Skip to main content

Hello everyone-

First of all, thanks to everyone for the feature requests, both on this list and in person over the last 7 years. Almost every feature that we have comes from requests from our community. Thank you all for helping us make our products better.

Below are some quick responses to some of the items that have come through in the last month. Please feel free to respond on or off the list.

Granular Access to configurations
We've been evaluating how to best implement the idea of Scope into the Casper Suite for quite some time. Scope can mean many different things to people depending on the size and politics of their organization. I think that we have finally come up with a way that would allow us to implement this and make it useful for almost all of our clients. I don't have any timeframes to share about any of this at the moment, but please know that we are actively working towards a solution for this.

Custom SSH Ports
This can actually be accomplished in the current release. Just like you would edit the "/etc/sshd_config" file on the client computers, you can set the default port for SSH in your "/etc/ssh_config" file on the computer that you are running Casper Remote on. Nowhere is port 22 hardcoded into the Casper Suite. We'll update our documentation to reflect this information.

Email to all members of a Computer Group with custom Reply to address
This is a feature request that has been around for a while (Sean G... you were first!). We will look at this for an upcoming release.

Scripts in database vs Distribution Point
I believe that when we released version 5.0, we migrated the contents of the printer PPD files from Distribution Points to being stored in the JSS. We were very close to doing the same with scripts, but there was one item that prevented us from doing this. At that time, we had a number of clients who ran compiled applications/AppleScripts through the scripting framework. I'm wondering how many people currently do that? Also, the point that Bill made about standard AppleScripts is a valid concern. We might be able to find a hybrid solution that stores scripts in the database if possible, and the rest on distribution points.

This would allow normal shell scripts to be edited in the JSS and/or Casper Admin. We could easily provide some very basic syntax checking to Casper Admin (just like we do in Composer), but the JSS would be much more complicated.

man pages for jamf binary/jssutil
We've shied away from man pages in the past only because of the need to distribute them in addition to the jamf binary. If we implemented the "help" verb for the jssutil binary, would that meet the needs of everyone?

Better "plist" editing in the JSS for Managed Preferences
This is one that we've considered as well. I think that much of the work that went into the internals of 7.2 got us much closer to being able to provide an interface like this. We'll look at the feasibility of doing this, as I, too, would like this interface for Dictionaries and Arrays to be much better.

Nested Smart Configurations
I know that there are a number of places that this feature would save people quite a bit of time. Sean - in your situation, would the ability to swap packages based on the processor type give you the ability to accomplish this task without duplicating base configurations? Regardless, we will take a look at what it will take for us to do this on our end.

thanks again!
zach

list and in person over the last 7 years. Almost every feature that >we
have comes from requests from our community. Thank you all for helping
us make our products better.

Thank you, for being open to listen.

- JD


Hi,

On 02.04.2010, at 20:12, Zach Halmstad wrote:

Having just the 'help' verb for your binaries makes it quite hard to find a feature in comparison reading/searching one man page as one has to check the help output for all possible commands. So I would prefer having one document.

Best regards,
Marko


As would I.  Man pages are also great for providing examples of things
you're trying to perform, complex or simple. Also, by publishing man pages
(perhaps similar to how Apple does in the Dev center?) it can make it much
easier to read. I often will take a semi-transparent Terminal window, lay
it over the Apple man page (or next to) and work my way through a problem
I'm having. 

It's very convenient.

j

--Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436


Here is what I have for 7.1 to tide you over.

- JD

version=7.1

Usage: jamf verb [options]

verb is one of the following:

about Display information about this
application bind Binds this computer to a directory
service blacklist Historical synonym for the
'enforceRestrictions' verb bless Blesses a System or a NetBoot Server checkForTasks Historical synonym for the 'manage'
verb. checkJSSConnection Checks the availability of the JSS createAccount Creates a new local account on the
system createConf Creates the file that this app uses to
find the JSS createHooks Creates and configures Login/Logout
hooks createSetupDone Ensures the Setup Assistant does not
launch on the next boot createStartupItem Creates a startup script to contact the
JSS createSymbolicLinks Creates the symbolic links that OS X
requires to boot deleteAccount Deletes a local account from NetInfo or
the local dscl database deletePrinter Deletes a printer from the system deleteSetupDone Causes the Setup Assistant to launch on
the next boot displayMessage Displays a message to the current user enablePermissions Enables permissions on a volume enforceRestrictions Enforce the Restricted Software from
the JSS fixByHostFiles Fixes the ByHost files fixDocks Repairs docks that have question marks
after certain OS Updates fixPermissions Fixes the permissions on a given target flushCaches Flush cache files for the system and/or
users flushPolicyHistory Flush the policy history on the JSS getARDFields Displays the ARD Fields on a volume getComputerName Displays the computer name on a volume heal Run self healing for all packages on
this computer help Display this message or details on a
specific verb install Installs a package installAllCached Installs all packages that are cached listUsers Lists all the users on the system log Log the IP Address as well as an action
to the JSS manage Enforces the entire management
framework from the JSS mapPrinter Maps a printer mcx Apply Managed Preferences modifyDock Installs or removes items in all users
docks mount Mounts a file share policy Checks for policies on the JSS reboot Reboots the computer recon Runs Recon to update the inventory on
the JSS removeSWUSettings Remove settings that point SWU at
internal servers resetPassword Resets a local user's password runScript Runs a script runSoftwareUpdate Run Software Update setARDFields Sets the ARD Fields setComputerName Sets the computer name setHomePage Sets the default home page for users setOFP Sets the Open Firmware mode and
password startSSH Starts the ssh server startVNC Starts the jamfvnc server uninstall Uninstalls a package unmountServer Unmounts a file server updatePrebindings Updates the prebindings on a volume upgrade Updates this application and any
related applications version Prints the version of this application

