<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Musings of an Apple Systems Administrator &#187; DNS</title>
	<atom:link href="http://www.jonsblog.org/tag/dns/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.jonsblog.org</link>
	<description>Just another WordPress weblog</description>
	<lastBuildDate>Sun, 01 Aug 2010 05:56:39 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>10.6.2 Migrate Wiki Server &amp; DNS</title>
		<link>http://www.jonsblog.org/2010/01/25/10-6-2-migrate-dns-wiki-server/</link>
		<comments>http://www.jonsblog.org/2010/01/25/10-6-2-migrate-dns-wiki-server/#comments</comments>
		<pubDate>Mon, 25 Jan 2010 12:08:59 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[DNS Settings]]></category>
		<category><![CDATA[OSX Server Configuration]]></category>
		<category><![CDATA[Wiki Server]]></category>
		<category><![CDATA[DNS]]></category>
		<category><![CDATA[migrate]]></category>
		<category><![CDATA[wiki]]></category>

		<guid isPermaLink="false">http://www.jonsblog.org/?p=63</guid>
		<description><![CDATA[While migrating our servers services from 10.5 to our 10.6.2 production server one of the easiest migrations that I had found was to migrate the 10.5 Wiki. Simply copying files and making sure that the permissions remain in tact are really all you need. However in 10.6.2 there is a detachment from the way you [...]]]></description>
			<content:encoded><![CDATA[<p>While migrating our servers services from 10.5 to our 10.6.2 production server one of the easiest migrations that I had found was to migrate the 10.5 Wiki. Simply copying files and making sure that the permissions remain in tact are really all you need. </p>
<p>However in 10.6.2 there is a detachment from the way you authenticate. You create access for each blog based on the settings in the web interface rather than in Workgroup Manager. This threw me off a bit the first time due to the fact that I had already had our previous wiki server split up into groups using workgroup manager. </p>
<p>Here is how I migrated our wiki, the default directory for wiki and blogs on 10.5 and 10.6 is</p>

<div class="wp_syntax"><table><tr><td class="line_numbers"><pre>1
</pre></td><td class="code"><pre class="bash" style="font-family:monospace;"><span style="color: #000000; font-weight: bold;">/</span>Library<span style="color: #000000; font-weight: bold;">/</span>Collaboration</pre></td></tr></table></div>

<p>Inside that folder, you’ll find a Groups folder of interest.  You’ll want to repeat the following procedure for each group:</p>

<div class="wp_syntax"><table><tr><td class="line_numbers"><pre>1
2
3
4
5
6
7
</pre></td><td class="code"><pre class="bash" style="font-family:monospace;"><span style="color: #c20cb9; font-weight: bold;">sudo</span> serveradmin stop teams
<span style="color: #c20cb9; font-weight: bold;">sudo</span> <span style="color: #c20cb9; font-weight: bold;">mv</span> <span style="color: #000000; font-weight: bold;">&lt;</span>Group Folder from Backup<span style="color: #000000; font-weight: bold;">&gt;</span> <span style="color: #000000; font-weight: bold;">/</span>Library<span style="color: #000000; font-weight: bold;">/</span>Collaboration<span style="color: #000000; font-weight: bold;">/</span>Groups<span style="color: #000000; font-weight: bold;">/</span>
<span style="color: #c20cb9; font-weight: bold;">sudo</span> <span style="color: #c20cb9; font-weight: bold;">chown</span> <span style="color: #660033;">-R</span> _teamsserver:_teamsserver <span style="color: #000000; font-weight: bold;">/</span>Library<span style="color: #000000; font-weight: bold;">/</span>Collaboration<span style="color: #000000; font-weight: bold;">/</span>Groups<span style="color: #000000; font-weight: bold;">/&lt;</span>group_directory<span style="color: #000000; font-weight: bold;">&gt;</span>
<span style="color: #c20cb9; font-weight: bold;">sudo</span> <span style="color: #c20cb9; font-weight: bold;">rm</span> <span style="color: #000000; font-weight: bold;">/</span>Library<span style="color: #000000; font-weight: bold;">/</span>Collaboration<span style="color: #000000; font-weight: bold;">/</span>dataVersion.plist
<span style="color: #c20cb9; font-weight: bold;">sudo</span> <span style="color: #c20cb9; font-weight: bold;">rm</span> <span style="color: #000000; font-weight: bold;">/</span>Library<span style="color: #000000; font-weight: bold;">/</span>Collaboration<span style="color: #000000; font-weight: bold;">/</span>globalIndex.db
<span style="color: #c20cb9; font-weight: bold;">sudo</span> <span style="color: #c20cb9; font-weight: bold;">rm</span> <span style="color: #000000; font-weight: bold;">/</span>Library<span style="color: #000000; font-weight: bold;">/</span>Application Support<span style="color: #000000; font-weight: bold;">/</span>Apple<span style="color: #000000; font-weight: bold;">/</span>WikiServer<span style="color: #000000; font-weight: bold;">/</span>directoryIndex.db
<span style="color: #c20cb9; font-weight: bold;">sudo</span> serveradmin start teams</pre></td></tr></table></div>

