iDevice Mail Error: “Cannot Get Mail. The connection to the server failed” / “The operation couldn’t be completed. (DAErrorDomain error 111.)”

Standard

Infrequently we’ve been seeing the  below error on some iDevices after enrolling into our MDM solution.

“Cannot Get Mail. The connection to the server failed”

Plugging those devices into a computer running iPhone Configuration Utility would reveal the following errors in the logs.

“The operation couldn’t be completed. (DAErrorDomain error 111.)”

Realising we had maybe a more Exchange side issue, we looked at the logs on the Exchange Server we were connecting to.. these logs contained the following errors:

Continue reading

Error: “Permission denied > (publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive)” on Mountain Lion (10.8)

Standard

I use RSYNC over SSH & launchagents to keep my Casper distribution points in sync with the Master.

However on upgrading the master to 10.8.2, the SSH connection would error with the message:

“Permission denied > (publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive)”

I re-ran through the steps i’d used previously.. reached out to JAMF support, JAMFNation & the MacEnterprise Mailing List.. still no joy..

So, it then started to think that maybe the change in OS for the master meant a change in method.. after Googling “mountain lion authorized_keys” I came across the below blog, with revealed the answer!

Continue reading

Deploying & Installing Safari Toolbars

Standard

Safari-extension

NOTE: With Safari 6.1x & 7.2x the method to deploy Safari extensions has changed, please see the new method here.

I was asked sometime ago to deploy my companies bookmarks to Safari on all our managed Macs.

I went through a lot of pain trying to add a folder to the Bookmarks bar with my companies website & preserve the users bookmarks. But, Benjamin Bailey on the Mac Enterprise list mentioned Safari Extensions.. & I soon had a branded toolbar to deploy!
Continue reading

Enabling Extensions in Safari 5.x & 6.x

Standard

The below should enable Extensions in Safari 5.x & 6.x.

defaults write com.apple.Safari ExtensionsEnabled -bool YES

Disabling Safari 5.1.x’s & 6.x’s Pop-Up Blocker From Terminal

Standard

Way back in 2010 I posted a little note on disabling Safari’s Pop-Up Blocker From Terminal..

Well it looks like with Safari 5.1.x & 6.x things have changed, the below should now perform the same:

defaults write com.apple.Safari  com.apple.Safari.ContentPageGroupIdentifier.WebKit2JavaScriptCanOpenWindowsAutomatically -bool true

Via MCX:

Display Name: Safari 5.1+ Disable Pop-Up Blocker
Application Domain: com.apple.Safari
Key Name: com.apple.Safari.ContentPageGroupIdentifier.WebKit2JavaScriptCanOpenWindowsAutomatically
Key Type: boolean
Key Value: true

How To: Use fstab within a Casper Imaging workflow

Standard

For my future deployments, i’ve decided to partition my managed Macs HD’s with 33% for the OS (which i’ve kept as being called Macintosh HD) & the remaining 67% as User data (which i’ve labelled Users HD).

To do this i’ve been using fstab to mount the “Users HD” partition to /Users. Below is how i achieve this, hope it helps.

Continue reading

Authenticating 10.7 Macs To A RADIUS Server With Certificate Enabled PEAP Authentication

Standard

Subject’s a mouthful eh? Basically, I needed for my 10.7 Macs to authenticate to our RADIUS wireless network using PEAP authentication & the Mac’s Certificate from our domain.

Below are the steps taken.

Continue reading

Submit User Information From AD Into The JSS At Login

Standard 
UPDATE: Since 8.61+ User information can be submitted following the method outlined here.

For couple of years now i’ve ran various flavours of the below script via a login policy on my Mac clients.

The purpose of this script is to first check if the user is a network user, & if so then perform a lookup of their account against AD grabbing information that can then be submitted to the JSS in the relevant fields as per the above.

See below for the script:

Continue reading

Unlocking Preference Panes For Non-Admin Users On 10.6 & 10.7

Standard 
UPDATE: A tool called authbuddy has just come to my attention that will managed this better & for 10.7+.

Way back in November 2010 I posted a script that would unlock each secure system preference pane for non-admins, (this can be found here).

With Lion came a more granular way to achieve the same, but rather then have a script for 10.6 & another for 10.7 i’ve amalgamated them with an OS check in the script.

Continue reading

Error: “This account does not have privileges to use Casper Admin/Remote”

Standard
Image

I started getting the above error when launching Casper Admin & Remote on my main mac.

This error would appear when launching Casper Admin & Remote, before i could enter any credentials. Which got me thinking: keychain!!

Yep sure enough, I had a saved password in my keychain.. once i deleted that all was well.