A power user’s guide to OS X Server, Mavericks edition

OS X Server 10.9 adds some new services and makes others easier to use.

Read the whole story

 

[psarhjinian]

Nice to see you use the same naming conventions for your machines that I did.

 

[Pantagruel]

dfavro[/url]":3hkm639j]Nice to see you use the same naming conventions for your machines that I did.

If I worked at Ars, I would name mine after Parthian and Sassanid Dynasty rulers just to be spiteful.

 

[djfake]

Is binding to AD still available? And Augmented Users?

 

[flunk]

It almost seems like they've refactored OS X server to compete with Windows 8 Pro instead of server. It's a useful value add for home users, but Apple has all but given up on business servers. I'd even argue that with the implementation of SMB for default sharing that Windows Server is a better choice for Mac clients than Mac server.

 

[pokrface]

SniPerfidy[/url]":3kd0y420]Anyone got a copy or code for Server.App I could use? I am trying to further my Apple/OS X education and prefer the hands on approach.

It's $19.99 on the app store. Why not just buy it for yourself?

 

[diamondsw]

It's worth noting that the VPN service has been completely broken for many (most?) users since the release of Mavericks. The App Store reviews are full of one-star reviews that essentially boil down to "it's broken", and there are numerous threads on the Discussion boards. So far, no response from Apple (typical). For example:
https://discussions.apple.com/thread/54 ... 5&tstart=0

The greatest achilles heel with OS X Server for me has never been lack of functionality - that can always be augmented/replaced with other tools. Rather it's been that it's an extremely fragile setup, and when it breaks it breaks severely and inscrutably. I've had to restore from backup many times after attempting to edit Apache config files and having it break half of OS X Server (since Web, Profile Manager, Wiki, WebDAV, and Calendar/Contact syncing all flow through Apache).

 

[sjinsjca]

diamondsw is correct. Upgrading to the new Server totally breaks VPN, and Apple has not responded.

Unfortunately Mavericks requires the current version of Server... older versions will not work.

Word to the wise: If your existing, Mountain-Lion-or-earlier Server installation is working, do NOT upgrade if you need VPN services.

 

[fferitt25]

Apple has removed most of the more intimidating configuration screens from the Server installation process.

Wow - really ?

Someone that has the knowledge to run - maintain and configure servers was intimidated by previous installs ?

I for one know that I hate the lack of configuration options on the recent round of installs. Apple seems to think that even their tech savvy customers want ios-style handholding.

 

[dehildum]

You missed one of the really nice features of server - if your router is an Apple router, then Server can configure all the port forwarding options for you.

 

[ws3]

JEDIDIAH[/url]":31e4gq8m]

Pokrface[/url]":31e4gq8m]

SniPerfidy[/url]":31e4gq8m]Anyone got a copy or code for Server.App I could use? I am trying to further my Apple/OS X education and prefer the hands on approach.

It's $19.99 on the app store. Why not just buy it for yourself?

Perhaps he's got an older Mac that's not supported anymore despite the fact that the Mac in question is still quite adequate for headless server duties.

Then it's not going to run Server.App anyway, so why ask?

 

[DavGreg]

"When Apple released OS X 10.6 in 2009, Server was an expensive and entirely separate version of OS X that only shipped on Apple's rack-mountable XServe systems and cost $1,000 if you wanted to run it on any of your other Macs."

I own a Mac mini Server- (dual 500GB internal HDs) that shipped with the OS- Snow Leopard Server- and it is still working in my Living Room to this very day. I run front Row as a UI for iTunes and Eye TV software for DVR service.

You might want to edit that quoted statement.

Screencasts Online Intro to Mac Mini Server
http://www.youtube.com/watch?v=66TpPjKyewc
Amazon listing for the server V1 (2009)
http://www.amazon.com/Apple-MC408LL-Leo ... B0013FTCPU
Apple Page on Snow Leopard Mac Mini Server v2 (2010)
http://www.apple.com/environment/report ... 100615.pdf
Everymac listing for my server
http://www.everymac.com/systems/apple/m ... specs.html

 

[stratology]

The screenshots show misconfigured DNS, a misconfigured hostname, misconfigured Open Directory, misconfigured VPN and a misconfigured Mail service. Looks like Apple did not simplify the services enough for users who lack a basic understanding of networks…
("Power user's guide"? Really?)
Advanced, more detailed configurations are still possible in Server 3 - via the command line.

 

[stratology]

diamondsw[/url]":2hsv651y]It's worth noting that the VPN service has been completely broken for many (most?) users since the release of Mavericks.

This affects L2TP only, you can use VPN via PPTP as a workaround, until it's fixed.

