• Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment

    Getting Started with Autopkgr

    Autopkgr is basically a small app that allows you to select some repositories of recipes and then watch and run them when they update. It’s a 5 minute or less installation, and at its simplest will put software packages into a folder of your choosing so you can test/upload/scope to users. Or you can integrate it with 3rd party tools like Munki, FileWave, or Jamf using the JSSImporter. Then if you exceed what it can do you can also dig under the hood and use Autopkg itself. It’s an app, and so it needs to run on a Mac. Preferably one that doesn’t do much else.  Installing Autopkgr You can…

  • Mac OS X,  Mac OS X Server

    Migrating Data From The Apple Wiki Server

    “Taking a new step, uttering a new word, is what people fear most.” ― Fyodor Dostoyevsky, Crime and Punishment The Apple Wiki Server is sadly going away. I always liked this service. It was thoughtfully designed and looked much nicer than most of the other tools available out there. Sure, you couldn’t write articles offline, write in markdown, or do a lot of other things that I’ve learned to both love and hate from other solutions, but honestly it always felt the most Apple of services in macOS Server because it didn’t have every-single-checkbox. So, I’ll pour a little Jaëger on the ground in memory of the wiki server and…

  • Mac OS X,  Mac OS X Server

    Enable SMB Sharing For Specified Users In macOS

    In this article, I looked at enabling SMB and AFP shares via the command line for macOS: Setup the File Sharing Service in macOS 10.13, High Sierra One thing I din’t cover is enabling SMB sharing for a specific user. This is different as passwords need to be stored in an SMB hash. And you can set that hash type with the pwpolicy command. So to do so, we’ll run the command with the -u option so we can supply the username, the -sethashtypes followed by SMB-NT as the hashtype followed by “on” as can be seen here: pwpolicy -u charles.edge -sethashtypes SMB-NT on The interpreter then asks for a…

  • Mac OS X,  Mac OS X Server

    macOS Server Changes Coming Soon To A Server Near You

    Many of the people that read my articles undoubtedly arleady know this, but Apple has announced a sharp reduction in the number of services provided. Per this article, the Calendar, Contacts, DHCP, DNS, Mail, Messages, NetInstall, VPN, Websites, and Wiki services are being deprecated and Apple has provided a few services, per service, that they recommend moving to. Those services, per the above article, include the following: Calendar Calendar and Contacts Server DavMail Radicale Contacts Calendar and Contacts Server DavMail Citadel DHCP Kea Dnsmasq FreeRADIUS DNS BIND Unbound KnotDNS Mail KerioConnect dovecot/Postfix Courier Messages ejabberd Openfire Prosody NetInstall NetSUS BSDPy VPN OpenVPN SoftEther VPN Tcpcrypt Websites Apache HTTP Server Nginx Lighttpd…

  • JAMF,  Mac OS X

    Extension Attribute To Check For OSX/MaMi

    Here’s a quick extension attribute to check for OSX/MaMi. Basically, I’m just looking for one of the two DNS servers that always gets put into the list. From what I’ve seen they always come in pairs.  Below is a gist. https://gist.github.com/krypted/e0a03d23a88ca0ff007b81a81744de29 Oh and thanks Katie for noticing my errant space! 😉

  • Mac OS X

    Quick and Dirty Spinnaker on macOS

    Spinnaker seems kinda’ complicated at first, but it’s not. To get it up and running, first install cask: brew tap caskroom/cask brew install brew-cask Then redis and java: brew install redis brew cask install java Download spinnaker from https://github.com/spinnaker/spinnaker.git (I dropped mine into ~/usr/local/build/spinnaker). From your spinnaker folder make a build directory and then run the script to update source: mkdir ~/usr/local/spinnaker/build cd ~/usr/local/spinnaker/build ~/usr/local/spinnaker/dev/refresh_source.sh –pull_origin –use_ssh –github_user default From your build directory, fire it up: ~/usr/local/spinnaker/dev/run_dev.sh Now run hal to see a list of versions: hal version list Then enable the version you want (e.g. 1.0.0): hal config version edit –version 1.0.0 Then apply the version: hal deploy apply…

  • Mac OS X,  Mass Deployment

    Stop Apps From Installing Automatically On A Mac When Purchased On Another Mac

    You know how when you buy apps at home, they show up on your computer at work, if you’re using the same iCloud account for the app store in both locations? Some companies want to disable that. To do so, send a ConfigDataInstall key into com.apple.softwareupdate, which can most easily be done with the defaults command: sudo defaults write com.apple.SoftwareUpdate ConfigDataInstall -int 0 Or to turn it back on: sudo defaults write com.apple.SoftwareUpdate ConfigDataInstall -int 1

  • bash,  Mac OS X,  Mac OS X Server

    This New Years Day, Learn The Jot Command

    This New Years Day, Learn The Jot Command The jot command is one I haven’t used in awhile. But it’s still useful. Let’s take a look at a few of the things you can do with it. First, let’s just print lines into a new file called “century.txt” which we can do by running with the number of increments followed by the starting number, and then redirecting the output into the file name: jot 100 1 > ~/Desktop/century.txt Or to do integers instead, simply put the decimals: jot 100 1.00 > ~/Desktop/century.txt Or in descending order, jot – 100 1 > ~/Desktop/century.txt Now we could change the output to be…

  • Mac OS X,  Mac Security,  Mass Deployment

    Using sysadminctl on macOS

    macOS 10.13 brings changes to sysadminctl. You know those dscl scripts we used to use to create users? No longer supposed to be necessary (luckily they do still work). Now you can create a user with a one-liner, and do other forms of user management, such as enabling FileVault for a given user, or managing the guest accounts. However, you can’t do these tasks as root or via sudo. You have to do so with other admin accounts per Apple kbase HT208171 (in fact, this article has been in my queue waiting for that issue to be fixed – but keep in mind I’m not prefacing these with sudo in the below…