TweetFollow Us on Twitter

JAMF Software's Casper Suite for Imaging

Volume Number: 25
Issue Number: 07
Column Tag: Imaging

JAMF Software's Casper Suite for Imaging

Client Image Deployment and Maintenance - Part 1

by Criss Myers

Background to Image deployment

We have previously looked at some different methods to image network Macs. In particular, Apple's NetInstall and NetBooting. These are great tools, but they rely upon a monolithic image. That is a single, very large image containing the OS, updates, software, settings, etc. One of the many problems associated with this however is the deployment of various different setups within the network. With a single image, each Mac will be identical, which may be fine for some situations, but there are times when it is necessary to deploy different image configurations to different groups of Macs. For example, deploying different applications to different groups of Macs. With a monolithic image the only way to achieve this is with multiple images, which leads to extra work and resources as well as to inconsistencies between the images. There is also the question of keeping the client machines updated and handling the installation of future software. With NetInstall, NetBooting and Bombichs NetRestore it would require a rebuild of the monolithic image and a reimage of the clients.


Fig 1. A monolithic approach to Mac image deployment, each deployment contains the same common software however a separate image has to be created for each. (Image courtesy of JAMF Software)

The Future, a different approach

Today, there is an alternative approach to this procedure, which is becoming more and more popular. Apple themselves seem to be tending towards a method, that revolves around a package-based system. This means creating a very simple OS based image, with as few modifications and tweaks as possible, and then building on top of this with individual packages and scripts. Then different configurations can be made from the same list of source packages with the Base OS being constant between them. Free examples of this approach are InstaDMG and Deploy Studio. Both offer a package based configuration deployment method. A commercial option is also available from a company called JAMF Software and is called The Casper Suite.


Fig 2. A package-based approach, a package is made for each piece of software and then different configurations are created around these common packages. (Image courtesy of JAMF Software)

The Casper Suite

The Casper Suite is a suite of software application tools, together with a web interface to a MySQL database, that offers a package-based imaging system. In addition to imaging, the Casper Suite offers a way to maintain your clients after you have imaged them, this makes the Casper Suite stand out from all other imaging systems, by giving system administrators the ability to maintain their clients. Other features that The Casper Suite offers are, inventory, remote control, license management and settings management. JAMF Software offers a service that is second to none, their phone support as well as their email ticket support is fast and knowledgeable. They listen to their customers and many of the new features that get introduced are though feature requests from their customers.


Fig 3. the various services that the Casper Suite offers. (Image courtesy of JAMF Software)

Pull rather than Push

Most deployment systems work on a Push basis where the server or admin machine pushes out the image to all those that wish to accept it. This is also the case for Apple Remote Desktop / Task Server which can be used to push out software packages to clients. What JAMF Software offers is a forced 'Pull' rather than 'Push' system. Casper Suite uses a pull method where the client connects to the server and pulls the software off it. The client can be instructed via a small ssh connection to mount the file server and pull its software. As Casper supports multiple file servers in different locations, this method scales very well. The client can be contacted by ssh from a central server, but then mount a local file server from which to pull off the software. This naturally helps to optimize performance as well as allow an administrator to initiate the process from any Mac OS X workstation.

The Casper Suite is made up of the following tools:

JSS, JSS Setup Utility, Casper NetInstall Creator, Composer, Casper Admin, Casper Imaging, Casper Remote, Recon, CasperVNC, Casper Mobile and Self Service.

JAMF Software Server - JSS (Tomcat + MYSQL)

The JSS is the central core to the Casper Suite and ties all the other components together. It is essentially a MySQL database with a Tomcat servlet that acts centrally for all the Macs being managed. The clients connect to the JSS to gather their instructions. The JSS enables you to carry out automated tasks to simplify the management of your client Macs. The JSS stores all the data relating to the clients and the deployment content, as well as management instructions. The deployment content itself is stored on what are called Distribution Points. The clients connect to the JSS by ssh and then to the Distribution Points via AFP or SMB. The client initiates the connection rather than the server, therefore no data is broadcast. The client has a jamf.conf file which contains the details of the JSS.

JSS Setup Utility

This is the first thing to setup when installing the JAMF software, the setup utility is used to install and configure the JSS as well as running updates and maintenance.

Launch the JSS Setup Utility, connect to your servers DNS and login with your servers details. You can now install the JSS and setup the AFP Share. Click the install icon and choose the default option to setup the Distribution point, this is the AFP share on the server where you store the packages and scripts. After the JSS is setup the web browser will be launched for you to register the software, enter the activation code and then create the first account that can logon to the JSS.

Once installed you can then configure the JSS. There are 5 sections to the JSS, the main server details section, Database, Web Application, File Sharing and HTTP Downloads.


