Shouting Into Space

I just got two brand new Xserve build machines and the first thing I did was wipe out the default Tiger OSX Server install and install Leopard OSX Server instead. That wasn't too bad except for the fact that I had to go through the setup assistant first in Tiger before being able to boot off the Leopard disk, wipe the drive and install.

After I got Leopard OS X Server up and running on the Xserve, I tried to ssh out from a user account to another machine (my source repository server) that's running 10.4. While establishing communication, ssh had this huge delay (more than a minute - I think). I had to figure out what was going on so I ran ssh -v to get the verbose output from ssh while it was connecting.

The verbose output showed this.

debug1: Unspecified GSS failure.  Minor code may provide more information
Server not found in Kerberos database

debug1: Unspecified GSS failure.  Minor code may provide more information
Server not found in Kerberos database

debug1: Unspecified GSS failure.  Minor code may provide more information

So, I went spelunking in and ended up comparing the /etc/sshd_config files on both the local (Leopard Xserve) and remote (Tiger source repository) machines. I found on the remote machine (Tiger source repos) that Kerberos authentication was turned off by default but commented out.

So, I changed this:

# Kerberos options

# GSSAPI options
#GSSAPIAuthentication no

to this:

# Kerberos options
KerberosAuthentication no

# GSSAPI options
GSSAPIAuthentication no

in the /etc/sshd_config file on the remote (Tiger OS X server) and reconnected via ssh without a problem. Then it was on to more work setting up my new xserve build systems.

After installing Mac OS X 10.5 (Leopard) fresh (I won't go into details ), I needed to reinstall Tor. I found the Tor expert installer didn't quite do what it was supposed to as far as creating the _tor user the daemon runs as (the user ends up a little mangled - check it out after install with dscl . -read /Users/tor) Since Leopard doesn't use NetInfo (niutil) anymore, I had to manually create the user with DirectoryServices (dscl). Here's the quick-and-dirty on what I did...



After that, there was still a little more to do to get Tor to run. I needed to create a place for the logs and fix the StartupItems script. Here's what I did for that...



Cool. That fixed it. Still not sure whether I want logging in /var/log/tor or /Library/Tor/var/log/tor though... Also, I guess I probably should submit all this to the Tor folks too. I'm so damn lazy.