Profile manager wildcard options

Is it possible to use wildcards for such things as usernames in the profile manager for VPN? I'd like to preconfigure VPN for all Macbooks without having to setup a profile for each user. The username field is a required field so leaving it blank isn't an option.

I haven't tried this for a VPN profile but have done variables with an Exchange email profile. The user logs into the My Devices web portal with credentials that are then used for the installation of the profile substituting their real information for the variable. See these articles:
http://krypted.com/iphone/using-payload-variables-in-profile-manager/
http://help.apple.com/profilemanager/mac/10.7/#apd073333AA-30C6-4FD2-B2E0-E0C956 58A2C4

Similar Messages

When one FF profile is open, and user clicks another FF icon, system wont popup the profile manager. The "Dont ask at Startup" option is unchecked. Issue is seen in Windows 7 Enterprise edition

I am using FF 3.6.12 and had created several profiles. When i launched FF, then at first time Profile Manager pops-up and ask for profile to choose.
Then Once i have selected a profile, FF launches.
Then again i try to launch the FF, but then system opens the same profile again n again. No Profile manager pops-up.
The "Dont ask at Startup" option is unchecked. Issue is seen in Windows 7 Enterprise edition

See http://kb.mozillazine.org/Opening_a_new_instance_of_Firefox_with_another_profile

10.9 Profile Manager Active Directory Advanced Options

Hey guys!
I've been working with Profile Manager in Mavericks Server and so far, I'm pretty excited with the improvments in functionality that have been made. I'm still using WGM and MCX settings for my 10.6 - 10.8 users but would like to move to Profiles for 10.9 and iOS 7. However I have a single road block in my way and it's in reference to this article:
http://support.apple.com/kb/HT5981
I am able to use the "Directory" payload to bind to AD cleanly and everything works. However, I need to access some of these Advanced Options referenced in the KB article.
The first set of instructions about creating the .mobileconfig, downloading it, and then editing it works prefectly. However, I would then have to manually distribute the .mobileconfig instead of being able to push it. If I eventually wanted to modify it (such as add an ADDomainAdminGroupList later on) I would again have to manually distribute the .mobileconfig.
The second set of instructions in the KB article reference (with a "by the way" attitude...) stating that these settings can be added in the Custom Settings Payload. I have been unable to get this to work in any fashion. I'm unsure if the Directory Payload still has to be configured, or if it needs a dedicated UUID, or if it needs the entire AD configuration, etc...
Anyone been able to successfully set this up? I can provide my mobileconfigs upon request if that will help.
Thanks!
Nick.

Hello Nick,
I wouldn't be as sure as GeneMCX about the custom settings section. I actually was able to create a payload for the Finder and then override some of the settings by uploading the following file under the custom settings section:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
 <key>ShowHardDrivesOnDesktop</key>
 <true/>
 <key>ShowExternalHardDrivesOnDesktop</key>
 <false/>
 <key>ShowRemovableMediaOnDesktop</key>
 <false/>
 <key>ShowMountedServersOnDesktop</key>
 <false/>
</dict>
</plist>
Important: the file was named com.apple.finder.plist in order to populated the "Preference Domain" correctly (com.apple.finder in this case).
In this particular case, I let the client download the profile using the mydevice portal. Not sure if things would have worked properly if the configuration had been pushed to him.
Bottom line is: in at least one case, custom settings do allow to tweak a payload configuration. But not always. I am still unable to do a similar thing with mail accounts. I have no idea whereas Active Directory Advanced Options fall in the first category or in the second one.
You could probably make tests using a "simpler" service than AD... like Finder by example. Just get used to all this. One useful command on the client side is "profiles". You can have a look here: http://krypted.com/tag/profile-manager/
I hope this helps. Good luck!

Is there a configuration option to prevent an unprivileged user from accessing the firefox profile manager and/or firefox safe mode?

I'm designing a locked-down Firefox user profile for use on public computers (common room in an apartment building). I can use existing plugins and add-ons to prevent access to about:config and to lock down the various firefox preferences but this is moot if a user can still access the firefox profile manager or can start firefox in safe mode. Is there any configuration setting that could prevent this?

Hi...
Reinstalled 10.7.3 from the Combo Updater from apples website.
The only way to reinstall the Mac OS X or repair the startup disk running v10.7.3 Lion, is to use Lion Recovery The combo update does not do that.
How much free space on the startup disk? Not enough free space can account for the problems with your apps.
Right or control click the MacintoshHD icon. Click Get Info. In the Get Info window you will see Capacity and Available. Make sure there's a minimum of 15% free disk space.
and no web-pages will load.
Try using OpenDNS as suggested here > Safari 5.0.1 or later: Slow or partial webpage loading, or webpage cannot be found
Use OpenDNS for better speed, more security, includes anti phishing filters, prevents browser redirects, and it's free.
Open System Preferences / Preferences then select the Network tab. Click the Advanced tab then click the DNS tab.
Click +
Enter these addresses exactly as you see them here.
208.67.222.222
Click +
208.67.220.220
Then click OK.
edited by: cs

Hosting web service on one Xserve and Profile Manager on another?

Hello.
I'm trying to get Profile Manager running on a second Xserve in our studio but I'm having an issue making connections to it from the WAN because I already have HTTP and HTTPS running on a different Xserve.
The set up is something like this:
Xserve001 (xs1.mydomain.com)
- DNS
- Web service hosting a secure site (via SSL) on port 443
- Web service hosting a non-secure site on port 80
Xserve002 (xs2.mydomain.com)
- Open Directory Master
- Profile Manager on ports 80, 443, 1640
Since the router/firewall (between the WAN and be two Xserves on the LAN) handles port forwarding, right now, http and https connections (i.e., ports 80 & 443) are forwarded to Xserve001 for the web hosting.
I would like to enable Profile Manager on Xserve002, but connections won't work from the WAN (via xs2.mydomain.com) because ports 80 & 443 are forwarding to Xserve001 (from within the LAN we're fine because DNS handles everything without going through the router).
So, what would I need to do to get this to work when attempting connections from the WAN?
Thanks,
Kristin.

This is tricky to do, especially since you have multiple SSL certificates involved.
Ordinarily I'd say the easist option is to have xs1 proxy the connection to xs2 - that way all requests come into xs1 which then determines specific requests are for the profile manager and sends them across the local network.
This will work well enough for port 80 requests, but the SSL requests will fail unless you either have a wildcard SSL certificate (e.g. for *.mydomain.com) or you have a certificate that includes both hostnames.
Without one of these options on your server you're doomed to failure because clients will warn of a hostname mismatch in the SSL certificate (you asked for xs2.mydomain.com but I got a certificate from xs1.mydomain.com) and I don't think iOS or Mac OS X will allow you to connect in this manner.
The other solution hinges around your internet connection, and whether you only have a single IP address or multiple. If you have multiple then you can setup a different public IP address to map to xs2. This is probably the all-round easiest solution, especially when dealing with NAT networks.

How To Install A (Almost) Working Lion Server With Profile Management/SSL/OD/Mail/iCal/Address Book/VNC/Web/etc.

