Panther and leopard clients on a tiger server...expected problems...

I wanted to share a scenario that is happening in the school district I work for and see if anyone has had any experiences similar and can offer some advise before I blindly proceed.
One of the schools I work in uses a single 10.4x server, and all the users in the school have a network account where they can log into managed work groups.
The computers are all running 10.3x and I have had no problems at all. Users are able to log in, see their network home folders, launch all the allowed applications.
The school is purchasing 76 new Imac computers with the new 10.5 OS on them and I was wondering what kind of problems users might experience when logging into these new workstations if they are bound to the existing server.
I was able to bind a 10.5 mac to the 10.4 server and was able to log in using a network account, see the items that were in my network home folder, launch applications I was permitted to launch and was denied applications denied in the applications preference in workgroup manager for the workgroup I was logged in to.
This is very preliminary testing and was wonder what some of you who are in similar situations have experienced.
Another concern is best described by painting a scenario.
A user logs onto a 10.3 computer and launches an application like imovie, an older version of imovie, and does some work on a project. He then saves it and moves to one of the new imacs with 10.5 on it and a newer version of imovie.
Will the newer version of the application run with the older preference files for it.
Will the preference files be rewritten and if so will the old version of imovie be able to read those or will it try and rewrite them.
Will the project created with the old version of imovie be readable by the new version.
Will the new version of imovie update the project file and if so with the old version of imovie still be able to open it?
I seem to remember reading something about how panther wrote preference files for applications completely differently than tiger did, and if so then can I expect the same for leopard client written pref files.
As you can see I have lots of questions and if I can learn from other peoples experiences then I can go into this knowing a little bit on what I can expect and hopefully this wont be a big disaster.
Mark
SD34

Will the newer version of the application run with the older preference files for it.
While I dont know this for certain, I do know that when I did an archive and install (which copies the old preferences for applications as well as the apps themselves to the new system folder) things have worked fine. I think the preference-writing scheme depends on the individual program version, and minor updates to the program (ie: Safari 3.0.3b vs 3.0.4) shouldnt change this.
Will the preference files be rewritten and if so will the old version of imovie be able to read those or will it try and rewrite them.
When you modify any preferences the files will be rewritten. If the programs have similar versions then they should be fine. All preferences are written to the same directory (~/Library/Preferences/) so if the program versions are the same then the preferences will be written similarly.
Will the project created with the old version of imovie be readable by the new version.
I'm assuming you mean going from iMovie HD to iMovie '08. I've not done this personally, but as far as I know the files will import, but the transistions and other special effects that are only available in the older version of iMovie will be removed. The media files and sequences should be preserved.
Will the new version of imovie update the project file and if so with the old version of imovie still be able to open it?
I dont know about the old version of iMovie being able to import the new version's projects, but the new version will update the projects when you save it.
I seem to remember reading something about how panther wrote preference files for applications completely differently than tiger did, and if so then can I expect the same for leopard client written pref files.
I believe the writing of preference files usually depends on the individual application, not the system.

