Wide-Area Bonjour / Dynamic Global Hostname

Hello everyone
I have a very specific problem, My AEBS is not sending UPDATE requests to my own DNS server when my DSL IP address changes over time.
I have my own DNS server and run a dynamic zone with TSIG aututhentication.
If I configure the "Dynamic global hostname" on my Macs behind my AEBS acting as a NAT gateway, they will register themselves withe the correctly natted address.
In fact, this is amazing and works very well:
sftp-ssh.tcp.dyn.secret.domain domain name pointer MacPro.sftp-ssh.tcp.dyn.secret.domain.
smb.tcp.dyn.secret.domain domain name pointer MacPro.smb.tcp.dyn.secret.domain.
ssh.tcp.dyn.secret.domain domain name pointer MacPro.ssh.tcp.dyn.secret.domain.
macpro.dyn.secret.domain has address xx.yy.169.96
But my AEBS itelf has an older address:
airport.tcp.dyn.secret.domain domain name pointer Airport.airport.tcp.dyn.secret.domain.
smb.tcp.dyn.secret.domain domain name pointer Airport.smb.tcp.dyn.secret.domain.
airport.dyn.secret.domain has address xx.yy.177.175
I can force the update by restarting my AEBS, but this is not a good workaround.
Has anyone else experience running a wide-area bonjour DNS server?
Thanks

Hi Patrick,
I suggest you bring this up on the bonjour-dev[1] mailing list. You're much more likely to reach people with the right knowledge there.
Andrew
[1] http://lists.apple.com/mailman/listinfo/bonjour-dev

Similar Messages

  • Do some ISPs pick up the dynamic global hostname (global Bonjour)?

    Wouldn't it be nice if ISPs would pick up the dynamic global hostname (aka global Bonjour) and feed it via 'mybonjourname.provider.com' to their DNS servers?
    As long as one knows one's ISP and leaves the computer (or Time Capsule or AEBS) always connected to the same ISP, one would not need any dynamic DNS service. Particular since it is a bit difficult to get a dynamic DNS client run on a Time Capsule not connected to a computer...

    Background: I recently purchased a MacBook Pro (MBP) and a Time Capsule (TC) installed at home. I use the TC for back-ups, as well as a home server to store music, photographs, personal and work archives of information. I want to be able to access the content that I have inside my TC from anywhere. I have three Apple laptops, all of them with a family dot.mac account, however, they may not be on or at home at all times, therefore my challenge is to be able to access the TC content from anywhere when only the TC is ON and no other laptops may be on. Unfortunately only Macs can use and update the dot.mac with the Back to my Mac (BTMM) feature, and the TC does not have a way to use BTMM by itself. The Airport Extreme (AE) and the TC the same (or very similar) router software modules built-in. Most routers have a built-in way to enter a dynamic IP or DNS updater (global bonjour). The dot.mac is one such global DNS updaters, but it does not use an open architecture. Another global DNS updater is DynDNS. I opened a DynDNS account, and in the TC I turned ON file sharing and in Airport > Time Capsule > Edit I entered the DynDNS information. If the global bonjour updater functioned well, this last action should instruct the TC to keep my DynDNS account informed of its IP address at all time. This would allow me when on travel to go to the web page of my DynDNS account, visualize the current IP address of my TC, click on it or cut and paste in the"Go to Server", and this would automatically mount the TC Hard Disk on my Desktop. However this is not working as planned. The software of the Time Capsule accepts the global bonjour account of DynDNS but fails to update it with its current IP address, as a result, the DynDNS knows the first IP address when you first program it, but as soon as the IP address of the TC changes it stops working (and this could be a matter of minutes, hours, days or weeks). I have used Linkys and DLink routers in the past, and they have worked flawlessly with DynDNS and other IP Updaters. However, I have never been able to use the TC IP updater features reliably.
    +The issues:+ (a) Airport Extreme (AE) and Time Capsule (TC) router software modules have a global bonjour feature that is not working well with DynDNS and do not update it when its IP address changes. (b) There is no way to program a dot.mac account on the AE or TC and use dot.mac BTMM feature to access the disks mounted on the AE or TC without invoking another computer with dot.mac; By other words, if we want to access remotely (outside our LAN, via the internet) a disk connected to our AE or TC, we must have a Mac in the same LAN with either a dot.mac account or a DynDNS account, otherwise we are unable to find its IP address to access the TC directly.
    As far as I know, until Apple updates the AE or TC software to either use dot.mac or reliably update an IP updater like DynDNS, we will not be able to reliable access a TC remotely without another Mac in the same LAN doing the IP updating. If anyone can shed some additional light on this issue I will appreciate if.

