Recent Posts

Pages: 1 [2] 3 4 ... 10
11
El Capitan Server - Foundation Services / Re: Multiple machine setup
« Last post by isthatyourbag on October 17, 2016, 04:11:59 PM »
Ay thoughts or comments are appreciated. I did a reinstall of my main file sharing server, the OD master. ( I got a paranoid thing going on and felt the need.  :( ). I put the Profile manager on the mail machine, and then couldn't get the Admin account to authenticate, while user accounts could. Thought I was down a dead end, and then I remembered I was using a machine admin account from the first machine. Duh.

Now I'm out of town for a few days and can't retest. We'll see what happens next week when I'm hands on again.
12
I've bound a Sierra client and it shows the offending certificate - the one that's not trusted and that's where the Open Directory shows up. It's at the top of the chain.
13
Where are you seeing the self-signed?  Are you seeing this during device bind?  How are you binding? 

I can not say I've seen this yet.  I will run some tests this weekend and post back.



14
El Capitan Server - Foundation Services / Re: Multiple machine setup
« Last post by Reid Bundonis on October 14, 2016, 12:19:05 AM »
My apologies.  Took some time off this week so I've been asleep at the wheel. 

Glad the books are helping.

Deciding where to place your services on a multi-server deployment is always a challenge.  However, if you are protecting the devices behind a firewall and only forwarding required ports, you should be generally safe.  (Obviously there is always a threat but your must weigh the benefits against the risks.)

Profile Manager is a product that could be great with a few additional features.  For example, there is no replication, backup, or redundancy built into the product.  Also, unless I've missed something in the new release, Profile Manager must run on a device running as an OD Master.  I've not tried to run it on a Replica but will give it a shot over the weekend.  Who knows, maybe it will work.

I will admit, I am frustrated with the fragility of OD of late.  There are many conditions where a reboot will simply destroy OD.  And this really makes Profile Manager angry.

I am working on the Sierra updates but I am behind :(  Really got deep into the Xsan chapter and then Sierra changed a bunch.  Ah, so goes software.



15
I'm using Server 5.1.x on a mac mini server with El Capitan. I have purchased a third party SSL certificate, and in the Server app certificates section, I've set Open Directory to use this certificate.
 
Why do my client machines ask to trust a self-signed Open Directory Certificate Authority instead of using the 3rd party (trusted) certificate?

Why is Open Directory creating a CA to use?
16
El Capitan Server - Foundation Services / Multiple machine setup
« Last post by isthatyourbag on October 09, 2016, 04:33:21 PM »
Love your books. Reading then again and considering a changeā€¦

I have 2 machines running Server 5.1.x. Machine One handles mail; Machine Two handles file sharing, profile manager and open directory. They are currently on the same subnet.

I'm considering pushing profile manager to the Machine One as a security enhancement along with placing them on a different subnet. I'm bothered that it currently is "on the internet" with everything else. (I am using a router/firewall product.)

Will profile manager function on a different physical machine than the Open Directory?

Thanks for your thoughts, and when can we expect the Sierra versions?  ;)
17
El Capitan Server - Foundation Services / Re: Typos - Chapter 2 pg 36 & 38
« Last post by Reid Bundonis on September 16, 2016, 09:07:15 PM »
Thanks for the feedback.  I am glad it is helping.  That was my goal.

18
El Capitan Server - Foundation Services / Re: Typos - Chapter 2 pg 36 & 38
« Last post by illitrate on September 13, 2016, 04:30:35 AM »
Cool - i'll send through any others i find.

Books have been very helpful. I'm just setting up a mac mini to act as a web server and a ftp share. So I don't yet need all the enterprise functions that the books describe. But previously I set it up just using the Server functions that seemed relevant, and it worked, but not great. This time around i've set it up following your books and it seems much more robust. And nice to know it's set up so if I need to add functionality in the future, it shouldn't require a full re-build.

Plus, i'm now itching to setup a mac at home as a server now for the software update caching.

So definitely interested in the next version of the book(s) for Sierra. I'll keep an eye on this forum.

cheers!!
19
El Capitan Server - Foundation Services / Re: Typos - Chapter 2 pg 36 & 38
« Last post by Reid Bundonis on September 09, 2016, 10:14:31 PM »
Thank you very much!  I will make the corrections and yes I am trying to get a Sierra version out by the end of the month.  Hope the book(s) have helped.  I am thinking of combining everything into one book.

Any time you see mistakes please let me know!
20
El Capitan Server - Foundation Services / Re: Typos - Chapter 2 pg 36 & 38
« Last post by illitrate on September 09, 2016, 08:35:34 AM »
Sorry - and another - page 46, in Chapter 2 section "Creating a Certificate Signing Request (CSR)" in the last paragraph it says "See DNS in Chapter 2"
But DNS is at the start of Chapter 3.

hope that helps
Pages: 1 [2] 3 4 ... 10