
P rivileges does offer a ‘ DockToggleTimeout‘ feature which revokes admin access after a set time. I now however needed a way to kick them out of admin-land after a set time period had passed. I had experimented with SAP’s Privileges app in the past and found it was a very clean way for end users to flop over to admin-land then back to standard-user-town with the click of a button. My preference was to not use /usr/sbin/dseditgroup or /usr/bin/dscl as these tools may not produce the efficient workflow I am looking for. The process needed to be robust and efficient. I wanted to provide an option for standard macOS users to request local admin access on demand.
JAMF PRO PORTS PRO
version: "3"įull build guide – Posted on Categories Jamf Pro Tags docker, jamf, jamfpro Leave a comment on Jamf Pro – Docker Container Jamf Pro – MakeMeAdmin On Demand Also defined is our mapped host to container HTTPS and MySQL ports and a depends_on feature which ensures the MySQL container is up before the Jamf Pro container. This also creates a bridged network named jamfnet which can be modified to accommodate various requirements. This includes the Jamf Pro docker image previously created and a base MySQL image with the my.cnf definition. The following docker compose yaml file defines all the required components. ĭefault-authentication-plugin=mysql_native_password We need to change the default to mysql_native_password using a custom my.cnf conf file which is mapped to the new MySQL container in /etc/mysql/conf.d/my.cnf. Docker compose allows for a more structured approach where defining the database parameters and networks are more clear.Īdditionally Jamf Pro does not support the latest MySQL version 8.x default authentication method. Once the new image is built – it can be ran directly by docker or called by docker compose. The required Java collection can be obtained from a licensed Jamf product console –.


The following docker base image is used in conjunction with the latest Jamf Pro Java collection ( ROOT.war) –. Docker reduces this overhead and allows for the efficient creation of a ready to use environment. Setting up an additional Jamf Pro environment for dev and testing out new features can be time consuming.
