I FOUND A SOLUTION.
As has been pointed out, the root of the issue is that XSAN is mounting the
volumes before Active Directory is ready for Prime Time. The solution is to
stick a delay in the XSAN plist.
I tried adding an entry in the hosts file to help speed up the DNS lookup,
but that didn't always work.
If any one needs this plist, please let me know and I will share it.
Here is what the plist will look like...
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
"http://www.apple.com/DTDs/PropertyList-1.0.dtd";>
<plist version="1.0">
<dict>
<key>ExitTimeOut</key>
<integer>240</integer>
<key>HopefullyExitsLast</key>
<true/>
<key>Label</key>
<string>com.apple.xsan</string>
<key>LaunchOnlyOnce</key>
<true/>
<key>OnDemand</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/bin/bash</string>
<string>-c</string>
<string>sleep 60;
/Library/Filesystems/Xsan/bin/xsand</string>
</array>
<key>ServiceIPC</key>
<false/>
</dict>
</plist>
You can copy and paste this into a plain text document and name it
com.apple.xsan.plist
You need to stick it here... /System/Library/LaunchDaemons
Replace existing plist
I hope this helps. Hey Apple, thanks for nothing.
Jeff
on 9/30/10 11:58 PM, Jeffrey Bernstein at email@hidden wrote:
> Finally, we have a good discussion here. To that end, I don't have FCSrvr
> running. The issue I seem to be having is that XSAN is loading way before
> the AD Plug-In. As such, the storage is mounting with no idea of what its
> permissions are supposed to be and the OS is not stitching things together.
>
> As a result, the permissions as seen through Server Admin, are all
> FFFF-EEEE-DDDD-completelyuseless. This in turn means people are having
> permissions issues up the ying-yang on the SAN and especially the AFP/SMB
> reshare.
>
> A little birdie thinks they have an answer through a tweak to the XSAN plist
> that will delay the mounting of the volumes. If it works, I will share the
> nugget.
>
> You will find people with the same issue on Apple discussion boards and
> Xsanity, yet no answers. Since it is so pervasive, I don't think it would be
> too much for Apple to create a Tech Note. But that would be just insanity on
> my part. Or would it be xsanity?
>
> Everyone, have a great weekend. IT'S FRIDAY!
>
> Jeff
>
>
> on 9/29/10 11:10 AM, Bracy, Jason T. at email@hidden wrote:
>
>> That's a FCSrvr issue not an Xsan issue. Apple has several articles about the
>> issue:
>> <http://support.apple.com/kb/HT3818>
>> <http://support.apple.com/kb/HT3688>
>>
>> This article is also helpful though not specific to FCSrvr:
>> <http://support.apple.com/kb/HT3795>
>>
>> ie, we found that in the situation where our AD domain was "ad.company.com",
>> our FCSrvr had a DNS of "fcsrvr.company.com", we actually had to connect to
>> it
>> by manually entering "fcsrvr.ad.comapny.com" instead of accepting the default
>> server supplied address. (This is a whole complicated issue with how AD
>> handles DNS)
>>
>> Jason
>>
>>
>> From: email@hidden On Behalf Of BBalser
>> Sent: Wednesday, September 29, 2010 1:46 PM
>> To: email@hidden
>> Subject: Re: Active Directory
>>
>> I have several clients, none of whom have been able to get Active Directory
>> to
>> work in FCSver 1.5. Some are not on XSAN, some are, some are mixed
>> XSAN/Ethernet.
>> -Ben Balser
>>
>> GARRISON, TRAVIS J. wrote:
>> Would anyone at Apple care to comment on when we can expect some fixes and
>> relief from the Active Directory loading issues that cause 10.6 XSAN clients
>> the inability to have proper permissions unless one unbinds and rebinds?
>>
>> In case Apple still thinks it's a low priority, has anyone had any experience
>> with a third-party AD plug-in or a script as a workaround?
>>
>>
>> What are the issues? We have not hit any issues with our XSAN and Active
>> Directory. Permissions are always set correctly.
>>
>> Travis
>>
>>
>>
>> _______________________________________________
>> Do not post admin requests to the list. They will be ignored.
>> Xsan-Users mailing list (email@hidden)
>> Help/Unsubscribe/Update your Subscription:
>>
>> This email sent to email@hidden
>>
>
>
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Xsan-Users mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Xsan-Users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
