) and a Mail Exchanger (MX record) "server.domain.com." with priority 10. Add Record>Add Machine (A record) server.domain.com pointing to the server's static IP. You can add fancier DNS aliases and a simpler MX record below after you get through the crucial steps.]
System Prefs>Network>Advanced>Set your DNS server to 127.0.0.1
A few DNS set-up steps and these most important steps:
A. Check that the Unix command "hostname" returns the correct hostname and you can see this hostname in Server.app>Hardware>Network
B. Check that DNS works: the unix commands "host server.domain.com" and "host 10.0.1.2" (assuming that that's your static IP) should point to each other. Do not proceed until DNS works.
C. Get Apple Push Notification Services CA via Server.app>Hardware>Settings><Click toggle, Edit... get a new cert ...>
D. Server.app>Profile Manager>Configure... [Magic script should create OD Master, signed SSL cert]
E. Server.app>Hardware>Settings>SSL Certificate> [Check to make sure it's set to the one just created]
F. Using Server.app, turn on the web, then Server.app>Profile Manager> [Click on hyperlink to get to web page, e.g. server.domain.com/profilemanager] Upper RHS pull-down, install Trust Profile
G. Keychain Access>System>Certificates [Find the automatically generated cert "Domain", the one that is a "Root certificate authority", Highlight and Export as .cer, email to all iOS devices, and click on the authority on the device. It should be entered as a trusted CA on all iOS devices. While you're at it, highlight and Export... as a .cer the certificate "IntermediateCA_SERVER.DOMAIN.COM_1", which is listed an an "Intermediate CA" -- you will use this to establish secure SSL connections with remote browsers hitting your server.]
H. iOS on LAN: browse to server.domain.com/mydevices> [click on LHS Install trust cert, then RHS Enroll device.
I. Test from web browser server.domain.com/mydevices: Lock Device to test
J. ??? Profit
12. Server Admin>DNS>Zones> Add convenient DNS alias records if necessary, e.g., mail.domain.com, smtp.domain.com, www.domain.com. If you want to refer to your box using the convenient shorthand "domain.com", you must enter the A record (NOT alias) "domain.com." FQDN pointing to the server's fixed IP. You can also enter the convenient short MX record "domain.com." with priority 11. This will all work on the LAN -- all these settings must be mirrored on the outside internet using the service from which you registered domain.com.
You are now ready to begin turning on your services. Here are a few important details and gotchas setting up cloud services.
Firewall
Server Admin>Firewall>Services> Open up all ports needed by whichever services you want to run and set up your router (assuming that your server sits behind a router) to port forward these ports to your router's LAN IP. This is most a straightforward exercise in grepping for the correct ports on this page, but there are several jaw-droppingly undocumented omissions of crucial ports for Push Services and Device Enrollment. If you want to enroll your iOS devices, make sure port 1640 is open. If you want Push Notifications to work (you do), then ports 2195, 2196, 5218, and 5223 must be open. The Unix commands "lsof -i :5218" and "nmap -p 5218 server.domain.com" (nmap available from Macports after installing Xcode from the App Store) help show which ports are open.
SSH
Do this with strong security. Server.app to turn on remote logins (open port 22), but edit /etc/sshd_config to turn off root and password logins.
PermitRootLogin no
PasswordAuthentication no
ChallengeResponseAuthentication no
I'm note sure if toggling the Allow remote logins will load this config file or, run "sudo launchctl unload -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist ; sudo launchctl load -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist" to restart the server's ssh daemon.
Then use ssh-keygen on remote client to generate public/private keys that can be used to remotely login to the server.
client$ ssh-keygen -t rsa -b 2048 -C client_name
[Securely copy ~/.ssh/id_rsa.pub from client to server.]
