Self service management account?

[#1]

I am using self-service to install printers and software but when a user tries to install the software or printer it asks for administrator credentials. I set it so users are not required to log in but it still asks for this. Which password in the management account is JSS talking about, so the users don't have to worry about it?

Neal Smith | MAC Systems Engineer | Perrigo IT

[nessts]

I think you need to add the users to the printer admin group. so if they are active directory users you might
dseditgroup -o edit -a "ADDomaindomain users" -t _lpadmin

if they are local users you would probably change the AD group to staff to give normal users lpadmin rights.

--
Todd Ness
Technology Consultant/Non-Windows Services
Americas Regional Delivery Engineering
HP Enterprise Services

[jarednichols]

Neal-

If your self service is set up to not require administrator credentials then self service is using your Casper admin account to perform the installation. Things to check would be:

1. That your Casper admin account is an admin-class account. dscl . -read /Groups/admin GroupMembership at the Terminal will tell you who on the box is admin. This is helpful if your Casper admin account has a UID below 500 and therefore isn't visible in Accounts preference pane.
2. That your Casper admin password is set correctly in the JSS. If the password stored in the JSS database differs from that of the actual account, self service will prompt for credentials because it's already tried the Casper admin account and failed (due to the password mis-match). It's now looking for someone, anyone, to provide admin credentials to perform the installation.

j
---
Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436

[Sandy]

Hi,

There was an issue with this in one version of the JSS...8.21 maybe? not
sure
Also, my users tend to leave Self Service open and then when they go to it,
it has "timed out" and asks for credentials.
Fixed by quitting and re-opening

Sandy