Re: [Rockies-Edu] Several frozen iMacs
Re: [Rockies-Edu] Several frozen iMacs
- Subject: Re: [Rockies-Edu] Several frozen iMacs
- From: Corey Carson <email@hidden>
- Date: Wed, 23 Sep 2009 17:07:25 -0600
Following up on this. The correct, more secure steps that I posted
should have included this new 2nd step and the addition of the 6th step:
1. Enable remote login on those Macs (Sys Prefs, Sharing, Remote Login)
2. Restrict ssh to a single admin's account, especially one with a
good password:
3. ssh into those systems (ssh username@computer_name)
4. tail -f /var/log/system.log
5. Watch traffic fly by as system is used, and then watch for when
machine crashes.
6. Once troubleshooting is complete, disable remote login
Why the restriction in step 2? In Mac OS 10.5 and earlier, simply
enabling remote login on a Mac allows all users to ssh in. If you
don't consider that a big deal, check to see if that computer is bound
to AD and/or OD. If so, ANY user from those directories could then
login to that Mac via ssh. At this point, your Mac is only as secure
as the user with the weakest password in your entire directory.
Hopefully, you enforce a strong password policy, but if not, this
would put that machine at risk.
In 10.6, a SACL (Service Access Control List) is enabled by default to
the local Administrator's group.
Hope this helps.
Corey
----------------
Corey Carson
Systems Engineer
Apple - Higher Education
Colorado, Wyoming and Montana
303.378.7193
800.800.2775 (Tier 1 Tech Support)
866.752.7753 (Tier 2 Tech Support)
Rockies-edu listserve:
http://bit.ly/rockies-edu/
----------------
On Sep 18, 2009, at 4:08 PM, Corey Carson wrote:
Thanks, Tim!
I was heading down this path:
1. Enable remote login on those Macs (Sys Prefs, Sharing, Remote
Login)
2. ssh into those systems (ssh username@computer_name)
3. tail -f /var/log/system.log
4. Watch traffic fly by as system is used, and then watch for when
machine crashes.
Either will get you there, so do what works best. Let us know what
you find.
Thanks,
Corey
----------------
Corey Carson
Systems Engineer
Apple - Higher Education
Colorado, Wyoming and Montana
303.378.7193
800.800.2775 (Tier 1 Tech Support)
866.752.7753 (Tier 2 Tech Support)
Rockies-edu listserve:
http://bit.ly/rockies-edu/
----------------
On Sep 18, 2009, at 2:53 PM, Tim Fox wrote:
email@hidden writes:
Today I had 10 to 15 IMac's 2007 running 10.5.7 to 10.5.8. They
seam to
be freezing up within a 30 minute period. The users have reported
that
they are working in infinite Campus and Apple mail when there
machine
freezes up. The computers are freezing to the point that the only
way out
is a hard shut down or they are pulling the power. Some of the
machines
have been shut down from 5 to 10 times today. They are going to
start
crashing my hard drives soon doing this. So far I can't figure out
what
is causing this?? Any ideas??? This started yesterday at about
2:40. I
have the Activity monitor running on some of the machines. Also I
could
ping the machine that was reported frozen with a rapid response?
On Sep 17, 2009, at 1:18 PM, GOULDING, PHILIP wrote:
Any recent changes to those 10 to 15 Macs?
If you can ping them, can you ssh to them and restart them nicely?
Tim
-iii-<
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Rockies-edu mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
@apple.com
This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Rockies-edu mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Rockies-edu mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden