I installed VMWare VSphere ESXi 5.0 on my Apple XServe 3,1. I rebooted and OSX server booted instead of the ESXi installation. Here’s how to fix it.
In OSX run this command:
bless --device /dev/disk1s1 --setBoot --verbose
where disk1 is the disk that the ESXi installation is on.
Hope this saves someone some time.
Use this shell command to restrict access to distribution groups to your exchange users.
This sets “Require that all senders are authenticated” in Message Delivery Restrictions in EMC
Get-DistributionGroup | Set-DistributionGroup -RequireSenderAuthenticationEnabled $true
When created a new-ReceiveConnector you get an error like this:
New-ReceiveConnector : Active Directory operation failed…This error is not retriable. Additional information: The parameter is incorrect. Active directory response: 00000057: LdapErr: DSID-0C090C30
This is caused by not running setup /prepareschema before upgradeing to sp3. To work around the error just run that command from the sp3 media.
My Exchange 2007 store ran out of space and the stores dismounted. This is on a CCR cluster. After expanding the volume I brought the mailbox db up. I backup up the databse with DPM 2007. After the backup the log files aren’t deleted.
On the target node, which is also the node being backed up, I see these events:
Microsoft.Exchange.Cluster.ReplayService (2300) The surrogate backup procedure to MBX has been successfully completed.
The Microsoft Exchange Replication Service VSS writer (instance 46a3ea35-c95a-4ac4-981a-2be339853fc8) has successfully completed the backup of storage group ‘First Storage Group’.
Database log truncation has been requested for this storage group. Log truncation will occur on the active copy after the next log generation is created. Log truncation will occur automatically on the passive copy after that log file is copied.
On the active node I see these event:
Information Store (2236) The surrogate backup procedure has been successfully completed by MBX.
(error, source ESE, Event ID 214) MSExchangeIS (2236) First Storage Group: The backup has stopped with error -521.
This is what I did to fix it:
I dismounted the database, ran eseutil /mh “database name” on the database and verified the the log required value was “0″, meaning all transactions were committed to the database. I then moved the log files to another volume. I didn’t delete them in case of some unlikely failure. I also could have zipped them and deleted the log files. In this case it was faster to move them and I had SAN space to create a temporary volume to hold the log files. Server 2008 had a hard time even displaying the folder that contained the log files so I used the command move E000*.log in a command window started as administrator. Once the log files were moved I mounted the database and run a backup with dpm.
I did do the above, but it didn’t fix the problem. Turns out SP3 was the problem, read bellow.
After searching around on that error -521 I found this article which says that VSS backups work from the backup perspective but throw that error and the log files aren’t truncated.
http://support.microsoft.com/kb/2297394/
So it looks like I didn’t notice this after I updated to sp3. I installed rollup 1 for sp3 and the error was gone but the logs still weren’t turncated due to the logs I removed. I restored the log files I removed (I had just moved them to a temporary volume (NEVER DELETE LOG FILES!) and ran a backup from dpm and the logs were truncated normally. -1 to MS for bad SP!
Waiting for Steve…
5200 attendees
2 Million ipads in 59 days…more ipad love…
5 Milion books sold. Can add highlighting and notes to books with a view that’s easy to find them.
5 Billion downloads on app store.
Guess Steve thinks android isn’t a factor…iphone has 53% browser market share in US.
iPhone 4
SUS on 10.5 by design doesn’t see 10.6 specific updates. Use these modifications to get Apple Software Updates Server 10.5.8 to host 10.6 Updates.
This originates from This Apple Discussion.
serveradmin stop swupdate
/usr/share/swupd/html/content/meta/mirror-config-1.plist
with the following contents:
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PrimaryCatalog</key> <string>http://swscan.apple.com/content/catalogs/index.sucatalog</string> <key>CatalogsList</key> <array> <string>http://swscan.apple.com/content/catalogs/index.sucatalog</string> <string>http://swscan.apple.com/content/catalogs/others/index-leopard.merged-1.sucatalog</string> <string>http://swscan.apple.com/content/catalogs/others/index-leopard-snowleopard.merged-1.sucatalog</string> </array> </dict> </plist>
<key>metaIndexURL</key> <string>http://localhost:8080/content/meta/mirror-config-1.plist</string>
cd /usr/share/swupd/html/ ln -s /usr/share/swupd/html/content/catalogs/others/index-leopard.merged-1.sucatalog index-leopard.merged-1.sucatalog ln -s /usr/share/swupd/html/content/catalogs/others/index-leopard-snowleopard.merged-1.sucatalog index-leopard-snowleopard.merged-1.sucatalog
Now you can push each url for each major version through WGM or in /Library/Preferences/com.apple.softwareupdate.plist
…or if that doesn’t sound reasonable…
#For using one URL for all clients
LoadModule rewrite_module libexec/httpd/mod_rewrite.so
#Rewrite section for using one URL for all clients
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} Darwin/10
RewriteRule ^/index\.sucatalog$ /index-leopard-snowleopard.merged-1.sucatalog
RewriteCond %{HTTP_USER_AGENT} Darwin/9
RewriteRule ^/index\.sucatalog$ /index-leopard.merged-1.sucatalog
In 10.6 apple started using separate urls for each major version, so normally a 10.6 client would have to call into the index-leopard-snowleopard.merged-1.sucatalog url to see 10.6 specific updates. This change allows all clients to use the url with index.sucatalog and rewrites the request based on the user agent string. For Snow Leopard it’s Darwin/10. From HT4069
serveradmin start swupdate
Wait for swupd_syncd to download the new updates. You can watch swupd_access_log in Server Admin or from the server command line with tail -f /var/log/swupd/swupd_access_log. Also watch your network traffic on the server with Activity Monitor. You should see log entries like this as updates are downloaded.
