Chapter 4 System Configuration
© 2017 Harmonic Inc. All rights reserved.
139
Harmonic MediaGrid Release 4.1
Joining a Harmonic MediaGrid Cluster to an Apple Open Directory Domain
Joining a High Bandwidth ContentBridge to an Open Directory Server with
OS X 10.11 or Later
Follow the procedures in this section in order.
NOTE:
This procedure requires Harmonic MediaGrid Server version 4.0 or later.
IMPORTANT:
Before you can perform this procedure, you must install
MediaGridOSXServer-
omauthchk.dmg
onto the Open Directory server. This file is available with the Harmonic MediaGrid
software downloads on the Harmonic website.
NOTE:
It is not necessary to manually create a ContentBridge account on the Apple Open Directory server.
Creating Passwordless SSH Access from the High Bandwidth ContentBridge to the Open
Directory Server
1. Create a service account on the Open Directory server for running omauthchk.
Harmonic recommends that you name the service account “omauthchk.”
2. Log in to the Open Directory server using the service account.
3. From the home directory, make an .ssh subdirectory, if needed, and then verify permissions
and enter the .ssh directory. For example:
mkdir -p .ssh
chmod 700 .ssh
cd .ssh
4. In the .ssh directory, generate private and public authentication keys and then press
Enter
twice to set up passwordless access. Suggested key names are as follows:
id_omauthchk
id_omauthchk.pub
For example,
ssh-keygen -f id_omauthchk
5. Append the public key to the authorized_keys file, as follows:
chmod 644 authorized_keys
(if present)
cat id_omauthchk.pub >> authorized_keys
chmod 444 authorized_keys
6. Connect a monitor and keyboard to the High Bandwidth ContentBridge, and then log in with
the following user name and password:
User name: root
Password: omneon
7. From
/opt/omclb/conf
, connect interactively to the Open Directory server using SSH, as
follows:
ssh -l omauthchk <OD_server_IP_addrress>
8. Exit back to the High Bandwidth ContentBridge, and then securely copy the private key, as
follows:
scp omauthchk@<OD server>:.ssh/id_omauthchk /opt/omclb/conf/
id_omauthchk
