Apple updates

[swright_mm]

I would like to use Casper to push out apple updates. I know I can do it from Policies in the JSS, but how do I set casper to pull the updates from the company's mac server and push to the users instead?

[scottb]

Do the Macs already have the SUS setup locally?
If so, choose the "Each Computer's Default Software Update Server" option in the setup.

See this thread for lots of good info:
Software Update

[swright_mm]

@scottb

No I have a mac mini, that has the SUS on it. I want to use casper to be able to grab the software updates from that mac mini for all systems in the enterprise when needed. So that it doesn't kill the bandwith of the company trying to do it all from apple servers.

[pat_best]

it sounds to me that you need to create a casper policy that either runs a single line command to do a defaults write command pointed to your SUS's index file for the OS on the client. Here's an example for pointing a 10.11.x mac client at an internal SUS:

defaults write /Library/Preferences/com.apple.softwareupdate.plist http://your.sus.hostname:80/content/catalogs/others/index-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

(note: this is the path as pulled from NetSUS not Apple Server so this mat not be exact for your application)
this would need to be an individual policy for every OS you support.

Alternatively you could write a script that polls the OS version of the client computer for the OS version and applies the appropriate SUS index path given the result of the reported OS. This method would allow one policy to rule them all :)

[swright_mm]

@pat.best Can you give me an example of that kind of policy? I want to do a policy that would cause me to do the least work possible. So that I can just put it into Casper, push it out when I need to and let it run the updates that I need it too.

[pat_best]

kind of like this....

only setting you need is the command line run ... one policy per supported OS

scoped:

I should have titled the policy 10.11.x SUS Server Selection to be more clear at a glance. This is the method I chose as very little is needed to add or remove a supported OS

[ljungholms]

You can set up a configuration profile to point to your SUS. That may be the easiest way.

[scottb]

@swright.mm - did you get things sorted?

Scott

[swright_mm]

@scottb - I am testing it out today to see if it works. I wanted to clean up the updates on the SUS first.