[Casper] JSS user reporting user as admin dscl says no?

[Thomas Larkin]

Ryan 

Thanks for the conformation, that is what I found googling it for lpadmin.  For the double user entry that still baffles me.  It lists my local admin account under the staff group and the admin group 

$ id tlarkin 
uid=1305(tlarkin) gid=20(staff) groups=20(staff),80(admin),101(com.apple.sharepoint.group.1),1031(tis),104(com.apple.sharepoint.group.2) 


I think everyone is under staff, these are directory accounts though not local, and my account is flagged to administer the directory.  I guess I am not quite grasping why it displays that in the JSS inventory. 

thanks


___________________________
Thomas Larkin
TIS Department
KCKPS USD500
tlarki at kckps.org
blackberry:  913-449-7589
office:  913-627-0351





>>> Ryan Harter <rharter at uwsp.edu> 12/10/08 2:37 PM >>>
_lpadmin is the CUPS account that correlates to the lpadmin command you find in the terminal.  I can't tell you why this account is showing up twice, but since it is a member for the staff group that should make it admin.  Our local amdinistrator account is uid=501(adm) gid=20(staff) ... 



AFAIK the user is not directly a member of the admin group, but staff is, so it's like embedded groups.


Ryan Harter 

UW - Stevens Point 

Workstation Developer 

715.346.2716 


Ryan.Harter at uwsp.edu 



On Dec 10, 2008, at 2:08 PM, Thomas Larkin wrote: 




everyone, 



So a user has a true flag under their account in the JSS for the inventory of that machine, I will just copy/paste an example, sorry if it doesn't format correctly. 



User in the JSS shows this: 

Username 

Real Name 

UID 

Home Directory 

Home Directory Size 

Admin 

File Vault Enabled 

Mia Green 22221 /Users/11miagre 5.28 GB true false 

11miagre Mia Green 22221 /Users/11miagre 5.28 GB false false 

student KCK Student 505 /Local/Users/student N/A false false 



For some reason it shows the user name twice and on the top one it says True False, the First True being the admin flag 



Now, when I ssh into said client machine and do some digging I find this: 



 id 11miagre 

uid=22221(11miagre) gid=20(staff) groups=20(staff),98(_lpadmin),101(com.apple.sharepoint.group.1),104(com.apple.sharepoint.group.2),1042(allstudents),1053(washington_2011) 



GID 98 shows as _lpadmin what the heck is that?  Google says it configures the print system, so I must assume it is a daemon from the OS?   



Anyone else see this stuff?  Also dscl does not list this user under /Groups/admin either 



Thanks 


___________________________
Thomas Larkin
TIS Department
KCKPS USD500
tlarki at kckps.org
blackberry:  913-449-7589
office:  913-627-0351






<ATT00001.txt> 



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081210/0a7e71df/attachment.htm