User Functions
Don't have an account yet? Sign up as a New User
Who's Online
Guest Users: 10
|
| View previous topic :: View next topic |
| Author |
Message |
dong Knows DNS is the answer

Joined: 04 Feb 2009 Posts: 30
|
Posted: Wed Feb 04, 2009 3:46 am Post subject: HELP PLEASE-a popup-window during Xsan setup |
|
|
Can anybody give me a hand please for this issue? I am a novice to Xsan.
I have been trying to solve it for 2 whole work days and can't get any clue. It may be a pretty simple question for you, so it will be greatly appreciated if you can give me any help. Ta......
I've got 2 Xserve as 2 MDCs. Everything works fine during setup and installation of Xsan application.
But during Xsan setup, all are good until after "Choose Metadata Controllers" window appears. After I tick both of the Xserves as MDCs then click "continue" button, the problem follows: a small window pops up and ask Directory Admin Name with "diradmin" after it, Password and root Password.
I haven't got any clue at all why it happens and what it does mean and how to solve it.
Can anyone give me any hints,,pleaeaease?
Thanks very much. |
|
| Back to top |
|
 |
matx Xsan Master

Joined: 15 Apr 2005 Posts: 379
|
Posted: Wed Feb 04, 2009 11:50 am Post subject: Xserve MDCs |
|
|
Hi
I don't recommend setting up the Xserve as an MDC using the Server Assistant on a fresh install.
Set up your Xserve / Mac OS XServer, get DNS and OD all set up right, then create your Xsan.
In your specific case it may be asking you for the original admin pass which could be also your diradmin (OD) password. If you set these up separately they will be different passwords.
I hope that helps. |
|
| Back to top |
|
 |
abstractrude Xsan Master

Joined: 13 Mar 2008 Posts: 881
|
Posted: Wed Feb 04, 2009 6:53 pm Post subject: |
|
|
i think whats happening, is it wants your OD admin password so it cant start the setup assistant and xsan in a way, can take over OD. I have never done it this way, though.
do the normal os x server install. on what i ill be your secondary metadata controllers setup dns and OD. attach the primary to the dns running off teh secondary controller. install xsan and update to 2.1.1 on both.. you can always do the zone transfer to the primary as well and the backup OD on the primary. |
|
| Back to top |
|
 |
dong Knows DNS is the answer

Joined: 04 Feb 2009 Posts: 30
|
Posted: Wed Feb 04, 2009 9:55 pm Post subject: seems fine now but still puzzled |
|
|
Matx and Abstractrude, thanks so much for your quick responses.
I reinstalled OS X Server and Xsan on both Xserves. This time, I did NOT configure DNS and OD at all on either of MDCs. Surprisingly, Xsan setup process is smooth, no windows like I described before popped up.
However, an interesting thing occurs: after the Xsan has been setup successfully, the primary MDC's OD keeps unconfigured and the secondary MDC's OD has been changed into Open Directory Replica. I tried this process a few times and the same results can be seen everytime.
Why is this? Any theoretical explanations? Please......
Also, I hope the questions below are not a bit over-silly.
1. Why do we have to set up DNS and OD while the Xsan works good as depicted above?
2. Is there anything DNS and OD to do with using Xsan just in private network?
Sorry if you feel bothered. But I will be grateful if you can give me more guidance. Ta....... |
|
| Back to top |
|
 |
matx Xsan Master

