I'm running NetSUS 2.0 on our ESX environment. I've uploaded a copy of our known good netboot image taken from our existing xserves. The IP Helpers are in place, the subnet and masks are configured on the NetSUS. Everything seems rosy ... That is until you actually netboot off it. What happens is that it appears to netboot properly but then, every time, Casper Imaging will then almost immediately crash the computer solid. This same image works perfectly from our existing infrastructure. I kept the console open and it's not returning any useful info that I can see. Suggestions?

I'm having problems where the JSS API has switched to returning data in JSON instead of XML. I believe it started happening when we switched to 8.71, but I could be wrong on that. Playing around with curl, I've figured out how to add a header to get it to give me XML, but I'd really like for it to just return XML by default. Anyone else run in to this or have any ideas?

Anyone have any experience with putting Tomcat behind an Apache proxy, using mod_proxy or mod_proxy_ajp or something similar with their JSS server? While needing the JSS to be accessible both internally and externally, we'd rather not directly expose Tomcat to external networks if possible. Just wondering if anyone else has tried it out before I get my hands dirty with it.

I'm trying to add a web clip to the dock that holds the address of an smb share. I'd like to do folder rather than a web clip but the icon doesn't change from a question mark to a folder, even when the share gets mounted. The share I want to mount is in the following format: smb://files/labarea/'$site'/Labarea My thought was to create a web clip and use a script parameter to enter the school site designation like this: smb://files/labarea/$4/Labarea For some reason when using dockutil to add a web clip with this address, the $4 parameter doesn't get accepted. If I put HH as the parameter in Casper Remote, the dock.plist just shows the url as it sits in the script, with the $4 rather than HH. If I use dockutil to create a folder pointing to the share like this: //files/labarea/$4/Labarea The parameter works fine (but the icon stays as a question mark rather than a folder icon). If I drag my dock item out and manually put it in from the mounted sh

Happy September...on the tail of my wireless authentication woes, another problem came up. I have machines that were imaged in 2 weeks ago, that tecahers used. fine. Now it seems each machine will not let one and only one user not login ( different user on each machine) we use AD. the user home folder is there with correct ownership rights. logs show the user as an 'unknown' user. changing the password/deleting, adding the account does not work.the only thing that does seem to work for now is a nuke and pave. I do see the user with an updated USN number in AD. again it is just one particular user, which makes it frustrating.I just get the shaking grey screen. any ideas/ OS: 10.8.4Bound to AD

Hi, It may be a newbie question but how on earth do I create a smart group based on an EA? This is in JSS 9.11 BTW. I have the EA being populated via a script and can see the info in the inventory, I just cannot work out how to use an EA as criteria for a smart group. I'm clicking "all criteria" but cant find anything that suggests an EA. Cheers Andy

In our inventory scan of our Macs, we have both an IP address and a Reported IP address returned. I'm struggling to work out why there are two and what each address relates to. I can't find any explanation in the Admin Guide so can anyone shed any light?

We have a script we've been testing that removes a bad wi-fi entry from the keychain of the local user. When this runs on the every15 trigger set in the JSS policy, the logs state the keychain entry doesn't exist. However, if we go to the computer and run the script from Self Service (separate policy, set to just run from SS), it works perfectly! It removes the entry, shows this in the logs and fixes their issues. I feel like I'm missing something really simple but I could sure use advice! - Brandon

We have a SUS running on 10.6.8 providing updates. Just tried deploying the 11.1.0 iTunes update and although the install appears to work, it actually breaks iTunes and it wont launch; system.log reports com.apple.launchd.peruser.254786553[559] ([0x0-0x34034].com.apple.iTunes[1391]): Exited with code: 1 I've deleted the update on the server and have a newly downloaded version, but same problem. If I manually download iTunes and install it manually, then that works fine. Anyone having a similar issue or have seen anything like this who can provide some insight? Sean

:) https://jamfnation.jamfsoftware.com/jnucEvent.html?eventId=2&view=info

Is there a way to move the users to a group membership w/o deleting them first?

I can't for the life of me find out where VueScan is storing its serial number information. I've used Composer 8.7 to scan for file differences to create a package and all that shows is the Application itself (of course) and a vuescan.ini and vuescan.log file in ~/Library/Preferences. Operating under the pretense that it's stored in ~/Library/Preferences/vuescan.ini, I deleted that file and relaunched VueScan expecting it to ask for a serial number again and it didn't. I also used fseventer to see which files are touched/read while VueScan is launched, but it didn't show me anything that jumped out as being a licensing file. Anyone know definitively where VueScan 9.x stores it's licensing information? I want to package up the software for distribution to our Fine Arts students via Self Service.

I have a script which will remove our old Wireless SSID and add our NEW wireless SSID with password. I would like to make this available through self service. But I would only like the this Self service Policy only to be available if the computers are connected via Ethernet. Is this possible?