127.0.0.1 - - [22/Apr/2010:15:33:51 -0400] 8080 GET "/content/meta/mirror-config-1.plist"
I deployed printers with Group Policy preferences to XP sp2 computers using KB943729 client side extensions. I deleted the deployed printers from the policy and they did not delete from the client. Adding a delete printer record doesn’t work.
As far as I can tell they can only be deleted from the registry with a command like this:
reg delete HKLM\SYSTEM\CurrentControlSet\Control\Print\Connections\,,SERVER,PRINTER /f
Where SERVER is your print server and PRINTER is the printer name.
To avoid this problem deploy printers in replace mode, and check “Run in logged-in users security context” and “Remove this item when no longer applied”
If you TI won’t turn on or is flickering with inconsistent power stop banging it around and read on! On my TI-89 corrosion had built up on contacts connecting the battery compartment to the circuit board.
You can see the corrosion on the right contact. I just used sand paper to clean it off and was back in business.
To take apart the case remove the 6 screws with a T6 torx driver and the backup battery cover. Then pry the case apart. snap it back together after the contacts are cleaned.
WWDC Keynote – keep refreshing, updating.
New 15″ pro – 1699
New Macbook 1199
Air 1499
Bertrand – talking about how great win 7 is .. and snow leopard…
safari 4 released for leopard tiger and windows.
Craig Federighi vp mac os engineering
Bertrand – Technologies
Snow leopard retail – $29 – family pack $49 – available September
iPhone – Scott – new price 8GB $99
One more thing
I was having many problems with LDAP after my server lost power. See below for the various issues I was having and bellow that the solution, which was basically dumping the contents of ldap, blowing away the database and adding them back in. It was actually quite simple.
I was finding that some machines, which I have adding themselves to ldap via a script, are not showing up in LDAP. Some though are showing up in dscl.
For example the machine hse118-20 does not show up in workgroup manager.
in dscl when I cd to the Computers container and do “read hse118-20″ I get what looks like the appropriate data back.
in dscl when I cd to the Computers container and do an “ls” hse118-20 does not appear in the listing.
****
slapd in debug mode and saw these errors in the slapd.log when I go to create the mslib group:
May 18 11:12:05 chetwood slapd[14034]: => bdb_dn2id_add: subtree (cn=mslib,cn=computer_groups,dc=chetwood,dc=local) put failed: -30996
May 18 11:12:05 chetwood slapd[14034]: entry failed schema check: value of naming attribute ‘cn’ is not present in entry
May 18 11:12:05 chetwood slapd[14034]: => bdb_dn2id_add: subtree (cn=mslib,cn=computer_lists,dc=chetwood,dc=local) put failed: -30996
May 18 11:12:05 chetwood slapd[14034]: entry failed schema check: value of naming attribute ‘cn’ is not present in entry
I can add a group called “test.” I get something similar when I try to add a group (which I think I’ve added before) called hse118, but without the “put failed” line:
May 18 11:19:43 chetwood slapd[14034]: entry failed schema check: value of naming attribute ‘cn’ is not present in entry
May 18 11:20:13: — last message repeated 1 time —
****
Here’s what I get using slapadd (with slapd halted), this does work for other group names (just changing mslib to test for example):
chetwood:~ root# slapadd -v << EOF
> dn: cn=mslib,cn=computer_lists,dc=chetwood,dc=local
> objectClass: apple-computer-list
> objectClass: top
> structuralObjectClass: apple-computer-list
> cn: mslib
> EOF
overlay_config(): warning, overlay “dynid” already in list
overlay_config(): warning, overlay “dynid” already in list
overlay_config(): warning, overlay “dynid” already in list
overlay_config(): warning, overlay “dynid” already in list
overlay_config(): warning, overlay “dynid” already in list
=> bdb_dn2id_add: subtree (cn=mslib,cn=computer_lists,dc=chetwood,dc=local) put failed: -30996
=> bdb_tool_next_id: dn2id_add failed: DB_KEYEXIST: Key/data pair already exists (-30996)
=> bdb_tool_entry_put: txn_aborted! DB_KEYEXIST: Key/data pair already exists (-30996)
slapadd: could not add entry dn=”cn=mslib,cn=computer_lists,dc=chetwood,dc=local” (line=6): txn_aborted! DB_KEYEXIST: Key/data pair already exists (-30996)
****
And lastly — I did a db_verify on the cn.bdb with slapd stopped and it came up with some errors. I ran db_recover on the database and it hung on a log file (there were 3), which was dated early march. I didn’t know what else to do so I removed that file (this was all last night) and the recover completed without error. The db_verify still errors on cn.bdb
****
And here is the solution:
launchctl unload /System/Library/LaunchDaemons/org.openldap.slapd.plistmkdir opendirectorycd opendirectory/
slapcat -l ldap.ldiffind /var/db/openldap/openldap-data -type f | grep -v DB_CONFIG | xargs -I arg mv arg openldap-data/slapadd -l ldap.ldif
slapindexlaunchctl load /System/Library/LaunchDaemons/org.openldap.slapd.plistNow test ldap with workgroup manager or dscl and make sure your entries are there. If anything goes wrong then the original database can be copied back.