Hot answers tagged

16

Unfortunately AWS has been severely neglecting meaningful IPv6 support. Their "solution", if you can call it that, is to throw a non-VPC ELB in front of your application. For many reasons that is a non-tenable solution for many use cases. As a stopgap fix, the tactic I've seen used by several organizations is to stand up an IPv6-capable VPS with another ...


9

We're just trying to bring our Macs into the fold here. My original plan was to use Backup Exec's Mac agent. Then I found out that the agent doesn't support 10.9, or even 10.8. So if you're keeping the OS up-to-date, that's out. I've heard legend tell that the next SP will get it up to speed, but I'm not holding my breath. It has been a few years, but ...


7

You can create IPv6 records for your ELB by prepending ipv6. to your ELB's public hostname. Hostnames and IPs redacted due to it being a customer environment - this is in the eu-west-1 region in a non-default VPC. craig@zeus:~$ dig AAAA ipv6.blah-0000000000.eu-west-1.elb.amazonaws.com +short 2a01:xxx:3::xxx:3314 2a01:xxx:3::xxx:ff14 2a01:xxx:3::xxx:7f20 ...


7

I used to use CrashPlan at a previous job to back up a couple of hundred Mac laptops, a few Windows VMs, and even a couple of Linux servers. They have a cloud based solution, but we used the on-premise server (I think they've since renamed it to CrashPlan ProE) and it was rock solid. I liked it enough that I use their cloud consumer solution to back up all ...


7

Acronis supports Macs and a centralized backup server. Symantec also supports Macs and has a centralized appliance. There's also Retrospect, a long-time established Mac backup package that also appears to support a local backup server. I'm sure there are more. (I've intentionally excluded cloud services.) Of course, the way we're using Acronis (for ...


4

I believe the "extend wireless" option is for extending the wireless using wireless :-) When extending over cable, Apple seem instead to call it "Roaming type network". So reset your units and start over. Connect each unit using cable and create a wireless network on each one using exactly the same SSID, encryption, password etc. The only special one ...


4

I just had to handle this. Finding the backup In my case, mysql lives in /usr/local/mysql/ (where the last part is actually a symlink to the current installed version of mysql). It actually does correctly back up the files, and the whole structure exists on the backup. But for some reason, even if you navigate to the correct local path in finder, if you ...


3

Came across an interesting article (published 1 December 2016). https://aws.amazon.com/about-aws/whats-new/2016/12/announcing-internet-protocol-version-6-support-for-ec2-instances-in-amazon-virtual-private-cloud/ You can enable IPv6 on VPC's in the "Ohio" region.


3

The Xserve Setup Guide states that all the DIMMs must be identical. Therefore, you cannot mix different sizes of DIMMs in the same Xserve. (Note that identical means that they must have the same specifications for size, speed, and timings. They don't necessarily have to be the same brand, but using RAM that Apple didn't sell you may invalidate the support ...


3

In us-east I use an IPv6 tunnel broker to provide an IPv6 tunnel which allows the instance to be addressed directly using an IPv6 address. Since the tunnel broker's point of presence is cross-connected to Amazon locally, this adds only about 1ms of latency. The down side is that, to get IPv6 to other instances in the subnet, you have to route it yourself (e....


3

You can certainly do this, but unless you script it (see below) there's no single-step solution. The basic steps are going to be: Bind the Mac to AD. Delete the local account, but leave the home folder alone. This can be done from the command line with dscl, or in System Preferences -> Users & Groups (just be sure to select "Don't change the home folder"...


3

You probably want to look into implementing Open Directory, or setting up an Active Directory forest, and integrating your Macs into that. Which you choose should probably be determined by whether you're going to be an all-Mac shop or not. If you plan on just having Macs as being the only devices you want to manage centrally, use Open Directory. If not, ...


3

I use Backblaze for many of my clients and on all of my machines (well, all the Win and OSX anyway - no support for anything else)- I can recommend them highly. The downsides are that the inital backup can take a while and it can be cumbersome to do a complete restore (they will overnight a drive for something like $200, but it can take time to prepare it), ...


3

No: It is not possible to PXE boot any arbitrary OS. Let me explain why: After the first stage of booting a PXE enabled hardware has loaded some code of the OS into the memory of the target computer, this code has to "know" that the boot process should continue over network and not from some local media. So every type of OS you need to be able to boot ...


