The Mac Admin's Blog

What changed with Java 8u65 is that Oracle changed its installer from .pkg to .app Why you should not waste time taking snapshots of Java because you already have the deployable package stuffed insde the Java installer.app. When you open the dmg, you would see the following. This is .app and you can install it by double click, but you would not do if you are packaging for mass deployment.  So here is what you can do to get the retro Java installer in .pkg format so that you can deploy it right away in the entire enterprise: Right click and select 'Show Package Contents' Navigate to this path 'Content > Resources > and look for JavaAppletPlugin.pkg This can be used to deploy in your organization and it is ready to be used.

Creating an MS Office Package is pretty easy that the perception about it is. There are couple of files that you need to include in your package and deploy them. Start with having a look at all the locations mentioned below and ensure you can find all of them. Following the process here, you dont need to create separate package for Office Updates. All the package released before the date you are trying this, can be combined into one giving a sleek and clean installer. We will discuss 2 simple ways of doing it. Based on your understanding & preference, you might like either of these solutions. Solution One How To Start The steps we will follow is: Install the required version Install the available MS updates Locate all the files mentioned below Add a Blank FileSet Place the Files and Folders mentioned below Give a name to your FileSet & ensure Requires Reboot is turned off Enable Self Healing, if you like What All You Need Here are the files you need to grab from your Mac: /Appl

Everyone has a different reason for writing a blog. I do it for the newbees who can step into the world of Mac but at the same time, I use the blogs as reference manual for myself and use then when needed. Since quite some time I had been thinking on writing a document on this but I came across this Apple KB. Please visit here:  HT202061 This will help you as starter to create NetBoot, NetInstall and NetRestore images. If you are even newer and need to understand these terms, you can visit here:  https://support.apple.com/en-us/HT202652 And if you want to do it via command line, visit this KB article:  https://support.apple.com/en-us/HT202770 I follow the non Apple way when it comes to Imaging the OS, its personal preference. Hope these articles will lead you to much advance and helpful ones as well. Cheers!!!

  Hello Composer Lovers! :) So lets see how is it done using Composer or any other tool for that matter. The major steps remain same in all packaging tools, its just the post install work that might change a little bit. However, if you get stuck with any other tool like Packager, PackageMaker, Luggage or  AutoPKG, feel free to write back to me. Steps would sound same as in FileWave, just few of the things will change. Install the required version Install the available MS updates Locate all the files mentioned below In Composer, click on New and take a blank snapshot or do via Monitor FileSystem Changes Delete everything that got captured Drag & drop the Files and Folders mentioned below in Composer Item 15 should be sent to /tmp/ Add a Post Install script to run the installer from /tmp/ -  Volumes/Microsoft Office 2011/Office Installer/Contents/Packages/Office2011_en_dock.pk g. See the inline for hint. ​  ​<sudo> installer -pkg /tmp/Office2011_en_dock.pkg -target / Export int

Yesterday I got a request to create a VPN AnyConnect package where client asked to remove some of the contents from the file and repackage it with the preconfigured server settings. This is what it looked like: Clients demand was to remove 'Web Security', 'Diagnostic and Reporting Tool' & 'Posture' leaving only VPN in the package. So there are again, two options, take a snapshot using FileWave or Casper and create the package, which any kid can do or try the more advance way of doing it. There is an advance way of doing this - Flatten the package make the changes and Unflatten it again. Steps: 1. Run the command to open the package using  pkgutil 2. Make the changes, delete the unwanted stuffs (the selected ones in this example) 4. Just leave the VPN items: 5. Check if there is anything else the is requested by the client or something under cleanup activity. In this specific example you need to modify the Distibution file. Have a glance at this file and you

To uninstall an Application dowloaded from App Store, what we used to do is create a script to locate and delete all the files of the specific app from the different folders and delete them. For others, easiest way was to delete the application from /Applications folder. Recently someone discovered that  uninstall  command is something that Apple has provided since 10.8 but kept undocumented. So how it works: sudo uninstall /Application/Xcode This will ask for admin credentials in CLI & GUI, take a while and uninstall the application. What you need to know about this is if you have packaged the App in question from App Store, then uninstaller would not be able to do the job. Reciept files if missing uninstaller is not able to uninstall the Application. However there is no reason why would you not keep the reciept files after repackaging. In upcoming posts, I will talk about repackaging apps from App Store and disclose mystery of Reciepts & bom.

