Forum Home Forum Home > Feature Requests > Identity Finder for Mac
  New Posts New Posts RSS Feed - User Shared
  FAQ FAQ  Forum Search   Register Register  Login Login

User Shared

 Post Reply Post Reply
Author
Message
PaulLepkowski View Drop Down
Newbie
Newbie


Joined: 22 Dec 2010
Status: Offline
Points: 9
Post Options Post Options   Thanks (0) Thanks(0)   Quote PaulLepkowski Quote  Post ReplyReply Direct Link To This Post Topic: User Shared
    Posted: 15 Feb 2011 at 9:02am
Would it be possible to have the endpoint service generate the folder and files for /Users/Shared?  That way things are more consistent from an ownership/permissions perspective.

Thanks.


Back to Top
Product Management View Drop Down
Admin Group
Admin Group


Joined: 24 Nov 2010
Status: Offline
Points: 248
Post Options Post Options   Thanks (0) Thanks(0)   Quote Product Management Quote  Post ReplyReply Direct Link To This Post Posted: 15 Feb 2011 at 9:59am
There have been a number of updates to the build scripts and the applications themselves since the release of Mac v3.7 to deal with permissions issues - which we believe are all resolved.  If you are still experiencing any issues after using the latest build scripts and application, please open a ticket at http://support.identityfinder.com

Release notes:
http://www.identityfinder.com/forum/forum_posts.asp?TID=24

Build scripts are attached to this article:
http://support.identityfinder.com/entries/180010
Back to Top
RITJeremy View Drop Down
Groupie
Groupie


Joined: 21 Dec 2010
Location: Rochester, NY
Status: Offline
Points: 34
Post Options Post Options   Thanks (0) Thanks(0)   Quote RITJeremy Quote  Post ReplyReply Direct Link To This Post Posted: 25 Feb 2011 at 11:50am
The build scripts keep changing and don’t have release notes of their own. It would be helpful to have changes documented so we don’t have to diff every file in the build script download to find what has changed. Typically, only the postinstall and postupgrade scripts change. I have seen at least the following changes in this download:

* February 17 at 11:48 PM
* February 15 at 6:14 PM
* February 10 at 1:45 PM
* February 9 at 2:40 PM
* December 28 at 3:36 PM

Even though the postinstall/postupgrade file dates indicated Feb 17, the download for the installer build scripts still indicates it was last updated Feb 15.

As for this request about /Users/Shared, three different processes can create the .identityfinder folder in /Users/Shared. in our testing, we get three different results for the .identityfinder folder depending on which process created it:

Identity FInder.app: created with ownership and permissions appropriate for current console user

Endpoint Service: strictest ownership, lax permissions throughout
drwxrwxrwx   3 root       wheel                    102 Jan  7 09:01 .identityfinder
drwxrwxrwx   3 root       wheel                    102 Jan  7 09:01 Application
drwxrwxrwx   3 root       wheel                    102 Jan  7 09:01 {04964656e-7469-7479-2046-696e6465720}

IDF LLC installer (from build script): admin group owner, stricter parent permissions, lax subfolder
drwxr-xr-x   3 root       admin                    102 Jan  7 09:01 .identityfinder
drwxr-xr-x   3 root       admin                    102 Jan  7 09:01 Application
drwxrwxrwx   3 root       admin                    102 Jan  7 09:01 {04964656e-7469-7479-2046-696e6465720}

Really, we’re asking for is the EndpointService to create the .identityfinder folder hierarchy with the same ownership and permissions found in the build script, and then that portion of the postinstall/postupgrade becomes unnecessary. It doesn’t make a lot of sense to us to have the product create the same directory structure three different ways.
Back to Top
Product Management View Drop Down
Admin Group
Admin Group


Joined: 24 Nov 2010
Status: Offline
Points: 248
Post Options Post Options   Thanks (0) Thanks(0)   Quote Product Management Quote  Post ReplyReply Direct Link To This Post Posted: 01 Mar 2011 at 2:47pm
Thank you for the suggestion.

In all 3 cases we’ll have the following:
drwxr-xr-x   3 xxxx       xxxxx                    102 Jan  7 09:01 .identityfinder
drwxr-xr-x   3 xxxx       xxxxx                    102 Jan  7 09:01 Application
drwxrwxrwx   3 xxxx       xxxxx                    102 Jan  7 09:01 {04964656e-7469-7479-2046-696e6465720}

If the app creates them, the user:group are that of the user running the app (this only happens if the app opens and the directories are not there already).  If the EPS or the install script (when using root auth) creates them the user:group will be root:wheel.
Back to Top
RITJeremy View Drop Down
Groupie
Groupie


Joined: 21 Dec 2010
Location: Rochester, NY
Status: Offline
Points: 34
Post Options Post Options   Thanks (0) Thanks(0)   Quote RITJeremy Quote  Post ReplyReply Direct Link To This Post Posted: 01 Mar 2011 at 2:51pm
That simplifies deployment greatly, thank you!
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down