From bazmail at bazmac.co.uk Sat Nov 1 14:50:34 2008 From: bazmail at bazmac.co.uk (Michael Curtis) Date: Sat, 1 Nov 2008 21:50:34 +0000 Subject: [Casper] Finder shows hidden files after image Message-ID: <324C3419-4DC3-44AF-94F6-F838669D708C@bazmac.co.uk> Hi, I have imaged a Mac and it now shows the etc and var folders, among others in the Finder. These should of course be hidden. How can I hide them, and any idea why Casper would have done this? Best wishes Michael ***************************************************** This E-Mail has been scanned by Sophos Anti-Virus ***************************************************** From ERNSTCS at uwec.edu Sat Nov 1 18:42:03 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Sat, 1 Nov 2008 20:42:03 -0500 Subject: [Casper] Finder shows hidden files after image In-Reply-To: <324C3419-4DC3-44AF-94F6-F838669D708C@bazmac.co.uk> Message-ID: I won't always defend Casper, but in this instance I can't imagine that Casper is actually the cause of this issue. And have you imaged more than just one Mac to see if you can get it to reoccur and be reproduced? Did you install any other packages when you imaged? Would any of those have potentially changed some settings? Craig E On 11/1/08 4:50 PM, "Michael Curtis" wrote: Hi, I have imaged a Mac and it now shows the etc and var folders, among others in the Finder. These should of course be hidden. How can I hide them, and any idea why Casper would have done this? Best wishes Michael ***************************************************** This E-Mail has been scanned by Sophos Anti-Virus ***************************************************** _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081101/b1fcbcad/attachment.html From miles.leacy at themacadmin.com Sat Nov 1 19:16:10 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Sat, 1 Nov 2008 22:16:10 -0400 Subject: [Casper] Finder shows hidden files after image In-Reply-To: References: <324C3419-4DC3-44AF-94F6-F838669D708C@bazmac.co.uk> Message-ID: I agree with Craig. I suggest checking your workflow. I had an instance where this occurred, but only when another member of my staff performed the imaging. I never did find the cause because when using the process I had established, it did not occur. If you can share your imaging process, and the packages and scripts in your configuration, perhaps we can help find what is causing this. 2008/11/1 Ernst, Craig S. > I won't always defend Casper, but in this instance I can't imagine that > Casper is actually the cause of this issue. And have you imaged more than > just one Mac to see if you can get it to reoccur and be reproduced? > > Did you install any other packages when you imaged? Would any of those have > potentially changed some settings? > > Craig E > > > On 11/1/08 4:50 PM, "Michael Curtis" wrote: > > Hi, > > I have imaged a Mac and it now shows the etc and var folders, among > others in the Finder. These should of course be hidden. How can I hide > them, and any idea why Casper would have done this? > > Best wishes > > Michael > > > ***************************************************** > > This E-Mail has been scanned by Sophos Anti-Virus > > ***************************************************** > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081101/a5ee5471/attachment.htm From jared.nichols at ll.mit.edu Sat Nov 1 19:39:28 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Sat, 1 Nov 2008 22:39:28 -0400 Subject: [Casper] Finder shows hidden files after image In-Reply-To: <324C3419-4DC3-44AF-94F6-F838669D708C@bazmac.co.uk> Message-ID: Hi- I don't think it would be Casper either, but I use something called SetHidden to re-hide these folders. It came with (I believe) the 10.4 dev tools - though works on 10.5 too. It'll need installation as it's a command-line binary, but once it's installed, you can call it with a script as part of maintenance. It's simple and does the trick nicely. I attached a compressed a folder with the following: * SetHidden - file - Iceberg project file * resources - folder - contains postflight script which executes the SetHidden command * contents - folder - contains the SetHidden binary and hidden_MacOS9 file as distributed from Dev Tools * build - folder - contains built, installable, Set Hidden.pkg, as compiled from Iceberg. Cheers jared On 11/1/08 17:50 , "Michael Curtis" wrote: Hi, I have imaged a Mac and it now shows the etc and var folders, among others in the Finder. These should of course be hidden. How can I hide them, and any idea why Casper would have done this? Best wishes Michael ***************************************************** This E-Mail has been scanned by Sophos Anti-Virus ***************************************************** _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081101/dec00fca/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: SetHidden.zip Type: application/octet-stream Size: 67921 bytes Desc: SetHidden.zip Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081101/dec00fca/attachment-0001.obj From ERNSTCS at uwec.edu Sun Nov 2 05:43:34 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Sun, 2 Nov 2008 07:43:34 -0600 Subject: [Casper] Finder shows hidden files after image In-Reply-To: Message-ID: Have you run diagnostics on those drives? Was there a difference in the types of hardware between the 2 that had the issue and the 1 that didn't? Are you imaging with Tiger or Leopard? Craig E On 11/2/08 3:21 AM, "Michael Curtis" wrote: Hi Craig, Nothing has changed. In fact we built 3 machines yesterday. 2 did it an one didn't. The 2 that had issues we, had problems mounting the drives. The drives would appear in the Casper list, but not in the netboot finder. Weird. I suppose I need to find a script to change the permissions. Best wishes Michael On 2 Nov 2008, at 01:42, Ernst, Craig S. wrote: I won't always defend Casper, but in this instance I can't imagine that Casper is actually the cause of this issue. And have you imaged more than just one Mac to see if you can get it to reoccur and be reproduced? Did you install any other packages when you imaged? Would any of those have potentially changed some settings? Craig E On 11/1/08 4:50 PM, "Michael Curtis" wrote: Hi, I have imaged a Mac and it now shows the etc and var folders, among others in the Finder. These should of course be hidden. How can I hide them, and any idea why Casper would have done this? Best wishes Michael ***************************************************** This E-Mail has been scanned by Sophos Anti-Virus ***************************************************** _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper ***************************************************** This E-Mail has been scanned by Sophos Anti-Virus ***************************************************** -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081102/f80dac7e/attachment.html From jeremymatthews at mac.com Sun Nov 2 06:48:15 2008 From: jeremymatthews at mac.com (Jeremy Matthews) Date: Sun, 02 Nov 2008 09:48:15 -0500 Subject: [Casper] Automating Server Installs In-Reply-To: References: Message-ID: <70A8C199-5098-4D56-B6FA-05066279A717@mac.com> InstaDMG +1 - love it...mostly Instead of local config files how about creating directory records (for servers)? -j ---------- Message: 1 Date: Fri, 31 Oct 2008 15:16:55 -0400 From: "Miles Leacy" Subject: [Casper] Automating Server Installs To: "Casper List" Message-ID: Content-Type: text/plain; charset="iso-8859-1" This message is in two parts... For anyone using InstaDMG with the Casper suite, I'd like to hear your experiences. I like the idea of never having booted my base system before dropping it. I'm curious as to how deeply we can mesh the InstaDMG concept & methodology with the Casper tool. It seems that they should be largely compatible. Secondly, I'm trying to automate my Mac OS X Server installs. Right now, I'm just thinking through workflow conceptually. If I create a Netinstall image from the OS X Server install disc, I'll still need to get a configuration file to the machine. There's the simple Apple answer of putting the configuration file on a USB key attached to the server, but I'm looking for a more automated way that won't require me to ever see the server, just to know its serial number . I've got Casper, and I want to rebuild Xserves via my iPhone at a caf? while on my way to more interesting things. One thought I had was to create a traditional image at a point before going through the server setup, and include the configuration file as a separate package on top of the image. Theoretically, at first boot, the system should see a config file present and use it. If anyone has any ideas, or better yet, proven workflows, I'd love to hear about them. Thanks, Mile From jstrauss at loyolahs.edu Sun Nov 2 09:23:51 2008 From: jstrauss at loyolahs.edu (Jeff Strauss) Date: Sun, 2 Nov 2008 09:23:51 -0800 Subject: [Casper] 1-to-1 recommendations Message-ID: Hi all, Next year our school of 1200 students will be going 1-to-1, where every student has their own laptop that they end up purchasing (over four years) through the cost of tuition. I have a couple logistical questions and I would love to benefit from the experience on this list. Has anyone gone 1-to-1 that I could bounce ideas around with? I'm mainly stumped by what kind of access the students should be granted: should they be given admin access on their machines? How does that impair management with Casper? That kind of stuff. Any help would be appreciated. Thanks! Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 [cid:3308462631_29553] -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081102/f55b3091/attachment.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: image.gif Type: image/gif Size: 4290 bytes Desc: image.gif Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081102/f55b3091/attachment.gif From Jim.OringJr at schawk.com Sun Nov 2 17:14:16 2008 From: Jim.OringJr at schawk.com (Jim Oring, Jr.) Date: Sun, 2 Nov 2008 17:14:16 -0800 Subject: [Casper] Netboot newbie Message-ID: I'm in the process of experimemting with netbooting and am very interested in what others are doing to make this a seemless process. Thanks to all, JIM ORING, JR. IT DEPARTMENT SCHAWK! T 323.258.4111 D 323.551.6517 M 909.904.2839 F 323.259.0428 jim.oringjr at schawk.com 3116 West Avenue 32 Los Angeles, CA 90065 USA schawk.com From ERNSTCS at uwec.edu Sun Nov 2 17:16:32 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Sun, 2 Nov 2008 19:16:32 -0600 Subject: [Casper] 1-to-1 recommendations In-Reply-To: Message-ID: Hi Jeff, We aren't one to one here, but I'm not sure it much matters. If you want to restrict end users from doing things to your machine I'm sure Thomas Larking will have some advice. I just wanted to answer the last part. It doesn't matter what access the users have to the machines. You manage your systems with a typically hidden administration account through SSH. Can work just on your network, off your network, pretty much anywhere you want to allow it to do things. The management suite is the tool that gets the system to how you want it, and how you maintain it. Good luck! Craig E On 11/2/08 11:23 AM, "Jeff Strauss" wrote: Hi all, Next year our school of 1200 students will be going 1-to-1, where every student has their own laptop that they end up purchasing (over four years) through the cost of tuition. I have a couple logistical questions and I would love to benefit from the experience on this list. Has anyone gone 1-to-1 that I could bounce ideas around with? I'm mainly stumped by what kind of access the students should be granted: should they be given admin access on their machines? How does that impair management with Casper? That kind of stuff. Any help would be appreciated. Thanks! Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 [cid:3308498192_1128496] -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081102/3a989494/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: image.gif Type: image/gif Size: 4290 bytes Desc: image.gif Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081102/3a989494/attachment.gif From ERNSTCS at uwec.edu Sun Nov 2 17:17:08 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Sun, 2 Nov 2008 19:17:08 -0600 Subject: [Casper] Netboot newbie In-Reply-To: Message-ID: Define "seemless". What do you want it to do? Craig E On 11/2/08 7:14 PM, "Jim Oring, Jr." wrote: I'm in the process of experimemting with netbooting and am very interested in what others are doing to make this a seemless process. Thanks to all, JIM ORING, JR. IT DEPARTMENT SCHAWK! T 323.258.4111 D 323.551.6517 M 909.904.2839 F 323.259.0428 jim.oringjr at schawk.com 3116 West Avenue 32 Los Angeles, CA 90065 USA schawk.com _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081102/53104dbe/attachment.html From john_wetter at hopkins.k12.mn.us Sun Nov 2 17:25:42 2008 From: john_wetter at hopkins.k12.mn.us (John Wetter) Date: Sun, 2 Nov 2008 19:25:42 -0600 Subject: [Casper] 1-to-1 recommendations In-Reply-To: References: Message-ID: <4058FCBF8DBA6646855ABFA27F869E51E0F4A45600@EXCHANGE.hopkins.hopkinsschools.org> He have a 1-1 program in our 4-5-6 grades. We manage the system preferences and partental controls using Managed Preferences, and we handle updates/software installs/imaging, etc. through Casper. As mentioned, our students are manages mobile home directories with managed accounts. Giving students admin accounts would be a mistake, IMHO. -John -- John Wetter Technology Support Administrator Technology & Information Services Hopkins Public Schools 952-988-5373 john_wetter at hopkins.k12.mn.us ________________________________ From: casper-bounces at list.jamfsoftware.com [casper-bounces at list.jamfsoftware.com] On Behalf Of Jeff Strauss [jstrauss at loyolahs.edu] Sent: Sunday, November 02, 2008 11:23 AM To: casper at list.jamfsoftware.com Subject: [Casper] 1-to-1 recommendations Hi all, Next year our school of 1200 students will be going 1-to-1, where every student has their own laptop that they end up purchasing (over four years) through the cost of tuition. I have a couple logistical questions and I would love to benefit from the experience on this list. Has anyone gone 1-to-1 that I could bounce ideas around with? I?m mainly stumped by what kind of access the students should be granted: should they be given admin access on their machines? How does that impair management with Casper? That kind of stuff. Any help would be appreciated. Thanks! Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 [cid:3308462631_29553] -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081102/e0f67599/attachment-0001.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: image.gif Type: image/gif Size: 4290 bytes Desc: image.gif Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081102/e0f67599/attachment-0001.gif From john_wetter at hopkins.k12.mn.us Sun Nov 2 17:28:27 2008 From: john_wetter at hopkins.k12.mn.us (John Wetter) Date: Sun, 2 Nov 2008 19:28:27 -0600 Subject: [Casper] Netboot newbie In-Reply-To: References: Message-ID: <4058FCBF8DBA6646855ABFA27F869E51E0F4A45601@EXCHANGE.hopkins.hopkinsschools.org> We use netboot for all of our imaging with a JAMF NetInstall image set. It works well for us. Not sure what else you might be looking for... -- John Wetter Technology Support Administrator Technology & Information Services Hopkins Public Schools 952-988-5373 john_wetter at hopkins.k12.mn.us ________________________________________ From: casper-bounces at list.jamfsoftware.com [casper-bounces at list.jamfsoftware.com] On Behalf Of Jim Oring, Jr. [Jim.OringJr at schawk.com] Sent: Sunday, November 02, 2008 7:14 PM To: Casper Subject: [Casper] Netboot newbie I'm in the process of experimemting with netbooting and am very interested in what others are doing to make this a seemless process. Thanks to all, JIM ORING, JR. IT DEPARTMENT SCHAWK! T 323.258.4111 D 323.551.6517 M 909.904.2839 F 323.259.0428 jim.oringjr at schawk.com 3116 West Avenue 32 Los Angeles, CA 90065 USA schawk.com _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper From ben.w.young at det.nsw.edu.au Sun Nov 2 17:38:01 2008 From: ben.w.young at det.nsw.edu.au (Ben W Young) Date: Mon, 03 Nov 2008 12:38:01 +1100 Subject: [Casper] Netboot newbie In-Reply-To: Message-ID: Jim, We are experimenting also with making an automated process through Netboot. We could do with advise on improving what we current have so any tips would be welcome. We fist rename out computers and add them into the JSS manually. We name out computers based on site and room location so that it helps with remote management and with organizing the JSS Once we have the correct names and in the JSS we setup the school and add the appropriate configuration and Autorun information using the Mass Edit feature. We can then tell the computers to Netboot via Capser Remote to the Netboot server and then the Netboot takes over for stage 1 of the imaging process. Stage 1: Netboot / Partition disk / Deploy Recovery OS (ROS) to the Restore partition. We have a pre-script that partitions the disk in two drives once it has Netbooted and then Netrestore takes over and restores an the ROS to the newly created Restore partition. Once that's complete it then reboots to the ROS and thats Stage 2. Stage 2: Primary OS deployment and packages Once it boots to the ROS it automatically runs Casper imaging and restores the primary OS and delivers he appropriate packages and runs post scripts to bind to AD ad OD. That a snapshot a what we have started to do. But there is probably is a better way...faster way of making this automated. Regards, Ben W Young. On 3/11/08 12:14 PM, "Jim Oring, Jr." wrote: > I'm in the process of experimemting with netbooting and am very > interested in what others are doing to make this a seemless process. > > Thanks to all, > > JIM ORING, JR. > IT DEPARTMENT > > SCHAWK! > T 323.258.4111 > D 323.551.6517 > M 909.904.2839 > F 323.259.0428 > jim.oringjr at schawk.com > > 3116 West Avenue 32 > Los Angeles, CA 90065 USA > schawk.com > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper ********************************************************************** This message is intended for the addressee named and may contain privileged information or confidential information or both. If you are not the intended recipient please delete it and notify the sender. ********************************************************************** From sean.m.nesbitt at lmco.com Mon Nov 3 06:14:54 2008 From: sean.m.nesbitt at lmco.com (Nesbitt, Sean M.) Date: Mon, 03 Nov 2008 08:14:54 -0600 Subject: [Casper] Finder shows hidden files after image In-Reply-To: Message-ID: Its not Casper. See this Apple KB article: Mac OS X 10.4: Invisible files become visible after NetInstall or restoring from a disk image (http://support.apple.com/kb/TS1979) Sean On 11/1/08 8:40 PM, "casper-request at list.jamfsoftware.com" wrote: > Send Casper mailing list submissions to > casper at list.jamfsoftware.com > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.jamfsoftware.com/mailman/listinfo/casper > or, via email, send a message with subject or body 'help' to > casper-request at list.jamfsoftware.com > > You can reach the person managing the list at > casper-owner at list.jamfsoftware.com > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Casper digest..." > > > Today's Topics: > > 1. Finder shows hidden files after image (Michael Curtis) > 2. Re: Finder shows hidden files after image (Ernst, Craig S.) > 3. Re: Finder shows hidden files after image (Miles Leacy) > 4. Re: Finder shows hidden files after image (Nichols, Jared) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 1 Nov 2008 21:50:34 +0000 > From: Michael Curtis > Subject: [Casper] Finder shows hidden files after image > To: > Message-ID: <324C3419-4DC3-44AF-94F6-F838669D708C at bazmac.co.uk> > Content-Type: text/plain; charset="us-ascii"; format="flowed"; > delsp="yes" > > Hi, > > I have imaged a Mac and it now shows the etc and var folders, among > others in the Finder. These should of course be hidden. How can I hide > them, and any idea why Casper would have done this? > > Best wishes > > Michael > > > ***************************************************** > > This E-Mail has been scanned by Sophos Anti-Virus > > ***************************************************** > > > > > ------------------------------ > > Message: 2 > Date: Sat, 1 Nov 2008 20:42:03 -0500 > From: "Ernst, Craig S." > Subject: Re: [Casper] Finder shows hidden files after image > To: Casper List > Message-ID: > Content-Type: text/plain; charset="iso-8859-1" > > I won't always defend Casper, but in this instance I can't imagine that Casper > is actually the cause of this issue. And have you imaged more than just one > Mac to see if you can get it to reoccur and be reproduced? > > Did you install any other packages when you imaged? Would any of those have > potentially changed some settings? > > Craig E > > On 11/1/08 4:50 PM, "Michael Curtis" wrote: > > Hi, > > I have imaged a Mac and it now shows the etc and var folders, among > others in the Finder. These should of course be hidden. How can I hide > them, and any idea why Casper would have done this? > > Best wishes > > Michael > > > ***************************************************** > > This E-Mail has been scanned by Sophos Anti-Virus > > ***************************************************** > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > http://list.jamfsoftware.com/pipermail/casper/attachments/20081101/b1fcbcad/at > tachment.htm > > ------------------------------ > > Message: 3 > Date: Sat, 1 Nov 2008 22:16:10 -0400 > From: "Miles Leacy" > Subject: Re: [Casper] Finder shows hidden files after image > To: "Ernst, Craig S." > Cc: Casper List > Message-ID: > > Content-Type: text/plain; charset="iso-8859-1" > > I agree with Craig. I suggest checking your workflow. > I had an instance where this occurred, but only when another member of my > staff performed the imaging. I never did find the cause because when using > the process I had established, it did not occur. > > If you can share your imaging process, and the packages and scripts in your > configuration, perhaps we can help find what is causing this. > > > 2008/11/1 Ernst, Craig S. > >> > I won't always defend Casper, but in this instance I can't imagine that >> > Casper is actually the cause of this issue. And have you imaged more than >> > just one Mac to see if you can get it to reoccur and be reproduced? >> > >> > Did you install any other packages when you imaged? Would any of those have >> > potentially changed some settings? >> > >> > Craig E >> > >> > >> > On 11/1/08 4:50 PM, "Michael Curtis" wrote: >> > >> > Hi, >> > >> > I have imaged a Mac and it now shows the etc and var folders, among >> > others in the Finder. These should of course be hidden. How can I hide >> > them, and any idea why Casper would have done this? >> > >> > Best wishes >> > >> > Michael >> > >> > >> > ***************************************************** >> > >> > This E-Mail has been scanned by Sophos Anti-Virus >> > >> > ***************************************************** >> > >> > >> > _______________________________________________ >> > Casper mailing list >> > Casper at list.jamfsoftware.com >> > http://list.jamfsoftware.com/mailman/listinfo/casper >> > >> > >> > _______________________________________________ >> > Casper mailing list >> > Casper at list.jamfsoftware.com >> > http://list.jamfsoftware.com/mailman/listinfo/casper >> > >> > > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > http://list.jamfsoftware.com/pipermail/casper/attachments/20081101/a5ee5471/at > tachment.html > > ------------------------------ > > Message: 4 > Date: Sat, 1 Nov 2008 22:39:28 -0400 > From: "Nichols, Jared" > Subject: Re: [Casper] Finder shows hidden files after image > To: Michael Curtis , > "casper at list.jamfsoftware.com" > Message-ID: > Content-Type: text/plain; charset="iso-8859-1" > > Hi- > > I don't think it would be Casper either, but I use something called SetHidden > to re-hide these folders. It came with (I believe) the 10.4 dev tools - > though works on 10.5 too. It'll need installation as it's a command-line > binary, but once it's installed, you can call it with a script as part of > maintenance. It's simple and does the trick nicely. > > I attached a compressed a folder with the following: > > * SetHidden - file - Iceberg project file > * resources - folder - contains postflight script which executes the > SetHidden command > * contents - folder - contains the SetHidden binary and hidden_MacOS9 file > as distributed from Dev Tools > * build - folder - contains built, installable, Set Hidden.pkg, as compiled > from Iceberg. > > Cheers > > jared > > On 11/1/08 17:50 , "Michael Curtis" wrote: > > Hi, > > I have imaged a Mac and it now shows the etc and var folders, among > others in the Finder. These should of course be hidden. How can I hide > them, and any idea why Casper would have done this? > > Best wishes > > Michael > > > ***************************************************** > > This E-Mail has been scanned by Sophos Anti-Virus > > ***************************************************** > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > -- > Jared Nichols > ISD Infrastructure and Operations - Desktop Engineering > MIT Lincoln Laboratory > 244 Wood St. > Lexington, MA 02420-9108 > (781) 981-5500 > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > http://list.jamfsoftware.com/pipermail/casper/attachments/20081101/dec00fca/at > tachment.htm > -------------- next part -------------- > A non-text attachment was scrubbed... > Name: SetHidden.zip > Type: application/octet-stream > Size: 67921 bytes > Desc: SetHidden.zip > Url : > http://list.jamfsoftware.com/pipermail/casper/attachments/20081101/dec00fca/at > tachment.obj > > ------------------------------ > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > End of Casper Digest, Vol 23, Issue 2 > ************************************* -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/8e4c835c/attachment.htm From tlarki at kckps.org Mon Nov 3 06:51:21 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 03 Nov 2008 08:51:21 -0600 Subject: [Casper] 1-to-1 recommendations In-Reply-To: References: Message-ID: <490EBB89.7141.0039.0@kckps.org> Jeff, My name is Tom and I work in a school district that has deployed 6,000 Macbooks in our 1:1. We are on our second year and last year they hired me on to admin the servers and the casper suite. It has been quite a crazy time so far. I can only imagine that your initial set up will be OS X server Open Directory along with users logging in with mobile accounts on their laptops. Mobile accounts are a god send. Once they sync to the machine locally, the machine will authenticate locally but still get group/user policy from OS X server. I won't go into a superlative amount of detail but outline some basics for you. Assuming you are running 10.5.x server/client. Toss all the applications you don't want the user to have access to in /Applications/Utilities. For instance I tossed in Automator and the Apple script program, because the smart students figured out that those applications can be used to open unauthorized applications. Once I get every app I don't want them to be able to run in the /Applications/Utilities folder and all the apps installed I want in the base image in the /Applications folder I just apply an ownership change to those directories, with this simple unix command. sudo chown -R root:admin /Applications That will change ownership of all folders under /Applications to be owned by root, and in the admin group. Next I apply a permissions command that will modify the rwx attributes. sudo chmod -R 775 /Applications This means that the root user and any user in the admin group have full read-write-execute permissions, while everyone else only has read and execute. So, your hidden local administrator account will have full access as well as root (but root always should). Then in Work Group Manager create a nested group that includes all students. Manage their applications by folder in WGM, saying that only applications may be ran from /Applications. Then, next deny them access to any thing under /Applications/Utilities. So far this school year it has seemed to work pretty well. I restrict that programs can only run from the Applications folder period. You can't run an app from the user's desktop. It will not work. Any app that I want an admin account to have access to, but no one else is simply placed in /Applications/Utilities. Since the utilities folder is restricted in WGM by the Application preferences. Also, it is my philosophy to create 2 separate hidden admin accounts. 1 account you give out to your IT staff for management and troubleshooting of the machine, and the other one you create for all the casper management. That way the casper management account never ever gets touched. I don't give anyone the casper admin account password and I don't even tell people it is on there. It only has one purpose, to manage the machine for casper. Then anyone who needs admin rights to the machine I can just give them the local hidden admin account and they can use that. I have already had to do a massive password reset last year because of someone who left a printed password list out. Mass changing the password from Casper 5.13 to Casper 6 actually was kind of a pain. I use Casper for package deployment and policies mainly, as well as inventory and imaging. I don't manage the applications with Casper mainly because I don't like how you have to make a global exceptions list. If I could manage them by smart group I would be more inclined, since with Open Directory I can manage all students by the all students group, or a group of students by building and graduation year, or an individual student account just by managing their user account specifically. I would never give your students admin rights, they could root the machine and erase whatever web filter app you have on there as well as any tracking software, etc. If you have any specific questions please feel free to post them. thx ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry>>> Jeff Strauss 11/02/08 11:23 AM >>> Hi all, Next year our school of 1200 students will be going 1-to-1, where every student has their own laptop that they end up purchasing (over four years) through the cost of tuition. I have a couple logistical questions and I would love to benefit from the experience on this list. Has anyone gone 1-to-1 that I could bounce ideas around with? I?m mainly stumped by what kind of access the students should be granted: should they be given admin access on their machines? How does that impair management with Casper? That kind of stuff. Any help would be appreciated. Thanks! Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/9e75cbf7/attachment.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 4290 bytes Desc: CompuServe GIF graphic Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/9e75cbf7/attachment.gif From james.partridge at oucs.ox.ac.uk Mon Nov 3 07:12:25 2008 From: james.partridge at oucs.ox.ac.uk (James Partridge) Date: Mon, 3 Nov 2008 15:12:25 +0000 Subject: [Casper] Netboot newbie In-Reply-To: References: Message-ID: <8A1920FC-BB1B-40F8-94D3-A3767CC3D3F7@oucs.ox.ac.uk> On 3 Nov 2008, at 01:14, Jim Oring, Jr. wrote: > I'm in the process of experimemting with netbooting and am very > interested in what others are doing to make this a seemless process. One important thing to keep in mind is the steps you need to take if you are going to be NetBooting across subnets. Mike Bombich (as usual) has written the definitive descriptions of the whole NetBoot process, and things to watch out for): Troubleshooting the NetBoot process: NetBooting across subnets: The key step is for whoever administers your network hardware to make sure that routers on any subnets that will have machines NetBooting can pass BSDP traffic. If this works then everything else follows pretty easily. I'd also recommend looking into a good administrative method for managing which machines are allowed to NetBoot and which aren't. Apple's MAC address filtering is the right thing to do (imo) but the interface for managing MAC addresses in Server Admin is, well, a bit rubbish really. If you have a large number or a high turnover of machines allowed to NetBoot then it's really easy to lose control of the MAC address filter. In general, though, I'd say read those two articles by Mike Bombich. I've never seen anything better for understanding the NetBoot process. If you are NetBooting both PPC and Intel machines then pay close attention to the sections about NetBooting multiple architectures. Cheers James ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ James Partridge Systems Development & Support (Apple) NSMS Oxford University Computing Service 13 Banbury Road Oxford OX2 6NN Tel.: (01865) 273207 iChat: james.partridge at mac.