Home Forums Software InstaDMG Kickstart (via script) VNC Setup

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • #379310
    nobrainer
    Participant

    I’ve spent a lot of time trying to get the VNC working using the kickstart commands… I’ve seen the pearl scripts that convert the passwords into whatever it converts it into.. but none of it seems to work.

    perl -nwe ‘BEGIN { @k = unpack “C*”, pack “H*”, “1734516E8BA8C5E2FF1C39567390ADCA”}; \
    chomp; s/^(.{8}).*/$1/; @p = unpack “C*”, $_; foreach (@k) { printf “%02X”, $_ ^ (shift @p || 0) }; print “\n”‘

    So I was going to try a ‘firstboot’ script in hopes that will work.

    # ARD Configuration
    #Enable ARD for macadmin
    $kickstart -configure -allowAccessFor -specifiedUsers
    $kickstart -activate -configure -access -on -users macadmin -privs -all -clientopts -setvnclegacy -vnclegacy yes -setvncpw -vncpw -restart -agent

    Theoretically, would this work? In my testing, I could never get the pearl script to work, it would give me the output, but when I would attempt the VNC it would never work (invalid PW).

    #379311
    nobrainer
    Participant

    Update:
    Upon fighting with it s’more, I found the problem is that I’m expecting an encrypted PW to go through, as I read in several locations that it’s required, but the kickstart command is actually passing the PW as clear text. When I put in the first 8 characters of the encrypted PW, I was able to sign in just fine.

    I’m uncomfortable with passing clear text as a PW via script – but if that’s the way it is, that’s the way it is…

    #379312
    Allister Banks
    Participant

    Two points of note:

    One, VNC seems to cap password length at 8 for compatibility with clients. At least, that’s what I experience when configuring TightVNC for accessing windows PCs.
    Two, Kickstart is… peculiar at best. If you’re using /System/Library/CoreServices/Screensharing.app as your client, the ARD-specifc settings should work just the same, and are at least a known quantity(I have a thread here where I found out exactly how to get ARD turned on for one admin user ONLY, quite a fun weekend that was).

    But I understand the free, cross-platform love of VNC. It’s just you’ll probably want/get real utility out of the bells and whistles of ARD or another commercial monitoring package if you could invest in one.

    Allister

    #379315
    nobrainer
    Participant

    I have been finding the quirks of kickstart for a while… scouring trying to find each and every piece of information I can find on the topic. This has really only managed to successfully give me a migraine headache every day for the last week or two…

    We do have ARD, but due to cost we don’t deploy it to the support staff, that and they don’t have a mac to use themselves, they need to remote in from a pc.

    Anyway, I’ve tested the firstboot.sh script w/ the cleartext password and seemed to work fine.

Viewing 4 posts - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.

Comments are closed