Questions tagged [mac-osx-server]
Questions regarding Apple Mac Server editions of OS X.
1
vote
0answers
33 views
Suddenly RADIUS authentication is gone on macOS server (TLS session fails)
Suddenly my RADIUS authentication is gone on my MacOS Server running 10.13.6 and Server Version 5.6.1 (17S2109.
I already restored the Open Directory Server.
$ host name.domain.tld
name.domain.tld ...
2
votes
1answer
64 views
Is it possible to start a docker-machine at macOS (Server) boot?
Now that Apple is dropping certain services in Server.app (postfix, dovecot, DNS, to name a few) it is important to find solutions to keep these running. Apple suggests moving to open source versions, ...
1
vote
0answers
41 views
Apache2.4 Require IP not working because 127.0.0.1
I am trying to configure .htaccess on Apache 2.4 using Require ip X.X.X.X
The problem I am experiencing is that all requests appear to be coming from 127.0.0.1 and not the public IP of the request. I ...
0
votes
0answers
11 views
Apple profile manager - app payload don't find some apps
Earlier we used an other MDM solution and our configuration files created with Apple Configurator 2. Now we changed to profile manager and would like to create our profiles.
One of our company ...
0
votes
0answers
9 views
Install SSL cert to iphone remotely
I just started to use Profile manager and i stucked with one thing. We have a third party carddav server, and we set the carddav server paramteres in the profile manager. (profil/carddav payload)
...
0
votes
0answers
88 views
Finder App in Mac OS X (all versions) cannot search AFP/SMB shared drives, although Indexing is enabled. Why?
I have a Mac OS X server to which a LaCie 12Big Thunderbolt Storage is connected and is shared across the network using the OS X.
Problem is that Mac clients cannot search in their Finder App ...
0
votes
0answers
16 views
OS X Server - Profile Manager - Restrictions - Client cannot launch allowed application (Python)
As the title says, I'm managing an OS X server (Sierra), using Profile Manager to deploy settings to our student Macs. Everything is working fine with the application restrictions for all our current ...
0
votes
0answers
26 views
macOS: LDAP authentication to Time Machine Server doesn't work
I have a Synology RackStation 815+ running with its builtin "Directory Server" app as an LDAP provider. I also have a Mac Mini Server that is bound to authenticate against the Synology, using the ...
0
votes
0answers
31 views
Replacement tool for CreateGroupFolder
I'm replacing some Mac OpenDirectory servers; the old ones ran Mac OS X 10.7, and the new ones are running macOS 10.12. I have scripts that'll create accounts for users in the directory, and that ...
0
votes
0answers
24 views
OSX Calendar Server: how to delete notification from database?
We run an older OSX Server based on OS X 10.8.5 and Server 2.2.5 on top. One of the activated services is calendar server.
Few months ago one of the servers user has been deleted. But there is an ...
0
votes
0answers
48 views
Centrally Manage MacOS USB Ports & Misc. Settings
My organisation currently has a number of Apple devices running MacOS Sierra & High Sierra. Following a recent audit by our parent company, it was decided that (due to the actions of users) MacOS ...
0
votes
0answers
24 views
Remote application OSX
First off, I'm not sure if this is the right site, but seeing as how this feature is used in both windows and Linux servers I thought it was appropriate.
In Windows servers there's a feature called ...
1
vote
0answers
100 views
OSX Server Reverse Proxy, Preserve IP Address
I'm having trouble getting OSX Server's Apache service proxy to preserve the client's IP address when forwarding traffic to a Go-based server that I wrote.
Since I have OSX Server's "Websites" ...
0
votes
0answers
514 views
How to determine the connected Network Account Server on macOS from terminal
I want to determine the Network Account Server that is connected to a macOS computer and do this in Terminal. Via the GUI you can see it in System preferences > Users and Groups > Login options ...
0
votes
0answers
159 views
Configure postfix to DKIM-sign command line/system mail?
I'm running an internal (low-volume) mail server (via macOS Server.app 5.5) that uses amavisd-new for DKIM signing. I'm not running this to provide email services for users...I'm only using it in an ...
0
votes
1answer
512 views
Nginx server can not start
My nginx server can't start anymore after I killed its process through pkill nginx. Now everytime I try sudo nginx, i get this error
nginx: [emerg] open() "/usr/local/Cellar/nginx/1.12.2_1/logs/error....
0
votes
1answer
415 views
OSX high sierra time machine server
since updating (fresh install!) to OSX high sierra the server app does not offer the time machine settings anymore.
