Send UNIX Command Authentication?

I'm using a script suggested at MacEnterprise http://macenterprise.org/content/view/240/140/ that binds a client to AD and OD via the ARD send UNIX command.
I'm having an issue with the dsconfigldap line. If I send it via ARD with no user logged in on the remote I get an "Unable to obtain auth rights to update DirectoryService LDAP configuration." error. If I login to the remote or send the same command from the terminal, all is OK.
I've tried using sudo, but that requires a password. I'd like to be able to send this command to mutiple machines without having to log into them.
Any suggestions?
Regards
Dave

yes, click "user:" and type in "root", then remove "sudo" from your script.
whenever you need to run a script as sudo, use the user 'root' and remove 'sudo' from the script.

Similar Messages

  • Can't Set Remote Login OFF via Send Unix Command systemsetup

    Trying to use the System Setup->Remote Login template in ARD to turn off Remote Login (SSH) in Sharing panel of System Preferences on Mac that is administered through Apple Remote Desktop.
    In Apple Remote Desktop (ARD), I select the client machine, then choose "Send Unix Command..." from the "Manage" menu. In resultant window, I pick "System Setup->Remote Login (SSH) from the "Template" drop down box in the upper right. That populates the upper window with Unix commands. I edit/change the "on" to "off" and tell the dialog to Run command as User: root, then click on "Send" button.
    Progress bar goes forever with no change.
    I can turn off Remote Login via ARD by controlling each client machine via an ARD WINDOW, then navigating to the Sharing Preference pane, but that process is tedious when performing for multiple client Macs.
    Strange, but I CAN use the "Send Unix Command..." outlined above to turn ON Remote Login, and get the status of Remote Login ("systemsetup -getremotelogin"). Just can't turn OFF Remote Login (quickly/efficiently).
    man systemsetup suggests I need to write the command as "setremotelogin -f off" but that failed with an improper command syntax error.
    Thoughts?

    It’s waiting for you to type a confirmation. If you run this command on the command line normally, you’ll see the message:
    Do you really want to turn remote login off? If you do, you will lose this connection and can only turn it back on locally at the server (yes/no)?
    Use this command instead:
    systemsetup -f -setremotelogin off

  • Send Unix Command Miscellaneous/Login template missing

    I'm wondering why the " Apple Remote Desktop" Administrator Guide depicts "Login Users"
    as an option in the default templates menu of the Send Unix Command/Templates/Miscellaneous/Login users ?
    In my actual ARD 3.2.2 Admin, the template menu list skips that command option.
    Also during my attempt to implement the osa script for simultaneous logins, I used a 'sudo'
    (which I shouldn't have). And now my screen savers won't activate on my login screens.
    So now I worry about my screens being burned with the login window image.
    Any ideas on how to undo my sudo?

    yes, click "user:" and type in "root", then remove "sudo" from your script.
    whenever you need to run a script as sudo, use the user 'root' and remove 'sudo' from the script.

  • Send Unix command won't work under 10.2.8

    So I am running this command in a lab of 10.2.8 machines. I go to send Unix Command then I put this in:
    Send Unix Command
    user: root
    osascript -e 'tell application "System Events" to keystroke "map"'; \
    osascript -e 'tell application "System Events" to keystroke tab'; \
    osascript -e 'tell application "System Events" to delay 0.5'; \
    osascript -e 'tell application "System Events" to keystroke "map"'; \
    osascript -e 'tell application "System Events" to delay 0.5'; \
    osascript -e 'tell application "System Events" to keystroke return'
    Then I check Display all output.
    Then I check Run command as User: Root
    Then I send it.
    After that in the Display all output shows me this.
    cms132-30 (64.8.180.103)
    /bin/bash: Send: command not found
    /bin/bash: user:: command not found
    execution error: System Events got an error: NSCannotCreateScriptCommandError (10)
    execution error: System Events got an error: NSCannotCreateScriptCommandError (10)
    execution error: System Events got an error: NSCannotCreateScriptCommandError (10)
    execution error: System Events got an error: NSCannotCreateScriptCommandError (10)
    So I close that window and see an error message by that machine that says:
    Error: 1 "execution error: system events got an error: NSCannotCreateScriptCommandError (10)"
    So what is wrong with this? It works fine with 10.3.9 but not with 10.2.8
    Imac   Mac OS X (10.2.x)  

    It doesn't appear that the System Events under 10.2.x responds to the keystroke command (it doesn't appear in the AppleScript Dictionary.)

