##osx-server

/

      • adamcodega
        macgirl84: I don't see water damage.. but obviously something is broken.
      • gmarnin has quit
      • barnesaw
        el_pablo: Did you verify that you are set to use OD for authentication in directory utility?
      • diwanicki
        el_pablo: gneagle and I are probably both thinking a step or checkbox was missed somewhere, but hard to visualize
      • *for us
      • el_pablo
        barnesaw: Where do I check that (sorry for basic question, i'm from windows)
      • pdimitrov has quit
      • thedanielmatt has quit
      • barnesaw
        If you open Directory Utility, check the Search policy tab
      • Don't use OD so not sure what it should show off the top of my head
      • adamcodega
        Click the magnifying glass in the upper right hand corner on the computer, type Directory Utility.
      • -- BotBot disconnected, possible missing messages --
      • [d__d] joined the channel
      • thumpba_ joined the channel
      • thumpba has quit
      • ropav has left the channel
      • frogor
        This particular path that I mentioned above is within the plugin itself.
      • So the next update would indeed probably blow the file away.
      • foigus
        yeah, I have my deployment.properties and deployment.config files at /Library/Application\ Support/Oracle/Java/Deployment. If that's what's necessary, so be it.
      • barnesaw has quit
      • frogor
        What's interesting is that it didn't stat / check the /Library/Application Support/... folder at startup.
      • It just went straight to the user Application Support one.
      • So it must be using the standard OS APIs
      • For Application Support folder file access.
      • brianblaze420 has quit
      • frogor copes files over and see.
      • *copies
      • Nick_ZWG
        frogor: Don't worry, when dealing with java, everyone needs a coping mechanism
      • I'll see myself out
      • frogor
        Nick_ZWG: Oh I've fortunately not got to deal with it on my Macs. But I've coped and conquered it on Windows quite nicely.
      • rtrouton
        Nick_ZWG: I've heard a hot cup of java can help with coping with Java.
      • frogor
        Never spend the time investigating it on the OS X side.
      • rmanly
        or install an older version of 7 or 8 and then install the newer and see if they blap the folder
      • Nick_ZWG
        Anyone here using the OracleJava8 Autopkg recipe?
      • rmanly
        me
      • rtrouton
        I am.
      • Working well for me.
      • frogor
        I also know how to uninstall Apple Java (vs. install Oracle Java and have Apple Java get 'disabled')
      • Nick_ZWG
        Does the OracleJava7 postflight script for turning off autoupdates work on 8 too?
      • frogor is now investigating deployment.config / .properties.
      • frogor
        (for OS X)
      • Nick_ZWG
        Or I suppose better question: has the mechanism for disabling Java for checking for updates changed between 7 -> 8?
      • salajander
        gyeargh
      • ruby, i hates it.
      • bwebster has quit
      • rtrouton
        Nick_ZWG: It hasn't changed that I've seen.
      • foigus
        Nick_ZWG: where might one find this script
      • Nick_ZWG
        foigus: Don't remember the source, maybe autopkg-discuss mailing list from long ago
      • rtrouton
        * now waiting for someone to pop up and say "It's changed 100%! rtrouton is crazy!"
      • Nick_ZWG
        I can gist it too
      • foigus
        Nick_ZWG: Sure--assuming this is a postinstall_script ?
      • frogor
        Yup. As soon as I provided a deployment.properties in the appropriate /Library/Application Support folder, that was found first by Java, so it's using the standard OS APIs for 'Library' access.
      • asemak_ joined the channel
      • ctdawe joined the channel
      • rmanly
        good to know
      • Nick_ZWG
        foigus: Direct from my autopkg override for OracleJava7.munki: https://gist.github.com/nmcspadden/6427035a5c7e...
      • frogor
        Now to attempt various forms of path location style.
      • And see what Java tries to load.
      • bruienne
        looking at appleupdates.py in munkilib I don't think adding a RequireRestart key will do anything
      • since it already checks for the key in AppleUpdates.plist
      • foigus
        Nick_ZWG: fun--thanks
      • frogor
        Also - as soon as I added a /Library/Application Support/Oracle/Java/Deployment folder it attempted to look for deployment.config there -prior- to attempting to look for it within the plugin itself.
      • dknuth
        hey Frogor, how goes?
      • frogor
        Without the 'Deployment' folder present at that location, it didn't bother looking for deployment.config there.
      • Skipped it (reasonable)
      • dknuth: Good :D
      • It's Friday!
      • bruienne
        now the question is whether this crashing of the managedsoftwareupdate launchd job right after 10.10.2 update is applied is isolated to Yosemite
      • frogor
        And it's a coding day for me, whee.
