MarsRed
-
Posts
64 -
Joined
-
Last visited
Content Type
Forums
News
20th
EduGeek EDIT Conference
Blogs
Everything posted by MarsRed
-
Hi all, Not necessarily a wireless question, but certainly related... Just curious how folks are segmenting their networks and what that segmentation is used for? And what mechanism you are using for access/vlan assignments, particularly on wireless? wireless vs wired faculty vs students vs guests personal vs school-owned QoS/bandwidth throttling ACLs/network security - what are you protecting? Looking forward to hearing what people are doing! Thanks!
-
What are people using to live stream video within school? Ideally users could tune into a website from their laptops to view a live broadcast. Any ideas or recommendations? I'd rather not use a homegrown Quicktime/Darwin streaming solution; rather, something that is more robust (i.e. multiple streams, AD authentication, etc). Thanks in advance for your input!
-
Yup, we have MAK keys.
-
We buy desktops that come with Windows 7 licenses. But these are OEM licenses. We image our machines using scripted installs in KBox using Volume License media and our volume license key. When we do this, we are using up a volume license activation as opposed to the OEM activation that we purchased with the desktop. What do other people do to get around this? How are you taking advantage of OEM licenses with your imaging workflow and a variety of hardware being imaged? Thanks in advance!
-
Hi all, We want to renew the Root Certificate associated with our Enterprise Certificate Authority for us with our RADIUS server. Is there any implication to doing this? Will this affect any other clients that may be using certification services? Thanks!
-
Re: Avahi not broadcasting continuously, I haven't found a clear explanation for it, but did find a solution based on my realization that restarting Avahi fixed the non-broadcasting issue. I have a cron job that restarts avahi-daemon every minute (simply "restart avahi-daemon"). This seems to keep things going. Was that all you were having trouble with? Or was there another part to it?
-
Everything is working perfectly now! Not sure what was going on before, but thanks for your input.
-
I've configured cups to listen on all interfaces, but I'll try out tcpdump too to see what's going on. The iPad's gateway is the gateway for that wireless vlan (on which one of the machine's interfaces exists). Though I'm starting to think that my issue may have to do with how the printer is configured in cups. I'll try some things out and report back... Thanks!
-
That's what I was thinking. But the print server is on the same vlan since it's that same machine that's on all of the vlans via the virtual interfaces. Maybe that's part of the problem? Thanks for all of your help.
-
I'm using the machine to route mDNS between vlans, but it doesn't use traditional IP routing. The Avahi software just "reflects" mDNS traffic among the different interfaces/vlans without any routes required. Now that I understand that the behavior I was experiencing is normal without routing enabled, I'm okay with it. But I wonder if this has anything to do with another issue I was having? I am also using Avahi to advertise cups print queues via mDNS (emulating Apple's AirPrint) so that iPads can print to non-AirPrint printers. The queues function normally when I print a test page from the cups web interface and the queues are successfully advertised by Avahi to the iPads, but printing is unsuccessful from the iPads. The iPads and printers are on separate vlans. Would this have anything to do with my interfaces issue?
-
Okay, I just did this and can no longer contact the machine. I'll have to wait until I'm back in the office to look at the machine in person. Now I don't really want to use this machine as a router, so does enabling IP forwarding have any implications?
-
Doesn't look like it. Should I?
-
Here's the interfaces file: # This file describes the network interfaces available on your system # and how to activate them. For more information, see interfaces(5). # The loopback network interface auto lo iface lo inet loopback # The primary network interface auto eth0.1 iface eth0.1 inet static address 10.1.9.1 netmask 255.255.0.0 network 10.1.0.0 broadcast 10.1.255.255 gateway 10.1.0.1 vlan_raw_device eth0 auto eth0.2 iface eth0.2 inet static address 10.2.9.1 netmask 255.255.0.0 gateway 10.2.0.1 vlan_raw_device eth0 auto eth0.3 iface eth0.3 inet static address 10.3.9.1 netmask 255.255.0.0 gateway 10.3.0.1 vlan_raw_device eth0 auto eth0.4 iface eth0.4 inet static address 10.4.9.1 netmask 255.255.0.0 gateway 10.4.0.1 vlan_raw_device eth0 NIC is Broadcom Corporation NetXtreme BCM5755 Gigabit Ethernet PCI Express. I think your question about which vlan I'm pinging from might lead to an answer! I was only trying to ping from one vlan which can get to all other vlans. But now I realize (and just confirmed) that, when I'm on a given vlan, I am able to ping the interface of the machine that is on that vlan. i.e. from vlan1 I can ping the interface on vlan1, on vlan2 on I can ping the interface on vlan2, etc. Why might this be the case?
