• Network Infrastructure,  Small Business,  Synology

    Update Packages on Synology

    Services that run on a Synology are constantly being updated. Software updates for the binaries and other artifacts can quickly and easily be updated. To do so, open the Synology web interface and then open Package Center. From Package Center, click Update for each or Update All to upgrade all services at once, as seen below.You will then be prompted to verify that you want to run the update. Any services that are being updated will restart and so end users might find those services unresponsive or have to log back in after the service comes back online.

  • Mac OS X,  Mac OS X Server

    Replace the macOS Server DHCP Service with bootp

    View Your Old Settings The first step to moving services from macOS Server for pretty much all services is to check out the old settings. The second step is to probably ask if where you’re going to put the service is a good idea. For example, these days I prefer to run DHCP services on a network appliance. But it can absolutely be run on a Mac. And so let’s look at how to do that. Here, we’ll use the serveradmin command to view the settings of the DHCP service: /Applications/Server.app/Contents/ServerRoot/usr/sbin/serveradmin settings dhcp The output is an array of subnets with different settings per subnet. dhcp:static_maps = _empty_array dhcp:subnets:_array_id:22217FF5-4DDB-4841-A731-EF5DA080E672:WINS_primary_server =…

  • Mac OS X,  Network Infrastructure

    Replace Time Machine Server on macOS Server with WD’s MyCloud.com

    The past couple of years has forced me to rethink many of my recommendations for how you backup computers in small office and home environments. Previously, I would have said that you could use a disk attached to an Apple AirPort. But the AirPort Base Station is no longer being made. Previously, I would have said you could use Time Machine Server, a service built into macOS Server in 5.4 and below. But that service is no longer being made in macOS Server by Apple and is now found in the Sharing System Preference pane . Previously, I might have even said to use the home edition of CrashPlan, which…

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment

    Getting Started with Autopkgr

    Autopkgr is basically a small app that allows you to select some repositories of recipes and then watch and run them when they update. It’s a 5 minute or less installation, and at its simplest will put software packages into a folder of your choosing so you can test/upload/scope to users. Or you can integrate it with 3rd party tools like Munki, FileWave, or Jamf using the JSSImporter. Then if you exceed what it can do you can also dig under the hood and use Autopkg itself. It’s an app, and so it needs to run on a Mac. Preferably one that doesn’t do much else.  Installing Autopkgr You can…

  • Mac OS X,  Mac OS X Server

    Enable SMB Sharing For Specified Users In macOS

    In this article, I looked at enabling SMB and AFP shares via the command line for macOS: Setup the File Sharing Service in macOS 10.13, High Sierra One thing I din’t cover is enabling SMB sharing for a specific user. This is different as passwords need to be stored in an SMB hash. And you can set that hash type with the pwpolicy command. So to do so, we’ll run the command with the -u option so we can supply the username, the -sethashtypes followed by SMB-NT as the hashtype followed by “on” as can be seen here: pwpolicy -u charles.edge -sethashtypes SMB-NT on The interpreter then asks for a…

  • Mac OS X

    Quick and Dirty Spinnaker on macOS

    Spinnaker seems kinda’ complicated at first, but it’s not. To get it up and running, first install cask: brew tap caskroom/cask brew install brew-cask Then redis and java: brew install redis brew cask install java Download spinnaker from https://github.com/spinnaker/spinnaker.git (I dropped mine into ~/usr/local/build/spinnaker). From your spinnaker folder make a build directory and then run the script to update source: mkdir ~/usr/local/spinnaker/build cd ~/usr/local/spinnaker/build ~/usr/local/spinnaker/dev/refresh_source.sh –pull_origin –use_ssh –github_user default From your build directory, fire it up: ~/usr/local/spinnaker/dev/run_dev.sh Now run hal to see a list of versions: hal version list Then enable the version you want (e.g. 1.0.0): hal config version edit –version 1.0.0 Then apply the version: hal deploy apply…

  • Mac OS X,  Mass Deployment

    Stop Apps From Installing Automatically On A Mac When Purchased On Another Mac

    You know how when you buy apps at home, they show up on your computer at work, if you’re using the same iCloud account for the app store in both locations? Some companies want to disable that. To do so, send a ConfigDataInstall key into com.apple.softwareupdate, which can most easily be done with the defaults command: sudo defaults write com.apple.SoftwareUpdate ConfigDataInstall -int 0 Or to turn it back on: sudo defaults write com.apple.SoftwareUpdate ConfigDataInstall -int 1

  • bash,  Mac OS X,  Mac OS X Server

    This New Years Day, Learn The Jot Command

    This New Years Day, Learn The Jot Command The jot command is one I haven’t used in awhile. But it’s still useful. Let’s take a look at a few of the things you can do with it. First, let’s just print lines into a new file called “century.txt” which we can do by running with the number of increments followed by the starting number, and then redirecting the output into the file name: jot 100 1 > ~/Desktop/century.txt Or to do integers instead, simply put the decimals: jot 100 1.00 > ~/Desktop/century.txt Or in descending order, jot – 100 1 > ~/Desktop/century.txt Now we could change the output to be…

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment,  Uncategorized

    Check the EFI Version of a Mac

    I’d written an efi version checker. But the lovely Andrew Seago texted me one that’s better than mine. So I present it here: current_efi_version=`/usr/libexec/efiupdater | grep "Raw" | cut -d ':' -f2 | sed 's/ //'` echo "current_efi_version $current_efi_version" latest_efi_version=`ls -La /usr/libexec/firmwarecheckers/eficheck/EFIAllowListShipping.bundle/allowlists/ | grep "$current_efi_version"` echo "latest_efi_version $latest_efi_version" if [ "$latest_efi_version" == "" ]; then echo "EFI FAILED" exit 1 else echo "EFI PASSED" exit 0 fi

  • Mac OS X

    Enable Automatic Certificate Renewals In High Sierra

    When you push a certificate out in a profile, the certificate is statically stored on a Mac. If you are delivering a certificate over the air and in a device profile that is seperate from the MDM payload then the Active Directory Certificate payload can enable automatic certificate renewals. You can enable automatic renewals with a defaults command (or manage the preference domain via MDM) using the following command: defaults write /Library/Preferences/com.apple.mdm-client AutoRenewCertificatesEnabled -bool YES Note: Because they’re already dymanic and all, SCEP payloads cannot be automatically renewed.