Similar Messages

Local KDC (LKDC) relating to Leopard clients logging into Tiger Server

This is a follow-up to my posting on this thread:
http://discussions.apple.com/message.jspa?messageID=5982070#5982070
Pursuing the problem I had when I upgraded to Leopard, I found it odd that trusted binding to Tiger OD from a Leopard client created a funny computer entry in the Workgroup Manger (WGM). Previously when using trusted binding from a Tiger machine to a Tiger server, one entry would be created. And Logging in as an OD user worked every time for me. However, it appears that under 10.5.1 Kerberos has changed significantly in that it is now being used extensively through the Leopard OS for Peer-to-Peer applications. This may account for the screwed up Computer account entries in WGM when a 10.5.1 client binds to 10.4.11 Server using trusted binding. The giveaway clue to this is the LKDC:SHA1 entry created in the WGM computer record (usually 3 seperate records for 10.5.1 instead of the normal single record with a Tiger client). My question is this:
Are there any changes that can be performed via command line on the 10.5.1 client to mimic the old 10.4 client Kerberos configuration without pervasive Peer-to-Peer use of Kerberos? Is is a config setting for the mit.kerberos file? Could it be as simple as flipping a switch to get the older more compatible Kerberos config of a 10.4 Tiger client? Can I dump the Local KDC present in Leopard, and get back to the good old days of non-local KDC under Tiger?
http://www.afp548.com/article.php?story=LeopardServerReview-LocalDirectory
"The Local KDC
Yes, you read that right, the local KDC. All Leopard client systems will now create a Local KDC for use with peer to peer file sharing.
While this isn't even as close to as scary as it seems, it is a topic worthy of at least a separate article, if not a whole series. I put on my thinking toque and sat in my thinking corner for a while on this, and I've not yet been able to come up with a reason for why having a KDC on every machine is less secure than how 10.4 did things. Having said that, though, I fully understand how this can seriously freak out your network security team as they don't quite grasp all the ins and the outs of this. Combine this with Back to My Mac, another article that's forthcoming, and you have a very interesting collection of some "sleeper" features in Leopard.
So, in a nutshell, a Local KDC, the LKDC, is created when 10.5 is installed. Local users will get LKDC authentication authorities allowing them to get Kerberos tickets and use that for single sign on to all the services hosted on that client system. Kerberos is supposed to be only used when you use Bonjour to discover the other machine. So primarily in peer to peer on the same LAN cases.
It works, you can see this for yourself. Screen share to another machine as a local user by picking the machine out of the sidebar in the Finder. You'll have to enter in your password the first time, but after that you can close out of that screen sharing session and restart it without having to re-enter your password. You can also see the ticket in the Kerberos.app, still buried in /System/Library/CoreServices."

Eric,
Thanks so much for your thoroughness and assistance. I think we have decided, for now, to forgo the 10.5 clients attaching to the 10.4 server because of too many intermittant issues. Similar machines on 10.5 gave different results. And at this point, our client is very skittish about the process working at all. I think we need more testing and that is the directon we'll take for now.
Here are some of our results:
I did find information on afp548 regarding the 10.5 preference. It was specificall referenced in this article:
http://www.afp548.com/forum/viewtopic.php?forum=18&showtopic=16064
Clearing the check box on the 10.4 server under OD > Settings > Security "Require password change on new user login" did solve the memory issue that kerberos was having. After clearing the setting, I:
* deleted all binding references at the server (WGM > Accounts > Lists > All Computers
* Deleted the bindings at the client and the the LDAP server references in Directory Access
* Restarted the machine
* Reconnected the LDAP server, Rebind the machine
* Check the LDAP search in issuing id <username> in Terminal
* OPen System PReferences > Accounts > Login Items, the preference is there!
* Yeehah
Oh, but the user still can't login in that machine. Uhm, why? I have no idea. I take a new machine, 10.5.1, no login accounts except a local admin, and no that user still cannot login. Other users, no problem, but not that user.
Take a new system, 10.4.11, set up the binding, the LDAP server, try to log in that same user: works every time. Ugh.
So of course, I think there is something up with that user, but nothing in logs gives an indication of what is going on. That I can find. THis is after 10 hours of testing and trying. Needless to state, the client is frustrated, and so am I.
You know, we do have one 10.5.1 client laptop that did work. After lots of binding and rebinding, it just somehow starting working as expected. But, the reason that we're sticking with 10.4 clients for now is that machine will not respond to password change mandates. I select that user in the WGM, check the "require password change on next login" and nothing happens on their end. They are not an admin, I have reset their account more times than I can count, and so I expect there are more non-working items with 10.5.1 clients and 10.4 server that will get me. It needs more testing for now.
So, back to your message, I haven't tried the SSL certificate, but I will give that a try.
In general, for your network, how are your laptop users configured? As mobile users? Network homes? Or Local homes?
Thanks again for your help. I really appreciate it.

