April 12, 2004
OS X Lab Image Meeting


Attendance:  Jeff Kopmanis, Dave Pugh, Gretchen Kopmanis, Suleman Diwan, Jan Stewart, Jeremy Hallum

NEXT MEETING:  APRIL 26TH, NO APRIL 19TH MEETING FOR IT COMMONS ALL DAY EVENT

Status:  Ą homedirectory contents link to AFS - not done (Jeff provided handouts)
         Ą desktop link to Windows homespace - done, not tested?  needs to be posted
        Ą Logout button - More Ball & Chain for Jan
        Ą OFW -
            OFW password is encoded, not encrypted
             Will create two pkgs:
                1) [optional] write the encoded password to a file (/tmp/ofwpw)
                2) [required] postflight that writes the encoded password to NVRAM
                   (won't do anything if /tmp/ofwpw is missing)
                This gives the dept the flexibility of how they want
                to seed the NVRAM password file (through SNI, a dept pkg, or
                by hand)
                
    (Development issue?  LUMA?)
        Ą Managed printing - PRINTING STILL CONTINUES TO BE A PROBLEM (very localized issue)
                    Potential "in service" to show DSA's how to set up a pkg of their public printers
                    What if they have shared printers?
                    What if a dept has a print server?
                        This is why "one" answer will not fit for all
                    Is CUPS the answer?
                    Ask for a brainstorming sessin at LUMA
                        
         Ą Package Radmind config and binaries         Ą Restrict runnable applications to only web and mail         Ą Allow / disallow remote login (SSH)         Ą iHook integration         Ą Enable Apple Remote Desktop on the client


homedirectory contents link to AFS discussion
    No "traditional" mac folders should be hidden (Music, Movies, Pictures)
    Better to manage the contents of the home directory, and not the home dir itself
    Assume there will be a home dir (or use an IF $1 to test for it first)
    
    Timeline of events:
    User clicks login
    RSUG pkg (LabHomeDirs)  mv /Users/.newtemplate /Users/$uniqname
    Jeff's pkg /bin/rm -rf {selected directories}
    Jeff's pkg ln -s {selected directories} ---> AFS
       user surfs web
       user logs out
    RSUG pkg (LabHomeDirs) mv /Users/$uniqname /Users/.old/$uniqname
    RSUG pkg copies /System/Library/User Template/English.lproj -> /Users/.newtemplate
    Symlinks to create:
    Documents -> AFS/~/Private/
    Public -> AFS/~/Public/
    Sites -> AFS/~/Public/html/
    

OPINION:
    For departments with in-house IT staff and an apple server, Netboot is a recommended solution.
    For departments without in-house IT support and no servers, a Radmind solution may be optimal.