I'm trying to get the status of a policy using the API and a script. I can't seem to extract the text I am looking for. I'm using curl to read the XML curl -v -k -u API_username:API_password https://jss.example.com:8443/JSSResource/policies/id/17 It comes in a long single-line string that I've placed some below. From that string I'm hoping to read what's between <enabled> </enabled>. I can't seem to figure it out. <?xml version="1.0" encoding="UTF-8" standalone="no"?><policy><general><id>181</id><name>ZombieComputers</name><enabled>false</enabled><trigger>every15</trigger><trigger_other/><frequency>Disabled</frequency><offline>false</offline><category><id>20</id><name>NetRender</name></category><date_time_limitations><activation_date>2011-08-30 16:00:00</activat

What is the exact behavior of the "Automatically Image this Computer the next time Casper Imaging is launched" checkbox? Is it a toggle, or does it reset after the imaging takes place the first time after it is checked?

Has anyone written an extension attribute to pull the file system format of the boot volume, i.e. Mac OS Extended (Journaled) vs. Mac OS Extended (Case-sensitive, Journaled), etc? This may be overkill, but SEP v12.1 apparently has an issue with the "case-sensitive" option - and I thought I'd nip an admittedly unlikely nuisance in the bud, if possible. I believe I can work something out with diskutil, but thought I'd see if others had solved this before...

Setting up a bunch of exam laptops for our upcoming IB exams here at the school and I am having trouble with the byhost prefrences. I need to take off some icons from the top bar and also add different language keyboards. Also all these machines are offline, no internet so was thinking of installing the required byhost prefs after imaging and then as a post flight to run the jamf fixByHostPrefrences -target but its not working, it doesn't actually put the UUID but the MAC Address. So asking the community, have a renaming script kicking around or ideas on how to use the jamf bin 10.6.8 macbooks new (but discontinued) Cheers

I'm setting up an Active Directory connection and it is asking for a service account. What are the minimum permissions the account needs in AD for LDAP functionality?

We have been trying to setup or JSS for Mobile Device Managment, we have used the Push Notification Certificate assistant to generate and import our APN certificate into JSS, the JSS says the push notification has gone through but it just sits on pending. We have allowed the ports OUTBOUND TCP 5223, 2195-2196 from our Apple Server to Internet. When the device enrolls it comes up in Inventory but does not show up all the inventory details, just the UUID of the device. So i went looking in the logs to see if that would provide me with some idea of what is going on and these are the errors i'm getting: 2012-04-11 09:45:06,909 [ERROR] [APNSQueueManager ] - An exception was raised while attempting to send a push notification to device: 35416879c45980ed8c3207ced4cd3e5782011cf62012-04-11 09:45:06,909 [ERROR] [APNSQueueManager ] - Exception (class javax.net.ssl.SSLHandshakeException): Received fatal alert: decrypt_error2012-04-11 09:45:06,909 [ERROR] [APNSQueueManager

OK, so I'm sure we won't have a problem booting the new MacBook Pro with Retina Display (MBPRD) using the Thunderbolt/Gigabit adapter. Will the adapter work with existing MacBook Pro and MacBook Air models? The spec seems to imply so: http://store.apple.com/us/product/MD463ZM/A#compatibility Compatibility Mac OS X v10.7.4 or later Thunderbolt-equipped Mac computer Hoping we can drop-kick these Apple USB/Ethernet adapters... ;) Anyone try this out yet? Or is it too soon to know? PS, yes I just ordered one but might not get here for a few weeks... PS2, and yea, I'm sure we'll need to exclude these in JSS too... Don

We have encountered several scenarios in which profiles are not properly installing after a machine is re-imaged. In the JSS, it will show that the profile has been successfully installed in the time since re-imaging (Completed Command in Management History); however, there is no profile on the machine. Restarts don't seem to help. What we have done to successfully fix this is: remove the computer from the JSS and use the QuickAdd package (I believe we created this with Recon) to add the machine again. This appears to work. Is there a way to fix this on the server side so that we don't have to manually remove and QuickAdd computers after we re-image?