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/931c500b/attachment.htm From miles.leacy at themacadmin.com Mon Nov 3 07:24:17 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Mon, 3 Nov 2008 10:24:17 -0500 Subject: [Casper] Netboot newbie In-Reply-To: <8A1920FC-BB1B-40F8-94D3-A3767CC3D3F7@oucs.ox.ac.uk> References: <8A1920FC-BB1B-40F8-94D3-A3767CC3D3F7@oucs.ox.ac.uk> Message-ID: Note that you can specify netboot servers, and even specific images through the JSS. See Casper Suite documentation, pages 328-331. You don't need to do anything special with routers if you specify where to netboot from. Its only in the default netboot situation where a netbooting computer broadcasts to the network looking for a netboot server where you run into routing issues. You can use the bless command to specify your netboot server and/or image. 2008/11/3 James Partridge > On 3 Nov 2008, at 01:14, Jim Oring, Jr. wrote: > > I'm in the process of experimemting with netbooting and am very > interested in what others are doing to make this a seemless process. > > > One important thing to keep in mind is the steps you need to take if you > are going to be NetBooting across subnets. Mike Bombich (as usual) has > written the definitive descriptions of the whole NetBoot process, and things > to watch out for): > > Troubleshooting the NetBoot process: < > http://www.bombich.com/mactips/netboot.html> > NetBooting across subnets: > > The key step is for whoever administers your network hardware to make sure > that routers on any subnets that will have machines NetBooting can pass BSDP > traffic. If this works then everything else follows pretty easily. > > I'd also recommend looking into a good administrative method for managing > which machines are allowed to NetBoot and which aren't. Apple's MAC address > filtering is the right thing to do (imo) but the interface for managing MAC > addresses in Server Admin is, well, a bit rubbish really. If you have a > large number or a high turnover of machines allowed to NetBoot then it's > really easy to lose control of the MAC address filter. > > In general, though, I'd say read those two articles by Mike Bombich. I've > never seen anything better for understanding the NetBoot process. If you are > NetBooting both PPC and Intel machines then pay close attention to the > sections about NetBooting multiple architectures. > > Cheers > > James > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > James Partridge > > Systems Development & Support (Apple) > > NSMS > > Oxford University Computing Service > > 13 Banbury Road > > Oxford OX2 6NN > > > Tel.: (01865) 273207 > > iChat: james.partridge at mac.com > > > > > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/69f77c27/attachment.html From tlarki at kckps.org Mon Nov 3 07:34:40 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 03 Nov 2008 09:34:40 -0600 Subject: [Casper] Netboot newbie In-Reply-To: References: Message-ID: <490EC5B0.7141.0039.0@kckps.org> Jim, I have used Zen Works from Novell, DRBL from source forge, Ghost, Bombich's Netrestore, The built in apple stuff, Acronis, amongst a few others. Granted, not all of those products supports Macs, but I have used them all. At my old job I had an old HP business class desktop running open SuSe Linux and DRBL and would netboot and image Windows clients off of it. Out of all the suites I have used in the past I can safely say that with the Apple platform there really isn't anything out there that can compete with Casper imaging. I would say Netrestore is the closest product out there. One huge pro that Netrestore has over Casper is the price tag, it is absolutely free. I still use netrestore even after having the Casper Suite. I use it to image firewire booted machines on a one to one basis and think it is a great application. Over the summer we had to reimage 6,000 macbooks with a dual boot image of OS X 10.5.3 and Windows XP Pro. I automated it all through Casper and we got it done in about 5 weeks working 12 hour days for those full 5 weeks. There are some issues with AFP and multiple connections and of course I have yet to try out Casper's multi-casting abilities and see they just released in their first resource kit. The mass imaging once you set it up is very automated and efficient. The problems you run into mostly at that point are Apple technology problems, and things like AFP throughput, but there are methods of making that run smoothly. >>> "Jim Oring, Jr." 11/02/08 7:14 PM >>> I'm in the process of experimemting with netbooting and am very interested in what others are doing to make this a seemless process. Thanks to all, JIM ORING, JR. IT DEPARTMENT SCHAWK! T 323.258.4111 D 323.551.6517 M 909.904.2839 F 323.259.0428 jim.oringjr at schawk.com 3116 West Avenue 32 Los Angeles, CA 90065 USA schawk.com _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/1c9803bd/attachment.html From ERNSTCS at uwec.edu Mon Nov 3 07:35:26 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Mon, 3 Nov 2008 09:35:26 -0600 Subject: [Casper] Netboot newbie In-Reply-To: Message-ID: Just a note about using the Casper Netboot pieces until the next release comes out: "I have verified a bug in 6.0 and 6.01 in which a policy (and therefore Casper Remote) are not properly setting a specified netboot server. The bug appears to occur in the translation process between the XML that the JAMF binary receives from the JSS into a command to be run. The "jamf bless" command works correctly to set a netboot server, so you can still configure a script that will set a machine to a specified NetBoot server as a workaround. (See 'jamf help bless')." I always kept getting my default server. Craig E On 11/3/08 9:24 AM, "Miles Leacy" wrote: Note that you can specify netboot servers, and even specific images through the JSS. See Casper Suite documentation, pages 328-331. You don't need to do anything special with routers if you specify where to netboot from. Its only in the default netboot situation where a netbooting computer broadcasts to the network looking for a netboot server where you run into routing issues. You can use the bless command to specify your netboot server and/or image. 2008/11/3 James Partridge On 3 Nov 2008, at 01:14, Jim Oring, Jr. wrote: I'm in the process of experimemting with netbooting and am very interested in what others are doing to make this a seemless process. One important thing to keep in mind is the steps you need to take if you are going to be NetBooting across subnets. Mike Bombich (as usual) has written the definitive descriptions of the whole NetBoot process, and things to watch out for): Troubleshooting the NetBoot process: NetBooting across subnets: The key step is for whoever administers your network hardware to make sure that routers on any subnets that will have machines NetBooting can pass BSDP traffic. If this works then everything else follows pretty easily. I'd also recommend looking into a good administrative method for managing which machines are allowed to NetBoot and which aren't. Apple's MAC address filtering is the right thing to do (imo) but the interface for managing MAC addresses in Server Admin is, well, a bit rubbish really. If you have a large number or a high turnover of machines allowed to NetBoot then it's really easy to lose control of the MAC address filter. In general, though, I'd say read those two articles by Mike Bombich. I've never seen anything better for understanding the NetBoot process. If you are NetBooting both PPC and Intel machines then pay close attention to the sections about NetBooting multiple architectures. Cheers James ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ James Partridge Systems Development & Support (Apple) NSMS Oxford University Computing Service 13 Banbury Road Oxford OX2 6NN Tel.: (01865) 273207 iChat: james.partridge at mac.com _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/368ea3f2/attachment.htm From james.partridge at oucs.ox.ac.uk Mon Nov 3 07:40:05 2008 From: james.partridge at oucs.ox.ac.uk (James Partridge) Date: Mon, 3 Nov 2008 15:40:05 +0000 Subject: [Casper] Netboot newbie In-Reply-To: References: <8A1920FC-BB1B-40F8-94D3-A3767CC3D3F7@oucs.ox.ac.uk> Message-ID: <7B5F32F6-4254-4286-B9EB-3D6A547ABF1E@oucs.ox.ac.uk> On 3 Nov 2008, at 15:24, Miles Leacy wrote: > Note that you can specify netboot servers, and even specific images > through the JSS. See Casper Suite documentation, pages 328-331. > > You don't need to do anything special with routers if you specify > where to netboot from. Its only in the default netboot situation > where a netbooting computer broadcasts to the network looking for a > netboot server where you run into routing issues. > > You can use the bless command to specify your netboot server and/or > image. Yup, fair point ? I should have made that clear. This is probably an environment-specific thing though so it's as well to be aware of all the options. Cheers James ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ James Partridge Systems Development & Support (Apple) NSMS Oxford University Computing Service 13 Banbury Road Oxford OX2 6NN Tel.: (01865) 273207 iChat: james.partridge at mac.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/8378eba8/attachment.htm From jared.nichols at ll.mit.edu Mon Nov 3 07:04:43 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Mon, 3 Nov 2008 10:04:43 -0500 Subject: [Casper] Indexing packages Message-ID: Hi- When you index a package, does it do it with the server's resources or are you processing it locally on the machine you're admining from? I imagine I'd like to utilize the quad-core Xeon in my Xserve instead of my MacBook Pro... Thanks j -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/96f5bb00/attachment.html From ERNSTCS at uwec.edu Mon Nov 3 08:17:53 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Mon, 3 Nov 2008 10:17:53 -0600 Subject: [Casper] Indexing packages In-Reply-To: Message-ID: The local box you are running Casper Admin from. Craig E On 11/3/08 9:04 AM, "Nichols, Jared" wrote: Hi- When you index a package, does it do it with the server's resources or are you processing it locally on the machine you're admining from? I imagine I'd like to utilize the quad-core Xeon in my Xserve instead of my MacBook Pro... Thanks j -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/837d5dcb/attachment.htm From tlarki at kckps.org Mon Nov 3 08:43:26 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 03 Nov 2008 10:43:26 -0600 Subject: [Casper] CS 2 packaging In-Reply-To: References: <4909868A.7141.0039.0@kckps.org> <4909CDF1.BB96.0081.0@uclan.ac.uk> <49098885.7141.0039.0@kckps.org> Message-ID: <490ED5CD.7141.0039.0@kckps.org> I am building the package now and not doing the disk images. So, when I make the package can I go back and dump everything that is put in /Library into like an adobe required then put out each CS 2 app as a separate install? I can't recall how I did that before, but the JAMF guys showed me how to do that with iLife last year. I can just drag them out in editable mode in Composer and create separate DMG files for them, correct? thanks, ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Miles Leacy" 10/30/08 10:15 AM >>> My CS2 package was a snapshot of the whole suite after running and and making sure all apps were serialized. The version of Acrobat that comes with CS2 won't run properly on its own. You have to launch another app in the suite (such as Photoshop) in order for Acrobat to "know" that its been serialized. 2008/10/30 Thomas Larkin So just combine the disk images then? Could I use composer and do snap shots? ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Criss Myers" 10/30/08 10:08 AM >>> you should be able to create 1 install disk and use that Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> On Thu, Oct 30, 2008 at 3:03 PM, in message <4909868A.7141.0039.0 at kckps.org>, "Thomas Larkin" wrote: So, I have CS 2 to install now on some older Macs... It comes on like 3 CDs, or at least my version does. Can I make 3 separate disk images of them and create them into one adobe installer in Casper Admin, or should I combine them into 1 disk image and then use the adobe installer in Casper Admin? Thoughts? Thanks, ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/3d5469c1/attachment.html From miles.leacy at themacadmin.com Mon Nov 3 09:03:21 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Mon, 3 Nov 2008 12:03:21 -0500 Subject: [Casper] CS 2 packaging In-Reply-To: <490ED5CD.7141.0039.0@kckps.org> References: <4909868A.7141.0039.0@kckps.org> <4909CDF1.BB96.0081.0@uclan.ac.uk> <49098885.7141.0039.0@kckps.org> <490ED5CD.7141.0039.0@kckps.org> Message-ID: I would suggest doing a full install or the Adobe suite, make sure everything is serialized and functioning and then use the prebuilts in Composer to generate your packages. You may also want to look into the fix for the Acrobat self-repair function if your users will not be admins (I most strenuously suggest that they not be admins, I consider this a best practice). I don't recall what the fix was off hand, but there is one out there. On Mon, Nov 3, 2008 at 11:43 AM, Thomas Larkin wrote: > I am building the package now and not doing the disk images. So, when I > make the package can I go back and dump everything that is put in /Library > into like an adobe required then put out each CS 2 app as a separate > install? I can't recall how I did that before, but the JAMF guys showed me > how to do that with iLife last year. > > I can just drag them out in editable mode in Composer and create separate > DMG files for them, correct? > > thanks, > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > > > > > > >>> "Miles Leacy" 10/30/08 10:15 AM >>> > > My CS2 package was a snapshot of the whole suite after running and and > making sure all apps were serialized. The version of Acrobat that comes > with CS2 won't run properly on its own. You have to launch another app in > the suite (such as Photoshop) in order for Acrobat to "know" that its been > serialized. > > > 2008/10/30 Thomas Larkin > > > > > So just combine the disk images then? >> >> >> Could I use composer and do snap shots? >> >> >> >> >> ___________________________ >> Thomas Larkin >> TIS Department >> KCKPS USD500 >> tlarki at kckps.org >> blackberry: 913-449-7589 >> office: 913-627-0351 >> >> >> >> >> >> >>> "Criss Myers" 10/30/08 10:08 AM >>> >> >> >> you should be able to create 1 install disk and use that >> >> >> Criss Myers >> Senior Customer Support Analyst (Mac Services) >> Apple Certified Technical Coordinator v10.5 >> LIS Business Support Team >> Library 301 >> University of Central Lancashire >> Preston PR1 2HE >> Ex 5054 >> 01772 895054 >> >> >>> On Thu, Oct 30, 2008 at 3:03 PM, in message < >> 4909868A.7141.0039.0 at kckps.org>, "Thomas Larkin" >> wrote: >> >> So, I have CS 2 to install now on some older Macs... >> >> >> It comes on like 3 CDs, or at least my version does. Can I make 3 >> separate disk images of them and create them into one adobe installer in >> Casper Admin, or should I combine them into 1 disk image and then use the >> adobe installer in Casper Admin? >> >> >> Thoughts? >> >> >> Thanks, >> >> >> ___________________________ >> Thomas Larkin >> TIS Department >> KCKPS USD500 >> tlarki at kckps.org >> blackberry: 913-449-7589 >> office: 913-627-0351 >> >> >> >> >> >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper >> >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/87041daf/attachment-0001.html From rharter at uwsp.edu Mon Nov 3 10:09:42 2008 From: rharter at uwsp.edu (Ryan Harter) Date: Mon, 3 Nov 2008 12:09:42 -0600 Subject: [Casper] Indexing packages In-Reply-To: References: Message-ID: I'm not sure if it has been fixed, but there was a bug that broke indexing from a 10.5 box. I tried several times, and then when I'd uninstall a package that I indexed, the system it was uninstalled from would go into a constant reboot cycle. I think some system files were getting deleted. Be sure you test this before you deploy! Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu On Nov 3, 2008, at 9:04 AM, Nichols, Jared wrote: > Hi- > > When you index a package, does it do it with the server?s resources > or are you processing it locally on the machine you?re admining > from? I imagine I?d like to utilize the quad-core Xeon in my Xserve > instead of my MacBook Pro... > > Thanks > > j > -- > Jared Nichols > ISD Infrastructure and Operations ? Desktop Engineering > MIT Lincoln Laboratory > 244 Wood St. > Lexington, MA 02420-9108 > (781) 981-5500 > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/46aa7eb0/attachment.htm From miles.leacy at themacadmin.com Mon Nov 3 10:15:00 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Mon, 3 Nov 2008 13:15:00 -0500 Subject: [Casper] Indexing packages In-Reply-To: References: Message-ID: I believe this was fixed under v6. 2008/11/3 Ryan Harter > I'm not sure if it has been fixed, but there was a bug that broke indexing > from a 10.5 box. I tried several times, and then when I'd uninstall a > package that I indexed, the system it was uninstalled from would go into a > constant reboot cycle. I think some system files were getting deleted. > Be sure you test this before you deploy! > * > Ryan Harter* > UW - Stevens Point > Workstation Developer > 715.346.2716 > Ryan.Harter at uwsp.edu > > On Nov 3, 2008, at 9:04 AM, Nichols, Jared wrote: > > Hi- > > When you index a package, does it do it with the server's resources or are > you processing it locally on the machine you're admining from? I imagine > I'd like to utilize the quad-core Xeon in my Xserve instead of my MacBook > Pro... > > Thanks > > j > -- > Jared Nichols > ISD Infrastructure and Operations ? Desktop Engineering > MIT Lincoln Laboratory > 244 Wood St. > Lexington, MA 02420-9108 > (781) 981-5500 > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/0abae54d/attachment.html From rharter at uwsp.edu Mon Nov 3 10:43:25 2008 From: rharter at uwsp.edu (Ryan Harter) Date: Mon, 3 Nov 2008 12:43:25 -0600 Subject: [Casper] FYI: Adobe issue and workaround proceedure Message-ID: <43B73F8D-09FB-4E25-ABF8-7A99A2EC2780@uwsp.edu> Hey Guys- I've been working to figure out an issue we've been having with Adobe Installers at image time for the past week or so. Between our work and Sam's at Jamf support, I think we've figured out the cause. I just thought I would share with you our symptoms and our workaround incase any of you have similar issues. The Symptoms: We have an old maintenance license for Adobe Creative Suite and therefore don't have the Master Collection, but instead we have DVDs for Photoshop, Illustrator, InDesign, etc. all as separate images. When we want to install these at image time, Casper Imaging copies all of the dmgs to the FirstRun folder and builds a FirstRun script that will install them. The problem with this is that they actually copy the FirstRun script and resources to /private/tmp before putting them on Macintosh HD and our NetInstall image can't fit all of that in it's tmp directory. The tmp directory would fill up, Casper Imaging would not error out, and we would get partial FirstRun scripts or wouldn't get one at all. The Work Around: What we ended up doing was making a policy with a custom trigger called "InstallAdobeApps." This policy just installs the Adobe Apps like normal, but since we aren't in the NetInstall environment the / private/tmp directory has the entire local disk space to work with. I wrote a script that we set to run at reboot when we image that just calls the custom trigger. One thing that I wanted to add to this was the jamfHelper.app (this window that covers the login window and tells users that it is installing Adobe apps). In order to add this functionality, I made a package that just contained the app (which can be found in the support directory inside the Casper Imaging.app package) which I had it install to /Library/Application Support/UWSP/. Note: I initially tried to install this to /tmp, which is a silly idea since /tmp gets flushed at every boot and hence the file did not remain there. The script then will check that the helper app exists, and if it does will fire it off before, and kill it after, the adobe installer policy is run. The finished script looks like this: > #!/bin/bash > > if [ -d '/Library/Application Support/UWSP/jamfHelper.app' ]; then > /usr/sbin/jamf launchJAMFHelper -path '/Library/Application > Support/UWSP/jamfHelper.app' > fi > > /usr/sbin/jamf policy -trigger AdobeInstalls > > if [ -d '/Library/Application Support/UWSP/jamfHelper.app' ]; then > ## Unlock the login window > /usr/sbin/jamf killJAMFHelper > > ## Remove jamfHelper > /bin/rm -rf '/Library/Application Support/UWSP/' > fi > > exit 0 I just thought I would share this since it has many other applications, especially if you want to lock down the login window. Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/73921957/attachment.htm From ERNSTCS at uwec.edu Mon Nov 3 11:15:12 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Mon, 3 Nov 2008 13:15:12 -0600 Subject: [Casper] FYI: Adobe issue and workaround proceedure In-Reply-To: <43B73F8D-09FB-4E25-ABF8-7A99A2EC2780@uwsp.edu> Message-ID: Hi Ryan, Nice work. We have the luxury of using the Master Collection license and files here (keep in mind we only have one full copy of Master Collection to do this imaging work), but to add to this I also have a sequence of policies that also patch the Adobe suite, and some of these don't complete unless a user is actually logged in it appears. I don't have all of the updaters tested, there are some that just never seem to work IMO, particularly on different hardware types. But to simplify the process I use: * Machine images, reboots for FirstRun * Machine installs the Adobe base at FirstRun * At the end of FirstRun a script calls a policy in the JSS * Policy creates a local installer account, applies an autlogon package for it, installs a local copy of JAMFHelper, and then reboots * Machine reboots, auto logs on with the installer account, triggers a login policy, policy triggers JAMFHelper, installs available adobe patches * The final packages the policy installs is a startupitems package, deletes autologon package, and machine reboots * At reboot startupitem script deletes installer account, deletes itself, runs a recon cycle, and then triggers a final policy so I know it finished and also uninstalls jamfhelper copy As you can see it's a fairly fun process, but it's worked fairly well. It doesn't have to be triggered just at startup after imaging. You can use that process to also patch clients by calling the same policy first run does. I can try to share more if people are interested. Craig E On 11/3/08 12:43 PM, "Ryan Harter" wrote: Hey Guys- I've been working to figure out an issue we've been having with Adobe Installers at image time for the past week or so. Between our work and Sam's at Jamf support, I think we've figured out the cause. I just thought I would share with you our symptoms and our workaround incase any of you have similar issues. The Symptoms: We have an old maintenance license for Adobe Creative Suite and therefore don't have the Master Collection, but instead we have DVDs for Photoshop, Illustrator, InDesign, etc. all as separate images. When we want to install these at image time, Casper Imaging copies all of the dmgs to the FirstRun folder and builds a FirstRun script that will install them. The problem with this is that they actually copy the FirstRun script and resources to /private/tmp before putting them on Macintosh HD and our NetInstall image can't fit all of that in it's tmp directory. The tmp directory would fill up, Casper Imaging would not error out, and we would get partial FirstRun scripts or wouldn't get one at all. The Work Around: What we ended up doing was making a policy with a custom trigger called "InstallAdobeApps." This policy just installs the Adobe Apps like normal, but since we aren't in the NetInstall environment the /private/tmp directory has the entire local disk space to work with. I wrote a script that we set to run at reboot when we image that just calls the custom trigger. One thing that I wanted to add to this was the jamfHelper.app (this window that covers the login window and tells users that it is installing Adobe apps). In order to add this functionality, I made a package that just contained the app (which can be found in the support directory inside the Casper Imaging.app package) which I had it install to /Library/Application Support/UWSP/. Note: I initially tried to install this to /tmp, which is a silly idea since /tmp gets flushed at every boot and hence the file did not remain there. The script then will check that the helper app exists, and if it does will fire it off before, and kill it after, the adobe installer policy is run. The finished script looks like this: #!/bin/bash if [ -d '/Library/Application Support/UWSP/jamfHelper.app' ]; then /usr/sbin/jamf launchJAMFHelper -path '/Library/Application Support/UWSP/jamfHelper.app' fi /usr/sbin/jamf policy -trigger AdobeInstalls if [ -d '/Library/Application Support/UWSP/jamfHelper.app' ]; then ## Unlock the login window /usr/sbin/jamf killJAMFHelper ## Remove jamfHelper /bin/rm -rf '/Library/Application Support/UWSP/' fi exit 0 I just thought I would share this since it has many other applications, especially if you want to lock down the login window. Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081103/7f73498e/attachment.html From CMyers at uclan.ac.uk Tue Nov 4 00:29:26 2008 From: CMyers at uclan.ac.uk (Criss Myers) Date: Tue, 04 Nov 2008 08:29:26 +0000 Subject: [Casper] CS 2 packaging In-Reply-To: References: <4909868A.7141.0039.0@kckps.org> <4909CDF1.BB96.0081.0@uclan.ac.uk> <49098885.7141.0039.0@kckps.org> <490ED5CD.7141.0039.0@kckps.org> Message-ID: <491007E6.BB96.0081.0@uclan.ac.uk> Hi, does anyone know what this fix is for acrobat? Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> On Mon, Nov 3, 2008 at 5:03 PM, in message , "Miles Leacy" wrote: I would suggest doing a full install or the Adobe suite, make sure everything is serialized and functioning and then use the prebuilts in Composer to generate your packages. You may also want to look into the fix for the Acrobat self-repair function if your users will not be admins (I most strenuously suggest that they not be admins, I consider this a best practice). I don't recall what the fix was off hand, but there is one out there. On Mon, Nov 3, 2008 at 11:43 AM, Thomas Larkin wrote: I am building the package now and not doing the disk images. So, when I make the package can I go back and dump everything that is put in /Library into like an adobe required then put out each CS 2 app as a separate install? I can't recall how I did that before, but the JAMF guys showed me how to do that with iLife last year. I can just drag them out in editable mode in Composer and create separate DMG files for them, correct? thanks, ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Miles Leacy" 10/30/08 10:15 AM >>> My CS2 package was a snapshot of the whole suite after running and and making sure all apps were serialized. The version of Acrobat that comes with CS2 won't run properly on its own. You have to launch another app in the suite (such as Photoshop) in order for Acrobat to "know" that its been serialized. 2008/10/30 Thomas Larkin So just combine the disk images then? Could I use composer and do snap shots? ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Criss Myers" 10/30/08 10:08 AM >>> you should be able to create 1 install disk and use that Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> On Thu, Oct 30, 2008 at 3:03 PM, in message <4909868A.7141.0039.0 at kckps.org>, "Thomas Larkin" wrote: So, I have CS 2 to install now on some older Macs... It comes on like 3 CDs, or at least my version does. Can I make 3 separate disk images of them and create them into one adobe installer in Casper Admin, or should I combine them into 1 disk image and then use the adobe installer in Casper Admin? Thoughts? Thanks, ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/037e8cb0/attachment.html From jared.nichols at ll.mit.edu Tue Nov 4 07:39:58 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Tue, 4 Nov 2008 10:39:58 -0500 Subject: [Casper] Chaining updates Message-ID: Is there any way to chain updates together? For instance, the Office 12.1.4 update just came out which requires the 12.1.3 update. 12.1.4 was released because 12.1.3 was broken. What's the best way to get people up to 12.1.4 while making sure they're not stuck on 12.1.3? Is there a way to slipstream it? j -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/1bc2803f/attachment.html From miles.leacy at themacadmin.com Tue Nov 4 07:53:52 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Tue, 4 Nov 2008 10:53:52 -0500 Subject: [Casper] Chaining updates In-Reply-To: References: Message-ID: I would set the packages to ascending priorities, then trigger them all with the same policy. Another way would be to create a smart group with the criteria of having a receipt for the first update. Scope a policy for the second update to this smart group, repeat as necessary until all updates in the chain have been covered. Before doing any of this, I would verify that update X+1 requires update X, and does not include update X. 2008/11/4 Nichols, Jared > Is there any way to chain updates together? For instance, the Office > 12.1.4 update just came out which requires the 12.1.3 update. 12.1.4 was > released because 12.1.3 was broken. What's the best way to get people up to > 12.1.4 while making sure they're not stuck on 12.1.3? Is there a way to > slipstream it? > > j > -- > Jared Nichols > ISD Infrastructure and Operations ? Desktop Engineering > MIT Lincoln Laboratory > 244 Wood St. > Lexington, MA 02420-9108 > (781) 981-5500 > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/a33f63d6/attachment.html From sean.hansell at jwt.com Tue Nov 4 07:55:12 2008 From: sean.hansell at jwt.com (sean.hansell at jwt.com) Date: Tue, 4 Nov 2008 10:55:12 -0500 Subject: [Casper] Chaining updates In-Reply-To: Message-ID: The way I've managed this is by chaining policies based on smart-groups tagge to Application version. In your case for instance, I have a smart-group whose members consist of computers running 12.1.1, and 12.1.2 (Our Office 2008 package is 12.1.1). A policy is in place to deploy 12.1.3 to that members of that smart group (make sure to remember to add "Update Inventory" to the advanced tab in the polciy. Then you can create a simliar smart group of users that have 12.1.3, and create a policy to deploy 12.1.4 to members of that second smart group. Users that have any version prior to 12.1.3 will not get 12.1.4 until they are updated to 12.1.3, as they move from one smart group to the second; "Slipstreaming", as you say. In practice the whole process happens relatively quickly and efficiently.

This transmission is intended solely for the person or organization to whom it is addressed and it may contain privileged and confidential information. If you are not the intended recipient you should not copy, distribute or take any action in reliance on it. If you believe you received this transmission in error please notify the sender.