  • Leopard Wide-Area Bonjour DNS Issue

    Hi, all. Got an issue with Leopard's domain name resolver. A while back, I was experimenting with the "use dynamic global hostname" panel in Sharing. I wasn't able to get it to do anything useful (and I don't want help with that; I know what went wrong, and how to fix it, but haven't gotten to do so yet), but here's the thing - after returning the settings to the defaults (unchecking the "use dynamic global hostname" box), it seems to have left something behind in my system configuration.
    In particular, when I run "scutil --dns", I see the following two entries in addition to my normal DNS server and the "local" Bonjour resolver (domain names censored):
    resolver #3
    domain : bonjour.mydomain.com.
    options : pdns
    timeout : 5
    order : 150000
    resolver #4
    domain : mydomain.com.
    options : pdns
    timeout : 5
    order : 150200
    The type of these is "pdns" - "private DNS", or wide-area Bonjour. They look harmless - but the fact that they're there is somehow preventing my machine from being able to resolve any hostname in "mydomain.com" that is a CNAME.
    I can get rid of them temporarily by running scutil and removing the key "State:/Network/PrivateDNS" from the database... and then name resolution works normally again. But a reboot, or a change in Bonjour settings (such as enabling or disabling "Back to My Mac"), causes them to come back. I can't figure out how to purge them from the actual system configuration database. Any suggestions?

    Here's the fix. Open Keychain Utility in the Utilities folder and choose "System" in the Keychains list in the sidebar. Now you'll probably see two entries of type "DNS Key" with the names "bonjour.mydomain.com" and "mydomain.com". Just delete those Keychain items and you should be back to normal.

  • Wide - Area Bonjour / Back to my Mac:  Simple Setup Discussion | Tutorial

    Looking to start a new thread for SIMPLE setup of wide-area bonjour / Back to my Mac setup across multiple geo locations
    Objectives
    1. develop tutorial/instructions for mainstream setup of WAB across multiple greographcal locations
    2. Goal is for complete discovery in Leopard Finder of each computer setup across seperate locations
    3. Ability to file share/browse file structure of each local and remote computer
    4. Ability to use Screen Sharing across geographical locations to control/observe remote computers (alternatively use Apple Remote Desktop app)
    5. Appropriate listing of services in Bonjour Browser (local and global)
    6. (Wide) Access to airport disk
    7. Consistency. Many solution like back to my mac solo sometimes work sometimes does not depending on unidentifiable variables (across reboots with no material change)
    Setup
    1. Multiple LAN (local area networks) in different geographical locations (LAN1, LAN2, LAN3,...)
    2. Dynamic IP setup from ISP in each geographic locations (cable / DSL)
    3. Airport Extreme router in each location (perhaps later we can explore UPNP and other routers which complicate setup)
    Tools
    1. Leopard running on all machines
    2. Use of .mac (dot mac) account allowing for "back to my mac", xxxx.members.mac.com setup
    3. Bonjour preference Pane, with setup of Hostname, Registration and Browsing panes
    http://www.dns-sd.org/ClientSetup.html
    4. Bonjour Browser
    http://www.tildesoft.com/Programs.html
    5. Finder
    To show remote and local LAN computers in SHARED in left browsing pane
    6. Dyn DNS service line zoneedit or dyndns, if necessary
    7. Airport Configuration - Wide area bonjour -> config of Advanced/Bonjour ; Hostname, Domain, Name, Password
    Restrictions
    1. No Leopard Server
    2. no direct configuration of a DNS server. No line edits. Use of third party services (non paying if possible) if necessary but rather avoid detailed editing of server setup and maintenance. The idea is to create a fairly simple setup for individual/family/small business/SOHO across work/family/home environment not IT professional setup

    I have been trying on my own to achieve this, and although I am an advanced user I am not a Programmer/Developer. Sadly I have been utterly unsuccessful. It would be so wonderful if the proposed step-by-step guide would come to fruition...

  • Airport Extreme -Dynamic Global Hostname-

    Is somebody using the  "Use Dynamic Global Hostname" ( under Internet/Internet Options ) with "No-Ip.com" ?
    I learned that DynDNS doesn't supprt this so I am wondering if No-Ip does.
    Thanks.

