I'm attempting to do some tests on our development network. After building systems, I can't bind them to the development domain. The error received is "Unable to add server. The plug-in encountered an error processing the request (10001)" I'm stumped - feel I'm missing something small as I've bound other systems in the past to the dev domain. Process:Install a clean version of 10.7.3 and 10.7.4 Add the dev domain information to System Preferences/Network/Advanced/DNSAdd the dev DNS servers: Add the dev Search Domains: Date and Time Synch time to our time serverTurn off IP V6 by open terminal and sudo then run: networksetup -setv6off EthernetRestart the system Should be able to bind to the dev domain... but nooooo! Still get the same error as before: "Unable to add server. The plug-in encountered an error processing the request (10001)"

Why not 1? Just curious.

Hi guys I know I'm late with this and we are currently on cs5 and cs6 is out, but I tried this the first time just to get an idea of the current imaging and deployment issues with cs5.5 so that I could get an idea if Adobe are making improvements in future compatible AAMEE releases. I followed the JAMF white paper for deploying CS5.5 to copy it at imaging time selected. Unfortunately it fails and in the logs it just says encountered an error contact the manufacturer...lol tried that before with Adobe and didn't get far... I then tried pushing out the Adobe CS5.5.pkg out to my test machine via ARD and it failed if I was logged in to that machine. But then I tried with no one logged in and it worked. I don't think there is anything wrong with my method I am very particular and funny about RTFM. I have thought about Composer snapshot but I don't really want to go down that road again especially with something so complex as this and is prone to errors. I have also

All: I am running a script via a policy that creates a file on the filesystem and then reboots the computer into netboot. This works fine. The problem is that the policy is not marked as complete in the policy logs, so the job runs again when the computer is booted. Is there an easy way to tell the JSS that the script has run, so that it doesn't run again? Maybe via the jamf binary? I know about the <result> stuff for extension attributes, but I am not clear on the mechanism that the JSS uses to determine whether a policy has run. Any advice appreciated! --Andy

If you're behind a proxy, you will likely need to configure it in order for the SUS portion of the appliance to work properly. The NetBoot/SUS appliance uses Reposado for the SUS service, which can be configured for proxy support. Log into your NetBoot/SUS appliance with the "shelluser" account. cd to /var/lib/reposado use an editor like vi or nano to edit preferences.plist with sudo rights Refer to https://github.com/wdas/reposado/blob/master/docs/reposado_preferences.txt and look in the Optional Keys section and find that there is a key called AdditionalCurlOptions where proxy information can be added. For example, you would add <key>AdditionalCurlOptions</key> <array> <string>proxy = "web-proxy.yourcompany.com:8080"</string> </array> to the preferences.plist file. This example adds proxy information when the proxy does not need authentication. If you have an authenticated proxy, refer to curl documentation to find th

Hi guys I like to carry out version control in Composers source pane. For example if i drag Composer in the Source i will rename it immediately to some thing like Composer_8.52_v1.0 Unfortunately if you do this and build the pkg, it will fail silently. I have a preinstall bashcript to simply delete the previous version eg rm -rf /Applications/Composer.app What actually happens is that preinstall (or preflight) script runs, but the new item doesn't get installed at all. The current work around is to not rename the source item within Composer and instead rename it after you have built the pkg like Get Info and changing the name there. Hope this helps people out. This has been driving me nuts for about 4 hours!

I have successfully restored the Lion Recovery HD to an additional partition with Casper Imaging, and I can boot from it, but it's no longer hidden like an out-of-the-box OS X Lion instance. Is there an obvious way to hide it?

I'm experiencing a issue that I hope, someone can shed some light on. When imaging a new computer or an older computer that has been removed from the JSS prior to imaging, the FirstRun Scripts fail to run. (Though they do show they were added and copied to the computer in the Imaging Log.) If I were to re-image a computer that is currently located in the JSS, the FirstRun Scripts do run properly. Has anyone else seen this issure? Thanks in advance for any help you can send my way.