The changelog somehow reflects that, but refers to the system settings --> sharing ...
3
votes
1answer
57 views
MacOS Server Wiki Main Page Won't Load
I started playing around with the Wiki feature of MacOS Server recently. I built out a really nice, simple wiki for my department and I love it. However, recently when I go to the list of Wikis and ...
2
votes
0answers
88 views
How to test macOS afctl (the built-in adaptive firewall)?
Setting up macOS afctl (the adaptive firewall) on a 10.12 server. We had problems with this on a 10.11 server, and numerous online discussions reported that the thing just didn't work as advertised on ...
0
votes
1answer
539 views
nginx as reverse proxy for macOS Server's apache
I want to use nginx on macOS as reverse proxy for server's apache. I managed default macOS Server's apache to run on ports 4780 for HTTP and 47443 for HTTPS. Config is located here: /Library/Server/...
0
votes
0answers
129 views
How to direct http to https in mac os x jenkins server?
I had Jenkins installed on mac os x, and it is unsecured. Using let's encrypt, we secured the Jenkins. Now we need to redirect the old http URL (http://example.com:8081).
When we hit from outside, ...
-1
votes
1answer
219 views
how can i get jenkins stop listening on for remote connection on mac os x `
actually my Jenkins server is installed on mac os x, and it is having unsecured http port 8081(http:www.mydomain.com:8081). We changed http to https by securing with letsencypt and using apache as ...
-1
votes
1answer
12 views
OSX record already exists 2008 function level change
This may be related to a server 2008 functional level change we recently underwent. After that change, we started having problems with Macs binding to AD. They'd just give us an error similar to ...
1
vote
1answer
384 views
In mac OS Server, why don't virus & filtering settings seem to have any effect?
In mac OS Server, when configuring the Mail service, it is possible to configure the virus & junk mail filtering settings. It's just a GUI front-end for clamav, amavis, spamassassin, greylisting, ...
0
votes
1answer
91 views
OpenVPN for Macosx got .ovpn from Windows user but need own key and crt files?
Ok, I don't know if this is something I need to setup on my computer or if this is something that the client needs to give me. I believe a .key file is private, however, I seem to be having issues ...
0
votes
3answers
992 views
OSX Netinstall Custom Image
I've been searching for a clear method to create a custom Netinstall image of Sierra for a while without success.
My goal is to have two administrator accounts by default and some packages (e.g. ...
2
votes
0answers
374 views
OSX Home Directory permissions
I'm having some trouble with OSX setting odd permissions (Everyone/Deny/Delete) on users folders when they login to a Mac for the first time and I don't have enough experience with Macs to get it ...
1
vote
2answers
640 views
Reconfigure Apache to serve a Subversion repository over HTTPS (instead of HTTP)
I had a working setup of Apache, Redmine (3.3.2.stable) as well as Subversion (1.6.17); the server is a Mac OS X 10.6.8 Snow Leopard. Security concerns prompted us to change the server protocol to ...
24
votes
7answers
11k views
Speed up SFTP uploads on high latency network?
I'm trying to transfer a set of large files internationally using SFTP, but I am finding my international partner can't get upload speeds above ~50k despite very good connections on either side. We ...
1
vote
1answer
439 views
How to get LDAP password hash for MacOS Server user?
Is there a way of getting the password hash for a named LDAP user where the user is defined within Open Directory on a MacOS Server running OSX Sierra and MacOS Server 5.2?
My use case:
I am setting ...
1
vote
0answers
491 views
What is equivalent of smbpasswd -a on OS X Server? How to add Local Network Directory Users in Samba?
When a user is created on a Mac OS X Server 5.2 (Sierra), it can be created either on:
Local Directory (which is simply a local user)
or
Local Network Directory (which is actually Open Directory ...
3
votes
1answer
2k views
Why does SMB over Mac OS X Server 5.2 (Sierra) work with local accounts but not network directory accounts?
I have an OS X Server 5.2 over which I run File Sharing over AFP and SMB. AFP works fine but the same accounts that work with AFP from Mac do not work with SMB over Windows.
I have changed the ...
0
votes
1answer
698 views
MacOS Server Profile Manager slow to push changes
DNS is fine and I can see in the logs that the server is talking to the laptops but changes sit as 'pending' for a couple of hours before successfully pushing to the machines.
In the Service Helper ...
