How To Create A Custom Safari Extension Bar

Standard
Safari-extension

Almost 2 years ago, I posted how to deploy a custom Safari Toolbar. But until now I have not posted on how to make the Toolbar (READ: Extension Bar) until now.

The reason for the delay was due to me not really being literate with the technology used to create an Extension Bar, 2 years on & i’m still not!

We use the Extension Bar to deploy links to company websites & resources. As it seems most web based products we have only support Safari on a Mac, we’ve found this is a good way to drive people to use Safari to access these sites, even  if they use other browsers for general browsing.

I hope the below helps you to create your own.

Continue reading

10.8 Clients Not Connecting To EAP-TLS Wireless With w2k8 NPS

Standard

Earlier today we started to tighten up one of our wireless networks, moving from PEAP to EAP-TLS authentication. In testing on 10.9.x & win7 clients, all worked well. But when deploying the same config profile that connected the 10.9.x clients to a 10.8.x Mac, the device failed to authenticate.

The 10.8.x clients console log didn’t show much information, so I took a look on the NPS servers logs (which are not a pretty sight) & after a time we came to a solution.

See below for the gory details.

Continue reading

JSS Using Wrong Distribution Points After v8 – v9 Upgrade

Standard

We updated our JSS from 8.73  – 9.22 back in January, we thought all was well until we needed to deploy some large packages.

This lead to our network guys not being to happy as Mac clients were downloading a 200MB installer across our MPLS irregardless of the distribution points assigned in our network segments.

Below are more details on the issue, and the fix

Continue reading

Check EFI Password State Extension Attribute

Standard

JAMF have a great article on deploying the binary needed to set a firmware password on 2010+ Macs via the Casper Suite, here.

I recently had a chance to play with it, but found that the below command (which is used by the following EA to check EFI Password status) often returns nothing or just 0 after running. Regardless if an EFI password is set or not.

sudo /Library/Application\ Support/JAMF/bin/setregproptool -c

So below is a different version of the before linked Extension Attribute, using “expect” & maybe a inelegant check.. but hey, if it works!

Continue reading

Submit User Information From AD Into The JSS At Login v2

Standard

A couple of years ago I posted on how we “Submit User Information From AD Into The JSS At Login” Since the  Casper Suite 8.61 was release, the JSS has been able to perform this function. Below is a guide on how to leverage this.

Continue reading

Using Directory Utility To View An AD Objects Attributes

Standard

A number of my scripts leverage attributes found within an objects Active Directory record. I used to reach to either decl or Apache Directory Studio as per this article on JAMFNation in order to view this information when investigating my scripts.

However, since 10.7 (I think), I have more often found myself using Directory Utility to perform this task. the below is a quick run through on how to use it for this task.

Continue reading

ANNOUNCING: ADPassmon v2 fork

Standard

 

UPDATE: My fork of ADPassMon has now been merged with main & many changes have been made, for more information follow this link. The Wiki on the GitHub project replaces the details below.

icon

Over the past two posts, I have detailed two issues with 10.9

  1. No Password Expiration Warning At The Login Window
  2. The “Local Items” keychain

In looking at resolving issue 1, I revisited Peter Bukowinski’s excellent ADPassMon. This is a great app, but has never quite suited my environment, as such I grabbed the code off of GitHub & got stuck in.

This has resulted in me, on this most foolish of days & with a nervous excitement, announcing my ADPassMon fork. In time I hope this fork joins the is committed to the main release.

So why did I go to all this trouble? What does it do? Read below.

Continue reading

The “Local Items” Keychain In Mavericks

Standard 
UPDATE: My fork of ADPassMon has now been merged with main & many changes have been made, for more information follow this link.
Screen Shot 2014-03-29 at 11.21.15 PM

The “Local Items” keychain is something that you may have the misfortune of running into when changing passwords via an external directory service due to password expiry or a using forgetting their passwords in Mavericks.

I spent some time tackling it when forking ADPassMon to not only update Users passwords not via the pref pane, just through ADPassMon, & then also updating the users keychain password.

Below are my observations on the new keychain.

Continue reading

No Password Expiry Warning At The Login Window On 10.9

Standard 
UPDATE: My fork of ADPassMon has now been merged with main & many changes have been made, for more information follow this link.
10.8 Password Expiration

Over the past few Mac OS revisions, you’ve been able to alert users to impending password expiry. Shown above is this on 10.8.

Below are details on how I set the above, and the issue with Mavericks

Continue reading

How To Create An Never Booted OS.dmg Using Casper Admin

Standard 
UPDATE: AutoDMG makes this process, "stupid easy" so I'm going to move away from the below to using that tool. Also, if you're master distribution point is a JDS you cannot compile configurations. Again AutoDMG to the rescue.

Ever since Casper Admin has allowed for compiling configurations way back in the 10.5/6 days I have been successfully creating an OS.dmg via Casper Admin. I still use this method today & since 10.7 this DMG also includes the Restore Partition.

The end result is an DMG of the OS that has never been booted & is an asr image. Much like DMG’s created by InstaDMG & AutoDMG.

I’m not sure why I seem to be the only one doing this, but below is the how;

Continue reading