Authorization Key for scripts executed via Casper Remote

(JNUC 2017 is less than 50 days away and I’m feeling excited on a Friday.)

---

Background

We allow our upper-tier TSRs to execute scripts via Casper Remote, but we don’t allow them to view the actual scripts in the JSS.

Occassionally, a TSR will execute a script via Casper Remote which I really wish they hadn’t, so we came up with an “Authorization Key” for our more impactful scripts.

---

Concept

Use a Script Parameter to check for some random string of characters before allowing a script to execute.

---

Implementation & Script

Add an if then else to your script which checks for some random string of characters. If the passed Script Parameter doesn’t match, exit; if it does match, proceed.

Casper Remote

The Casper Remote user must enter the correct random string of characters to execute the script. (Authorized JSS admins can easily lookup the random string of characters before adding the script to a policy.)

Script

#!/bin/sh
####################################################################################################
#
# ABOUT
#
#    This script will forcibly remove all Configuration Profiles. (Used in preparation to migrate
#    a computer from the JAMF Software Server 9.x to the Jamf Pro Server 10.x
#
####################################################################################################
#
# HISTORY
#
#    Version 1.0, 08-Sep-2017, Dan K. Snelson
#
####################################################################################################

### Variables
authorizationKey="$4"

# Check for a specified value in Parameter 4
if [ "$authorizationKey" != "rs2y3hng1O8kIsz2GiiAN" ]; then

    echo "Error: Incorrect Authorization Key; exiting."

    exit 1

else

    echo "Removing Configuration Profiles ..."
    /bin/rm -Rfv /var/db/ConfigurationProfiles

    echo "Configuration Profiles removed."

fi


exit 0

Casper Remote Log showing error to Casper Remote user

...
Running script removeProfiles.sh...
Script exit code: 1
Script result: Error: Incorrect Authorization Key; exiting.
Error running script: return code was 1.
...