To
open this frame in its own Window, click here.
To
open this frame in its own Window, click here.
This document is for users of Apple Macintosh Systems who want to make use of the Earth & Planetary Sciences Local Area Network (hereafter referred to the network). This document applies to all Mac operating systems prior to OS X (10). All Mac OS versions newer than 7.5 include TCP/IP (a.k.a. MacTCP). The OS versions 8.5+ and 9 use TCP/IP as their prmary protocol, with Apple's older AppleTalk protocol as an alternative. On our (aging) Windows NT network, AppleTalk is still the most effective means of accessing File and Printer resources on our file and print servers. In general, you will find that MacOS 9+ is a good "classic" OS for Macs and provides functional and stable network access.
The new Mac OS X is really UNIX in Mac clothing, and as such requires a completely different approach to establishing network connections, particularly since our Mac services still use AppleTalk. I will revise this document when I have new information available.
Our Network uses Windows NT 4.0 as a networking operating system. It uses "Services for Macintosh" which enables volumes on the NT Server to be shared to the Macs on the network and lets them behave just like other shared Mac volumes. This facilitates centralized storage of data on a secure server which is backed up on a daily basis and also enables easy sharing of data between Macs and PCs since your data on the Mac volumes is also visible to you if you log in from a Windows system.
There are several sections to this help document: Section 1 "walks" the first time through setting up to log on. Section 2 explains how to use the chooser to connect to available network file and printer resources. Section 3 explains how to make network printer connections (including our color and B&W laser printers). Section 4 explains how Mac users should log off the network (by "trashing" their network folders). Other "help" documents on the EPS Web site (epswww.unm.edu/help) explain in some detail what resources (file storage, printers and software) are available on the network.
To set up properly, you will need the following:
Newer Macintosh systems (iMacs, Mac G-4 and newer Mac G-3 systems) include built-in 10/100 Ethernet adapters as part of the system. Older systems require that a network interface connector (or NIC) be purchased as an add-on on this systems -- if you need to purchase a NIC, you will need to contact an Apple dealer to purchase one. In general, if you have to purchase an add-on NIC, your system is probably too old to be of much use on the network, and it will probably cost more that it is worth.
To connect you will need to make sure the port in your office is activated, and acquire a an Ethernet network cable as discussed above. With an installed NIC, active port and connected cable, you may activate your AppleTalk protocol over the Ethernet by going to the AppleTalk control panel and selecting "Ethernet" as the method to communicate with AppleTalk. Note: A significant limitation of the MacOS in older systems is the inability to use Local Talk (typically used by older systems for printing) and AppleTalk over Ethernet simultaneously. This means that while connected to the network, users of older Mac systems cannot print to local printers. This may be circumvented by printing to printers on our network or by printing to an Ethernet-connected printer, and is a major but unavoidable inconvenience. With all Mac OS versions beyond 8.1, this is not an issue.
After your system is communicating in AppleTalk to the network, you may proceed to the next sections.
Most Macintosh systems in the department will not be used as servers, therefore can use automatically obtained IP addresses from UNM's CIRT instead of having a fixed IP address. For those rare systems needing a fixed IP address, contact Jim Connolly who will do what is required to get an IP address assigned to you. Some older MacOS versions (notably 7.x) will not do dynamic addressing successful on our network and require fixed addresses. When you obtain the IP address, here is how you configure it:
If using System 8.0 or newer, follow the steps below to setup the "automatic" MacTCP configuration:
After either of the above configuration methods are used, your TCP/IP connection to the network will be functional. This means that you will be able to use Web Browser software (Netscape or Internet Explorer) to browse the worldwide web and other kinds of Email and Internet software to access other Internet functions. Test your connection by starting your web browser and connecting to something. If you can connect to UNM's homepage (http://www.unm.edu) you are in good shape. To enable connection to EPS file servers, continue with the next steps.
(Note: This step has already been completed on the two iMacs in the computer lab. If you are using MacOS X, this step does not seem to be required -- apparently OS X includes the security module as part of the operating system and it does not need to be added.)
The (pre-OS X) AppleTalk network supports what are called "clear text" passwords; these are passed to other Macs in an unencrypted format. This does not provide acceptable security (since clear text passwords are not encrypted and may be "grabbed" by anyone monitoring network traffic). The first thing a Mac user must do is set their computer up to provide the server with user passwords in an encrypted format. This is a simple process:
On Windows and NT machines there is a definite logon and logoff process. Macintosh users log on to the network by connecting drives and printers through the "Chooser", and log off by dragging all network drives to the trashcan (or by shutting down the system). When your system starts or is running (with the Microsoft UAM installed), the following steps will get you logged on to network file resources:
Important note about Passwords: Make your password something you can remember but is hard to guess. I find mnemonics of phrases are good. For instance ictsrdis is a mnemonic for that famous Mad magazine proverb "Its crackers to slip rozzers dropsy in snyde". Passwords should be at least 7 characters in length -- anything less is too easy to guess by a random pattern generator. UNM's password generator for your Email account requires that you have at least one number embedded in your password, and won't allow passwords that don't have it. Computer hackers and security breaches are nontrivial problems on networks, so please use a good password.
After you logon, drive icons labeled USERS, COMMON (or whatever else you have opened) will appear on your desktop; these may be treated just like any other Mac drive.
The NT operating system is very sophisticated about printers. As long as the printers are configured properly in the NT operating system, Mac users can print to non-Mac printers and vice-versa. There are several network printers available currently, and most of them begin with EPS followed by up to 5 letters that usually have something to do with its location. In some cases, special driver software will be needed to get the most out of a particular printer's capabilities -- see Jim Connolly if it has not already been set up on your system.
Users need to be logged on to the network (i.e., have connected to a network drive following the steps in Section 2 above) to connect to network printers. Failure to do this can sometimes result in unpredictable results and sometimes in failure to print your documents on the network printer. Connections to Network printers are made just like network drives:
If any of the following describes you, please read and understand this section:
When you are done working on the network, there are two ways to log off. If you shutdown, you are automatically logged off and all network connections are closed. If you leave the system running (as is usual in the Workstation Room), you must drag all of your network drives (the ones with the cute network drive icons) to the trash can.
Why? When you leave your computer connected to the network, you are leaving your files and resources available to anyone who sits down at the computer. Its sort of like leaving your keys in your car with the engine running and the doors unlocked. Your work might be there as you left it, but you sure can't count on it.
Users should never give other users their account names and passwords, because access to resources is by username. The purpose of the COMMON area is to allow groups of users access to the same data or programs. You may even give permission to particular users to access some areas of your own network folder without opening all of your data up to possible accidental modification or deletion. If someone you work with needs an account (i.e., undergraduate assistant, work study, etc.), talk to Jim Connolly who can see that they get one.