server$ cat id_rsa.pub > ~/.ssh/known_hosts
I also like DenyHosts, which emails detected ssh attacks to [email protected]. It's amazing how many ssh attacks there are on any open port 22. Not really an added security feature if you've turned off password logins, but good to monitor. Here's a Lion Server diff for the config file /usr/share/denyhosts:
$ diff denyhosts.cfg-dist denyhosts.cfg
12c12
< SECURE_LOG = /var/log/secure
> #SECURE_LOG = /var/log/secure
22a23
> SECURE_LOG = /var/log/secure.log
34c35
< HOSTS_DENY = /etc/hosts.deny
> #HOSTS_DENY = /etc/hosts.deny
40a42,44
> #
> # Mac OS X Lion Server
> HOSTS_DENY = /private/etc/hosts.deny
195c199
< LOCK_FILE = /var/lock/subsys/denyhosts
> #LOCK_FILE = /var/lock/subsys/denyhosts
202a207,208
> LOCK_FILE = /var/denyhosts/denyhosts.pid
> #
219c225
< ADMIN_EMAIL =
> ADMIN_EMAIL = [email protected]
286c292
< #SYSLOG_REPORT=YES
> SYSLOG_REPORT=YES
Network Accounts
User Server.app to create your network accounts; do not use Workgroup Manager. If you use Workgroup Manager, as I did, then your accounts will not have email addresses specified and iCal Server WILL NOT COMPLETELY WORK. Well, at least collaboration through network accounts will be handled clunkily through email, not automatically as they should. If you create a network account using Workgroup Manager, then edit that account using Server.app to specify the email to which iCal invitations may be sent. Server.app doesn't say anything about this, but that's one thing that email address entry is used for. This still isn't quite solid on Lion Server, as my Open Directory logs on a freshly installed Lion Server are filled with errors that read:
2011-12-12 15:05:52.425 EST - Module: SystemCache - Misconfiguration detected in hash 'Kerberos':
User 'uname' (/LDAPv3/127.0.0.1) - ID 1031 - UUID 98B4DF30-09CF-42F1-6C31-9D55FE4A0812 - SID S-0-8-83-8930552043-0845248631-7065481045-9092
Oh well.
Email
Email aliases are handled with the file /private/etc/postfix/aliases. Do something like this
root: myname
admin: myname
sysadmin: myname
certadmin: myname
webmaster: myname
my_alternate: myname
Then run "sudo newaliases". If your ISP is Comcast or some other large provider, you probably must proxy your outgoing mail through their SMTP servers to avoid being blocked as a spammer (a lot of SMTP servers will block email from Comcast/whatever IP addresses that isn't sent by Comcast). Use Server.app>Mail to enter your account information. Even then, the Lion Server default setup may fail using this proxy. I had to do this with the file /private/etc/postfix/main.cf:
cd /etc/postfix
sudo cp ./main.cf ./main.cf.no_smtp_sasl_security_options
sudo echo 'smtp_sasl_security_options = noanonymous' >> ./main.cf
sudo serveradmin stop mail
sudo serveradmin start mail
Finally, make sure that you're running a blacklisting srevice yourself! Server Admin>Mail>Filter> Use spamhaus.org as a blacklister. Finally, set up mail to use strong Kerberos/MD5 settings under on Server Admin>Mail>Advanced. Turn off password and clear logins. The settings should be set to "Use" your SSL cert, NOT "Require". "Require" consistently breaks things for me.
If you already installed the server's Trust Certificate as described above (and opened up the correct ports), email to your account should be pushed out to all clients.
iCal Server
Server.app>Calendar>Turn ON and Allow Email Invitations, Edit... . Whatever you do, do NOT enter your own email account information in this GUI. You must enter the account information for local user com.apple.calendarserver, and the password for this account, which is stored in the System keychain: Keychain Access>System> Item com.apple.servermgr_calendar. Double-click and Show Password, copy and paste into Server.app dialog. This is all described in depth here. If you enter your own account information here (DO NOT!), the iCal Server will delete all Emails in your Inbox just as soon as it reads them, exactly like it works for user com.apple.calendarserver. Believe me, you don't want to discover this "feature", which I expect will be more tightly controlled in some future update.
