Casper Admin Permissions

[Matt]

Upgraded my Server to 10.8 and JSS to 8.6 and now all of the sudden my JSS is "Read Only" and I can't use Casper Admin. Is this a bug??? Everything was working fine before the update.

[Matt]

Must be some sort of bug! Once I added myself to Server -> File Sharing -> CasperShare Permissions everything worked fine. This can't be normal!

[nkalister]

did kerberos suddenly start working for you with 10.8? casper admin will use valid kerberos tickets instead of the casper admin account if they're present and the server is kerberized as well. since adding yourself to the permissions fixed it, that may be what happened.

[Matt]

Kerberos seemed to be working before.

[jarednichols]

gtfo... they kerberized the Casper Apps???

[Matt]

All I know is its not cool!

[nkalister]

casper admin and the casper binary have used valid kerberos tickets before the JSS accounts since at least 7.31.
check the last bit of this KB article:
https://jamfnation.jamfsoftware.com/article.html?id=48

anyway, it's simple to see exactly what's going on- connect with casper admin while you have a valid ticket, and then check your 10.8 server to see what user it says is connected to the share. then destroy your ticket, relaunch admin, and check the connected user on the server again. if it's says your user account when you connected with a valid ticket and casper admin when you destroyed your ticket, then you know it's using your kerberos ticket when one is present.