Email won't set up on new computer and leopard, did fine with tiger

A friend has a new mac book with leopard. I've tried to help up email through a local ISP (snowcrest.net) and it won't recognize the server.
When adding the same account to a iMac with Tiger, it works fine.
Is there a manual way to change the port when using the "easy add" method?
The incoming mail server is: mail.snowcrest.net
The outgoing is: mail.snowcrest.net.
Should the port be at 25?
Thanks for any help.
Anne Z

Same problem here. I want to create an account for my wife, but when, in Mail, I give in her e-mail address, pop-server and password, it tries to connect to the server - no avail.
I check this in Tiger, and the connection is created without any problem. So please, fix this Leopard bug!

Mobile devlopment workstation and Mobile client install on same server

Hi,
Can we install Mobile development workstation and mobile client on same server?
I have already installed mobile development workstation , but when i try to install mobile client on same server it says that add,remove ,modify option install screen. It lis not allowing me to enter new screen.
Any idea.
- tom

When you install the MD Workstation you are opted to choose among different applications i.e. mobile sales, mobile service, mobile system maintenance or authorization management tool. You can there choose the application to install besides the installation of the MD Workstation.
If you want to add application(s) later, you have to choose 'modify' and choose all parts for the MD Workstation plus the applications. If you omit options chosen before when doing the first installation then these will be removed. So be shure to choose ALL relevant things for the application as well as for the MD Workstation.
You can also generate the application from the installed repository, there are several notes on this subject available ('how to generate an application') which are referred to in about any installation guide or note changing the msa coding.
Regards Kai

Mac and windows clients losing connection to Server 2012 Namespace

I am running Windows 2012 Standard edition on two HP Servers. Both are fully patched O/S's and all HP system updates are installed. Each is running a 10 Gbit NIC to a Cisco 2960 Switch fully updated. Both Network shares are on HP external Drive bays connected
through a Smart Array P822 card
All users connect to the primary server (secondary server configured not to take referrals at this time)
My Mac clients running OS X 10.9.1 connect using smb and the namespace. When the designers come in they usually have to reboot in order to connect to their server shares. We discovered today that if they change the IP address the reboot is not needed. We
have an archive server running on a Synology NAS. Their connection to the Synology is not impacted.
The windows machines will lose connection at random and not everyone at once. Usually no more than twice in a week. The fix is either a reboot or an IP change, sometimes both. None of the machines go to sleep or hibernate. All machines are fully patched
with windows updates, and HP system updates.
We run Avast on both the Mac's and PC's if this makes a difference.
Any thoughts?
thanks

thanks Shaon,,
1) IP address before is within our DHCP scope of 192..168.0.51/200. When we set to static we set it to 192.168.0.16/20. We then reset back to DHCP.
2) The error message is that it can not find the server if I try to map it.
3) Clients can still access by IP address and FQDN
We have disabled Avast on a few machines to see if it will make a difference. We then ran into the issue on a machine without Avast installed.
We did notice that our DNS server was not deleting old entries and we found many duplicate entries. We set it to scavenge and then I went through and deleted old records. Not sure if this would cause a problem or not.
thanks again for your help!

MacMail and World Client Madaemon is there a computability problem?

I am wishing to start a new thread in the hope of solving a mail account set up failure. I have tried unsuccessfully multiple time to set up Mail ( Mac) to retrieve my world client email Madaemon email account. I can retrieve it via its web based log in and it works perfect the way I set it up with my iPad mail setup, but it wont work with may mail on the Mac Pro. It fails to connect to the server or times out. Extra note, I had it set up and running well. But the account via mail started to play up so i deleted the account and the issue started when I went to re in state it.
Mac mail 3.6
Mac 10.5.8
WorldCleint Madaemon email account
Thank you for any help in advance

Dont know this service, but as most email services works quite similar the point will be:
If you setup the new account in mail, choose IMAP not POP cause the vendor says on his site, IMAP is the way to connect.
On Account Information set:
Email address: type your Email address ([email protected])
incoming mail server: server name (e.g. Domain name of the MDaemon machine.)
Outgoing mail (SMTP) server: same as above
Account name field: type your email address that is setup in MDaemon.
Password field: type your password that is setup in MDaemon for your account.
On the Advanced Tab set
Port: 143
Auth: password
SSL: YES
If that does not work for you, contact your eMail provider.
Lupunus

