TweetFollow Us on Twitter

JAMF Software's Casper Suite for Imaging

Volume Number: 25
Issue Number: 07
Column Tag: Imaging

JAMF Software's Casper Suite for Imaging

Client Image Deployment and Maintenance - Part 1

by Criss Myers

Background to Image deployment

We have previously looked at some different methods to image network Macs. In particular, Apple's NetInstall and NetBooting. These are great tools, but they rely upon a monolithic image. That is a single, very large image containing the OS, updates, software, settings, etc. One of the many problems associated with this however is the deployment of various different setups within the network. With a single image, each Mac will be identical, which may be fine for some situations, but there are times when it is necessary to deploy different image configurations to different groups of Macs. For example, deploying different applications to different groups of Macs. With a monolithic image the only way to achieve this is with multiple images, which leads to extra work and resources as well as to inconsistencies between the images. There is also the question of keeping the client machines updated and handling the installation of future software. With NetInstall, NetBooting and Bombichs NetRestore it would require a rebuild of the monolithic image and a reimage of the clients.


Fig 1. A monolithic approach to Mac image deployment, each deployment contains the same common software however a separate image has to be created for each. (Image courtesy of JAMF Software)

The Future, a different approach

Today, there is an alternative approach to this procedure, which is becoming more and more popular. Apple themselves seem to be tending towards a method, that revolves around a package-based system. This means creating a very simple OS based image, with as few modifications and tweaks as possible, and then building on top of this with individual packages and scripts. Then different configurations can be made from the same list of source packages with the Base OS being constant between them. Free examples of this approach are InstaDMG and Deploy Studio. Both offer a package based configuration deployment method. A commercial option is also available from a company called JAMF Software and is called The Casper Suite.


Fig 2. A package-based approach, a package is made for each piece of software and then different configurations are created around these common packages. (Image courtesy of JAMF Software)

The Casper Suite

The Casper Suite is a suite of software application tools, together with a web interface to a MySQL database, that offers a package-based imaging system. In addition to imaging, the Casper Suite offers a way to maintain your clients after you have imaged them, this makes the Casper Suite stand out from all other imaging systems, by giving system administrators the ability to maintain their clients. Other features that The Casper Suite offers are, inventory, remote control, license management and settings management. JAMF Software offers a service that is second to none, their phone support as well as their email ticket support is fast and knowledgeable. They listen to their customers and many of the new features that get introduced are though feature requests from their customers.


Fig 3. the various services that the Casper Suite offers. (Image courtesy of JAMF Software)

Pull rather than Push

Most deployment systems work on a Push basis where the server or admin machine pushes out the image to all those that wish to accept it. This is also the case for Apple Remote Desktop / Task Server which can be used to push out software packages to clients. What JAMF Software offers is a forced 'Pull' rather than 'Push' system. Casper Suite uses a pull method where the client connects to the server and pulls the software off it. The client can be instructed via a small ssh connection to mount the file server and pull its software. As Casper supports multiple file servers in different locations, this method scales very well. The client can be contacted by ssh from a central server, but then mount a local file server from which to pull off the software. This naturally helps to optimize performance as well as allow an administrator to initiate the process from any Mac OS X workstation.

The Casper Suite is made up of the following tools:

JSS, JSS Setup Utility, Casper NetInstall Creator, Composer, Casper Admin, Casper Imaging, Casper Remote, Recon, CasperVNC, Casper Mobile and Self Service.

JAMF Software Server - JSS (Tomcat + MYSQL)

The JSS is the central core to the Casper Suite and ties all the other components together. It is essentially a MySQL database with a Tomcat servlet that acts centrally for all the Macs being managed. The clients connect to the JSS to gather their instructions. The JSS enables you to carry out automated tasks to simplify the management of your client Macs. The JSS stores all the data relating to the clients and the deployment content, as well as management instructions. The deployment content itself is stored on what are called Distribution Points. The clients connect to the JSS by ssh and then to the Distribution Points via AFP or SMB. The client initiates the connection rather than the server, therefore no data is broadcast. The client has a jamf.conf file which contains the details of the JSS.

