NOVELL FORUMS - OES: Native File Access

OS X 10.5 / 10.6 Howto with extras

subversion — Wed, 18 Nov 2009 22:13:46 GMT

Hello all,

I've spent the last few weeks piecing together an OS X / Edirectory setup from several documents I've found online and lots of help from users on this and the Apple forums.

From this I've put together a preliminary HOWTO document that I hope will be useful to others fighting this battle. I've also included my complete Apple schema LDIF and my Edirectory LDAP mappings plist file for use as an OS X Directory Utility template.

I hope these things help guide others through the headaches and hopefully it helps make more sense out of the process. Thanks to those of you who have helped me figure out the problems along the way.

If you have any suggestions for this document or the attached files, please let me know. I hope to update it more as I add more Macs to our Novell network and learn more :) Enjoy!

OS X 10.6 Snow Leopard / 10.5 Leopard and Novell Edirectory Integration | nerdnet

Cheers,
Joe Jenkins
Davis Tool Inc

OSX 10.6.2 using CIFS

cperilli — Wed, 18 Nov 2009 14:03:22 GMT

We have several Mac users that attach to our Netware 6.5 NCS cluster. They are using CIFS protocol rather than AFP. All was fine until some were upgraded to Snow Leopard. The upgraded machines are now generating massive amounts of SMB traffic (like 12,000 packets/sec). Anyone else using Macs with CIFS protocol? If so are you seeing any traffic issues?

eDirectory 8.8SP5 Netware + OS X 10.6.2

subversion — Tue, 10 Nov 2009 19:25:06 GMT

Ok, forgive the long winded post - but I thought some background would be in order. Briefly, the problem we have is:

We create a new user in eDirectory, extended them with apple-user,
add apple-user-homeDirectory of:
/Network/Servers//SERVER.VOLUME/HomeDirectory

and an apple-user-homeurl of:
afp:///SERVER.VOLUME/HomeDirectory

AFP works fine, I can manually mount this volume with login / password in OSX with Command-K

LDAP authentication works great.

After login, no home directory is mounted or exists, so we get an error (login still occurs).

Now, if I change the apple-user-homeurl to:
afp:///SERVER.VOLHomeDirectory (this is how an X Serve stores this value in Open Directory) and attempt to login, login fails "because an 'error' occurred"

If I check the console / system logs on the OSX client, I see:
authorizationhost[455]: afp home directory mount failed in theEnumerator->Count in AFP_OpenSession: status = Unknown error: -5023

Now, for the weird part, if I change apple-user-homeurl on the user back to:
afp:///SERVER.VOLUME/HomeDirectory - login then works fine and their home directory is created and they are able to use the Mac normally.

Any ideas? I will post this to Apple forums as well. If I get any answers I will cross-post them.

Thanks,
Joe Jenkins

ps: Novell, please please please, we really need a working OSX client for Netware / OES!!!

Background:

New Netware 6.5SP8 server / eDirectory 8.8 SP5 / latest NMAS
Latest Novell AFP FTF patch from mid Sept 2009

Edirectory schema extended and LDAP mappings made with documentation I pieced together on the web. If I browse via ldap, I am seeing proper returns for all the objects I need to login.

Mount object created in Edirectory for the AFP mount corresponding to users home directories.

OSX test client is Snow Leopard 10.6.2 (patched this morning, clean install)

Authentication works fine, client works fine once I do the switcheroo with the apple-user-homeurl as indicated above, AFP mounts work fine in OSX, no weird errors in NMAS/LDAP dstrace, AFPTCP.log etc

By the way, if anyone else is trying to figure this out, my LDIF and my LDAP template may be of use:
http://www.nerdnet.com/edirldifandplist.zip

The LDIF is the Apple schema you apply to your eDirectory to support OS X computers. The template is used by the Directory Utility on OSX for mapping eDirectory values to their OSX values. It's taken me about two weeks of work off and on to get a working set of these, hope they save someone else some time!

Thanks to whoever wrote the "Integrating Mac OS X and Novell eDirectory" document - it was a great help, as is Randy Saek's posts here and his written document "Mac OS X and Novell eDirectory integration" - with these documents and numerous posts on Novell's forums, I've almost got this working well :) (these documents are available all over the web, but if you can't find them, let me know and I'll put them on my webserver)

Cheers,
Joe Jenkins

Mac OS X 10.6.2 update is now available

smflood — Tue, 10 Nov 2009 10:10:55 GMT

Apple have now released 10.6.2 so anyone having problems accessing
NetWare or OES2 SP1 (or SP2 when released) Linux servers via AFP from
Mac OS X 10.6.0 or 10.6.1 should update.

See http://support.apple.com/kb/HT3874 which specifically includes

Network file systems fixes provided for:
* compatibility with third-party AFP servers

Download from http://support.apple.com/kb/DL959

If your servers are NW6.5 SP8 or OES2 SP1 then I would also advise
applying the Mac 10.6 FTF patch to catch any Macs that haven't been updated.

HTH.
--
Simon
Novell Knowledge Partner (NKP)

------------------------------------------------------------------------
Do you work with Novell technologies at a university, college or school?
If so, your campus could benefit from joining the Novell Technology
Transfer Partners (TTP) group. See www.novell.com/ttp for more details.
------------------------------------------------------------------------