Web
The functionality of Server.app's Web management is pretty limited and awful, but a few changes to the file /etc/apache2/httpd.conf will give you a pretty capable and flexible web server, just one that you must manage by hand. Here's a diff for httpd.conf:
$ diff httpd.conf.default httpd.conf
95c95
< #LoadModule ssl_module libexec/apache2/mod_ssl.so
> LoadModule ssl_module libexec/apache2/mod_ssl.so
111c111
< #LoadModule php5_module libexec/apache2/libphp5.so
> LoadModule php5_module libexec/apache2/libphp5.so
139,140c139,140
< #LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
< #LoadModule encoding_module libexec/apache2/mod_encoding.so
> LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
> LoadModule encoding_module libexec/apache2/mod_encoding.so
146c146
< #LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
> LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
177c177
< ServerAdmin [email protected]
> ServerAdmin [email protected]
186c186
< #ServerName www.example.com:80
> ServerName domain.com:443
677a678,680
> # Server-specific configuration
> # sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart
> Include /etc/apache2/mydomain/*.conf
I did "sudo mkdir /etc/apache2/mydomain" and add specific config files for various web pages to host. For example, here's a config file that will host the entire contents of an EyeTV DVR, all password controlled with htdigest ("htdigest ~uname/.htdigest EyeTV uname"). Browsing to https://server.domain.com/eyetv points to /Users/uname/Sites/EyeTV, in which there's an index.php script that can read and display the EyeTV archive at https://server.domain.com/eyetv_archive. If you want Apache username accounts with twiddles as in https://server.domain.com/~uname, specify "UserDir Sites" in the configuration file.
Alias /eyetv /Users/uname/Sites/EyeTV
<Directory "/Users/uname/Sites/EyeTV">
AuthType Digest
AuthName "EyeTV"
AuthUserFile /Users/uname/.htdigest
AuthGroupFile /dev/null
Require user uname
Options Indexes MultiViews
AllowOverride All
Order allow,deny
Allow from all
</Directory>
Alias /eyetv_archive "/Volumes/Macintosh HD2/Documents/EyeTV Archive"
<Directory "/Volumes/Macintosh HD2/Documents/EyeTV Archive">
AuthType Digest
AuthName "EyeTV"
AuthUserFile /Users/uname/.htdigest
AuthGroupFile /dev/null
Require user uname
Options Indexes MultiViews
AllowOverride All
Order allow,deny
Allow from all
</Directory>
I think you can turn Web off/on in Server.app to relaunch apached, or simply "sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart".
Securely copy to all desired remote clients the file IntermediateCA_SERVER.DOMAIN.COM_1.cer, which you exported from System Keychain above. Add this certificate to your remote keychain and trust it, allowing secure connections between remote clients and your server. Also on remote clients: Firefox>Advanced>Encryption>View Certificates>Authorities>Import...> Import this certificate into your browser. Now there should be a secure connection to https://server.domain.com without any SSL warnings.
One caveat is that there should be a nice way to establish secure SSL to https://domain.com and https://www.domain.com, but the automagically created SSL certificate only knows about server.domain.com. I attempted to follow this advice when I originally created the cert and add these additional domains (under "Subject Alternate Name Extension"), but the cert creation UI failed when I did this, so I just gave up. I hope that by the time these certs expire, someone posts some documentation on how to manage and change Lion Server SSL scripts AFTER the server has been promoted to an Open Directory Master. In the meantime, it would be much appreciated if anyone can post either how to add these additional domain names to the existing cert, or generate and/or sign a cert with a self-created Keychain Access root certificate authority. In my experience, any attempt to mess with the SSL certs automatically generated just breaks Lion Server.
Finally, if you don't want a little Apple logo as your web page icon, create your own 16×16 PNG and copy it to the file /Library/Server/Web/Data/Sites/Default/favicon.ico. And request that all web-crawling robots go away with the file /Library/Server/Web/Data/Sites/Default/robots.txt:
User-agent: *
Disallow: /
Misc
VNC easily works with iOS devices -- use a good passphrase. Edit /System/Library/LaunchDaemons/org.postgresql.postgres.plist and set "listen_addresses=127.0.0.1" to allow PostgreSQL connections over localhost. I've also downloaded snort/base/swatch to build an intrusion detection system, and used Macports's squid+privoxy to build a privacy-enhanced ad-blocking proxy server.Privacy Enhancing Filtering Proxy and SSH Tunnel
Lion Server comes with its own web proxy, but chaining Squid and Privoxy together provides a capable and effective web proxy that can block ads and malicious scripts, and conceal information used to track you around the web. I've posted a simple way to build and use a privacy enhancing web proxy here. While you're at it, configure your OS and browsers to block Adobe Flash cookies and block Flash access to your camera, microphone, and peer networks. Read this WSJ article series to understand how this impacts your privacy. If you configure it to allow use for anyone on your LAN, be sure to open up ports 3128, 8118, and 8123 on your firewall.
