Hot answers tagged lion-server
9
Is this considered bad? I thought one of the advantages of using /usr/local/ for your installs was that you don't need sudo. But clearly we do.
Homebrew, but default, sets itself up for single-user access to /usr/local. So you need to open up the permissions on the directory tree for it to be administered by more than one person.
People don't need to ...
7
There's two parts to your question, one part is easy to answer: yes, you can get a remote, graphical session on your server without the server having to have a keyboard or mouse attached to it.
This part of your question troubles me:
before buying the software
What software are you buying? Everything you need to remotely control your Lion server is ...
5
There is a way to do this, but it involves fiddling with DNS to make a 'transparent' software update server. When clients are on your network, their requests to "Apple's" SWU servers go to yours, without any modification of client settings, it truly is transparent.
Check this article out. It's a little old, but this is the general idea that you want to be ...
4
The following links will be helpful in getting you started with OS X Lion Server. Without knowing exactly what your client setup is, I simply provided general information in regards to OS X Lion Server. Hopefully it is organized in a fashion that is beneficial to you.
Standard Server documentation
Lion Server
Lion Server Support (Nearly everything needed ...
3
This is a very common setup. In general, never use .private and .local since you end up (eventually) in a world of hurt and doing it "right" isn't that hard.
Basically, you will tell the world that your mail server resides on the public IP address (or set up it's own real routable internet IP address and have the Proxy/Firewall forward traffic to the ...
3
Your best defence is always to turn off unnecessary services. If you're not using remote desktop: turn it off. If you're not using the HTTP or FTP servers: turn them off. Fewer services running, fewer points of entry for possibly intruders to exploit.
Aside from locking it down, there are some free and open source products that are OS X friendly you can ...
3
So I decided to research "Apache" without specifying "OS X" in my research.
I found that you can change the listen port in a conf file
$ mdfind httpd-ssl.conf
# Found
# /private/etc/apache2/extra/httpd-ssl.conf
$ cd /private/etc/apache2.extra
$ sudo nano httpd-ssl.conf
# ctrl + w
# 443
# Change Listen 443 to Listen 4444
# ctrl + ...
3
I was able to locate the source for these pages. The comments on this question by ioi's were leading in the right direction. The root directory for the app is /usr/share/devicemgr/. The portal is actually a Ruby on Rails app, so there is no direct HTML to edit. However, there are CSS files that can be edited to fit your needs. The CSS files relating to ...
3
Ok, I found my error. The sent messages folder is into the same directory of the inbox, under /Library/Server/Mail/Data/..., but it's hidden From Finder and ls as it is named with a . To start the folder name - .../.Sent Messages.
My mistake was to copy the contents of the backup folder to the newly created folder without checking the presence of hidden ...
3
You can use Workgroup Manager and OS X's managed preferences (MCX) to restrict access to the Restart and Shut Down commands in the Finder:
..then use the Accounts prefpane to show or hide the Restart, Sleep, and Shut Down buttons at the loginwindow:
2
I've removed shutdown for my lab Macs on OS X Lion. The two commands that should accomplish this are:
sudo defaults write /Library/Preferences/com.apple.loginwindow ShutDownDisabled -bool true
sudo defaults write /Library/Preferences/com.apple.loginwindow ShutDownDisabledWhileLoggedIn -bool true
I've not had 100% success with them, so I've also edited the ...
2
The approach we have used is a simple shared folder containing an Aperture library. I can report that this solution is ok but fragile -- permissions on the shared folder need to be fixed every so often.
Dropbox would certainly work in your case, but I suspect that you'll need substantial storage space, which would be rather expensive. If cost weren't ...
2
A recipe for deploying iLife 11 using DeployStudio just rolled across my twitter stream, so almost all the credit here goes to Steve Yuroff for the recipe.
It is available on github and lists the package names and checksums for verifying the install.
https://github.com/swy/iLife-11-InstaDMG-catalog/blob/master/iLife11.catalog
2
Another update... I started fresh with a new install of Lion. Updated to 10.7.3 first, having read about everyone's nightmares after this update.
Anyway, my Kerberos realm is now set to domain1.com, but Profile Manager still insists on using the incoming server name (hostname.domain1.com)as the email address. I tried using both variables, %email% and ...
2
Mac OS X Server is designed for remote "headless" administration and even initial setup. Server Admin included with the Server Admin Tools provides a GUI interface for server administration tasks as well as the ability to screen share the server desktop remotely.
Apple provides a guide: Lion Server: Setting up a remote server.
