UPDATE: Since 8.61+ User information can be submitted following the method outlined here.
For couple of years now i’ve ran various flavours of the below script via a login policy on my Mac clients.
The purpose of this script is to first check if the user is a network user, & if so then perform a lookup of their account against AD grabbing information that can then be submitted to the JSS in the relevant fields as per the above.
See below for the script:
Continue readingUPDATE: A tool called authbuddy has just come to my attention that will managed this better & for 10.7+.
Way back in November 2010 I posted a script that would unlock each secure system preference pane for non-admins, (this can be found here).
With Lion came a more granular way to achieve the same, but rather then have a script for 10.6 & another for 10.7 i’ve amalgamated them with an OS check in the script.
I started getting the above error when launching Casper Admin & Remote on my main mac.
This error would appear when launching Casper Admin & Remote, before i could enter any credentials. Which got me thinking: keychain!!
Yep sure enough, I had a saved password in my keychain.. once i deleted that all was well.
When trying to setup a clustered DMZ server as a computer only JSS I received the below error:
Could not write to /Library/JSS/Tomcat/webapps/ROOT/WEB-INF/web.xml
To resolve I needed to enable change management in the JSS. But as the JSS did not have write permission to /var/logs/ I couldn’t enable change management.
So I changed the log location & enabled change management. I could then enable the JSS instance as computer management only version.
Recently we setup a 10.7 Mac Server in our DMZ & clustered this with our main JSS to enable external clients connectivity to our JSS & for them to be able to use Self Service & ASUS when off the network.
However we’ve had some issues getting the distribution point to work over HTTPS, however HTTP & AFP worked fine.
Below are some details on the steps taken to investigate this issue, and resolve.
Continue reading
This morning one of my Apple Software Servers (ASUS) was not supplying updates. When checking the swupd_err.log in Server Admin I saw the following repeated hundreds of times:
Syntax error on line 241 of /etc/swupd/swupd.conf: Port must be specified
Below can be found more details and the solution. Continue reading
After upgrading my servers to 10.7.3, I received the error message “Error Reading Settings” when clicking the “Web Service” in “Server.app”.
With the release of 10.7.3 Server you can now perform port redirects via the “Server.app.” With that in mind & the fact that I had manually added a redirect as mentioned here, i decided to revert my web service back to the default settings & then apply the redirect using “Server.app”
To reset the web service back to default settings i ran the below with Server.app not running:
sudo serveradmin command web:command=restoreFactorySettings
I then relaunched “Server.app” clicked web service & we were back in business!
I had an issue where a user wished to change DVD region on their mac. Not being an Admin they were not able to change it themselves from what was initially set.
I use the script from the Casper Resource kit titled “unlockRegionCodeSetting.sh” as part of my First run script. This sets the DVD region to the region of the 1st entered DVD. So this didn’t resolve the issue of letting a non-admin change the DVD region code themselves.
The blog post here, explains the situation & what is required. The below script will merely perform what is mentioned in the bottom section of that post. Therefore allowing non-admins to change region code if they are prompted too.
Continue reading
Last year we migrated our environment from Lotus Notes to Exchange 2010.
As such, we’re using Outlook 2011 on our Mac clients.
Some users accounts would just keep downloading.. after much head scratching & hair tearing we found the issue.
Continue reading
The below is hugely plagarised from a script posted by Mark Bolwell to the Mac Enterprise list.
I use a version of the below in my Casper Imaging workflow to configure the a VPN Cisco IPSec network connection. As i run it at Imaging time i’ve added some logic so it only runs on MacBook models (which you may wish to remove).
The difference for using the below to the other versions i’ve seems is that this method can be ran “silently” with no GUI interaction. As such it can be leveraged to be used with Self-Service.
Continue reading