    I was wondering if DynDNS supported this because I have used No-Ip and it apparently does not. Or at least it is an undocumented feature if it does. No-Ip does have an updater application that you run on your computer which will update the ip address on their site. This is fine for most uses.
    What I have gleaned from searching is that DynDNS did support using that setting until Apple removed wide-area Bonjour from the Airport Utility software interface. However the latest version still includes the settings. So I was thinking that perhaps it would still work for the purpose of updating your dns. One thing I have noticed is that some posts here suggest the user and password are of the DynDNS account itself, whereas on the DynDNS site I have seen a support document which suggests that you need to provide a Transaction Signature. Something which has to be created from your account on their site.

  • Aiport Dynamic Global Hostname

    Hi !!
    Is there anyone who is aware of free of charghe dynamic dns services who id known to work -compatible- with this?
    http://goo.gl/retTn
    (dynamic global hostname form from apple airport utility 5.6)
    Thanks

    Rmemeber way back when Apple used to make thing easier?.....
    As is standard now...   Apple has taken something that should be easy, and turned into something that CAN NOT BE DONE AT ALL.    See the note below from DynDns,  Airport changed the firware so this doesn't work.   Usually when this happens it is not a mistake,  it is "Removal of Functionality"   ( see: SNMP which is also gone )
    Apple won't support normal DynamicDns like every other router manufacturere in the world.   And their alternative is "Dynamic Global Hostname"...  which no longer works.
    Now what is my option Apple??    None?.... yeah that's what i thought.
    ---From DynDns
    Note: as of version 6.1 of the Airport Utility and 7.6.1 router firmware, the Apple Airport Extreme and Time Capsule routers no longer offer the ability to configure wide-area bonjour. This has effectively caused these Apple routers to no longer support sending updates to Dyn Standard DNS. If you are attempting to set up earlier versions of the Airport Utility and firmware, you can use these instructions, but this is an experimental feature, we cannot provide technical support for this setup. If you need assistance, check out the Dyn Community.

  • What is "Dynamic Global Hostname" in Internet Options?  Is it DDNS?

    If you have an Airport Extreme or a Time Capsule with updated firmware you will find "Use dynamic global hostname" in: Airport Utility > Internet tab > Internet options.  There is literally no Apple provided documenation on this setting within the device's user manual, instructions, or online support.  The only documenation you will find are on various blogs and forums such as this one.  So, here is a screenshot of the setting and my questions below:
    1.  I'm assuming that this is where I can setup Dynamic DNS if I have an account with a DDNS provider such as DynDNS or NoIP.  Is this correct?
    2.  If this is where I can setup DDNS, then what should the hostname be?  Should it be the hostname I have setup with a DDNS provider, like this: MySite.DDNS.com?  Or, should the hostname include my device's actual hostname, like this: TimeCapsule.MySite.DDNS.com?
    3.  For the "User" and "Password" fields, should this be the account that I have with the DDNS provider?  If yes, then what is the format of the username.. is it just my DDNS account username: "MyAccount"?  Or, should it be: [email protected]?
    I'm trying to setup DDNS because I'd like to have remote SSH access to several of my Linux systems on my network and I don't want to configure a DDNS client on the Linux systems if the Time Capsule can do it.  This is because my Time Capsule will always be online but my Linux systems are not always online.
    Thanks for any help with this setting!  It is definitely strange because "Dynamic Global Hostname" is not an "industry standard" term.  Typically, it is called "Dynamic DNS" instead.  So that's why I'm trying to figure out what this setting really is and if it can help me with my DDNS and remote access needs.

    Did some digging, found this article http://dyn.com/support/bonjour-and-dns-discovery/. Step 4 has something interesting to say:
    > The User and Password fields are NOT the Dyn account username and password!Instead, they refer to a special type of authentication for dynamic DNS updates called Transaction Signature, or TSIG.Retrieve your TSIG information from your TSIG account settings page, and populate the information in the Userand Password fields as shown in the diagram, and then click OK.
    Hope that helps anybody else. I assumed that the user/pass were the ones used to login to the account but nope, they're not.

  • Dynamic global hostname is not saving

    I was trying to setup my new airport  time capsure to use dyn. When I tried to add the dynamic host name and tsig information on a mac using the airport utility it would not save. When I entered the information from the airport utility on an iphone it saved the information and I am able to verify that it is there from the mac.
    So my question: is this an issue with my information (domain name, tsig etc) that I am trying to enter or is it an issue with the airport utility on the mac
    My airport is running version 7.7.1
    The airport utility on the mac is 6.3 (630.34)
    and the airport utility on the iphone is the current one from the appstore
    -Philip Hutson

    after buying a domain name, spending moeny at DynDns and then 6 hours trying to configure it i found this,
    From DynDns:
    Note: as of version 6.1 of the Airport Utility and 7.6.1 router firmware, the Apple Airport Extreme and Time Capsule routers no longer offer the ability to configure wide-area bonjour. This has effectively caused these Apple routers to no longer support sending updates to Dyn Standard DNS. If you are attempting to set up earlier versions of the Airport Utility and firmware, you can use these instructions, but this is an experimental feature, we cannot provide technical support for this setup. If you need assistance, check out the Dyn Community.

