- Jamf Nation Community
- Products
- Jamf Pro
- Re: Need to enable root account?
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Need to enable root account?
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 01-08-2010 08:19 AM
From the knowledge base:
The user running a script on a client computer depends on how you are deploying the script in the Casper Suite.
When deploying a script with Casper Remote, the script will run as Casper's SSH user and perform all tasks via sudo.
When deploying a script with a Policy, the script will run as root on the client computer.
--------------
Does this mean that the root account has to be enabled on the client machine?
Michael Bond
Professional Technologist
WVU Libraries
Office.: 304-293-0340
Cell....: 304-282-0640
Email.: Michael.Bond at mail.wvu.edu
1 REPLY 1
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 01-08-2010 08:30 AM
No you do not, as the ssh account that Casper uses will be an admin account, so it will be in /etc/sudoers which means it can gain root privileges via sudo command. Also the casper client binary also runs a system daemon as root which takes care of all of it's services, sort of like launchd from what I can tell.
You can enable the root user account if you wish but it is not necessary.
Thomas Larkin
TIS Department
KCKPS USD500
tlarki at kckps.org
blackberry: 913-449-7589
office: 913-627-0351
chown -R us /.base
--missing content--
The user running a script on a client computer depends on how you are
deploying the script in the Casper Suite.
When deploying a script with Casper Remote, the script will run as
Casper's SSH user and perform all tasks via sudo.
When deploying a script with a Policy, the script will run as root on the
client computer.
--------------
Does this mean that the root account has to be enabled on the client machine?
Michael Bond
Professional Technologist
WVU Libraries
Office.: 304-293-0340
Cell....: 304-282-0640
Email.: Michael.Bond at mail.wvu.edu
--=PartEBC1EAD2.0
Content-Type: text/html; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable
Content-Description: HTML
<html> <head> <style type"text/css"> <!-- body { margin-bottom: 1px; line-height: normal; font-variant: normal; margin-right: 4px; margin-left: 4px; margin-top: 4px } p { margin-bottom: 0; margin-top: 0 } --> </style>
</head>
<body>
<p style"margin-bottom: 0; margin-top: 0">
<font size"3" face"Lucida Grande">No you do not, as the
ssh account that Casper uses will be an admin account, so it will be
in /etc/sudoers which means it can gain root privileges via sudo command.
Also the casper client binary also runs a system daemon as root
which takes care of all of it's services, sort of like launchd
from what I can tell. </font> </p>
<br>
<p style"margin-bottom: 0; margin-top: 0">
<font size"3" face"Lucida Grande">You can enable the root user
account if you wish but it is not necessary.</font><br><br><br>______
_________<BR>Thomas Larkin<BR>TIS Department<BR>KCKPS
USD500<BR><a href"mailto:tlarki at kckps.org">tlarki at kckps.org</a><BR>black
berry: 913-449-7589<BR>office: 913-627-0351<BR>chown&
nbsp;-R us /.base<BR><BR><BR><BR><br><br>>>> Michael
Bond <Michael.Bond at mail.wvu.edu> 01/08/10 10:19 AM >>><br>
</p>
<div>
<p style"margin-bottom: 0; margin-top: 0">
From the knowledge base: </p>
</div>
<div>
<div id"webkit-interchange-charset" class"apple-style-span"
charset"utf-8" style"font-size: 12px; font-family: Lucida Grande,
Verdana, Monaco, Helvetica, sans-serif; color: rgb(89, 88, 88)">
<p style"margin-bottom: 0; margin-top: 0">
<font face"Lucida Grande,Verdana,Monaco,Helvetica,sans-serif">
The user running a script on a client computer depends on how you are
deploying the script in the Casper Suite.</font> </p>
<p style"margin-bottom: 0; margin-top: 0">
<font face"Lucida Grande,Verdana,Monaco,Helvetica,sans-serif">
When deploying a script with <b>Casper Remote</b>, the script
will run as Casper's SSH user and perform all tasks via sudo.</font>
</p>
<p style"margin-bottom: 0; margin-top: 0">
<font face"Lucida Grande,Verdana,Monaco,Helvetica,sans-serif">
When deploying a script with a <b>Policy</b>, the script will run
as root on the client computer.</font> </p>
</div>
</div>
<div>
<p style"margin-bottom: 0; margin-top: 0">
<br>
</p>
</div>
<div>
<p style"margin-bottom: 0; margin-top: 0">
-------------- </p>
</div>
<div>
<p style"margin-bottom: 0; margin-top: 0">
<br>
</p>
</div>
<div>
<p style"margin-bottom: 0; margin-top: 0">
Does this mean that the root account has to be enabled on the
client machine? </p>
</div>
<p style"margin-bottom: 0; margin-top: 0">
<br>
</p>
<div>
<div class"apple-style-span" style"color: rgb(0, 0, 0);
word-spacing: 0px; text-align: auto; font-style: normal; line-height:
normal; letter-spacing: normal; text-transform: none; text-indent: 0px;
font-weight: normal; font-family: Helvetica; white-space: normal;
font-variant: normal; font-size: medium">
<div class"apple-style-span" style"color: rgb(0, 0, 0);
word-spacing: 0px; font-style: normal; line-height: normal; letter-spacing:
normal; text-transform: none; text-indent: 0px; font-weight: normal;
font-family: Helvetica; white-space: normal; font-variant: normal;
font-size: medium">
<div>
<div>
<p style"margin-bottom: 0; margin-top: 0">
Michael Bond<br>Professional Technologist<br>WVU Libraries<
br>Office.: 304-293-0340<br>Cell....: 304-282-0640<br>Email.: <a
href"mailto:Michael.Bond at mail.wvu.edu">Michael.Bond at mail.wvu.edu</a>
</p>
</div>
</div>
</div>
<p style"margin-bottom: 0; margin-top: 0">
<br class"apple-interchange-newline">
</p>
</div>
<p style"margin-bottom: 0; margin-top: 0">
<br class"apple-interchange-newline">
</p>
</div>
<p style"margin-bottom: 0; margin-top: 0">
<br>
</p>
</body>
</html>
--=PartEBC1EAD2.0=--
