July 2018 – MacAdmins Meeting

13 Jul July 2018 – MacAdmins Meeting

July 18th 2018 – University of Utah, MacAdmins Meeting

The University of Utah, MacAdmins Meeting is held monthly at the Marriott Library on the 3rd Wednesday of each month at 11 AM Mountain Time. Presentations cover Apple technology and integration in a heterogeneous university enterprise environment. This month’s meeting will be held on Wed, July 18th 2018, and we will provide live broadcasted and archives that will be made available 2-3 days after the meeting.

If you have suggestions on presentations, questions or comments, please use the Contact Us option.

What’s New  – By Todd McDaniel, Univ of Utah, Marriott Library

This presentation will cover new information pertaining to Apple administration including operating system & application updates, security, hardware support & how-to’s and other notables.

• Video – To view archived presentation video, click here.
• Slides – To view the presentation slides, click here.

Auditing Mac Logs Overview – By Dustin Udy, Univ of Utah, Information Security Office

This presentation is meant to give a high-level overview of auditing logs on Mac systems, where to find them, and how to read them. Auditing logs provide extremely valuable information about a system. They will let you know if something is broken, if someone or something is trying to use break into the system, and can help alert you to problems before an outage or critical issue occurs. Being able to understand and utilize the information contained in the system logs is a valuable tool for any IT admin.

Topics covered include unified logging (macOS, iOS, tvOS, watchOS), log locations, oldies but goodies, ASL logs, how to read logs and useful audit log examples and code.

About Dustin Udy
Dustin Udy is a Senior Security Analyst with the Information Security Office at the University of Utah. His primary responsibilities are focused on Incident Response and Digital Forensics. He has a background in log management, *NIX systems administration, and VMware.

• Video – To view archived presentation video, click here.
• Slides – To view the presentation slides, click here.

Wide Area Bonjour – By Clint Sorensen, Cisco

This presentation will give an overview of Bonjour and  integrating into an enterprise environment like our campus network using wide area bonjour solutions from Cisco and others.

Apple originally introduced the Bonjour software in August 2002 as part of Mac OS X 10.2 under the name “Rendezvous”. But, due to out-of-court trademark dispute settlement the name was changed to “Bonjour”. Bonjour is Apple’s implementation of zero-configuration networking (zeroconf), a group of technologies that includes service discovery, address assignment, and hostname resolution. Bonjour locates devices such as printers, other computers, and the services that those devices offer on a local network using multicast Domain Name System (mDNS) service records. The multicast DNS (mDNS) protocol resolves host names to IP addresses within small networks that do not include a local name server.

The wide are bonjour topology consists of the following components:

• Bonjour Endpoints
  These are end user devices or end points which are capable of announcing Bonjour services into the network or discovering the services.
  Examples of services are printers, Apple TV, file transfer services such as SMB or AFP, IoT devices, and so on.
• SDG Agent
  These are Cisco catalyst switches that contains policies and performs service discovery, service caching and service filtering functions.
• Cisco Wide Area Bonjour App
  This app function is paired with Cisco Catalyst switches in an agent role to enable centralized Bonjour service caching service providing policy-based service distributed to Cisco Catalyst Switches (SDG Agent). The Cisco Wide Area Bonjour app is supported on the Cisco APIC-EM physical appliance.

• Video – To view archived presentation video, click here.
• Slides – To view the presentation slides, click here.

Adobe CC Licensing Changes & Challenges – By Bill Lutz, Univ of Utah, OSL

This presentation will cover the current campus Adobe Creative Cloud licensing options and changes in the future including serialized and named user which especially impact shared environments like student labs. On our campus, MacAdmin’s have deployed Adobe creative applications using serialized deployment. In this deployment model, software is packaged with an embedded serial number and pushed down to end users’ systems. To start, serial numbers are hard to track, can expire without warning, and are a compliance risk if leaked outside of trusted IT staff. When IT deals with different serial numbers for different products, vendors, and contracts, it’s really challenging to stay on top of everything. Because the Adobe agreement is a term license, Creative Cloud for our campus serial numbers eventually expire and the product stops working.

For non-shared staff & faculty systems, named licensing has a few challenges like staff/faculty would like to be able to use Add-ons, the Digital Publishing Suite, Typekit, etc.

But, for shared environments, like student labs,  there are many more challenges. It seems that students (or staff/faculty) would only be able to sign in to 2 computers at a time and there could be issues with them moving to different systems.  Also, if a students signs in to a system with their Adobe ID, how does that impact the other X number students who also log into that same system?  Would named licensing even function properly in a computer lab environment with multiple student logins? Would we need to do cleanup in-between student logins?

• Video – To view archived presentation video, click here.

Open Discussion

Questions, comments, problems and fixes.

Directions

Note, due to scheduling conflicts with our usual meeting location, we will be meeting at the Marriott Library room 1705A located inside the Faculty Center located north of Mom’s Cafe.

For directions to the University of Utah monthly Mac Managers Meetings see the following web page.

Archive & Live Presentation(s)

• A live broadcast of the presentations will be available from this web page.
• Archives of the presentations will be available from this web page.