Joined: 15 Apr 2005 Posts: 379
|
Posted: Thu Feb 05, 2009 12:33 am Post subject: Re: seems fine now but still puzzled |
|
|
| dong wrote: |
1. Why do we have to set up DNS and OD while the Xsan works good as depicted above?
2. Is there anything DNS and OD to do with using Xsan just in private network?
|
1. DNS is very important for Mac OS X Server and for Xsan. Your Xsan will cease to function when the OSX server running on your Xserve can no longer resolve its IP to hostname and vice versa. I've seen it happen (just turn off your DNS server, I dare you!).
Also, OD allows centrally based authentication, i.e., a common group of users with different user IDs, as opposed to a lot of local users with conflicting (same) IDs. It really helps.
Yes, you could get away with host files (no DNS) and properly setup local accounts (no OD), but if there's an Xserve with Mac OS X Server then use it. Even AD on a Windows server works well. Really.
2. The private Xsan data network is recommended for lower latency and while not strictly necessary it works very well. |
|
| Back to top |
|
 |
dong Knows DNS is the answer

Joined: 04 Feb 2009 Posts: 30
|
Posted: Thu Feb 05, 2009 1:54 am Post subject: thanks a lot.. |
|
|
| Hello, Matt, thanks for your reply. I will be trying to figure things out. |
|
| Back to top |
|
 |
jtownsend Xsan Master

Joined: 24 Feb 2008 Posts: 74
|
Posted: Thu Feb 05, 2009 5:48 pm Post subject: |
|
|
The sheet you saw comes up if you are using Xsan to manage users and groups - in which case you have an Open Directory master on your primary MDC and OD replicas on your backup MDC(s).
If the admin password for your primary MDC works for root and the Open Directory administrator is diradmin with the same password, then the sheet will not show up. If you have changed those settings then it will pop up.
I'm not sure why your backup MDC is a replica if you reinstalled both machines, but in the initial way you were trying to set things up, Xsan Admin would have tried to make the backup MDC a replica (though it sounded like you didn't get that far). |
|
| Back to top |
|
 |
dong Knows DNS is the answer

Joined: 04 Feb 2009 Posts: 30
|
Posted: Thu Feb 05, 2009 10:10 pm Post subject: thanks, but....... |
|
|
hello,jtownsend, many thanks for your advices.
But, after I unconfigured both of the MDCs (untick the OD in the Server Admin - so there isn't any Open Directory, either master or replica), then run Xsan setup, the sheet still pops up........
I am literally banging my head against wall and pulling my hair off my head now.........what on earth is going on?
Any advices again, please?? Ta
 |
|
| Back to top |
|
 |
jtownsend Xsan Master

Joined: 24 Feb 2008 Posts: 74
|
Posted: Fri Feb 06, 2009 3:16 am Post subject: |
|
|
Unchecking the checkbox in the Services list in Server Admin only controls whether that service shows in Server Admin, not whether it is enabled or not. Prior to this did you make the servers standalone instead of master or replica?
You should make sure that SSH is enabled on your primary controller, and that you have entered the correct root password and directory domain administrator name and password.
If you want to manage Open Directory manually, you'll need to reinstall Mac OS X Server and pick the option to set up directory servers later instead of picking the option to have Xsan manage users and groups for you.
Short of doing that, you could try tearing down the Open Directory and and setting it up again. To do that, first double check that the backup controller is not an OD replica. If it is convert it to standalone in the Open Directory settings in Server Admin. Then, on the primary controller, make it standalone and then convert back to OD master, making note of the directory administrator name and password you use. You should also make sure you know the root password on the primary controller.
Hope that helps. |
|
| Back to top |
|
 |
dong Knows DNS is the answer

Joined: 04 Feb 2009 Posts: 30
|
Posted: Fri Feb 06, 2009 4:47 am Post subject: thanks very much. |
|
|
Hi,jtownsend, thanks a lot again for your message.
It makes a lot more sense for me......I'll give it a try! |
|
| Back to top |
|
 |
arekdreyer RAID 5