 

[sjinsjca]

stratology[/url]":1u89b2p7]The screenshots show misconfigured DNS, a misconfigured hostname, misconfigured Open Directory, misconfigured VPN and a misconfigured Mail service. Looks like Apple did not simplify the services enough for users who lack a basic understanding of networks…
("Power user's guide"? Really?)
Advanced, more detailed configurations are still possible in Server 3 - via the command line.

The article was a disappointment, coming from Ars. It was as though the author never tried to actually use Server. I would advise Ars to pull this review entirely.

Server presents a GUI to familiar *nix networking tools and services. It's a small advancement in terms of newbie-friendliness but by no means does it make setting up and managing networking services any sort of piece of cake. Networking services is still an impenetrable acronym-fest and a bramble-patch of interrelated and sometimes conflicting settings, and OS X Server does nothing to address that. For example, Back to My Mac and L2TP conflict... you can't have both services activated. Good luck finding that out without googling over a broken setup. It would have not been difficult for a user-friendly Server package to warn when the user attempts to activate both, but previous versions did not. I don't know if the current version does... I had to revert to a backup, due to essential services being broken.

For example, in the latest version, VPN doesn't "just work". A pretty essential service, it is totally broken. This isn't just a case of Apple rolling back features, perhaps to re-architect a software product for subsequent advancement a la iWork and Final Cut Pro. Instead, stuff that should be working and was previously working suddenly isn't. Even many of the help screens are missing. Very disappointing of Apple, and very disappointing of Ars not to call them to account.

 

[sjinsjca]

SniPerfidy[/url]":14fzu8ly]
I just asked in case anyone had an extra copy/redemption key. $20 not spent on this software just to learn it's ins and outs is $20 I can spend on gas or food, that's all. No big deal, I didn't see the harm in asking. I was just going to throw it on a Mac a friend gave me. Thanks anyways.

If you're a registered developer, there was a freebie for OS X Server... might still be the case.

But I'd wait if I were you. Let Apple fix what's broken first.

 

[sjinsjca]

stratology[/url]":1icq4juv]

diamondsw[/url]":1icq4juv]It's worth noting that the VPN service has been completely broken for many (most?) users since the release of Mavericks.

This affects L2TP only, you can use VPN via PPTP as a workaround, until it's fixed.

True enough, if you don't mind having to reconfigure all your clients and accept a lower standard of security.

Or, wait to upgrade until Apple gets its thumb out.

 

[sjinsjca]

dehildum[/url]":3fe7er80]You missed one of the really nice features of server - if your router is an Apple router, then Server can configure all the port forwarding options for you.

That is true. It's a nice feature and gives a glimpse of what might have been, in terms of friendliness and ease of use.

 

[timmcmanus]

Not a bad article, but it definitely wasn't a power user's guide.

The Server.app is a necessary evil, but the real power is truly discovered using the $serveradmin CLI tool. Unfortunately, Apple doesn't have any robust documentation on the tool and many of its features require you to reverse-engineer how it works.

I've been using Mac OS X Server since 10.0 beta, and because of the changes after 10.6, I've decided to start moving a lot of the services (mail, DNS, httpd, etc.) off of the Mac OS X server and onto CentOS VMs. Although Mac OS X is easier to manage and make changes to, I cannot give up the power-user features lost from 10.6 (specifically pointing out bind and mail). Apple completely dropped webmail from the server, and as an admin, it was the easiest way to check user's email issues and such. Horde and/or squirrel won't install onto 10.9 without major work, and I doubt it's even worth it at this point.

Apple exited the server business years ago. This is just a dimly glowing coal in its ashes.

 

[HisMajestyTheKing]

A server OS not worth the name that even lacks server hardware. And then 10 pages are spent on an article.

IMO if you need a home server just go with Windows or some easy to use Linux distro. You can even run several of them together on a hypervisor if so inclined. Hell, even a synology or qnap NAS is more interesting than this Apple "server".

 

[SirThoreth]

Has Apple started allowing virtualization of their OS?

 

[inpher]

SirThoreth[/url]":34qk6jkp]Has Apple started allowing virtualization of their OS?

According to their EULA:

…you are granted a limited, non-transferable, non-exclusive license: […] (iii) to install, use and run up to two (2) additional copies or instances of the Apple Software within virtual operating system environments on each Mac Computer you own or control that is already running the Apple Software, for purposes of: (a) software development; (b) testing during software development; (c) using OS X Server; or (d) personal, non-commercial use.

This paragraph is actually not new for 10.9 but was there since 10.7 or possibly even earlier. I suppose it's not as permissive as some would like due to Apple insisting on Mac hardware.

 

[TRANG T JACKSON]

ws3[/url]":6f8fodb7]

JEDIDIAH[/url]":6f8fodb7]

Pokrface[/url]":6f8fodb7]

SniPerfidy[/url]":6f8fodb7]Anyone got a copy or code for Server.App I could use? I am trying to further my Apple/OS X education and prefer the hands on approach.