Global Flags:

-displayJSSTraffic Display the total network traffic
between this app and the JSS -overrideJSS Specify the address of the JSS, like
https://192.168.1.100:8443 -randomDelaySeconds Delay a random amount of time before
starting. Specify the maximum number of seconds
as the next parameter. -verbose Show verbose events

jamf help <verb> will provide details on that verb


Thanks for listening to our input Jamf people...

On the man pages, if you maintain the help verb in the binary and say have a web based manual page like the Apple developer pages would be OK in my book. Often when looking through man pages I will Google them or go to the Apple dev site for the latest syntax and updated manual on the command.

Examples are always good too, because sometimes tech writers can't describe the syntax quite properly.

As for the property list editor in the JSS, I love using dictionary, arrays, and so forth and it makes it so easy to do. I don't see how this wouldn't be a super awesome feature. Not to mention, those that lack OS X Server and run strictly AD and want to manage the Macs with Casper and not use OD, would get the same functionality of say WGM for managing preferences. Then granulate it so that you can apply MCX settings to smart groups, or imported AD/OD groups. This would benefit all of us, and be a huge selling point for your product.

Thanks

Tom


Casper,

I have a few requests:

  1. Casper Recon: *allow to import comma delimited files of hostnames, or ip addresses. *allow to paste list of ip address or hostname in some area for them to be scanned. *allow entry of just one ip address instead of having to enter it twice when its not a range. *Be able to save a list of failed reconned systems, and then import into recon later, I know that recon can be told to rescan at set intervals, such as every 1,4, 8,12, and 24. But I would like the ability to implement the retry at a time of my choosing without reentering each IP
  2. Casper Remote * Be able to select computers in a group without having to check each one by hand
  3. Casper Admin Be able to see the size of files in Casper admin Be able to drag and drop files out of Casper admin. Currently functionality only allows for dragging files into Casper admin, but when I would like to download a file I have to go to the share, and download the file to my computer. Be able to open scripts for editing by double clicking in casper admin. Now I have to download the script from the share, edit and modify it, then reupload and replace it in casper admin. We have many simple scripts that are not more than 10kb that sometimes need to be modified. It would be much simpler if we could do this through Casper Admin 4 . Inventory way to import comma delimited file into inventory for location information. This may be something that is possible with the Casper SDK I am not sure. However it would be nice to be able to create one file and import it into casper instead of editing each entry if the information is not already there. I am aware of the LDAP directory services option in casper as well.

Thanks

Dave

-- David Bruno
Computer Scientist
ARL/CISD
410-278-8929
david.bruno at us.army.mil


On 9/9/10 7:01 AM, "David Bruno" <david.bruno at arl.army.mil> wrote: 1sxtH3aG64DuDOMzSTG5 An unintuitive little trick: You can select the group header and tap the spacebar to select or deselect all members of that group.
3. Casper Admin * Be able to open scripts for editing by double clicking in casper admin. Now I have to download the script from the share, edit and modify it, then reupload and replace it in casper admin. We have many simple scripts that are not more than 10kb that sometimes need to be modified. I

I like this one. I would like it even better if scripts were stored in the
JSS so that we don't have to manage the script files.

--

William Smith
Technical Analyst
Merrill Communications LLC
(651) 632-1492


3- I agree this would be nice, but what I have been doing is to connect to

the Casper share, open the script from "scripts" folder, edit it, and then
save it, back to the same share. I haven't had to load it again through
Casper admin. See if that works for you until they add this feature.

Sean


I would like a copy/paste/edit feature for scripts in the JSS so that
when you update a script it will be automatic. I would also like sync
settings to be set on the folder level. I want my packages to be
verified via md5 and I want my scripts to be verified by creation date. Since after all, package size comparisons are not really relevant with
text only files.


Modifying live, in production scripts like this is asking for trouble.
-- Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436


I believe Casper has meta data and settings to set items for deployable
and/or for testing phases. You still can test it out.


Please remember to send these great ideas to support at jamfsoftware.com<mailto:support at jamfsoftware.com> so they can get added internally.
Sending feature requests to the list does not guarantee they will be seen by the appropriate people.

-Lance