Leopard Client Tiger server mobile home directory not working... hmmm

Mobile home directory is not working for my leopard clients with my tiger server.
I can log in via the Apple server account that is set for mobile.
On my tiger clients it prompts me to confirm my mobile account on log in and everything works fine if i unplug the network cable.
on my leopard clients no prompt at log in. so i go to account under system prefs and see that the account says mobile..and i click on make mobile account in the account pane in system prefs says will reboot and make account.. prompts for password for mobile account i put it in and then it says there was an error in making mobile account and then it takes me back to the main log in window.
every client i have on leopard does this...
am i missing something?
thanks in advance,
Jesse

Tiger server can control mobile account syncing and other features present on Tiger clients.
See this post for some more info on setting Leopard mobile account preferences on Tiger servers:
http://discussions.apple.com/thread.jspa?messageID=6829482&#6829482

Workgroup Manager and Server Admin 10.5 - Use to manage Tiger Server?

Is it possible to use Workgroup Manager and Server Admin 10.5 running on Leopard Client to administer Tiger Server?

I'm having major problems with server tools managing my 10.4.11 server. I'm finding that at least with the web management tools, I cannot make any changes to the 10.4 server Sites. To make matters worse, I cannot install 10.4 tools to get back that functionality.

Managing Leopard clients with Tiger Workgroup Manager

The WGM prefences are not working on the Leopard clients that I set in the Tiger server, but they work on the Tiger clients. You can't manage Leopard clients with a Tiger server? What gives? Help!

You can look here for starters.
http://discussions.apple.com/thread.jspa?threadID=1499636&tstart=0

Install Leopard over Tiger Server

Hi,
I want to "archive and install" Leopard over existing Tiger Server. Will not be installing the server version of Leopard, just the normal OS.
Are there potential problems (other than the usual suspects) with doing a simple "archive and install" over the existing Tiger --server-- OS? Can I just do new install without sinking the ship? (Fairly experienced w/macs, know the usual routine re OS installs but am shaky when it comes to server stuff)
Thanks,
Ron W.

Actually the Server version is only required if you are going to be backing up your server over the network. If you run Retrospect on the server itself, you can get by with the Workgroup edition. The developer has a chart that explains it all:
http://www.emcinsignia.com/products/smb/retroformac/comparison/
I don't recall the details, but I even think there was an upgrade path from the Desktop version to the Workgroup version, although I had to call the developer and specifically ask for it. Regardless, the prices aren't that bad. Check smalldog.

Panther to Leopard 10.5

Hi,
I have a PowerMac G5 with the following specs below.
I have been running Panther since I bought the machine .
My optical drive will not read DVD's I burned myself, however, it will read commercial DVD's. It has been suggested in other forums to:
1. replace the internal optical Superdrive.
2. buy an external drive to burn and read DVD's/CD's.
A new external drive will require an upgrade , which I want to do anyway. I have two internal hard drives.
My upgrade questions are:
1. Buy Tiger, even thought support will not be available from Apple soon enough.
2. Go with Leopard 10.5, even though it has a lot of stuff that I will probably not use, like Front Row, Boot Camp or Photo Booth.
3. Is 10.5 written for Intel processors, or will it work on the PowerPC G5.
4. Will I need to add more memory? It has 1GB.
5. Will my original mouse and keyboard work, as well as any Flashdrives, and Firewire stuff?
Any help will be appreciated.
Thanks.
Machine Model:Power Mac G5
CPU Type: PowerPC 970 (2.2)
Number Of CPUs: 2
CPU Speed: 1.8 GHz
L2 Cache (per CPU): 512 KB
Memory: 1 GB
Bus Speed: 900 MHz