  • Using ARD to send UNIX command to add item to dock

    The ARD 3 Admin Guide, page 132, says the following command sequence will install an item in the dock of the target computer(s):
    4) Type or paste the following UNIX command (replace /PathToApplication with your own path to the desired application, and be sure to include the application file extension, .app):
    defaults write com.apple.dock persistent-apps -array-add '<dict><key>tiledata</
    key><dict><key>file-data</key>
    <dict><key>CFURLString</key><string>/Path_ToApplication
    </string><key>_CFURLStringType</key><integer>0</integer></dict>
    </dict></dict>';killall -HUP Dock
    Use “persistent-others” instead of “persistent-apps” if the item is anything other than an application.
    I am unable to make it work. Could anyone help with the correct syntax or suggestions as to how to perform a remote addition to the target computer dock.

    Do you have JSS? I ask because your script contains the word JAMF allot.. if you do have a jss, is there a reason your trying to use ARD instead of your JSS to run this script?
    When issuing the script from ARD as a send unix command, Have you cosnidered using the option to run command as user "root" ?
    are you sure you want to do this? the script look like it dose more then just disable the isite. And do you know how to undo this if you change your mind?

  • The built-in Send UNIX Command templates include 'Login User'

    On page 144 of the Administrator's Guide.pdf is the title The built-in Send UNIX Command templates include:
    Under Miscellaneous it has as the first command "Login User" however it isn't listed for me.
    Upon further investigation I discovered in /Applications/Remote Desktop.app/Contents/Resources/English.lproj/UnixCommandTask.strings on line 75 presetLoginUser = "Login User";
    Also noted in the MacEnterprise video 2006-04-18_hres.mov at 00:23:07 it is not listed.
    I'm aware of the the scripts capable of doing this, I would just like to know why it is not available in the built-in commands or am I missing something?
    Thanks to anyone who can help me answer this question.

    No, you're not missing anything. The missing template was reported as a bug (or incorrect documentation) several times, but for some unknown Apple didn't fix the problem, either by including the template (missing perhaps because the script is unreliable with Mac OS X 10.4) or removing the reference from the manual, before ARD 3 was released.

  • Can't send UNIX command to some users

    I have some users that I use as "guinea pigs" for rolling out new updates. They do my testing of the updates through the daily grind and report problems and such.
    Since updating to 10.4.4, I cannot send UNIX commands to them reliably. In fact, simply sending the command "ls /Applications" results in a long wait with ARD reporting "Waiting..." that never seems to finish.
    Is there anything I can delete from their systems that would force those computers to reconsider their desire to run my UNIX commands? Sending to my 10.4.3 users results in instantaneous command results and sending UNIX commands to some other 10.4.4 systems (like my own laptop) works just fine as well. It's like these four systems are confused somehow. I just sent "ls /Applications" to 150 users and only those four systems have ARD "Waiting..." to complete the task

        Hi Tilly4527. It's easy to share those awesome picture memories with your family and friends with your HTC Incredible. Just follow the steps at http://vz.to/13qpt6h and select the messaging option for the method. Then you can either enter the 10-digit mobile numbers, names of your contacts, or email addresses for the people you'd like to share the picture with.
    Enjoy sharing those memories and have a great day.
    Thank you
    JenniferH_VZW
    Please follow us on Twitter @vzwsupport

  • Send Unix Command 'reboot' never completes

    I'm going to upgrade the OS on a bunch of machines with the software update command line utility.
    It's a simple one liner from ARD, send unix command. I want to add a second line with either reboot or shutdown -r now, but when I do, the taks never completes.
    The machine does indeed reboot properly, but the task in ARD never appears to stop.
    Why is that?

