Slashdot Mirror


Apple Deprecates More Services In OS X Server (apple.com)

Long-time Slashdot reader HEMI426 writes: Long ago, Apple used to produce rack servers, and a special flavor of OS X for that hardware with extra, server-friendly features. After Apple got out of the rack server game, OS X Server soldiered on, with the occasional change in cost or distribution method.

The next stop on the long, slow death march of OS X Server is here. With a recent post to their knowledgebase, Apple states that almost all of the services not necessary for the management of networked Macs and other iDevices are being deprecated. These services will be hidden for new installs, and dropped in the future.

Apple writes that "those depending on them should consider alternatives, including hosted services."

20 of 145 comments (clear)

  1. Lots of courage by Anonymous Coward · · Score: 5, Interesting

    It takes an awful lot of courage to remove DNS and DHCP services from a...server. Way to go, apple!

    1. Re:Lots of courage by OrangeTide · · Score: 2

      How does this statement:

      your first mistake is quoting the post instead of RTFA.

      From the linked article

      These deprecated services will be removed in a future release of macOS Server, so those depending on them should consider alternatives, including hosted services. Deprecated services are listed below. Links to potential replacements are provided underneath each deprecated service.

      The services listed as headings in the article: Calendar, Contacts, DHCP, DNS, Mail, Messages, NetInstall, VPN, Websites, Wiki.

      I recommend you make certain you've got the facts right before trying to be a smart ass.

      --
      “Common sense is not so common.” — Voltaire
  2. So... by jawtheshark · · Score: 5, Insightful

    So, let me get this straight: This is a server OS, with basic server functionalities removed? In what way is this still a server OS?

    --
    Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    1. Re:So... by dgatwood · · Score: 5, Insightful

      It's a server app, with all the server functionality removed. Staring at this list, I'm struggling to think of anything that wasn't removed. Apparently, they kept the user and device management — the part that for 99% of Server.app users is the least useful, but admittedly also the only part that's at all Mac-specific.

      That said, Server.app sucks. Always has. The Apache functionality has been a constant struggle even to get it to do basic things like update certs programmatically (they bizarrely store them in the keychain, then require some weird custom commands to force the server to grab the new credentials, and they're basically undocumented as far as I can tell). And heaven help you if you try to import any existing Apache config. You're pretty much guaranteed to end up with something nonfunctional.

      The only reason I even install Server.app at all is so that the software updates for Apache and BIND happen without me having to pay attention to the CERT mailing lists. And even then, I don't let the app configure *anything*, using a separate launchd plist with a different identifier and a separate config file so that none of Apple's code has any effect on the actual operation of the server.

      I guess with this change, there's no reason to bother installing it ever again, since I don't manage a network of users. This, of course, also means I have one less reason to keep using Macs as servers, but I digress.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    2. Re:So... by sg_oneill · · Score: 2

      No, the managing computers and users is not the "bit nobody uses", its the whole damn point of OSX server. Almost everywhere I've seen OSX server deployed, its to provide directory and authentication services to macs on a corporate network. Its basically a mac AD-like domain host.

      And while the apache stuff has had use in internal networks, nobody sensible is trying to deploy websites to the public on it. That seems like a bizarre waste of resources unless people have built special snowflake swift websites or have some ancient mac transcoding server software that's going to become redundant next OSX when they finally finish supporting 32bit APIs.

      --
      Excuse the Unicode crap in my posts. That's an apostrophe, and slashdot is busted.
    3. Re: So... by pezezin · · Score: 2

      No, they haven't, any other site supports Unicode.

    4. Re: So... by TheRaven64 · · Score: 2

      No other site has this problem. Slashdot advertises UTF-8 support in the meta tags in their HTML, but then doesn't support UTF-8. Other sites either don't advertise UTF-8 support, or actually support unicode (you know, the thing that's been the standard text encoding for 15-20 years).

      --
      I am TheRaven on Soylent News
    5. Re:So... by Maury+Markowitz · · Score: 2

      > It's a server app, with all the server functionality removed

      It's a server app that includes all the functionality anyone running a Mac server would want.

      Why would I run DNS on a Mac when I can do it on an RPi for less than the cost of a Mac keyboard?

      > The Apache functionality

      You run Apache on a Mac?! For god's sake, why?! You can get fully configurable hosted versions for less than the monthly depreciation of a Mac mini, and the free completely automated sandbox/deploy, A/B systems out there remove any barrier on that side.

