Puppet: System Administration Automated

Support

Ticket #1026 (new enhancement)

Opened 9 months ago

Last modified 6 months ago

Directory Service Provider should leverage MCX plugin for policy

Reported by: mccune Assigned to: community
Priority: normal Milestone:
Component: Darwin Version:
Severity: normal Keywords: directoryservice, mcx, policy, osx
Cc: Triage Stage: Accepted
Attached Patches: None Complexity: Unknown

Description

As per the discussion following the Macworld 2008 Puppet presentation, it would probably be best for Mac OS X systems to design and implement a general, abstracted interface to the MCX plugin of Directory Services.

This interface could manage policy in the DSLocal domain, rather than the current "best practice" of Mac OS X administrators using the defaults command to set plist attributes manually.

References: http://lists.psu.edu/cgi-bin/wa?A2=ind0801&L=macenterprise&T=0&F=&S=&P=178326

Tickets: #1024

Change History

01/23/08 21:30:12 changed by mccune

From the Mac Enterprise? mailing list, Greg Neagle tested managed client extensions in the DSLocal domain:

On brief testing, I created a "localhost" computer record in the local DS, and then was able to successfully apply many different management settings to the local machine. You'll need a script or puppet action to create or modify the localhost record to contain the MAC layer address for en0 for the given local machine.

-Greg

01/23/08 21:43:26 changed by mccune

Reference: User Management Documentation. In particular, see the section on Managing Preferences, page 157.

02/05/08 07:25:32 changed by luke

  • stage changed from Unreviewed to Accepted.

04/24/08 08:04:49 changed by luke

  • component changed from library to Darwin.