I recently installed a fresh version of Lion Server after attempting to fix a broken upgrade. With some help from others, I've managed to get all the new features working and have kept notes, having found that many or most of the necessary installation steps for both the OS and its services are almost entirely undocumented. When you get them working, they work great, but the entire process is very fragile, with simple setup steps causing breaks or even malicious behaviors. In case this is useful to others, here are my notes.
Start with an erased, virgin, single guid partitioned drive. Not an upgrade. Not simply a repartitioned drive. Erased. Clean. Anything else can and probably will break the Lion Server install, as I discovered myself more than once. Before erasing my drive, I already had Lion and made a Lion install DVD from instructions widely available on the web. I suppose you could also boot into the Lion recovery partition and use disk utility to erase the OS X partition then install a new partition, but I cut a DVD. The bottom line is to erase any old OS partitions. And of course to have multiple, independent backups: I use both Time Machine with a modified StdExclusions.plist and Carbon Copy Cloner.
Also, if you will be running your own personal cloud, you will want to know your domain name ahead of time, as this will be propagated everywhere throughout server, and changing anything related to SSL on Lion Server is a nightmare that I haven't figured out. If you don't yet have a domain name, go drop ten dollars at namecheap.com or wherever and reserve one before you start. Soemday someone will document how to change this stuff without breaking Lion Server, but we're not there yet. I'll assume the top-level domain name "domain.com" here.
Given good backups, a Lion Install DVD (or Recovery Partition), and a domain name, here are the steps, apparently all of which must be more-or-less strictly followed in this order.
DVD>Disk Utility>Erase Disk [or Recovery Partition>Disk Utility>Erase Partition]
DVD>Install Lion
Reboot, hopefully Lion install kicks in
Update, update, update Lion (NOT Lion Server yet) until no more updates
System Preferences>Network>Static IP on the LAN (say 10.0.1.2) and Computer name ("server" is a good standbye)
Terminal>$ sudo scutil --set HostName server.domain.com
App Store>Install Lion Server and run through the Setup
Download install Server Admin Tools, then update, update, update until no more updates
Server Admin>DNS>Zones [IF THIS WASN'T AUTOMAGICALLY CREATED (mine wasn't): Add zone domain.com with Nameserver "server.domain.com." (that's a FQDN terminated with a period) and a Mail Exchanger (MX record) "server.domain.com." with priority 10. Add Record>Add Machine (A record) server.domain.com pointing to the server's static IP. You can add fancier DNS aliases and a simpler MX record below after you get through the crucial steps.]
System Prefs>Network>Advanced>Set your DNS server to 127.0.0.1
A few DNS set-up steps and these most important steps:
A. Check that the Unix command "hostname" returns the correct hostname and you can see this hostname in Server.app>Hardware>Network
B. Check that DNS works: the unix commands "host server.domain.com" and "host 10.0.1.2" (assuming that that's your static IP) should point to each other. Do not proceed until DNS works.
C. Get Apple Push Notification Services CA via Server.app>Hardware>Settings><Click toggle, Edit... get a new cert ...>
D. Server.app>Profile Manager>Configure... [Magic script should create OD Master, signed SSL cert]
E. Server.app>Hardware>Settings>SSL Certificate> [Check to make sure it's set to the one just created]
F. Using Server.app, turn on the web, then Server.app>Profile Manager> [Click on hyperlink to get to web page, e.g. server.domain.com/profilemanager] Upper RHS pull-down, install Trust Profile
G. Keychain Access>System>Certificates [Find the automatically generated cert "Domain", the one that is a "Root certificate authority", Highlight and Export as .cer, email to all iOS devices, and click on the authority on the device. It should be entered as a trusted CA on all iOS devices. While you're at it, highlight and Export... as a .cer the certificate "IntermediateCA_SERVER.DOMAIN.COM_1", which is listed an an "Intermediate CA" -- you will use this to establish secure SSL connections with remote browsers hitting your server.]
H. iOS on LAN: browse to server.domain.com/mydevices> [click on LHS Install trust cert, then RHS Enroll device.
I. Test from web browser server.domain.com/mydevices: Lock Device to test
J. ??? Profit
12. Server Admin>DNS>Zones> Add convenient DNS alias records if necessary, e.g., mail.domain.com, smtp.domain.com, www.domain.com. If you want to refer to your box using the convenient shorthand "domain.com", you must enter the A record (NOT alias) "domain.com." FQDN pointing to the server's fixed IP. You can also enter the convenient short MX record "domain.com." with priority 11. This will all work on the LAN -- all these settings must be mirrored on the outside internet using the service from which you registered domain.com.
You are now ready to begin turning on your services. Here are a few important details and gotchas setting up cloud services.
Firewall
Server Admin>Firewall>Services> Open up all ports needed by whichever services you want to run and set up your router (assuming that your server sits behind a router) to port forward these ports to your router's LAN IP. This is most a straightforward exercise in grepping for the correct ports on this page, but there are several jaw-droppingly undocumented omissions of crucial ports for Push Services and Device Enrollment. If you want to enroll your iOS devices, make sure port 1640 is open. If you want Push Notifications to work (you do), then ports 2195, 2196, 5218, and 5223 must be open. The Unix commands "lsof -i :5218" and "nmap -p 5218 server.domain.com" (nmap available from Macports after installing Xcode from the App Store) help show which ports are open.
SSH
Do this with strong security. Server.app to turn on remote logins (open port 22), but edit /etc/sshd_config to turn off root and password logins.
PermitRootLogin no
PasswordAuthentication no
ChallengeResponseAuthentication no
I'm note sure if toggling the Allow remote logins will load this config file or, run "sudo launchctl unload -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist ; sudo launchctl load -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist" to restart the server's ssh daemon.
Then use ssh-keygen on remote client to generate public/private keys that can be used to remotely login to the server.
client$ ssh-keygen -t rsa -b 2048 -C client_name
[Securely copy ~/.ssh/id_rsa.pub from client to server.]
server$ cat id_rsa.pub > ~/.ssh/known_hosts
I also like DenyHosts, which emails detected ssh attacks to [email protected]. It's amazing how many ssh attacks there are on any open port 22. Not really an added security feature if you've turned off password logins, but good to monitor. Here's a Lion Server diff for the config file /usr/share/denyhosts:
$ diff denyhosts.cfg-dist denyhosts.cfg
12c12
< SECURE_LOG = /var/log/secure
> #SECURE_LOG = /var/log/secure
22a23
> SECURE_LOG = /var/log/secure.log
34c35
< HOSTS_DENY = /etc/hosts.deny
> #HOSTS_DENY = /etc/hosts.deny
40a42,44
> #
> # Mac OS X Lion Server
> HOSTS_DENY = /private/etc/hosts.deny
195c199
< LOCK_FILE = /var/lock/subsys/denyhosts
> #LOCK_FILE = /var/lock/subsys/denyhosts
202a207,208
> LOCK_FILE = /var/denyhosts/denyhosts.pid
> #
219c225
< ADMIN_EMAIL =
> ADMIN_EMAIL = [email protected]
286c292
< #SYSLOG_REPORT=YES
> SYSLOG_REPORT=YES
Network Accounts
