Self Service

JAMF told us that the blank self service screen is a known issue on 10.4
systems with QuickTime 7.6. However, we installed post-Quicktime
updates on a number of systems and self service is again functioning
normally.

Evan Wade
TIS Support Technician - 949-234-5500
Capistrano Unified School District

Hi Criss,

I've been working with it a bit more than normal lately and it appears to be working fine here. Are you sure you are using a current version of 6.01?

Craig E

I don't get the issue Criss describes, but often I will open Self-Service
and the screen is blank. No login for self-service or anonymous options at
all. Just a blank window. No rhyme or reason that I can see and usual
maintenance to computer doesn't fixt the problem.
-Nathaniel

Re: [Casper] Self Service

Ernst, Craig S. to: Criss Myers, Casper List 03/12/09 08:22 AM

Yeah, we get that as well. Nothing seems to fix it except changing users. I've heard its a known issue, though.

Self service will also crashes on us a lot. Hopefully that gets fixed.

-Matt

Hi People,

Now that i have joined Casper to my Active Directory i can get users to login to the Self Service tool with their AD credentials, is there a way to assign a policy to a particular user?

You can assign policies to Computers, computer groups, buildings or departments, and you can assign self service policies to User groups, but id like to be able to assign a self service policy to a particular user for testing.

I know i can assign a logon/logoff policy to a user.

I can also make an LDAP group (i dont have access to create and edit AD groups) and assign that group to a self service policy, but that adds an extra level of credentials.

Is this possible?

Criss Criss Myers
Senior Customer Support Analyst (Mac Services)
Apple Certified Technical Coordinator v10.5
LIS Business Support Team
Library 301
University of Central Lancashire
Preston PR1 2HE
Ex 5054
01772 895054

I've never tried this, so I'm not sure. However, If your LDAP is bound to
your AD (fairly easy to do if your LDAP is OD), you can create an LDAP group
that contains AD users.
I'd also strongly recommend, as a sysadmin axiom, that one never assigns
privileges or attributes to a user account. Using groups keeps the
hard-to-track account cruft to a minimum.

In this case, I'd create a "self service testing" group, and put your user
in it. This way, you don't need to remember that johndoe has self service
privileges, and if you want to expand the test, you can add users to the
group.

----------
Miles A. Leacy IV

? Certified System Administrator
? Certified Trainer
Certified Casper Administrator
----------
voice: 1-347-277-7321
miles.leacy at themacadmin.com
www.themacadmin.com

This is correct. You scope the policy to an AD group of users.

Craig E

Thanks Craig. I realized my earlier message might not have been very clear. I *have* done the AD users in OD groups scenario. What I haven't done is
assign policies to individual AD users.

----------
Miles A. Leacy IV

? Certified System Administrator
? Certified Trainer
Certified Casper Administrator
----------
voice: 1-347-277-7321
miles.leacy at themacadmin.com
www.themacadmin.com

Tried it but it doesn't work on our network

the OD group will only read OD users, i can add AD users in WGM but it
doesn't search them, some weird AD setup we have here

Criss Myers
Senior Customer Support Analyst (Mac Services)
Apple Certified Technical Coordinator v10.5
LIS Business Support Team
Library 301
University of Central Lancashire
Preston PR1 2HE
Ex 5054
01772 895054

I have a once a day policy assigned to our Tiger clients that was provided
by JAMF:

jamf createConf -server jss.company.com -path / -isSecure

Where jss.company.com is the fully qualified domain name of your jss. Make
sure "run as root" is checked and then you are good to go. Note, this is a
work around, and you may need to run it again after a while.

I used to run it Monthly, then Weekly and now I let it go Daily.

Hope this is helpful.

Robb Gibson
System Engineer - eMMS, Publishing Systems
OfficeMax : 263 Shuman Blvd. : Naperville, IL 60563
(630) 864-5242

Not really, unfortunately.

You again would end up creating policies for each of these groupings you want the user to utilize.

Policy Name “Add Printers for Building A, Floor2”

At this point your at the mercy of the user knowing what they have to do.

I would be in the same boat as you, our entire wireless network is not segmented by building at all.

Just don’t let them print. =)

Craig E

Is there a way to setup a drill down option into Self Service?

Forinstance...

Printers

A Building

Floor 1

Floor 2

Floor 3

B Building

Floor 1

Floor 2

Floor 3

Etc.

