2:02am. Note to self: drinking coffee to stay perfectly alert for the drive home is a fantastic idea!
As long as I don’t care about sleep. At all.
Ran the 10.7.3 server combo update. Come to find out it failed to properly handle network openldap info. I see in the log files where it failed to move files from the tmp install directory. On login I’d see the red dot and “network accounts are unavailable”. I could still login with the local admin account. In Server Admin Open Directory was not running and could not be started.
This server is not bound to AD, fsck turned up a clean filesystem, and I re-ran the combo update in case it was able to succeed where it had failed before. I also repaired permissions. In Console PasswordService was reporting “Unable to locate search base: -1″ and “Can’t contact LDAP server”
The fix was to use a Time Machine backup to restore the /var/db/openldap folder. I had to select “keep both” and then head in via single user mode. If you’re a novice who got screwed here:
hold down command and S on boot.
fsck -fy
mount -uw /
cd /var/db
mv openldap openldap-corrupted
mv openldap\ [press tab and it will fill in the spaces appropriately for (original)] openldap
reboot
—
It is important the second to last command look something like mv openldap\ \(original\) openldap I can’t remember the exact \ usage, that’s why you’re using tab autocomplete, but also remember the second openldap, which is what you’re renaming it to.
After rebooting all services were up and running again, including mail/calendar/contacts/etc.
What are important things and advice to know that people generally aren’t told about?
Guy goes on a mountain bike course with his dog Lilo.
Japan marks 6 months since earthquake, tsunami
Photos with slow shutter speed. Love number 14!
Guy goes down an alpine snow course in the summer on a single track coaster without using brakes. Considering how slow 55mph looks on camera in a car this guy must be hauling ass at points!
The Recording of The Legend of Zelda 25th Anniversary Special Orchestra CD
If you’re unlucky enough to be using Retrospect 8.2 in OS X and run into “This disk is already a member of this media set” even though it is clearly not (freshly formatted, not listed in the members section of a backup media set, different names, etc,) I had some success reformatting the volume using Apple Partition Map instead of GUID.
Recently setup Lion Server and it’s very different from previous OS X Server incarnations. Mostly things went well, some things went amazingly well, but of course there were a couple stupid hiccups too.
The main one that gets me is that I turned on a number of services and always enabled SSL, using a self signed certificate because in this case I’m only providing service to a couple people where it’s trivial to accept the cert permanently. When trying to access iCal Server either via the web or iCal itself I received varying messages.
From iCal on a Snow Leopard client I got “Then account information was not found. The server has not specified a calendar home for the account at [blah blah blah].” Via a web connection I got “Calendar service is turned off” when it was clearly turned on (and rebooted, etc.)
The fix is to use the Server application, go to Hardware, then Settings. Click Edit next to SSL Certificate. Even though I had never edited this setting before, by default both Mail and Web had my self-signed cert selected and iChat, iCal, and Address Book did not. After selecting the certificate I was able to access all services normally.
I do not know why Lion Server had those boxes unselected. In future 10.7 server setups I will be interested to see whether this was a recurring issue or a one-time failure.
—
Lion Server feels unfinished. I very much agree with “macshome” take on afp548.com. They are trying to make a server OS iOS-simple and in many ways they’ve succeeded. However there has to be all those settings accessible somewhere. I hate that Server Admin Tools do not come on the server by default – what were they thinking? Further, the lack of MySQL and relegation of so many functions to the command line borders on silly. If I wanted command line I’d be running CentOS or debian or RHEL. You know, sources with good package management, backports of security patches, and the knowledge Apple won’t unceremoniously overwrite your configs out of the blue.
It’s a love/hate relationship, what can I say?
Recently I was trying to migrate from a Google Calendar and iCal/Sunbird to a Kerio Connect CalDAV server with multiple calendars and iCal / (Thunderbird & Lightning.) I ran into a bug that has existed for 7 years and 5 days, as of today.
Apparently the CalDAV specification outlines essentially a per-domain authentication instead of per-user. So when you add multiple calendars to Lightning all calendars from the same domain use the same login as the first time it was entered. The second (and 3rd, 4th, etc) calendars will fail to load because Lightning is providing only the user1@example.com password for all calendar.example.com calendars, including user2, user3, etc.