      • bruienne
        but it's hard to test that since it will apply on Yosemite to begin with
      • rtrouton
        Fun fact: The Cisco WebEx Removal Tool for OS X has a borked version check.
      • I launched it on Yosemite today and it promptly scolded me about running on a Mac running an OS earlier than 10.4.
      • gneagle
        bruienne: Right. The issue is not that Munki doesn't know to restart, it's that it's dying before it can trigger the restart
      • But not in all instances
      • bruienne
        gneagle: yeah - trying to form the entire picture for myself
      • frogor
        Looking inside the plugin folder for deployment.config is explained by this path location, btw: ${deployment.java.home}/lib/deploy/deployment.config
      • rtrouton
        After that, I added a "Manually Uninstalling WebEx" section to the documentation I was writing.
      • bruienne
        I wasn't sure if adding that key was even necessary
      • frogor
        (since Java is contained within the Plugin folder)
      • rmanly
        frogor you running an opensnoop on java or what?
      • gneagle
        bruienne: It's not
      • pdimitrov has quit
      • bruienne
        my inclination was that apple updates already have that check done - so now I see it for myself
      • frogor
        rmanly: Nope. I'm running this: sudo fs_usage -e -ww -f filesys -f pathname | grep --line-buffered deployment
      • hansen_m has quit
      • -e filters out fs_usage from its own logs
      • -ww does extra wide non-limited output
      • -f filesys and -f pathname limit it to file activity
      • bruienne
        gneagle: the comments around running softwareupdate talk about the need for the pty wrapper, might be something going awry there, no?
      • frogor
        And with --line-buffered on grep, I can get exactly the output lines I want while fs_usage is running
      • gneagle
      • frogor
        You can see [stat] operations where it attempts to see if a file exists
      • Followed by [open] operations where it tries to read the file
      • Full path is listed
      • gneagle
        bruienne: Unlikely IMHO
      • rmanly
        awesome
      • frogor
        Yeah, you can see in real time where it's looking / what it's trying to see
      • gneagle
        off to lunch
      • asemak_ has quit
      • frogor
        So now I'm going to feed deployment.config some deployment.properties paths of various types (backslashed spaces, non-escaped spaces, %20, +, etc.) and see what it goes hunting for
      • They should appear as [stat] operations, seeing if the file exists there
      • Or straight [open] attempts
      • But you can see what it thinks the path is that you specified.
      • rmanly
        is there a performance hit either way if you just try ad open or you stat a file first or are there too many variables (filesystem, os, language used) to say one way or the other
      • ie is opening and failing slower than stat'ing and then not opening because it isn't there
      • Foth joined the channel
      • frogor
        No idea
      • rmanly
        :D
      • bruienne
        gneagle: yeah I was just re-reading your rundown there
      • I have to pull this from production for us I think
      • too many tickets already
      • boblmartens has quit
      • and it's not been released to all users, just machines that require Yosemite
      • swy has quit
      • pdimitrov joined the channel
      • ldooks joined the channel
      • ibiwan joined the channel
      • gbatye joined the channel
      • frogor
        foigus: So with the file://Library/Management/deployment.properties location defined in deployment.config, even with the files existing and having acceptable permissions, Java doesn't even stat/attempt to open the file path there.
      • foigus
        Odd, but good to know
      • frogor
        You may be right in that it has built-in limitations as to where it expects the file to be.
      • frogor tries moving it to /Library/Application Support
      • Hrm.
      • So I made a sub-folder under Deployment. It didn't look there.
      • No stat, no open.
      • Possibly my syntax is wrong in the path. Checking.
      • foigus
        Really? I made a subfolder under deployment and it looked there
      • pdimitrov has quit
      • frogor
        Whoops, didn't have triple slashes.
      • I had file://
      • Not file:///
      • Maybe that's why it didn't look at the other location.
      • Retrying.
      • Triple slashes fixed.
      • And it found it.
      • Now moving it back to outside of /Library/Application Support
      • rtrouton
        Heading out. Catch you all later.
      • rtrouton has quit
      • squirke has quit
      • frogor
        13:01:36.916247 stat64 /Library/Management/deployment.properties
      • 13:01:36.916270 open F=12 (R_____) /Library/Management/deployment.properties
      • It found it.
      • Line that I used: deployment.system.config=file:///Library/Management/deployment.properties
      • Within: /Library/Application Support/Oracle/Java/Deployment/deployment.config
      • trifygri has quit
      • foigus
        frogor: Bizarre
      • frogor
        Now, it found it - but now I need to configure some mandatory settings like security level locked
      • So that I can see if it's -applying- it.
      • eholtam
        it ready it but did it process it?
      • frogor
        Right