User Server.app to create your network accounts; do not use Workgroup Manager. If you use Workgroup Manager, as I did, then your accounts will not have email addresses specified and iCal Server WILL NOT COMPLETELY WORK. Well, at least collaboration through network accounts will be handled clunkily through email, not automatically as they should. If you create a network account using Workgroup Manager, then edit that account using Server.app to specify the email to which iCal invitations may be sent. Server.app doesn't say anything about this, but that's one thing that email address entry is used for. This still isn't quite solid on Lion Server, as my Open Directory logs on a freshly installed Lion Server are filled with errors that read:
2011-12-12 15:05:52.425 EST - Module: SystemCache - Misconfiguration detected in hash 'Kerberos':
 User 'uname' (/LDAPv3/127.0.0.1) - ID 1031 - UUID 98B4DF30-09CF-42F1-6C31-9D55FE4A0812 - SID S-0-8-83-8930552043-0845248631-7065481045-9092
Oh well.
Email
Email aliases are handled with the file /private/etc/postfix/aliases. Do something like this
root: myname
admin: myname
sysadmin: myname
certadmin: myname
webmaster: myname
my_alternate: myname
Then run "sudo newaliases". If your ISP is Comcast or some other large provider, you probably must proxy your outgoing mail through their SMTP servers to avoid being blocked as a spammer (a lot of SMTP servers will block email from Comcast/whatever IP addresses that isn't sent by Comcast). Use Server.app>Mail to enter your account information. Even then, the Lion Server default setup may fail using this proxy. I had to do this with the file /private/etc/postfix/main.cf:
cd /etc/postfix
sudo cp ./main.cf ./main.cf.no_smtp_sasl_security_options
sudo echo 'smtp_sasl_security_options = noanonymous' >> ./main.cf
sudo serveradmin stop mail
sudo serveradmin start mail
Finally, make sure that you're running a blacklisting srevice yourself! Server Admin>Mail>Filter> Use spamhaus.org as a blacklister. Finally, set up mail to use strong Kerberos/MD5 settings under on Server Admin>Mail>Advanced. Turn off password and clear logins. The settings should be set to "Use" your SSL cert, NOT "Require". "Require" consistently breaks things for me.
If you already installed the server's Trust Certificate as described above (and opened up the correct ports), email to your account should be pushed out to all clients.
iCal Server
Server.app>Calendar>Turn ON and Allow Email Invitations, Edit... . Whatever you do, do NOT enter your own email account information in this GUI. You must enter the account information for local user com.apple.calendarserver, and the password for this account, which is stored in the System keychain: Keychain Access>System> Item com.apple.servermgr_calendar. Double-click and Show Password, copy and paste into Server.app dialog. This is all described in depth here. If you enter your own account information here (DO NOT!), the iCal Server will delete all Emails in your Inbox just as soon as it reads them, exactly like it works for user com.apple.calendarserver. Believe me, you don't want to discover this "feature", which I expect will be more tightly controlled in some future update.
Web
The functionality of Server.app's Web management is pretty limited and awful, but a few changes to the file /etc/apache2/httpd.conf will give you a pretty capable and flexible web server, just one that you must manage by hand. Here's a diff for httpd.conf:
$ diff httpd.conf.default httpd.conf
95c95
< #LoadModule ssl_module libexec/apache2/mod_ssl.so
> LoadModule ssl_module libexec/apache2/mod_ssl.so
111c111
< #LoadModule php5_module libexec/apache2/libphp5.so
> LoadModule php5_module libexec/apache2/libphp5.so
139,140c139,140
< #LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
< #LoadModule encoding_module libexec/apache2/mod_encoding.so
> LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
> LoadModule encoding_module libexec/apache2/mod_encoding.so
146c146
< #LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
> LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
177c177
< ServerAdmin [email protected]
> ServerAdmin [email protected]
186c186
< #ServerName www.example.com:80
> ServerName domain.com:443
677a678,680
> # Server-specific configuration
> # sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart
> Include /etc/apache2/mydomain/*.conf
I did "sudo mkdir /etc/apache2/mydomain" and add specific config files for various web pages to host. For example, here's a config file that will host the entire contents of an EyeTV DVR, all password controlled with htdigest ("htdigest ~uname/.htdigest EyeTV uname"). Browsing to https://server.domain.com/eyetv points to /Users/uname/Sites/EyeTV, in which there's an index.php script that can read and display the EyeTV archive at https://server.domain.com/eyetv_archive. If you want Apache username accounts with twiddles as in https://server.domain.com/~uname, specify "UserDir Sites" in the configuration file.
Alias /eyetv /Users/uname/Sites/EyeTV
<Directory "/Users/uname/Sites/EyeTV">
 AuthType Digest
 AuthName "EyeTV"
 AuthUserFile /Users/uname/.htdigest
 AuthGroupFile /dev/null
 Require user uname
 Options Indexes MultiViews
 AllowOverride All
 Order allow,deny
 Allow from all
</Directory>
Alias /eyetv_archive "/Volumes/Macintosh HD2/Documents/EyeTV Archive"
<Directory "/Volumes/Macintosh HD2/Documents/EyeTV Archive">
 AuthType Digest
 AuthName "EyeTV"
 AuthUserFile /Users/uname/.htdigest
 AuthGroupFile /dev/null
 Require user uname
 Options Indexes MultiViews
 AllowOverride All
 Order allow,deny
 Allow from all
</Directory>
I think you can turn Web off/on in Server.app to relaunch apached, or simply "sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart".
Securely copy to all desired remote clients the file IntermediateCA_SERVER.DOMAIN.COM_1.cer, which you exported from System Keychain above. Add this certificate to your remote keychain and trust it, allowing secure connections between remote clients and your server. Also on remote clients: Firefox>Advanced>Encryption>View Certificates>Authorities>Import...> Import this certificate into your browser. Now there should be a secure connection to https://server.domain.com without any SSL warnings.
One caveat is that there should be a nice way to establish secure SSL to https://domain.com and https://www.domain.com, but the automagically created SSL certificate only knows about server.domain.com. I attempted to follow this advice when I originally created the cert and add these additional domains (under "Subject Alternate Name Extension"), but the cert creation UI failed when I did this, so I just gave up. I hope that by the time these certs expire, someone posts some documentation on how to manage and change Lion Server SSL scripts AFTER the server has been promoted to an Open Directory Master. In the meantime, it would be much appreciated if anyone can post either how to add these additional domain names to the existing cert, or generate and/or sign a cert with a self-created Keychain Access root certificate authority. In my experience, any attempt to mess with the SSL certs automatically generated just breaks Lion Server.
Finally, if you don't want a little Apple logo as your web page icon, create your own 16×16 PNG and copy it to the file /Library/Server/Web/Data/Sites/Default/favicon.ico. And request that all web-crawling robots go away with the file /Library/Server/Web/Data/Sites/Default/robots.txt:
User-agent: *
Disallow: /
Misc
VNC easily works with iOS devices -- use a good passphrase. Edit /System/Library/LaunchDaemons/org.postgresql.postgres.plist and set "listen_addresses=127.0.0.1" to allow PostgreSQL connections over localhost. I've also downloaded snort/base/swatch to build an intrusion detection system, and used Macports's squid+privoxy to build a privacy-enhanced ad-blocking proxy server.