Reason being, I see how I can force it to segment out to only specific
segments, but the problem lies in the users on the Wireless. Our setup
is done so that all the Access Points treat it as one large network. As
you move from point to point, the APs track you and maintain your
connection (like a cell phone tower). So to setup all the printers that
the users can add, my self service suddenly becomes 300 printers long.
Too much for people to go to it and pick from.

John Wojda

Operations Engineer, CTS

3333 Beverly Rd. B2-338B

Hoffman Estates, IL 60179

Phone: (847)286-7855

SMS / Text Page: 2245873298
<mailto:12245873298 at messaging.sprintpcs.com>

Team Lead: Chris Sta Ana
<mailto:cstaana at searshc.com;jwojda at searshc.com?subject=John%20Wojda%20Fe
edback&body=I%20am%20contacting%20you%20regarding%20John%20Wojda.>

We're seeing the same thing. Definitely intermittent so I suspect a bug and hope for a fix in 8.1

Neal Costello
ICT officer
DPEM Tas.

Got an odd question...

When I launch Self Service, I get "No Self Service Items are available"
and then under that "No Authorization" (I've tried from both the Self
Service apps in Applications and the SS from the Casper Suite).

Nothing has changed other than I was off work for about 2 weeks. Other
people seem to be able to access it though. I checked to make sure SS
was the proper version (v8), I verified the permissions in the JSS were
there, I verified that the SS permissions were not to authenticate...

John Wojda

Lead System Engineer, DEI

3333 Beverly Rd. B2-338B

Hoffman Estates, IL 60179

Phone: (847)286-7855

Page: (224)532.3447

Team Lead: Matt Beiriger
<mailto:mbeirig at searshc.com;jwojda at searshc.com?subject=John%20Wojda%20Fe
edback&body=I%20am%20contacting%20you%20regarding%20John%20Wojda.>

Mac Tip/Tricks/Self Service & Support <http://bit.ly/gMa7TB>

Got an odd question…
On Feb 9, 2011, at 8:56 AM, Wojda, John wrote:

When I launch Self Service, I get “No Self Service Items are available” and then under that “No Authorization” (I’ve tried from both the Self Service apps in Applications and the SS from the Casper Suite).

Nothing has changed other than I was off work for about 2 weeks. Other people seem to be able to access it though. I checked to make sure SS was the proper version (v8), I verified the permissions in the JSS were there, I verified that the SS permissions were not to authenticate…

John Wojda

John-

we have a remote user that had this happen yesterday. instead of them using SS to get the printer, I pushed it to them instead using casper remote.

I tried recon, sudo jamf manage etc. I could ping the server, trace to it, my DNS was resolving to the correct IP.

the user is on the other side of a VPN concentrator.

Stumped as well

Dan

I'm running into a problem, where I open up Self Service on a client, a) it takes forever to load or at least looks like it's loading and b) when it finally looks like it's done loading, all that shows up is the Self Service window with a blank white background. Any thoughts, this was working fine earlier.

Eric Graham
Senior Systems Administrator
BFA Photography
School of VISUAL ARTS
214 East 21st Street, 5th floor
Mailing: 209 East 23 Street
New York, NY 10010-3994
Tel: 212.592.2319

Did you try bouncing Tomcat?
-- Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436

Does your JSS url that's set in the settings have a "/" at the end of it.

I had the white screen issue because I forgot the trailing / at the end of the path

John

A few minutes ago self service on one of my test machines decided to stop working, it just comes up with a blank screen. I turned on debug mode and I'm just seeing <com.jamfsoftware.selfservie>: init over and over again. This was literally working about 10 minutes ago. Any ideas what might be happening? The JSS is running 8.22 and my machine is running 8.22.

Thanks
Allen

I had a problem like this on one particular machine once - used Onyx to clear/rebuild caches and it fixed the problem.
On Sep 7, 2011, at 2:10 PM, GolbigA at mskcc.org wrote:

You can do this from the command line with the jamf binary (try these one at a time to see which one, if any, fixes the problem):

sudo jamf flushCaches -flushSystem
sudo jamf flushCaches -flushUsers
sudo jamf fixPermissions

If this doesn't work, you can try rebuilding the dyld shared cache:

sudo update_dyld_shared_cache -force -root /

No luck, tried the jamf commands and even Onyx. Self Service still comes up empty and the log files just show init over and over. I re-imaged my test machine and it works again, but one of my coworkers has the same issue. On machines that work I see in the log, Loading webpage "https://jss:8443//selfservice2/index.html?en0=MACAddress&en1=MACAddress. On that machine that is failing if I goto Safari and type that link in with the proper Address I see all the Apps that I would normally see in Self Service.

Thanks
Allen