<p><span id="more-63"></span><br />
Once you complete those steps, you’ll need to login as an administrator and set the permissions for the wiki(s).  10.6 removes the privileges for wikis from Workgroup Manager and instead allows for security management via the wiki web interface.</p>
<p>Once we were done with the wiki, we had to migrate over DNS this was a little bit scary however retyping our DNS records was equally as scary. I decided to try to migrate the settings since it was sanctioned by Apple. </p>
<p>Basically the first step was to stop DNS service on your Snow Leopard server. I then created a backup of my DNS config files that lived on my Snow Leopard server in the event that everything went bad.</p>

<div class="wp_syntax"><table><tr><td class="line_numbers"><pre>1
</pre></td><td class="code"><pre class="bash" style="font-family:monospace;"><span style="color: #c20cb9; font-weight: bold;">mkdir</span> <span style="color: #000000; font-weight: bold;">/</span>var<span style="color: #000000; font-weight: bold;">/</span>backups<span style="color: #000000; font-weight: bold;">/</span>dns; <span style="color: #c20cb9; font-weight: bold;">cp</span> <span style="color: #660033;">-r</span> <span style="color: #000000; font-weight: bold;">/</span>etc<span style="color: #000000; font-weight: bold;">/</span>dns <span style="color: #000000; font-weight: bold;">/</span>var<span style="color: #000000; font-weight: bold;">/</span>named <span style="color: #000000; font-weight: bold;">/</span>etc<span style="color: #000000; font-weight: bold;">/</span>named.conf <span style="color: #000000; font-weight: bold;">/</span>var<span style="color: #000000; font-weight: bold;">/</span>backupsdns</pre></td></tr></table></div>

<p>I then preceded to copy the following files and folders from Leopard server into the same locations on Snow Leopard Server</p>

<div class="wp_syntax"><table><tr><td class="line_numbers"><pre>1
2
3
</pre></td><td class="code"><pre class="bash" style="font-family:monospace;"><span style="color: #000000; font-weight: bold;">/</span>etc<span style="color: #000000; font-weight: bold;">/</span>dns
<span style="color: #000000; font-weight: bold;">/</span>etc<span style="color: #000000; font-weight: bold;">/</span>named.conf
<span style="color: #000000; font-weight: bold;">/</span>var<span style="color: #000000; font-weight: bold;">/</span>named</pre></td></tr></table></div>

<p>Once done start DNS via the command line on Snow Leopard server</p>

<div class="wp_syntax"><table><tr><td class="line_numbers"><pre>1
</pre></td><td class="code"><pre class="bash" style="font-family:monospace;"><span style="color: #c20cb9; font-weight: bold;">sudo</span> serveradmin start dns</pre></td></tr></table></div>

<p>Next I urge you if you are going to try this test, test, test, test and test again. I got it almost 100% however there are a few fields in the DNS settings in Server Admin that do not exist in 10.5 Server. Also I did notice that it messed up my FQDN&#8217;s in some places. Tell me your migration headache story, or lack thereof.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.jonsblog.org/2010/01/25/10-6-2-migrate-dns-wiki-server/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>10.6.2 Split Horizon DNS</title>
		<link>http://www.jonsblog.org/2010/01/23/10-6-2-split-horizon-dns/</link>
		<comments>http://www.jonsblog.org/2010/01/23/10-6-2-split-horizon-dns/#comments</comments>
		<pubDate>Sat, 23 Jan 2010 23:50:20 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[DNS Settings]]></category>
		<category><![CDATA[OSX Server Configuration]]></category>
		<category><![CDATA[admin]]></category>
		<category><![CDATA[DNS]]></category>
		<category><![CDATA[server]]></category>
		<category><![CDATA[solution]]></category>
		<category><![CDATA[split horizon]]></category>

