Hi all, We have an internal CA. That inturn has created a cert for our JSS. Our base images are created from the installer packages in Casper admin. (like an InstaDMG image). If we tell the clients that the JSS has a valid cert, the devices cannot verify the cert as they don not have the root ca cert installed. So, would creating a custom PKG that installs the root ca cert & trusts it. With the pkg being installled at the OS compile resolve this issue?

I have a feeling that I am going about this ALL wrong, but I have isolated a plist file for some custom settings for a networked device. I currently have the Plist on a thumb drive, and I don't know how to go about getting it from my thumbdrive up to the JSS so it can be copied and forced into the ~/Library/Preferences folder for all users. I was going to try doing a .pkg, but apparently we don't have the developer goodies here. If anyone would be so kind as to help out with this, it would be immensely appreciated. Hope everyone has a good weekend! Robert. JSS 8.34OS 10.6.8Clients 10.6.8

Hey Folks, I seem to be having an issue with packaging software. I have just upgraded from 8.31 to 8.43 and found that when capturing a package for example Firefox it does not carry over the setting from which I set, as it is not capturing the user library directory. I usual do my packaging on a clean machine in which has root enable and logged in to avoid permission issues (this is a trick I learned from my instructor when I took the CCA), in the past composer was smart enough to see that the user settings were under /private/var/root and asks if you would like to copy them over then it creates /User/root and copies anything under that across. In 8.43 it does not do that, hence when I build the package, it does not have any user settings. Any Ideas? Kamal

Hi everyone, I tend to script a lot of tasks that are eventually run through Casper remote by our technicians. A lot of times the script will complete and Casper Remote will show a "failure" (Error Occurred) for something simple like trying to run an rm command on a file that isn't there in the first place. I've tried simply redirecting stderr to /dev/null, but this isn't really "not failing," it's just not complaining in the logs about it. Has anyone run into this issue and is there a way to fool Casper into seeing failures as successes? -- This would only be for stuff like removing certain files that need to be removed if they exist, if not, no big deal, and a failure here wouldn't affect operation of the computer, etc. TIA!Andrew

Hi Guys, Is there a way to have the VPN configuration profiles autofill the username field? Currently, i have the username set to "changeme," as a username is required by the profile.

This one has stumped me all yesterday. I've got a lion server, following the documentation on migrating to Lion on an i7. Anyway i've downloaded the latest SQL community installer from the website (mysql-5.5.21-osx10.6-x86_64.dmg) and run it following all the instructions. GUI says SQL running go to terminal and mysql command can't be found. In retrospect have i used the wrong SQL installer but is there one available for 10.7 as that was the latest on the site??? Confused!

Hi I am attempting to find a way to set the software update Server for Mac Pros only and wondered if anyone has successfully tried this via the JSS Thanks Abz

Hi guys,We are planning to get some Sync Cart for iPads in the classet.Have anyone got any experiences with these devices? Any feedback are welcome. We have lot of questions about how the Cart work?Such as how many iTunes account is needed per cart? How well it perform with a Windows Laptop?Does it back up all iPads into one backup copy or each iPad will have individual backup? Etc...Thank you very much!

So, here's a snippit of the AppleScript I use to mount our network home folders on login. Usually it works just fine but for a few users it doesn't work. The reason it's not working is because when dscl command reads the SMBHome field the path is on a separate line: **set loggedInUser to do shell script "whoami"set ADHome to do shell script "dscl /Active Directory/WMS/All Domains -read /Users/" & loggedInUser & "| grep SMBHome: | cut -c 12- | sed 's/\\///g'" try do shell script "mkdir /Users/Shared/networkHome/" & loggedInUser & "" on error --continue end try try do shell script "mount_smbfs //" & loggedInUser & "@" & ADHome & " /Users/Shared/networkHome/" & loggedInUser & "" on error --continue end try** If I just type the dscl command into terminal here's what I ge

We have just started using LightSpeed Filtering and I am looking for a way (extension Attribute) to determine it is installed on a computer. It adds two small clients on the computer but they are hard to find. It also adds two plist files to Library/Preferences. Does anyone have an extension attribute that I can use to find if these specific plist files are installed?

JSS 8.43 Setup via JSS Installer.msi on Windows Server 2008 R2 x64 fails with error popout saying "The JSS requires Java 1.6 or later to be installed to function properly. Please verify that you have Java 1.6 or later installed and try running the JSS installer again." I do have Java 1.6 installed, both runtime and JDK. What else am a missing?

Has anyone been able to run a policy to refresh OD MCX settings? I am trying to run a policy to force user machines to refresh their OD MCX settings via a policy that runs daily. This is what I have tried: #!/bin/shPATH=/bin:/usr/bin:/sbin:/usr/sbin export PATHusername=$3sudo mcxrefresh -n $username I put this script into a policy set to run with from a self service trigger. it runs, but the problem is that it is failing with an exit code:4 Any ideas?

After several weeks of the JSS running without any trouble I can no longer connect to the JSS. I've tried restarting the server/tomcat to no avail, and verified both are running. When running a port scan 8443 is not open. I'm running 8.43 on 10.7.3 Lion on an Xserve. Anyone have any ideas what could cause this or how to restore it? I cannot access the web interface, casper admin, remote, imaging or recon.

