Importing Mac configuration profiles. Apple's OS X server Profile Manager lets you create Mac configuration profiles for your Mac devices that can be imported into Mobility Manager.Each profile is an XML file with a.mobileconfig file extension that defines device settings, such as wireless network and VPN configurations. Configuration profiles in iOS and macOS. In iOS and macOS, configuration profiles are XML files that contain settings to manage Wi-Fi, email accounts, passcode options, and many other functions of iPhone, iPod touch, iPad, and Mac devices.To use them, you must have either iOS 4 or later or macOS. Profiles can be installed through a web page, via email, or by using the iPhone Configuration.
- Premade Mac Configuration Profile Library Free
- Premade Mac Configuration Profile Library App
- Premade Mac Configuration Profile Library System
Xsan Payload
An Xsan payload configures an Xsan client system. You can designate an Xsan payload by specifying com.apple.xsan as the PayloadType value. This payload is supported on OS X Yosemite and OS X El Capitan or later.
Premade Mac Configuration Profile Library Free
Key | Type | Value |
---|---|---|
sanName | String | The name of the SAN. This key is required for all Xsan SANs. The name must match exactly the name of the SAN defined in Server app. |
sanConfigURLs | Array of Strings | Each string in this array contains an LDAP URL where Xsan systems can obtain SAN configuration updates. This key is required for all Xsan SANs. There should be one entry for each Xsan MDC. Example URL: ldaps://mdc1.example.com:389 |
fsnameservers | Array of Strings | This array contains one string value for each of the SAN's File System Name Server coordinators. This key is required for StorNext SANs. The list should contain the same addresses in the same order as the MDC's /Library/Preferences/Xsan/fsnameservers file. Xsan SAN clients automatically receive updates to the fsnameservers list from the SAN configuration servers whenever this list changes. StorNext administrators should update their profile whenever the fsnameservers list changes. |
sanAuthMethod | String | Determines authentication method for the SAN. This key is required for all Xsan SANs. This key is optional for StorNext SANs but it should be set if the StorNext SAN uses an auth_secret file. Only one value is accepted: auth_secret |
sharedSecret | String | The shared secret used for Xsan network authentication. This key is required when the sanAuthMethod key is present. The String value should equal the content of the MDC's /Library/Preferences/Xsan/.auth_secret file. |
Premade Mac Configuration Profile Library App
![Premade mac configuration profile library download Premade mac configuration profile library download](https://www.imore.com/sites/imore.com/files/styles/large/public/images/stories/2010/09/Screen-shot-2010-09-24-at-12.18.03-AM.png?itok=x-t_tW0v)
Notes:
- Don't create Xsan payloads to configure Xsan MDCs. Only use Server app to configure Xsan MDCs.
- A Mac can only have one Xsan payload installed.
Xsan Preferences payload
The Xsan preferences payload can be used to configure which volumes automatically mount at startup. For StorNext volumes this payload also determines whether the mount uses Fibre Channel or Distributed LAN Client (DLC). The Xsan preferences payload is designated by specifying com.apple.xsan.preferences as the PayloadType value. This payload is supported on OS X El Capitan or later.
Premade Mac Configuration Profile Library System
Key | Type | Value |
---|---|---|
onlyMount | Array of Strings | Each string in this array is an Xsan or StorNext volume name. If this key is present, the Xsan client attempts to automatically mount these volumes at startup. Volumes that don't appear in this list can be mounted manually by the system administrator using xsanctl(8)'s mount command. |
denyMount | Array of Strings | Each string in this array is an Xsan or StorNext volume name. If this key is present and no onlyMount array is present, the Xsan client automatically attempts to mount all SAN volumes except the volumes in this array. Volumes in this array can be mounted manually by the system administrator using xsanctl(8)'s mount command. |
denyDLC | Array of Strings | Each string in this array is a StorNext volume name. If this key is present and the Xsan client is attempting to mount a volume in this array, the client only mounts the volume if its LUNs are available via Fibre Channel. It does not attempt to mount the volume using Distributed LAN Client (DLC). |
preferDLC | Array of Strings | Each string in this array is a StorNext volume name. If this key is present and the Xsan client is attempting to mount a volume in this array, the Xsan client attempts to mount the volume using Distributed LAN Client (DLC). If DLC is not available, the client attempts to mount the volume if its LUNs are available via Fibre Channel. In order for this to work, the volume name must not appear in denyDLC. |
useDLC | Boolean | If this key is present, it controls the use of Distributed LAN Client (DLC) for all volumes not listed in the denyDLC array (if present) or the preferDLC array (if present). If this key is absent, the absence of any Fibre Channel interfaces triggers a preference for DLC when mounting all StorNext volumes. |
Keys in the Xsan preferences payload can also be written with defaults(1) in the '/Library/Preferences/com.apple.xsan' preference domain as an alternative to using configuration profiles. For example, to prevent mounting a StorNext volume named 'shared-EX0123456789ab' using Distributed LAN Client you could use this command:
Although a Mac can have more than one Xsan preferences payload installed, you should avoid setting the same key in different payloads. If more than one payload defines the same key, the resulting behavior is undefined.
Any Xsan filesystem mount always uses Fibre Channel connections to its LUNs when LUNs are visible to that client, even if the client is configured to mount the volume using DLC. Setting the mount option to use DLC when LUNs are available using Fibre Channel means that Xsan initiates a connection to the Distributed LAN client/server at mount. It terminates this connection soon after. If you have a large number of clients engaging in this behavior, it can negatively impact the server's ability to serve your clients.
Description
This module provides two resource types for interacting with macOS configuration profiles.
The profile_manager resource type is the back-end type that interacts with /usr/bin/profiles for creating, destroying and verifying a resource type. The mac_profiles_handler::manage resource type is user-facing and handles the management of the actual files.
A structured fact is also provided to list installed profiles along with some metadata.
Usage
You can use an ERB template instead of a mobileconfig:
You can also ensure that a profile is absent by specifying just the identifier:
You must pass the profilers identifier as your namevar, ensure accepts present or absent and file_source behaves the same way source behaves for file.
Dependencies
- Puppet >= 4.4.0 for
puppet/util/plist
, for earlier versions use d13469a.
To-Do
Improve provider parsing.
Handle more types of configuration profiles.
Improve documentation when author isn't presenting the next morning.
Handle more types of configuration profiles.
Improve documentation when author isn't presenting the next morning.
Contributing
Please do!
Create issues in GitHub, Make Pull Requests, Have Fun!
Create issues in GitHub, Make Pull Requests, Have Fun!