If you've set up ssh and/or VPN as above, you can securely tunnel in to your proxy from anywhere. The syntax for ssh tunnels is a little obscure, so I wrote a little ssh tunnel script with a simpler flexible syntax. This script also allows secure tunnels to other services like VNC (port 5900). If you save this to a file ./ssht (and chmod a+x ./ssht), example syntax to establish an ssh tunnel through localhost:8080 (or, e.g., localhost:5901 for secure VNC Screen Sharing connects) looks like:
$ ./ssht 8080:[email protected]:3128
$ ./ssht 8080:alice@:
$ ./ssht 8080:
$ ./ssht 8018::8123
$ ./ssht 5901::5900 [Use the address localhost:5901 for secure VNC connects using OS X's Screen Sharing or Chicken of the VNC (sudo port install cotvnc)]
$ vi ./ssht
#!/bin/sh
# SSH tunnel to squid/whatever proxy: ssht [-p ssh_port] [localhost_port:][user_name@][ip_address][:remotehost][:remote_port]
USERNAME_DEFAULT=username
HOSTNAME_DEFAULT=domain.com
SSHPORT_DEFAULT=22
# SSH port forwarding specs, e.g. 8080:localhost:3128
LOCALHOSTPORT_DEFAULT=8080 # Default is http proxy 8080
REMOTEHOST_DEFAULT=localhost # Default is localhost
REMOTEPORT_DEFAULT=3128 # Default is Squid port
# Parse ssh port and tunnel details if specified
SSHPORT=$SSHPORT_DEFAULT
TUNNEL_DETAILS=$LOCALHOSTPORT_DEFAULT:$USERNAME_DEFAULT@$HOSTNAME_DEFAULT:$REMOT EHOST_DEFAULT:$REMOTEPORT_DEFAULT
while [ "$1" != "" ]
do
case $1
in
-p) shift; # -p option
SSHPORT=$1;
shift;;
*) TUNNEL_DETAILS=$1; # 1st argument option
shift;;
esac
done
# Get local and remote ports, username, and hostname from the command line argument: localhost_port:user_name@ip_address:remote_host:remote_port
shopt -s extglob # needed for +(pattern) syntax; man sh
LOCALHOSTPORT=$LOCALHOSTPORT_DEFAULT
USERNAME=$USERNAME_DEFAULT
HOSTNAME=$HOSTNAME_DEFAULT
REMOTEHOST=$REMOTEHOST_DEFAULT
REMOTEPORT=$REMOTEPORT_DEFAULT
# LOCALHOSTPORT
CDR=${TUNNEL_DETAILS#+([0-9]):} # delete shortest leading +([0-9]):
CAR=${TUNNEL_DETAILS%%$CDR} # cut this string from TUNNEL_DETAILS
CAR=${CAR%:} # delete :
if [ "$CAR" != "" ] # leading or trailing port specified
then
LOCALHOSTPORT=$CAR
fi
TUNNEL_DETAILS=$CDR
# REMOTEPORT
CDR=${TUNNEL_DETAILS%:+([0-9])} # delete shortest trailing :+([0-9])
CAR=${TUNNEL_DETAILS##$CDR} # cut this string from TUNNEL_DETAILS
CAR=${CAR#:} # delete :
if [ "$CAR" != "" ] # leading or trailing port specified
then
REMOTEPORT=$CAR
fi
TUNNEL_DETAILS=$CDR
# REMOTEHOST
CDR=${TUNNEL_DETAILS%:*} # delete shortest trailing :*
CAR=${TUNNEL_DETAILS##$CDR} # cut this string from TUNNEL_DETAILS
CAR=${CAR#:} # delete :
if [ "$CAR" != "" ] # leading or trailing port specified
then
REMOTEHOST=$CAR
fi
TUNNEL_DETAILS=$CDR
# USERNAME
CDR=${TUNNEL_DETAILS#*@} # delete shortest leading +([0-9]):
CAR=${TUNNEL_DETAILS%%$CDR} # cut this string from TUNNEL_DETAILS
CAR=${CAR%@} # delete @
if [ "$CAR" != "" ] # leading or trailing port specified
then
USERNAME=$CAR
fi
TUNNEL_DETAILS=$CDR
# HOSTNAME
HOSTNAME=$TUNNEL_DETAILS
if [ "$HOSTNAME" == "" ] # no hostname given
then
HOSTNAME=$HOSTNAME_DEFAULT
fi
ssh -p $SSHPORT -L $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT -l $USERNAME $HOSTNAME -f -C -q -N \
&& echo "SSH tunnel established via $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT\n\tto $USERNAME@$HOSTNAME:$SSHPORT." \
|| echo "SSH tunnel FAIL." -
Mountain Lion Server with Windows 8.1 Client communication problems
We have a Mountain Lions Server and several diffent Clients that need access to it.
