Friday, November 09, 2007

Leopard

I've decided (with some encouragement) that I don't post often enough, so I've decided to write something on here as often as I can. In the past, I've posted random things on here just to keep the old fingers clacking away at the keyboard, and although that's exactly what I'm doing now, this time I'm not going to tell myself it was a pointless blog entry and not post anything again for ages.

So anyway, the new version of Mac OS X came out recently; it's called Leopard. Incidentally, if Apple decide to carry on releasing new versions of Mac OS X before they release OS XI, I can't help wondering what they're going to do when they run out of big cats. Anyway, I've been playing with Leopard at work. At first I thought it was great; it solved so many of the problems in Tiger for Active Directory (Microsoft's enterprise network management tool) domain administrators. So many things seemed to work straight away, and I didn't have any problems upgrading over the top of our existing Tiger installation. I installed it on our IT department's test Mac, a low spec Mac mini, and seeing how wonderful it was, immediately recommended the upgrade for some of our other Mac users. Only once I installed it on machines being used by people day to day for their work did the problems start to show themselves!

The users started complaining about extremely long log in times, sometimes of over three minutes, and also of extremely slow reaction times from the network. After trawling through the Apple forums, I found out why this was. Apple have a little tool called Bonjour which automatically sets up any attached devices for you. This includes printers, so is obviously quite useful for our users who want to connect to all the network attached printers. The problem is, Bonjour is designed to work in an Open Directory (Apple's AD equivalent) environment being administered by an XServe. As such, the .local suffix, used by probably millions of AD administrators over the world, is hard-wired into Bonjour, so if your domain uses it, your Mac will be trying to do all your network authentication through Bonjour rather than through the Directory Utility.

Hopefully Apple will release a patch that will fix this, but in the meantime, the workaraound is to rename your domain and use a different suffix. This is obviously not a viable solution for network administrators running a predominantly Windows environment with just a handful of Macs, so the only other solution is to disable Bonjour. This is also not a problem if none of your devices depend on it, and I think at this early stage in Leopard's life, this is a fairly safe assumption to make.

So, anyone out there having this problem, download iservebox and use it to disable Bonjour. This will solve your problem until Apple find a more permanent solution.