      I type this on a Mac, so I'm not some sort of hater, but honestly, the idea of using my Mac as a server for anything other than Mac related chores simply doesn't make sense. CPU cycles are free, you pay for the GUI, and that doesn't make a lot of difference in the case of a daemon.

    6. Re:So... by dgatwood · · Score: 2

      Which commands to get it to grab the new credentials? I've been struggling with this exact problem. I have letsencrypt set up with auto-renewal, the certs added to the keychain, but I can't for the life of me get it to use the credentials. Was considering dropping the built-in web service and going with a self-contained MAMP install.

      What I'm doing is this:

      openssl pkcs12 -export -inkey /etc/letsencrypt/new_server.key -in "$FILEPATH" -out "temp.p12" -passout pass:pass
      sudo /usr/bin/security import "temp.p12" -f pkcs12 -k /Library/Keychains/System.keychain -P "pass" -T \
      /Applications/Server.app/Contents/ServerRoot/System/Library/CoreServices/ServerManagerDaemon.bundle/Contents/MacOS/servermgrd
      sleep 60 # Allow time for the certificate to actually get installed, because the security tool lies.
      sudo serveradmin stop web
      sudo serveradmin start web

      On my actual system, I have the "security" command wrapped in a shell script so that I can have a sudo policy for the letsencrypt user that allows running only that script, rather than arbitrary use of /usr/bin/security. (I don't allow third-party code to run as root unless absolutely necessary, and letsencrypt certainly doesn't rise to that level, so it gets its own low-privilege user account.) But it should work the same either way.

      IIRC, the critical parts are allowing some extra time before restarting the web server and using Apple's tool to do it instead of apachectl.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

  3. Is it actually a want ad? by Anonymous Coward · · Score: 5, Interesting

    People complain about the iPad commercial where the kid asks "What's a computer", but could it be that Apple is genuinely asking what one is since it is looking more and more like they themselves don't know.

  4. Most services on the list seem to be FOSS projects by 93+Escort+Wagon · · Score: 3, Insightful

    It should be easy enough to install them on your own, if for some reason you want to use a macOS box as a server.

    --
    #DeleteChrome
  5. Re:What do Apple use? by MikeDataLink · · Score: 3, Interesting

    Please tell me they manage all their people with a Windows AD + Exchange! ;).

    They use an in-house version of iCloud, or so an insider friends tells me.

    --
    Mike @ The Geek Pub. Let's Make Stuff!
  6. OK, to be fair... by Jahoda · · Score: 2

    Apple's neglect of the Mac (and particularly the disregard of the enterprise space) not withstanding, when I look at this list I can't really help but admit that there is not a single entry on it where I would rather use Apple's tools in favor of their open source equivalent.

  7. We saw this coming awhile ago by macsimcon · · Score: 2

    Apple stopped offering a server certification years ago, but it didn't stop Apple Stores from recommending a Mac Mini with a single drive to customers who wanted a file server. Apple's SMBX doesn't really work well with anything but a Mac, and Profile Manager is just about the least reliable MDM out there.

    And who is really using Open Directory these days? If you want Netboot, you can do it from Linux. If you want VPN, use your firewall or an appliance.

    So, when people want a server for use with their Macs, we'll recommend a Synology or a QNAP. They offer dozens of services, including DNS, practically any other service you could want, and they have RAIDs and SSD caching as well. Some of the Synology units can even be configured to provide Active Directory.

    As Apple has now built the caching service and file sharing into High Sierra, I don't really see that there is much reason for Server any more. Oh wait..

    MAYBE you don't want to trust your data to someone else? Maybe you figure YOU are the best person to manage your data and services, so you won't be down a day or two while Google fixes G Suite? And as Google thinks they're the world expert on who is and who isn't sending spam, what could go wrong there?

    Server was great because it enabled the end user to run his/her own mail server, DNS, file sharing, software update server, and more, rather than outsourcing everything to companies which may or may not give a damn when something goes wrong with "the cloud".

    1. Re:We saw this coming awhile ago by macsimcon · · Score: 2

      Right, but the whole point of OS X Server/Server.app was ease-of-use, and the issues with permissions, SMBX, password server, Profile Manager, and Open Directory weren't ever really fixed, so that vision was never realized.