Sorry if something like this has been posted before. I did a couple searches but didn't really see anything. I work for a school district and this summer we are re-imaging all our labs and any classroom computers for upgrade purposes. Our issue is 1) we currently only have one distribution point, and 2) most of the switches these devices connect to aren't gigabit so imaging even just a half dozen computers at a time can take hours, and the more you add, the slower it gets. My question is, would it be possible to set up a Macbook Pro / iMac / Mac Mini as a distribution point and move this computer around to different rooms (mainly the labs) to possible speed it up slightly as well as relieve some network congestion?

Does anyone know if it is possible to launch the Acrobat updater from terminal or a script? I am trying to see if it is possible to script this and have it in Self Service so that standard (non-admin) users can just run it to make my life easier. At the moment i am not having any success. Jody any chance of making Acrobat easier to manage?

We are brand spanking new to Casper and our Jumpstart is in a few weeks. I'm setting up a Mac Mini OS X 10.7 server and running through the Casper Admin doc. It wasn't clear to me if I needed to install Tomcat, but since it wasn't part of Lion, I decided to install the Tomcat binaries from tomcat.org.I installed it in /Library/Tomcat, but then I read the in the Admin Guide that JSS installs Tomcat in /Library/JSS/Tomcat. Should take out my Tomcat install?

I'm able to pull database and table info from MySQL but not sure how to do a full inventory dump, including applications information. Is there a clif note floating around that we can reference? I'm a little rusty from my Xinet days, but I was able to pull the database and tables as shown below. Thanks,Don $ mysql -u jamfsoftware -p Enter password: Welcome to the MySQL monitor. Commands end with ; or g. Your MySQL connection id is 11751 Server version: 5.0.92-log Source distribution Type 'help;' or 'h' for help. Type 'c' to clear the current input statement. mysql> show databases; +--------------------+ | Database | +--------------------+ | information_schema | | jamfsoftware | | test | +--------------------+ 3 rows in set (0.00 sec) mysql> use information_schema; Database changed mysql> show tables; +---------------------------------------+ | Tables_in_information_schema | +--------------

I want to pull a report to see the network status, or Active Directory binding for the active machines in JAMF. I was looking at extension attributes and just tried to pull an advanced report showing AD under display but it seems to be unreliable. Is there any extension attribute or way to poll the machine to see if it is joined to the domain.

Hi Jamfnation- I'm a netSUS appliance newbie, and I'm having trouble with the Java 2012-004 update that was released yesterday. Basically, I've enabled that update on the appliance in my root branch, but clients are not seeing it.If I enable or disable other updates on that branch, the changes are reflected on my clients, so I'm at least fairly sure I've got my branch url correct.Anyone have any ideas on this?

I added a URL "plugin" in Self Service. It's my webmail login page which is hosted on a 10.6.8 server so it's just the default SquirrelMail page. The text boxes for username and password come up black in Self Service but they come up fine in Safari. Anyone else seen this???

So, I'm trying to do some /etc/authorization shenanigans that I can't get sorted. Spent like 3 hours on this last night. Our Macs are bound to our Active Directory, users are setup as a mobile account. They will NOT have admin rights (woooo hooo). The problem is, many of them travel. So, changing things like date and time and timezone are things they're locked out of as they're not admins. In comes /etc/authorization shenanigans. Here's my issue: I can't seem to get the ability for local users in the admin group (don't plan for them, but there may be a case for the need to have one) AND AD accounts to be able to unlock the pref (and other ones that I want to do like Energy Saver). I've tried changing the group that can unlock to "everyone" but that doesn't seem to be working. (10.7.4 here). If I log in as an AD user and do an id -g, "everyone" is indeed listed, but it doesn't seem to actually work. So, I though

I'm having problems net booting to some devices now. I've got a new Mac Mini with lion but i need to redo the net install image. It seems that the Casper Netinstall app thats in the resource kit doesn't work with 10.7. Anyone know where to go with this? I've seen some people mention about a new Casper Workflow!

