##osx-server

robhayes: yes. it's the same way with policies in the JSS. you can't assign a policy to multiple sites, so you must create a separate policy for each site you wish to deploy to.

Meaning that you have to prompt / get system.keychain.modify rights.

robhayes: i'd reconsider whether you really need to use sites, if you're deploying the same thing to multiple. gets to be a lot of manual syncing of .xml and .recipe riles

However, if you drag and drop items between keychains within Keychain Utility, it resets the change_acl to a 'None' list, which means it's no longer locked down at all

At which point my script runs just fine.

But I want it to work on "standard" / normal items as well.

er, *Keychain Access

Thx elliotjordan. Making the switch (by force) from Munki to Casper here...

robhayes: if you do choose to use Sites, then you must create separate PolicyTemplate.xml, SmartGroupTemplate.xml, and recipe overrides for each site. sounds like a hassle, so i'm glad i haven't needed to do that yet.

robhayes: you _could_ resign...

Well robhayes there is also a #jamfnation channel where a number of us Casper admins hang out.

robhayes: good luck! lots of smart people over in #jamfnation can help you out too

Yes, gneagle I _could_

robhayes: Or you could demand a raise to make up for how much harder they've made your job. :-)

Is there a way to "re-fork" a GitHub repo?

macmule: What do you mean by that?

I've already a fork of ADPassmon. But there have been many changes to the main branch. So I'd like to fork it again.

I'm actually on the verge of running Munki in addition to Casper. Not liking what I see on the updates and patch management front with Casper, especially with all this complication with multiple Sites in Casper.

macmule: https://help.github.com/articles/syncing-a-fork/

robhayes: JAMF hears you, and they want you to know they're working on it.

macmule: Do you meant you want to pull from the origin?

[crickets]

macmule: Add the original as a remote, pull from remote, merge the upstream into master

and then continue

I believe you elliotjordan, JAMF has been telling me the same thing...

you could fork the copy you have locally to a new directory, then replace with the ADPassmon fork

Nick_ZWG: thanks. That'll make more sense I guess when read what you've linked.

Nick_ZWG: doesn't a GitHub fork automatically have the original as a remote?

gneagle: Nope

At least, mine don't

I had to add it as an upstream

or I could be wrong

it just doesn't name it what I expected

So GitHub "fork" != git clone ?

ivydigital: I was thinking that.

Basically, end result will be a PR from current main branch with all my changes added.

I'm wondering if I'm just better off starting from scratch.

wwdc this week? or next?

dgknuth: next. June 8th.

dgknuth: Easier and faster to type WWDC into your browser's search bar

Four characters that lead you to an answer

By this time next week, the mystery of which California place will grace the name of OS X will be revealed!

rtrouton: or not.

Yosemite4EVA

Also, I'll be tired and my feet will hurt. Whoo, WWDC lines!

Not sure how if Apple decides not to release a new version of OS X this fall that makes it "Yosemite forever"

#therearemorethantwochoices

maybe "Yosemite for a little longer..."

10.10.11.

10.10.99

if they release 10.10.100 then my munki install conditions are in trouble

rofl

someone on the dev team is going to read that and release a special version just to screw with you

elliotjordan: Why?

10.10.whatevaLOL

maximum_os_version==10.10.99?

foigus: yep, sometimes i use that.

So do I...

If you have Skype-7 with a minimum_os_version of 10.9.0, Munki should fall back to Skype-6 with a minmum_os_version of 10.6.0, assuming both are in the catalog as "Skype"

You shouldn't need to set a maximum_os_version of 10.8.99 for Skype-6

foigus: I'm not sure if that's a statement or a question

Psychodata1: It's a statement

If the attempt is to segment an older version of an application to an older OS, it's not necessary to specify a maximum_os_version for that older software version. Munki will 1) pick the newer version for the newer OS, and 2) fall back to the older version for an older OS.

Skype-$newest is evaluated first, if that's not possible to install Skype-$older is evaluated, then Skype-$evenolder, then Skype-$crusty, then Skype-$wilfordbrimley, Skype-$oldest, etc, until it either finds something to install or it runs out of versions of Skype.

Skype-$wilfordbrimley was awesome.

Diabeetus

lol foigus, may I tweet that?

SUre

Microsoft licensing is for people who apparently hate their money

$25/FTE/year for Office 365 Pro Plus, etc....

or $80/license for perpetual with SA

Where perpetual means "until we change the brand name"?

How many FTEs do you have?

they want people to hate themselves as they spend their money

anyone going to the Jamf Nation Road show in NYC next week?

ctdawe: Perpetual means we buy the license and own it

no annual cost

~250 FTEs

Nick_ZWG Right; I think I'm just a little unclear how the concept of a "perpetual" license would dovetail with something that is being pushed as a subscription service.

You coudl get perpetual desktop software but a subscription to the email hosting

oh who was doing captivate

bruienne, Nick_ZWG?