Curious if anyone in the community utilizes this? I've configured it on our Casper server but keep running into the following error: When I check Console I don't receive much insight to what could be happening? Sep 17 16:39:55 admins-Mac-Pro.local AutoPkgr[58403]: (FULL AUTOPKG TRACEBACK) File "/usr/local/bin/autopkg", line 1660, in <module> sys.exit(main(sys.argv)) File "/usr/local/bin/autopkg", line 1654, in main exit(subcommands[verb]['function'](argv)) File "/usr/local/bin/autopkg", line 1420, in run_recipes search_github=make_suggestions) File "/usr/local/bin/autopkg", line 346, in load_recipe recipe = load_recipe(parent_id, [], recipe_dirs) File "/usr/local/bin/autopkg", line 332, in load_recipe search_github=search_github) File "/usr/local/bin/autopkg", line 248, in locate_recipe % (indef_article, name)) EOFError: EOF when reading a line Also, is it recommended to use .jss v

Hello nation, So we discovered vShare today. I am still a pretty new iOS/OS X admin so I wasn't aware that something like this existed. Apparently users can download an App via a website like vshare dot com and get access to an illegitimate App store which allows them to install even more Apps, even though we have the regular Apple App Store disabled. We have reprimanded the offending users, blocked access to vshare dot com on and off site and I see how I can track users with vShare installed via our search features, but... Is anyone aware of any other sites like this that we should block? Have any suggestions for our situation? Know of other Apps like this that I should be on the lookout for? Thanks!

Hi All, I just updated to Firefox 39 and found that i could no longer connect to the JSS admin console. Firefox would throw the following error when trying to connect. Secure Connection Failed An error occurred during a connection to <JSS DNS>:8443. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key) The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. I believe this is cause by the team over at Mozilla being strict about allowing connections to sites that use versions of TLS that a suceptible to the LogJam vulnerability. more info here https://weakdh.org/ As a workaround i have found modifying the server.xml file in/usr/local/jss/tomcat/conf/sever.xml Change the line chipher string FROM: ciphers="SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC

Title says it all. Thanks

Peeps... Has anyone tried 9.8 and uploading their Apple provided GSX certificate? I did so last night, and got an error stating that the key pair was missing. (see attached) I already emailed Apple GSX support, but just thought I'd throw this out there to see if anyone else was experiencing the same...

Hello Everyone, I have a Creative Cloud Package that I created and tested and it comes out around 7.2GB. Whenever I go to upload it to the DP via Casper Admin it only uploads about 2GB and that's it. I re-created the Package, deleted and tried resending, but the same thing. Any ideas? Thanks!

Hi All, Over the past few weeks I have been busy making some major changes to AutoCasperNBI, & really need some testers to make sure it's working as it should pre releasing it as version 1.2. Changes below & URL to get the pre-release is: https://github.com/macmule/AutoCasperNBI/releases/ Enhancement: Reduce DMG size further by using .sparseimage Enhancement: Check for updates before creds Enable Disk Utilities debug mode NetBoot Image Description does not get written to NBImageInfo.plist 10.9.x NBI created in 10.10.x won't boot Put Casper Imaging into Debug mode AutoCasperNBI reading MB as GB when calculating space Correct typo in TimeMachine ToolTip Change Add Packages/Certs to remember last location & not always change. "Cannot Read OS Version" from Composer captured OS.dmg's Add timeout for JSS URL Automatically Compact NetBoot Image Automatically Expand Image Update Icons for JSS 9.5 Remove status blobs Detail everything in "Always Set

Any of you folks using FileVault know what mechanism controls the ability to make sure the account that unlocks a disk (at power-on auth) is automatically logged on? I'm seeing intermittent behavior in some cases, where it may or may not automatically log the unlocking user into OS X.

Hello. I have 19.2GB of jamfbin files in my MySQL folder. They are actually named jamfbin.00123 (the numbers change) and there are multiple files created per minute for no reason I can find. Each file is approximately 15MB and there is an index file. File type is the numbers behind the jamfbin (i.e. jamfbin.00123 is filetype 00123). My drive keeps filling up, I need to get these figured out. Do I need to keep them? How are they generating? Help?