It's $19.99 on the app store. Why not just buy it for yourself?

Perhaps he's got an older Mac that's not supported anymore despite the fact that the Mac in question is still quite adequate for headless server duties.

Then it's not going to run Server.App anyway, so why ask?

because even though it's super cheap he would prefer that it be free.

 

[Hap]

HisMajestyTheKing[/url]":3bd5aatu]A server OS not worth the name that even lacks server hardware. And then 10 pages are spent on an article.

IMO if you need a home server just go with Windows or some easy to use Linux distro. You can even run several of them together on a hypervisor if so inclined. Hell, even a synology or qnap NAS is more interesting than this Apple "server".

Great! Then tell me which version of Windows or Linux server I should install to get Time Machine backups, Apple SUS, and Apple caching software?


Yes I know there are a lot of hacks for Time Machine and I can use Reposado for SUS, but where is my alternative for the caching service?

 

[SirOmega]

sjinsjca[/url]":27bi29e9]diamondsw is correct. Upgrading to the new Server totally breaks VPN, and Apple has not responded.

Unfortunately Mavericks requires the current version of Server... older versions will not work.

Word to the wise: If your existing, Mountain-Lion-or-earlier Server installation is working, do NOT upgrade if you need VPN services.

I cant even get VPN working in ML half the time, so now I'm really set against upgrading!

That and ZEVO (ZFS driver for OSX) has been abandoned by GreenBytes and is stuck on ML as well. So my OS and my 12TB ZFS array cant go anywhere until I come up with a replacement for it.

 

[Hap]

I've had no trouble connecting to Maverick's version of VPN us L2TP except for when I'm tethered on Verizon - otherwise it just works, YMMV and all that.

 

[Dman23]

Wow... 10 pages!! Looks like Andrew is giving John Siracusa a run for his money. ;-P

 

[Dman23]

Oh btw, well done Andrew... very informative and insightful!

 

[timmcmanus]

IMHO, I completely abandoned Apple's VPN implementation because it's always been kludgy. If you're using a mixed environment (Macs and PCs), it's more trouble than it's worth.

I instead found an old, beat-up PC and installed pfSense on it with a second NIC. It supports OpenVPN nicely (Viscosity is the Apple client $9) and IPsec (VPNTracker, $49). It might do L2TP, but I went with OpenVPN instead. There's also an iOS OpenVPN client. pfSense comes with an OpenVPN client exporter (free) that works like a charm.

Again, it was my own choice to do this because it's less headache. YMMV.

 

[Dman23]

I have to add though, you talk a lot about how certain apps / services within OS X Server Mavericks is not complicated enough and / or powerful enough but you do not go into exactly what those features are that are missing within it's Server Application environment. Same thing goes for using it in the context of a mixed-environment (i.e. with a lot of windows and linux clients). I know it's always the "soup de jour" to always label certain products / services that Apple provides as "too simple" or "not powerful enough"... but I think it is critical that you actually NAME and / or POINT OUT those power features that are missing within the Server app and more importantly, HOW it actually helps improve the product.

If your going to give John S. a run for his money, you really need to kind of step up your game here a little bit and expand on your reasonings behind the conclusions that you state. All and all, like I posted before, very informative.

*Two Thumbs Up*

 

[tshort]

It appears they still didn't link DHCP and DNS in any useful way. I had to download ISC DHCP and use that to push DHCP updates into DNS so that all our devices can talk with each other.

I downloaded a CentOS LAMP server and put it in a VM because although PHP is available, MySQL is not, and that piece is very important for any a lot of web services.

 

[LiquidSolstice]

If it was worth your time to "learn the ins and outs" of a paid application, it was worth buying the application in the first place.

That's just textbook pirate defense mechanisms right there.

And all for just $20 :/

 

[deet]

"It sucks"
"Can I steal it"
"It's broken"
"Just use the command line"
"Not for Power Users"
"Power Users use something else"

Sounds to me like Apple may have succeeded in developing a product for non-jackass-administrators.

 

[ewelch]

I'm wondering what John C. Welch thinks of this article. (No relation.)

 

[Marlor_AU]

-

 

[Marlor_AU]

TRANG T JACKSON[/url]":3rwzfuzj]because even though it's super cheap he would prefer that it be free.

Presumably to run on his Hackintosh.

 

[audiophil]

Great review.

Looks like it will be business as usual for me in Server 3.0. The majority of anything I need to do will still have to happen in the command line or the server admin tools. I will also guess that the built in / bundled apache is still a pain to deal with too.

Oh. And it still needs a built-in iSCSI initiator. With so many NAS products supporting targeting these days the need has never been greater.