Harmonic MediaGrid Installation And Configuration Manual page 140

Chapter 4 System Configuration
9. Verify passwordless SSH access, as follows:
ssh -l omauthchk -i /opt/omclb/conf/id_omauthchk <OD server> hostname
Configuring omauthremote.conf
1. From the High Bandwidth ContentBridge, copy omauthremote.conf to /etc, as follows:
cp /opt/omclb/conf/omauthremote.conf /etc/omauthremote.conf
2. Add the following settings to /etc/omauthremote.conf:
primary_server=<IP_address_or_hostname_of_OD_server> (required)
If the service account name on the Open Directory server is not "omauthchk," then you must
also add the following:
ssh_login=<service_account_name_used>
3. Verify that you have correctly configured access to the Open Directory server, as follows:
echo "." | /opt/omclb/sbin/omauthremote
The following shows the expected result:
omauthchk version <x.x>
.
Configuring Samba Settings on the High Bandwidth ContentBridge
IMPORTANT: Before editing /opt/omclb/conf/smb.conf, Harmonic recommends that you first save a copy.
1. Ensure that the heartbeat service (for High Availability pairs only) and gateway service are
stopped.
service heartbeat stop
service gateway stop
2. In /opt/omclb/conf/smb.conf, modify the following options:
security = DOMAIN
workgroup = <domain_name>
encrypt passwords = yes
add user script = /opt/omutils/bin/omadduser %u
auth methods = script2
auth_script2: script = /opt/omclb/sbin/omauthremote
ntlm auth = no
lanman auth = no
The password server option is not needed.
IMPORTANT: With OS X 10.11 and later, SMB signing on the High Bandwidth ContentBridge is not
supported and by default is disabled. When editing /opt/omclb/conf/smb.conf, do not set
"required" or "auto." When editing /etc/gateway.conf, do not set
3. Verify that /etc/resolv.conf is pointing to the correct nameserver and domain.
Configuring gateway.conf
1. Configure /etc/gateway.conf for native access to the Harmonic MediaGrid, as follows:
© 2017 Harmonic Inc. All rights reserved.
Joining a Harmonic MediaGrid Cluster to an Apple Open Directory Domain
SERVER_SIGNING
140
server signing
to
to "mandatory" or "auto."
Harmonic MediaGrid Release 4.1