Although there are various tools that works successfully but I would want to cover one at a time. This image creation is done for NetInstall or NetRestore purpose, that means, after doing a netboot, you can use this image to install a fresh OS on your Mac. Its simple, its quick and all you need to know is how to use mouse. Before you begin, make sure that the current running OS and the OS you want to build should be same. Lets begin :) What you need: OS X 10.9 from App Store (well, any OS you want). Steps are given in other post  here . AutoDMG  app from this  link Simple Steps: Launch AutoDMG. There is nothing to install. The downloaded file can be double clicked to open and then double click on AutoDMG icon. Drag the Install OS X Mavericks.app (you had downloaded from App Store) on AutoDMG. It will examine the files and then show you the list of updated available for this version. Select if you want to install all updates. If done, it will download it online and add in the applicatio

Apple's Willinglessness to Help Customers: Apple has released security update to handle ShellShock for three major OS versions that are most stable. They are 10.7.5, 10.8.5 and 10.9.5. This means if you are running any other version, Apple is not intereseted to help you. Well, if you are an optimist, you can say Apple wants you to upgrade your OS to one of the most reliable updates for Lion, Mountain Lion or Mavericks. The problem here is that there are thousands of users who dont have those versions. Also, there are few developer's and advance admins who are running 10.10, like I do how will they fix it? Well, this post is dedicated to everyone who is running any other version apart from 10.7.5, 10.8.5 & 10.9.5. If you own one of these, you can refer to Apple link to download and install the tiny updates. It would not ask you to reboot the Mac. https://support.apple.com/kb/DL1769  - Mavericks (10.9.5 and above) https://support.apple.com/kb/DL1768  - Mountain Lion (10.8.5)

If you dont know what would be the use of this article and what can be done by tracing packets, then probably this article is not for you. :) So lets begin! Find out what is the BS Device ID of your WiFi by going to System Profiler. Let me grab a screenshot here: Now lets use the command  tcpdump  to get what we are looking for. Also, there is another command  airport  to do similar job but we will cover details of that tool in upcoming post. sudo tcpdump -i en0 -s 0 -B 524288 -w ~/Desktop/TracePacket1.pcap It should display the details as - tcpdump: Listening... Once this is complete, close down the process. You have a TracePackage.pcap ready with the packets. Now we need to read what has it got. So we will leverage tcpdump again: tcpdump -s 0 -n -e -x -vvv -r ~/Desktop/TracePacket1.pcap Using this you can do network troubleshooting, debug a network problem. If you find yourself dumb enough to do this, you have some helpers out there, watch out for these tools, they will do the same

Today morning I got a request from Green IT folks to enabled SSH on all the Macs that we have in Enterprise. Currently SSH is not enabled on clients and not even the Admins are allowed to do so. As it was against InfoSec policy of the client, they needed a solution that ensures SSH is not enabled for anyone except couple of Service Accounts that does background job. So what I proposed was simple, to create a Security Group in AD and add all Service Accounts to that Group and grant SSH access to that group. Now, no one else will be able to access via SSH except the members of this group. So here is what I wrote for them. In this script Joulix is the AD account and HM Admin Mac SSH is the AD group that needs SSH access.:   #!/bin/bash   # To add the User / Group to be able to do ssh. # Created by Laeeq Humam | 10.10.2014 | for HCL # Wrote for Green IT via Cisco Joulix. UN="Joulix" MACSSHGROUP="Admin Mac SSH" # Will use this group and user probably once or twice. Varia