JSS Setup Utility

This is the first thing to setup when installing the JAMF software, the setup utility is used to install and configure the JSS as well as running updates and maintenance.

Launch the JSS Setup Utility, connect to your servers DNS and login with your servers details. You can now install the JSS and setup the AFP Share. Click the install icon and choose the default option to setup the Distribution point, this is the AFP share on the server where you store the packages and scripts. After the JSS is setup the web browser will be launched for you to register the software, enter the activation code and then create the first account that can logon to the JSS.

Once installed you can then configure the JSS. There are 5 sections to the JSS, the main server details section, Database, Web Application, File Sharing and HTTP Downloads.


Fig 4, The JSS Setup Utility, the 5 monitoring sections for each server.

The server section gives you an overview of the server and status of the services. If there is an update available you can install it via the Update pane. Under Automated Maintenance you can setup automated backups, monitor services or restart services when needed, as well as log deletion and distribution point replication.

The Distribution Point is the File Share from which you deploy your OS, Packages and Scripts. You can have as many as you need, the more distribution points you have on different servers then the better load balancing you get. You can also have local distribution points for larger organizations. You will, however, need to synchronize these, and this is done in the JSS Setup Utility via rsync. Your Distribution point can be an AFP or SMB share, so it can run from a windows server as well.


Fig 5. The JSS Setup Utility main monitoring section showing the installed versions and current updates available.

The Database section is used to verify and repair your MySQL database and tables in its Troubleshooting section. Here you can also set the Max Packet Size, by increasing the packet size, you can capture more data when inventorying the computers. The more data you gather about the computers, the larger the size of the data being transmitted. If this is too large, submission of the inventory will fail.


Fig 6. The JSS Setup Utility Database section.


Fig 7. The JSS Setup Utility, changing the Max Packet Size for the MYSQL

The Backup/Restore tab allows you either to create a backup for migration to another server, or to restore the server from an automated backup. Migrating the JSS is relatively easy, just backup the database and then restore that database on the migrated server.

The Web Application section allows you to edit the memory settings for Tomcat, as well as taking advantage of a server's 64-bit mode.


Fig 8. The JSS Setup Utility Web Application section, you can set the memory as well as use the 64-bit mode.

Once the JSS is setup and configured and all ports have been added to the servers firewall (ports 22, 8443, 584, 80, 443 and possibly, 9006, 389, 5999, 139, 445, 25 and 514), the next thing is to access the web interface.

The web interface is accessed either by http or https at your servers DNS address with ports 9006 or 8443 respectively. Login with the first JSS account you set up.

The Web is divided into the following four sections, Inventory, Management, Logs and Admin. Depending on the accounts privileges, you will either see all sections, or those that you have access to.

The Inventory section is where you will access the records that were gathered when inventorying your computers; here you can also edit those records as well as accessing logs for each computer.

The logs section allows you to view the various Casper activities logs as well as receipts logs (see Figure 9 below).


Fig 9. Web interface to the JSS and the Logs section.

The Admin section is where you can setup the various preferences and settings for Casper. Here you setup the accounts that can use the Casper tools as well as their user privileges and what notifications are sent to that user. Casper keeps a full record of all changes that are made by the users. You can also join Casper to your existing Directory database (see Figure 10 below).


Fig 10. the Admin section of the JSS web browser.

The Management section is the key section where you setup the various ways that Casper can manage your Macs (see Figure 11 below).


Fig 10. the Admin section of the JSS web browser.