Macs work fine Linux clients work fine
Windows 8.1 only "sees" the router but not the Server or the Printer
the "Windows proofs" tell me its a Problem with the server
has anyone an Idea what I can do?
And pls don't tell me I should change all Windows clients to Mac. If I had so much money I would, but at the moment the existing systems need to stay.
@ Templeton Pack
I know this is a Mac Community
and no google doesn't solve all ProblemsWell no, Google doesn't solve all problems, but its a great place to start.
As far as your issue goes, you need to provide more details before anyone could begin to guess, as we're not mind readers here.
What do you mean by "Windows only sees the router, not the server"? What does "sees" mean in this context?
Who / what is Windows proofs?
How are you trying to access the server? SMB file sharing? If so, how are you trying to connect? What happens when you try? Do the users trying to authenticate to the server have an account on it and access to the necessary services? -
Lion Server with mountain lion computers?
Hello,
So i am running a mac pro 1.1 with Lion server because it won't run mountain lion, I am thinking about upgrading my other computers to mountain lion are there any issues or features that aren't availible or will be problematic?
ThanksThe difference between case 1 and cases 2-4 are that in 1 the client is letting the server expand the group membership, and in 2-4 it's the client doing that expansion. The group members returned by the server when it expands the group are "guaranteed" to work because the server definitely knows about them (and providing them to the client). In the cases where it's the client adding the attendees, I suppose there must be some mismatch sometimes, although I don't know what that could be if the email addresses are the same between the users you've created via Contacts.app and the users you've created via Server.app.
I actually tried this setup and it was working fine. What caused you to want to duplicate the users and groups that you have in Server.app into Contacts.app? -
Can't acces lion server with Mountain Lion
I upgraded to to Mountain Lion and now its telling me I cannot access Lion Server on this Mac? I was able to access it before the upgrade.
Did you upgrade to the Server version of Mountain Lion? If you did not that explains why you cannot access it. However if you did please repost in the correct forum which is:
https://discussions.apple.com/community/mac_os/os_x_mountain_lion -
Archiving Mail on Mountain Lion Server with MailSteward or Other?
Anyone here successfully archiving mail for multiple user accounts on Mountain Lion Server without spending a bunch of dough?
From poking around a bit I guess mail is in /Library/Server/Mail/Data, but I don't think MailSteward can pull from there, dovecot daemon stuff that is over my head.
Interested in solutions short of going to Kerio Connect, which looks to provide the archiving functionality I need (and maybe also lets users change their own passwords, which would also be nice).
Thanks!Eustace - Thanks for taking a crack at it! I saw this same post as well but it doesn't answer my question about how to create and launch an Out of Office Reply for Apple Mail on the new Mountain Lion Server?
I'm not looking to create an out of office rule on my computer but on our Mountain Lion Server like we used to be able to do on Lion Server. -
Mountain Lion problem with iTunes over network
I connect to my iTunes to watch movies over my Airport network. A movie will play for about 20 min then loose connection. I have to go to my host iMac with Mountain Lion and restart iTunes then reconnect on my mac mini downstairs which is running Leopard. A real pain in the bu##.