    It never officially completes because the system reboots before the ARD client can report back the successful completion of the task. It's sort of like you asking someone to disconnect your telephone and then wanting them to call you to tell you it's been done. I know of no way to send the reboot command as a UNIX command without the ARD task hanging waiting for the "completion", but perhaps someone else here will have an idea. I just wait for the updates to complete and then I use the ARD Restart command rather than a UNIX command.

  • Send UNIX Command - This task will fail. This task is not authorized...

    Whenever i try to use the "Send UNIX Command" feature, i always get a "not authorized" error.
    The machines are connected through a switch, they are not firewalled.
    How can i resolve this?
    G5   Mac OS X (10.4.8)  

    You probably don't have the appropriate access privileges set for your user.
    Page 60 of the manual has a list, but you need the following privileges enabled:
    - Open & quit applications
    - Change Settings
    - Delete & Replace Items
    - Restart & Shut down
    - Copy Items

  • Cant send UNIX commands via ARD

    I have ARD, and the option to send UNIX commands is greyed out. Help?

    On the client, apple menu, system preferences, sharing, Remote Management.
    If allow access is set to all users, then click the options button.
    else, select the user your using to connect to the client, and then click the option button.
    Make sure every thing is checked.
    click ok
    try again on ARD.
    Other things to try:
    quit and re-open ARD.
    delete, then  and re-add the client computer from ARD.
    unchecking, and then re- checking remote management on the client. (to force the service to restart)

  • Send UNIX command as root

    So I read in this thread  how to send a UNIX command via ARD as root.
    My question is why does ARD allow you to use root without entering a password?

    Because you're already authenticated to the client workstation as an administrator user.

  • Output from Send Unix command stalled

    after send a unix command to a client the output from
    the command stalls. It seems that the output is buffered
    and that the final buffers are not flushed. This behaviour
    is new since 10.5.5 --
    Anyone know of a way to control the buffer size, when
    they are flushed or to how to run unbuffered ??
    ARD 3.2.2 all around and 10.5.6 all around ARD on a Quad Xenon
    and clients iMac Alum

    well this seems to have been a red herring --
    I had not set the "linebuffering" option on the
    command
    the command was lapply from the radmind suite
    needed to set "-i"
    thanks

  • Send UNIX Command / No tty / username & password must be provided

    I'm utilizing Apple Remote Desktop (ARD) 3.6.1 (471.16) and I'm attempting to deploy this UNIX command:
    sudo dseditgroup -o edit -n /Local/Default -a staff -t group _lpadmin
    When using with sudo it gives me this response error:
    sudo: no tty present and no askpass program specified
    I attempted again and selected the admin user in Run Command As, and it still did not deploy the command.
    Then I attempted the command but without sudo:
    dseditgroup -o edit -n /Local/Default -a staff -t group _lpadmin
    and received this error prompt:
    'Username and password must be provided.'
    Yes we can logout all standard/managed users deskside log into admin and set it up that way, however with hundreds of macs we'd like to deploy this to is not ideal.
    Any suggestions or ways to resolve?
    Thanks!

    WOW, thats funny. I know I attempted using root as Send Command As user when deploying it, but perhaps I left sudo in the command.
    Its working sans sudo and with root as the Send Command as user.
    Thanks Varjak.

  • Automator send unix command

    I am making a Automator script for ARD that lets me pick a computer list then run a unix command that runs softwareupdate.
    How is there a script will show the results of the command?
    I would like to have it display the updates that are need then I can have it run the command again and update the system.
    Anyone know about Automator

    You might be able to automate copying the report output to the clipboard and saving it that way, or through Automator and/or AppleScript (triggering the script through Automator), it might be possible to save the report directly, though I don't see anything obvious in the AppleScript dictionary for ARD that would make that possible. If no one else here has an idea, you might take the question up in the Automator or AppleScript forums.
    It would take a lot of AppleScript work to parse out the name of the update, though, if you want to fully automate the process rather than you just manually typing in the name of the update in the softwareupdate command.

  • Sending unix command with java

    Hi! I need to terminate program from server with "Ctrl+x" command.
    How do I send this kind of command to the server?

    Uh, by sending a
    new String(new char[]{'\030'})?

Maybe you are looking for