7 Replies Latest reply: Apr 17, 2013 7:57 AM by Dean
Dean Level 1 Level 1 (5 points)

For a fresh install of Lion Server in what order should things be installed?

 

Certificates, DNS service, Open Directory


Mac mini, Mac OS X (10.7.3)
  • 1. Re: In Lion Server what comes first, DNS, Certificates, or Open Directory
    UptimeJeff Level 4 Level 4 (3,390 points)

    DNS, Cert, OD

     

    all that really matters is proper forward/reverse DNS first.

    make sure it clears sudo changeip -checkhostname

    don't use a .local, preferred to use a true fqdn

     

    after thats done, OD and Certs could happen in any order.

  • 2. Re: In Lion Server what comes first, DNS, Certificates, or Open Directory
    Dean Level 1 Level 1 (5 points)

    thank you,

     

    how do you know if it 'clears' , sudo changeip -checkhostname

     

    what I get back when I run the command is,

     

    Primary address     = 192.168.1.80

     

    Current HostName    = test.local

     

    The DNS hostname is not available, please repair DNS and re-run this tool.

     

    dirserv:success = "success"

     

    I assume something (DNS) is broken from that


  • 3. Re: In Lion Server what comes first, DNS, Certificates, or Open Directory
    UptimeJeff Level 4 Level 4 (3,390 points)

    thats a fail...

     

    I recommend you use a hostname form your own domain

         server.mydomain.com (or something like that)

    In the server app, adjust the hostname to your preference (dont use .local).

    This should setup DNS for you.

     

    In the System Prefs on the computer, make sure the server uses itself for DNS resolution, I usually enter: 127.0.0.1

     

    Re-run suo changeip -checkhostname and see if the names match (it will tell you that all is well).

     

    Its important that whatever name you use i resolveable to your server from all computers, so it would be typical to set each computer to use the os x server for it's dns server.

  • 4. Re: In Lion Server what comes first, DNS, Certificates, or Open Directory
    Dean Level 1 Level 1 (5 points)

    I think I'm getting it. so i do have a registerd domian name, through godaddy.com,  i'm using for testing.  I can setup a sub domian server.mydomain.com with a forwarding ip address back to me.

     

    I'm on a bit of a closed network though, (lab), when I run,  sudo changeip -checkhostname, does it need internet access to succeed?  I'm assuming that is how it validates the DNS entry

  • 5. Re: In Lion Server what comes first, DNS, Certificates, or Open Directory
    UptimeJeff Level 4 Level 4 (3,390 points)

    a closed network is fine.

     

    your internal DNS should point server.mydomain.com to the LAN IP of the server.

    The DNS server should automatically create the reverrse record.

    Like I said, make sure you have your System Prefs, Network Settings set to uss DNS: 127.0.0.1

     

    Also, in your Server App / DNS config, set your forwrding servers to your ISP.

    (stop/start DNS)

     

    re-run changip and it should come up clean.

     

     

    Once you het that far, you may have trouble resolving others hosts on your domain from within you lan, for example www.domain.com. You can simply replicate the entrie from godaddy into your intenral DNS so that www.domain.com points to the external IP (as it should).

     

    HTH

  • 6. Re: In Lion Server what comes first, DNS, Certificates, or Open Directory
    Dean Level 1 Level 1 (5 points)

    I'll work with this an see what I come up with. Best way to learn.

     

    Thanks for your help

  • 7. Re: In Lion Server what comes first, DNS, Certificates, or Open Directory
    Dean Level 1 Level 1 (5 points)

    Just a follow up;

     

    Using a domain name "server.yourdomain.com" makes it easier. Along with setting your DNS to 127.0.0.1 ,Running sudo changeip -checkhostname , will give you a success.

     

    But before doing all that if running a virtual install ensure the number of cores as 2 and ram at 4 gb. With those settings profile manger and open directory setup runs no problem.

     

    Thanks again.