Okra

OKRA IS NOW OBSOLETE

As of 9/22/2014, all Macs in the NPG need to be set up as individual machines so that the UNH networking people are happy. Okra has been taken off-line, but if files are still needed from it, then it just needs to be plugged into a small switch along with the Mac to pull files to, and they can be transferred by clicking on 'Finder > Shared > okra' and 'Connect as' using their old Okra username and password.

Okra

Okra is a Mac Mini server which operates as an Open Directory master for NPG Mac Clients, as well as providing apple file protocol shares for Mac user's home folders. The LDAP database on Okra is a separate LDAP database from the database on einstein. Some similarity exists between the two databases in that User accounts should share the same UID and username across both systems to allow users to have the correct permissions on their files across both systems.

Hardware Details

Mac Mini Aluminum

• Model: Mac mini aluminum
• Processor: Intel Core 2 Duo 2.66 GHz
• L2 Cache: 3 MB
• Memory: 4 GB
• Ethernet Controller: Broadcom 57765
• Wireless Controller: AirPort Extreme (Broadcom BCM43xx) 802.11 a/b/g/n
• Graphics: GeForce 320M 256 MB
• Storage: Hitachi HTS725050A9A362 500 GB 7200RPM x 2

Network Configuration

Okra only has one Ethernet port, so it does not have a Farm interface. Okra also has an Airport wireless interface, but it is not currently used so it has been disabled.

UNH IP Address: 132.177.88.73

Software and Services

Operating System Version: Mac OS X Server 10.6.3

Open Directory (Mac LDAP)

The Open Directory LDAP database on Okra is configured as follows:

• Base DN: dc=physics,dc=unh,dc=edu
• Kerberos Realm: OKRA.UNH.EDU

Okra's Open Directory server has SSL enabled and it should be used by clients connecting to the server. In order to for it to work correctly you may need to get a copy of the SSL certificate when you configure a client system. To do so, follow the instructions here.

Managing Users

You can manage accounts in the Open Directory database using the Workgroup Manager application.

Client Setup

LDAP

To setup clients to authenticate to okra's LDAP run this command on the client:

open /Library/System/CoreServices/Directory\ Utility.app

Select LDAPv3 and use the hostname okra.unh.edu. Next enter DirAdmin for the password and the standard okra password.

Enable root

In the Directory Utility menu, click Edit then select Enable Root User. Use the standard password.

Automount

Copy the aoutofs config files from any machine (preferably from another Mac) and run the command

automount -vc

Make sure to add the machine name to the npg_clients under einstein's LDAP database. This will allow clients to access the servers. The files are located at:

autofs

Storage

Okra has two 500 GB hard drives and does not use a RAID configuration.

• Drive 1 (/dev/disk1s2): Mounted on / (linked to /Volumes/Server) main system storage (including home folders) are stored here.
• Drive 2 (/dev/disk2s2): Mounted on /Volumes/Share, contains Backups.

AFP Shares

Okra shares several data volumes of the apple file protocol. These are:

• /Volumes/Server/Users (afp://okra.unh.edu/Users)
• /Volumes/Store/Shared Items/Backups (afp://okra.unh.edu/Backups)
• /Volumes/Server/Shared Items/Public (afp://okra.unh.edu/Public)
• /Volumes/Server/Groups (afp://okra.unh.edu/Groups)