The main configuration options to focus on at first are:

Admin Section

Setup a few accounts that can use the Casper Software. Give them custom privileges and notifications. (Admin - Accounts)

Join Casper to your existing Directory service if you wish to take advantage of existing users and groups. (Admin - LDAP Servers)

Setup your Inventory options; this is what information is gathered from each computer, such as Hardware, local users, mapped printers, Unix commands, running services, fonts, plugins etc. Do not try and gather too much information at first, before you have decided what information is useful. (Admin - Inventory Options - Inventory Preferences)

You can setup different Buildings / Departments and Network Segments to help you to divide your inventory up into smaller manageable groups. (Admin - Buildings / Departments / Network Segments).

Next setup some general JSS settings, the Activation Code, SMTP settings and the change management to log all users changes. (Admin - General Settings)

Management Section

Next you can setup the management preferences. Here you can choose whether to use startup scripts, login hooks as well as enabling load balancing. (Management - Management Preferences)

Setup any Active Directory bindings that you want automating during imaging. (Management - Active Directory Bindings)

Edit the distribution points; turn off the HTTP section if you do not wish to use it, as this will cause problems installing PKG's. There is a current bug in the system that turns on the HTTP for Distribution Points every time you use the JSS Setup Utility. (Management - Distribution Points)

Casper NetInstall Creator

The last thing to do on the server side is setup the NetBoot deployment. Casper utilizes the NetInstall capabilities of the Mac OS X Server to enable network deployment. You will need to create a NetInstall image and activate it on your server.

Step 1, Create a DMG of an OS installation disk, this can be done using Composer,


Fig 12. Composer 7, creating an OS DMG from an install DVD.

Step 2, Use Casper's NetInstall Creator with the following details:


Fig 13. Casper NetInstall Creator.

Set the "Path to Image source" to the DMG you created.

Give it an Image name and Index, using a high index number for load balancing Netboot servers.

Choose Enable / Default.

Browse to the Casper Imaging App on your Mac, this will then be added to the NetInstall image.

Tick "Create Casper Preference File" and enter the servers DNS.

Click Create

Step 3, Upload and activate on the NetBoot Server.

When you boot your clients from this NetInstall image, it will launch the Casper Imaging App from within the image using the DNS you gave, this will then connect to the JSS to gather imaging details (called Autorun) about this client. If the client is already known to the JSS then the rest of the deployment will be automated.

Conclusion

This concludes the setting up of the server tools and we are now ready to begin adding the clients and deployment content. This will be covered in Part 2. The server required for running the Casper Suite can be as basic as a Mac Mini but to enable large scale deployment of a large amount of Data then an Xserve would be recommended. For Larger networks then Mac Mini's could be used as additional Distribution Points in various locations across the network, these would then help to deliver content more quickly than from one central location.


Criss Myers is a Business Support Analyst (Mac Services), for Learning and Information Services, at the University of Central Lancashire, Preston, United Kingdom. He has been a Systems Server Administrator from the very first version of OS X Server. He Works with Macs as well as Linux, Unix and Windows and specializes in Image deployment and maintenance as well as client management.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