Privacy Enhancing Filtering Proxy and SSH Tunnel
Lion Server comes with its own web proxy, but chaining Squid and Privoxy together provides a capable and effective web proxy that can block ads and malicious scripts, and conceal information used to track you around the web. I've posted a simple way to build and use a privacy enhancing web proxy here. While you're at it, configure your OS and browsers to block Adobe Flash cookies and block Flash access to your camera, microphone, and peer networks. Read this WSJ article series to understand how this impacts your privacy. If you configure it to allow use for anyone on your LAN, be sure to open up ports 3128, 8118, and 8123 on your firewall.
If you've set up ssh and/or VPN as above, you can securely tunnel in to your proxy from anywhere. The syntax for ssh tunnels is a little obscure, so I wrote a little ssh tunnel script with a simpler flexible syntax. This script also allows secure tunnels to other services like VNC (port 5900). If you save this to a file ./ssht (and chmod a+x ./ssht), example syntax to establish an ssh tunnel through localhost:8080 (or, e.g., localhost:5901 for secure VNC Screen Sharing connects) looks like:
$ ./ssht 8080:[email protected]:3128
$ ./ssht 8080:alice@:
$ ./ssht 8080:
$ ./ssht 8018::8123
$ ./ssht 5901::5900 [Use the address localhost:5901 for secure VNC connects using OS X's Screen Sharing or Chicken of the VNC (sudo port install cotvnc)]
$ vi ./ssht
#!/bin/sh
# SSH tunnel to squid/whatever proxy: ssht [-p ssh_port] [localhost_port:][user_name@][ip_address][:remotehost][:remote_port]
USERNAME_DEFAULT=username
HOSTNAME_DEFAULT=domain.com
SSHPORT_DEFAULT=22
# SSH port forwarding specs, e.g. 8080:localhost:3128
LOCALHOSTPORT_DEFAULT=8080 # Default is http proxy 8080
REMOTEHOST_DEFAULT=localhost # Default is localhost
REMOTEPORT_DEFAULT=3128 # Default is Squid port
# Parse ssh port and tunnel details if specified
SSHPORT=$SSHPORT_DEFAULT
TUNNEL_DETAILS=$LOCALHOSTPORT_DEFAULT:$USERNAME_DEFAULT@$HOSTNAME_DEFAULT:$REMOT EHOST_DEFAULT:$REMOTEPORT_DEFAULT
while [ "$1" != "" ]
do
case $1
in
 -p) shift; # -p option
 SSHPORT=$1;
 shift;;
 *) TUNNEL_DETAILS=$1; # 1st argument option
 shift;;
esac
done
# Get local and remote ports, username, and hostname from the command line argument: localhost_port:user_name@ip_address:remote_host:remote_port
shopt -s extglob # needed for +(pattern) syntax; man sh
LOCALHOSTPORT=$LOCALHOSTPORT_DEFAULT
USERNAME=$USERNAME_DEFAULT
HOSTNAME=$HOSTNAME_DEFAULT
REMOTEHOST=$REMOTEHOST_DEFAULT
REMOTEPORT=$REMOTEPORT_DEFAULT
# LOCALHOSTPORT
CDR=${TUNNEL_DETAILS#+([0-9]):} # delete shortest leading +([0-9]):
CAR=${TUNNEL_DETAILS%%$CDR} # cut this string from TUNNEL_DETAILS
CAR=${CAR%:} # delete :
if [ "$CAR" != "" ] # leading or trailing port specified
then
 LOCALHOSTPORT=$CAR
fi
TUNNEL_DETAILS=$CDR
# REMOTEPORT
CDR=${TUNNEL_DETAILS%:+([0-9])} # delete shortest trailing :+([0-9])
CAR=${TUNNEL_DETAILS##$CDR} # cut this string from TUNNEL_DETAILS
CAR=${CAR#:} # delete :
if [ "$CAR" != "" ] # leading or trailing port specified
then
 REMOTEPORT=$CAR
fi
TUNNEL_DETAILS=$CDR
# REMOTEHOST
CDR=${TUNNEL_DETAILS%:*} # delete shortest trailing :*
CAR=${TUNNEL_DETAILS##$CDR} # cut this string from TUNNEL_DETAILS
CAR=${CAR#:} # delete :
if [ "$CAR" != "" ] # leading or trailing port specified
then
 REMOTEHOST=$CAR
fi
TUNNEL_DETAILS=$CDR
# USERNAME
CDR=${TUNNEL_DETAILS#*@} # delete shortest leading +([0-9]):
CAR=${TUNNEL_DETAILS%%$CDR} # cut this string from TUNNEL_DETAILS
CAR=${CAR%@} # delete @
if [ "$CAR" != "" ] # leading or trailing port specified
then
 USERNAME=$CAR
fi
TUNNEL_DETAILS=$CDR
# HOSTNAME
HOSTNAME=$TUNNEL_DETAILS
if [ "$HOSTNAME" == "" ] # no hostname given
then
 HOSTNAME=$HOSTNAME_DEFAULT
fi
ssh -p $SSHPORT -L $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT -l $USERNAME $HOSTNAME -f -C -q -N \
 && echo "SSH tunnel established via $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT\n\tto $USERNAME@$HOSTNAME:$SSHPORT." \
 || echo "SSH tunnel FAIL."