If you hope to use the MyBook drive to support bootable clones or secondary
systems of the OS X type, be sure it is one of the capable FireWire drives with
a chipset based on the Oxford-type circuitry & become familiar with the process.
From reading around, not everyone who has one is convinced they are OK.
Your iDVD projects may transfer into a newer version of iDVD, but newer works
from a later iDVD version won't generally be backward compatible. The older
works, once converted, likely won't be backward compatible again.
There may be a good reason to have a partitioned drive in an external FireWire
enclosure if it is expected to boot clones, so you could have more than one boot
clone/copy within it, and have each one contain apps related to the OS X version.
Also, complete computer clones, of everything, can be handy to have; for more
than just backup or restore; just be sure whatever external drive unit you get for
those purposes, is large enough capacity for several partitions, and is bootable
in OS X, so the unit would support viable clones and backup purposes. Some of
the newer drives have FW400/800 and USB2.0; some have eSATA also. A few
fair examples of such drives are available on the OWC site.
There is such a difference between Panther and Leopard 10.5, an upgrade over
Panther, to Leopard is usually not a good idea; to have a clone of the older OS X
and apps that can boot the computer (at least for a time, until you are fully moved
into the Leopard 10.5 system) is a good way to slowly migrate; and build up the
10.5 system to replace the old Panther system, with suitable newer software.
Hopefully the upgrade goes well.
Good luck & happy computing!

Windows 7 beta can't authenticate to Tiger Server PDC

Greetings,
Currently our Windows XP Professional clients authenticate to Tiger Server running as a Windows Primary Domain Controller without issue. I'm testing Windows 7 beta (having skipped Vista) and when I try to join the client to the Windows domain I am told that my domain can't be found (this is after inputing my domain administrator credentials to Windows 7).
Can anyone enlighted me as to why this might be failing?
Cheers,
Damon

I've tried relaxing a bunch of security-related settings according to this:
http://lists.samba.org/archive/samba-technical/2009-February/063187.html
The various registry and policy changes are near the bottom of the message. Unfortunately, it still fails with the same message, though.
It's probably a good idea to use the "Send feedback" app in Windows 7 beta to let them know.

Software Update SSL and Leopard Clinets

Hello all,
My apologies if this has been reported elsewhere, but I can't find anything.
I have two problems with Software Update on my Snow Leopard Server.
Problem number One (the more minor one),
When the web service is running and SSL is enabled (all be it with a self signed certificate) the software update clients won't connect (Software Update Enabler won't even verify the server when settings). As soon as I turn the SSL website off then there isn't a problem, clients connect to the server without issue.
Problem number Two, which is the MAJOR one!
10.5 Leopard clients connect to the server, but when checking for updates report quickly that my software is up to date (which on a Mac OS 10.5.2 machine is a big porky). A quick look on the Software Updates pane in Server Admin shows that there are no updates (bar I think a Java update) for Mac OS 10.5. I can see 10.4 and 10.6 updates ok, but I don't have any 10.4 or 10.6 clients here to test it. The other strange thing that I have seen reported elsewhere is that on the overview page it states that there are 297 updates downloaded and enabled, but on the update lists it says that there are only 185 updates.
I have reset and reset the software update server clearing out the data folders etc and made it download them from scratch, but it just won't play ball. I have pointed Safari to http://softwareupdate.domainname.com:8088/index-leopard.merged-1.sucatalog and you can see the file (pages upon pages of text) 99% of which makes no sense to me.
These servers are suppose to be going onsite next Monday and I would really like to have the software update server working!
The system is two Intel xServes (one 8 Core Machine and one Quad Core Machine).
The offending software update server is running on the Quad Core Machine which also handles email services and is an Open Directory Replica.
The main server (the 8 Core Machine) is the open directory master. Both servers are running fully up to date Snow Leopard (10.6.2) with all the sub updates (except maybe an iTunes update).
Any help or fresh ideas would be greatly appreciated.