Hopper Disassembler 4.3.16- - Binary dis...
Hopper Disassembler is a binary disassembler, decompiler, and debugger for 32- and 64-bit executables. It will let you disassemble any binary you want, and provide you all the information about its... Read more
Default Folder X 5.2.2 - Enhances Open a...
Default Folder X attaches a toolbar to the right side of the Open and Save dialogs in any OS X-native application. The toolbar gives you fast access to various folders and commands. You just click on... Read more
EtreCheck 4.0.1 - For troubleshooting yo...
EtreCheck is an app that displays the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to... Read more
Carbon Copy Cloner 5.0.9 - Easy-to-use b...
Carbon Copy Cloner backups are better than ordinary backups. Suppose the unthinkable happens while you're under deadline to finish a project: your Mac is unresponsive and all you hear is an ominous,... Read more
QuickBooks 17.2.25.638 R26 - Financial m...
QuickBooks helps you manage your business easily and efficiently. Organize your finances all in one place, track money going in and out of your business, and spot areas where you can save. Built for... Read more
Monosnap 3.4.10 - Versatile screenshot u...
Monosnap lets you capture screenshots, share files, and record video and .gifs! Features Capture Capture full screen, just part of the screen, or a selected window Make your crop area pixel... Read more
Vivaldi 1.14.1077.50 - An advanced brows...
Vivaldi is a browser for our friends. In 1994, two programmers started working on a web browser. Our idea was to make a really fast browser, capable of running on limited hardware, keeping in mind... Read more
Viber 8.2.0 - Send messages and make fre...
Viber lets you send free messages and make free calls to other Viber users, on any device and network, in any country! Viber syncs your contacts, messages and call history with your mobile device, so... Read more
QuickBooks 17.2.25.638 R26 - Financial m...
QuickBooks helps you manage your business easily and efficiently. Organize your finances all in one place, track money going in and out of your business, and spot areas where you can save. Built for... Read more
Carbon Copy Cloner 5.0.9 - Easy-to-use b...
Carbon Copy Cloner backups are better than ordinary backups. Suppose the unthinkable happens while you're under deadline to finish a project: your Mac is unresponsive and all you hear is an ominous,... Read more

Latest Forum Discussions

See All

Our top 5 characters from casual RPG Cre...
Creature Quest definitely lives up to its name with a host of collectible creatures based on fantasy tales and world mythologies. To celebrate Creature Quest’s first birthday, we’re going to lay out what we think are the five best characters in the... | Read more »
Around the Empire: What have you missed...
Did you know that Steel Media has a whole swathe of other sites dedicated to all aspects of mobile gaming? Sure you'll get the very best iPhone news, reviews, and opinions right here at 148Apps, but we don't want you missing out on a single piece... | Read more »
All the best games on sale for iPhone an...
Oh hi there, and welcome to our round-up of the best games that are currently on sale for iPhone and iPad. You thought I didn't see you there, did you, skulking behind the bushes? Trust me though, the bushes aren't where the best deals are. The... | Read more »
The Battle of Polytopia Guide - How to H...
A new update just released for The Battle of Polytopia (formerly Super Tribes), which introduces online multiplayer. For all the fans of Midjiwan’s lite take on Civilization, this is certainly welcome news, but playing online isn’t as easy and... | Read more »
Here are the very best mobile games to p...
It's Valentine's Day! Did you get loads of cards and chocolates and other tacky, simple expressions of human affection? Did you send out tat because you find it almost impossible to express emotion unless there's a section dedicated to it at your... | Read more »
Florence (Games)
Florence 1.0 Device: iOS Universal Category: Games Price: $2.99, Version: 1.0 (iTunes) Description: Florence is an interactive storybook from the award-winning lead designer of Monument Valley about the heart-racing highs and... | Read more »
Purrfect Date (Games)
Purrfect Date 1.0 Device: iOS Universal Category: Games Price: $4.99, Version: 1.0 (iTunes) Description: Cats are a lil’ like marmite. Either you absolutely head-over-heels love’ em, or… nahhh, who are we kidding?! Everyone... | Read more »
More monsters to collect and evolve in C...
A laid-back mix of RPG and TCG, Creature Quest is all about building your deck, evolving your creatures and winning in battle. It’s the creation of VC Mobile, set up by Might and Magic producer Jon Van Caneghem. There are elements of that classic... | Read more »
Check out this awesome hands-on with the...
Well, PlayerUnknown's Battlegrounds has come out on mobile. This isn't a clone, this isn't a riff on the battleroyale mechanics of the game, it's the official mobile port by Tencent. But there's a little bit of a hitch. [Read more] | Read more »
Hostage Negotiator (Entertainment)
Hostage Negotiator 1.1.0 Device: iOS Universal Category: Entertainment Price: $3.99, Version: 1.1.0 (iTunes) Description: Official app of the board game by AJ Porfirio and Van Ryder Games. In Hostage Negotiator, you play the part of... | Read more »