-
Yes, I do.
-
Hi there, I have an Ubuntu Server 12.04 machine with one physical NIC connected to a trunk port on a Cisco switch. I've installed the vlan package and configured /etc/network/interfaces to use 5 virtual interfaces with static IPs with vlan tagging, each on a different vlan. The problem I've run into is that only one of the virtual interfaces seems to be "active" at a time, meaning only one of the IP addresses can be pinged. Sometimes, with a restart, which interface this works on will change. I had read that I should only configure the gateway on one of the interfaces, so I did, but that's not even the interface that always works! Any ideas? Thanks.
-
So I've tried a number of different wpa_supplicant.conf configurations and still can't get wireless authentication to work. Does anyone have a known, working configuration file and/or setup tips for connecting to a WPA2 Enterprise/PEAP/MSCHAPv2 network using Microsoft IAS 2003 for RADIUS?
-
This is very helpful - thanks! But what would I add to /etc/network/interfaces for WPA2 Enterprise, which uses a username and password combination, not just a password?
-
Is there any way to start NetworkManager before login? With that link, what would I do about an 802.1x wireless connection? Thanks!
-
Hi all, I'd like to set up wireless logins for Ubuntu laptop clients that are joined to Active Directory with Likewise Open. Our wireless network uses WPA2 Enterprise and I have configured a system-wide profile in "Network Connections" for this, but it looks like the connection is not made until after login, so AD authentication cannot occur. Any ideas? Thanks!
-
That checkbox is in Directory Utility (/System/Library/CoreServices/Directory Utility). But that will only work if the UNC path for the home folder is set in AD. If you're using a logon script to map the home drives in Windows, then it's possible your UNC paths aren't actually set (that's how it is for some accounts in my environment). As was mentioned, using some sort of management system (i.e. Workgroup Manager or Profile Manager on an OS X Server) would be the ideal solution. You can set a share to auto-mount at login. If neither of those solutions works for you or is difficult to implement in your environment, there are even other options to consider. The AppleScript method previously mentioned is one. You could also do it via bash scripting. And there's probably other ways I don't know about...
-
Thanks for the links...good to know about and certainly something I'll keep in mind as we (hopefully) move to 2008. Am still interested in whether there's a way to run the batch file as administrator. Any chance there's a command that will do this?
-
Don't quote me, but I think Kace runs post installation tasks as whichever user logs into the machine. It sounds like the recommended route is using Group Policy, though I was hoping to contain this process (just copying one application preference file) during imaging. I have no trouble with it on the XP machines! Thanks all for your help.
-
Hmm...I don't see Files listed there. I'm on a 2003 domain, would that make a difference? What exactly would Files let me do?
-
Hi there, I have a batch file that I want to run as post-imaging task (with our Kace K2000 imaging system) that copies a file from a network share into a folder in C:\Program Files. However, on Windows 7 I get an error when this is run unless I right click and choose "Run as administrator." Obviously I can't right click to do this if the script is running automatically in the Kace imaging environment. In the script, is there a way I can specify "Run as administrator" as a command? Thanks!
-
Okay, so I figured this out. We have an admin account use for managing the machines that has an unmodified dock plist because no one has even logged in to this account on every client. So I included this account within the scope of the script, which removes the old icons and adds the new ones to each account. I then copied the new dock plist from this account into the user template. One thing I did find is that the /System/Library/User Template/user.template directory doesn't work as I expected it to. Adding the plist into that folder, even though it has the file hierarchy of the user template, did not seem to do anything. Instead I used the /System/Library/User Template/English.lproj folder which, from past experience, I know works. I'm not sure of the user.template directory's purpose, though I'm almost certain it's related to the Casper Suite. Feel free to post if you know!