2

The UEFI in modern Macs does not support PXE as an older BIOS does. Macs netboot using BSDP (Boot Server Discovery Protocol), not PXE. There are extensions to the isc-dhcpd (the package snoweagle mentioned) that support BSDP. To take advantage of this and have only one boot server for your windows and macs you'd need to get away from WDS (my understanding ...


2

I'm using PXELinux so I'm not sure if this will help. I was getting a headache setting all the flags etc to boot winpe from files. So I told it to forward the iso instead. I'm not familiar with macs. If there is something like a pe disk you could theoretically send the pe disk to the mac and theoretically have it establish either a nfs or smb share, then ...


2

If I were you, I'd use network home folders over NFS or AFP and have a standardized image built from something like Deploy Studio or Apple's built-in deployment solution. When a laptop fails, all of the data and user state is safe on your server (which is being backed up by something more enterprisey than Time Capsule, hopefully) and you can lay down a ...


2

When I set up FreeRADIUS last year with an internal CA, and all BYOD devices, this was an issue on every desktop and mobile OS. I simply instructed the users to click Accept, and if they were truly paranoid, they could stop by and see me to manually verify the certificate. A few did. If you don't control the devices and can't install your CA certificate on ...


2

The term localhost has a special meaning ... it is the IPv4 loopback address 127.0.0.1 and it is not accessible outside the 'local' machine. If for example you are trying to connect from a Mac to the CentOS server and you see localhost on the Mac, it will try to connect to the Mac, not the CentOS server. Beyond that you (or someone on your behalf) will need ...


2

Put CloudFlare in front of your application. They will accept requests on IP6 but route traffic to your IP4 ELB.


2

This feels like you're trolling us but I'll give you the benefit of the doubt. Have you got an XServe server and the XServe RAID disk array or just the array on its own - it's not clear from your question. If you have just the array then it's entirely useless on its own, if you have both the server and array then you could install a very old version of OSX ...


2

The message seems not to be about your AAAA records, but about the address of the DNS server for your domain. Even when your domain has AAAA records, IPv6 only users cannot reach it if they cannot reach the DNS server for your domain.


2

When Apple users allow the settings Maintain General Location allows sites to show you localized content in Safari, while your IP address stays hidden Use Country and Time Zone uses a broader location for your IP address, still within your country and time zone Apple currently publishes the IP-address ranges they use (for the purpose of populating Geo-IP ...


1

Try to /usr/sbin/scutil --set LocalHostName foo and see if it's changing ? Maybe the field you're trying is also located here System preferences -> Sharing -> Computer name


1

You are probably using Roundcube on the server, and localhost is by default authorized to send mail. Your iPhone is coming from an external IP, and it will probably regularly change IP over time, so you cannot simply authorize that IP to send mail. You need to authenticate yourself to postfix with a login/password to be authorized to send mail, in the same ...


1

NSURLErrorDomain -1001 is a connection timed out error: https://developer.apple.com/library/mac/documentation/Cocoa/Reference/Foundation/Miscellaneous/Foundation_Constants/index.html#//apple_ref/doc/constant_group/URL_Loading_System_Error_Codes Your device is apparently unable to connect to the Profile Manager server over its wifi. Try visiting the server ...


1

I ran a quick test of my IPad with TLS1 disabled, and was unable to connect to my mail server. My first question would be why is your e-mail server in your PCI-DSS protected zone. You shouldn't be emailing credit card numbers and other protected data in a form that requires PCI compliance. Sending such data by email will break your compliance. Move the ...


1

Certainly the last few versions of OSX haven't shipped with a JRE but if you try to run any .jar file a message pops up and asks if you want to download one. This come from them directly and is supported by them although it's almost 100% pure Oracle code.


1

Which KB article are you following? There's one for relaying from an internal "app server" if all you are going to email is internal O365 users: http://technet.microsoft.com/en-us/library/dn554323%28v=exchg.150%29.aspx Use the "Direct Send" method. Another alternative, the one I typically implement, is to deploy hMailServer (google it, it's free) on an ...


1

There are three possible options for bypassing web filtering with current qlproxy3: Do not pass HTTP/HTTPS traffic to domain to qlproxy ICAP server at all and thus totally bypass web filtering using acl lists in Squid. Add exclusion in Settings / Squid / Excluded Domains. Do not do HTTPS decryption for traffic going to domain and thus bypass web filtering ...


Only top voted, non community-wiki answers of a minimum length are eligible