-------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/7a3b4280/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/jpeg Size: 14361 bytes Desc: not available Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/7a3b4280/attachment-0001.jpe From swood at integerdallas.com Tue Nov 4 08:02:33 2008 From: swood at integerdallas.com (Steve Wood) Date: Tue, 04 Nov 2008 10:02:33 -0600 Subject: [Casper] Automating Server Installs In-Reply-To: Message-ID: I love InstaDMG, even though I haven?t been over following the development closely. I do not add a lot to the build train, just the major updates (10.5.5 for example), the Create User package to create the 501 user, Quick Add to get the machine into Casper, the Clear Reg to clear the registration screens, and a home grown package to drop a user picture file. The only problem I?ve noticed with the image and Casper is that I am having problems re-naming the machine when imaging it to either a name already in Casper, or to the MAC or S/N. I have not investigated this yet, and in writing this I?m questioning the wisdom of adding the Quick Add to the image and not doing it on restart or something. I?ll have to test that. On restart after imaging I have a post image script that runs to set some small things: # now set the time zone systemsetup -settimezone America/Chicago # enable network time systemsetup -setusingnetworktime on # set the time server systemsetup -setnetworktimeserver time.apple.com # set sleep times systemsetup -setcomputersleep never systemsetup -setdisplaysleep 15 # now re-run recon jamf -recon # finally, reboot shutdown -r now The script does more than that, like add another hidden user, but those are the relevant parts. I also use the images built from InstaDMG as NetBoot images. Makes life very easy. No ideas on the server side. I?ve never played around with automating a server build, simply because I don?t have a need to mass build servers. Steve Wood Director of IT swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On 10/31/08 2:16 PM, "Miles Leacy" wrote: > This message is in two parts... > > For anyone using InstaDMG with the Casper suite, I'd like to hear your > experiences. I like the idea of never having booted my base system before > dropping it. I'm curious as to how deeply we can mesh the InstaDMG concept & > methodology with the Casper tool. It seems that they should be largely > compatible. > > Secondly, I'm trying to automate my Mac OS X Server installs. Right now, I'm > just thinking through workflow conceptually. > > If I create a Netinstall image from the OS X Server install disc, I'll still > need to get a configuration file to the machine. There's the simple Apple > answer of putting the configuration file on a USB key attached to the server, > but I'm looking for a more automated way that won't require me to ever see the > server, just to know its serial number . I've got Casper, and I want to > rebuild Xserves via my iPhone at a caf? while on my way to more interesting > things. > > One thought I had was to create a traditional image at a point before going > through the server setup, and include the configuration file as a separate > package on top of the image. Theoretically, at first boot, the system should > see a config file present and use it. > > If anyone has any ideas, or better yet, proven workflows, I'd love to hear > about them. > > Thanks, > Miles > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper Steve Wood Director of IT swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/c17e6170/attachment.html From sean.m.nesbitt at lmco.com Tue Nov 4 08:22:19 2008 From: sean.m.nesbitt at lmco.com (Nesbitt, Sean M.) Date: Tue, 04 Nov 2008 10:22:19 -0600 Subject: [Casper] Acrobat self-heal fix In-Reply-To: Message-ID: Criss, Edit the following files: /Library/Application\ Support/Adobe/Acrobat/AcroENUDist80SelfHeal.xml /Library/Applicaiton\ Support/Adobe/Acrobat/AcroENUPro80SelfHeal.xml And set the following "install" keys to "NO" to disable certain items: - Safari PDF Internet Plugin, the type is "PDFViewer" - PDF Printer, the type is "AdobePDFPrinter" - Office 2004 PDF Plugin, the type is "PDFMaker" Beware of these files changing when Acrobat is updated--they have changed in the past. Sean On 11/4/08 9:55 AM, "casper-request at list.jamfsoftware.com" wrote: > Message: 1 > Date: Tue, 04 Nov 2008 08:29:26 +0000 > From: "Criss Myers" > Subject: Re: [Casper] CS 2 packaging > To: "Thomas Larkin" , "Miles Leacy" > > Cc: casper at list.jamfsoftware.com > Message-ID: <491007E6.BB96.0081.0 at uclan.ac.uk> > Content-Type: text/plain; charset="us-ascii" > > Hi, > > does anyone know what this fix is for acrobat? > > Criss > > > Criss Myers > Senior Customer Support Analyst (Mac Services) > Apple Certified Technical Coordinator v10.5 > LIS Business Support Team > Library 301 > University of Central Lancashire > Preston PR1 2HE > Ex 5054 > 01772 895054 > >>>> >>> On Mon, Nov 3, 2008 at 5:03 PM, in message >>>> , "Miles >>>> Leacy" wrote: > > I would suggest doing a full install or the Adobe suite, make sure everything > is serialized and functioning and then use the prebuilts in Composer to > generate your packages. > > > You may also want to look into the fix for the Acrobat self-repair function if > your users will not be admins (I most strenuously suggest that they not be > admins, I consider this a best practice). I don't recall what the fix was off > hand, but there is one out there. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/ca4fb7f8/attachment.html From sean.hansell at jwt.com Tue Nov 4 08:31:46 2008 From: sean.hansell at jwt.com (sean.hansell at jwt.com) Date: Tue, 4 Nov 2008 11:31:46 -0500 Subject: [Casper] Acrobat self-heal fix In-Reply-To: Message-ID: Are these the same for Acrobat 9?

This transmission is intended solely for the person or organization to whom it is addressed and it may contain privileged and confidential information. If you are not the intended recipient you should not copy, distribute or take any action in reliance on it. If you believe you received this transmission in error please notify the sender.

-------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/b011874e/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/jpeg Size: 14361 bytes Desc: not available Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/b011874e/attachment-0001.jpe From miles.leacy at themacadmin.com Tue Nov 4 08:36:50 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Tue, 4 Nov 2008 11:36:50 -0500 Subject: [Casper] Automating Server Installs In-Reply-To: References: Message-ID: Thanks for that. I'd recommend leaving quick add out of the image. You can deploy it later, or use the jamf binary to manage the machine (type "jamf help recon" in the terminal). Following the modular methodology common to both Casper and InstaDMG, I would break up your post image script into a number of smaller scripts to increase modularity. If the DNS name of your timeserver changes, you change the script that contains that command. If you stop using a timeserver, you just remove that script from your configuration or InstaDMG imaging folders. This is just my unsolicited advice, if what you have works for you, there's nothing wrong with that. On Tue, Nov 4, 2008 at 11:02 AM, Steve Wood wrote: > I love InstaDMG, even though I haven't been over following the > development closely. I do not add a lot to the build train, just the major > updates (10.5.5 for example), the Create User package to create the 501 > user, Quick Add to get the machine into Casper, the Clear Reg to clear the > registration screens, and a home grown package to drop a user picture file. > The only problem I've noticed with the image and Casper is that I am having > problems re-naming the machine when imaging it to either a name already in > Casper, or to the MAC or S/N. I have not investigated this yet, and in > writing this I'm questioning the wisdom of adding the Quick Add to the image > and not doing it on restart or something. I'll have to test that. > > On restart after imaging I have a post image script that runs to set some > small things: > > # now set the time zone > > systemsetup -settimezone America/Chicago > > # enable network time > > systemsetup -setusingnetworktime on > > # set the time server > > systemsetup -setnetworktimeserver time.apple.com > > # set sleep times > > systemsetup -setcomputersleep never > > systemsetup -setdisplaysleep 15 > > # now re-run recon > > jamf -recon > > # finally, reboot > > shutdown -r now > > The script does more than that, like add another hidden user, but those are > the relevant parts. > > I also use the images built from InstaDMG as NetBoot images. Makes life > very easy. > > > > No ideas on the server side. I've never played around with automating a > server build, simply because I don't have a need to mass build servers. > > > > *Steve Wood > *Director of IT > swood at integerdallas.com > > *The Integer Group* | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > > On 10/31/08 2:16 PM, "Miles Leacy" wrote: > > This message is in two parts... > > For anyone using InstaDMG with the Casper suite, I'd like to hear your > experiences. I like the idea of never having booted my base system before > dropping it. I'm curious as to how deeply we can mesh the InstaDMG concept > & methodology with the Casper tool. It seems that they should be largely > compatible. > > Secondly, I'm trying to automate my Mac OS X Server installs. Right now, > I'm just thinking through workflow conceptually. > > If I create a Netinstall image from the OS X Server install disc, I'll > still need to get a configuration file to the machine. There's the simple > Apple answer of putting the configuration file on a USB key attached to the > server, but I'm looking for a more automated way that won't require me to > ever see the server, just to know its serial number . I've got Casper, and > I want to rebuild Xserves via my iPhone at a caf? while on my way to more > interesting things. > > One thought I had was to create a traditional image at a point before going > through the server setup, and include the configuration file as a separate > package on top of the image. Theoretically, at first boot, the system > should see a config file present and use it. > > If anyone has any ideas, or better yet, proven workflows, I'd love to hear > about them. > > Thanks, > Miles > > > ------------------------------ > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > * > > Steve Wood > *Director of IT > swood at integerdallas.com > > *The Integer Group* | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > ------------------------------ > -- > > The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/a168b449/attachment.htm From rharter at uwsp.edu Tue Nov 4 11:03:25 2008 From: rharter at uwsp.edu (Ryan Harter) Date: Tue, 4 Nov 2008 13:03:25 -0600 Subject: [Casper] Chaining updates In-Reply-To: References: Message-ID: I haven't gotten into any updaters yet, but can't we just run composer and have it look for new and modified files, install all the updaters to MS Office, and then push the resulting package as a "slipstreamed" update. I only ask because I was just about to do that for MS Office and though someone else might have done this before. Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu On Nov 4, 2008, at 9:55 AM, sean.hansell at jwt.com wrote: > > The way I've managed this is by chaining policies based on smart- > groups tagge to Application version. > > In your case for instance, I have a smart-group whose members > consist of computers running 12.1.1, and 12.1.2 (Our Office 2008 > package is 12.1.1). A policy is in place to deploy 12.1.3 to that > members of that smart group (make sure to remember to add "Update > Inventory" to the advanced tab in the polciy. > > Then you can create a simliar smart group of users that have 12.1.3, > and create a policy to deploy 12.1.4 to members of that second smart > group. > > Users that have any version prior to 12.1.3 will not get 12.1.4 > until they are updated to 12.1.3, as they move from one smart group > to the second; "Slipstreaming", as you say. In practice the whole > process happens relatively quickly and efficiently. > > > This transmission is intended solely for the person or organization > to whom it is addressed and it may contain privileged and > confidential information. If you are not the intended recipient you > should not copy, distribute or take any action in reliance on it. If > you believe you received this transmission in error please notify > the sender. > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/9267c967/attachment.html From ERNSTCS at uwec.edu Tue Nov 4 11:26:43 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Tue, 4 Nov 2008 13:26:43 -0600 Subject: [Casper] Chaining updates In-Reply-To: Message-ID: Ryan, That's how I've done things thus far. Run composer to look for new files, remote desktop install my current package, run patches, and then clean up the package. I've only done this because some of the MPKG files I've used in the past would error out. I had this particular issue with Office 2008 SP1 in particular from an SMB share, and was given this response from support: "Certain .MPKG can be pushed with Casper but not all. The third party manufacture allows certain parameters that will prevent a proper installation. Examples include not being able to install to another partition, not be able to install over a network, etc. so our suggestion is to try and if it works then great but if not then create a composer package. So this is always an option to take when running into a problem like this." So I would follow the advice at the end there. Test test test, if it works, cool...then I'd use a packaged updater. I just make a package because then when an new machine is imaged it's just already up to date. Just a matter of preference I imagine. Craig E On 11/4/08 1:03 PM, "Ryan Harter" wrote: I haven't gotten into any updaters yet, but can't we just run composer and have it look for new and modified files, install all the updaters to MS Office, and then push the resulting package as a "slipstreamed" update. I only ask because I was just about to do that for MS Office and though someone else might have done this before. Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu On Nov 4, 2008, at 9:55 AM, sean.hansell at jwt.com wrote: The way I've managed this is by chaining policies based on smart-groups tagge to Application version. In your case for instance, I have a smart-group whose members consist of computers running 12.1.1, and 12.1.2 (Our Office 2008 package is 12.1.1). A policy is in place to deploy 12.1.3 to that members of that smart group (make sure to remember to add "Update Inventory" to the advanced tab in the polciy. Then you can create a simliar smart group of users that have 12.1.3, and create a policy to deploy 12.1.4 to members of that second smart group. Users that have any version prior to 12.1.3 will not get 12.1.4 until they are updated to 12.1.3, as they move from one smart group to the second; "Slipstreaming", as you say. In practice the whole process happens relatively quickly and efficiently. This transmission is intended solely for the person or organization to whom it is addressed and it may contain privileged and confidential information. If you are not the intended recipient you should not copy, distribute or take any action in reliance on it. If you believe you received this transmission in error please notify the sender. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/a1a087a1/attachment-0001.htm From NATHANIEL.LINDLEY at spps.org Tue Nov 4 12:19:06 2008 From: NATHANIEL.LINDLEY at spps.org (NATHANIEL.LINDLEY at spps.org) Date: Tue, 4 Nov 2008 14:19:06 -0600 Subject: [Casper] set network time at startup? Message-ID: I got Issues with timesync on dual-boot macs. We have AD which is more time sensitive now and some people are having login issues when going back and forth between Mac OS and WinXP on BootCamp. So I've been reading a lot about this and haven't found a good fix. I have the network time sync checked to time.apple.com, Windows has a policy to sync to time.apple.com also. It doesn't seem to sync all the time but usually at start and login with local account but not with AD accts all the time. I think this is partly due to the wireless not always loading to the known SSID before the Login Window loads. I'd like to set two time servers in ntpd.conf one internal and one external, for users that take their laptops home. then I'd like a startup trigger that says, sync network time. I tried ntpdate in Terminal but it says "NTP socket is in use." and in the Console, I get a lot of errors about "(org.ntp.ntpd) Unknown key: SHAutorizationRight" Challenges are that this problem is not consistent on different computers, so it is hard to recreate. Any other ideas for help? And because Casper controls startup items and login hooks, I need to send this command using Casper. http://www.macosxhints.com/article.php?story=20070507030228844 http://www.macwindows.com/bootcamp.html#013008c http://www.macwindows.com/bootcamp.html#010408x Here are some solutions?? http://www.mazadigital.com/ http://support.apple.com/kb/TA24116?viewlocale=en_US http://refit.sourceforge.net/ -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/432905df/attachment.htm From ric.getter at pcc.edu Tue Nov 4 12:47:20 2008 From: ric.getter at pcc.edu (Ric Getter) Date: Tue, 4 Nov 2008 12:47:20 -0800 Subject: [Casper] Advice on package naming conventions? Message-ID: <005801c93ebe$884e7000$98eb5000$@getter@pcc.edu> We're a large, multi-campus community college getting ready to deploy the Casper Suite. We've just gone through the Jump Start and are getting ready to build our base images, packages and configurations. As JAMF recommended, we're planning on having a single "librarian" manage the entries on the Casper server. Having been involved in similar ventures, I understand the value of setting up a good naming convention system early in the game. We have a good system for naming computers already in place, but it appears that we're going to have a fair number of packages and a potentially huge number of configurations on file. I would greatly appreciate any suggestions or samples you can offer. Feel free to forward any files or attachments directly to my e-mail address, ric.getter at pcc.edu. Thanks, Ric -- Ric Getter Portland Community College/Sylvania Coordinator, Computer Resource Center (503)977-8036 From NATHANIEL.LINDLEY at spps.org Tue Nov 4 12:55:21 2008 From: NATHANIEL.LINDLEY at spps.org (NATHANIEL.LINDLEY at spps.org) Date: Tue, 4 Nov 2008 14:55:21 -0600 Subject: [Casper] Advice on package naming conventions? In-Reply-To: <005801c93ebe$884e7000$98eb5000$@getter@pcc.edu> Message-ID: Ric, Here in K-12 land we may do things differently and I've changed naming conventions only once since starting. I would be too hard to start over. I set a couple Groups in Casper Admin for packages and scripts and name them with abbreviations from the groups. Example, Curriculum is the group and "CUR-" is the prefix of the package name. We also avoid using spaces in the package name. I think that Craig might have showed me this process at our CCA class. Now with Self-Serivce, I might be adding a group in there that is independednt of the type of package. I have these package and script Groups. CUR - Curriculm (content related apps, Comic life, Google Earth, Everyday Math, SmartBoard, etc.) ENT -Enterprise Apps (Read180, FasttMath) MM - Multimedia (iLife, Audacity, Adobe) OS - OS packages (OS builds, Parallels, OS updaters ) PRO - Productivity (MS OFfice, Firefox, FileMaker Pro) UEV - User Environment (dock settings, etc. ) UTL - Utilities (Recon, Text Wrangler, AV, etc.) The ones I've added for Self -Service Printers, Primary and Secondary (grades) So far this is working, but I'm not sure it is the best way for everyone. -Nathaniel Saint Paul Public Schools, MN "Ric Getter" Sent by: casper-bounces at list.jamfsoftware.com 11/04/08 02:41 PM Please respond to ric.getter at pcc.edu To cc Subject [Casper] Advice on package naming conventions? We're a large, multi-campus community college getting ready to deploy the Casper Suite. We've just gone through the Jump Start and are getting ready to build our base images, packages and configurations. As JAMF recommended, we're planning on having a single "librarian" manage the entries on the Casper server. Having been involved in similar ventures, I understand the value of setting up a good naming convention system early in the game. We have a good system for naming computers already in place, but it appears that we're going to have a fair number of packages and a potentially huge number of configurations on file. I would greatly appreciate any suggestions or samples you can offer. Feel free to forward any files or attachments directly to my e-mail address, ric.getter at pcc.edu. Thanks, Ric -- Ric Getter Portland Community College/Sylvania Coordinator, Computer Resource Center (503)977-8036 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/79406495/attachment.html From ERNSTCS at uwec.edu Tue Nov 4 13:24:51 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Tue, 4 Nov 2008 15:24:51 -0600 Subject: [Casper] Advice on package naming conventions? In-Reply-To: <005801c93ebe$884e7000$98eb5000$@getter@pcc.edu> Message-ID: Hi Ric, The format we've used here is basically how we would organize things in a "start menu" type scenario, but basically making logical categories. You'll find that everyone does it differently. We have the following categories and description of what they contain in our system, and most of these pre-date my managing this system: Adobe - It became so many packages it had to become it's own, was in suites, but could even break this down to AdobeCS3, AdobeCS4, if you like Classic - OS9 Apps Common Applications - Applications that get deployed everywhere by default that don't fit into any other category (Examples: Google Earth, SPSS) Departmental - If specific department requests/purchases software for a limited set of locations it goes here, it's like Common Applications Graphics & Web Design - Graphical applictions and web editors (Example: Poser) Hardware - Scanners, Printers, etc. Internet - Browsers, IM Clients, Telnet, FTP Languages - Basically the language packs for the OS if it needs to be delpoyed after the fact Multimedia - Audio (Audacity), Video (iMovie), Disc Authoring (iDVD), Media Players (Real, QuickTime, Flip4Mac) Office - Office suites (Office 2008, Office 2004, NeoOffice, etc.) OS - Base OS Images Printers - DUH Scripts - All our scripts are just in one category, but we never had a lot of them to deal with to sort them out Suites - This group was an afterthought, but iLife is the only thing in here, and could go back under Common Apps System Configuration - Any packages that modify the operating system and its settings User Environment - Any packages that modify a user's experience and settings Utilities - Utility applications like Adobe Reader, KeyServer Client, Self Service, Recon, Refit, Stuffit, etc. When we create a package we then (almost always) put the prefix of the category on the package, or at least an abbreviation of it. Some examples: internet-Firefox_3.0.3 office-2008_12.1.4 os-X.5.4 ue-X5_Universal_Dock (Short for user environment, and X5 meaning for Leopard) sys-res-1024x768x32x75 (Short for system configuration) You get the jist of it. The other thing we do with each package is have a folder at the root of the drive called 'Shortcuts', and then we build a folder structure for these categories and in some instances sub-categories, and place an alias to the application in the appropriate folder. We then place the shortcuts folder as part of the dock as a list so it expands out and does act as a menu for users to access applications if they aren't accustomed to browsing the hard drive, using Spotlight, or whatever people prefer to use. I attached some screens, but they may not go through so if you're interested just email me. With the Shortcuts keep in mind that some categories like Adobe apps and iLife Suite apps have aliases in different places within the Shortcuts folder. Is some of it right or wrong sure...again that's up to you to do what you want. I'm sure we could spend a good day or two here arguing about it. Craig E On 11/4/08 2:47 PM, "Ric Getter" wrote: We're a large, multi-campus community college getting ready to deploy the Casper Suite. We've just gone through the Jump Start and are getting ready to build our base images, packages and configurations. As JAMF recommended, we're planning on having a single "librarian" manage the entries on the Casper server. Having been involved in similar ventures, I understand the value of setting up a good naming convention system early in the game. We have a good system for naming computers already in place, but it appears that we're going to have a fair number of packages and a potentially huge number of configurations on file. I would greatly appreciate any suggestions or samples you can offer. Feel free to forward any files or attachments directly to my e-mail address, ric.getter at pcc.edu. Thanks, Ric -- Ric Getter Portland Community College/Sylvania Coordinator, Computer Resource Center (503)977-8036 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/732b4072/attachment-0001.html -------------- next part -------------- A non-text attachment was scrubbed... Name: Picture 1.png Type: application/octet-stream Size: 121849 bytes Desc: Picture 1.png Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/732b4072/attachment-0003.obj -------------- next part -------------- A non-text attachment was scrubbed... Name: Picture 2.png Type: application/octet-stream Size: 143060 bytes Desc: Picture 2.png Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/732b4072/attachment-0004.obj -------------- next part -------------- A non-text attachment was scrubbed... Name: Picture 3.png Type: application/octet-stream Size: 100397 bytes Desc: Picture 3.png Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081104/732b4072/attachment-0005.obj From william.smith at merrillcorp.com Tue Nov 4 14:44:14 2008 From: william.smith at merrillcorp.com (Smith, William) Date: Tue, 04 Nov 2008 16:44:14 -0600 Subject: [Casper] Advice on package naming conventions? In-Reply-To: <005801c93ebe$884e7000$98eb5000$@getter@pcc.edu> Message-ID: On 11/4/08 2:47 PM, "Ric Getter" wrote: > We're a large, multi-campus community college getting ready to deploy the > Casper Suite. We've just gone through the Jump Start and are getting ready > to build our base images, packages and configurations. As JAMF recommended, > we're planning on having a single "librarian" manage the entries on the > Casper server. > > Having been involved in similar ventures, I understand the value of setting > up a good naming convention system early in the game. We have a good system > for naming computers already in place, but it appears that we're going to > have a fair number of packages and a potentially huge number of > configurations on file. Our structure may not be of any interest to you but I do have a few suggestions: 1. Use abbreviations sparingly. If you have a few site codes or department codes then that's OK, but I'm referring to applications. Trying to interpret one person's "QXP652" into "QuarkXPres 6.52" or translate "APSCS3" as "Adobe Photoshop CS3" is a royal pain. No one will abbreviate the same. You have 250+ characters for file names. Use'em. Spell names fully UsingUpperLowerCase so that they are readable. 2. Include version numbers for every package. We have a group that likes to push minor updates every once in a while. Instead of updating and reusing a 1.0 package I duplicate it and version it to 1.1 or 1.2, etc. This lets me roll back if necessary. It also allows me to use a policy to uninstall 1.0 and install 1.1 at the same time. 3. Determine a naming convention for different types of packages: Application (without serial numbers) Serial numbers Preferences 4. Include licensing in your names. If you have a serial number file then include all or part of the serial number in the name to identity it. Do NOT use the group name or the owner. Licenses can be transferred between groups and people. You don't want to have to rename a package file and change your JSS just because you're assigning a license to a different group. Altogether for an application like DeltaGraph I would have three files: Application package DeltaGraph5.7.3-UL-1.0.dmg Serial number package DeltaGraph5.7.3-0123456789-1.0.dmg (serial number file) Preferences package PreferencesDeltaGraph5.7.3-Comp-UL-1.0.dmg "Comp" in the preferences package is for our "Composition" group. They would have their own set of default preferences compared to "Mkt", which is our "Marketing" group. I use "UL" (UL = "Unlicensed" or "Unlimited) in names of packages that have no serial numbers within them to let me know that I don't have to worry about licensing for that particular package. Without the serial number package, the application is useless. And as a matter of habit I stick to upper/lower case letters, numbers, dashes and periods. No spaces or other symbols, which may make transferring to Windows servers or backup media difficult. -- bill William M. Smith, Technical Analyst MCS IT Merrill Communications, LLC (651) 632-1492 From CMyers at uclan.ac.uk Wed Nov 5 00:57:20 2008 From: CMyers at uclan.ac.uk (Criss Myers) Date: Wed, 05 Nov 2008 08:57:20 +0000 Subject: [Casper] Advice on package naming conventions? In-Reply-To: References: <005801c93ebe$884e7000$98eb5000$@getter@pcc.edu> Message-ID: <49115FEF.BB96.0081.0@uclan.ac.uk> Hi Ric, As i like to have all macs with roughly the same configuration and software and as my macs are used by all the University I probaly set mine up differently I have Configurations based on different usages, Development (for my use) Digital Dark Room Laptops Open Access / Teaching Project Studios Staff Lab OS Only Testing I then set my categories based on application types etc Adobe Apple Updates Audio Core OS Core Software Drivers Login / Logout Hooks Printers Scanners Scripts Staff Testing Utilities Video OutDated / Removed I then have categories for my polices : Monthly After Imaging Startup Items Temporary Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> On Tue, Nov 4, 2008 at 9:24 PM, in message , "Ernst, Craig S." wrote: Hi Ric, The format we?ve used here is basically how we would organize things in a ?start menu? type scenario, but basically making logical categories. You?ll find that everyone does it differently. We have the following categories and description of what they contain in our system, and most of these pre-date my managing this system: Adobe * It became so many packages it had to become it?s own, was in suites, but could even break this down to AdobeCS3, AdobeCS4, if you like Classic * OS9 Apps Common Applications * Applications that get deployed everywhere by default that don?t fit into any other category (Examples: Google Earth, SPSS) Departmental * If specific department requests/purchases software for a limited set of locations it goes here, it?s like Common Applications Graphics & Web Design * Graphical applictions and web editors (Example: Poser) Hardware * Scanners, Printers, etc. Internet * Browsers, IM Clients, Telnet, FTP Languages * Basically the language packs for the OS if it needs to be delpoyed after the fact Multimedia * Audio (Audacity), Video (iMovie), Disc Authoring (iDVD), Media Players (Real, QuickTime, Flip4Mac) Office * Office suites (Office 2008, Office 2004, NeoOffice, etc.) OS * Base OS Images Printers - DUH Scripts * All our scripts are just in one category, but we never had a lot of them to deal with to sort them out Suites * This group was an afterthought, but iLife is the only thing in here, and could go back under Common Apps System Configuration * Any packages that modify the operating system and its settings User Environment * Any packages that modify a user?s experience and settings Utilities * Utility applications like Adobe Reader, KeyServer Client, Self Service, Recon, Refit, Stuffit, etc. When we create a package we then (almost always) put the prefix of the category on the package, or at least an abbreviation of it. Some examples: internet-Firefox_3.0.3 office-2008_12.1.4 os-X.5.4 ue-X5_Universal_Dock (Short for user environment, and X5 meaning for Leopard) sys-res-1024x768x32x75 (Short for system configuration) You get the jist of it. The other thing we do with each package is have a folder at the root of the drive called ?Shortcuts?, and then we build a folder structure for these categories and in some instances sub-categories, and place an alias to the application in the appropriate folder. We then place the shortcuts folder as part of the dock as a list so it expands out and does act as a menu for users to access applications if they aren?t accustomed to browsing the hard drive, using Spotlight, or whatever people prefer to use. I attached some screens, but they may not go through so if you?re interested just email me. With the Shortcuts keep in mind that some categories like Adobe apps and iLife Suite apps have aliases in different places within the Shortcuts folder. Is some of it right or wrong sure...again that?s up to you to do what you want. I?m sure we could spend a good day or two here arguing about it. Craig E On 11/4/08 2:47 PM, "Ric Getter" wrote: We're a large, multi-campus community college getting ready to deploy the Casper Suite. We've just gone through the Jump Start and are getting ready to build our base images, packages and configurations. As JAMF recommended, we're planning on having a single "librarian" manage the entries on the Casper server. Having been involved in similar ventures, I understand the value of setting up a good naming convention system early in the game. We have a good system for naming computers already in place, but it appears that we're going to have a fair number of packages and a potentially huge number of configurations on file. I would greatly appreciate any suggestions or samples you can offer. Feel free to forward any files or attachments directly to my e-mail address, ric.getter at pcc.edu. Thanks, Ric -- Ric Getter Portland Community College/Sylvania Coordinator, Computer Resource Center (503)977-8036 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081105/8d8fddc1/attachment.html From jstrauss at loyolahs.edu Wed Nov 5 08:20:35 2008 From: jstrauss at loyolahs.edu (Jeff Strauss) Date: Wed, 5 Nov 2008 08:20:35 -0800 Subject: [Casper] Self Service updates Message-ID: Hi all, If a new version of software is released can I just push it out and install it over the old version, or are there maintenance steps I have to take first? Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 [cid:3308718035_120798] -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081105/a55213c8/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: image.gif Type: image/gif Size: 4290 bytes Desc: image.gif Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081105/a55213c8/attachment-0001.gif From Matt.Matsuno at Mattel.com Wed Nov 5 07:53:12 2008 From: Matt.Matsuno at Mattel.com (Matsuno, Matt) Date: Wed, 05 Nov 2008 07:53:12 -0800 Subject: [Casper] Acrobat Pro Message-ID: Hey everyone, quick question: How are you guys running the Acrobat Pro updates? Added the AcroProUpd813_all.dmg through Casper Admin and it?s complaining that it?s not a Valid Adobe Installer or Adobe Updater... -- Thanks Matt Matsuno 310.252.5221 -------------------------------------------------------- This message (including any attachments) is only for the use of the person(s) for whom it is intended. It may contain Mattel confidential and/or trade secret information. If you are not the intended recipient, you should not copy, distribute or use this information for any purpose, and you should delete this message and inform the sender immediately. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081105/5f3b7879/attachment.html From damien at mac.com Wed Nov 5 14:03:01 2008 From: damien at mac.com (Damien Weiss) Date: Wed, 5 Nov 2008 17:03:01 -0500 Subject: [Casper] Self Service Packages Not Verifying? In-Reply-To: References: Message-ID: <902B526A-F8ED-43C4-8470-F1437AD1E2E0@mac.com> Folks: I've been able to create Self Service packages and policies while at the CCA training, but when I have arrived in the office, nothing seems to work (typical). I've pared down the problem to a Prebuilt package. Trigger is None. Frequency is Ongoing. Scope is All Computers. "Allow this Policy to be user for Self Service" is checked on. Finally, a package that I have manually confirmed as good is set to "Install". When I go in Self Service, everything looks good, and the app goes through some motions when I click on Install, however nothing's installed on the client. Here's what I get on the server log side, however: /usr/sbin/jamf is version 6.01 Executing Policy AJA Kona... Downloading http://casper:80//Packages//AJA_Kona_Test.dmg... Verifying DMG... Error: The downloaded package could not be verified. Any ideas? Thanks, Damien -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081105/fd36379a/attachment.html From NATHANIEL.LINDLEY at spps.org Wed Nov 5 19:28:03 2008 From: NATHANIEL.LINDLEY at spps.org (NATHANIEL.LINDLEY at spps.org) Date: Wed, 5 Nov 2008 21:28:03 -0600 Subject: [Casper] Self Service Packages Not Verifying? In-Reply-To: <902B526A-F8ED-43C4-8470-F1437AD1E2E0@mac.com> Message-ID: Damien, Try forcing the policy or package to download over AFP only and see if it works. You might have to disable http: for that sharepoint. I had some issues with packages delieverd over http so am only using AFP for now. Really want to use http when it works though. -Nathaniel Damien Weiss Sent by: casper-bounces at list.jamfsoftware.com 11/05/08 03:57 PM To Casper Listserv cc Subject [Casper] Self Service Packages Not Verifying? Folks: I've been able to create Self Service packages and policies while at the CCA training, but when I have arrived in the office, nothing seems to work (typical). I've pared down the problem to a Prebuilt package. Trigger is None. Frequency is Ongoing. Scope is All Computers. "Allow this Policy to be user for Self Service" is checked on. Finally, a package that I have manually confirmed as good is set to "Install". When I go in Self Service, everything looks good, and the app goes through some motions when I click on Install, however nothing's installed on the client. Here's what I get on the server log side, however: /usr/sbin/jamf is version 6.01 Executing Policy AJA Kona... Downloading http://casper:80//Packages//AJA_Kona_Test.dmg... Verifying DMG... Error: The downloaded package could not be verified. Any ideas? Thanks, Damien_______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081105/4304fcc8/attachment.htm From mahughe at kckps.org Thu Nov 6 13:44:39 2008 From: mahughe at kckps.org (Mark Hughes) Date: Thu, 06 Nov 2008 15:44:39 -0600 Subject: [Casper] Partitioning Macintosh HD during Imaging Message-ID: <49131020020000A300006CAE@gwoes4.kckps.org> We are setting up images and netbooting across our network. We have the image part down no problem. We are wanting to split up the HD into a OS partition and a data partition. For some reason the script we are using errors out during the imaging process, however, when we run it thru target mode to a machine it works perfectly. We are imaging eMacs to 10.4.11. The error from the jss log is as follows: Result of running split_part.sh was: Partitioning encountered error Could not unmount disk (-10000) on disk disk0 The scripts is as follows: #!/bin/sh #create two partitions, one data and one for the OS /usr/sbin/diskutil partitionDisk disk0 2 HFS+ 'Macintosh HD' 50G HFS+ data 23G echo 'done' any ideas? Thanks in advanced.... Mark Hughes, Apple Technician TIS Department, KCKPS USD500 Cell 913-449-7791 mahughe at kckps.org From miles.leacy at themacadmin.com Thu Nov 6 13:52:15 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Thu, 6 Nov 2008 16:52:15 -0500 Subject: [Casper] Partitioning Macintosh HD during Imaging In-Reply-To: <49131020020000A300006CAE@gwoes4.kckps.org> References: <49131020020000A300006CAE@gwoes4.kckps.org> Message-ID: What are you booted from when you perform the partitioning? Tiger or Leopard? The following command is what I typically use. diskutil partitionDisk disk0 3 HFS+ Macintosh\ HD 40G HFS+ Restore 20G HFS+ Data 0b Note that the command above will create a 40 GB Macintosh HD, a 20 GB Restore (highly recommended), and the "0b" size notation translates to all available space. Using "0b" allows you to partition any drive without worrying about leaving unused free space on the disk. I'm not familiar with the single quotes on a volume name. I've always just escaped the necessary characters. Here's the command I would use given the parameters listed in your script... /usr/sbin/diskutil partitionDisk disk0 2 HFS+ Macintosh\ HD 50G HFS+ data 23G On Thu, Nov 6, 2008 at 4:44 PM, Mark Hughes wrote: > We are setting up images and netbooting across our network. We have the > image part down no problem. > We are wanting to split up the HD into a OS partition and a data partition. > > For some reason the script we are using errors out during the imaging > process, however, when > we run it thru target mode to a machine it works perfectly. We are imaging > eMacs to 10.4.11. > > The error from the jss log is as follows: > > Result of running split_part.sh was: Partitioning encountered error Could > not unmount disk (-10000) on disk disk0 > > The scripts is as follows: > > #!/bin/sh > > #create two partitions, one data and one for the OS > > /usr/sbin/diskutil partitionDisk disk0 2 HFS+ 'Macintosh HD' 50G HFS+ data > 23G > > echo 'done' > > any ideas? > > Thanks in advanced.... > > > Mark Hughes, Apple Technician > TIS Department, KCKPS USD500 > Cell 913-449-7791 > mahughe at kckps.org > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081106/aba52cb3/attachment.html From NATHANIEL.LINDLEY at spps.org Thu Nov 6 13:52:29 2008 From: NATHANIEL.LINDLEY at spps.org (NATHANIEL.LINDLEY at spps.org) Date: Thu, 6 Nov 2008 15:52:29 -0600 Subject: [Casper] Partitioning Macintosh HD during Imaging In-Reply-To: <49131020020000A300006CAE@gwoes4.kckps.org> Message-ID: I saw this strange problem, too. Check what the disk# is when netbooted vs. firewire. when I netboot the it is disk0 and with firewire it is disk1 check using "diskutil list" in Terminal -Nathaniel "Mark Hughes" Sent by: casper-bounces at list.jamfsoftware.com 11/06/2008 03:35 PM To cc Subject [Casper] Partitioning Macintosh HD during Imaging We are setting up images and netbooting across our network. We have the image part down no problem. We are wanting to split up the HD into a OS partition and a data partition. For some reason the script we are using errors out during the imaging process, however, when we run it thru target mode to a machine it works perfectly. We are imaging eMacs to 10.4.11. The error from the jss log is as follows: Result of running split_part.sh was: Partitioning encountered error Could not unmount disk (-10000) on disk disk0 The scripts is as follows: #!/bin/sh #create two partitions, one data and one for the OS /usr/sbin/diskutil partitionDisk disk0 2 HFS+ 'Macintosh HD' 50G HFS+ data 23G echo 'done' any ideas? Thanks in advanced.... Mark Hughes, Apple Technician TIS Department, KCKPS USD500 Cell 913-449-7791 mahughe at kckps.org _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081106/130626b4/attachment.htm From rharter at uwsp.edu Thu Nov 6 14:01:35 2008 From: rharter at uwsp.edu (Ryan Harter) Date: Thu, 6 Nov 2008 16:01:35 -0600 Subject: [Casper] Partitioning Macintosh HD during Imaging In-Reply-To: <49131020020000A300006CAE@gwoes4.kckps.org> References: <49131020020000A300006CAE@gwoes4.kckps.org> Message-ID: <97F28DCE-F0F1-48AF-9C4B-A70CFBDB2975@uwsp.edu> Also if you are netbooted you will need to make sure that you have checked "diskless" on your netboot image on the server. Otherwise it uses the local disk for "shadow" files and can't unmount it because it is in use. Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu On Nov 6, 2008, at 3:44 PM, Mark Hughes wrote: > We are setting up images and netbooting across our network. We have > the image part down no problem. > We are wanting to split up the HD into a OS partition and a data > partition. > > For some reason the script we are using errors out during the > imaging process, however, when > we run it thru target mode to a machine it works perfectly. We are > imaging eMacs to 10.4.11. > > The error from the jss log is as follows: > > Result of running split_part.sh was: Partitioning encountered error > Could not unmount disk (-10000) on disk disk0 > > The scripts is as follows: > > #!/bin/sh > > #create two partitions, one data and one for the OS > > /usr/sbin/diskutil partitionDisk disk0 2 HFS+ 'Macintosh HD' 50G HFS > + data 23G > > echo 'done' > > any ideas? > > Thanks in advanced.... > > > Mark Hughes, Apple Technician > TIS Department, KCKPS USD500 > Cell 913-449-7791 > mahughe at kckps.org > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081106/90927f5f/attachment.htm From tlarki at kckps.org Thu Nov 6 14:01:57 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 06 Nov 2008 16:01:57 -0600 Subject: [Casper] Partitioning Macintosh HD during Imaging In-Reply-To: References: <49131020020000A300006CAE@gwoes4.kckps.org> Message-ID: <491314F5.7141.0039.0@kckps.org> The weird thing is guys and gals, is that I also have a simple one liner pre image script that uses diskutil to create a single partition on disk0 and name it Macintosh HD, just in case the users changed the volume name. That script works, I used the same code in this script and it doesn't work while imaging, but if you run it manually, no problem works like a champ. Casper version 6.01 >>> 11/06/08 3:52 PM >>> I saw this strange problem, too. Check what the disk# is when netbooted vs. firewire. when I netboot the it is disk0 and with firewire it is disk1 check using "diskutil list" in Terminal -Nathaniel "Mark Hughes" Sent by: casper-bounces at list.jamfsoftware.com 11/06/2008 03:35 PM To cc Subject [Casper] Partitioning Macintosh HD during Imaging We are setting up images and netbooting across our network. We have the image part down no problem. We are wanting to split up the HD into a OS partition and a data partition. For some reason the script we are using errors out during the imaging process, however, when we run it thru target mode to a machine it works perfectly. We are imaging eMacs to 10.4.11. The error from the jss log is as follows: Result of running split_part.sh was: Partitioning encountered error Could not unmount disk (-10000) on disk disk0 The scripts is as follows: #!/bin/sh #create two partitions, one data and one for the OS /usr/sbin/diskutil partitionDisk disk0 2 HFS+ 'Macintosh HD' 50G HFS+ data 23G echo 'done' any ideas? Thanks in advanced.... Mark Hughes, Apple Technician TIS Department, KCKPS USD500 Cell 913-449-7791 mahughe at kckps.org _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081106/0a59ae66/attachment.html From CMyers at uclan.ac.uk Fri Nov 7 00:12:25 2008 From: CMyers at uclan.ac.uk (Criss Myers) Date: Fri, 07 Nov 2008 08:12:25 +0000 Subject: [Casper] Partitioning Macintosh HD during Imaging In-Reply-To: <491314F5.7141.0039.0@kckps.org> References: <49131020020000A300006CAE@gwoes4.kckps.org> <491314F5.7141.0039.0@kckps.org> Message-ID: <4913F868.BB96.0081.0@uclan.ac.uk> This is what i use #!/bin/sh diskutil partitionDisk disk0 2 GPTFormat "HFS+" "Macintosh HD" "80%" "MS-DOS" "Windows" "20%" diskutil enableJournal disk0s2 i run it as the first script before anything else, I netinstall using caspers netinstall, Im runinng 10.5.4 netinstall and client image Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> On Thu, Nov 6, 2008 at 10:01 PM, in message <491314F5.7141.0039.0 at kckps.org>, "Thomas Larkin" wrote: The weird thing is guys and gals, is that I also have a simple one liner pre image script that uses diskutil to create a single partition on disk0 and name it Macintosh HD, just in case the users changed the volume name. That script works, I used the same code in this script and it doesn't work while imaging, but if you run it manually, no problem works like a champ. Casper version 6.01 >>> 11/06/08 3:52 PM >>> I saw this strange problem, too. Check what the disk# is when netbooted vs. firewire. when I netboot the it is disk0 and with firewire it is disk1 check using "diskutil list" in Terminal -Nathaniel "Mark Hughes" Sent by: casper-bounces at list.jamfsoftware.com 11/06/2008 03:35 PM To cc Subject [Casper] Partitioning Macintosh HD during Imaging We are setting up images and netbooting across our network. We have the image part down no problem. We are wanting to split up the HD into a OS partition and a data partition. For some reason the script we are using errors out during the imaging process, however, when we run it thru target mode to a machine it works perfectly. We are imaging eMacs to 10.4.11. The error from the jss log is as follows: Result of running split_part.sh was: Partitioning encountered error Could not unmount disk (-10000) on disk disk0 The scripts is as follows: #!/bin/sh #create two partitions, one data and one for the OS /usr/sbin/diskutil partitionDisk disk0 2 HFS+ 'Macintosh HD' 50G HFS+ data 23G echo 'done' any ideas? Thanks in advanced.... Mark Hughes, Apple Technician TIS Department, KCKPS USD500 Cell 913-449-7791 mahughe at kckps.org _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081107/9e905579/attachment.htm From mahughe at kckps.org Fri Nov 7 06:19:39 2008 From: mahughe at kckps.org (Mark Hughes) Date: Fri, 07 Nov 2008 08:19:39 -0600 Subject: [Casper] Partitioning Macintosh HD during Imaging Message-ID: <4913FA1C020000A300006D36@gwoes4.kckps.org> okay...this tip got the process to split the drive how we wanted it. Though it seems as if we are in a netboot loop. The test machine now netboots on each restart back to casper imaging. Mark Hughes, Apple Technician TIS Department, KCKPS USD500 Cell 913-449-7791 mahughe at kckps.org >>> Ryan Harter 11/06/08 4:09 PM >>> Also if you are netbooted you will need to make sure that you have checked "diskless" on your netboot image on the server. Otherwise it uses the local disk for "shadow" files and can't unmount it because it is in use. Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu On Nov 6, 2008, at 3:44 PM, Mark Hughes wrote: > We are setting up images and netbooting across our network. We have > the image part down no problem. > We are wanting to split up the HD into a OS partition and a data > partition. > > For some reason the script we are using errors out during the > imaging process, however, when > we run it thru target mode to a machine it works perfectly. We are > imaging eMacs to 10.4.11. > > The error from the jss log is as follows: > > Result of running split_part.sh was: Partitioning encountered error > Could not unmount disk (-10000) on disk disk0 > > The scripts is as follows: > > #!/bin/sh > > #create two partitions, one data and one for the OS > > /usr/sbin/diskutil partitionDisk disk0 2 HFS+ 'Macintosh HD' 50G HFS > + data 23G > > echo 'done' > > any ideas? > > Thanks in advanced.... > > > Mark Hughes, Apple Technician > TIS Department, KCKPS USD500 > Cell 913-449-7791 > mahughe at kckps.org > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper From Ryan.Harter at uwsp.edu Fri Nov 7 06:31:12 2008 From: Ryan.Harter at uwsp.edu (Ryan Harter) Date: Fri, 7 Nov 2008 08:31:12 -0600 Subject: [Casper] Partitioning Macintosh HD during Imaging In-Reply-To: <4913FA1C020000A300006D36@gwoes4.kckps.org> References: <4913FA1C020000A300006D36@gwoes4.kckps.org> Message-ID: In theory the Casper Installer could get confused when you repartition the space, as to what to set the boot device too. You could perhaps add to your script after you partition the drive to 'bless' it. This way, even if Casper forgets to set the boot volume, you have already done it manually. I'm not entirely up to speed with the bless command, but I think Bombich has some good info on it, or you could 'man bless'. Hope it helps, Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu On Nov 7, 2008, at 8:19 AM, Mark Hughes wrote: > okay...this tip got the process to split the drive how we wanted > it. Though it seems as if we are in a > netboot loop. The test machine now netboots on each restart back to > casper imaging. > > Mark Hughes, Apple Technician > TIS Department, KCKPS USD500 > Cell 913-449-7791 > mahughe at kckps.org >>>> Ryan Harter 11/06/08 4:09 PM >>> > Also if you are netbooted you will need to make sure that you have > checked "diskless" on your netboot image on the server. Otherwise it > uses the local disk for "shadow" files and can't unmount it because it > is in use. > > Ryan Harter > UW - Stevens Point > Workstation Developer > 715.346.2716 > Ryan.Harter at uwsp.edu > > On Nov 6, 2008, at 3:44 PM, Mark Hughes wrote: > >> We are setting up images and netbooting across our network. We have >> the image part down no problem. >> We are wanting to split up the HD into a OS partition and a data >> partition. >> >> For some reason the script we are using errors out during the >> imaging process, however, when >> we run it thru target mode to a machine it works perfectly. We are >> imaging eMacs to 10.4.11. >> >> The error from the jss log is as follows: >> >> Result of running split_part.sh was: Partitioning encountered error >> Could not unmount disk (-10000) on disk disk0 >> >> The scripts is as follows: >> >> #!/bin/sh >> >> #create two partitions, one data and one for the OS >> >> /usr/sbin/diskutil partitionDisk disk0 2 HFS+ 'Macintosh HD' 50G HFS >> + data 23G >> >> echo 'done' >> >> any ideas? >> >> Thanks in advanced.... >> >> >> Mark Hughes, Apple Technician >> TIS Department, KCKPS USD500 >> Cell 913-449-7791 >> mahughe at kckps.org >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081107/68a321ee/attachment.html From Cyrus.Vahhaji at bestbuy.com Fri Nov 7 07:32:17 2008 From: Cyrus.Vahhaji at bestbuy.com (Cyrus Vahhaji) Date: Fri, 07 Nov 2008 09:32:17 -0600 Subject: [Casper] Scripting help Message-ID: Questions for scripting experts. I?m trying to run this as a script and for some reason its not running. Here is what I?ve scripted. #!/bin/sh dsconfigad -groups "NA\domain admins,NA\enterprise admins,NA\bby-r-corpworkstationadmin-wk-f,NA\bby-r-MacAdminUsers-WK-F" Does anything jump out that prevents this from running? After running the script using Casper the log says it can?t be found which I?m guessing there is a syntax error somewhere? Thanx, Cyrus -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081107/843a45b2/attachment-0001.html From miles.leacy at themacadmin.com Fri Nov 7 07:35:39 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Fri, 7 Nov 2008 10:35:39 -0500 Subject: [Casper] Scripting help In-Reply-To: References: Message-ID: It would help if you tell us what you're trying to accomplish with the script. I can alter this and make it do a bunch of different things. 2008/11/7 Cyrus Vahhaji > Questions for scripting experts. I'm trying to run this as a script and > for some reason its not running. Here is what I've scripted. > > > #!/bin/sh > > dsconfigad -groups "NA\domain admins,NA\enterprise > admins,NA\bby-r-corpworkstationadmin-wk-f,NA\bby-r-MacAdminUsers-WK-F" > > Does anything jump out that prevents this from running? After running the > script using Casper the log says it can't be found which I'm guessing there > is a syntax error somewhere? > > Thanx, > Cyrus > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081107/78293e77/attachment.html From ERNSTCS at uwec.edu Fri Nov 7 07:35:53 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Fri, 7 Nov 2008 09:35:53 -0600 Subject: [Casper] Scripting help In-Reply-To: Message-ID: The log says those groups can't be found or that the scripts can't be found? Craig E On 11/7/08 9:32 AM, "Cyrus Vahhaji" wrote: Questions for scripting experts. I'm trying to run this as a script and for some reason its not running. Here is what I've scripted. #!/bin/sh dsconfigad -groups "NA\domain admins,NA\enterprise admins,NA\bby-r-corpworkstationadmin-wk-f,NA\bby-r-MacAdminUsers-WK-F" Does anything jump out that prevents this from running? After running the script using Casper the log says it can't be found which I'm guessing there is a syntax error somewhere? Thanx, Cyrus -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081107/553a4219/attachment.htm From ERNSTCS at uwec.edu Fri Nov 7 07:41:03 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Fri, 7 Nov 2008 09:41:03 -0600 Subject: [Casper] Scripting help In-Reply-To: Message-ID: I have basically the same thing so I'm not sure what the issue is. If the machine is already bound you don't need to specify the domain in front of the names. -- #!/bin/sh ###################################################### ## This script will add the following group later to AD bindings. ## Created Wednesday, January 9, 2008 - ERNSTCS ###################################################### sleep 90 /usr/sbin/dsconfigad -groups "LAB.BITS.ADMINS,LAB.ADMINS" -- I have a sleep in there to make sure the services needed to do this are running. This script runs at FirstRun after imaging so I make sure the AD binding part has finished first with the sleep. You trust your domain and enterprise admins? =) If the JAMF log is saying it can't even find your script that's a different problem. What happens if you run this script locally on a machine? Craig E On 11/7/08 9:32 AM, "Cyrus Vahhaji" wrote: Questions for scripting experts. I'm trying to run this as a script and for some reason its not running. Here is what I've scripted. #!/bin/sh dsconfigad -groups "NA\domain admins,NA\enterprise admins,NA\bby-r-corpworkstationadmin-wk-f,NA\bby-r-MacAdminUsers-WK-F" Does anything jump out that prevents this from running? After running the script using Casper the log says it can't be found which I'm guessing there is a syntax error somewhere? Thanx, Cyrus -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081107/a9eb4ca1/attachment.html From rharter at uwsp.edu Fri Nov 7 07:44:17 2008 From: rharter at uwsp.edu (Ryan Harter) Date: Fri, 7 Nov 2008 09:44:17 -0600 Subject: [Casper] Scripting help In-Reply-To: References: Message-ID: <9D42B30E-A039-4A81-923B-556082E2FF89@uwsp.edu> You have escaping problems here. In bash (and sh) '\' is reserved for escaping characters. If you want to put "quotes inside another set of quotes, you have to \"escape\" them with '\'". Right now you are escaping 'd' (with \d), etc. If you want to put those backslashes in, you need to also escape them. That can be done by just replacing them with \\ . A good way to test your string escaping is to just echo it for testing. Test this string with: echo "NA\domain admins,NA\enterprise admins,NA\bby-r- corpworkstationadmin-wk-f,NA\bby-r-MacAdminUsers-WK-F" and I think it will return NAomain admins,NAnterprise admins,NAby-r-corpworkstationadmin-wk- f,NAby-r-MacAdminUsers-WK-F Note that double quotes doesn't solve this, single quotes might, but you should really double them up. Check out this part of the ABS for more info: http://tldp.org/LDP/abs/html/escapingsection.html Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu On Nov 7, 2008, at 9:32 AM, Cyrus Vahhaji wrote: > Questions for scripting experts. I?m trying to run this as a script > and for some reason its not running. Here is what I?ve scripted. > > > #!/bin/sh > > dsconfigad -groups "NA\domain admins,NA\enterprise admins,NA\bby-r- > corpworkstationadmin-wk-f,NA\bby-r-MacAdminUsers-WK-F" > > Does anything jump out that prevents this from running? After > running the script using Casper the log says it can?t be found which > I?m guessing there is a syntax error somewhere? > > Thanx, > Cyrus > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081107/a746f815/attachment.html From Cyrus.Vahhaji at bestbuy.com Fri Nov 7 07:54:05 2008 From: Cyrus.Vahhaji at bestbuy.com (Cyrus Vahhaji) Date: Fri, 07 Nov 2008 09:54:05 -0600 Subject: [Casper] Scripting help In-Reply-To: Message-ID: Trying to add an AD group for the AD plug-in. Like to add ?NA\bby-r-macadminusers-wk-f? to the existing three listed in the script using dsconfigad command. Using the command below works fine in terminal but not with the script I?ve written. Just did a quick test in terminal and the script ran off the desktop. So there shouldn?t be any syntax errors. To answer a few questions/commnents following this email. * The log says it can?t find the script and not the group. * I can run the script locally as mentioned above so the syntax should be OK. * I?m not and AD expert and haven?t looked to see who are domain and admin members. They are populated when the machine is bound. Thanx for bringing this up and I?ll look to see if they need to be in there or not. * Ryan, I?m not sure what you mention in your email is causing any issues, at least not based on running the script locally. Also tried your echo test and output was as expected. * I?ve also propagated permissions on the server with no change. Thanx for all the input. From: Miles Leacy Date: Fri, 7 Nov 2008 10:35:39 -0500 To: Cyrus Vahhaji Cc: Subject: Re: [Casper] Scripting help It would help if you tell us what you're trying to accomplish with the script. I can alter this and make it do a bunch of different things. 2008/11/7 Cyrus Vahhaji > Questions for scripting experts. I'm trying to run this as a script and for > some reason its not running. Here is what I've scripted. > > > #!/bin/sh > > dsconfigad -groups "NA\domain admins,NA\enterprise > admins,NA\bby-r-corpworkstationadmin-wk-f,NA\bby-r-MacAdminUsers-WK-F" > > Does anything jump out that prevents this from running? After running the > script using Casper the log says it can't be found which I'm guessing there is > a syntax error somewhere? > > Thanx, > Cyrus > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081107/09fbc0aa/attachment.html From miles.leacy at themacadmin.com Fri Nov 7 08:00:42 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Fri, 7 Nov 2008 11:00:42 -0500 Subject: [Casper] Scripting help In-Reply-To: References: Message-ID: Are you running this at image time? If so, it should be run "at reboot", otherwise you're executing it on your utility drive or whatever you're booted to while imaging. On Fri, Nov 7, 2008 at 10:54 AM, Cyrus Vahhaji wrote: > Trying to add an AD group for the AD plug-in. Like to add > "NA\bby-r-macadminusers-wk-f" to the existing three listed in the script > using dsconfigad command. > > Using the command below works fine in terminal but not with the script I've > written. Just did a quick test in terminal and the script ran off the > desktop. So there shouldn't be any syntax errors. > > To answer a few questions/commnents following this email. > > > - The log says it can't find the script and not the group. > - I can run the script locally as mentioned above so the syntax should > be OK. > - I'm not and AD expert and haven't looked to see who are domain and > admin members. They are populated when the machine is bound. Thanx for > bringing this up and I'll look to see if they need to be in there or not. > - Ryan, I'm not sure what you mention in your email is causing any > issues, at least not based on running the script locally. Also tried your > echo test and output was as expected. > - I've also propagated permissions on the server with no change. > > > Thanx for all the input. > > > ------------------------------ > *From: *Miles Leacy > *Date: *Fri, 7 Nov 2008 10:35:39 -0500 > *To: *Cyrus Vahhaji > *Cc: * > *Subject: *Re: [Casper] Scripting help > > > It would help if you tell us what you're trying to accomplish with the > script. > > I can alter this and make it do a bunch of different things. > > > 2008/11/7 Cyrus Vahhaji > > Questions for scripting experts. I'm trying to run this as a script and for > some reason its not running. Here is what I've scripted. > > > #!/bin/sh > > dsconfigad -groups "NA\domain admins,NA\enterprise > admins,NA\bby-r-corpworkstationadmin-wk-f,NA\bby-r-MacAdminUsers-WK-F" > > Does anything jump out that prevents this from running? After running the > script using Casper the log says it can't be found which I'm guessing there > is a syntax error somewhere? > > Thanx, > Cyrus > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > ------------------------------ > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081107/508f2b5a/attachment.htm From Cyrus.Vahhaji at bestbuy.com Fri Nov 7 08:39:02 2008 From: Cyrus.Vahhaji at bestbuy.com (Cyrus Vahhaji) Date: Fri, 07 Nov 2008 10:39:02 -0600 Subject: [Casper] Scripting help - Issue Solved In-Reply-To: Message-ID: Happy to say problem solved. Wrong permissions! Not sure how this happened. Usually create my scripts in TextEdit and they typically default to 644 for permissions. After creating the script I ran chmod +x which should change it to 755. My script was set to 711. Currently I?m not using this script at imaging and merely want to add another AD group to AD plug-in. Thank you all for your quick responses. Cyrus From: Miles Leacy Date: Fri, 7 Nov 2008 11:00:23 -0500 To: Cyrus Vahhaji Subject: Re: [Casper] Scripting help Are you running this at image time? If so, it should be run "at reboot", otherwise you're executing it on your utility drive or whatever you're booted to while imaging. On Fri, Nov 7, 2008 at 10:54 AM, Cyrus Vahhaji wrote: > Trying to add an AD group for the AD plug-in. Like to add > "NA\bby-r-macadminusers-wk-f" to the existing three listed in the script using > dsconfigad command. > > Using the command below works fine in terminal but not with the script I've > written. Just did a quick test in terminal and the script ran off the desktop. > So there shouldn't be any syntax errors. > > To answer a few questions/commnents following this email. > > * The log says it can't find the script and not the group. > * I can run the script locally as mentioned above so the syntax should be OK. > * I'm not and AD expert and haven't looked to see who are domain and admin > members. They are populated when the machine is bound. Thanx for bringing this > up and I'll look to see if they need to be in there or not. > * Ryan, I'm not sure what you mention in your email is causing any issues, at > least not based on running the script locally. Also tried your echo test and > output was as expected. > * I've also propagated permissions on the server with no change. > > Thanx for all the input. > > > > From: Miles Leacy > Date: Fri, 7 Nov 2008 10:35:39 -0500 > To: Cyrus Vahhaji > Cc: > Subject: Re: [Casper] Scripting help > > > It would help if you tell us what you're trying to accomplish with the script. > > I can alter this and make it do a bunch of different things. > > > 2008/11/7 Cyrus Vahhaji >> Questions for scripting experts. I'm trying to run this as a script and for >> some reason its not running. Here is what I've scripted. >> >> >> #!