I'm just now looking into deploying Casper for our org. have you found a way to deploy with elevated privileges? Any other tips or updates? :-)

Thanks for sharing.

We're in the process of consolidating IT support and several departments are still on ARD, so in order to get them on board with this I used Composer to repackage the Jump Client installer (sort of).

Instead of using a Casper policy to cache the DMG, I use an installer pkg to drop the DMG file under /tmp. Then, I added a post-install script to the pkg that runs the same two commands as your script. Works like a charm and the added benefit is it is a self-contained pkg that our departmental IT admins can push out with ARD.

Thanks for posting your script, it was very helpful!

@wyip][/url I'm having trouble doing what you've done and using Casper to deploy it. It appears to complete in the Casper logs, but looking at system.log, it has a com.apple.launchd error that says "System: This API can only be used by a process running within an Aqua session."

Any advice on deploying this with Casper?

Edit: Running from Self Service, i receive an error window that says "No suitable location could be found to run the application."

@rldehaven @wyip Trying this using rldehave's technique. It works if set as recurring checkin policy, but only when run from terminal using sudo jamf policy. Nothing in the logs shows why it's failing when just letting the recurring checkin run naturally. But it does leave the dmg mounted, so i know that much is working.

When installing by double clicking the pkg or pushing via ARD, I see the Bomgar client UI open briefly (a chat window opens and there's sort of a splash screen that looks like it is connecting to the server). I'm guessing this is the part that's failing when pushing the pkg through Casper. I think we would need to figure out a way to make the install completely silent.

Oddly enough, i got it to work by removing the '&' at the end of the sdcust command.

@rldehaven

did you do this as part of imaging? I want to deploy this via policy to all my users. Thanks for posting this.

@wmateo

I deployed using a policy with recurring check in.

First create your Passive Jump installer in the admin site on Bomgar and upload in Casper Admin.

Create a script to set after:

!/bin/sh

Attach the Cached DMG from the Waiting Room

hdiutil attach /Library/Application Support/JAMF/Waiting Room/bomgar-scc-CHANGETHISWITHTHESERIALFROMTHEINSTALLER.dmg

Install the client from the standard mount location for the bomgar-scc client installer.

/Volumes/bomgar-scc/Double-Click To Start Support Session.app/Contents/MacOS/sdcust

And that should be it.

@chrisbju Thanks I will try this.

@chrisbju What I am trying go accomplish is to make this part of our imaging workflow. So that every machine that is imaged has this application. It becomes challenging to ask a user to download this, and install without any admin rights.

I also plan to deploy this to all my current users via policy.

@wmateo

I haven't tried that yet. I'm currently testing myself.

Set it as -Install on reboot?

ignore this post

anyone figure the bomgar stuff out.

I don't want self service

@chrisbju's method is working for me.

To recap as his explanation may not be clear for everyone.

1. Create and download a Jump Client installer through the Bomgar administration web interface with the settings you want the client to use on the remote machines.


2. In the zip file you download there is a hidden directory called ".dmg" (that's a period in front of the directory name). Use Terminal or Go to Folder (Shift-cmd-G) and navigate to that folder. There you'll find a disk image called something like "bomgar-scc-wodc5oj8g63w7jy5hdy1gejz7w6gwjgj8jf7iic40jc90.dmg".


3. I used Composer to create a PKG installer that places that DMG file in a temporary location (/tmp or in my case the Casper Waiting Room directory).


4. Upload the PKG to Casper.


5. Create a script to run the installer...

!/bin/sh

#Attach the Cached DMG from the Waiting Room

hdiutil attach /Library/Application Support/JAMF/Waiting Room/bomgar-scc-<whatever.the.string.is.from.your.diskimage>.dmg



#Install the client from the standard mount location for the bomgar-scc client installer.

/Volumes/bomgar-scc/Double-Click To Start Support Session.app/Contents/MacOS/sdcust

1. Now to push this out to a machine you can create a policy that run the PKG installer putting the disk image in the temporary directory and then runs the script you created for self service or an automated deployment.




2. If you want it to run at imaging time then add the PKG installer to your configuration. And add the script so that it runs at reboot.

Anyone having issues with the firewall exception? I get prompted at every login if i want to accept incoming network connections.

Hi folks

I'm struggling getting the Bomgar Jump Client onto machines using the suggestions above. The problems I'm running into are as follows:

1) Download the DMG, upload via Casper Admin, push as a package
This method installs the DMG to the machine, but automatically gets the .app out and sticks it in the root of the system drive. That's all well and good, but if you try to actually run it (experimentally in terminal directly on the target Mac, using the

/Volumes/bomgar-scc/Double-Click To Start Support Session.app/Contents/MacOS/sdcust

command), it tells you the disk image doesn't exist any more. This is correct - it deleted itself!

2) Download the DMG, zip it, stick the zip file in a package, upload via Casper Admin, push as a package
This method uses a pkg to stick a package containing a zip file where I want it put (/private/tmp). But the .zip automatically unzips... then automatically mounts the DMG... and tries to revert back to option (1).

3) Download the DMG, copy the .app, stick that in a package, upload via Casper Admin, push as a package
Same result as (1)

4) Use ARD to manually copy the DMG or zip file created in (1) or (2), then run the sdcust via Send UNIX Command
This works a treat, but doesn't use Casper.

So basically the self-automation of the disk image looks to be causing me problems. I cannot even get to the point where I'm in a position to mount the disk image as described in earlier responses, because the disk image keeps deleting itself before any automation can take over. Being relatively new to Casper Suite, I'm struggling to find a sensible way around this.