2
In iCal create a calendar entry with your resource or location in the invitation. Select the resource and click on the disclosure (the downward pointing triangle). Choose "Copy Invitee Address", your clipboard will have the uuid (unique id) of the resource, something like:
urn:uuid:0d426b70-8294-41a7-8b34-c2ee24cde743
Now remove the urn prefix ...
2
You could also script a defaults write com.apple.SoftwareUpdate CatalogURL triggered by a network change, such as grepping for ifconfig or scutil's State:/Network/Interface/en0/IPv4. Probably easy to do with Lingon etc as well.
2
Please refer to the answer at Create a Remote Only User in OS X.
The last part of that post will use bindfs to mount a user privileged only folder. See below. The whole instruction set is on the blog post referenced or just look at both posts. If someone wants me to duplicate that other post here let me know.
Getting in is one thing. Now you have to mount ...
2
You can harden ssh and install denyhosts, sshguard, and Snort, Barnyard, Base and Swatch.
See these links for details:
https://discussions.apple.com/thread/3565475
https://discussions.apple.com/thread/4473229?tstart=0
Turn off root and password logins:
vi /etc/sshd_config
PermitRootLogin no
PasswordAuthentication no
ChallengeResponseAuthenticatio no
...
2
To directly answer the question posed. I have another script that emails me, again, around midnight, if anyone successfully logs in via ssh.
#!/usr/bin/env bash
mm=`date +%b`
dd=`date $1 +%d`
dd=`expr $dd`
if [ "$dd" -ge "10" ]
then
dt=`echo "$mm $dd"`
else
dt=`echo "$mm $dd"`
fi
cat /var/log/secure.log | grep -E '(Accepted|SUCCEEDED)'| ...
2
I think you're on the right track with iosnoop - but perhaps fs_usage will get to the nub of which specific files are being accessed.
Start with sudo fs_usage -w and you can grep for things or perhaps find a stable PID to filter on. If the processes are coming and going too rapidly to track, you might need to fire up instruments or dump the launchd database ...
2
Check E1Suave's answer for some good starting points.
One extra tip I can give you from my personal experience is to (re)consider if you really need your clients to authenticate to the Open Directory (OD) at login.
The two reasons (I can think off) where you might want to do this are:
1. Network Home Folders
The home folder is automatically synced from ...
2
Assuming you want the domains to be synonymous (e.g. richard@domain.com and richard@domain.co.uk both correspond to the same mailbox), it's pretty easy. The trick is that the relevant configuration option is available in Server Admin.app but not Server.app. To get Server Admin, install the server admin tools (v10.7.4 is here, be sure to get the version ...
2
Yes just attach a keyboard and display see Apple's Xserver user guide and it is a normal Apple computer. OS X server includes all of normal OS X.
However, it will need to be in a rack and I suspect is noisy and now not that powerful compared with current desktops (and possibly even laptops)
2
The situation is actually simpler than some references make it seem. As Apple states:
If you enabled DHCP (only) in Server Admin in Lion Server, your configuration will be preserved when you upgrade or migrate to OS X Server (Mountain Lion).
Moreover, the Server app now provides a (very limited, but sufficient) user interface for controlling DHCP.
1
There's a Cyrus2Dovecot migration tool developed by Freie Universität Berlin.
Cyrus2Dovecot is a full-featured command line tool for converting the e-mails of one or more users from Cyrus format to Dovecot Maildir++ folders. It allows for performing a server transition which is fully transparent to both POP and IMAP users.
And other migration solutions ...
1
To expand a bit on Fail2ban, once it is set up and running I have a script that I run just before midnight that scrapes the logs and emails me what Fail2ban has been doing for the previous day.
The script is as follows and can be run from cron or a launchd plist.
#!/usr/bin/env bash
mm=`date +%b`
dd=`date $1 +%d`
dd=`expr $dd`
if [ "$dd" -ge "10" ]
then ...
1
To disable Kerberos, open Terminal at Mac mini and enter the following command:
sudo sso_util remove -k -a username -p password -r YOUR.KERBEROS.REALM
Replace username, password with the user name and password of the Open Directory administrator (user/password with admin rights on Mac mini). It seems that YOUR.KERBEROS.REALM is "LKDC".
The Open Directory ...
1
With the way that iPhoto is built it would be quite difficult to share the library across computers. We have had some success with having an aperture library sit on a network share and have multiple installs access that library but not simultaneously. If you want central I'd suggest something like picasa web from google. That way all machines can access the ...
1
Hello have you looked at:
cocoaslideshow or gofoto
You should be able to do that, alternatively there are other ways to host your iamges in your own Mac Mini Server or any other server using a blog or a CMS such as WordPress or Joomla with a photo/image gallery module that can just point to your photo directory and load the directory straight into the ...
Only top voted, non community-wiki answers of a minimum length are eligible