Hi everyone, We're new to Casper and are trying to figure out the best way to address a few issues. We have a select number of machines that are "presentation laptops" that we want to loosen up energy saver settings on, but keep the majority of our machines on a normal energy saver policy. Ideally, I'm thinking of having a static group for the presentation laptops, then a smart group containing all machines less the presentation laptops static group. Unfortunately, I'm not seeing any options within smart group creation to handle this. I was thinking we could achieve this by setting the machines to a particular building or department and going off of that, but we have some other items that may conflict with this (i.e. policies to install printers / set time zone based on the building, running other scripts based on department). Any ideas/suggestions?

During installation process we specify how often we want computers and mobile devices to submit inventory reports to the JSS as well as how often we want computers to check in for policies. Is there a way to check the values once they were set?Is there a way of changing these settings later on, please?

Hi all, I'm always behind with my updates but it seems I need to run this one cause we now got Adobe CS 6. Just read the Requirements list of the JSS Installer that my JSS box needs to have MySQL Enterprise or Community 5.5 My jss has Ver 14.12 Distrib 5.0.92, for apple-darwin10.0 (i386) Do I need to update it to 5.5? Thanks in advance.-pat

Anybody using Managed Preferences to either prevent access or use read-only access for external drives? I've tried testing this, but my experience appears to be: LionWorks as long as it isn't fat formatted Snow Leopard Deny Access: Works as long as it isn't fat formatted. Read Only:read-only for HFS. After using a fat formatted external drive, which ignores the mcx itself, any subsequent use of HFS external drives are now read/write as well. Anyone confirm/deny this experience? If it can't handle DOS formatted, then it's pointless configuring any of this for external drives. Thanks Sean

Hello all, We are having an issue getting a prestage to execute. I have limited the scope to network segments, but when a machine is netBoted within that segment it doesn't pull the prestage settings. The run count is 0 in the JSS. It fails to run regardless if the machines are managed or not. We are about to image a few thousand machines that are currently not in the JSS and would like to have the the auto-login/configurations set per network segment. Any thoughts?Do I need to create a policy to assist with the prestage? Thanks! AG

I've been using a bash script run daily by a JSS policy to mount a Windows server share, synchronize its contents locally on every machine and then unmount the share. This has worked until Lion came along. It seems that 'mount_smbfs' won't authenticate properly when run as root. Here is the stripped down script with comments and error checking removed: CLIENTPATH=/Users/Shared/Test SERVERURL='//DOMAIN;botuser:password@server.designory.com/Test' SERVERMOUNT=/Volumes/Test SERVERPATH="/" mkdir "$SERVERMOUNT" /sbin/mount_smbfs -o nobrowse $SERVERURL "$SERVERMOUNT" /usr/bin/rsync -aEu --exclude ".DS_Store" --exclude "Thumbs.db" --exclude ".T*" "$SERVERMOUNT$SERVERPATH" "$CLIENTPATH" --delete-after chmod -R u=rwX,go=rX "$CLIENTPATH" diskutil unmount "$SERVERMOUNT" This works just fine when run as any user other than root. Anyone else mounting SMB shares via a s

Following the instructions in "administering file vault 2 with casper suite", I created a package to assign a recovery key to our imaged workstations. After imaging my test box I activated the encryption manually and was presented with the message stating that the key had been assigned and merrily encrypted the drive. Before making this production I decided to unlock/decrypt the drive by booting from a USB drive with our imaging image and using the FileVaultMaster.keychain (the one with the private key intact). Unfortunately this is what I receive: CasperIMG:users root# security unlock-keychain /Key/FileVaultMaster.keychainpassword to unlock /Key/FileVaultMaster.keychain: CasperIMG:users root# diskutil cs listCoreStorage logical volume groups (1 found)|+-- Logical Volume Group 0896F511-CDA6-4838-B9D1-83C4F71400A5 ========================================================= Name: Macintosh HD Sequence: 1 Free Space: 0 B (0 B) | +-< Phys

Since the 8.5 upgrade I can't seem to build reliable DMGs with composer I have tried different build folders and external drives but after the build when I mount the DMG I have this... external image link Not sure what my issue is. Anyone else having the same problem? Cheers