Fig 4, The JSS Setup Utility, the 5 monitoring sections for each server.

The server section gives you an overview of the server and status of the services. If there is an update available you can install it via the Update pane. Under Automated Maintenance you can setup automated backups, monitor services or restart services when needed, as well as log deletion and distribution point replication.

The Distribution Point is the File Share from which you deploy your OS, Packages and Scripts. You can have as many as you need, the more distribution points you have on different servers then the better load balancing you get. You can also have local distribution points for larger organizations. You will, however, need to synchronize these, and this is done in the JSS Setup Utility via rsync. Your Distribution point can be an AFP or SMB share, so it can run from a windows server as well.


Fig 5. The JSS Setup Utility main monitoring section showing the installed versions and current updates available.

The Database section is used to verify and repair your MySQL database and tables in its Troubleshooting section. Here you can also set the Max Packet Size, by increasing the packet size, you can capture more data when inventorying the computers. The more data you gather about the computers, the larger the size of the data being transmitted. If this is too large, submission of the inventory will fail.


Fig 6. The JSS Setup Utility Database section.


Fig 7. The JSS Setup Utility, changing the Max Packet Size for the MYSQL

The Backup/Restore tab allows you either to create a backup for migration to another server, or to restore the server from an automated backup. Migrating the JSS is relatively easy, just backup the database and then restore that database on the migrated server.

The Web Application section allows you to edit the memory settings for Tomcat, as well as taking advantage of a server's 64-bit mode.


Fig 8. The JSS Setup Utility Web Application section, you can set the memory as well as use the 64-bit mode.

Once the JSS is setup and configured and all ports have been added to the servers firewall (ports 22, 8443, 584, 80, 443 and possibly, 9006, 389, 5999, 139, 445, 25 and 514), the next thing is to access the web interface.

The web interface is accessed either by http or https at your servers DNS address with ports 9006 or 8443 respectively. Login with the first JSS account you set up.

The Web is divided into the following four sections, Inventory, Management, Logs and Admin. Depending on the accounts privileges, you will either see all sections, or those that you have access to.

The Inventory section is where you will access the records that were gathered when inventorying your computers; here you can also edit those records as well as accessing logs for each computer.

The logs section allows you to view the various Casper activities logs as well as receipts logs (see Figure 9 below).


Fig 9. Web interface to the JSS and the Logs section.

The Admin section is where you can setup the various preferences and settings for Casper. Here you setup the accounts that can use the Casper tools as well as their user privileges and what notifications are sent to that user. Casper keeps a full record of all changes that are made by the users. You can also join Casper to your existing Directory database (see Figure 10 below).


Fig 10. the Admin section of the JSS web browser.

The Management section is the key section where you setup the various ways that Casper can manage your Macs (see Figure 11 below).


Fig 10. the Admin section of the JSS web browser.

The main configuration options to focus on at first are:

Admin Section

Setup a few accounts that can use the Casper Software. Give them custom privileges and notifications. (Admin - Accounts)

Join Casper to your existing Directory service if you wish to take advantage of existing users and groups. (Admin - LDAP Servers)

Setup your Inventory options; this is what information is gathered from each computer, such as Hardware, local users, mapped printers, Unix commands, running services, fonts, plugins etc. Do not try and gather too much information at first, before you have decided what information is useful. (Admin - Inventory Options - Inventory Preferences)

You can setup different Buildings / Departments and Network Segments to help you to divide your inventory up into smaller manageable groups. (Admin - Buildings / Departments / Network Segments).

Next setup some general JSS settings, the Activation Code, SMTP settings and the change management to log all users changes. (Admin - General Settings)

Management Section

Next you can setup the management preferences. Here you can choose whether to use startup scripts, login hooks as well as enabling load balancing. (Management - Management Preferences)

Setup any Active Directory bindings that you want automating during imaging. (Management - Active Directory Bindings)

Edit the distribution points; turn off the HTTP section if you do not wish to use it, as this will cause problems installing PKG's. There is a current bug in the system that turns on the HTTP for Distribution Points every time you use the JSS Setup Utility. (Management - Distribution Points)

Casper NetInstall Creator

The last thing to do on the server side is setup the NetBoot deployment. Casper utilizes the NetInstall capabilities of the Mac OS X Server to enable network deployment. You will need to create a NetInstall image and activate it on your server.

Step 1, Create a DMG of an OS installation disk, this can be done using Composer,


Fig 12. Composer 7, creating an OS DMG from an install DVD.

Step 2, Use Casper's NetInstall Creator with the following details:


Fig 13. Casper NetInstall Creator.

Set the "Path to Image source" to the DMG you created.

Give it an Image name and Index, using a high index number for load balancing Netboot servers.

Choose Enable / Default.

