Managed laptops login delay

[#1]

Started managing mac laptops with casper but been running into a login
problem. Laptops takes 3 - 5 mins to login. When the laptops are connected
to our network they login just fine. This is a problem when these laptops
are off campus. Is there anyway to fix this?

Jason Kong

Apple Support Specialist
Queens College DH-154
Office of Converging Technologies
Jason.Kong at qc.cuny.edu
718-997-599

[#2]

Nope they are all local accounts. Its seems like it is checking for the server and then eventually timing out and then logs in.

Jason Kong

Apple Support Specialist
Queens College DH-154
Office of Converging Technologies
Jason.Kong at qc.cuny.edu
718-997-599

[tlarkin]

I can only imagine they are looking for log in hooks via your casper framework when logging in/out off campus. If you have log in policies you may want to check the box that says "Make available offline" then it will cache them to the client so they still work off campus network

[#4]

The only way around this is too uninstall quickadd from the laptops. Which means they won't be managed anymore

Jason Kong

Apple Support Specialist
Queens College DH-154
Office of Converging Technologies
Jason.Kong at qc.cuny.edu
718-997-599

[stevewood]

Are these systems bound to OD? I had issues similar to this when machines
On Wed, Jun 16, 2010 at 2:03 PM, <Jason.Kong at qc.cuny.edu> wrote:
were bound and the LDAP info was hard coded. Once I switched to gathering
LDAP info from our DHCP server, the delays went away. The problem was the
machines were looking for the LDAP server to authenticate against.

Steve Wood
Director of IT
swood at integer.com

The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201
T 214.758.6813 | F 214.758.6901 | C 940.312.2475

[tlarkin]

If they are all local accounts and bound to OD, you should be able to set the default path for directory services to the local machine via dscl somewhere......I am saying this with out reading the man page, just a suggestion and shot in the dark

[jarednichols]

We found this problem with our environment. The latest 7.21 client seems to have resolved most of the issues we were seeing with it. It had to do with the Jamf client knowing it was offline but trying to check in anyway.
--
Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436

[#8]

Nope they are not binded to OD or any other directory service. It would make sense that the machine is checking hooks, etc. I'll try to make the available offline too see if it solves my problem

Jason Kong

Apple Support Specialist
Queens College DH-154
Office of Converging Technologies
Jason.Kong at qc.cuny.edu
718-997-599

[#9]

I've added the latest quickadd package to the laptops, but they all seem to still have this issue.

Jason Kong

Apple Support Specialist
Queens College DH-154
Office of Converging Technologies
Jason.Kong at qc.cuny.edu
718-997-599

[tlarkin]

Are you using portable home directories?

[RobertHammen]

Is anything being logged in /var/log/jamf.log? If not, anything going on in the system/console logs?
On Jun 16, 2010, at 2:20 PM, Jason.Kong at qc.cuny.edu wrote:

[#12]

In the jamf.log the last line says the following:

jamf[540]: Could not connect to the JSS. Looking for cached policies....

So it seems like the macbook is looking for the JSS server first and once it times out, in 3 - 5 mins, then it starts to look for cached policies.

Is there anyway change this ?

Regards,

Jason Kong

Apple Support Specialist
Queens College DH-154
Office of Converging Technologies

Jason.Kong at qc.cuny.edu
718-997-5993

[RobertHammen]

Need to find out if you have some kind of policy in place that it's looking for.
On Jun 16, 2010, at 4:42 PM, Jason.Kong at qc.cuny.edu wrote:

Settings->General->Summary->Select All->Download Summary will give you a list of all of your Policies, settings, Computer Groups, et. al.

Look there for policies triggered by login or startup. Could these machines be trying to contact the JSS to perform one of those?

What does your Management->Management Framework Settings look like?

What version of Casper Suite? 7.21?

[bentoms]

Our macs are bound to both OD & AD.

Those laptops being used offline had similar delays, even before casper.

So we've created an offline policy that runs a script that's been butchered from the resource kit script: Turn Off Airport & another I created to clear the DNS settings for the airport card on 10.5+ (all our managed macs have dhcp supplied dns settings)...

It's on my list to post here or the hints site..

If you want it.. let me know & I'll try & get it to you by Monday..

Ben Toms
IT Support Analyst GREY Group
The Johnson Building, 77 Hatton Garden, London, EC1N 8JS
T: +44 (0) 20-3037-3819 |
Main: +44 (0) 20 3037 3000 | IT Helpdesk: +44 (0) 20 3037 3883

[bentoms]

It’s a policy that’s set to offline & to run at logout. But the logout does seem to suffer a delay if the mac can contact the jss as the jamf binary tries to report back to jss.

It then runs 1st the script below (which is a taken from a the resource kit scripts Clear DNS & Clear Search Domains but I’ve added a line to only clear 10.4 if passed at $5), then the policy Turn off Airport from the resource kit.

$4 is set to aiport at policy.
$5 is set to n for our site as we don’t wish to clear dns or seacrh domains for tiger clinets, but ok for 10.5+ as out dns & search domains are dhcp supplied.

Clears DNS & Search Domains for network interface given at $4, will only clear 10.4 dns & search domains is a y is passed at $5.
#!/bin/sh
# HARDCODED VALUES SET HERE
networkInterface=""
clearTiger=""

# CHECK TO SEE IF A VALUE WAS PASSED IN PARAMETER 4 AND, IF SO, ASSIGN TO "networkInterface"
if [ "$4" != "" ] && [ "$networkInterface" == "" ];then
networkInterface=$4
fi

####################################################################################################
#
# SCRIPT CONTENTS - DO NOT MODIFY BELOW THIS LINE
#
####################################################################################################

OS=/usr/bin/defaults read /System/Library/CoreServices/SystemVersion ProductVersion | awk '{print substr($1,1,4)}'

if [[ "$OS" < "10.5" ]]; then if [[ "$clearTiger" == "y" ]]; then echo "Clearing DNS Servers for OS $OS..." /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/networksetup -setdnsservers "$networkInterface" "empty" echo "Clearing search domains for OS $OS..." /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/networksetup -setsearchdomains "$networkInterface" "empty" else echo "Not Clearing DNS as OS is $OS" fi
else echo "Clearing DNS Servers for OS $OS..." /usr/sbin/networksetup -setdnsservers "$networkInterface" "empty" echo "Clearing search domains for OS $OS..." /usr/sbin/networksetup -setsearchdomains "$networkInterface" "empty"
fi

Turns off airport, then after 5 second delay quits.
OS=/usr/bin/defaults read /System/Library/CoreServices/SystemVersion ProductVersion | awk '{print substr($1,1,4)}'

if [[ "$OS" < "10.5" ]]; then echo "Turning off the airport for OS $OS..." /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/networksetup -setairportpower off
elif [[ "$OS" = "10.6" ]]; then echo "Turning off the airport for OS $OS..." /usr/sbin/networksetup -setairportpower Airport off
else echo "Turning off the airport for OS $OS..." /usr/sbin/networksetup -setairportpower off
fi

sleep 5

exit