  • Set up dynamic global hostname on Lion Server

    In order to connect to the different MacBook I would like to use the dynamic global hostname
    Can anyone share his expiriance on setting up a dynamic global hostname service on Lion Server?

    More details are needed.
    Do you see a background? Icons? Tool bar with Apple menu? Can you restart? Can you bring up Mission Control or go to a different space?

  • VPN + DNS-Enabler + Wide Area Bonjour = no success

    Hi,
    what I am trying to do is broadcast the bonjour services of my home network such as file sharing, iTunes home-sharing and the like through my VPN connection. Since I am not too savvy with networking related topics I bought "DNS Enabler Snow" since it advertises to provide wide area bonjour with a minimum of setup hassle.
    Now I am only getting so far that I can see my machine at home through VPN under "Network" in OS X. But I cannot connect. It always says "Connection Failed". Neither can I see my home iTunes library.
    In the "Domains" section of DNS Enabler I entered:
    Domain Name: <my DynDNS Domain>
    Primary DNS Server: <my DynDNS Domain>
    Host Name: <my DynDNS Domain>
    IP address: <the local IP address of the machine running DNS Enabler>
    In the bonjour section of DNS Enabler I entered:
    Service Type: afpovertcp.tcp
    Service Name: File Sharing
    Host: <my DynDNS Domain>
    Port: 584
    TXT: path=/
    Can anyone hint me at what might be wrong with this configuration?
    Thank you!
    Florian

    I think the problem with the current setup is the use of the DynDNS hostname for the AFP service's hostname. When you're connected via the VPN you are effectively on the same network and so connection's attempted to the external-IP recorded by the DynDNS hostname will fail as it's not possible to loop back (for want of a better description) through the router. If you add a new A-record to the zone that points to the machines internal IP address and then change the service to point to the new record it should work via the VPN.
    iTunes sharing won't work via this method as iTunes will only register and browse for services in the ".local" domain. The ".local" domain (a top-level domain like ".com") is only available via multicast-DNS. Multicast traffic as a general rule is not carried over a VPN (or the internet for that matter) as due to it's broadcast nature it can quickly clog up and cripple a network.
    Hamachi unlike most VPN solutions presents itself as a virtual network interface that can carry multicast traffic which is why iTunes sharing works over a Hamachi connection. A cursory Google search tells me that multicast traffic can be carried over a OpenVPN connection with some additional configuration - your mileage might vary though.
    Wide-Area Bonjour works by adding an additional domain to the system that software can then use for registering and browsing services. Unlike regular Bonjour, Wide-Area Bonjour works over the internet as it's based on traditional unicast DNS with a few extensions for updating records in realtime and NAT-PMP or uPNP (one or the other is in pretty much every router) for automatically setting up port-forwarding. If NAT-PMP or uPNP is not available, services can still be browsed but can not be registered (only services that can accessed via the internet are advertised); it's for this reason that Wide-Area Bonjour won't work properly in concert with a VPN. Whilst most OS X software is written to just register and browse in whatever domains are available there are some like iTunes that only register in the ".local" domain.
    You can find out more detailed information about these topics at http://multicastdns.org/ and http://dns-sd.org/. I'm happy to answer any further questions you might have either here or via email. If my Wide-Area Bonjour service sounds like a good fit for you, please drop me a note and I'll let you know when I open-up the service to new users again (slated for mid-March).