      Apple management just doesn't understand: if you want to keep people in the ecosystem, then you need to provide and maintain ALL PARTS of the ecosystem: cloud, network, server, desktop, mobile. They depend on each other, but Apple mistakenly focuses all its efforts on mobile, to the detriment of the other components.

      And the shortsightedness isn't just restricted to Server. Have you used the latest versions of macOS or iOS? They are the buggiest versions in years. I'm tired of telling clients they need to wait until nine months after release before they should upgrade.

      It is past time for Apple to move to alternate year releases; they just don't have what it takes to release updated, reliable versions of four OSes every year.

    2. Re: We saw this coming awhile ago by Anonymous Coward · · Score: 2, Insightful

      "Apple management just doesn't understand"

      Oh but they DO understand, they just don't give a single fuck about it when they can charge $1000 for a shitty fucking plastic phone at least at 2000% markup, and sell Billions of units to all the idiots who will gladly camp out in freezing weather in line to buy them no matter what.

      There is no way their status symbol can compete and translate over in the real server market and pretend like the computing resource power per $ to value is even reasonably close to almost anything else. I'm all for paying high dollar for damn good equipment, if it means better VALUE. We used to pay insane amounts for Sun, SGI, and IBM shit back in the 90s, and it was amazing good equiptment for it's time, but for the same reasons those old school Unix server markets died out, is the same damn reason why Apple can't do that kinda shit now today. They are more than welcome to try.

      The increased R&D and services that all come with "servers" is likely just seen by Apple as a cost center and extra liability, where they damn well know they can get away with +2000% markup, so why bother for lower profit margin, when people will STILL continue to purchase their shitty extremely overpriced novelty status symbol items and Apps!

  8. OSX Sucked from the Get-Go. So, did the servers. by Seven+Spirals · · Score: 2

    Their servers had no lights-out management (at least the ones I tested). Their nicest feature was a brushed metal facade; they made sure to include that. I'm surprised it didn't come with a black turtleneck and a pair of horn-rimed glasses. OSX server is (soon to be "was") a pathetic hybrid that shamelessly bastardized whatever they felt like and sucked more as they went along despite borrowing from their betters FreeBSD, OpenStep, and Mach. They went for years without any real volume management, pimped HFS+ as something worthwhile for years before deigning to release APFS (which still sucks in nearly every way compared to ZFS), conformed to POSIX only when they felt like it, and had very few RAS features that defines server. They said fuck all the proven traditions of Unix, they were Apple, they were going to show us how it's really done and bring a new level of user-friendliness to systems administration.

    The whole thing is ending as it began, as the IT weaklings at Apple learn that same lesson Jobs himself forgot: "Those who do not learn from Unix are doomed to re-invent it ... poorly." Apple is trying to make sure they learn the hard way.

  9. Not Apple anymore.... by bigtiny · · Score: 5, Interesting

    I don't think that at the time of his death Jobs thought his 'digital hub' concept would lead to Apple's becoming a huge, overfunded cell phone company that would let its computer business die a horrible death. But I think that's exactly what's happening.

  10. Re:Most services on the list seem to be FOSS proje by _merlin · · Score: 3, Informative

    They didn't do their own web server. It was a pretty GUI for configuring Apache. Same for mail, originally OSX server used Cyrus, I think they switched to dovecot later. DNS was always implemented with BIND. A few of the services like DHCP/NetBoot used their own implementations, but most of it just a GUI for configuring open source services.

    OSX Server used to be a compelling proposition for a small business, because it made configuring these services easy for someone who isn't a professional sysadmin. But once they changed it from being a separate OS spin to a feature pack in the app store, it was pretty clear they just didn't care.

  11. So what? by Yaztromo · · Score: 4, Insightful

    macOS on the Server side of things is so far behind what can be done with Linux, it isn't even funny. You can't run macOS in AWS. You can't containerize macOS apps (Docker on macOS uses macOS's hypervisor to run Linux in the background). If you want to run in the server space, and you aren't tied to Microsoft proprietary ways of doing things, Linux is the place to be. Apple knows this -- they're already too far behind, and are simply never going to be able to keep pace with what's going on in the Linux world.

    Apple needs to focus on continuing to ensure that macOS is a highly compatible client OS. Linux still falls flat in this area. Other than for some Apple proprietary stuff (like iOS provisioning), a macOS server is pointless. Use Linux on the server and macOS on the client.

    Yaz