		<guid isPermaLink="false">http://www.jonsblog.org/?p=28</guid>
		<description><![CDATA[The DNS interface in Server Admin.app is not suitable for doing a split-horizon DNS configuration. It simply doesn&#8217;t expose all of the flexibility of bind that you need to pull off such a configuration. If you poke around the bind config files on your OS X Server, you&#8217;ll be able to see how apple has [...]]]></description>
			<content:encoded><![CDATA[<p>The DNS interface in Server Admin.app is not suitable for doing a split-horizon DNS configuration. It simply doesn&#8217;t expose all of the flexibility of bind that you need to pull off such a configuration.</p>
<p>If you poke around the bind config files on your OS X Server, you&#8217;ll be able to see how apple has set them up so that you can edit them directly without confusing the GUI. /var/named contains zone files that you may edit, and they include corresponding files in /var/named/zones which you should not edit. They&#8217;ve done something similar for /etc/named.conf and the files in /etc/dns/.</p>
<p>Having said that, I recommend not doing both internal and external resolving for split-horizon DNS on your server, mainly because:</p>
<ol>
<li>It&#8217;s kind of complicated, and you lose any convenience you had when you were able to use the GUI exclusively</li>
<li>You have NAT, which makes it even more complicated</li>
<li>There are solutions available from third parties that are better-performing, cheap/free, and more robust</li>
</ol>
<p>In my organization, we use DNS in Mac OS X Server extensively for the internal part of a split-horizon setup. We use the &#8220;Advanced DNS&#8221; part of a network solutions account for the external part. It comes free with the domains we&#8217;ve purchased, and has redundancy and speed far greater than what I could justify for hosting a handful or externally-resolving names myself.</p>
<p>You need to reconfigure BIND to use &#8220;views&#8221; with two different versions of your zone file, such that access from inside your network gives the 192.168.1/24 (internal) addresses, but requests forwarded from outside (via your 2-Wire router) give out your static public IP.<span id="more-28"></span></p>

<div class="wp_syntax"><table><tr><td class="line_numbers"><pre>1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
</pre></td><td class="code"><pre class="bash" style="font-family:monospace;">acl internal <span style="color: #7a0874; font-weight: bold;">&#123;</span>
    127.0.0.0<span style="color: #000000; font-weight: bold;">/</span><span style="color: #000000;">8</span>;
    192.168.1.0<span style="color: #000000; font-weight: bold;">/</span><span style="color: #000000;">24</span>;
<span style="color: #7a0874; font-weight: bold;">&#125;</span>;
&nbsp;
view <span style="color: #ff0000;">&quot;internal&quot;</span> <span style="color: #7a0874; font-weight: bold;">&#123;</span>
    match-clients <span style="color: #7a0874; font-weight: bold;">&#123;</span> internal; <span style="color: #7a0874; font-weight: bold;">&#125;</span>;
    zone <span style="color: #ff0000;">&quot;mydomain.com&quot;</span> <span style="color: #7a0874; font-weight: bold;">&#123;</span>
        <span style="color: #7a0874; font-weight: bold;">type</span> master;
        <span style="color: #c20cb9; font-weight: bold;">file</span> <span style="color: #ff0000;">&quot;/etc/bind/internal/db.mydomain.com&quot;</span>;
     <span style="color: #7a0874; font-weight: bold;">&#125;</span>;
<span style="color: #7a0874; font-weight: bold;">&#125;</span>;
&nbsp;
view <span style="color: #ff0000;">&quot;external&quot;</span> <span style="color: #7a0874; font-weight: bold;">&#123;</span>
    match-clients <span style="color: #7a0874; font-weight: bold;">&#123;</span> any; <span style="color: #7a0874; font-weight: bold;">&#125;</span>;
    zone <span style="color: #ff0000;">&quot;mydomain.com&quot;</span> <span style="color: #7a0874; font-weight: bold;">&#123;</span>
        <span style="color: #7a0874; font-weight: bold;">type</span> master;
        <span style="color: #c20cb9; font-weight: bold;">file</span> <span style="color: #ff0000;">&quot;/etc/bind/external/db.mydomain.com&quot;</span>;
    <span style="color: #7a0874; font-weight: bold;">&#125;</span>;
<span style="color: #7a0874; font-weight: bold;">&#125;</span>;</pre></td></tr></table></div>

<p>For more information check this out it is a <a href="http://www.howtoforge.com/two%5Fin%5Fone%5Fdns%5Fbind9%5Fviews">How To with more detailed instruction</a>s for Split Horizon DNS configuration.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.jonsblog.org/2010/01/23/10-6-2-split-horizon-dns/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