Hi guys I really need your help please. I've been wrecking my brain wondering what to do and after up half the night I thought I would ask you guys. I have finally got my employer to arrange training very soon so that I can get 10.7 ACTC We are currently still on 10.6.8 due to third party software problems with 10.7. Half of me says cancel the training because we wouldn't go to 10.7 and would most likely go to 10.8 The other half of me says still do it because I would gain respect from my colleagues and management (they prefer to take the advice of strangers at the moment). Also Apple are reported to bring out a new OS every year, but... It takes about a year for all third part software and roll out etc, so certification would never be in sync with the current OS any way. What do you guys think if you were in my shoes?

Has anyone been able to create a local casper replica on an external thunderbolt drive? I have a brand spankin'new Elgato drive and I can only get it to error out so far.

http://www.zdnet.com/blog/security/apple-security-blunder-exposes-lion-login-passwords-in-clear-text/11963 This articles and others reference how it may affect multiple different configurations, even ones that have never had FileVault enabled. I have confirmed in my environment that our 10.7.3 users with mobile accounts, bound to Active Directory, have this issue occurring on their machine. Our users that are using network accounts with local home folders do not experience the issue. Our users that are using pure local accounts & home folders do not experience the issue. None of my machines that use pure network home folders have been upgraded so I have nothing to confirm or deny in that situation. To check for the string of data in the log file, you can simply run the following terminal command: grep password /var/log/secure.log If your log file has rolled over you will have .0.bz2, etc. In my experience I was able to find it in the current log file for my users, but your e

No internal SUS enabled right now, but I'm getting there, I've got nine SUS servers enabled and am now looking at options to define the clients preferred server. Looking through the archives the three choices seem to be MCX, policy or defined in the Network Segments. I have it configured via the latter but I don't believe it's being set properly across the board. Anyway, I'm looking now to do this via MCX instead and simply would like to know, when creating the mcx pref. do you specify the value as: http://server.company.com:8088/index.sucatalog orhttp://server.company.com:8088/index-leopard-snowleopard.merged-1.sucatalog or doesn't it matter (it must right)? Also, going this route, in the Network Segments should I set Default SUS to None? Thanks a lot....Darrin

When searching the JSS for all licenses within the Inventory. We get mixed results i.e. Adobe Creative Suite 3 - Design Standard License used: 5 but when I click 'view computers' the result is 13. I've checked the logs. 8 of those machines dont have CS3 installed. Also if I create an Inventory search with the CS3 Design STD criteria my results are correct. Its not a browser cache issue. I've tried it in multiple browsers... Please help?

Hi All, Below is an example of the NEW postinstall.sh from Casper 8.5.x... there have been a few posts logged here.. so in the absence of a KB i'm posting it here with Line Numbers. My Image has a manually triggered policy (line 32)... this policy included a reboot.. which then meant that the Mac got a reboot loop running jamfHelper at login as it would reboot before the script finished & cleaned itself up.. (lines 46 & 47).. Hope this helps others & that JAMF create a KB article for this.. 1 #!/bin/sh 2 3 ###################################################### 4 ## This script is created by Casper Imaging to perform post-imaging 5 ## tasks that cannot be performed on a non-booted volume. 6 ## Created Thursday, May 3, 2012 at 5:48:05 AM 7 ###################################################### 8 9 ## Lock down the login window 10 /usr/sbin/jamf launchJAMFHelper -path '/Library/Application Support/JAMF/bin/jamfHelper.app' 11 12 13 ## Fix ByHost

I have a question about Casper Remote that I don't see answered here. When I am using this program on a room full of computers, only 20 sessions are active at any given time. When the top one finishes, then 21 starts and so on. I was wondering what causes this bottleneck and what I can do to increase the number of concurrent connections?

When you specify for the JSS to "Use External Certificate Authority" it prompts you to enter information regarding the SCEP server. I don't know what this is and have never dealt with this before (my only experience with SSL certs is ISS 6/7). If I use the Signing Certificate Assistant do I still need to enter this information? Our University has a contract with InCommon/Comodo for our certificates. For further background, we are not implementing any mobile device management at this point, we just want a real (not self generated) SSL certificate on the server so there is no error generated when accessing the server.