/bin/sh >> >> dsconfigad -groups "NA\domain admins,NA\enterprise >> admins,NA\bby-r-corpworkstationadmin-wk-f,NA\bby-r-MacAdminUsers-WK-F" >> >> Does anything jump out that prevents this from running? After running the >> script using Casper the log says it can't be found which I'm guessing there >> is a syntax error somewhere? >> >> Thanx, >> Cyrus >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper >> >> >> >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper >> >> -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081107/09b33ce8/attachment.htm From matt at pennmanor.net Mon Nov 10 07:55:51 2008 From: matt at pennmanor.net (Matthew Butch) Date: Mon, 10 Nov 2008 10:55:51 -0500 Subject: [Casper] Percentage complete in Casper Remote? Message-ID: <3A07A61D-7D3D-4F64-A222-911F12A6E6B8@pennmanor.net> Sometimes when we are installing packages in Casper Remote, we will see a percentage install (ex: "24% installed Office2004.dmg"). But not all the time. Does anybody know what the requirements are for this? The biggest complaint from all of my fellow techs, as well as myself, is that we have no idea how fast or even if a package is being installed. We were hoping these feature would be added in version 6, and it sort of looks like it is (we even see in the log the showprogress command) but we can't get it to work on a consistent basis. Any help would be appreciated. -Matt -- Matthew Butch Technology Support Analyst Penn Manor School District 717-872-9500 x 2385 http://www.pennmanor.net Apple Certified Macintosh Technician Apple Certified Help Desk Specialist 10.4 Apple Certified Support Professional 10.5 Apple Certified Technical Coordinator 10.4 & 10.5 Apple Certified Systems Administrator 10.4 From ERNSTCS at uwec.edu Mon Nov 10 08:03:23 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Mon, 10 Nov 2008 10:03:23 -0600 Subject: [Casper] Percentage complete in Casper Remote? In-Reply-To: <3A07A61D-7D3D-4F64-A222-911F12A6E6B8@pennmanor.net> Message-ID: I guess I would appreciate some technical clarification on what makes this happen and not as well. Craig E On 11/10/08 9:55 AM, "Matthew Butch" wrote: Sometimes when we are installing packages in Casper Remote, we will see a percentage install (ex: "24% installed Office2004.dmg"). But not all the time. Does anybody know what the requirements are for this? The biggest complaint from all of my fellow techs, as well as myself, is that we have no idea how fast or even if a package is being installed. We were hoping these feature would be added in version 6, and it sort of looks like it is (we even see in the log the showprogress command) but we can't get it to work on a consistent basis. Any help would be appreciated. -Matt -- Matthew Butch Technology Support Analyst Penn Manor School District 717-872-9500 x 2385 http://www.pennmanor.net Apple Certified Macintosh Technician Apple Certified Help Desk Specialist 10.4 Apple Certified Support Professional 10.5 Apple Certified Technical Coordinator 10.4 & 10.5 Apple Certified Systems Administrator 10.4 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081110/ab3caafe/attachment.htm From eric.winkelhake at mundocomww.com Mon Nov 10 09:08:32 2008 From: eric.winkelhake at mundocomww.com (Eric Winkelhake) Date: Mon, 10 Nov 2008 11:08:32 -0600 Subject: [Casper] Percentage complete in Casper Remote? In-Reply-To: Message-ID: I think you'll only see it when you're pushing something to a Leopard box. ***Please note my phone numbers and email address have changed*** Eric Winkelhake MundocomWW 312.220.1669 312.504.5155 eric.winkelhake at mundocomww.com "Ernst, Craig S." Sent by: casper-bounces at list.jamfsoftware.com 11/10/08 10:03 AM To Casper List cc Subject Re: [Casper] Percentage complete in Casper Remote? I guess I would appreciate some technical clarification on what makes this happen and not as well. Craig E On 11/10/08 9:55 AM, "Matthew Butch" wrote: Sometimes when we are installing packages in Casper Remote, we will see a percentage install (ex: "24% installed Office2004.dmg"). But not all the time. Does anybody know what the requirements are for this? The biggest complaint from all of my fellow techs, as well as myself, is that we have no idea how fast or even if a package is being installed. We were hoping these feature would be added in version 6, and it sort of looks like it is (we even see in the log the showprogress command) but we can't get it to work on a consistent basis. Any help would be appreciated. -Matt -- Matthew Butch Technology Support Analyst Penn Manor School District 717-872-9500 x 2385 http://www.pennmanor.net Apple Certified Macintosh Technician Apple Certified Help Desk Specialist 10.4 Apple Certified Support Professional 10.5 Apple Certified Technical Coordinator 10.4 & 10.5 Apple Certified Systems Administrator 10.4 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081110/bdff2f10/attachment.htm From jstrauss at loyolahs.edu Mon Nov 10 11:44:09 2008 From: jstrauss at loyolahs.edu (Jeff Strauss) Date: Mon, 10 Nov 2008 11:44:09 -0800 Subject: [Casper] Target="_blank" Message-ID: Has anyone tried to open up a new web page from within Self Service? Is target="_blank" possible from inside Self Service to open a new browser window? Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 Please consider the environment before printing this e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081110/520870eb/attachment.html From tlarki at kckps.org Mon Nov 10 11:53:53 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 10 Nov 2008 13:53:53 -0600 Subject: [Casper] Target="_blank" In-Reply-To: References: Message-ID: <49183CF1.7141.0039.0@kckps.org> It doesn't work for me tlarkin.com (new window) I also can not right click a link and select open in new window and have it work. Perhaps this should be a feature request. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Jeff Strauss 11/10/08 1:44 PM >>> Has anyone tried to open up a new web page from within Self Service? Is target=?_blank? possible from inside Self Service to open a new browser window? Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 Please consider the environment before printing this e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081110/5c588660/attachment.html From matt at pennmanor.net Mon Nov 10 11:57:53 2008 From: matt at pennmanor.net (Matthew Butch) Date: Mon, 10 Nov 2008 14:57:53 -0500 Subject: [Casper] Percentage complete in Casper Remote? In-Reply-To: References: Message-ID: <09DDF585-E243-4FFB-A95E-75907335E678@pennmanor.net> But that is not consistent either. We have seen it not work even to a Leopard box. Does it matter what version of Casper the package was indexed/built with? -Matt On Nov 10, 2008, at 12:08 PM, Eric Winkelhake wrote: > > I think you'll only see it when you're pushing something to a > Leopard box. > > ***Please note my phone numbers and email address have changed*** > Eric Winkelhake > MundocomWW > 312.220.1669 > 312.504.5155 > eric.winkelhake at mundocomww.com > > > "Ernst, Craig S." > Sent by: casper-bounces at list.jamfsoftware.com > 11/10/08 10:03 AM > > To > Casper List > cc > Subject > Re: [Casper] Percentage complete in Casper Remote? > > > > > > I guess I would appreciate some technical clarification on what > makes this happen and not as well. > > Craig E > > > On 11/10/08 9:55 AM, "Matthew Butch" wrote: > > Sometimes when we are installing packages in Casper Remote, we will > see a percentage install (ex: "24% installed Office2004.dmg"). But not > all the time. Does anybody know what the requirements are for this? > > The biggest complaint from all of my fellow techs, as well as myself, > is that we have no idea how fast or even if a package is being > installed. We were hoping these feature would be added in version 6, > and it sort of looks like it is (we even see in the log the > showprogress command) but we can't get it to work on a consistent > basis. > > Any help would be appreciated. > > -Matt > > > -- > > Matthew Butch > Technology Support Analyst > Penn Manor School District > 717-872-9500 x 2385 > http://www.pennmanor.net > > Apple Certified Macintosh Technician > Apple Certified Help Desk Specialist 10.4 > Apple Certified Support Professional 10.5 > Apple Certified Technical Coordinator 10.4 & 10.5 > Apple Certified Systems Administrator 10.4 > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > ------------------------------------------------------------------------ > Disclaimer > The information in this email and any attachments may contain > proprietary and confidential information that is intended for the > addressee(s) only. If you are not the intended recipient, you are > hereby notified that any disclosure, copying, distribution, > retention or use of the contents of this information is prohibited. > When addressed to our clients or vendors, any information contained > in this e-mail or any attachments is subject to the terms and > conditions in any governing contract. If you have received this e- > mail in error, please immediately contact the sender and delete the > e-mail. > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -- Matthew Butch Technology Support Analyst Penn Manor School District 717-872-9500 x 2385 http://www.pennmanor.net Apple Certified Macintosh Technician Apple Certified Help Desk Specialist 10.4 Apple Certified Support Professional 10.5 Apple Certified Technical Coordinator 10.4 & 10.5 Apple Certified Systems Administrator 10.4 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081110/5e151804/attachment.htm From Rich.Dagel at landor.com Tue Nov 11 09:59:59 2008 From: Rich.Dagel at landor.com (Dagel, Rich) Date: Tue, 11 Nov 2008 09:59:59 -0800 Subject: [Casper] Nav scripts Message-ID: I am trying out the scripts that came with the resource kit. I am very happy to have them. I am getting good feed back with the nav scan saying how many files where scan and if it found infected files and it shows up in the policy log. Not getting any thing for the nav update script in the log file. Any ideas. Rich Rich Dagel Senior Technology Specialist Landor Associates 1001 Front Street San Francisco, CA 94111 United States 415 365 3933 http://www.landor.com Rich.Dagel at landor.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081111/dbfa198a/attachment.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 580 bytes Desc: not available Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081111/dbfa198a/attachment.gif From william.smith at merrillcorp.com Tue Nov 11 11:00:59 2008 From: william.smith at merrillcorp.com (Smith, William) Date: Tue, 11 Nov 2008 13:00:59 -0600 Subject: [Casper] Nav scripts In-Reply-To: Message-ID: Hi Rich! Is your organization large enough to have a corporate contract with Symantec? If so then you probably want to be using SAV (corporate) and not NAV (home use). Organizations running SAV can also get the Symantec Antivirus Console for Macintosh (SACM), which allows you to have your SAV clients phone home to a central console for review. -- bill William M. Smith, Technical Analyst MCS IT Merrill Communications, LLC (651) 632-1492 On 11/11/08 11:59 AM, "Dagel, Rich" wrote: > I am trying out the scripts that came with the resource kit. I am very happy > to have them. I am getting good feed back with the nav scan saying how many > files where scan and if it found infected files and it shows up in the policy > log. Not getting any thing for the nav update script in the log file. Any > ideas. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081111/a0c91199/attachment.htm From william.smith at merrillcorp.com Tue Nov 11 14:33:42 2008 From: william.smith at merrillcorp.com (Smith, William) Date: Tue, 11 Nov 2008 16:33:42 -0600 Subject: [Casper] Computer Name is not populating when imaging Message-ID: Hi Folks! I am testing InstaDMG as a means of creating our base Mac OS X 10.5 image. Currently, I have it creating a fully patched 10.5.5 image and that image is in both our production Casper 5.13 system as well as our testing Casper 6.01 system. This 10.5.5 image is virgin until I install it with Casper. I am using a combination of scripts and packages to add a local admin user, prevent the setup assistant from appearing, set network preferences, time zone, etc. When I image with either Casper 5.13 or Casper Imaging 6.01 I'm finding that the Computer Name is not getting populated in the Sharing preference pane. It is completely blank. If I click the Edit... button to view the Local Hostname it shows "Macintosh.local" instead of "MachineName.local". Has anyone seen this behavior before? I've searched both the Composer and Casper mailing list archives but neither returned results for InstaDMG. Thanks! -- bill William M. Smith, Technical Analyst MCS IT Merrill Communications, LLC (651) 632-1492 From swood at integerdallas.com Tue Nov 11 14:37:55 2008 From: swood at integerdallas.com (Steve Wood) Date: Tue, 11 Nov 2008 16:37:55 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: Message-ID: I am having the exact same problem and the good folks at JAMF are working on it. So far we haven't been able to figure out why it is happening. I have tried pushing just the image, without any extra apps or scripts, and I've tried it with the scripts and apps. Both ways yield the same result. To get around this, I've added to my post image script a piece that pulls the serial number of the machine and renames the machine to the serial number. Not optimal, but it at least makes it easy to ID in ARD after imaging is done, and then I can go in and manually change it: # rename computer to the serial number NewName=`system_profiler | grep "Serial Number" | awk '{print $3}'` touch /$NewName #NewName='system_profiler SPHardwareDataType | grep Serial | awk '{print $3}'' scutil --set ComputerName $NewName scutil --set LocalHostName $NewName scutil --set HostName $NewName Steve On 11/11/08 4:33 PM, "Smith, William" wrote: > Hi Folks! > > I am testing InstaDMG as a means of creating our base Mac OS X 10.5 image. > Currently, I have it creating a fully patched 10.5.5 image and that image is > in both our production Casper 5.13 system as well as our testing Casper 6.01 > system. > > This 10.5.5 image is virgin until I install it with Casper. I am using a > combination of scripts and packages to add a local admin user, prevent the > setup assistant from appearing, set network preferences, time zone, etc. > > When I image with either Casper 5.13 or Casper Imaging 6.01 I'm finding that > the Computer Name is not getting populated in the Sharing preference pane. > It is completely blank. If I click the Edit... button to view the Local > Hostname it shows "Macintosh.local" instead of "MachineName.local". > > Has anyone seen this behavior before? I've searched both the Composer and > Casper mailing list archives but neither returned results for InstaDMG. > > Thanks! Steve Wood Director of IT swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 From swood at integerdallas.com Tue Nov 11 14:39:54 2008 From: swood at integerdallas.com (Steve Wood) Date: Tue, 11 Nov 2008 16:39:54 -0600 Subject: [Casper] CS4 Anyone? Message-ID: I am starting to test CS4 and starting to look at deployment. I thought I had seen something from someone on the list about CS4, but I didn?t find it. Has anyone tried pushing CS4 with Casper, and if so how? I tried using the built in method, but Casper doesn?t recognize the Master Suite dmg as a valid Adobe installer. Any ideas, aside from building Composer packages? Steve Wood Director of IT swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081111/97b91255/attachment.html From tlarki at kckps.org Tue Nov 11 14:39:39 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Tue, 11 Nov 2008 16:39:39 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: References: Message-ID: <4919B54B.7141.0039.0@kckps.org> If there is no record of that machine in the JSS it won't pull a name down. I haven't really used instaDMG so I can't give you a full reason why it is doing that. I just use Composer to make an OS image after I configure it. You can try adding a line to your scripts as preflight to name the computer, assuming there is already a name on these boxes you are imaging? You can try adding a simple variable to your script compname=scutil --get ComputerName then just call the $compname in your script to set it like this scutil --set ComputerName $compname I would double check my syntax there. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Smith, William" 11/11/08 4:33 PM >>> Hi Folks! I am testing InstaDMG as a means of creating our base Mac OS X 10.5 image. Currently, I have it creating a fully patched 10.5.5 image and that image is in both our production Casper 5.13 system as well as our testing Casper 6.01 system. This 10.5.5 image is virgin until I install it with Casper. I am using a combination of scripts and packages to add a local admin user, prevent the setup assistant from appearing, set network preferences, time zone, etc. When I image with either Casper 5.13 or Casper Imaging 6.01 I'm finding that the Computer Name is not getting populated in the Sharing preference pane. It is completely blank. If I click the Edit... button to view the Local Hostname it shows "Macintosh.local" instead of "MachineName.local". Has anyone seen this behavior before? I've searched both the Composer and Casper mailing list archives but neither returned results for InstaDMG. Thanks! -- bill William M. Smith, Technical Analyst MCS IT Merrill Communications, LLC (651) 632-1492 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081111/c3511552/attachment.htm From ERNSTCS at uwec.edu Tue Nov 11 14:45:10 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Tue, 11 Nov 2008 16:45:10 -0600 Subject: [Casper] CS4 Anyone? In-Reply-To: Message-ID: Steve (and everyone)...I would just wait patiently for an updated release from JAMF. I'm sure it will be addressing it. Don't waste your time with other methods or means...unless you want to have fun with their install tool...with the name "UBER" in it...yes I said UBER....what a laugh. I would be interested to know if you have any end users that are pushing for it and if so what they seem to justify as to what are the advantages to upgrading. I personally don't think there is anything compelling, but I haven't looked too much into it...especially since it won't do 64-bit for Mac. Craig E On 11/11/08 4:39 PM, "Steve Wood" wrote: I am starting to test CS4 and starting to look at deployment. I thought I had seen something from someone on the list about CS4, but I didn't find it. Has anyone tried pushing CS4 with Casper, and if so how? I tried using the built in method, but Casper doesn't recognize the Master Suite dmg as a valid Adobe installer. Any ideas, aside from building Composer packages? Steve Wood Director of IT swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 ________________________________ -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081111/066a0e21/attachment.htm From ERNSTCS at uwec.edu Tue Nov 11 14:47:33 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Tue, 11 Nov 2008 16:47:33 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: <4919B54B.7141.0039.0@kckps.org> Message-ID: I'm with Tom, I've never used InstaDMG, I've always used Composer. Any compelling reasons you'd like to share as to why you prefer one over the other? I'd be interested to know. Craig E -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081111/1fbd0964/attachment-0001.htm From william.smith at merrillcorp.com Tue Nov 11 16:13:49 2008 From: william.smith at merrillcorp.com (Smith, William) Date: Tue, 11 Nov 2008 18:13:49 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: Message-ID: On 11/11/08 4:47 PM, "Ernst, Craig S." wrote: > I?m with Tom, I?ve never used InstaDMG, I?ve always used Composer. Any > compelling reasons you?d like to share as to why you prefer one over the > other? I?d be interested to know. Full disclosure: I?m an InstaDMG n00b but I love the concept. More information about InstaDMG can be found at . With Composer you have to install your Mac OS system, update it, clear recent items lists, clear recent folders lists and rotate log files. Then you have to boot to another disk and create a .dmg file from the first disk. You'll image your Macs with that .dmg file. InstaDMG allows you to create that same fully patched Mac OS X .dmg file without having to actually image a master hard disk or boot to another disk. The concept is similar to Windows slipstreaming. Here?s the setup. 1. I create a .dmg master of my Mac OS X 10.5.0 retail DVD and place it into the InstaDMG folder structure on my computer. 2. I download and place the 10.5.5 combo update and other miscellaneous updates like Airport, Java, ARD, etc., into the InstaDMG folder structure. 3. I run InstaDMG and about 2-1/2 hours later I have a fully patched and virgin Mac OS X 10.5.5 .dmg file ready to deploy with Casper. This image has never been logged into. It still doesn't have a user yet and will go through the Apple Setup Assistant (movie and all) once it has been imaged onto a real hard drive. I can take my original InstaDMG folder structure and add a simple text file to exclude the extra printer drivers, translations and fonts. After I run it again I now have my smaller Mac OS system for my Restore partition. It's fully patched and still virgin. If I need to update my OS images, I simply download the update from Apple, add it to my original InstaDMG folder structure and run InstaDMG again. This is where I stop because I prefer to use Casper to image and manage my Macs. However, you could also add something like the Microsoft Office 2008 installer .pkg file and all its subsequent .pkg updaters to the InstaDMG folder structure too. You'll have a fully patched virgin Mac OS with a fully patched Office 2008 installation. Here's why I like it. It leaves 0% cruft behind. No remembered servers, no recent items list, no byhost files, no user preferences, no un-rotated log files. It's perfectly clean. And the time to create an InstaDMG Mac OS X .dmg file is comparable to or faster than installing onto a master hard drive, updating, prepping and then imaging that afterward with Composer. It's certainly less effort. This goes hand-in-hand with my philosophy of installing a complete set of software and then using scripts to customize the installation afterward. Sorry for the long answer. I hope that explains it well. [This would actually make for a great Casper User Group topic.] -- bill William M. Smith, Technical Analyst MCS IT Merrill Communications, LLC (651) 632-1492 From ERNSTCS at uwec.edu Wed Nov 12 05:24:30 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Wed, 12 Nov 2008 07:24:30 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: Message-ID: I don't think it was too long...very similar to how my responses get sometimes. =) And I can agree that perhaps it is a good topic for a CUG, but I wanted to bring it up here as well because I think this is the perfect venue to share this information and what it was intended for. It helps educate us all on making the right decisions and using the right tools. I assume that you still need to build this virgin image on the latest hardware? I don't have to make new OS images often so I've never really tried to improve the process. When I tried to download InstaDMG from Sourceforge it wasn't available...=/ Thanks, Bill! Craig E On 11/11/08 6:13 PM, "Smith, William" wrote: Sorry for the long answer. I hope that explains it well. [This would actually make for a great Casper User Group topic.] -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081112/d37080d0/attachment.html From william.smith at merrillcorp.com Wed Nov 12 05:54:20 2008 From: william.smith at merrillcorp.com (Smith, William) Date: Wed, 12 Nov 2008 07:54:20 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: Message-ID: On Wednesday 11/12/08 7:24 AM, "Ernst, Craig S." wrote: > I don?t think it was too long...very similar to how my responses get > sometimes. =) > > And I can agree that perhaps it is a good topic for a CUG, but I wanted to > bring it up here as well because I think this is the perfect venue to share > this information and what it was intended for. It helps educate us all on > making the right decisions and using the right tools. Glad you found it useful. My verbosity is often parallel to my interest in the subject.:-) > I assume that you still need to build this virgin image on the latest > hardware? I don?t have to make new OS images often so I?ve never really tried > to improve the process. I think the hardware issues where you wanted to build on the latest and greatest machine in your fleet were primarily limited to Mac OS X 10.4. That's why I'm only doing this with Leopard. But I couldn't find anything to reinforce my thinking on this. Building on the latest Mac OS is more important. The hardware of the machine doesn't come into play at all when using InstaDMG. > When I tried to download InstaDMG from Sourceforge it wasn?t available...=/ I think it's now completely on AFP548.com. This is the latest release . Support is sparse and really only done through the AFP548.com forums. Lots of folks are contributing their experiences, ideas and helper scripts. One person has provided a CreateUser.pkg package that you can modify to create that first user (probably your Casper admin user account) and others give advice for preventing the startup movie. Things like that. -- bill William M. Smith, Technical Analyst MCS IT Merrill Communications, LLC (651) 632-1492 From william.smith at merrillcorp.com Wed Nov 12 06:02:09 2008 From: william.smith at merrillcorp.com (Smith, William) Date: Wed, 12 Nov 2008 08:02:09 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: Message-ID: On Tuesday 11/11/08 4:37 PM, "Steve Wood" wrote: > I am having the exact same problem and the good folks at JAMF are working on > it. So far we haven't been able to figure out why it is happening. Glad to hear that. I contacted JAMF Support first and received a reply that they really don't know InstaDMG that well. They asked me to post here. What I'd be happy to know is the command that Casper uses to set the machine name. Is it looking for a file that's not there? Or are they using a built-in command like systemsetup, which is in different paths in 10.4 and 10.5? Even running that command doesn't set the Hostname, only the Computer Name. I'm sure I can work around the problem but that means I'll have to write an extra script and populate one of the script variable fields in Casper Imaging with the name. Easy to forget. -- bill William M. Smith, Technical Analyst MCS IT Merrill Communications, LLC (651) 632-1492 From miles.leacy at themacadmin.com Wed Nov 12 06:02:25 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Wed, 12 Nov 2008 09:02:25 -0500 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: References: Message-ID: I'm testing with the InstaDMG method too, in order to create the base OS image to be used by Casper. William described it pretty well. On the whole, it's intended to image a complete system for end user deployment, but if you leave out the custom software packages, you can use it quite well to generate a base image. InstaDMG consists of a folder structure into which packages (and scripts encapsulated in payload-free packages), an image of an OS installer disk, and a script that assembles these pieces into a bootable image. It installs the OS into an empty dmg file. Then installs the indicated packages into that same DMG file, finally prepping the dmg for asr. It's actually pretty similar to the manual assembly of scripts I was using for deployment before I found Casper. The benefits are a never-booted, customized, updated image. By installing onto a target machine, tweaking that machine and then imaging with Composer or some other disk imaging tool, you end up with user accounts (which you can still add via the InstaDMG workflow or via Casper) and their associated home folders, logs, caches, etc. I haven't done enough testing, but it is my assumption that an InstaDMG image that was created with the latest OS X combo updater ought to boot any Apple-supported system that isn't newer than the combo updater. The core methodologies of InstaDMG and Casper are very compatible, which is one of the things that drew me to it. There are materials and a discussion board for InstaDMG on afp548.com. Josh Wisenbaker's held a webcast in April that explains the methodology and benefits in detail. I'm not sure if afp548 have an archive of it, but if you have access to Apple Sales Web, you can download the webcast archive via iTunes. 2008/11/12 Ernst, Craig S. > I don't think it was too long...very similar to how my responses get > sometimes. =) > > And I can agree that perhaps it is a good topic for a CUG, but I wanted to > bring it up here as well because I think this is the perfect venue to share > this information and what it was intended for. It helps educate us all on > making the right decisions and using the right tools. > > I assume that you still need to build this virgin image on the latest > hardware? I don't have to make new OS images often so I've never really > tried to improve the process. > > When I tried to download InstaDMG from Sourceforge it wasn't available...=/ > > Thanks, Bill! > > Craig E > > > On 11/11/08 6:13 PM, "Smith, William" > wrote: > > Sorry for the long answer. I hope that explains it well. > > [This would actually make for a great Casper User Group topic.] > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081112/3d943187/attachment.htm From ERNSTCS at uwec.edu Wed Nov 12 06:29:28 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Wed, 12 Nov 2008 08:29:28 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: Message-ID: If I understand correctly Casper will pull the machine name as it exists on Macintosh HD, if you were reimaging a machine that had a readable Macintosh HD partition, or it will pull the machine name from the data it has about that machine in the JSS. As far as the command it's using to do that I imagine the app is simply modifying a plist. Not sure if it's just: Library -> Preferences -> SystemConfiguration -> com.apple.smb.server.plist I see it changes the ServerDescription tag, but other than that I'm not sure. Craig E On 11/12/08 8:02 AM, "Smith, William" wrote: What I'd be happy to know is the command that Casper uses to set the machine name. Is it looking for a file that's not there? Or are they using a built-in command like systemsetup, which is in different paths in 10.4 and 10.5? Even running that command doesn't set the Hostname, only the Computer Name. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081112/0876603f/attachment.htm From gnowosad at lcsd150.ab.ca Wed Nov 12 06:29:26 2008 From: gnowosad at lcsd150.ab.ca (Glenn Nowosad) Date: Wed, 12 Nov 2008 07:29:26 -0700 Subject: [Casper] AD Binding Issues with 10.5 Message-ID: <2EFEAE82-FCAA-42C2-93E3-604754FE2483@lcsd150.ab.ca> Is anyone having AD binding issues with the 10.5 migration? We have a number of laptops and workstations that need to be unbound and rebound consistently. Apple is working on the issue as an escalated ticket but I am not sure if it is just us or a plugin issue. In some instances mobile accounts on a given workstation can't even log into the computer with a mobile account already existing on the box. Anyone experiencing similar issues??? Glenn Nowosad Director of Technology Lakeland Catholic Schools 4810-46 Street Bonnyville, AB, Canada 780-826-3764 District Office 780-812-3414 Tech Shop http://www.lcsd150.ab.ca gnowosad at lcsd150.ab.ca From NATHANIEL.LINDLEY at spps.org Wed Nov 12 06:45:22 2008 From: NATHANIEL.LINDLEY at spps.org (NATHANIEL.LINDLEY at spps.org) Date: Wed, 12 Nov 2008 08:45:22 -0600 Subject: [Casper] AD Binding Issues with 10.5 In-Reply-To: <2EFEAE82-FCAA-42C2-93E3-604754FE2483@lcsd150.ab.ca> Message-ID: I've had similar inconsistent issues. Usually the computer will bind to AD ok manually or via Casper if the computer name is 15 characters or less. Sometimes it still works with longer names and just truncates. My issue is that some known good AD user accts can't login to certain machine randomly. Will work one day and not the next. Other computers in the same lab work, but then go back to the first bad one and it works. Timing issue? I can't nail it down much. Also, some logins are really slow for users, especially the first time they login to a computer and it creates the acct, and homedir and settings, 2-3 minutes sometimes. Maybe that is network related, but it frustrates our users. Other problem I have is AD users that login and are members of an AD admin group that should get local admin rights when logging in, lose that setting when they are off our internal network. Known issue, but various fixes with scripts or other WGM tools. I'd like it to just work they way it is supposed to, though. Call me crazy. -Nathaniel Glenn Nowosad Sent by: casper-bounces at list.jamfsoftware.com 11/12/08 08:23 AM To Casper List cc Subject [Casper] AD Binding Issues with 10.5 Is anyone having AD binding issues with the 10.5 migration? We have a number of laptops and workstations that need to be unbound and rebound consistently. Apple is working on the issue as an escalated ticket but I am not sure if it is just us or a plugin issue. In some instances mobile accounts on a given workstation can't even log into the computer with a mobile account already existing on the box. Anyone experiencing similar issues??? Glenn Nowosad Director of Technology Lakeland Catholic Schools 4810-46 Street Bonnyville, AB, Canada 780-826-3764 District Office 780-812-3414 Tech Shop http://www.lcsd150.ab.ca gnowosad at lcsd150.ab.ca _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081112/a432ed95/attachment.html From jstrauss at loyolahs.edu Wed Nov 12 07:58:06 2008 From: jstrauss at loyolahs.edu (Jeff Strauss) Date: Wed, 12 Nov 2008 07:58:06 -0800 Subject: [Casper] AD Binding Issues with 10.5 In-Reply-To: Message-ID: I've shared Nathaniel's experiences with binding. I've also seen some cases where binding will break when the computer is put into a custom-named container, but will work fine when the default container is used. Oh, and a big annoyance is when I've had to disable a user's home folder in AD because OS X will generate a logon error if the home folder's enabled. It's been random, and has only occurred with a few users, but it's annoying nonetheless. - Jeff On 11/12/08 6:45 AM, "NATHANIEL.LINDLEY at spps.org" wrote: I've had similar inconsistent issues. Usually the computer will bind to AD ok manually or via Casper if the computer name is 15 characters or less. Sometimes it still works with longer names and just truncates. My issue is that some known good AD user accts can't login to certain machine randomly. Will work one day and not the next. Other computers in the same lab work, but then go back to the first bad one and it works. Timing issue? I can't nail it down much. Also, some logins are really slow for users, especially the first time they login to a computer and it creates the acct, and homedir and settings, 2-3 minutes sometimes. Maybe that is network related, but it frustrates our users. Other problem I have is AD users that login and are members of an AD admin group that should get local admin rights when logging in, lose that setting when they are off our internal network. Known issue, but various fixes with scripts or other WGM tools. I'd like it to just work they way it is supposed to, though. Call me crazy. -Nathaniel Glenn Nowosad Sent by: casper-bounces at list.jamfsoftware.com 11/12/08 08:23 AM To Casper List cc Subject [Casper] AD Binding Issues with 10.5 Is anyone having AD binding issues with the 10.5 migration? We have a number of laptops and workstations that need to be unbound and rebound consistently. Apple is working on the issue as an escalated ticket but I am not sure if it is just us or a plugin issue. In some instances mobile accounts on a given workstation can't even log into the computer with a mobile account already existing on the box. Anyone experiencing similar issues??? Glenn Nowosad Director of Technology Lakeland Catholic Schools 4810-46 Street Bonnyville, AB, Canada 780-826-3764 District Office 780-812-3414 Tech Shop http://www.lcsd150.ab.ca gnowosad at lcsd150.ab.ca _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 Please consider the environment before printing this e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081112/99b42500/attachment.html From swood at integerdallas.com Wed Nov 12 08:18:11 2008 From: swood at integerdallas.com (Steve Wood) Date: Wed, 12 Nov 2008 10:18:11 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: Message-ID: The test that the JAMF folks had me try was to use the jamf binary to rename: sudo jamf setComputerName -target "/Volumes/Macintosh HD/" -name "JAMF" When we did that the name would not change in the Sharing Pref panel until the machine was restarted. Once restarted the machine showed the new name, JAMF in this case. We then tried using hostname to set the name, but this not only did not change the Sharing pane but it also did not change on restart. I have had the problem on brand new machines, fresh out of the box, where I have tried setting the name in Casper Imaging, or setting it to MAC or S/N. Each time the machine comes up with no name and shows up in the JSS as {Network {HostNames {. On 11/12/08 8:29 AM, "Ernst, Craig S." wrote: > If I understand correctly Casper will pull the machine name as it exists on > Macintosh HD, if you were reimaging a machine that had a readable Macintosh HD > partition, or it will pull the machine name from the data it has about that > machine in the JSS. As far as the command it?s using to do that I imagine the > app is simply modifying a plist. > > Not sure if it?s just: Library -> Preferences -> SystemConfiguration -> > com.apple.smb.server.plist > > I see it changes the ServerDescription tag, but other than that I?m not sure. > > Craig E > > > On 11/12/08 8:02 AM, "Smith, William" wrote: > >> What I'd be happy to know is the command that Casper uses to set the machine >> name. Is it looking for a file that's not there? Or are they using a >> built-in command like systemsetup, which is in different paths in 10.4 and >> 10.5? Even running that command doesn't set the Hostname, only the Computer >> Name. > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper Steve Wood Director of IT swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081112/1d9b3dad/attachment.htm From miles.leacy at themacadmin.com Wed Nov 12 08:51:58 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Wed, 12 Nov 2008 11:51:58 -0500 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: References: Message-ID: 2008/11/12 Steve Wood > The test that the JAMF folks had me try was to use the jamf binary to > rename: > > sudo jamf setComputerName -target "/Volumes/Macintosh HD/" -name "JAMF" > > When we did that the name would not change in the Sharing Pref panel until > the machine was restarted. Once restarted the machine showed the new name, > JAMF in this case. > If you execute "hostname" after running this command, what is the output? What about "scutil --get ComputerName"? I ask because if the name is being changed, and it shows the new name in the system tools that you will interact with, but you just don't see it in the GUI until restart, is that really a problem? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081112/1ffd9e83/attachment-0001.html From william.smith at merrillcorp.com Wed Nov 12 09:31:39 2008 From: william.smith at merrillcorp.com (Smith, William) Date: Wed, 12 Nov 2008 11:31:39 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: Message-ID: On 11/12/08 10:51 AM, "Miles Leacy" wrote: > I ask because if the name is being changed, and it shows the new name in the > system tools that you will interact with, but you just don't see it in the GUI > until restart, is that really a problem? I?m not finding that this is an appearance issue. The Computer Name doesn't get populated and the Hostname returns as "Macintosh.local". I rely on Casper (or Casper Imaging) to enter the name during the time of imaging a machine because we don?t pre-populate our JSS with machine data and pull names. If the machine name is not present on the computer after imaging then Active Directory and Open Directory binding doesn?t happen correctly. -- bill William M. Smith, Technical Analyst MCS IT Merrill Communications, LLC (651) 632-1492 From Chris.Lang at vu.edu.au Wed Nov 12 14:22:46 2008 From: Chris.Lang at vu.edu.au (Chris Lang) Date: Thu, 13 Nov 2008 09:22:46 +1100 Subject: [Casper] AD Binding Issues with 10.5 In-Reply-To: <2EFEAE82-FCAA-42C2-93E3-604754FE2483@lcsd150.ab.ca> Message-ID: I am having similar issues here as well. Mostly to do with intermittently being unable to login to a machine via AD even though OS X indicates it is bound and can communicate with the domain. I also found that sporadically machines would lose connectivity to the DC and would require an unbind and rebind to get logins to work again. After a bit of prompting our networks people created a service account for binding and so far things have improved a little. Still get the occasional user who cant login so I am not sure if it is timing between client and server (clients are pointing at our internal NTP server). Hopefully Apple get this one sorted as it is painful. On 13/11/08 1:29 AM, "Glenn Nowosad" wrote: > Is anyone having AD binding issues with the 10.5 migration? We have a > number of laptops and workstations that need to be unbound and rebound > consistently. Apple is working on the issue as an escalated ticket but > I am not sure if it is just us or a plugin issue. In some instances > mobile accounts on a given workstation can't even log into the > computer with a mobile account already existing on the box. Anyone > experiencing similar issues??? > > > Glenn Nowosad > Director of Technology > Lakeland Catholic Schools > 4810-46 Street Bonnyville, AB, Canada > 780-826-3764 District Office > 780-812-3414 Tech Shop > http://www.lcsd150.ab.ca > gnowosad at lcsd150.ab.ca > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper From swood at integerdallas.com Thu Nov 13 11:00:50 2008 From: swood at integerdallas.com (Steve Wood) Date: Thu, 13 Nov 2008 13:00:50 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: Message-ID: After executing the jamf binary command, and then using hostname or scutil, I still receive the old name of the computer. So, it appears that the jamf command must write to a startup item that renames the computer. Again, upon restart the name is changed. On 11/12/08 10:51 AM, "Miles Leacy" wrote: > 2008/11/12 Steve Wood >> The test that the JAMF folks had me try was to use the jamf binary to rename: >> >> sudo jamf setComputerName -target "/Volumes/Macintosh HD/" -name "JAMF" >> >> When we did that the name would not change in the Sharing Pref panel until >> the machine was restarted. Once restarted the machine showed the new name, >> JAMF in this case. > > If you execute "hostname" after running this command, what is the output? > > What about "scutil --get ComputerName"? > > I ask because if the name is being changed, and it shows the new name in the > system tools that you will interact with, but you just don't see it in the GUI > until restart, is that really a problem? > > Steve Wood Director of IT swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081113/151ab7d6/attachment.htm From swood at integerdallas.com Thu Nov 13 11:02:07 2008 From: swood at integerdallas.com (Steve Wood) Date: Thu, 13 Nov 2008 13:02:07 -0600 Subject: [Casper] CS4 Anyone? In-Reply-To: Message-ID: Right now I have no end users pushing for this, but it is just a matter of time before our interactive department wants to get a hold of Flash and Premier. I am just trying to be proactive and test different methods for deployment. And no way do I want to use the Uber deployment method....what a joke. On 11/11/08 4:45 PM, "Ernst, Craig S." wrote: > Steve (and everyone)...I would just wait patiently for an updated release from > JAMF. I?m sure it will be addressing it. Don?t waste your time with other > methods or means...unless you want to have fun with their install tool...with > the name ?UBER? in it...yes I said UBER....what a laugh. > > I would be interested to know if you have any end users that are pushing for > it and if so what they seem to justify as to what are the advantages to > upgrading. I personally don?t think there is anything compelling, but I > haven?t looked too much into it...especially since it won?t do 64-bit for Mac. > > Craig E > > > On 11/11/08 4:39 PM, "Steve Wood" wrote: > >> I am starting to test CS4 and starting to look at deployment. I thought I >> had seen something from someone on the list about CS4, but I didn?t find it. >> Has anyone tried pushing CS4 with Casper, and if so how? I tried using the >> built in method, but Casper doesn?t recognize the Master Suite dmg as a valid >> Adobe installer. >> >> Any ideas, aside from building Composer packages? >> >> >> >> >> Steve Wood >> Director of IT >> swood at integerdallas.com >> >> The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 >> T 214.758.6813 | F 214.758.6901 | C 940.312.2475 >> >> >> >> -- >> The information contained in this email transmission is solely for the >> addressee(s) named above and is privileged and/or confidential. If the >> reader of this message is not the intended recipient or the person >> responsible to deliver it to the intended recipient; he or she is prohibited >> from reading or disclosing the information contained in this transmission. >> Any examination, use, dissemination, distribution, or copying of this >> communication is strictly prohibited. Please contact us immediately by >> telephone for instructions if you have received this communication in error: >> (214) 758-6800 >> > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper Steve Wood Director of IT swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081113/869781b3/attachment.html From ERNSTCS at uwec.edu Thu Nov 13 11:08:53 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Thu, 13 Nov 2008 13:08:53 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: Message-ID: No, it does not name it at startup for FirstRun, once the OS is laid down and the packages, it runs commands against Macintosh HD to name it before you boot to it. That would be why when you reboot you see the correct name. Craig On 11/13/08 1:00 PM, "Steve Wood" wrote: After executing the jamf binary command, and then using hostname or scutil, I still receive the old name of the computer. So, it appears that the jamf command must write to a startup item that renames the computer. Again, upon restart the name is changed. On 11/12/08 10:51 AM, "Miles Leacy" wrote: 2008/11/12 Steve Wood The test that the JAMF folks had me try was to use the jamf binary to rename: sudo jamf setComputerName -target "/Volumes/Macintosh HD/" -name "JAMF" When we did that the name would not change in the Sharing Pref panel until the machine was restarted. Once restarted the machine showed the new name, JAMF in this case. If you execute "hostname" after running this command, what is the output? What about "scutil --get ComputerName"? I ask because if the name is being changed, and it shows the new name in the system tools that you will interact with, but you just don't see it in the GUI until restart, is that really a problem? Steve Wood Director of IT swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 ________________________________ -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081113/4bdabfda/attachment.html From swood at integerdallas.com Thu Nov 13 11:43:01 2008 From: swood at integerdallas.com (Steve Wood) Date: Thu, 13 Nov 2008 13:43:01 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: Message-ID: And to be clear, the tests I?m running are on a system that is already imaged and running, and issuing the commands from the terminal. I am not laying down a new image on the machine. On 11/13/08 1:08 PM, "Ernst, Craig S." wrote: > No, it does not name it at startup for FirstRun, once the OS is laid down and > the packages, it runs commands against Macintosh HD to name it before you boot > to it. That would be why when you reboot you see the correct name. > > Craig > > On 11/13/08 1:00 PM, "Steve Wood" wrote: > >> After executing the jamf binary command, and then using hostname or scutil, I >> still receive the old name of the computer. So, it appears that the jamf >> command must write to a startup item that renames the computer. Again, upon >> restart the name is changed. >> >> >> >> On 11/12/08 10:51 AM, "Miles Leacy" wrote: >> >>> 2008/11/12 Steve Wood >>>> The test that the JAMF folks had me try was to use the jamf binary to >>>> rename: >>>> >>>> sudo jamf setComputerName -target "/Volumes/Macintosh HD/" -name "JAMF" >>>> >>>> When we did that the name would not change in the Sharing Pref panel until >>>> the machine was restarted. Once restarted the machine showed the new name, >>>> JAMF in this case. >>> >>> If you execute "hostname" after running this command, what is the output? >>> >>> What about "scutil --get ComputerName"? >>> >>> I ask because if the name is being changed, and it shows the new name in the >>> system tools that you will interact with, but you just don't see it in the >>> GUI until restart, is that really a problem? >>> >>> >> >> >> >> Steve Wood >> Director of IT >> swood at integerdallas.com >> >> The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 >> T 214.758.6813 | F 214.758.6901 | C 940.312.2475 >> >> >> >> -- >> The information contained in this email transmission is solely for the >> addressee(s) named above and is privileged and/or confidential. If the >> reader of this message is not the intended recipient or the person >> responsible to deliver it to the intended recipient; he or she is prohibited >> from reading or disclosing the information contained in this transmission. >> Any examination, use, dissemination, distribution, or copying of this >> communication is strictly prohibited. Please contact us immediately by >> telephone for instructions if you have received this communication in error: >> (214) 758-6800 >> > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper Steve Wood Director of IT swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081113/360e4ca9/attachment.html From rharter at uwsp.edu Thu Nov 13 11:56:50 2008 From: rharter at uwsp.edu (Ryan Harter) Date: Thu, 13 Nov 2008 13:56:50 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: References: Message-ID: <4D9E9E96-D7F9-4462-9F0C-ADD4D00484F4@uwsp.edu> This may have been said, but I have seen when imaging a machine that Casper does not seem to set all of the "computer names." What I mean by this is that you can set the computer name using scutil with three different locations, ComputerName, HostName, and LocalHostName. I don't remember exactly what each is used for, but in the past we've always wanted all of them to be set. I've found the most reliable solution for this is to run a script at reboot that does: #!/bin/bash computerName=$2 scutil -set ComputerName $computerName scutil -set HostName $computerName scutil -set LocalHostName $computerName This is only a workaround, but reliably renames the computer. I've had issues where the computer just gets the name of the machine I built the base image on if I don't. Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu On Nov 13, 2008, at 1:43 PM, Steve Wood wrote: > And to be clear, the tests I?m running are on a system that is > already imaged and running, and issuing the commands from the > terminal. I am not laying down a new image on the machine. > > > On 11/13/08 1:08 PM, "Ernst, Craig S." wrote: > >> No, it does not name it at startup for FirstRun, once the OS is >> laid down and the packages, it runs commands against Macintosh HD >> to name it before you boot to it. That would be why when you reboot >> you see the correct name. >> >> Craig >> >> On 11/13/08 1:00 PM, "Steve Wood" wrote: >> >>> After executing the jamf binary command, and then using hostname >>> or scutil, I still receive the old name of the computer. So, it >>> appears that the jamf command must write to a startup item that >>> renames the computer. Again, upon restart the name is changed. >>> >>> >>> >>> On 11/12/08 10:51 AM, "Miles Leacy" >>> wrote: >>> >>>> 2008/11/12 Steve Wood >>>>> The test that the JAMF folks had me try was to use the jamf >>>>> binary to rename: >>>>> >>>>> sudo jamf setComputerName -target "/Volumes/Macintosh HD/" -name >>>>> "JAMF" >>>>> >>>>> When we did that the name would not change in the Sharing Pref >>>>> panel until the machine was restarted. Once restarted the >>>>> machine showed the new name, JAMF in this case. >>>> >>>> If you execute "hostname" after running this command, what is the >>>> output? >>>> >>>> What about "scutil --get ComputerName"? >>>> >>>> I ask because if the name is being changed, and it shows the new >>>> name in the system tools that you will interact with, but you >>>> just don't see it in the GUI until restart, is that really a >>>> problem? >>>> >>>> >>> >>> >>> >>> Steve Wood >>> Director of IT >>> swood at integerdallas.com >>> >>> The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX >>> 75201 >>> T 214.758.6813 | F 214.758.6901 | C 940.312.2475 >>> >>> >>> -- >>> The information contained in this email transmission is solely for >>> the addressee(s) named above and is privileged and/or >>> confidential. If the reader of this message is not the intended >>> recipient or the person responsible to deliver it to the intended >>> recipient; he or she is prohibited from reading or disclosing the >>> information contained in this transmission. Any examination, use, >>> dissemination, distribution, or copying of this communication is >>> strictly prohibited. Please contact us immediately by telephone >>> for instructions if you have received this communication in error: >>> (214) 758-6800 >>> >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper > > > > Steve Wood > Director of IT > swood at integerdallas.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX > 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > -- > The information contained in this email transmission is solely for > the addressee(s) named above and is privileged and/or confidential. > If the reader of this message is not the intended recipient or the > person responsible to deliver it to the intended recipient; he or > she is prohibited from reading or disclosing the information > contained in this transmission. Any examination, use, > dissemination, distribution, or copying of this communication is > strictly prohibited. Please contact us immediately by telephone for > instructions if you have received this communication in error: (214) > 758-6800 > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081113/1fb5d249/attachment.html From jared.nichols at ll.mit.edu Fri Nov 14 05:34:10 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Fri, 14 Nov 2008 08:34:10 -0500 Subject: [Casper] Script keeps deleting Message-ID: Hi All- I have a script that I run for post-Office installation set in my office self service policy. Every few days, when I open Casper Admin, it's been deleted and appears in red "missing." If I go to the CasperShare mount in the scripts folder, sure enough, it's gone. If I replace it, it's fine for a few days. I've repaired permissions on the share using the JSS utility but no luck. Any ideas? Thanks! -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081114/d716ed97/attachment.htm From jared.nichols at ll.mit.edu Fri Nov 14 05:34:10 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Fri, 14 Nov 2008 08:34:10 -0500 Subject: [Casper] Script keeps deleting Message-ID: Hi All- I have a script that I run for post-Office installation set in my office self service policy. Every few days, when I open Casper Admin, it's been deleted and appears in red "missing." If I go to the CasperShare mount in the scripts folder, sure enough, it's gone. If I replace it, it's fine for a few days. I've repaired permissions on the share using the JSS utility but no luck. Any ideas? Thanks! -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081114/d716ed97/attachment-0001.htm From miles.leacy at themacadmin.com Fri Nov 14 05:46:24 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Fri, 14 Nov 2008 08:46:24 -0500 Subject: [Casper] Script keeps deleting In-Reply-To: References: Message-ID: Just to cover the "is it plugged in" level of troubleshooting... are you the only person who has the password to an account that can delete items from Casper Admin, or directly from the CasperShare? 2008/11/14 Nichols, Jared > Hi All- > > I have a script that I run for post-Office installation set in my office > self service policy. Every few days, when I open Casper Admin, it's been > deleted and appears in red "missing." If I go to the CasperShare mount in > the scripts folder, sure enough, it's gone. If I replace it, it's fine for > a few days. I've repaired permissions on the share using the JSS utility > but no luck. > > Any ideas? > > Thanks! > -- > Jared Nichols > ISD Infrastructure and Operations ? Desktop Engineering > MIT Lincoln Laboratory > 244 Wood St. > Lexington, MA 02420-9108 > (781) 981-5500 > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081114/c78b4e23/attachment.html From tlarki at kckps.org Fri Nov 14 06:37:21 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Fri, 14 Nov 2008 08:37:21 -0600 Subject: [Casper] Script keeps deleting In-Reply-To: References: Message-ID: <491D38C1.7141.0039.0@kckps.org> I assume you have it hosted on an OS X server? Are the ACLs and permissions for your read only and read/write account set properly on the server side? I have never seen a script "delete itself" before. Any other data on that casper share that is coming up missing? >>> "Miles Leacy" 11/14/08 7:46 AM >>> Just to cover the "is it plugged in" level of troubleshooting... are you the only person who has the password to an account that can delete items from Casper Admin, or directly from the CasperShare? 2008/11/14 Nichols, Jared Hi All- I have a script that I run for post-Office installation set in my office self service policy. Every few days, when I open Casper Admin, it's been deleted and appears in red "missing." If I go to the CasperShare mount in the scripts folder, sure enough, it's gone. If I replace it, it's fine for a few days. I've repaired permissions on the share using the JSS utility but no luck. Any ideas? Thanks! -- Jared Nichols ISD Infrastructure and Operations ? Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081114/c4919e85/attachment.html From jared.nichols at ll.mit.edu Fri Nov 14 07:12:10 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Fri, 14 Nov 2008 10:12:10 -0500 Subject: [Casper] Script keeps deleting In-Reply-To: <491D38C1.7141.0039.0@kckps.org> Message-ID: Yes, it's on OS X Server, Leopard. On the CasperShare sharepoint, there's currently nobody in the ACL and the POSIX read "casperadmin" as having ownership, "staff" group as read only and others having read only. I'm the only one with access to the server and the only interaction that I do with the CasperShare sharepoint is through the Caser Admin app. Nothing else is going missing. Currently, that script is the only script that I have, but I'm about to add another. I'll see if it happens to that one as well. Thanks j On 11/14/08 09:37 , "Thomas Larkin" wrote: I assume you have it hosted on an OS X server? Are the ACLs and permissions for your read only and read/write account set properly on the server side? I have never seen a script "delete itself" before. Any other data on that casper share that is coming up missing? >>> "Miles Leacy" 11/14/08 7:46 AM >>> Just to cover the "is it plugged in" level of troubleshooting... are you the only person who has the password to an account that can delete items from Casper Admin, or directly from the CasperShare? 2008/11/14 Nichols, Jared Hi All- I have a script that I run for post-Office installation set in my office self service policy. Every few days, when I open Casper Admin, it's been deleted and appears in red "missing." If I go to the CasperShare mount in the scripts folder, sure enough, it's gone. If I replace it, it's fine for a few days. I've repaired permissions on the share using the JSS utility but no luck. Any ideas? Thanks! -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 _______________________________________________ Casper mailing list Casper at listjamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081114/1648a38f/attachment.html From jared.nichols at ll.mit.edu Fri Nov 14 07:12:10 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Fri, 14 Nov 2008 10:12:10 -0500 Subject: [Casper] Script keeps deleting In-Reply-To: <491D38C1.7141.0039.0@kckps.org> Message-ID: Yes, it's on OS X Server, Leopard. On the CasperShare sharepoint, there's currently nobody in the ACL and the POSIX read "casperadmin" as having ownership, "staff" group as read only and others having read only. I'm the only one with access to the server and the only interaction that I do with the CasperShare sharepoint is through the Caser Admin app. Nothing else is going missing. Currently, that script is the only script that I have, but I'm about to add another. I'll see if it happens to that one as well. Thanks j On 11/14/08 09:37 , "Thomas Larkin" wrote: I assume you have it hosted on an OS X server? Are the ACLs and permissions for your read only and read/write account set properly on the server side? I have never seen a script "delete itself" before. Any other data on that casper share that is coming up missing? >>> "Miles Leacy" 11/14/08 7:46 AM >>> Just to cover the "is it plugged in" level of troubleshooting... are you the only person who has the password to an account that can delete items from Casper Admin, or directly from the CasperShare? 2008/11/14 Nichols, Jared Hi All- I have a script that I run for post-Office installation set in my office self service policy. Every few days, when I open Casper Admin, it's been deleted and appears in red "missing." If I go to the CasperShare mount in the scripts folder, sure enough, it's gone. If I replace it, it's fine for a few days. I've repaired permissions on the share using the JSS utility but no luck. Any ideas? Thanks! -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 _______________________________________________ Casper mailing list Casper at listjamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081114/1648a38f/attachment-0001.htm From tlarki at kckps.org Fri Nov 14 08:13:50 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Fri, 14 Nov 2008 10:13:50 -0600 Subject: [Casper] Script keeps deleting In-Reply-To: References: <491D38C1.7141.0039.0@kckps.org> Message-ID: <491D4F5E.7141.0039.0@kckps.org> Jared For simplicities sake, I recommend you keep the server administrator owner of every casper share item and then create ACLs for casper admin and casper install. That way every time you sync down packages and scripts you can simply populate the ownership and ACLs on down to ensure they are proper. I also create two local accounts on each casper server, one casper install and one casper admin, that way I only have one account that can read/write, and one account that can read only. I guess it is possible if the account that is reading the script is also writing to it, by deleting it afterward. When you push the script out manually through casper remote does it delete itself? ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Nichols, Jared" 11/14/08 9:12 AM >>> Yes, it?s on OS X Server, Leopard. On the CasperShare sharepoint, there?s currently nobody in the ACL and the POSIX read ?casperadmin? as having ownership, ?staff? group as read only and others having read only. I?m the only one with access to the server and the only interaction that I do with the CasperShare sharepoint is through the Caser Admin app. Nothing else is going missing. Currently, that script is the only script that I have, but I?m about to add another. I?ll see if it happens to that one as well. Thanks j On 11/14/08 09:37 , "Thomas Larkin" wrote: I assume you have it hosted on an OS X server? Are the ACLs and permissions for your read only and read/write account set properly on the server side? I have never seen a script "delete itself" before. Any other data on that casper share that is coming up missing? >>> "Miles Leacy" 11/14/08 7:46 AM >>> Just to cover the "is it plugged in" level of troubleshooting... are you the only person who has the password to an account that can delete items from Casper Admin, or directly from the CasperShare? 