The solution is to step outside of Lightning and configure delegation so the user1 has access to the calendars of user2, user3, and so on. I used iCal to add each account and then added the two primary users to all 5 of the calendars available. Write access must be granted, otherwise as of Lightning 1.0b2 it will fail.
Side note, I’m not entirely sure it’s necessary but in order to lookup users to delegate to at least according to the manual, in Kerio Connect 7.2 you must use the auto setup utility (for the main account. and possibly for Address Book as well?) I could be wrong on that but I think I remember trying under the manual config and the auto-complete did not work.
After configuring delegation in iCal add the primary user first and then all of the other accounts – it will now work as it should have in the first place. Hope this helps some random internet searcher! (I’ll never know since spammers essentially made me turn off all user registration.)
This is a quick reference guide to configuring Kerio Connect 7.2 with a 10.6.7 machine + an iPhone.
CalDAV for iCal 4.0.4:
username user@server.example.com
server https://server.example.com/caldav/
CalDAV for Lightning 1.0b2:
username user@server.example.com
server https://server.example.com/calendars/server.example.com/user/Calendar
CardDAV for Address Book
username user(server.example.com)
Yes the server is in parentheses.
server address https://server.example.com:443
Check the port in your admin page.
Configuring CardDAV within the iPhone will not work. You must use the iPhone Configuration Utility. If you’re savvy enough to have configured your own services so far this utility is a breeze to use. Fire it up, go to Configuration Profiles and fill out the General and CardDAV sections. In case you’re pulling from two different servers or with two (or more) different usernames, it’s easy to add multiple sets of settings. After you’re done, connect your phone and click the install button.
I am kind of stunned at how well this is working compared to all other Calendar and Contact syncing apps I’ve used. I used to have to wait for Google Calendar to finish writing (over the network) on my phone or I’d lose data, and every form of contact syncing other than the paid mobileme service has lost contact data including phone numbers, custom labels, etc. Syncing via iTunes with Google Contacts periodically duplicates some contacts. Syncing contacts using exchange is a nightmare, it dumps all custom labels and all but ~3 of the phone numbers per contact.
This solution not only maintains my contact entries perfectly but also syncs over the air. When inputting calendar data on my phone – which I do constantly – I don’t have to wait for network operations to finish, I just put in the data and sleep it. On top of all this I synced the contact data to my phone and after verifying it’s accuracy deleted the old information, expecting to have to reconfigure favorites. I didn’t. The transition is seamless. I can’t guarantee that for everyone, so make your backups first!
I can’t see how I ever lived without raw’s killer white balance capabilities. That and the extra exposure control has had a dramatic impact on my photos.
At one point I was pretty into least-adjustments-possible photography, but after going through the raw vs jpeg debate one more time I realized adjusting photos is part of the craft. Nothing you see is the “true” photo anyway, it’s all just a bunch of 1s and 0s. Either the camera interprets the data and makes permanent decisions in the form of a jpeg, or you make reversible decisions later on.
Just dropped off two huge garbage bags of packing peanuts at a local ups store. A couple of customers were just wrapping up as I handed the bags over to the employee, she said: “Peanuts for Recycling?” I said “Yup.” The female customer asked “are you going to throw those away?”
I just… wow. First off, why would anyone bring two huge bags in to a store just to trash them (and wouldn’t the store charge me then?) and secondly, we had just verbally confirmed they were going to be reused/recycled.
Ah well. Guess we all have our moments.
The Graphing Calculator Story. Subject is somewhat geeky but it really is a good story.
Thought about posting this on FB. I still might. It really is super-important for everyone to understand what it is and why we want net neutrality.
OkCupid’s fact summary of The REAL ‘Stuff White People Like’. And so on for every major race out there. Since it’s not opinion but real data people enter in I find this fascinating. The only bias to be aware of is the data representing how people want to be seen versus reality, but getting truthful responses on the latter in 526,000 people would be quite daunting.
Subnormality’s Monstrous Descrepancies