Cry for help: a decent network profile manager

Am I the only one that finds the default arch linux network profile management a bit.. lacking? Maybe I just don't have it set up right, but it only works for my ethernet connection and connecting to non-encrypted wireless networks. Problem is, I run WPA2-AES networks at home and at work. I finally got wpa_supplicant properly set up (I'm on wireless right now), but I can't just select the network profile from the menu and be on my way.
Here is what I have to do to get connected right now:
[root@cdl-magnesium chris]# wpa_supplicant -dw -c/etc/wpa_supplicant.conf -Dmadwifi -iath0
[root@cdl-magnesium chris]# dhcpcd ath0
and I'm connected, everything working great. That's fairly simple, right? I'm thinking my network profile has a lot more in it than necessary.
# Network Profile
DESCRIPTION="57 May"
# Network Settings
INTERFACE=ath0
#HOSTNAME=myhost
# Interface Settings (use IFOPTS="dhcp" for DHCP)
IFOPTS="dhcp"
#GATEWAY=192.168.0.1
# DNS Settings (optional)
#DOMAIN=localdomain
#DNS1=192.168.0.1
#DNS2=
# Wireless Settings (optional)
ESSID="Galactica"
#KEY=
#IWOPTS="mode managed essid $ESSID channel 6 key restricted $KEY"
WIFI_INTERFACE=wifi0 # use this if you have a special wireless interface
# that is linked to the real $INTERFACE
WIFI_WAIT=5 # seconds to wait for the wireless card to
# associate before bringing the interface up
USEWPA="yes" # start wpa_supplicant with the profile
WPAOPTS="-D madwifi" # use "" for normal operation or specify additional
# options (eg, "-D ipw")
# see /etc/wpa_supplicant.conf for configuration
#AUTOWPA="yes" # automatically configure WPA
If I do a /etc/rc.d/network restart and select the profile from the menu, I get all sorts of errors about not being able to connect to wpa_supplicant (because for some reason it isn't running.. was I supposed to do something about that?).
I'm a bit tired right now so pardon any incomprehensible sentences or questions
ps: while we're on the subject, is there a way to re-sort the items in the network profile list? It always wants to connect to this broken wpa2 profile first, as I think it just goes in alphabetic order or somethin. I guess I should just turn off the timeout so it always waits for me to choose.

