If you've ever tried to setup Podcast Producer or Podcast Producer 2 and found yourself dropping f bombs left and right, you're not alone. Although PcP2's documentation clearly states that it works with Active Directory, there is no clear way on how to get the two working together. We have this working at Northwestern University's School of Education and Social Policy. http://www.sesp.northwestern.edu/
Step 1.
Make sure you have the DNS entry that you desire setup and ready to go prior to the install. Also, forward and reverse records must be working perfectly. Please confirm the DNS record is correct by running sudo changeip -checkhostname You should see something similar to the following:
podcast (192.168.1.2)
Primary address = 192.168.1.2
Current HostName = podcast.myorganization.org
DNS HostName = podcast.myorganization.org
The names match. There is nothing to change.
dirserv:success = "success"
Step 2.
Insert the Snow Leopard Server disk and reboot off the DVD. Format the drive. Install Snow Leopard Server.
Step 3.
Upon reboot, click through the defaults, setup your IP and use your active directory domain as your search base, i.e myorganization.org. Be careful NOT to setup either a bind to AD or to setup OD as a master server. Click custom setup and uncheck binding to AD or setting up an OD master server. Instead, just select "Manually Setup Users and Groups". Finally, run Software Update and apply all available patches.
Step 4.
When the install is complete, and the updates have been applied, bind to AD. Next, in the Terminal run sudo dsconfigad -enablesso to enable sign-sign on. Next, run the command serveradmin settings teams:enableClearTextAuth = yes ) This allows clear text authentication to AD. This must be done because of a limitation in the authentication of PcP2 to AD. (It's a good idea to login to the server with your an Active Directory account, open the Terminal and run klist -ek to verify your Kerberos credentials.
Step 5.
Open Server Admin from the Server Tools folder inside of Applications.
Connect to your remote host.
Enable Mail, NFS, OD, PCP, QT Streaming, Web and XGrid
Step 6.
Setup Open Directory.
- Next to role: Connected to another directory, click Change.
- Remain connected to AD and setup OD master
- Set your LDAP admin name to be the same as your local Admin account. This isn't required, however, I've found it easier to keep the two the same. Click through the defaults until you finish.
- LDAP search base is the AD record of the machine i.e. - dc=podcast,dc=myorganization, dc=edu
- Click on Info and make sure that Kerberos is not running. This shouldn't be running because we are using AD's Kerberos realm.
Step 7.
Next we will setup NFS
- Share Library/PodcastProducer
(THIS DIRECTORY DOES NOT EXIST UNTIL YOU CLICK ON THE PODCAST PRODUCER SERVICE, THEN CLICK CONFIGURE. DOING THIS WILL CREATE THE DIRECTORY. DO NOT DO ANYTHING MORE THAN MERELY START THE CONFIG PROCESS TO INVOKE THE CREATION OF THE DIRECTORY)
- Hit share
- Enable Automount
- Use LDAP domain
- Share over NFS
- Map to Shared Library folder (use the LDAP admin account to bind)
- Protocol options - Make sure afp, smb and ftp are off.
- NFS on: Select Export this item to a virtual interface/NIC
- Export to a particular subnet that what to have access.
- Map root to root
- Start NFS
Step 8.
Configure XGrid
- Run setup assistant
- Host a grid
- Bind with an AD account. This should be a regular domain account with no special privileges.
Step 9.
Next to last step, we will setup the Podcast Producer service.
- DO NOT CLICK CONFIGURE PP. Instead, click on Settings and change Podcast Library to /Library/PodcastProducer/Shared
- Xgrid username - Standard Domain user. Should be the same as what was used in the XGrid section of this document.
- Change Admin shortname to the short name of your admin account
- Start the Podcast Producer Service
Step 10.
In this step, we will configure the Web portion, which is the wiki/blog service
- Click on Sites
- In the hostname field, name the site default
- Click on the duplicate button (the button that looks like two over lapping windows)
- Change the host name of the duplicate to the FQDN of the website, then change the port to 443
- Click back on the "default" web entry. Click on Web Services. Make sure Wikis, Blogs, Calendars and Mail are all turned off. Click on Aliases. Click the + button on URL Aliases and Redirects. Choose RedirectMatch for the Type. The pattern should be ^(.*)$ The Path should be: https://podcast.myorganization.org/$1
- Click the secure web host entry. (the one with the FQDN and is secure on port 443). Click Web Services. Make sure that Wikis, Blogs and Calendar are all checked.
- Finally, start the Web service.
Step 11.
Configuring the Mail Service.
- Click Settings
- Click on Relay
- Check the option to Accept SMTP relays only from networks that your trust. The only entries permitted to relay should be 127.0.0.0/8 (localhost) and any other network that has access to your Podcast Producer service.
- Start the Mail service.
Step 12.
Configure QT Streaming Service
- Start Quicktime Streaming service
General trouble shooting:
PcP2 is highly dependent on XGrid. XGrid seems to be the Achilles Heel of PcP2. If you are submitting jobs successfully and find that that XGrid is failing, you can try deleting krb_cc in/var/pcast/serve/and then restarting the PcP server.