  • CUPS queues don't work with Wide Area Bonjour

    I'm completely flummoxed!
    My school board is installing new switches in all our schools, and moving from a single flat VLAN to multiple - one for printers, one for server, one for client workstations. Printing queues advertised with Bonjour worked fine on the old network, but multiple VLANs breaks all that since Bonjour is in the unrouteable multicast range (which makes sense, since it's not meant to work outside of the local network). I have old Tiger servers at the schools, running on hardware that doesn't do VLANs (old G4 towers), so advertising queues with Bonjour using the school server can't get me by.
    I've set up BIND (DNS) to show my CUPS IPP print queues from a central Lion workstation (elemprtsrv01.example.com) in the school's subnet (10.159.40.0/22; academic-wrd.scd.example.com) as follows (my domain substituted with example.com for anonymity) - the relevant section snipped from the rest of the zone file:
    $ORIGIN academic-wrd.scd.example.com.
    ; Wide Area Bonjour Browsing
    b._dns-sd._udp                    IN PTR          @
    lb._dns-sd._udp                    IN PTR          @
    db._dns-sd._udp                    IN PTR          @
    ; Wide Area Bonjour Printing
    SCD-234-Q._printer._tcp          IN          SRV          0          0  631          elemprtsrv01.example.com.
    _printer._tcp                                         IN PTR          SCD-234-Q._printer._tcp
    _cups._sub._ipp._tcp                     IN PTR          SCD-234-Q._printer._tcp
    _ipp._tcp                                                   IN PTR          SCD-234-Q._printer._tcp
    _universal._sub._ipp._tcp           IN PTR          SCD-234-Q._printer._tcp
    SCD-234-Q._printer._tcp          IN TXT ( "txtvers=1" "qtotal=1" "rp=printers/SCD234Q" "note=2nd Floor Workroom" "ty=Xerox WorkCentre 5755, EXAMPLE Student 2.2" "product=(EXAMPLE-22STUD-XeroxWC5775)" "printer-state=3" "printer-type=0x80B0F6" "Transparent=T" "Binary=T" "Fax=F" "Punch=T" "Bind=F" "Sort=T" "Scan=F" "Duplex=T" "Staple=T" "Copies=T" "Collate=T" "Color=F" "pdl=application/pdf,application/postscript,application/octet-stream,image/jpeg ,image/png" )
    The relevant section of the /etc/cupsd.conf file on elemprtsrv01 (10.100.1.73) looks like this:
    ServerAlias elemprtsrv01.example.com
    ServerAlias printerserver.academic-wrd.scd.example.com
    MaxLogSize 20m
    MaxCopies 100
    LogLevel debug2
    SystemGroup admin
    SystemGroupAuthKey system.print.admin
    # Allow remote access
    #Port 631
    Listen 10.100.1.73:631
    Listen 127.0.0.1:631
    Browsing On
    BrowseOrder deny,allow
    BrowseRemoteProtocols cups
    BrowseLocalProtocols cups dnssd
    DefaultEncryption Never
    DefaultAuthType Basic
    WebInterface Yes
    BrowseWebIF No
    MaxClients 1000
    RootCertDuration 300
    <Location />
      # Allow remote access...
      Order deny,allow
      Allow all
      AuthType None
    </Location>
    <Location /rss>
      Order deny,allow
      Allow all
    </Location>
    <Location /printers>
      Order deny,allow
      Allow all
      AuthType None
      Encryption Never
    </Location>
    <Location /jobs>
      Order deny,allow
      Allow all
      AuthType None
      Encryption Never
    </Location>
    If I use Bonjour Browser on the print server network and on the school's academic-wrd.scd.example.com subnet, I see identical info to that provided by my DNS records - in other words, Wide Area Bonjour (WAB) appears to be working and providing the necessary details.