It appears to be shutting down my network connection for some reason. Is anyone else having this problem? Does anyone know what to do?
I will watch a movie using my appleTV and see if it does the same thing. Then I will know if it is realted to my iMac and not compatability with Leopard.ok, I watched a movie on my AppleTV without interuption so it must be a conflict between my Leopard on the mac mini and Mountain Lion on my iMac.
-
We are trying to migrate our 10.6.8 wikis from the OS X Server to our new Mountain Lion OS X Server. I am using "wikiadmin migration -r <collaboration directory> -g <wiki name>" to migrate each wiki individually. We have about 30 wikis in the old server, three of which fail to migrate, all with the same problem (below). The process runs successfully for a while, but ultimately fails and rolls back the transaction. It appears there is some problem trying to generate a unique filename, perhaps for some of the uploaded files?
Has anyone else seen this error? large amount of pages, content, and attachments in these wikis and just recreating them in the new server would be a monumental task. Some of these attachments include videos and other large files, not sure if that might contribute to the problem.
=== wikiadmin migrate output log ===
Aug 29 13:25:11 gslcwiki.local wikiadmin[54032] <Debug>: [PGCConnection:233 7e7e1180 +0ms] Executing query [INSERT INTO entity (uid, tiny_id, entity_type_fk, short_name, long_name, description, create_time, update_time, createdby_user_fk, updatedby_user_fk, ownedby_uid_fk, owner_entity_type_fk, is_hidden) (SELECT uid, tiny_id, entity_type_fk, short_name, long_name, description, create_time, update_time, createdby_user_fk, updatedby_user_fk, ownedby_uid_fk, owner_entity_type_fk, is_hidden FROM master_entity_scratch_20120829T132314 WHERE entity_type_fk='com.apple.entity.File')]
Aug 29 13:25:11 gslcwiki.local wikiadmin[54032] <Debug>: [PGCConnection:181 7e7e1180 +151ms] Query result is [PGRES_FATAL_ERROR] rows returned=0/updated=
Aug 29 13:25:11 gslcwiki.local wikiadmin[54032] <Error>: [PGCConnection:148 7e7e1180 +0ms] Error in TXN: Error executing query [INSERT INTO entity (uid, tiny_id, entity_type_fk, short_name, long_name, description, create_time, update_time, createdby_user_fk, updatedby_user_fk, ownedby_uid_fk, owner_entity_type_fk, is_hidden) (SELECT uid, tiny_id, entity_type_fk, short_name, long_name, description, create_time, update_time, createdby_user_fk, updatedby_user_fk, ownedby_uid_fk, owner_entity_type_fk, is_hidden FROM master_entity_scratch_20120829T132314 WHERE entity_type_fk='com.apple.entity.File')]: ERROR: value "109120715161" is out of range for type integer
CONTEXT: PL/pgSQL function "uniquify_filename" line 7 at RETURN
PL/pgSQL function "trg_update_entity_filename" line 23 at assignment
0 CoreFoundation 0x00007fff93b67716 __exceptionPreprocess + 198
1 libobjc.A.dylib 0x00007fff95aaf470 objc_exception_throw + 43
2 PostgreSQLClient 0x00000001026ff9ae -[PGCConnection checkResultOK:forSQL:] + 360
3 PostgreSQLClient 0x00000001026ffec3 -[PGCConnection executeQuery:] + 223
4 wikiadmin 0x000000010269d586 wikiadmin + 66950
5 PostgreSQLClient 0x00000001026ff5f7 -[PGCConnection transactionInBlock:onError:] + 147
6 wikiadmin 0x000000010269cd86 wikiadmin + 64902
7 wikiadmin 0x00000001026a025d wikiadmin + 78429
8 wikiadmin 0x00000001026924c8 wikiadmin + 21704
9 libdyld.dylib 0x00007fff912857e1 start + 0
10 ??? 0x0000000000000006 0x0 + 6
Aug 29 13:25:11 gslcwiki.local wikiadmin[54032] <Debug>: [PGCConnection:320 7e7e1180 +0ms] Executing update [ROLLBACK]Okay, so a little more detail for you…
If I can manage to restart the server without the wiki service on, everything else seems to work fine (including the web service running the default home page) and "serveradmin fullstatus wiki" will report that the service is stopped.