Regarding problem number one (SSL), I am completely confused by the claim. SUS runs its own web service instance on a separate port. Each client pointing to that SUS should have an OS-specific URL as noted in p.89 of the admin guide:
http://images.apple.com/server/macosx/docs/SystemImaging_and_SW_Update_Adminv10.6.pdf
Do you have any interesting log information that may help diagnose your issue?
Regarding problem two, as noted, 10.6.3 addressed a number of the issues, and as long as the clients are properly configured, they should see relevant updates. As noted above, the difference in update count is a side effect of the two views: the overview pane shows all individual packages downloaded, while the package list counts the number of separate update "clumps" (for lack of a better word).

Unable to Boot from Mac OS Tiger Server 10.4.0 Install CD

Hi,
I just picked up a Powermac G3 and am trying to install Tiger Server 10.4.0 from the install CD. The G3 won't boot from the CD (holding the c key at startup) and when I try to install from Open Firmware (using boot cd), I get the following message:
MAC PARTS: Load (noninterposed) not supported load-size0=adler32=1.
I'm assuming the above is bad news!
Other than booting, the CD appears to work fine. Also, the firmware is all up to date. The current version of OS on the G3 is 9.2.2 but unfortunately, I do not have any install disks for this (hence why I want to try and upgrade and install my legitimate server OS on it).
Other than that, all I can say is that it is a 300Mhz G3 Blue and White with what appears to be a 10gb hard drive. Other info from System Profiler is:
Ram: 256mb
Machine ID: 406
Mac OS Rom 9.2.1
I assume that Tiger would be a little bit choosy about some of the older hardware, but nevertheless would be grateful for any assistance as to whether this can be installed on this Powermac.
Thanks for your assistance.
Steve
PowerMac G3, PowerBook G4, 20" Intel iMac Mac OS X (10.4.7)

Did some research and it appears that puting Tiger server on a B&W is a lot more difficult than puting Tiger (workstation?) on a B&W. (i.e. You're not the only one with this problem.) The offered solutions have been to take your hard drive out and install server on it from another machine - which you can't do with the machines you have... unless you swap the drive out of your iMac.... but that's up to you. I wouldn't risk it.
The other option is to spring for a DVD drive that will work in your B&W and boot from the DVD and install that way. You can pick them up for about $50. (I know that's about what your B&W is worth, but that's life...) If you go this route, make sure you get a DVD that Apple has written the drivers for (Pioneer, NEC, etc. ) and built into the OS installer. My personal drive is an NEC ND-3540A. Picked it up at NewEgg.com. That's what I had to do to get Tiger on mine.
B&W 450 Mac OS X (10.4.7) 512 MB RAM - SuperDrive

Spotlight on Server - permission problem

With Leopard Server and Leopard clients one can make Spotlight searches on the server volume and this very fast. Unfortunately with some glitches:
Spotlight does not index files and folders when the running account on the server is not the OWNER of them!
When a client creates a new folder on the server, he is the owner and not the server, and Spotlight does not index.
How can I set up the server, that new created files and folders by clients are always owned by the serveraccount?

Tony,
Thanks for the reply. Just to be clear, I currently do have spotlight working on the server shares.
No volumes shared, only folders. With spotlight, I started even simpler. None of our shares had spotlight turned on until I started to try and get it to work the other day. I enabled spotlight on them, no search results. I had disabled and re enabled spotlight for the shares in question, no search results. The server did clearly index something for a couple of minutes (not a huge amount of data) after each enable was saved.
The weird part was that it didn't seem to generate any search results on the shares until I propagated the spotlight ACL which is added to the share when spotlight is enabled. No results before propagation of ACL to all of the subfolders, all expected results within a minute or two of propagation.
My question is, am I supposed to have propagated the ACL to get search results? From the permissions on the spotlight ACL in Server Admin it looks like spotlight should have access to everything inside the share but didn't actually find anything until I propagated the spotlight ACL to everything in the share. I am worried about new files being added to the share which won't have the spotlight ACL and, as a result, will not be indexed down the road.
Thoughts?
-Erich

Panther and leopard clients on a tiger server...expected problems...

Similar Messages

Maybe you are looking for