    When I try to add a printer on a school workstation, the WAB printer appears...though the PPD ("(EXAMPLE-22STUD-XeroxWC5775)" should match SCD234Q.ppd from the server queue) doesn't get imported from the server and I get a Generic Printer Description instead. When I try to print on the client, I see promising notes about connecting to the print server, but then it always pauses the queue. Here's the relevant section from /etc/cups/ppd/SCD234Q.ppd:
    *Manufacturer: "Xerox"
    *ModelName: "Xerox WorkCentre 5775"
    *ShortNickName: "Xerox WorkCentre 5775"
    *NickName: "Xerox WorkCentre 5755, EXAMPLE Student 2.2"
    *PCFileName: "XRWC5775EXAMPLESTUD22.PPD"
    *Product: "(EXAMPLE-22STUD-XeroxWC5775)"
    *PSVersion: "(3010.106) 3000"
    In the CUPS error log, I get this annoying encryption error, which no else appears to have had, according to the usual search engines:
    d [04/Jan/2012:21:47:41 -0500] cupsdAcceptClient(lis=0x7fc585200470(13)) Clients=0
    D [04/Jan/2012:21:47:41 -0500] cupsdAcceptClient: 20 from 10.159.40.174:631 (IPv4)
    d [04/Jan/2012:21:47:41 -0500] cupsdAddSelect(fd=20, read_cb=0x102d74b81, write_cb=0x0, data=0x7fc584034400)
    d [04/Jan/2012:21:47:41 -0500] cupsdReadClient(con=0x7fc584034400(20)) con->http.error=0 con->http.used=0, con->http.state=0 con->data_encoding=HTTP_ENCODE_LENGTH, con->data_remaining=0, con->file=-1
    d [04/Jan/2012:21:47:41 -0500] cupsdReadClient: Saw first byte 02, auto-negotiating SSL/TLS session...
    d [04/Jan/2012:21:47:41 -0500] encrypt_client(con=0x7fc584034400(20))
    D [04/Jan/2012:21:47:41 -0500] get_cdsa_certificate: Looking for certs for "elemprtsrv01.example.com"...
    E [04/Jan/2012:21:47:51 -0500] Unable to encrypt connection from 10.159.40.174 - unknown error -1=ffffffffffffffff (-1)
    D [04/Jan/2012:21:47:51 -0500] cupsdCloseClient: 20
    D [04/Jan/2012:21:47:51 -0500] cupsdSetBusyState: newbusy="Not busy", busy="Not busy"
    d [04/Jan/2012:21:47:51 -0500] cupsdRemoveSelect(fd=20)
    d [04/Jan/2012:21:47:51 -0500] cupsdCheckJobs: 0 active jobs, sleeping=0, reload=0
    OK, so here's the annoying bit: if I manually configure the queue on a Snow Leopard (or higher) client by going into System Preferences, adding an IP printer with IPP protocol (elemprtsrv01.example.com, queue name /printers/SCD234Q) then it works. With Leopard or Tiger, the PPD doesn't load from the server, and the generic PPD is substituted automatically.
    If I manually add "ServerName elemprtsrv01.example.com" to /etc/cups/client.conf on the client machine, then it shows all the server queues and magically works too - even on Leopard and Tiger.
    The problem is that I DON'T want to have all the server queues appearing on every workstation, since it'll cause mahem when the students discover all the queues and print to other schools for kicks. WAB was supposed to solve that for me by advertising only the queues that were meant to be accessed by that subnet (they'd all be there on the server, but only a real techie would know how to access them, since they weren't advertised).
    Why don't the WAB queues work? Why do I get an encryption error with them?
    How do I get the server's PPD to download automatically to the client? (this is especially useful for printers with customized PPDs set up with the proper settings for that printer...and for the Xerox copiers that are using accounting codes present in the server's PPD)
    Any help would be very much appreciated!