Any ideas?

I think I've fixed my own problem, but in case it helps anyone else out there, this is what I did. The solution is an amalgamation of all the previous answers, so thanks to those who have contributed!

This is an even more verbose solution for those, like us, who are new to Casper.

Step 1
Download the DMG, make sure it's valid for 1 year, and make sure it downloads the DMG, rather than automatically extracting the app. For the purposes of this post, the filename of the DMG is bomgar-scc-w0idc30jfd5661jwzj8i7we1z1gzeg868f15hw1c40jc90.dmg

Step 2
Disable internet-enable on the image. This prevents the annoying auto-mount and extract. In terminal, run this command, replacing the path to the DMG with your own:

hdiutil internet-enable -no /Users/user/Downloads/bomgar-scc-w0idc30jfd5661jwzj8i7we1z1gzeg868f15hw1c40jc90.dmg

Step 3
Upload the DMG using Casper Admin.

Step 4
In the Casper web interface, create a script to execute the install. This script mounts the image, runs the installer, unmounts the image and deletes the disk image. Here's my script:

#!/bin/bash



# The Bomgar DMG should have been installed cached prior to this script running, but we should make sure...



if [ -a "/Library/Application Support/JAMF/Waiting Room/bomgar-scc-w0idc30jfd5661jwzj8i7we1z1gzeg868f15hw1c40jc90.dmg" ]; then



# Attach the Disk Image

    hdiutil attach /Library/Application Support/JAMF/Waiting Room/bomgar-scc-w0idc30jfd5661jwzj8i7we1z1gzeg868f15hw1c40jc90.dmg



# Run the installer

    /Volumes/bomgar-scc/Double-Click To Start Support Session.app/Contents/MacOS/sdcust



# Wait a minute for it to finish up

    sleep 60



# Unmount the disk image

    hdiutil detach /Volumes/bomgar-scc



# Wait for the unmount to complete

    sleep 15



# Delete the disk image

    rm -R /Library/Application Support/JAMF/Waiting Room/bomgar-scc-w0idc30jfd5661jwzj8i7we1z1gzeg868f15hw1c40jc90.dmg





else



echo "Bomgar NOT Present"



fi

Step 5
Create a policy to deploy the image and run the script:

• Deploy the bomgar-scc-w0idc30jfd5661jwzj8i7we1z1gzeg868f15hw1c40jc90.dmg image. Important! - under Action, select Cached. This means instead of executing, Casper copies the DMG file to /Library/Application Support/JAMF/Waiting Room




• Run the script in step 4




• I also run a maintenance task to update inventory.

Step 6
Create an extension attribute that figures out whether Bomgar is installed or not. To do this, it relies on the fact that Bomgar creates two launch agents (no launch agents means it won't automatically start - which is what we want). Here's the script:

#!/bin/bash



bomgarLaunchAgent=`ls /Library/LaunchAgents/ | grep com.bomgar.bomgar-scc`



if [[ $bomgarLaunchAgent != '' ]]; then



    echo "<result>Bomgar LaunchAgent exists</result>"



else



    echo "<result>Bomgar LaunchAgent does NOT exist</result>"



fi

Step 7
Create a Smart Computer Group that uses the extension attribute created in step 6 to figure out which machines need Bomgar. Then use this Smart Computer Group to inform the policy created in step 5.

Thanks @htbalpha this worked, however I am now seeing the message that @chrisbju reports above. I assume this has something to do with signing? Did you ever get a resolution for this?

@Bhughes I contacted Bomgar Support and they redirected me to this forum post: https://discussions.apple.com/thread/6831502?start=0&tstart=0

Make sure “Set access for specific services and applications” is selected.
Select the top application in the list.
Click the “-” button to delete it. Repeat until there are no applications in the list.
Select “Allow all incoming connections”.
Re-select “Set access for specific services and applications”, and quit.

I've tried a couple of times to get them to realize it was not working.... Still no luck.

I also see a problem with the letter O not working when in the Login Window to enter username/password. Are you also seeing this?

@chrisbju We talked with Bomgar support too. This is an issue with Bomgar and Gatekeeper. They have received many requests for a fix, we're having them check the roadmap for us to see when a fix will be implemented.

How do you handle deploying updated jump clients? My experience is that it will leave multiple versions on the mac, which we need to avoid.

Our Bomgar system automatically updates the clients, in most cases. We still have as self-service policy to let users update if their machine falls within a smart group with an outdated version. Yes, it leaves older Jump Clients behind, but it's not that big a deal. You could create a smart group to find machines with the newest version of the jump client and an older version, and then run a script on those machines to delete the older jump client(s).

We ran into a problem if the user uninstalls or disables the client. Casper installs the client the first time and it works very well. If the user uninstalls or disables the client we have to do a screen sharing session the manual way to get it reset or reinstalled. Has anyone found a way to prevent the user from uninstalling or deleting the client? We are thinking that Casper should reinstall the client if it has been deleted. Any help would be appreciated.

I've used this script to uninstall Bomgar...

#!/bin/bash



if ls /Library/LaunchAgents/com.bomgar.bomgar-scc* 1> /dev/null 2>&1

then

    kill $(ps aux | grep 'bomgar' | grep -v grep | awk '{print $2}')

    launchctl unload /Library/LaunchAgents/com.bomgar.bomgar-scc*

    rm -rf /Users/Shared/bomgar-scc*

    rm -rf /Library/LaunchAgents/com.bomgar.bomgar-scc*

    rm -rf /Library/LaunchDaemons/com.bomgar.bomgar-ps*

    exit 0

fi