But as soon as I try to start the wiki service, it never finishes, and it prevents the web service from working properly anymore. i.e. I get a 502 Proxy Error instead of the OS X Server default home page. It's after the attempted wiki start that "serveradmin fullstatus wiki" starts to give the
serveradmin[2373:707] outstanding requests are: (
Command = getState;
Module = "servermgr_wiki";
Timestamp = "2012-10-25 16:22:15 +0000";
error. And then I can't stop the wiki service - even "serveradmin stop wiki" gives the same "outstanding requests" message.
This time I tried to stop the wiki from Server app and I got this error:
An error occurred on the server while processing a command.
The error occurred while processing a command of type 'getState' in plug-in 'servermgr_wiki'.
If it's helpful at all, I've notice the following in my log files that seem related, but I have no idea how to fix - it almost seems lie the migration of the wiki failed from 10.7 to 10.8:
collabd[767]: [CSConnectionPool:141 6a92000 +14027ms] Schema is STILL out of date (14 < 69) after launching wikiadmin, update failed! collabd will refuse to run until this is fixed.
I'm really pulling my hair out over here, and have no idea what to try next?
Anyone have any suggestions?
Thank you! -
TS3960 Unable to connect to Lion Server with Server App or Server Admin
I'm running 10.7.4 on my Mac Mini and my iMac. I administer my Mac Mini server from my iMac. I am unable to connect using fully qualified domain name. Even after checking the items in this article.
I am able to connect if I use the internal network ip address or the servername.local name.
Has anyone had this problem and what was done to fix it. ThanksThe certificate verification warning isn't supposed to come up if:
- you connect through to a connection that isn't supposed to be encrypted, or
- you have a valid certificate set up that has been issued by an official certificate authority.
I have noticed that when I try to connect using the internal ip address I don't see the certificate verification warning come up.
Could I have a bad certificate that is not popping up for verification?
Since you are administering the server from the same subnet behind a firewall, I guess there's no need for an encrypted connection
Did you enter your server's IP as an additional DNS server in your client's network preferences? -
Sharing iTunes with a Mac Mini OS X Mountain Lion Server
I'm adding a Mac Mini OS X Mountain Lion Server to my home network. What options do I have to inetgrate iTunes into the server? Currently my master iTunes library is housed on a RAID on a Mac Pro, home sharing is on, and it interfaces over the network just fine into Apple TV (3rd gen). For instance, with Server can all devices on the network have access to that library? Could the library stream to the Apple TV in the living room, an iMac in the office, an iPhone in another room all simultaenously? Also, can any Server member order iTunes Store content and cause it it to be placed into the master library on the Ser
Maybe this discussion will interest you?
https://discussions.apple.com/thread/3097703
Maybe you are looking for
-
Report Slow Due to Mass Data , Soln for Performance Tuning
Dear All, I am making report with mass data so for this i have to put For All enteries in & Ranges at lodz of places. 1. For all enteries in is making my report works very slow. 2. If i change for all enteries by Ranges then if the no. of records are
-
Remote speakers no longer show up in iTunes
I have recently had to send my DVD/surround-sound into the shop for repair. It used to play iTunes through Airport Express fine, but now I've tried hooking Airport up to both my TV and another stereo, but in both cases remote speakers no longer show
-
Hi, since I installed Lion it is not possible to enter the target display mode, before it worked - iMac early 2011 (no Thunderbold). Do you have any advice/idea? THX N.T.
-
My entire itunes library has disappeared except 3 songs....how do I get it back?
MY itunes library has been deleted except three songs...how do I get my music back?
-
How to make arch safe enough to remote desktop?
I have a dsl connection at home, and I need to remote from work to my home usually. Sometimes I need to reboot my computer at home from a remote connection because I need to change to another OS. The problem with arch, is that if adsl is not able to