i'm working on one.
http://wiki.archlinux.org/index.php/Network_Scripts
James

Dns problems setting up profile manager

i have been experimenting setting up OS X Server (10.8) on a new Mac mini on a network with Time Capsule. server's host name is "server.me.private" at IP address 192.168.1.100 , Time Machine DHCP server address is 192.168.1.1 .
Open Directory and Profile Manger are on in Server.app. (Profile Management: Enabled, Signing config profiles using the Apple Certified Push Certificate, w/ Apple push notifications on in Server settings.)
I can not, however, get Profile Manager to open and connect in a browser using "server.me.private/profilemanager" from either the mini itself or from another mac on the nework. i can get a brower to connect to Profile Manager using "192.168.1.100/profilemanager" but after successfully logging in, the browser is redirected to a "server.me.private/..." address and shows connection failure.
i HAVE gotten a browser to connect and function properly by changing the DNS Server in the the Network System Preferences on that specific Mac from "192.168.1.1" to "192.168.1.100". (DNS in Server.app, for the record is also on in this instance, forwarding server to 192.168.1.1 ) this, howerver, is a pain and also doesn't work trying to connect an iOS device.
i'm definitely missing something here. it seems to me that the Time Capsule should remain the DNS Server for the network and forward "server.me.private" to "192.168.1.100". it is not doing this, and there are no options for setting this with Airport Utility.
some light on this subject would be greatly appreciated. Thanks very much!

thanks very much for your thoughts and reply, Thomas.
if i were to change the Time Capsule to use the Mini as the primary DNS server, is this where i'd do it in Airport Utility?
but it won't let me change the DNS Servers fields here. and if i can change the DNS Serever to my Mini's 192.168.1.100, what address should i keep for the second DNS Server?
Thanks again!

Firefox is crashing. It is crashing even when i am opening profile manager and safe mode

Hello,
Tomorrow i was trying to upgrade my firmware of my phone. So i installed one samsung app called "Samsung Kies" after installing that app my firefox suddenly got crashed.
I am a Mac user using OS X 10.8 and firefox 18.
And when i read article about crashing firefox, i found that making new profile will help me but sadly that also doesn't helped me. When i tried to open the profile manager it got crashed too. now every time when i open firefox it crashes after 2-5 seconds...
And this is my latest crash report... found in (lib/application support/firefox/crash report/submitted)
Crash ID: bp-5dd48a7c-2622-4a28-aa0e-92de12130111
Help me please
Thanks in advance.

Hello sanchit77,
Thank you for posting here on the Mozilla Support Forums! We appreciate you as a user of Firefox!
I would suggest a clean reinstall to resolve your issue.
Certain Firefox problems can be solved by performing a ''Clean reinstall''. This means you remove Firefox and any leftover program files and then reinstall Firefox. Please follow these steps one by one:
#Download the latest Desktop version of Firefox from http://www.mozilla.org and save the setup file to your computer.
#After the download finishes, close all Firefox windows (click Exit from the Firefox or File menu) and confirm all upcoming messages.
#Now, uninstall Firefox by following the steps mentioned in the [[Uninstall Firefox from your computer#w_uninstall-firefox|Uninstall Firefox]] article.
'''IMPORTANT:''' On Windows, the uninstaller has the option to remove your personal data and settings. Make sure that you do '''not''' check this option; otherwise all of your bookmarks, passwords, extensions, user customizations and other Firefox [[Profiles|user profile data]] will be removed from your computer.
After uninstalling Firefox on Windows, delete the "Mozilla Firefox" program folder, located by default in one of these locations:
* '''(On 32-bit Windows)''' ''C:\Program Files\Mozilla Firefox''
* '''(On 64-bit Windows)''' ''C:\Program Files (x86)\Mozilla Firefox''
#Go to the Windows Start menu and click on "Computer".
#In the Explorer window that opens, double click Local Disk (C:) to open the C:\ drive.
#Find the "Program Files (x86)" folder or "Program Files" folder.
#* On 32-bit Windows, double-click the '''Program Files''' folder to open it.
#* On 64-bit Windows, you will see a "Program Files (x86)" folder AND a "Program Files" folder. Open the '''Program Files (x86)''' folder.
#Look for a '''Mozilla Firefox''' folder. If you find one, right-click it and select ''Delete'' and confirm that you want to move the folder to the Recycle Bin.
Now, go ahead and reinstall Firefox:
#Double-click the downloaded installation file and go through the steps of the installation wizard.
#Once the wizard is finished, choose to directly open Firefox after clicking the Finish button.
Please report back to see if this helped you!