Hi I'm creating an update script for the application Dropbox.app. Now I would like to grab the version number from https://www.dropbox.com/install. I tried with following shell command:. #!/bin/sh latestver=`/usr/bin/curl -s -A https://www.dropbox.com/install | egrep -o '<span id="version_str">* for Mac</span>'` But it doesn't work. Any hint? Thanks!

I'm currently trying to update Mobile Device ConfigurationProfiles' exclusions scope In order to do this, the following steps are being taken: Read the Mobiledeviceconfigurationprofile (in XML). Modify that configuration profile (Add a mobiledevicedevice to the exclusions/mobiledevices scope). Use that updated profile as the body for the PUT request when updating a profile. After these actions I get a Http 409 status code returned : Note: The code examples below have been modified for easy reading. so for example, exception handling is not included. Example C# Code //Service Declaration JSSApi.MdmInterfaceClient AppleApi = new JSSApi.MdmInterfaceClient(); //Read the Profile - Scroll down to see response var XmlProfileResponse = AppleApi.ReadMobileConfigurationProfile(mConfig.Id.ToString(), inXML:true); XElement XmlDocX = XElement.Parse(XmlProfileResponse); XmlDocX.Element("scope").Element("exclusions").Element("mobile_devices") .

I have a policy to upgrade from 10.7 OR 10.8 to 10.9 in Self Service. I left the settings in the Restart Options to it's default for the 'user logged in action' which is RESTART IF A PACKAGE OR UPDATE REQUIRES IT and for the 'delay' AMOUNT OF TIME TO WAIT BEFORE THE RESTART BEGINS = 5 minutes. I ran the policy from self service, 5 minute box popped up informing me to save, warning me that the computer would reboot in 5 minutes and to log out. I waited 5 + minutes without doing anything, leaving the pop up box on the screen, not clicking the OK button, to see if the mac would reboot but it did not, then I logged out and about 5 minutes later it rebooted. Is this how it is supposed to work? should it restart after 5 minutes even if the user is logged in? even if the user does not click the OK button when they are told that the computer will restart in 5 minutes?

Is it possible to retrieve a list of devices based on a Site?When retrieving a list of all devices, no site or anything related to a device's building/site is being exposed through the api. See the XMl below: <mobile_devices> <size>2</size> <mobile_device> <id>6</id> <name>iPad</name> <device_name>iPad</device_name> <udid>dd1dff5d598e3fce####16288f0b9bf1551d0eb2</udid> <serial_number>DMPPQ7BZ##VJ</serial_number> <phone_number/> <wifi_mac_address>9C:35:##:53:##:84</wifi_mac_address> <managed>true</managed> <supervised>true</supervised> <model>iPad Air 2 (Wi-Fi)</model> <model_identifier>iPad5,3</model_identifier> <modelDisplay deprecated="9.4">iPad Air 2 (Wi-Fi)</modelDisplay> <model_display>iPad Air 2 (Wi-Fi)</model_display> <username/&g

I was helping another JSS install figure out why their imaging was taking 1h40m while ours was only taking 15m. Turns out the issue is that theirs was installing and ours was block copying. I let them know that was the issue, and they asked what the difference was. I had no answer other than that one was significantly faster. I tried looking it up online, but I can't find a satisfactory explanation of the difference. What exactly is the difference between block copy and an install of an OS?

This is a strange question... but can anyone think of a way to limit access to a Self Service Policy to only the assigned user of a machine in the JSS? So if User A is the assigned user of Machine A, and User B is the assigned user of Machine B. I want User A to be able to see and run the policy only Machine A, and have it not be available in Self Service on Machine B for their user. And vice versa. I should specific the users in question would be LDAP users.

We are pleased to announce that the Casper Suite 9.8 beta is available for download. This beta is available to all Casper Suite customers. You are able to test this release from a hosted instance or download the installer. More details are available upon enrollment in the program. To do so, please go to the beta program portal here in JAMF Nation. Enroll today and share your feedback in the beta discussions or submission form in the portal. Thank you! Sam JohnsonVP, Customer Service

Hi All, I'm currently having an issue when enrolling my mac. I can successfully push software, policy's, AD binding e.t.c which i have created within JSS. But when it come down to logging in to my account on the MAC I'm having issues. It is saying no network accounts are available. When I am login to my local account it find the Ethernet fine and able to browse the internet and go on webpages etc. I and my team both think that it is the docking station that maybe causing issue of not allowing the mac to see the network. I'm currently using an Elgato Thunderbolt 2 docking station. please I need some help!!