Browse to the Casper Imaging App on your Mac, this will then be added to the NetInstall image.

Tick "Create Casper Preference File" and enter the servers DNS.

Click Create

Step 3, Upload and activate on the NetBoot Server.

When you boot your clients from this NetInstall image, it will launch the Casper Imaging App from within the image using the DNS you gave, this will then connect to the JSS to gather imaging details (called Autorun) about this client. If the client is already known to the JSS then the rest of the deployment will be automated.

Conclusion

This concludes the setting up of the server tools and we are now ready to begin adding the clients and deployment content. This will be covered in Part 2. The server required for running the Casper Suite can be as basic as a Mac Mini but to enable large scale deployment of a large amount of Data then an Xserve would be recommended. For Larger networks then Mac Mini's could be used as additional Distribution Points in various locations across the network, these would then help to deliver content more quickly than from one central location.


Criss Myers is a Business Support Analyst (Mac Services), for Learning and Information Services, at the University of Central Lancashire, Preston, United Kingdom. He has been a Systems Server Administrator from the very first version of OS X Server. He Works with Macs as well as Linux, Unix and Windows and specializes in Image deployment and maintenance as well as client management.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

WhiteCap 6.7.1 - Visual plug-in for iTun...
WhiteCap is a sleek and sophisticated music visualizer and screensaver that features futuristic, wireframe mesh visuals with dynamic backgrounds and colors. WhiteCap contains thousands of visual... Read more
DiskMaker X 6.0 rc5 - Make a bootable OS...
DiskMaker X (was Lion DiskMaker) helps you to build a bootable drive from the official OS X installer app (the one you download from the Mac App Store). It detects the OS X Install program with... Read more
Lyn 1.9 - Lightweight image browser and...
Lyn is a fast, lightweight image browser and viewer designed for photographers, graphic artists, and Web designers. Featuring an extremely versatile and aesthetically pleasing interface, it delivers... Read more
MacFamilyTree 8.2.1 - Create and explore...
MacFamilyTree gives genealogy a facelift: modern, interactive, convenient and fast. Explore your family tree and your family history in a way generations of chroniclers before you would have loved.... Read more
LaunchBar 6.9 - Powerful file/URL/email...
LaunchBar is an award-winning productivity utility that offers an amazingly intuitive and efficient way to search and access any kind of information stored on your computer or on the Web. It provides... Read more
LaunchBar 6.9 - Powerful file/URL/email...
LaunchBar is an award-winning productivity utility that offers an amazingly intuitive and efficient way to search and access any kind of information stored on your computer or on the Web. It provides... Read more
MacFamilyTree 8.2.1 - Create and explore...
MacFamilyTree gives genealogy a facelift: modern, interactive, convenient and fast. Explore your family tree and your family history in a way generations of chroniclers before you would have loved.... Read more
Spotify 1.0.57.474. - Stream music, crea...
Spotify is a streaming music service that gives you on-demand access to millions of songs. Whether you like driving rock, silky R&B, or grandiose classical music, Spotify's massive catalogue puts... Read more
VOX 2.8.26 - Music player that supports...
VOX just sounds better! The beauty is in its simplicity, yet behind the minimal exterior lies a powerful music player with a ton of features and support for all audio formats you should ever need.... Read more
beaTunes 5.0.1 - Organize your music col...
beaTunes is a full-featured music player and organizational tool for music collections. How well organized is your music library? Are your artists always spelled the same way? Any R.E.M. vs REM?... Read more

Latest Forum Discussions

See All

This War of Mine gets a new ending and m...
This War of Mine just got a big new update, featuring free DLC that adds a new ending to the game, among other exciting changes. The update is celebrating the game's two-year release anniversary. Apart from the new ending, which will be quite... | Read more »
Summon eight new heroes in Fire Emblem H...
Nintendo keeps coming at us with Fire Emblem Heroes updates, and it doesn't look like that trend is stopping anytime soon. The folks behind the game have just announced the new War of the Clerics Voting Gauntlet, expected to start next Tuesday. [... | Read more »
The best deals on the App Store this wee...
iOS publishers are pulling out all the stops this week -- there's a huge number of seriously great games at discounted prices this week. Let's not waste any time and get right down to business. [Read more] | Read more »
The House of da Vinci (Games)
The House of da Vinci 1.0.0 Device: iOS Universal Category: Games Price: $4.99, Version: 1.0.0 (iTunes) Description: Enter The House of Da Vinci, a new must-try 3D puzzle adventure game. Solve mechanical puzzles, discover hidden... | Read more »
Solve the disappearance of history’s gre...
Blue Brain Games invites you to indulge in an immersive hands-on 3D puzzle adventure in similar vein to The Room series, with its debut release The House of Da Vinci. Set during the historic period of the Italian Renaissance (when Leonardo himself... | Read more »
Age of Rivals (Games)
Age of Rivals 3.3 Device: iOS Universal Category: Games Price: $.99, Version: 3.3 (iTunes) Description: Deep civilization-building strategy in a fast-paced card game! | Read more »
Panthera Frontier (Games)
Panthera Frontier 1.0 Device: iOS Universal Category: Games Price: $4.99, Version: 1.0 (iTunes) Description: | Read more »
Angry Birds Evolution beginner's gu...
Angry Birds changes things up a fair bit in its latest iteration, Angry Birds Evolution. The familiar sling-shot physics mechanics are still there, but the game now features team-based gameplay, RPG elements, and a new top-down view. With all of... | Read more »
Sega Forever is for the retro game fans
Sega is launching a new retro games service titled Sega Forever, in a move that's sure to delight games enthusiasts with a bit of nostalgia. Sega's releasing five classic games for free. The titles include Sonic the Hedgehog, Phantasy Star II,... | Read more »
The Little Acre (Games)
The Little Acre 1.0 Device: iOS Universal Category: Games Price: $2.99, Version: 1.0 (iTunes) Description: | Read more »