Joined: 22 Feb 2006 Posts: 16
|
Posted: Sat Feb 07, 2009 8:09 pm Post subject: Autoconfigured Open Directory Master |
|
|
While it was a great idea to make it easy for you to set up an Open Directory master, Open Directory replicas, and bind your clients to Open Directory without even thinking about it, I agree with matx and not recommending that you use that route, because tis currently implemented a little strangely, like using the metadata network for Open Directory traffic.
If you really want to start over, and you don't have anything on your Xsan volume yet, then start over. Reinstall Mac OS X Server on your metadata controllers, and when you run through the Server Assistant, DON'T choose "Xsan Metadata Controller". Just choose "Advanced". Then install Xsan from the Xsan install media once you have your servers up and updated.
You don't need to reinstall the OS for your client computers. Run the "Uninstall Xsan" installer from the Xsan install media. Use /Applications/Utilities/Directory Utility.app to remove the old entry for the Open Directory master, and bind again to your new Open Directory master.
You should *definitely* use a directory service, whether Open Directory, or Active Directory. While it is possible to use a metadata controller for Open Directory master or replica, I'd recommend that you keep it simple and dedicate your metadata controllers to just being metadata controllers. It makes troubleshooting much less complex. |
|
| Back to top |
|
 |
dong Knows DNS is the answer

Joined: 04 Feb 2009 Posts: 30
|
Posted: Sun Feb 08, 2009 9:09 pm Post subject: |
|
|
hi, Arekdreyer, thanks a lot for your post.
Regarding part of your post:
<<You should *definitely* use a directory service, whether Open Directory, or Active Directory. While it is possible to use a metadata controller for Open Directory master or replica, I'd recommend that you keep it simple and dedicate your metadata controllers to just being metadata controllers. It makes troubleshooting much less complex.>>
Do you mean I need another server to be Open Directory Master?
In addition, is the Open Directory(master and replica) just for the public network, not really functional for the private network?
Thanks again. DONG |
|
| Back to top |
|
 |
matx Xsan Master

Joined: 15 Apr 2005 Posts: 379
|
Posted: Sun Feb 08, 2009 10:48 pm Post subject: |
|
|
| Yes use another server for open directory (od) or ad. And yes this stuff only travels on the public network. |
|
| Back to top |
|
 |
arekdreyer RAID 5

Joined: 22 Feb 2006 Posts: 16
|
Posted: Mon Feb 09, 2009 12:52 am Post subject: |
|
|
| dong wrote: |
Do you mean I need another server to be Open Directory Master?
|
Yes, you though you don't need to use an Xserve or anything fancy; you could put a 10-user copy of Mac OS X Server on a Mac Mini.
| dong wrote: |
In addition, is the Open Directory(master and replica) just for the public network, not really functional for the private network? |
Correct. The private network, aka metadata network, is only for Xsan clients asking the Xsan metadata controller where it can find or write a file on the SAN.
So the Open Directory master and replicas shouldn't even have a network interface that is on the private network.
Well, now that I brought up DNS, you should have forward and reverse DNS records set up for the IP address on the private network of each of your metadata controllers.
Don't use the private network for DNS. Don't use the private network to manage the RAID. Don't use the private network to run software update. Don't use the private network to run Apple Remote Desktop. Don't use the private network to manage your Ethernet switch. Don't use the private network for Screen Sharing. Don't use the private network for anything other than Xsan metadata. |
|
| Back to top |
|
 |
dong Knows DNS is the answer

Joined: 04 Feb 2009 Posts: 30
|
Posted: Mon Feb 09, 2009 2:11 am Post subject: |
|
|
Hi, Arek, how are you doing? Thanks for quick reply.
There is still some point that I can't grasp because I am really a newbie.
According to
| Quote: | | Well, now that I brought up DNS, you should have forward and reverse DNS records set up for the IP address on the private network of each of your metadata controllers. |
Does it mean I must setup DNS for private network? If yes, why is this when no Open Directory is needed for private network? and if yes, how to setup the DNS of the private network?
| Quote: | | Don't use the private network for DNS. |
Does it mean I can't use any machine on private network as Domain Name Server?
I appreciate so much for your kind help. Tons of gratitude.....
Dong
[/quote] |
|
| Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|
|