New Mac Setup

This is a list of tweaks that are useful when setting up a new Mac.

TouchID sudo

• Edit `/etc/pam.d/sudo_local` as root and remove the '#' before this line: `auth sufficient pam_tid.so`

Kerberos authentication

See: Enroll Mac in Kerberos

Trust IPA as Root Certificate

1. Make sure to first execute Enroll Mac in Kerberos
2. Run: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain /etc/ipa/ca.crt

Install MacPorts

Follow instructions here: https://www.macports.org/install.php

Use Bash as Shell

1. `chsh -s /bin/bash`
2. `echo 'export BASH_SILENCE_DEPRECATION_WARNING=1' >> ~/.bash_profile`

Use Kerberos Certificate as Mumble Certificate

1. Make sure to perform: Enroll Mac in Kerberos
2. Make sure to perform: #Trust IPA as Root Certificate
3. Convert certificate to pkcs12: `openssl pkcs12 -export -passout pass: -in ~/Library/IPA/user.crt -inkey ~/Library/IPA/user.key -out ~/Library/IPA/user.pkcs12 -name "IPA Certificate"`
4. Open mumble
5. On the Certificate Management overview, select "Import a certificate"
6. In the Import from field, enter the following text: ~/Library/IPA/user.pkcs12