[Casper] one of those days, can't remember syntax

[Thomas Larkin]

OK 

This is what confuses me and frightens me... 

jamf listUsers returns the localized mobile account as having the <true>
value as the account being an admin 

dscl . read /Groups/admin Does not list the account 

dscl . -delete /Groups/admin GroupMembership <shortname> or <UID>
returns an error that the attribute is not found, so I am guessing that
means that the account isn't in that group 


Is this a bug with Casper?


___________________________
Thomas Larkin
TIS Department
KCKPS USD500
tlarki at kckps.org
blackberry:  913-449-7589
office:  913-627-0351





>>> Miles Leacy <miles.leacy at themacadmin.com> 01/16/09 10:18 AM >>>
I'm not sure what's going on there, however I'm fairly certain that
using the GUID will get you where you need to be.

----------
Miles A. Leacy IV

 Certified System Administrator 10.4
 Certified Technical Coordinator 10.5
 Certified Trainer
Certified Casper Administrator
----------
voice: 1-347-277-7321
miles.leacy at themacadmin.com
www.themacadmin.com





On Fri, Jan 16, 2009 at 11:11 AM, Thomas Larkin 
<tlarki at kckps.org> 

wrote:


DS error -14134 (eDSAttributeNotFound) 


If I do a dscl . list /Users UniqueID | grep <shortname> the user shows
up with their GUID so I know that they are in fact there 



___________________________
Thomas Larkin
TIS Department
KCKPS USD500
tlarki at kckps.org
blackberry:  913-449-7589
office:  913-627-0351






>>> Miles Leacy <miles.leacy at themacadmin.com> 01/16/09 10:08 AM >>> 



What error is your command returning?

----------
Miles A. Leacy IV

 Certified System Administrator 10.4
 Certified Technical Coordinator 10.5
 Certified Trainer
Certified Casper Administrator
----------
voice: 1-347-277-7321
miles.leacy at themacadmin.com
www.themacadmin.com







On Fri, Jan 16, 2009 at 11:04 AM, Thomas Larkin 
<tlarki at kckps.org> 

wrote:


These are Directory users that have promoted them self to admin via an
old test account and we are cleaning it up, would that make any
difference? 


I would have sworn in the past I have used what I posted a few minutes
ago.

>>> Miles Leacy <miles.leacy at themacadmin.com> 01/16/09 9:59 AM >>>



You need to use the GUID.  If I'm not mistaken, it's stored in the
user's record as the "GeneratedUID". 



dscl . -delete /Groups/<group> GroupMembers <GUID> 




----------
Miles A. Leacy IV

 Certified System Administrator 10.4
 Certified Technical Coordinator 10.5
 Certified Trainer
Certified Casper Administrator
----------
voice: 1-347-277-7321
miles.leacy at themacadmin.com
www.themacadmin.com





2009/1/16 Thomas Larkin 
<tlarki at kckps.org> 




of dscl to remove someone from a group 


I thought it was 


sudo dscl . delete /Groups/admin GroupMembership <shortname> 


That returns an error 

___________________________
Thomas Larkin
TIS Department
KCKPS USD500
tlarki at kckps.org
blackberry:  913-449-7589
office:  913-627-0351







_______________________________________________
Casper mailing list
Casper at list.jamfsoftware.com
http://list.jamfsoftware.com/mailman/listinfo/casper








-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20090116/39f5cdef/attachment.htm