[Casper] hidden users in 10.5

[Ernst, Craig S.]

To add to this some more...if you haven't done so already...you should totally exploit the capabilities of the jamf binary on your managed systems, particularly in your scripting.

To see all the options:
/usr/sbin/jamf help

To get specific help for one like the one mentioned below:
/usr/sbin/jamf help createAccount

Make sure you are really careful with the -hiddenUser portion and the case...I screwed that up a few times so it wasn't hidden. =)

Craig

On 6/13/08 12:25 PM, "Josh Holland" <josh at jamfsoftware.com> wrote:

Thomas,

You could use the jamf command, which has a verb that rolls all the commands into one.  ie:

sudo jamf createAccount -username netadmin -realname "Network Administrator" -password p at 55w0rd -home /var/netadmin -shell "/bin/bash" -hiddenUser -admin

This could be run as an @reboot script after imaging, or on your OS package by running it when building the OS (if you don't have the jamf binary on it, run it from a thumb drive or other parition).

Please let us know if that helps.

Thanks,

Josh



......................................................................................................................................................................................
Joshua Holland | Sr. Systems Engineer | JAMF Software 1011 Washington Ave S.  #350 Minneapolis MN 55415
Office (612) 605-6625 | Fax (612) 332-9054 | josh at jamfsoftware.com | http://www.jamfsoftware.com <http://www.jamfsoftware.com/>







On 6/13/08 12:41 PM, "Thomas Larkin" <tlarki at kckps.org> wrote:

Since we are migrating into 10.5 I want to set up a few local hidden
user accounts.  1 for local administration by the IT staff and the other
for all the casper stuff.  Before I would just create the user, move it
to a different directory, change and apply ownerships and modify paths
in netinfo.   Well, in 10.5 there is no longer any netinfo.  How are you
all doing this?  here are the commands I am using, perhaps my syntax is
off but I yield no errors when running it.

sudo dscl . create /Users/$USERNAME
sudo dscl . create /Users/$USERNAME PrimaryGroupID 450
sudo dscl . create /Users/$USERNAME UniqueID 450
sudo dscl . create /Users/$USERNAME UserShell /bin/bash
sudo dscl . passwd /Users/$USERNAME $PASSWORD
sudo dscl . append /Groups/admin GroupMembership $USERNAME
sudo dscl . create /Users/$USERNAME NFSHomeDirectory
/private/var/$USERNAME

Any advice?

I already edited the /Library/Preferences/com.apple.loginwindow.plist to
hide all users under UID 500 and that seems to work.

Thomas Larkin
TIS Department
KCKPS USD500
tlarki at kckps.org
cell:  913-449-7589
office:  913-627-0351
_______________________________________________
Casper mailing list
Casper at list.jamfsoftware.com
http://list.jamfsoftware.com/mailman/listinfo/casper


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080613/1f03303f/attachment.html