Perhaps everyone already knows this, but I just found this to be awesome: So, I'm mucking around in /var/db/dslocal/nodes/Default/users. There's lots of users' plist files. Now, I want to see the contents of one of these so I do a defaults nobody.plist and in response, I get Domain nobody.plist does not exist Well, "that's annoying," I think to myself, knowing I'm now going to have to type the full path to the .plist to see its contents. Not so much, as it turns out. Instead I did a defaults read `pwd|nobody.plist` and out spat my plist contents. Not sure why I never tried that before, but I did just now and it's a good one to share. Sure there's a little bit more typing but it's better than the full path, IMHO. Cheers.

I'm currently testing a 10.7.3 Lion image for deployment later this year and I'm encountering an issue where network users aren't automatically creating mobile home folders at login, even though the AD bind script explicitly has that option enabled. Anybody else see this issue?

Continuing on my thread of posting about Kerberos - has anyone out there had their authentication fall back to NTLM when they attempt to connect to a DFS share?

Hello i'm using "jamf displayMessage" to show the user a message before a installation begins to run a the logout: jamf displayMessage "Installing software, please wait..." When i run this command it will show the message and also one "OK" button. But i want to show just the message without any button inside. Can i set an option that disable any button in the message? I install Apple Updates in the background when the user makes a logout (shutdown, restart, logout). After the installation the mac shutdown or restart or go to the login screen, he do just tha what the user had choose bevor. The message just inform the user, any button is not necessary :) I hope you can help me. Best regards moe

Hello all. I was looking through some inventory info and noticed that we have a LOT of accounts on machines in the computer details > Local User Accounts. I'm fairly sure I used to only see real user accounts and not all of the system accounts. We're running JSS 8.51 on MacOS 10.6.8. Is anyone else seeing this? Here's a sample: _atsserver Username: _atsserver Real name: ATS Server UID: 97 Home Directory: /var/empty Home Directory Size: 0B Admin: false FileVault 1 Enabled: false _calendar Username: _calendar Real name: Calendar UID: 93 Home Directory: /var/empty Home Directory Size: 0B Admin: false FileVault 1 Enabled: false _clamav Username: _clamav Real name: ClamAV Daemon UID: 82 Home Directory: /var/virusmails Home Directory Size: 0B Admin: false FileVault 1 Enabled: false

We are new to the Casper suite and have not yet completed our Jump Start. In the meantime we are trying to kick the tires and most of the things you can do with Casper are straightforward, but imaging is confounding me. Here are our needs: 1) Deploystudio style on demand imaging. I am not sure how to even create a netboot set in a fashion similar to Deploystudio. 2) Scheduled imaging of computers in labs, etc. initiated by an Admin from a remote console. I have downloaded the resource kit and looked at the documentation (including the quickstart) but the sense I get is there is no good end to end description of how to accomplish either of these tasks. Can anyone point me in the right direction?

Since we upgraded to Casper 8.51 our bind script has stopped working under Lion. (haven't tried SL). Basically the script just sets the time server then binds to the domain. This morning I setup Casper 8.52 and tried to image a machine. I checked the imaging logs and it shows it's going to run it, and I looked at jamf.log and it says it's running the script and there's no errors. The machine doesn't end up binding though.I let it sit for 2 hrs and it never binds. As a test I just used Casper Remote to push the same bind script and it bound fine.

Not really an issue with Casper, but I'm looking for suggestions. We manage printer settings for our computer labs with Open Directory MCX. Our labs print to queues on a Windows print server. Everything worked great on OS 10.6, but with Lion, the print queues all show up with the Generic Postscript Printer driver instead of the actual model. I know that printer drivers are not part of the OS anymore, so we downloaded the printer driver installers from the Apple website and pre-installed them as part of the Casper Imaging configuration. I can manually add a printer and select the appropriate driver from the list, but the mcx printers still only have the Generic Postscript driver which leads me to believe the driver is not the issue. Has anyone else seen this or have suggestions?

Hi All, We deploy our Internal Root CA Cert via a configuration profile. this seemingly sets it's trust settings to "Always Trust." We also have a cert for our Lync server, this is signed by our Internal Root CA.. however, it's trust settings are set to "Use System Defaults." To get the Lync client to connect I need to manually set the certificate to trusted.. So, is there anyway via a script to adjust an installed certs security setting? or is there away via configuration profiles to change a certs trust level?