Folks, I have iLife 11 packaged where all the individual pkg files get copied to a a tmp directory and at reboot, a script runs and install them all. This method has been working for me for a while with Snow Leopard no issues, but now we are upgrading to Lion the issues start. I deploy with the a Lion configuration in exactly the same way and everything installs ok, but when I test to see if everything is working, I find that only iDVD, iPhoto, and Garageband are working, iWeb and iMovie aren't, they would launch and you see their menus, but there is now window. Have anyone come across this? I ready somewhere that this may be due to ~/Library being invisible... Any Ideas?https://discussions.apple.com/thread/3371284?start=0&tstart=0

Here is what I am trying to accomplish - I want to create an Inventory Search for 10.7 compatible computers. Here is what I did..... Create a search for computers that have: Processor Type like Core 2 DuoorProcessor Type like Core i3orProcessor Type like Core i5orProcessor Type like Core i7orProcessor Type like XeonandTotal RAM more than 2 The processor type appears to be returning the correct results but I am seeing results with 1 GB of ram. I tried adding the "GB" in the search so it read Total RAM more than 2 GB but that didn't appear to work either. Any ideas? Thanks

I use the same dongle to load all MacBook Airs in my office, I recently noticed that if I load multiple Airs in a day with the same dongle they seem to replace each other in the JSS. Has anyone seen this or figured out a work around.

We upgraded to JSS 8.4 (from 7.31) and noticed on new QuickAdds the postflight script has fewer commands, including an "enroll" command: #!/bin/sh #################################################### ## Create the configuration file at: ## /Library/Preferences/com.jamfsoftware.jamf.plist #################################################### /usr/sbin/jamf createConf -url 'https://XXXXXXXXXX:8443/' -k #################################################### ## Turn on SSH #################################################### /usr/sbin/jamf startSSH #################################################### ## Run enroll #################################################### /usr/sbin/jamf enroll -invitation XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX exit $? Our old QuickAdds have a number of understandable and editable entries: #!/bin/sh #################################################### ## Create the configuration file at /private/etc/jamf.conf #############################

We have a signed certificate from GeoTrust on our JSS. So I enabled the new "Use certificate communication with JSS" setting. The warnings said nothing about ensuring that the clients can access the JSS with the certificate- only to ensure that the JSS has a valid certificate. Well now a bunch of our 10.5 Macs can't connect to the JSS because they don't trust the certificate. I looked and the GeoTrust Root CA is not installed on there. I installed it on one, and now Safari doesn't give the untrusted message, but running jamf log still doesn't work. Any ideas how I can fix this? On side note- after all of this, I just found the extension attribute to check for compatibility. I wish in the documentation would have indicated to run that before enabling the setting.

http://www.apple.com/macosx/mountain-lion/

Hey Folks, Has anyone figured a way to disable that pesky iCloud window that pops up every time a new user logs in to the machine in Mac OS X Lion? I am in the process of perfecting my Lion Image to deploy in the Summer Semester, and I need to iron out a few things, but this one seems to be the most annoying so far. On a freshly imaged computer, a new user logs in for the first time and the System Preferences window pops up asking you to login to your iCloud account, and if it is closed then it never bothers that user again, but, when another user logs in to the computer, then the same issue happens. Any help on this would be appreciated. Regards, Kamal

I'm busy updating the Adobe Flash for our existing 10.6 and 10.7 systems, but have been stumped on a best method for removing the non-update worthy 10.5 systems. Yes, I know I should upgrade them ASAP anyway, but looking to negate the latest security flaw for Flash in the meantime. Since .PKG files will not do an UNinstall, has anyone come up with a Kick-Ass script for removing the files from /Library/Internet Plug-Ins/Flash Player.plugin and the other parts of Flash?

H'lo everybody! Quick question: I'm trying to enable AirDrop over ethernet, which can be enabled via the command-line like so: defaults write com.apple.NetworkBrowser BrowseAllInterfaces 1 I'm trying to figure out how to translate that into a managed preference. I assume I'd have to create one manually, but I'm unsure how to fill in the various fields. Any help for a Managed Pref noob?

Hello JAMF Nation When i will send a push notifaction (Lock Device) over the Internet Explorer then i became the Message: The object does not support this property or methodviewiPhone.htmlline: 524sign: 5 In Firefox it works Great. has anyone an idea? Thanks

So, you ever do something stupid? I do something stupid fairly often. I was trying to enable root so I can modify some plists I couldn't access as admin on my backup server. I was able to ssh in, and add the root account to the ard kickstart thing and restart the service, but now whenever I try to connect to the machine ARD says Connection Failed. I checked the username and password, i tried the root and the admin. I ssh'd back in and rebooted the server, but I still can't get a desktop. Any suggestions on how to un-snafu this?

So I have some time carved out for this afternoon to do the Lion upgrade on our main JSS - I've read that we can install the community MySQL thing. Since I'm upgrading to Lion, do I need to bother with the SQL? Should I install SQL first then Upgrade? Is there any setup I have to do to JSS so it doesn't cause trouble?