Profile Manager does not recognize existing OD master

I built up a new Mountain Lion server at home, migrated all user data from an older server to it and today brought it into production in a colocation center. The nly thing I had to change in the colcocation environment was the IP address of the server. Everything else, even the hostname (DNS name), was already set in my home environment (I ran a DNS server at home for this). Profile Manager was already set up and therefore also Open Directory was running (without certificate). All users (except the admin) are stored in OD. At home I used the airport interface with a private address and in the colocation environment I use a public IP address on the ethernet interface.
After placing the server in the colocation centre verything went OK, but for Profile Manager. I was able to login as admin and as a user, but I was not able to install profiles on devices (https://server/mydevices). Therefore I did reset Profile Manager following http://support.apple.com/kb/HT5349. But now when I try to use the configure button in Profile Manager in Server.app to set up device management, it wants to create an OD master or replica. This is not what should happen according to the knowledge base article. It should use the existing OD master and just ask for the organization etc. I have a clone of the server as it was configured at home and tried the same procedure on this server, but then everything goes as expected from the knowledge base article. Does anyone have an idea how to fix this on my new colocated server?
I do not want to destroy OD, as I am not sure how to preserve all local network users.
Thanks for your help!

Open DTM and connect your BB via USB cable, then in desktop go to options and click on detect and look what it has there, if everything is ok go to main menu DTM and click on sync then on to config sync settings, make sure all is correct there, failing that in options you can check you setting in connections and PIN# are entered there.
When you accept a solution from anyone could you please select the appropriate box.
Also, select the appropriate Kudos box and click it for the person’s solution you accepted thank you.
Ian H

How do i add more than one pdf at a time to profile manager books

How do I add more than one pdf at a time to profile manager books? When I browse to my pdf folder I can only select one pdf at a time. I have 500+ pdf files I need to add. Any help would be greatly appreciated.

Bucknut wrote:
I want to add more than one email address to my address book from an email I received. They were in the CC of the email I received. is there anyway to drag them all into an address book group all at once. I hate having to add and address and then having to find the address and then add it to a group. thanks
no, there is no way to do that, sorry. you need to control-click on every email address one at a time and select "add to address book". if an email is in the address book already that option will not be there.

Profile Manager no longer works properly after update to FF 29.

I am a developer and I previously used the profile manager to manage 3 instances of Firefox. I had one open for Development, 1 for testing and 1 for production. Each was color coded by a theme for easy discernment of which instance I was in.
After the update to 29, the profile manager no longer seems to work properly. The theme from one profile proliferates to all the profiles and it is now very difficult to tell what instance I am in.

I found that after Firefox v29, a LOT of my settings and 
add-ons were changed / reset. Try this;
'''''[https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode Start Firefox in Safe Mode]'''''
 While you are in safe mode; 
'''''Firefox Options > Advanced > General'''''. 
Look for and turn off '''Use Hardware Acceleration'''. 
Then check ALL of your settings. Browser and add-ons. Then restart.

How do I remove unwanted entries in the Profile Manager window?

Can anyone please explain how do you remove irrelevant entries in the Profile Manager dialog? Since I have both 4.0 and 3.6 installed,each with two profiles,I use to launch secondary profiles with the Profile Manager via a command line instead of a specific shortcut,and the dialog window always shows all four options,regardless of what path I enter : is it possible to clean up the dialog window,so that only the 4.0 profiles are displayed when entering the path to 4.0 profiles,and so on for 3.6,without actually risking to delete any profiles? BTW,4.0 profile folders are stored in a different directory than 3.6,and the 3.6 profiles were accessed with the Profile Manager window (no shortcuts to specific profiles at the time) before installing 4.0

The Profile Manager is for all versions of Firefox you have installed - every Profile that is listed in the '''profiles.ini''' file will appear there. The location of the Profile folders has no effect on what the Profile Manager dialog window shows. There is no way to set it up relative to one program installation.
Best thing to do is to have separate desktop shortcuts for each Profile / Firefox-version you want to use.
http://kb.mozillazine.org/Shortcut_to_a_specific_profile

How do I change the order of the profiles in profile manager?

I have several profiles and I know that I can use profile manager to delete the profile without deleting the files, then add the profile back, but it is a very clunky way to change the order they are in. Is there any quicker way to change the order of the profiles?

Thank you both. My problem was that I was looking in the wrong place for the profiles.ini file. I'm not sure now where it was I was looking, but I found it quickly with the links cor-el gave. I didn't want to use command line option (though it is a good suggestion) because that would increase the clutter from icons and I was attempting to reduce clutter.
Again thank you both for the quick response.

Profile Manager deleted all of my files - not just the profile. Any tips on what happened and how to resolve?

I created a profile with Profile Manager. It dumped a lot of files into the directory that I selected. At that point I wanted to delete the profile and the associated files. When I selected the Delete Profile and Delete Files option it delete all files and folders in the directory - not just the profile files. It offered no warning that it was going to delete more than the profile files. Why did it do this and is there a way to recover the missing files? OS = Windows 7.

You should never select a folder to be used as profile folder that already has files in it. 
You should always choose a new and empty folder because you can use the Profile Manager to take up an existing profile by choosing the location. 
Removing the profile and opting to delete the files will remove all the files in that folder and remove the folder as well, so be cautious with doing that.

Profile manager wildcard options

Similar Messages

Maybe you are looking for