Has anyone found a way to suppress/bypass this screen asking users to sign into Cloud Storage?

We added 3 local accounts for video editing on a lab of 2013 iMacs. It added the accounts with no issues.Video1, Video2, Video3. All with the same password. When logging into any one of them you are prompted for the the Admin password to repair the applications folder. Video1 & 2 both have no access to the Desktop, Downloads, or Documents folders. Video 3 does.Upon looking into the permissions for Video1 & 2's folders, Video3 has Read&Write access while Everyone Else is denied access, rendering the accounts unusable.We are going to go through and delete the accounts and add them manually as a temporary fix, but doing this in a busy school district is very difficult. How can I add accounts without getting permissions errors?

I have a couple questions for creating a Disk Encryption Configuration 1 - does individual recovery key get stored in JSS ?2 - If I choose 'management account' to be ENABLED, what 'management account' is it enabling? is it the 'managed by' listed in the JSS for that computer in the General section ?

One of the reasons we opted for DEP program for ipads was to avoid iCloud locked ipads. We have an ipad now which is assigned to DEP but still locked with student's iCloud ID. This is nuisance because the iPad was purchased by the school and remains school property until the device is Disowned from the DEP portal. If this is happening then either my information is not correct or DEP seems to have some loophole.

I'm trying to package and deploy LEGO mindstorms education NXT Software v2.1 to clients running OSX 10.8.4The installation CD supports up-till OSX 10.6 and there is a patch (from LEGO) which enables the software to run on 10.8 I run the install the disc, complete the install and restart (required by app). After which I install the patch and open the software to check if its working and it works! I then package it with composer (I have tried Normal snapshot and New & Modified snapshot) and push it to the client. Pushes successfully but an error pops up when I click on the appError code:1003 Any ideas?Thanks!

My company was purchased about 18 months ago and we are now working on Migrating my user over to the new domain. Users in the office this is no issue. We have a few remote employees that will need to get migrated as well. Does anyone know of a way to keep a VPN connection Live with Junos Pulse? I have tried using the Fast User Switching but once I click on Login Window, my connection is dropped. I have also tried using terminal and the login command, which allows the account to auth but doesn't created the home Dir it goes to /var/empty. Does anyone have any suggestions?

Hello all, I'm attempting to set the "Require Password After Screensaver" to NOT require a password in Yosemite via configuration profile. I have uploaded: <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "{field{*fldinst{HYPERLINK "http://www.apple.com/DTDs/PropertyList-1.0.dtd"}}{fldrslt cf4 http://www.apple.com/DTDs/PropertyList-1.0.dtd}}"> <plist version="1.0"> <dict> <key>askForPassword</key> <integer>0</integer> </dict> </plist>} as a custom configuration. The JSS seems to read it fine, showing:external image link However, none of my enrolled machines show the setting as disabled. The setting itself is unavailable (greyed out), so the computer is reading the config profile (as it also shows under profiles), and I can affect the require password timeframe option by adding: <key>askForPasswordDelay</key> <integer>900</integer> But for the li

I had a user working remotely enroll into JSS via the Casper Agent web-enroll. The machine was successfully added to Casper but then an automatic encryption policy kicked off (this has since been disabled and all encryption is done manually.), rebooted as per the policy and she immediately lost access to any local accounts and the encryption policy failed. This makes sense because the machine lost connectivity to Casper after it rebooted because the user was off-site. To make matters worse, our svcCasperAdmin account has a unique password automatically and randomly-generated. As it stands, the user is only able to see the svcCasperAdmin and Guest accounts when rebooting with no access to the former and no use outside of Safari to the latter. We were able to procure the recovery FileVault2 encryption key via Casper but because it's last communication/check-in was prior to the encryption, this key is not recognized by the svcCasperAdmin account. Any ideas on accessing the svcCasper