Price Scanner via MacPrices.net

Saturday Sale: Amazon offers 13″ 1.8GHz/256GB...
Amazon has the 13″ 1.8GHz/256B Apple MacBook Air on sale today for $250 off MSRP including free shipping: – 13″ 1.8GHz/256GB MacBook Air (MQD42LL/A): $949.99, $250 off MSRP Their price is the lowest... Read more
Roundup of Apple Certified Refurbished 12″ Ma...
Apple has Certified Refurbished 2017 12″ Retina MacBooks available for $200-$240 off the cost of new models. Apple will include a standard one-year warranty with each MacBook, and shipping is free.... Read more
Apple offers Certified Refurbished 10″ and 12...
Apple is now offering Certified Refurbished 2017 10″ and 12″ iPad Pros for $100-$190 off MSRP, depending on the model. An Apple one-year warranty is included with each model, and shipping is free: –... Read more
Apple Canada offers Certified Refurbished Mac...
 Canadian shoppers can save up to $560 on the purchase of a 2017 current-generation MacBook Pro, MacBook, or MacBook Air with Certified Refurbished models at Apple Canada. Apple’s refurbished prices... Read more
Sale! 13″ MacBook Airs for up to $180 off MSR...
B&H Photo has 13″ MacBook Airs on sale for $50-$120 off MSRP. Shipping is free, and B&H charges sales tax for NY & NJ residents only: – 13″ 1.8GHz/128GB MacBook Air (MQD32LL/A): $899, $... Read more
Sale! New 8-core iMac Pro for $4799, $200 off...
Adorama has the 8-core iMac Pro on sale for $4799 including free shipping plus NY & NJ sales tax only. Their price is $200 off MSRP, and it’s the currently lowest price available for an iMac Pro. Read more
Sale! Walmart lowers prices even more on 9″ i...
Walmart has lowered their sale price on 9.7″ Apple iPads to $80 off MSRP for a limited time. Sale prices are for online orders only, in-store prices may vary: – 9″ 32GB iPad: $249.99 $80 off – 9″... Read more
Roundup of 13″ MacBook Pro sales, models avai...
B&H Photo has 13″ MacBook Pros on sale for up to $200 off MSRP. Shipping is free, and B&H charges sales tax for NY & NJ residents only. Their prices are the lowest available for these... Read more
Roundup of 15″ MacBook Pros sale, models up t...
B&H Photo has 15″ MacBook Pros on sale for up to $200 off MSRP. Shipping is free, and B&H charges sales tax for NY & NJ residents only: – 15″ 2.8GHz Touch Bar MacBook Pro Space Gray (... Read more
How to save up to $350 on the purchase of a 2...
B&H Photo has iMacs on sale for up to $150 off MSRP. Shipping is free, and B&H charges sales tax for NY & NJ residents only: – 27″ 3.8GHz iMac (MNED2LL/A): $2149 $150 off MSRP – 27″ 3.... Read more

Jobs Board

*Apple* Retail - Multiple Positions - Apple,...
Job Description: Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, Read more
*Apple* Retail - Multiple Positions - Apple,...
Job Description:SalesSpecialist - Retail Customer Service and SalesTransform Apple Store visitors into loyal Apple customers. When customers enter the store, Read more
*Apple* Retail - Multiple Positions - Apple,...
Job Description: Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, Read more
*Apple* Solutions Consultant - Apple (United...
# Apple Solutions Consultant Job Number: 113501424 Norman, Oklahoma, United States Posted: 15-Feb-2018 Weekly Hours: 40.00 **Job Summary** Are you passionate about Read more
Senior Program Manager - *Apple* Music - Ap...
# Senior Program Manager - Apple Music Job Number: 113393020 Seattle, Washington, United States Posted: 02-Feb-2018 Weekly Hours: 40.00 **Job Summary** Apple is Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.