2008/11/14 Nichols, Jared Hi All- I have a script that I run for post-Office installation set in my office self service policy. Every few days, when I open Casper Admin, it's been deleted and appears in red "missing." If I go to the CasperShare mount in the scripts folder, sure enough, it's gone. If I replace it, it's fine for a few days. I've repaired permissions on the share using the JSS utility but no luck. Any ideas? Thanks! -- Jared Nichols ISD Infrastructure and Operations ? Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 _______________________________________________ Casper mailing list Casper at listjamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -- Jared Nichols ISD Infrastructure and Operations ? Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081114/894c6ed8/attachment.htm From rharter at uwsp.edu Fri Nov 14 08:41:44 2008 From: rharter at uwsp.edu (Ryan Harter) Date: Fri, 14 Nov 2008 10:41:44 -0600 Subject: [Casper] Script keeps deleting In-Reply-To: References: Message-ID: <72BE6F87-E04F-4686-AE6E-AF3E66229B27@uwsp.edu> Have you changed your master file server recently, or could you be adding the script to a server that's not your master. We had issues when we changed our master where it would sync to another server and delete anything new on it because it wasn't syncing the right way. Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu On Nov 14, 2008, at 9:12 AM, Nichols, Jared wrote: > Yes, it?s on OS X Server, Leopard. On the CasperShare sharepoint, > there?s currently nobody in the ACL and the POSIX read ?casperadmin? > as having ownership, ?staff? group as read only and others having > read only. I?m the only one with access to the server and the only > interaction that I do with the CasperShare sharepoint is through the > Caser Admin app. Nothing else is going missing. > > Currently, that script is the only script that I have, but I?m about > to add another. I?ll see if it happens to that one as well. > > Thanks > > j > On 11/14/08 09:37 , "Thomas Larkin" wrote: > > > > I assume you have it hosted on an OS X server? Are the ACLs and > permissions for your read only and read/write account set properly > on the server side? I have never seen a script "delete itself" > before. Any other data on that casper share that is coming up > missing? > > >>> "Miles Leacy" 11/14/08 7:46 AM >>> > Just to cover the "is it plugged in" level of troubleshooting... are > you the only person who has the password to an account that can > delete items from Casper Admin, or directly from the CasperShare? > > > > > > > > > > > > > > 2008/11/14 Nichols, Jared > > > > > > > > > > > > > > > Hi All- > > I have a script that I run for post-Office installation set in my > office self service policy. Every few days, when I open Casper > Admin, it's been deleted and appears in red "missing." If I go to > the CasperShare mount in the scripts folder, sure enough, it's > gone. If I replace it, it's fine for a few days. I've repaired > permissions on the share using the JSS utility but no luck. > > Any ideas? > > Thanks! > -- > Jared Nichols > ISD Infrastructure and Operations ? Desktop Engineering > MIT Lincoln Laboratory > 244 Wood St. > Lexington, MA 02420-9108 > (781) 981-5500 > > > > > > > _______________________________________________ > Casper mailing list > Casper at listjamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > > > > > > > > > > -- > Jared Nichols > ISD Infrastructure and Operations ? Desktop Engineering > MIT Lincoln Laboratory > 244 Wood St. > Lexington, MA 02420-9108 > (781) 981-5500 > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081114/3c651a93/attachment.html From david.lundgren at brooks.edu Fri Nov 14 12:37:52 2008 From: david.lundgren at brooks.edu (David Lundgren) Date: Fri, 14 Nov 2008 12:37:52 -0800 Subject: [Casper] set network time at startup? In-Reply-To: Message-ID: We've had the same problems with time issues on our Macs and ended up writing a custom synchronization script. It could handle some enhancements and possibly hooking into the system better. Right now it waits for 2 minutes before trying to synchronize on startup. We also have the script run every day at 9am (via /etc/periodic/daily). We use the servers in this order: 1) time.nist.gov 2) the ADC Each computer synchronizes twice. Once for each server in the list. I haven't tested it on Leopard yet, but I know on Tiger you had to kill Ntpd and ntpdate in order to get the time to actually be updated, which is why you get "NTP socket is in use." errors. I've attached the script that we run, if you plan on using it you should replace "time.example.com" with the server you want it to sync with. Hope that helps, and gives you a direction to look in. David Lundgren IT Systems Administrator Brooks Institute - "Passion, Vision, Excellence" 27 East Cota Street Santa Barbara, CA 93101 (888) 304-3456 (toll-free) (805) 690-7615 (office) http://www.brooks.edu On 11/4/08 1:19 PM, "NATHANIEL.LINDLEY at spps.org" wrote: > I got Issues with timesync on dual-boot macs. > > We have AD which is more time sensitive now and some people are having > login issues when going back and forth between Mac OS and WinXP on > BootCamp. So I've been reading a lot about this and haven't found a good > fix. > > I'd like to set two time servers in ntpd.conf one internal and one > external, for users that take their laptops home. > then I'd like a startup trigger that says, sync network time. I tried > ntpdate in Terminal but it says "NTP socket is in use." and in the > Console, I get a lot of errors about "(org.ntp.ntpd) Unknown key: > SHAutorizationRight" > -------------- next part -------------- A non-text attachment was scrubbed... Name: TimeSync Type: application/octet-stream Size: 761 bytes Desc: not available Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081114/d43ce494/attachment.obj From jared.nichols at ll.mit.edu Mon Nov 17 13:05:44 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Mon, 17 Nov 2008 16:05:44 -0500 Subject: [Casper] Smart static groups Message-ID: Is there a way to have a "static smart group?" Basically, I'm looking for a blend of a static and smart group. I have a group of 10 machines or so that I'm calling my "beta testing" group so I can try deployments and management out on them. I'd like to apply a smart group to this static group of "has more than 0 software updates available" for instance. Is there any way to do that? Perhaps I need to scope in some other way? I thought about doing it this way, by network segment for instance, but that wouldn't work in my case. Ideas? Thanks! -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081117/c6e84443/attachment.htm From miles.leacy at themacadmin.com Mon Nov 17 13:30:33 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Mon, 17 Nov 2008 16:30:33 -0500 Subject: [Casper] Smart static groups In-Reply-To: References: Message-ID: I don't believe that group membership can be a criterion for a smart group. Perhaps that can be a feature request. Does your static group have any other common elements? If they're on the same isolated subnet, you can create a Network Segment for them and use that as the common criterion. You could create a "beta testing" Department and add all of these machines to it and then scope down your smart group from there, i.e., by having criteria of "beta testing" department and >0 SW updates available. 2008/11/17 Nichols, Jared > Is there a way to have a "static smart group?" Basically, I'm looking > for a blend of a static and smart group. I have a group of 10 machines or > so that I'm calling my "beta testing" group so I can try deployments and > management out on them. I'd like to apply a smart group to this static > group of "has more than 0 software updates available" for instance. > > Is there any way to do that? Perhaps I need to scope in some other way? I > thought about doing it this way, by network segment for instance, but that > wouldn't work in my case. > > Ideas? > > Thanks! > -- > Jared Nichols > ISD Infrastructure and Operations ? Desktop Engineering > MIT Lincoln Laboratory > 244 Wood St. > Lexington, MA 02420-9108 > (781) 981-5500 > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081117/852505e6/attachment.htm From ERNSTCS at uwec.edu Mon Nov 17 13:36:40 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Mon, 17 Nov 2008 15:36:40 -0600 Subject: [Casper] Smart static groups In-Reply-To: Message-ID: If you know the names of the systems you could add criteria for Computer Name IS OR for each of the machines since there aren't many. Add a unique local user account to the systems so you could flag them in the receipts local accounts criteria. Whack the account when you're done. Otherwise as Miles suggests...feature request, but having a static smart group doesn't make sense as I pretty much would use the word dynamic in place of smart. Craig E On 11/17/08 3:05 PM, "Nichols, Jared" wrote: Is there a way to have a "static smart group?" Basically, I'm looking for a blend of a static and smart group. I have a group of 10 machines or so that I'm calling my "beta testing" group so I can try deployments and management out on them. I'd like to apply a smart group to this static group of "has more than 0 software updates available" for instance. Is there any way to do that? Perhaps I need to scope in some other way? I thought about doing it this way, by network segment for instance, but that wouldn't work in my case. Ideas? Thanks! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081117/09aed577/attachment.html From cmyers at uclan.ac.uk Mon Nov 17 16:25:37 2008 From: cmyers at uclan.ac.uk (Criss Myers) Date: Tue, 18 Nov 2008 00:25:37 +0000 Subject: [Casper] Smart static groups Message-ID: <49220B81020000810003743F@gwise-gw1.uclan.ac.uk> hi, yes thats what i do for pilot and testing macs, i create a department and put them in it Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> "Miles Leacy" 17/11/08 9:30 PM >>> I don't believe that group membership can be a criterion for a smart group. Perhaps that can be a feature request. Does your static group have any other common elements? If they're on the same isolated subnet, you can create a Network Segment for them and use that as the common criterion. You could create a "beta testing" Department and add all of these machines to it and then scope down your smart group from there, i.e., by having criteria of "beta testing" department and >0 SW updates available. 2008/11/17 Nichols, Jared > Is there a way to have a "static smart group?" Basically, I'm looking > for a blend of a static and smart group. I have a group of 10 machines or > so that I'm calling my "beta testing" group so I can try deployments and > management out on them. I'd like to apply a smart group to this static > group of "has more than 0 software updates available" for instance. > > Is there any way to do that? Perhaps I need to scope in some other way? I > thought about doing it this way, by network segment for instance, but that > wouldn't work in my case. > > Ideas? > > Thanks! > -- > Jared Nichols > ISD Infrastructure and Operations ? Desktop Engineering > MIT Lincoln Laboratory > 244 Wood St. > Lexington, MA 02420-9108 > (781) 981-5500 > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > From richard.hunter at squaregroup.co.uk Tue Nov 18 04:09:10 2008 From: richard.hunter at squaregroup.co.uk (Richard Hunter) Date: Tue, 18 Nov 2008 12:09:10 +0000 Subject: [Casper] Permission problems when using FUT Message-ID: Hey Guys When I deploy settings for the user specifically (system preference settings eg screensaver etc) and the machine is at the login screen. The preference files will be added to the users preference folder but all the permissions are wrong, the settings will not apply and because I am using mobile accounts I then have issues when the new pref files will not sync. If however, I log into the user account and then deploy the prefs they work correctly. How do I get this working without logging into the users account. I am also having an issue where my login policies from casper do not deploy at all. They are set to once per user at login and nothing happens. Any ideas? Using mobile accounts on Leopard Server 10.5 with 10.5.5 clients and Casper 6.01 Thanks Richard Hunter System Engineer Square Group Ltd -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081118/f6c3ed2b/attachment.html From jared.nichols at ll.mit.edu Tue Nov 18 05:22:56 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Tue, 18 Nov 2008 08:22:56 -0500 Subject: [Casper] Smart static groups In-Reply-To: <49220B81020000810003743F@gwise-gw1.uclan.ac.uk> Message-ID: Hi- It looks like this will be the best option as I've only got 2 departments set up right now anyway. Is JSS ID to Department a 1 to 1 relationship? j On 11/17/08 19:25 , "Criss Myers" wrote: hi, yes thats what i do for pilot and testing macs, i create a department and put them in it Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> "Miles Leacy" 17/11/08 9:30 PM >>> I don't believe that group membership can be a criterion for a smart group. Perhaps that can be a feature request. Does your static group have any other common elements? If they're on the same isolated subnet, you can create a Network Segment for them and use that as the common criterion. You could create a "beta testing" Department and add all of these machines to it and then scope down your smart group from there, i.e., by having criteria of "beta testing" department and >0 SW updates available. 2008/11/17 Nichols, Jared > Is there a way to have a "static smart group?" Basically, I'm looking > for a blend of a static and smart group. I have a group of 10 machines or > so that I'm calling my "beta testing" group so I can try deployments and > management out on them. I'd like to apply a smart group to this static > group of "has more than 0 software updates available" for instance. > > Is there any way to do that? Perhaps I need to scope in some other way? I > thought about doing it this way, by network segment for instance, but that > wouldn't work in my case. > > Ideas? > > Thanks! > -- > Jared Nichols > ISD Infrastructure and Operations - Desktop Engineering > MIT Lincoln Laboratory > 244 Wood St. > Lexington, MA 02420-9108 > (781) 981-5500 > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081118/67c8dec7/attachment.htm From ERNSTCS at uwec.edu Tue Nov 18 05:47:17 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Tue, 18 Nov 2008 07:47:17 -0600 Subject: [Casper] Permission problems when using FUT In-Reply-To: References: Message-ID: Hi Richard, When you say casper does nothing for your login policy, does that mean you see nothing in the jamf.log on that local machine when the jamf binary checks for login policies as well? If nothing is getting to the client and it is checking for login policies correctly the issue is most likely in how you have the policy configured. Make sure your scope of machines is set correctly. If you are getting errors in the jamf.log about something then we can tackle that. Post that log info back... Not much help I know, but that's where I'd start. Craig Ernst Systems Management and Configuration +-------------------+ University of Wisconsin-Eau Claire Learning and Technology Services 105 Garfield Ave Eau Claire, WI 54701 Phone: (715) 836-3639 Fax: (715) 836-6001 +-------------------+ ernstcs at uwec.edu ________________________________ From: casper-bounces at list.jamfsoftware.com [casper-bounces at list.jamfsoftware.com] On Behalf Of Richard Hunter [richard.hunter at squaregroup.co.uk] Sent: Tuesday, November 18, 2008 6:09 AM To: casper at list.jamfsoftware.com Subject: [Casper] Permission problems when using FUT Hey Guys When I deploy settings for the user specifically (system preference settings eg screensaver etc) and the machine is at the login screen. The preference files will be added to the users preference folder but all the permissions are wrong, the settings will not apply and because I am using mobile accounts I then have issues when the new pref files will not sync. If however, I log into the user account and then deploy the prefs they work correctly. How do I get this working without logging into the users account. I am also having an issue where my login policies from casper do not deploy at all. They are set to once per user at login and nothing happens. Any ideas? Using mobile accounts on Leopard Server 10.5 with 10.5.5 clients and Casper 6.01 Thanks Richard Hunter System Engineer Square Group Ltd -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081118/7fe8328d/attachment.html From tlarki at kckps.org Tue Nov 18 06:53:57 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Tue, 18 Nov 2008 08:53:57 -0600 Subject: [Casper] Smart static groups In-Reply-To: References: <49220B81020000810003743F@gwise-gw1.uclan.ac.uk> Message-ID: <492282A4.7141.0039.0@kckps.org> Jared There are tons of ways to do this. Here are some ways how you can separate machines on your network. 1) JSS ID - once your system has been inventoried it will give you a JSS ID which is unique to that computer. You can create a smart group based on the JSS ID 2) Network segments - If you have them on their own VLAN or behind a router with NAT, and know the IP ranges that those machines get, you can create a network segment of those machines only 3) Naming convention - If they are named unique compared to your production machines, you can create a group based on name 4) To further point three, you can also do it by OS, software configuration, etc I had a couple of Mac minis behind a router which all were given a certain IP range that is unique to that network, then created a smart group and department based on that network group. Then have a second JSS and a second set of clients behind NAT for my sandbox. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Nichols, Jared" 11/18/08 7:22 AM >>> Hi- It looks like this will be the best option as I?ve only got 2 departments set up right now anyway. Is JSS ID to Department a 1 to 1 relationship? j On 11/17/08 19:25 , "Criss Myers" wrote: hi, yes thats what i do for pilot and testing macs, i create a department and put them in it Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> "Miles Leacy" 17/11/08 9:30 PM >>> I don't believe that group membership can be a criterion for a smart group. Perhaps that can be a feature request. Does your static group have any other common elements? If they're on the same isolated subnet, you can create a Network Segment for them and use that as the common criterion. You could create a "beta testing" Department and add all of these machines to it and then scope down your smart group from there, i.e., by having criteria of "beta testing" department and >0 SW updates available. 2008/11/17 Nichols, Jared > Is there a way to have a "static smart group?" Basically, I'm looking > for a blend of a static and smart group. I have a group of 10 machines or > so that I'm calling my "beta testing" group so I can try deployments and > management out on them. I'd like to apply a smart group to this static > group of "has more than 0 software updates available" for instance. > > Is there any way to do that? Perhaps I need to scope in some other way? I > thought about doing it this way, by network segment for instance, but that > wouldn't work in my case. > > Ideas? > > Thanks! > -- > Jared Nichols > ISD Infrastructure and Operations ? Desktop Engineering > MIT Lincoln Laboratory > 244 Wood St. > Lexington, MA 02420-9108 > (781) 981-5500 > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -- Jared Nichols ISD Infrastructure and Operations ? Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081118/2cb5f610/attachment.htm From jared.nichols at ll.mit.edu Wed Nov 19 08:29:25 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Wed, 19 Nov 2008 11:29:25 -0500 Subject: [Casper] Package Receipts Message-ID: Hi- What exactly does Casper look for in regard to receipts? Should it list everything that's in /Library/Receipts? I have one machine in particular, I wanted to check if a piece of software was installed (our own internal package that just modifies security settings) and didn't see it listed in the receipts listing on this particular computer - my testing machine actually. I went into /Library/Receipts, and there's actually a lot of things listed in there that aren't listed in the receipts in the JSS entry. Granted, a lot of them were installed by a meta package (office for instance) and the meta package shows up, but not the child packages - which is fine. The package I'm looking for is also a child of a meta package, but I'm seeing neither the child or parent in the report. j -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081119/ab67e8b4/attachment.htm From william.smith at merrillcorp.com Wed Nov 19 09:13:29 2008 From: william.smith at merrillcorp.com (Smith, William) Date: Wed, 19 Nov 2008 11:13:29 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: Message-ID: With the help of the folks at JAMF (thank you, Sam) I've created a simple workaround to my problem. The computer name is set by Casper at the end of imaging but before rebooting to the imaged drive. At that point it is setting the Computer Name and Hostname in: /Library/Preferences/SystemConfiguration/preferences.plist This preferences.plist file does not exist in an InstaDMG image. It is created by the Apple Setup Assistant, which has never run. Without the presence of this file Casper cannot set the names. Our workaround is to package the preferences.plist file from an existing machine and include it during the imaging process. Copying the plist file from my MacBook Pro to a PowerMac MDD G4 leads me to believe this should work for most machines but I haven't tested any further. The preferences.plist file also includes your Network Locations settings, which location is active and your active network interfaces. Be sure to set these prior to packaging. -- bill William M. Smith, Technical Analyst MCS IT Merrill Communications, LLC (651) 632-1492 On 11/11/08 4:37 PM, "Steve Wood" wrote: > I am having the exact same problem and the good folks at JAMF are working on > it. So far we haven't been able to figure out why it is happening. > > I have tried pushing just the image, without any extra apps or scripts, and > I've tried it with the scripts and apps. Both ways yield the same result. > > To get around this, I've added to my post image script a piece that pulls > the serial number of the machine and renames the machine to the serial > number. Not optimal, but it at least makes it easy to ID in ARD after > imaging is done, and then I can go in and manually change it: > > # rename computer to the serial number > > NewName=`system_profiler | grep "Serial Number" | awk '{print $3}'` > touch /$NewName > #NewName='system_profiler SPHardwareDataType | grep Serial | awk '{print > $3}'' > scutil --set ComputerName $NewName > scutil --set LocalHostName $NewName > scutil --set HostName $NewName > > On 11/11/08 4:33 PM, "Smith, William" wrote: > >> Hi Folks! >> >> I am testing InstaDMG as a means of creating our base Mac OS X 10.5 image. >> Currently, I have it creating a fully patched 10.5.5 image and that image is >> in both our production Casper 5.13 system as well as our testing Casper 6.01 >> system. >> >> This 10.5.5 image is virgin until I install it with Casper. I am using a >> combination of scripts and packages to add a local admin user, prevent the >> setup assistant from appearing, set network preferences, time zone, etc. >> >> When I image with either Casper 5.13 or Casper Imaging 6.01 I'm finding that >> the Computer Name is not getting populated in the Sharing preference pane. >> It is completely blank. If I click the Edit... button to view the Local >> Hostname it shows "Macintosh.local" instead of "MachineName.local". >> >> Has anyone seen this behavior before? I've searched both the Composer and >> Casper mailing list archives but neither returned results for InstaDMG. From miles.leacy at themacadmin.com Wed Nov 19 09:40:59 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Wed, 19 Nov 2008 12:40:59 -0500 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: References: Message-ID: Thanks for the info. This does open up some more questions in search of a better solution... The thought of manually building system configuration preferences takes the wind out of my automation sails, metaphorically speaking. I don't like the idea of bringing over another machine's plist either. It has potential for cruft, which we're trying to eliminate with InstaDMG, and it makes the assumption that we have a working machine to pull a plist from. We probably do, but what if you're setting up a brand new site? I'd rather be able to do this via scripting. How does Apple Setup Assistant generate the /Library/Preferences/SystemConfiguration/preferences.plist file? If it uses defaults, then we can deploy a plist that only contains the computer name and hostname keys, and let ASA handle the rest. If the jamf binary can query the JSS, perhaps a script that gets the computer name and host name from the JSS, and then performs "defaults write /Volumes/yourtargetvolume/Library/Preferences/SystemConfiguration/preferences.plist " would be possible. What if, as part of the InstaDMG process, you include a script that executes "touch /Volumes/yourtargetvolume/Library/Preferences/SystemConfiguration/preferences.plist"? Will the existence of an empty file allow Casper to set the preferences? Thanks, Miles Leacy On Wed, Nov 19, 2008 at 12:13 PM, Smith, William < william.smith at merrillcorp.com> wrote: > With the help of the folks at JAMF (thank you, Sam) I've created a simple > workaround to my problem. > > The computer name is set by Casper at the end of imaging but before > rebooting to the imaged drive. At that point it is setting the Computer > Name > and Hostname in: > > /Library/Preferences/SystemConfiguration/preferences.plist > > This preferences.plist file does not exist in an InstaDMG image. It is > created by the Apple Setup Assistant, which has never run. Without the > presence of this file Casper cannot set the names. > > Our workaround is to package the preferences.plist file from an existing > machine and include it during the imaging process. > > Copying the plist file from my MacBook Pro to a PowerMac MDD G4 leads me to > believe this should work for most machines but I haven't tested any > further. > > The preferences.plist file also includes your Network Locations settings, > which location is active and your active network interfaces. Be sure to set > these prior to packaging. > > -- > > bill > > William M. Smith, Technical Analyst > MCS IT > Merrill Communications, LLC > (651) 632-1492 > > On 11/11/08 4:37 PM, "Steve Wood" wrote: > > > I am having the exact same problem and the good folks at JAMF are working > on > > it. So far we haven't been able to figure out why it is happening. > > > > I have tried pushing just the image, without any extra apps or scripts, > and > > I've tried it with the scripts and apps. Both ways yield the same > result. > > > > To get around this, I've added to my post image script a piece that pulls > > the serial number of the machine and renames the machine to the serial > > number. Not optimal, but it at least makes it easy to ID in ARD after > > imaging is done, and then I can go in and manually change it: > > > > # rename computer to the serial number > > > > NewName=`system_profiler | grep "Serial Number" | awk '{print $3}'` > > touch /$NewName > > #NewName='system_profiler SPHardwareDataType | grep Serial | awk '{print > > $3}'' > > scutil --set ComputerName $NewName > > scutil --set LocalHostName $NewName > > scutil --set HostName $NewName > > > > On 11/11/08 4:33 PM, "Smith, William" > wrote: > > > >> Hi Folks! > >> > >> I am testing InstaDMG as a means of creating our base Mac OS X 10.5 > image. > >> Currently, I have it creating a fully patched 10.5.5 image and that > image is > >> in both our production Casper 5.13 system as well as our testing Casper > 6.01 > >> system. > >> > >> This 10.5.5 image is virgin until I install it with Casper. I am using a > >> combination of scripts and packages to add a local admin user, prevent > the > >> setup assistant from appearing, set network preferences, time zone, etc. > >> > >> When I image with either Casper 5.13 or Casper Imaging 6.01 I'm finding > that > >> the Computer Name is not getting populated in the Sharing preference > pane. > >> It is completely blank. If I click the Edit... button to view the Local > >> Hostname it shows "Macintosh.local" instead of "MachineName.local". > >> > >> Has anyone seen this behavior before? I've searched both the Composer > and > >> Casper mailing list archives but neither returned results for InstaDMG. > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081119/db17c2ee/attachment.htm From william.smith at merrillcorp.com Wed Nov 19 11:20:22 2008 From: william.smith at merrillcorp.com (Smith, William) Date: Wed, 19 Nov 2008 13:20:22 -0600 Subject: [Casper] Computer Name is not populating when imaging In-Reply-To: Message-ID: Hi Miles! Great questions! This method is definitely a workaround and not a solution. I left out some details to shorten my post but I'll include them here. Just the presence of the file isn't enough so a touch command to create the preferences.plist file doesn't work. I do believe that a "defaults write" command with the proper properties would suffice. In my testing, the extra properties controlling the network interfaces, location, etc., must be present for binding to work. I originally removed all the properties in the preferences.plist file except for the one for the Computer Name and Hostname. While the other properties were re-written by the Mac OS they apparently weren't done either quickly enough or in the correct order of events to allow my script to bind to Open Directory. Querying the JSS for the Computer Name does not meet my needs in my environment. We don't pre-populate or pre-stage machines. I need to be able to specify the name in the Casper or Casper Imaging application. Keep in mind that the same file with the cruft from the original computer is still there with an OS image created by Composer. In my opinion, I haven't created any more than would already be there. My hope is that the JAMF folks make some changes to accommodate for InstaDMG OS files. (I'm assuming defaults write to create the file with minimum properties is the way to go.) They have an interest and desire to make things work for their customers, which I appreciate greatly. -- bill William M. Smith, Technical Analyst MCS IT Merrill Communications, LLC (651) 632-1492 On 11/19/08 11:40 AM, "Miles Leacy" wrote: > Thanks for the info. > > This does open up some more questions in search of a better solution... > > The thought of manually building system configuration preferences takes the > wind out of my automation sails, metaphorically speaking. I don't like the > idea of bringing over another machine's plist either. It has potential for > cruft, which we're trying to eliminate with InstaDMG, and it makes the > assumption that we have a working machine to pull a plist from. We probably > do, but what if you're setting up a brand new site? I'd rather be able to do > this via scripting. > > How does Apple Setup Assistant generate the > /Library/Preferences/SystemConfiguration/preferences.plist file? If it uses > defaults, then we can deploy a plist that only contains the computer name and > hostname keys, and let ASA handle the rest. > > If the jamf binary can query the JSS, perhaps a script that gets the computer > name and host name from the JSS, and then performs "defaults write > /Volumes/yourtargetvolume/Library/Preferences/SystemConfiguration/preferences. > plist " would be possible. > > What if, as part of the InstaDMG process, you include a script that executes > "touch > /Volumes/yourtargetvolume/Library/Preferences/SystemConfiguration/preferences. > plist"? Will the existence of an empty file allow Casper to set the > preferences? > > > On Wed, Nov 19, 2008 at 12:13 PM, Smith, William > wrote: >> With the help of the folks at JAMF (thank you, Sam) I've created a simple >> workaround to my problem. >> >> The computer name is set by Casper at the end of imaging but before >> rebooting to the imaged drive. At that point it is setting the Computer Name >> and Hostname in: >> >> /Library/Preferences/SystemConfiguration/preferences.plist >> >> This preferences.plist file does not exist in an InstaDMG image. It is >> created by the Apple Setup Assistant, which has never run. Without the >> presence of this file Casper cannot set the names. >> >> Our workaround is to package the preferences.plist file from an existing >> machine and include it during the imaging process. >> >> Copying the plist file from my MacBook Pro to a PowerMac MDD G4 leads me to >> believe this should work for most machines but I haven't tested any further. >> >> The preferences.plist file also includes your Network Locations settings, >> which location is active and your active network interfaces. Be sure to set >> these prior to packaging. >> >> On 11/11/08 4:37 PM, "Steve Wood" wrote: >> >>> I am having the exact same problem and the good folks at JAMF are working on >>> it. So far we haven't been able to figure out why it is happening. >>> >>> I have tried pushing just the image, without any extra apps or scripts, and >>> I've tried it with the scripts and apps. Both ways yield the same result. >>> >>> To get around this, I've added to my post image script a piece that pulls >>> the serial number of the machine and renames the machine to the serial >>> number. Not optimal, but it at least makes it easy to ID in ARD after >>> imaging is done, and then I can go in and manually change it: >>> >>> # rename computer to the serial number >>> >>> NewName=`system_profiler | grep "Serial Number" | awk '{print $3}'` >>> touch /$NewName >>> #NewName='system_profiler SPHardwareDataType | grep Serial | awk '{print >>> $3}'' >>> scutil --set ComputerName $NewName >>> scutil --set LocalHostName $NewName >>> scutil --set HostName $NewName >>> >>> On 11/11/08 4:33 PM, "Smith, William" wrote: >>> >>>> Hi Folks! >>>> >>>> I am testing InstaDMG as a means of creating our base Mac OS X 10.5 image. >>>> Currently, I have it creating a fully patched 10.5.5 image and that image >>>> is >>>> in both our production Casper 5.13 system as well as our testing Casper >>>> 6.01 >>>> system. >>>> >>>> This 10.5.5 image is virgin until I install it with Casper. I am using a >>>> combination of scripts and packages to add a local admin user, prevent the >>>> setup assistant from appearing, set network preferences, time zone, etc. >>>> >>>> When I image with either Casper 5.13 or Casper Imaging 6.01 I'm finding >>>> that >>>> the Computer Name is not getting populated in the Sharing preference pane. >>>> It is completely blank. If I click the Edit... button to view the Local >>>> Hostname it shows "Macintosh.local" instead of "MachineName.local". >>>> >>>> Has anyone seen this behavior before? I've searched both the Composer and >>>> Casper mailing list archives but neither returned results for InstaDMG. From eric.winkelhake at mundocomww.com Thu Nov 20 11:23:41 2008 From: eric.winkelhake at mundocomww.com (Eric Winkelhake) Date: Thu, 20 Nov 2008 13:23:41 -0600 Subject: [Casper] Casper Admin Configs Message-ID: Is there a way to make a configuration "inactive"?? I want to keep a configuration but not allow any one to use, in fact I dont even want it showing up in the Casper Imaging app. Any bright ideas?? ***Please note my phone numbers and email address have changed*** Eric Winkelhake MundocomWW 312.220.1669 312.504.5155 eric.winkelhake at mundocomww.com ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081120/01d4861d/attachment.html From ERNSTCS at uwec.edu Thu Nov 20 11:25:05 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Thu, 20 Nov 2008 13:25:05 -0600 Subject: [Casper] Casper Admin Configs In-Reply-To: Message-ID: You have no options that I'm aware of, but I think it's a great feature request! To have a status on a config. Craig E On 11/20/08 1:23 PM, "Eric Winkelhake" wrote: Is there a way to make a configuration "inactive"?? I want to keep a configuration but not allow any one to use, in fact I dont even want it showing up in the Casper Imaging app. Any bright ideas?? ***Please note my phone numbers and email address have changed*** Eric Winkelhake MundocomWW 312.220.1669 312.504.5155 eric.winkelhake at mundocomww.com ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081120/f5e393b7/attachment.htm From jared.nichols at ll.mit.edu Thu Nov 20 11:43:08 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Thu, 20 Nov 2008 14:43:08 -0500 Subject: [Casper] Printer installs Message-ID: Hi- I made printer installations self-serviceable and it looks all well and good, but it's taking FOREVER to install a printer...I've tried it on 3 machines and I finally give up after 10 minutes. I figure I must be doing something wrong... -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081120/b5343ce2/attachment.html From miles.leacy at themacadmin.com Thu Nov 20 12:38:49 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Thu, 20 Nov 2008 15:38:49 -0500 Subject: [Casper] Packaging an account Message-ID: Hey all, Since Leopard uses flat files for accounts, I was wondering if anyone has had any luck in creating accounts on Leopard boxes via a package or script. I'd be eager to see what anyone might be doing with this. -Miles -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081120/7e854496/attachment.html From william.smith at merrillcorp.com Thu Nov 20 13:04:51 2008 From: william.smith at merrillcorp.com (Smith, William) Date: Thu, 20 Nov 2008 15:04:51 -0600 Subject: [Casper] Packaging an account In-Reply-To: Message-ID: On 11/20/08 2:38 PM, "Miles Leacy" wrote: > Hey all, > > Since Leopard uses flat files for accounts, I was wondering if anyone has had > any luck in creating accounts on Leopard boxes via a package or script. > > I'd be eager to see what anyone might be doing with this. Someone has contributed CreateUser to the AFP548.com site I'm only using it to create a single admin account with my InstaDMG packages but it does exactly what I need. You can customized standard vs. admin user, home folder path, name, etc. -- bill William M. Smith, Technical Analyst MCS IT Merrill Communications, LLC (651) 632-1492 From ERNSTCS at uwec.edu Thu Nov 20 13:07:15 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Thu, 20 Nov 2008 15:07:15 -0600 Subject: [Casper] Packaging an account In-Reply-To: Message-ID: Am I missing something here? /usr/sbin/jamf createAccount And if you aren't sure what you can do.../usr/sbin/jamf help createAccount Throw it in a SH script and WHAM...account. I use that often. Craig E On 11/20/08 2:38 PM, "Miles Leacy" wrote: Hey all, Since Leopard uses flat files for accounts, I was wondering if anyone has had any luck in creating accounts on Leopard boxes via a package or script. I'd be eager to see what anyone might be doing with this. -Miles -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081120/e4db4617/attachment.html From tlarki at kckps.org Thu Nov 20 13:09:57 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 20 Nov 2008 15:09:57 -0600 Subject: [Casper] Packaging an account In-Reply-To: References: Message-ID: <49257DC5.7141.0039.0@kckps.org> I assume you mean local accounts? Here is a shameless plug http://tlarkin.com/tech/create-hidden-user-105 http://tlarkin.com/tech/create-local-user-accounts Those will create local accounts, are you talking about local accounts I take it? Let me know tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Miles Leacy" 11/20/08 2:38 PM >>> Hey all, Since Leopard uses flat files for accounts, I was wondering if anyone has had any luck in creating accounts on Leopard boxes via a package or script. I'd be eager to see what anyone might be doing with this. -Miles -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081120/72314cf2/attachment.html From tlarki at kckps.org Thu Nov 20 13:10:54 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 20 Nov 2008 15:10:54 -0600 Subject: [Casper] Packaging an account In-Reply-To: References: Message-ID: <49257DFE.7141.0039.0@kckps.org> Of course there is the easy way Jamf does it as well, which you can also script, but I am not sure how customizable it is compared to the dscl. I have never sat there and done a full comparison >>> "Ernst, Craig S." 11/20/08 3:07 PM >>> Am I missing something here? /usr/sbin/jamf createAccount And if you aren?t sure what you can do.../usr/sbin/jamf help createAccount Throw it in a SH script and WHAM...account. I use that often. Craig E On 11/20/08 2:38 PM, "Miles Leacy" wrote: Hey all, Since Leopard uses flat files for accounts, I was wondering if anyone has had any luck in creating accounts on Leopard boxes via a package or script. I'd be eager to see what anyone might be doing with this. -Miles -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081120/697b7286/attachment.htm From miles.leacy at themacadmin.com Thu Nov 20 13:14:35 2008 From: miles.leacy at themacadmin.com (Miles Leacy) Date: Thu, 20 Nov 2008 16:14:35 -0500 Subject: [Casper] Packaging an account In-Reply-To: References: Message-ID: 2008/11/20 Ernst, Craig S. > Am I missing something here? > Yes. My cold-medicine-addled brain. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081120/0deb45ed/attachment.html From jared.nichols at ll.mit.edu Fri Nov 21 05:53:23 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Fri, 21 Nov 2008 08:53:23 -0500 Subject: [Casper] Printer installs In-Reply-To: Message-ID: Some additional information... It turns out that if I force quit Self Service, the PPD shows up in /private/etc/cups/ppd. It wouldn't show up before doing the force quit. The printer never maps. However, I am able to successfully deploy the printer via Casper Remote. Are printers just not meant to deploy with Self Service? Thanks j On 11/20/08 14:43 , "Jared Nichols" wrote: Hi- I made printer installations self-serviceable and it looks all well and good, but it's taking FOREVER to install a printer...I've tried it on 3 machines and I finally give up after 10 minutes. I figure I must be doing something wrong... -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081121/b3694b28/attachment.html From eric.winkelhake at mundocomww.com Fri Nov 21 07:36:58 2008 From: eric.winkelhake at mundocomww.com (Eric Winkelhake) Date: Fri, 21 Nov 2008 09:36:58 -0600 Subject: [Casper] Printer installs In-Reply-To: Message-ID: I have all my printers available in self service, about 12 or 13 of them. Never had any issues, except with appletalk printers being installed on tiger machines, that would get a little wacky sometimes. Now I'm all IP printing and everything works great. ***Please note my phone numbers and email address have changed*** Eric Winkelhake MundocomWW 312.220.1669 312.504.5155 eric.winkelhake at mundocomww.com "Nichols, Jared" Sent by: casper-bounces at list.jamfsoftware.com 11/21/08 08:09 AM To "casper at list.jamfsoftware.com" cc Subject Re: [Casper] Printer installs Some additional information... It turns out that if I force quit Self Service, the PPD shows up in /private/etc/cups/ppd. It wouldn?t show up before doing the force quit. The printer never maps. However, I am able to successfully deploy the printer via Casper Remote. Are printers just not meant to deploy with Self Service? Thanks j On 11/20/08 14:43 , "Jared Nichols" wrote: Hi- I made printer installations self-serviceable and it looks all well and good, but it?s taking FOREVER to install a printer...I?ve tried it on 3 machines and I finally give up after 10 minutes. I figure I must be doing something wrong... -- Jared Nichols ISD Infrastructure and Operations ? Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500_______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081121/7baccace/attachment-0001.html From jared.nichols at ll.mit.edu Mon Nov 24 07:17:43 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Mon, 24 Nov 2008 10:17:43 -0500 Subject: [Casper] Script help Message-ID: Hi- What's the best way to have a machine report its DAT anti-virus level? We use McAfee VirusScan 8.6.1, which stores its dats in /usr/local/vscanx/dats All I really need is an "ls" on that folder as the folders contained within "dats" are the dat levels, e.g. "5443" for the most recent. The resource kit has a nice script, but it's for Virex. VirusScan doesn't have the uvscan command that the script references (or at least not that I'm aware of) Anyway... At my old job I used Apple Remote Desktop and could just display the results of an LS command on my admin workstation. How do I get something similar with Casper? I was thinking that I'd have a script do an LS on /usr/local/vscanx/dats and pipe that to a file that used a query to networksetup to name it the name of the computer. Then, I'd copy it to my CasperShare. Wrong way about it? Thanks!!! j -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081124/9e0387ae/attachment.htm From jared.nichols at ll.mit.edu Mon Nov 24 07:17:43 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Mon, 24 Nov 2008 10:17:43 -0500 Subject: [Casper] Script help Message-ID: Hi- What's the best way to have a machine report its DAT anti-virus level? We use McAfee VirusScan 8.6.1, which stores its dats in /usr/local/vscanx/dats All I really need is an "ls" on that folder as the folders contained within "dats" are the dat levels, e.g. "5443" for the most recent. The resource kit has a nice script, but it's for Virex. VirusScan doesn't have the uvscan command that the script references (or at least not that I'm aware of) Anyway... At my old job I used Apple Remote Desktop and could just display the results of an LS command on my admin workstation. How do I get something similar with Casper? I was thinking that I'd have a script do an LS on /usr/local/vscanx/dats and pipe that to a file that used a query to networksetup to name it the name of the computer. Then, I'd copy it to my CasperShare. Wrong way about it? Thanks!!! j -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081124/9e0387ae/attachment.html From ERNSTCS at uwec.edu Mon Nov 24 07:46:55 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Mon, 24 Nov 2008 09:46:55 -0600 Subject: [Casper] Script help In-Reply-To: Message-ID: This sounds similar to some of the maintenance reporting we do. To have everything a bit more central I might suggest a script that touches a website with that data for that computer and places it in a database. Then you can create a webpage to view the results of those machines. It's like making your own centralized virus management console. I'm too lazy to do that so I'd rather purchase a product that comes with it. =) Pass the machine name (or whatever other data you want it to have there), and the result of your command. I assume this is something you'd do on a regular basis. The perl example below is, and you can get the computername from the JAMF Binary, too. But we clean out profiles nightly, and this script is called when that process is done. #Post Remote Log `/usr/bin/plutil -convert xml1 /Library/Preferences/SystemConfiguration/preferences.plist`; $xml =`/bin/cat /Library/Preferences/SystemConfiguration/preferences.plist`; $xml =substr($xml, (index $xml, 'ComputerName'), -1); $xml =substr($xml, (index $xml, '' )+8,-1); $computerName =substr($xml, 0, index ($xml, '')); `/usr/bin/curl "www.server.com/log.asp?compName=$computerName"`; } Hopefully I'm not off the mark on what you're looking for. Craig E On 11/24/08 9:17 AM, "Nichols, Jared" wrote: Hi- What's the best way to have a machine report its DAT anti-virus level? We use McAfee VirusScan 8.6.1, which stores its dats in /usr/local/vscanx/dats. All I really need is an "ls" on that folder as the folders contained within "dats" are the dat levels, e.g. "5443" for the most recent. The resource kit has a nice script, but it's for Virex. VirusScan doesn't have the uvscan command that the script references (or at least not that I'm aware of) Anyway... At my old job I used Apple Remote Desktop and could just display the results of an LS command on my admin workstation. How do I get something similar with Casper? I was thinking that I'd have a script do an LS on /usr/local/vscanx/dats and pipe that to a file that used a query to networksetup to name it the name of the computer. Then, I'd copy it to my CasperShare. Wrong way about it? Thanks!!! j -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081124/eee29a69/attachment.htm From nick at jamfsoftware.com Mon Nov 24 08:39:36 2008 From: nick at jamfsoftware.com (Nick Amundsen) Date: Mon, 24 Nov 2008 08:39:36 -0800 Subject: [Casper] Script help In-Reply-To: Message-ID: Hi Jared, It appears that VirusScan does not include the uvscan command anymore, but this information is now available in a plist located in /Library/Preferences/com.Mcafee.VirusScan.plist. The virus DAT version can be scanned by running: /usr/bin/defaults read /Library/Preferences/com.Mcafee.VirusScan Update_DATVersion The script in the Resource Kit can be modified a bit to provide similar reporting as the Virex script by using this command in place of the uvscan command. Once modified, this script can be run via policy or a Casper Remote action to report the definitions to the JSS. Hope this helps. Just a reminder to folks - if there are other questions related to items provided in the resource kit, or if you have ideas for future features of the Resource Kit, feel free to drop a line on the Resource Kit mailing list. We have created that list in an effort to separate traffic and ensure that the lists are specialized by product. Thanks! Nick Amundsen JAMF Software Resource Kit Team On 11/24/08 9:17 AM, "Nichols, Jared" wrote: Hi- What's the best way to have a machine report its DAT anti-virus level? We use McAfee VirusScan 8.6.1, which stores its dats in /usr/local/vscanx/dats. All I really need is an "ls" on that folder as the folders contained within "dats" are the dat levels, e.g. "5443" for the most recent. The resource kit has a nice script, but it's for Virex. VirusScan doesn't have the uvscan command that the script references (or at least not that I'm aware of) Anyway... At my old job I used Apple Remote Desktop and could just display the results of an LS command on my admin workstation. How do I get something similar with Casper? I was thinking that I'd have a script do an LS on /usr/local/vscanx/dats and pipe that to a file that used a query to networksetup to name it the name of the computer. Then, I'd copy it to my CasperShare. Wrong way about it? Thanks!!! j -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081124/34440270/attachment.html From ERNSTCS at uwec.edu Mon Nov 24 08:53:34 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Mon, 24 Nov 2008 10:53:34 -0600 Subject: [Casper] Script help In-Reply-To: Message-ID: For sure...don't write an entire new system like I suggested...how absurd... http://www.jamfsoftware.com/jamf_nation/resourcekit.php Craig E On 11/24/08 10:39 AM, "Nick Amundsen" wrote: Hi Jared, It appears that VirusScan does not include the uvscan command anymore, but this information is now available in a plist located in /Library/Preferences/com.Mcafee.VirusScan.plist. The virus DAT version can be scanned by running: /usr/bin/defaults read /Library/Preferences/com.Mcafee.VirusScan Update_DATVersion The script in the Resource Kit can be modified a bit to provide similar reporting as the Virex script by using this command in place of the uvscan command. Once modified, this script can be run via policy or a Casper Remote action to report the definitions to the JSS. Hope this helps. Just a reminder to folks - if there are other questions related to items provided in the resource kit, or if you have ideas for future features of the Resource Kit, feel free to drop a line on the Resource Kit mailing list. We have created that list in an effort to separate traffic and ensure that the lists are specialized by product. Thanks! Nick Amundsen JAMF Software Resource Kit Team On 11/24/08 9:17 AM, "Nichols, Jared" wrote: Hi- What's the best way to have a machine report its DAT anti-virus level? We use McAfee VirusScan 8.6.1, which stores its dats in /usr/local/vscanx/dats. All I really need is an "ls" on that folder as the folders contained within "dats" are the dat levels, e.g. "5443" for the most recent. The resource kit has a nice script, but it's for Virex. VirusScan doesn't have the uvscan command that the script references (or at least not that I'm aware of) Anyway... At my old job I used Apple Remote Desktop and could just display the results of an LS command on my admin workstation. How do I get something similar with Casper? I was thinking that I'd have a script do an LS on /usr/local/vscanx/dats and pipe that to a file that used a query to networksetup to name it the name of the computer. Then, I'd copy it to my CasperShare. Wrong way about it? Thanks!!! j -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081124/c061bb0f/attachment-0001.htm From jared.nichols at ll.mit.edu Tue Nov 25 06:05:59 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Tue, 25 Nov 2008 09:05:59 -0500 Subject: [Casper] Script help In-Reply-To: Message-ID: Hi all- I took the suggestion of scanning the plist and just backed out the scope a bit. I'll let the script speak for itself. Feel free to modify for your own use: (attached as well) #!/bin/sh ################################################################################################ ##### Filename: vsinfo.sh ##### ##### Author: Jared F. Nichols ##### ##### Purpose: Report VirusScan information to central server in the form of a text file. ##### ##### ##### ##### This script requires the installation of the Jamf binary, though the 'mount' command ##### ##### could be used for share mounting and networksetup for hostname. ##### ################################################################################################ ## Set a variable to call the file. In this case, the name that Jamf has for the computer. ## Use sed to remove the XML tags. filename=`jamf getComputerName | sed -e 's///' -e 's/<\/\computer_name>//'` ## Use the Jamf binary to mount our file share. In our case, a guest write-only share on our JSS jamf mount -server LLOSX1 -share DATlogs -type afp ## Now that we have a name we're giving the file and a place to put it, read our info from the ## McAfee plist file directly to the file share, overwriting anything already there. defaults read /Library/Preferences/com.Mcafee.VirusScan > /Volumes/DATlogs/$filename ## Unmount our share forcibly. Forcibly because the file we need has been written and we ## don't want to throw any errors to the user. umount -f /Volumes/DATlogs exit 0 On 11/24/08 11:53 , "Ernst, Craig S." wrote: For sure...don't write an entire new system like I suggested...how absurd... http://www.jamfsoftware.com/jamf_nation/resourcekit.php Craig E On 11/24/08 10:39 AM, "Nick Amundsen" wrote: Hi Jared, It appears that VirusScan does not include the uvscan command anymore, but this information is now available in a plist located in /Library/Preferences/com.Mcafee.VirusScan.plist. The virus DAT version can be scanned by running: /usr/bin/defaults read /Library/Preferences/com.Mcafee.VirusScan Update_DATVersion The script in the Resource Kit can be modified a bit to provide similar reporting as the Virex script by using this command in place of the uvscan command. Once modified, this script can be run via policy or a Casper Remote action to report the definitions to the JSS. Hope this helps. Just a reminder to folks - if there are other questions related to items provided in the resource kit, or if you have ideas for future features of the Resource Kit, feel free to drop a line on the Resource Kit mailing list. We have created that list in an effort to separate traffic and ensure that the lists are specialized by product. Thanks! Nick Amundsen JAMF Software Resource Kit Team On 11/24/08 9:17 AM, "Nichols, Jared" wrote: Hi- What's the best way to have a machine report its DAT anti-virus level? We use McAfee VirusScan 8.6.1, which stores its dats in /usr/local/vscanx/dats. All I really need is an "ls" on that folder as the folders contained within "dats" are the dat levels, e.g. "5443" for the most recent. The resource kit has a nice script, but it's for Virex. VirusScan doesn't have the uvscan command that the script references (or at least not that I'm aware of) Anyway... At my old job I used Apple Remote Desktop and could just display the results of an LS command on my admin workstation. How do I get something similar with Casper? I was thinking that I'd have a script do an LS on /usr/local/vscanx/dats and pipe that to a file that used a query to networksetup to name it the name of the computer. Then, I'd copy it to my CasperShare. Wrong way about it? Thanks!!! j -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081125/c5b45947/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: vsinfo.sh.zip Type: application/octet-stream Size: 1130 bytes Desc: vsinfo.sh.zip Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081125/c5b45947/attachment.obj From jared.nichols at ll.mit.edu Tue Nov 25 07:10:37 2008 From: jared.nichols at ll.mit.edu (Nichols, Jared) Date: Tue, 25 Nov 2008 10:10:37 -0500 Subject: [Casper] CasperShare permissions Message-ID: Hi- What are the proper permissions for the CasperShare? I'm getting the attached error and want to set them straight. Thanks! -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081125/97e88b92/attachment.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: Picture 1.png Type: application/octet-stream Size: 38067 bytes Desc: Picture 1.png Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20081125/97e88b92/attachment-0001.obj From gcollier at questex.com Tue Nov 25 11:34:21 2008 From: gcollier at questex.com (Gary Collier) Date: Tue, 25 Nov 2008 11:34:21 -0800 Subject: [Casper] Offsite backup for Macs Message-ID: Hi All, I was wondering if you all could suggest a good off-site backup solution for Macs. Are any of you using an off-site solution? Have a great Thanksgiving! Thanks, Gary -- Gary Collier IT Analyst Questex Media Group Santa Ana, CA 714-338-6762 www.questex.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081125/3296fb98/attachment.htm From NATHANIEL.LINDLEY at spps.org Tue Nov 25 12:27:37 2008 From: NATHANIEL.LINDLEY at spps.org (NATHANIEL.LINDLEY at spps.org) Date: Tue, 25 Nov 2008 14:27:37 -0600 Subject: [Casper] Offsite backup for Macs In-Reply-To: Message-ID: Gary, I like CrashPlan. I use the home version on several computers and they have a nice CrashPlan Pro version for businesses. It is cross-platfrom, all encrypted and the user has some control if they want. http://www.crashplan.com -Nathaniel Gary Collier Sent by: casper-bounces at list.jamfsoftware.com 11/25/08 01:28 PM To cc Subject [Casper] Offsite backup for Macs Hi All, I was wondering if you all could suggest a good off-site backup solution for Macs. Are any of you using an off-site solution? Have a great Thanksgiving! Thanks, Gary -- Gary Collier IT Analyst Questex Media Group Santa Ana, CA 714-338-6762 www.questex.com _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081125/d71d3387/attachment.html From jeremymatthews at mac.com Tue Nov 25 17:13:31 2008 From: jeremymatthews at mac.com (Jeremy Matthews) Date: Tue, 25 Nov 2008 20:13:31 -0500 Subject: [Casper] Offsite backup for Macs In-Reply-To: References: Message-ID: <19AF48F0-7783-420E-BD21-87C9378A3818@mac.com> We use mozy for small things...since electronic vaulting takes quite a while. For tapes we use iron mountain. On Nov 25, 2008, at 3:00 PM, casper-request at list.jamfsoftware.com wrote: > Offsite backup for Macs From ron.prue at mynoahs.com Wed Nov 26 10:40:30 2008 From: ron.prue at mynoahs.com (Ron Prue) Date: Wed, 26 Nov 2008 11:40:30 -0700 Subject: [Casper] Computer Report Message-ID: Hi all, I am trying to audit of all of my machines to gather MAC addresses for both ethernet and airport. So far I can only seem to pull ethernet addresses in my reports. I figure I must be missing something. Any ideas? Ron Prue Technical Services Noah Corporation ron.prue at mynoahs.com From NATHANIEL.LINDLEY at spps.org Wed Nov 26 11:17:32 2008 From: NATHANIEL.LINDLEY at spps.org (NATHANIEL.LINDLEY at spps.org) Date: Wed, 26 Nov 2008 13:17:32 -0600 Subject: [Casper] Computer Report Message-ID: Look in the Resource Kit, I think there is a custom report for MAC addresses. -Nathaniel ----- Original Message ----- From: Ron Prue [ron.prue at mynoahs.com] Sent: 11/26/2008 12:40 PM To: casper at list.jamfsoftware.com Subject: [Casper] Computer Report Hi all, I am trying to audit of all of my machines to gather MAC addresses for both ethernet and airport. So far I can only seem to pull ethernet addresses in my reports. I figure I must be missing something. Any ideas? Ron Prue Technical Services Noah Corporation ron.prue at mynoahs.com _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper From bstewart at brocku.ca Sun Nov 30 17:16:04 2008 From: bstewart at brocku.ca (Bruce Stewart) Date: Sun, 30 Nov 2008 20:16:04 -0500 Subject: [Casper] Script help In-Reply-To: Message-ID: Hi, An alternative would be to use the reporting and policy enforcement tools from NAI called ePolicy. This is a separate install that allows an ePolicy server to get info on VirusScan versions, engines, DATs, scan settings and control it all for PC and Mac from one server. We use it university wide for all faculty, staff and students in our residences. Works great but it is not free like a shell script ran by Casper. Bruce ________________________________ Bruce Stewart Information Technology Services Brock University bruce at brocku.ca On 24/11/08 10:17 AM, "Nichols, Jared" wrote: Hi- What's the best way to have a machine report its DAT anti-virus level? We use McAfee VirusScan 8.6.1, which stores its dats in /usr/local/vscanx/dats. All I really need is an "ls" on that folder as the folders contained within "dats" are the dat levels, e.g. "5443" for the most recent. The resource kit has a nice script, but it's for Virex. VirusScan doesn't have the uvscan command that the script references (or at least not that I'm aware of) Anyway... At my old job I used Apple Remote Desktop and could just display the results of an LS command on my admin workstation. How do I get something similar with Casper? I was thinking that I'd have a script do an LS on /usr/local/vscanx/dats and pipe that to a file that used a query to networksetup to name it the name of the computer. Then, I'd copy it to my CasperShare. Wrong way about it? Thanks!!! j ________________________________ Confidentiality Notice: This e-mail, including any attachments, may contain confidential or privileged information. If you are not the intended recipient, please notify the sender by e-mail and immediately delete this message and its contents. Thank you. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20081130/a69c38ef/attachment.html From tlarki at kckps.org Sun Nov 30 22:45:13 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 01 Dec 2008 00:45:13 -0600 Subject: [Casper] CasperShare permissions Message-ID: <49333399020000390000652D@gwoes4.kckps.org> There is more than one way to do this but this is what I do on every casper server I have. On a separate volume from the OS I create a share called CasperShare and share it on the network. I keep the local admin account of the sever as the owner and then create two other local user accounts on that machine. They are casper admin and casper install. Casper admin has full rwx permissions and casper install has -r- via an ACL while the local admin account owns that folder and all sub folders. That way it is kept out of my LDAP, and never authenticating against any one of my Directory servers, and if my LDAP for whatever reason goes down casper is still up and running by itself to take over. So, lets say dooms day hits my network and like my Directory servers go down. We use PHDs so users can still log in, and they can still be managed by the casper client even if my directory servers have to go down for a few days. Worst case scenario, I know... Then in the web interface for the JSS just set up each server by IP or FQDN and then set the read only user name and password and then the read/write user name and password and it will use those to authenticate. This simple set up allows me to build a casper server from scratch in like under an hour. Over the summer we installed 7 new xserves for our casper deployment and we got them all up and running and our old JSS migrated to our new one in two days total time. That included the time it took to drive out to each location and install the server as well. I am a big fan of keeping it simple. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Nichols, Jared" 11/25/08 9:16 AM >>> Hi- What are the proper permissions for the CasperShare? I'm getting the attached error and want to set them straight. Thanks! -- Jared Nichols ISD Infrastructure and Operations - Desktop Engineering MIT Lincoln Laboratory 244 Wood St. Lexington, MA 02420-9108 (781) 981-5500