Comments (3)
I added a piece to the script to use the encrypted strings to pass an encrypted version of the password. It might be useful if we could get this functional permanently added to the script to be more secure.
from super.
It's my understanding that the create and read permissions are needed to acquire the computer's jamf pro ID. Couldn't we avoid needing to reach out to the jamf pro API to get that information by piping the jamf recon binary into awk to grab the ID that gets printed at the end?
something like:
jamf recon | awk -F ">" '{print $2}' | awk -F "<" '{print $1}'
should return the computers jamf pro ID and avoid the need to do an API call for that info.
edit: this doesn't really fix the problem with storing the API creds in plain text, but it should reduce security risk by eliminating the need for unnecessary API permissions.
from super.
@blakeusblade @iDrewbs I am not a fan of encrypted strings, as it adds complexity without providing any real security value. You either have a secret visible in Jamf Pro (where arguably only your trusted administrators should have access) or you put different clear text secrets (hash/salt) hard-coded in to the super
script. Remember, the super
script is "permanently" installed on the local Mac drive, thus your hash/salt secrets will literally be knowable by anyone with super
installed.
@rchase254 I am aware this is likely a better method, but at this point for super
v3.0 I'm focused on support for full upgrades. That being said, I do plan to implement this in a future version of super
but I need to make sure it's backwards compatible with the current method to provide the JSSID in the Config Profile. Context in wiki.
from super.
Related Issues (20)
- Enhancement request - fdesetup authrestart or similar HOT 1
- Feature Request: seperate focus/soft/hard defer options for upgrades. HOT 3
- Reducing python dependency? HOT 1
- Super does not recognize Jamf as the parent process when super is called via command line from another script HOT 2
- Insufficient storage problem present in b10 HOT 4
- LaunchDaemon - Stops triggering on schedule HOT 8
- Wrong value in validation of softDisplayTimeoutOPTION HOT 2
- Getting a Software Update CMD Failed Message HOT 2
- Feature Request: Jamf Pro 10.46.0 provides API access to management account name and password HOT 25
- Drive space calculation error while executing no user logged in updating HOT 2
- Improper calculation of macOS update sizes in non-USA regions HOT 4
- Issues with s.u.p.e.r deployment through jamf. HOT 2
- Current Storage 0GB When over 100Gb free HOT 3
- Suggestion for updating super automatically HOT 4
- Improvement HOT 2
- Running Super in testmode more than once not working HOT 5
- Don't Understand why you write then delete these values from the plist HOT 2
- Question - automating upgrades vs updates HOT 16
- Feature Request (sort of) - MDM Workflow should log the Jamf Pro/Cloud server version HOT 2
- Documents: Misspelled function name in the wiki HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from super.