2
votes
1answer
1k views
HTTPS doesn't work anymore after adding SSLRequireSSL directive
I have a Mac Mini Server, running macOS Sierra (10.12.2) with macOS Server (5.2). This comes with a built-in Apache server, which is set up to listen on ports 80 and 443. This works fine; documents ...
0
votes
0answers
36 views
how to mitigate logon conflicts between remote users of macOS 5 server/El Capitan workstation?
I’m running Apple’s Server 5.0 on an El Capitan 10.12.2 iMac. This workstation hosts some data that 4-5 remote users simultaneously access and manipulate using vnc through an ssh tunnel.
Very ...
1
vote
0answers
237 views
pf on os x server 10.10 doesn't block addresses added to a table
I'm trying to understand the issue with pf on OS X 10.10 El Capitan.
I have installed sshguard and try to make it work by adding
table <sshguard> persist
block in quick proto tcp from <...
1
vote
0answers
212 views
Configure VPN ciphers on Mac OS Server
I'm trying to harden the L2TP/IPSec VPN on an El Capitan server. All the resources I can find either just walk you through the basic setup (adding a shared key, etc.) or are for third-party servers. ...
0
votes
0answers
70 views
Auth error: Unable to lookup user record
I have notice at mail-err.log that sometimes i get this error for a windows 7 user (that IP belongs to the client, if add more accounts there i will receive more of this errors for each account user):
...
1
vote
2answers
653 views
My server is compatible with TLS 1.2?
I just need to know if this server i compatible with TLS 1.2, through this message:
remote:~ Xserver$ openssl s_client -connect X:443 -tls1_2
CONNECTED(00000003)
140735304528736:error:1408F10B:SSL ...
1
vote
1answer
56 views
Mount filesystem from MacOS server on Windows
I have a MacOS server with a large RAID attached to it, and I would like people with accounts on the server to be able to read and write to the server from a windows machine through the file explorer.
...
0
votes
1answer
392 views
Delivery error command sendmail through Getmail
I am trying to receive mail with getmail and reroute it through sendmail to postfix.
I have managed to connect with my external mail server, but it fails when send those mails from getmail to postfix....
1
vote
1answer
1k views
How can I setup automatic renewal for Kerberos tickets and make the ticket life longer, in an OSX Server mail server
I have to renew tickets manually in my server terminal for users to have access to their mail accounts. I am using kerberos as a login authentication to access a local mail server. My local machine ...
2
votes
2answers
2k views
Postfix before-queue spam reject with amavis without sending out a bounce on OS X Server
This is a stock OS X 5.2 Server mail configuration which I'm trying to change to make it reject a spam message with a "554 5.7.0 Reject" before accepting it without sending out any additional non-...
1
vote
0answers
80 views
Authentication works for filesystem but not reverse proxy
I have a Mac Mini with OS X Server 5.1.7 running.
I have a service running locally accessible via http://127.0.0.1:3000/ask (without authentication) and I want to make it available to the outside but ...
0
votes
1answer
919 views
Using a network mount as user home in Mac OS X Server App (v5)
We have an old Mavericks server with a Firewire drive running and about 200 Users (Mac OS Server v3.2.2).
I would like to set up a new server with El Capitan running the latest v5.1.7 Mac OS Server ...
0
votes
1answer
241 views
Mac won't get LDAP users
I have a bit of a problem. I set up an ldap server, that my mac client needs to get users from, but something is blocking it to get the users, when i try to add the server in the users & groups ...
0
votes
0answers
8 views
Server Resources for Apple OSX Server [duplicate]
Looking to find the recommended resource specifications, CPU, RAM, Disk, for running internal DNS and Apple Remote Desktop Task Server within a Mac OS only environment on Mac OSX Server.
As we ...
1
vote
0answers
116 views
launchd script cannot use StandardOutPath to /var/log when run as non privileged user
I'm created a LaunchDaemon script to run backups for our git repos.
I want to run the process as a particular user (git) with the Std & Err logs output to /var/log
I get permission denied when ...
0
votes
1answer
533 views
Configuring Mac Server (El Capitan) DNS with Multiple Sites
I am having trouble confusing multiple sites on Mac Server (El Capitan).
Under "Websites", I want to configure more than one domain. When I add the sites, there are not reachable (i.e. no green light)...
1
vote
1answer
842 views
How to include spaces in mount points for automount?
On macOS I am attempting to set up an automount for a mount point with spaces.
/etc/auto_master contains:
#
# Automounter master map
#
+auto_master # Use directory service
/net ...