Each policy has a "Feature This Policy on the Main Page" checkbox. Is there a way to have an entire category show up on the main page? I checked the admin guide, I searched JAMF Nation, I used Google-Fu... TIADon

Looking at the updates on our JAMF ASUS we are noticing that the available updates do not match the latest updates that are listed on our Apple Server 10.8.4 SUS. There do not seem to be any updates listed for 10.8 (maybe others as well), is there some change that needs to be done in the conf file for the latest updates to be listed? The ASUS checks at 3.00 am each day and shows that this is being done.

We recently decided to upgrade our test environment to Casper 9. It did not go well. As it turns out, if your JSS is operating in clustered mode then you have to upgrade the cluster master first. Where this was throwing us off is that we periodically copy a dump of the live production database off to our test database and import that. There is a line in our automated script that should disable clustering mode on that database before we restart the tomcat process. To quote Nicky (who we got this from): Totally. Just run this command in mysql and restart tomcat: update jss_cluster_settings set clustered = 0; Turns out our implementation of this command wasn't working! Enough of our test environment issues. What have I learned? In a multiple JSS environment, upgrade the cluster master first then the others!

Hi, new customer in the last 6 months and we have enrolled nearly 1000 macs to our JSS but I know there are a few out there lurking in an odd office or 2, a student didn't com in to be added etc that we may have missed and not in the JSS. Is there a way to search for these so I can reach out to the user and get them in our office?

Hey, I am trying to get the certs sorted out on our test 9.0 JSS, and I came across some old instructions that reference a hidden URL for accessing the internal CA on the JSS. Basically, it used to be just your JSS url with /ca.html added. http://www.jamfsoftware.com/libraries/pdf/white_papers/Manually_Installing_the_JAMF_Software_Server.pdf This does not work in 9.0. Is there another way to access the CA on a 9.0 JSS? Thanks, --Andy

In releases prior to 9.0, one could manually run all policies associated with the every15/hour/etc trigger by: jamf policy -trigger everyHour We could also modify the associated scheduled tasks by visiting: [JSS8/tasks.html](JSS8/tasks.html) Casper 9.0 replaces the every15/hour/etc trigger with the Recurring Check-In trigger. Is there a way to manually run all policies associated with the Recurring Check-In trigger? Also, is the concept of Scheduled Tasks still present in 9.0? JSS9/tasks.html does not exist.

Hi folks, I am running Casper for about 90 iPads at a small high school.We are not restricting the App Store, but we are instructing students not to install apps. I'm trying to set up a notification that would alert me if ANY app is installed. I was wondering if anyone had any ideas.

Good morning, Having trouble getting the license recognized for a program called Git Tower. I'm wondering if anyone has any insight that can help me get this license recognized. I am using Composer to create this package. The license file has an entry in it that is referencing the machine that the program is being serialized on. The license file is a plist one that gets created after you serialize the program in ~/Library/Application Support/Tower (which I imagine is a typical workflow for these things) Here's what I've tried so far: -Creating the package without launching it, then creating a separate .dmg with the license file in it, then deploying both together through Casper Remote. The .dmg has FUT and FEU enabled and gets deployed after the .pkg installer.-Creating the package, serialized, as a .dmg with FUT & FEU enabled, and then deploying through Remote-Commenting the machine references/entry out of the plist, in the hope that it would get written to/r

We're having a problem with the search results between different users. We have an account that existed before we upgraded to v9. When doing searches with this account we can see several columns: name, model, managed, full name, os, serial number, department. However with an account that was created after the update search's only show the name column. I've been looking but can't find a setting for this?Cheers

Hi All, I had a set of Adobe CC packages that worked fine while on Casper 8.71, but since my update to Casper 9.0, they fail after a few minutes. It is very frustrating... The casper logs report "Failed to download files from http://casper/CasperShare/Packages/Adobe%20Photoshop%20CC_Install.pkg.bom." Has anyone else experienced this, and have any ideas what is happening? It seems strange that they where fine before the update to Casper 9.0, and now they are broken. I have rebuilt the packages, but I am still getting the same issue. I have also tried the fixes listed here https://jamfnation.jamfsoftware.com/discussion.html?id=7945 and https://jamfnation.jamfsoftware.com/discussion.html?id=7771

I have a smart group created for Macs with out of date Flash Player installed. The logic is simply "Plug-in Title has Flash Player.plugin" and " Plug-in Version is not 11.8.800.94" However the Title logic is faulty. I receive reports of anything that contains "Flash" or "Player". I need it to take "Flash Player.plugin" as one literal string. Encapsulating the string in quotes and escaping the space has not worked.

So I was able to get support on the line to help getting my DMZ server to look for my intranet DB. Now upon launch, however, the DMZ server fails to initialize and give a Database Connection Error. The following error was encountered: Communications link failure. The last packet sent successfully to the server was 0 milliseconds ago. The driver has not received any packets from the server. Please verify the following items: -MySQL is running on [server IP] -MySQL is accepting network connections -The user jamf@[server IP] has been granted privileges to the jamf database Oh, to add to this, we just upgraded to 9.0 in the middle of this. And before you ask, yes we did point grant all privileges. On my intranet server, hosting the DB, it only allows me to show the JSS WebApp on the localhost, and it doesn't show any other servers tied in. Were running RHEL 6 in DMZ and RHEL 5 inside.