    Figured it out...stick with Lion (Client or Server) and use the web interface to add printers and customize the /etc/cups.conf file. If you use either System Preferences or the Print config in Server Admin on earlier versions of Mac OS X Server, you'll bugger up your cups.conf file (top part of which is reproduced here):
    ServerAlias *
    LogLevel debug2
    SystemGroup admin
    SystemGroupAuthKey system.print.admin
    # Allow remote access
    Port 631
    Listen elemprtsrv01.example.com
    Listen /private/var/run/cupsd
    Browsing On
    BrowseOrder allow,deny
    BrowseRemoteProtocols CUPS
    BrowseAddress @LOCAL
    BrowseLocalProtocols CUPS dnssd lpr
    DefaultAuthType Basic
    WebInterface Yes
    <Location />
      # Allow remote access...
      Order allow,deny
      Allow all
    </Location>
    <Location /rss>
      Order allow,deny
      Allow all
    </Location>
    <Location /classes>
      Order allow,deny
      Allow all
    </Location>
    <Location /printers>
      Order allow,deny
      Allow all
    </Location>
    <Location /admin>
    </Location>
    The key is to allow anything as a server name (ServerAlias *) and Allow All for / and /printers (though / by itself should be enough). If you want to listen for LPR (port 515) then I think it needs to be listed in BrowseLocalProtocols - it's not a valid option for BrowseRemoteProtocols.
    On the Wide Area Bonjour front, I created TWO different entries for each printer in my domain, because otherwise the queues would appear and instantly disappear in the Tiger browser - Tiger only shows the LPR queue. The queue name is preceded by "printers/" in the IPP queue, but not with the LPR queue. Here's an example from the top of my BIND student zone file:
    $ORIGIN academic-wrd.scd.example.com.
    ; Wide Area Bonjour Browsing
    b._dns-sd._udp                    IN PTR          @
    lb._dns-sd._udp                    IN PTR          @
    db._dns-sd._udp                    IN PTR          @
    ; Wide Area Bonjour Printing
    SCD-234\0322nd\032Floor\032Copier\032LPR\032Q._printer._tcp          IN          SRV          0          0  515          elemprtsrv01.example.com.
    _printer._tcp                                         IN PTR          SCD-234\0322nd\032Floor\032Copier\032LPR\032Q._printer._tcp
    SCD-234\0322nd\032Floor\032Copier\032LPR\032Q._printer._tcp          IN TXT ( "txtvers=1" "qtotal=1" "rp=SCD234Q" "note=2nd Floor Workroom" "Transparent=T" "Binary=T" "Fax=F" "Punch=3" "Bind=F" "Sort=T" "Scan=F" "Duplex=T" "Staple=T" "Copies=T" "Collate=T" "Color=F" "pdl=application/postscript" )
    SCD-234\0322nd\032Floor\032Copier\032IPP\032Q._ipp._tcp          IN          SRV          0          0  631          elemprtsrv01.example.com.
    _ipp._tcp                                                   IN PTR          SCD-234\0322nd\032Floor\032Copier\032IPP\032Q._ipp._tcp
    _cups._sub._ipp._tcp                     IN PTR          SCD-234\0322nd\032Floor\032Copier\032IPP\032Q._ipp._tcp
    _universal._sub._ipp._tcp           IN PTR          SCD-234\0322nd\032Floor\032Copier\032IPP\032Q._ipp._tcp
    SCD-234\0322nd\032Floor\032Copier\032IPP\032Q._ipp._tcp          IN TXT ( "txtvers=1" "qtotal=1" "rp=printers/SCD234Q" "note=2nd Floor Workroom" "ty=Xerox WorkCentre 5755 Student 2.2" "product=(Xerox WorkCentre 5775 Student22)" "printer-state=3" "printer-type=0x80B0F6" "Transparent=T" "Binary=T" "Fax=F" "Punch=3" "Bind=F" "Sort=T" "Scan=F" "Duplex=T" "Staple=T" "Copies=T" "Collate=T" "Color=F" "pdl=application/pdf,application/postscript,application/octet-stream,image/jpeg ,image/png" "URF=W8,SRGB24,CP1,RS600" )
    ;SCD-236\032Office\032LPR\032Q._printer._tcp          IN          SRV          0          0  515          elemprtsrv01.example.com.
    ;_printer._tcp                                         IN PTR          SCD-236\032Office\032LPR\032Q._printer._tcp
    ;SCD-236\032Office\032LPR\032Q._printer._tcp          IN TXT ( "txtvers=1" "qtotal=1" "rp=SCD236Q" "note=Main Office" "Transparent=F" "Binary=F" "Fax=F" "Punch=0" "Bind=F" "Sort=F" "Scan=F" "Duplex=F" "Staple=F" "Copies=T" "Collate=T" "Color=F" "pdl=application/postscript" )
    ;SCD-236\032Office\032IPP\032Q._ipp._tcp          IN          SRV          0          0  631          elemprtsrv01.example.com.
    ;_ipp._tcp                                                   IN PTR          SCD-236\032Office\032IPP\032Q._ipp._tcp
    ;_cups._sub._ipp._tcp                     IN PTR          SCD-236\032Office\032IPP\032Q._ipp._tcp
    ;_universal._sub._ipp._tcp           IN PTR          SCD-236\032Office\032IPP\032Q._ipp._tcp
    ;SCD-236\032Office\032IPP\032Q._ipp._tcp          IN TXT ( "txtvers=1" "qtotal=1" "rp=printers/SCD236Q" "note=Main Office" "ty=Lexmark T520" "product=(Lexmark T520 SCD)" "printer-state=3" "printer-type=0x8090C6" "Transparent=F" "Binary=F" "Fax=F" "Punch=0" "Bind=F" "Sort=F" "Scan=F" "Duplex=F" "Staple=F" "Copies=T" "Collate=T" "Color=F" "pdl=application/pdf,application/postscript,application/octet-stream,image/jpeg ,image/png" "URF=W8,SRGB24,CP1,RS600" )
    Note that the second queue is commented-out in the student zone file because it's the office queue and I didn't want it to appear in student workstation queue browsers. I customized the PPDs for these printers and thus changed the "product=" part of the TXT record to match the name in the altered PPD's "*PRODUCT:" line so that it wouldn't match with an already-installed PPD.
    The above zone file generates two different queues (IPP and LPR) for each printer on Leopard and higher queue browsers, but only one queue (LPR) on Tiger. We're still supporting Tiger and even the odd Mac OS 9 client (no browsing, but they can do a manual LPR queue). Windows does both or you can manually add the IPP queue (add a new network printer using the URL "http://elemprtsrv01.example.com:631/printers/SCD234Q" and make sure you're using the PostScript driver for the printer, or you'll get garbage). iOS devices browse for _universal._sub._ipp._tcp records and you need to add the URF= field in the TXT record or the queue won't show up...and add a file /usr/share/cups/mime/airprint.types with the single line "image/urf urf (0,UNIRAST<00>)".
    All my users from Mac OS 9 to Mac OS X to Windows can now print using a central print server that magically shows up in the print browser...yay!

