New Mac Setup: Difference between revisions

From Delft Solutions
Jump to navigation Jump to search
No edit summary
 
Line 2: Line 2:


== TouchID sudo ==
== TouchID sudo ==
* Edit `/etc/pam.d/sudo_local` as root and remove the '#' before this line: `auth      sufficient    pam_tid.so`
* Run: `sed -e 's/#auth/auth/' /etc/pam.d/sudo_local.template | sudo tee /etc/pam.d/sudo_local`


== Kerberos authentication ==
== Kerberos authentication ==

Latest revision as of 03:57, 2 December 2025

This is a list of tweaks that are useful when setting up a new Mac.

TouchID sudo

  • Run: `sed -e 's/#auth/auth/' /etc/pam.d/sudo_local.template | sudo tee /etc/pam.d/sudo_local`

Kerberos authentication

See: Enroll Mac in Kerberos

Trust IPA as Root Certificate

  1. Make sure to first execute Enroll Mac in Kerberos
  2. Run: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain /etc/ipa/ca.crt

Install MacPorts

Follow instructions here: https://www.macports.org/install.php

Install iTerm2

https://iterm2.com

Use Bash as Shell

  1. `chsh -s /bin/bash`
  2. `echo 'export BASH_SILENCE_DEPRECATION_WARNING=1' >> ~/.bash_profile`

Use Kerberos Certificate as Mumble Certificate

  1. Make sure to perform: Enroll Mac in Kerberos
  2. Make sure to perform: #Trust IPA as Root Certificate
  3. Convert certificate to pkcs12: `openssl pkcs12 -export -passout pass: -in ~/Library/IPA/user.crt -inkey ~/Library/IPA/user.key -out ~/Library/IPA/user.pkcs12 -name "IPA Certificate"`
  4. Open mumble
  5. On the Certificate Management overview, select "Import a certificate"
  6. In the Import from field, enter the following text: ~/Library/IPA/user.pkcs12