Price Scanner via MacPrices.net

ABBYY TextGrabber 6 for iOS Implements Instan...
ABBYY has announced the release of TextGrabber 6.0.0, an important feature update to the company’s productivity app developed for iOS and Android devices. TextGrabber 6.0 now offers Real-Time... Read more
vPhone, First Smartphone That Can’t Be Lost,...
Austin, Texas based Hypori has introduced the vPhone, a virtual smartphone that affords every business user the benefits of separate work and personal phones, conveniently delivered on a single... Read more
Save this weekend with 2016 refurbished MacBo...
Apple has dropped prices on Certified Refurbished 2016 15″ and 13″ MacBook Pros by as much as $590 off original MSRP. An Apple one-year warranty is included with each model, and shipping is free: -... Read more
New 27-inch 3.4GHz iMac on sale for $1699, sa...
MacMall has the new 2017 27″ 3.4GHz iMac (MNE92LL/A) in stock and on sale for $1699 including free shipping. Their price is $100 off MSRP. Read more
Clearance 2016 MacBook Pros available for up...
B&H Photo has clearance 2016 13″ and 15″ MacBook Pros in stock today and on sale for up to $400 off original MSRP. Shipping is free, and B&H charges NY & NJ sales tax only: - 15″ 2.7GHz... Read more
Apple Ranks 9th In comScore Top 50 U.S. Digit...
comScore, Inc. has released its monthly ranking of U.S. online activity at the top digital media properties for May 2017 based on data from comScore Media Metrix Multi-Platform. * Entity has... Read more
10.5-inch iPad Pros available for up to $20 o...
B&H Photo has the new 2017 10.5″ iPad Pros available for up to $20 off MSRP including free shipping plus NY & NJ sales tax only: - 64GB iPad Pro WiFi: $649 - 256GB iPad Pro WiFi: $749 - 512GB... Read more
Three Off-The-Beaten-Track iOS Apps That Dese...
One of the great things about using iPads and iPhones is the vast selection of apps available for most anything you want or need to do. The three outlined in this article have been in my core app... Read more
Apple No. 1 Spot In Gartner Top 100 Vendors i...
Gartner, Inc. has unveiled the top global 100 vendors in IT in 2016 based on their revenue across IT (excluding communication services) and component market segments. In the Gartner Global Top 100:... Read more
Clearance iMacs available for up to $300 off...
B&H Photo has clearance 21″ and 27″ Apple iMacs available starting at $949, each including free shipping plus NY & NJ sales tax only: - 27″ 3.3GHz iMac 5K: $1999 $300 off original MSRP - 27″... Read more

Jobs Board

*Apple* News Product Marketing Mgr., Publish...
…organizational consensus on strategy and vision for publisher tools, authoring, and Apple News Format.Carries this strategy and vision across the organization to Read more
*Apple* Retail - Multiple Positions - Apple,...
Job Description: Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, Read more
Security Data Analyst - *Apple* Information...
…data sources need to be collected to allow Information Security to better protect Apple employees and customers from a wide range of threats.Act as the subject matter Read more
Lead *Apple* Solutions Consultant - Apple I...
…integrity, and trust.Success Metrics/Key Performance Indicators:Quantitative* Year over Year growth in Apple Product and Beyond the Box sales in the assigned Point of Read more
*Apple* Solutions Consultant till v%u00E5r...
…ethics, integrity, and trust.Success Metrics/Key Performance Indicators:QuantitativeYear over Year growth in Apple Product and Beyond the Box sales in the assigned Point Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.