  • How to use wide-area Bonjour?

    My understanding of Wide-Area Bonjour is that I can access Bonjour services while outside the local network. So for example while at the office I would think I could access the iPhoto library of a computer at home, at least that's what it seems to me.
    Am I right? If so, how is this used? I can find no instructions.

    I'm interested in this as well; documentation is minimal. Please post back here if you learn anything...
    I was hoping to see support for DynDNS or similar, but no...

  • Domain hosting provider that supports Dynamic Global Hostname?

    Is there any domain hosting provider that supports dynamic DNS of the variety that supports "dynamic global hostname" used by Mac OS X, accessed in the Sharing control panel, and used by AirPort Express and Time Machine? I am referring to the Dynamic DNS method specified by IETF RFC 2136.

    Any VPS provider will give you full control over your BIND installation.

  • Wide area bonjour for mac

    I know this is not an exclusive forum for "bonjour for macbook" but I could not find any category explicitly catering issues with this so I thought this could be the place to ask my query.
    So here is my problem.
    To enable wide area bonjour on my laptops I have configured my own local dns sever by following details on this document http://www.dns-sd.org/ServerSetup.html and then configured my clients i.e. laptops by following http://www.dns-sd.org/ClientSetup.html page.

    I'm trying to do the same thing and found a couple helpful threads and links.
    http://blog.inig-services.com/wp-content/uploads/2010/03/WAB.pdf
    http://discussions.apple.com/message.jspa?messageID=5959986
    Unfortunately, following the above PDF guide, one key step fails. After enabling bonjour registrations using the serveradmin settings command and restarting DNS, I can see that the dnsextd proxy fails to start:
    dnsextd starting
    main: setrlimit - Invalid argument
    Using default file descriptor resource limit
    startedvialaunchd
    ConnectToServer: connect - Socket is not connected
    ConnectToServer: retrying connection
    I verified via netstat -na that BIND is listening on 5030 and I can use nslookup to run queries against it. There appears to be no good reason why dnsextd can't connect to it @ 127.0.0.1#5030 as far as I can tell.
    Is this feature broken in the latest Snow Leopard Server 10.6 release?

  • Wide area bonjour - windows dns

    Hi,
    I have been trying to setup wide area bonjour using ms dns server for serveral days and come up against a dead end.  In most examples on the internet BIND is used as the DNS server and all configuration is shown for BIND (except one PDF "www.grouplogic.com/Knowledge/PDFUpload/.../WanBonjour_1.pdf" which has examples for MS dns but it doesnt work).
    So I have managed to configure the MS dns server as far as advertising available services but when I try to resolve a service it fails.  I think its a problem with the srv record but have tried so many different configurations for this record I have lost count.  config below.
    Has any one set this up? could really do with a good example of it working on windows dns.

    thanks for the quick reply AndrewTJ - I did notice the typo after posting and corrected however the problems remains.  below is the contents of my up.com.dns file - i can see nothing out of place but cannot get a resolution
    ;  Database file up.com.dns for up.com zone.
    ;      Zone version:  22
    @                       IN  SOA dns1.up.com.  hostmaster.up.com. (
                             22           ; serial number
                             900          ; refresh
                             600          ; retry
                             86400        ; expire
                             3600       ) ; default TTL
    ;  Zone NS records
    @                       NS dns1.up.com.
    ;  Zone records
    _http._tcp.up.com.              PTR website._http._tcp.up.com.
    website._http._tcp.up.com.      TXT ( "txt path=/" )
                             SRV 0 0 80 dns1.up.com.
    _services._dns-sd._udp.up.com.  PTR _http._tcp.up.com.
    b._dns-sd._udp.up.com.          PTR @
    lb._dns-sd._udp.up.com.         PTR @
    dns1.up.com.                    A 192.168.1.153
    Any ideas?

Maybe you are looking for