167
edits
(Created page with "This is a list of tweaks that are useful when setting up a new Mac. == Kerberos authentication == See: Enroll Mac in Kerberos == TouchID sudo == * Edit `/etc/pam.d/sudo_local` as root and remove the '#' before this line: `auth sufficient pam_tid.so`") |
|||
| (5 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
This is a list of tweaks that are useful when setting up a new Mac. | This is a list of tweaks that are useful when setting up a new Mac. | ||
== TouchID sudo == | |||
* Run: `sed -e 's/#auth/auth/' /etc/pam.d/sudo_local.template | sudo tee /etc/pam.d/sudo_local` | |||
== Kerberos authentication == | == Kerberos authentication == | ||
See: [[Enroll Mac in Kerberos]] | See: [[Enroll Mac in Kerberos]] | ||
== | == Trust IPA as Root Certificate == | ||
# Make sure to first execute [[Enroll Mac in Kerberos]] | |||
# Run: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain /etc/ipa/ca.crt | |||
== Install MacPorts == | |||
Follow instructions here: https://www.macports.org/install.php | |||
== Install iTerm2 == | |||
https://iterm2.com | |||
== Use Bash as Shell == | |||
# `chsh -s /bin/bash` | |||
# `echo 'export BASH_SILENCE_DEPRECATION_WARNING=1' >> ~/.bash_profile` | |||
== Use Kerberos Certificate as Mumble Certificate == | |||
# Make sure to perform: [[Enroll Mac in Kerberos]] | |||
# Make sure to perform: [[#Trust IPA as Root Certificate]] | |||
# Convert certificate to pkcs12: `openssl pkcs12 -export -passout pass: -in ~/Library/IPA/user.crt -inkey ~/Library/IPA/user.key -out ~/Library/IPA/user.pkcs12 -name "IPA Certificate"` | |||
# Open mumble | |||
# On the Certificate Management overview, select "Import a certificate" | |||
# In the Import from field, enter the following text: ~/Library/IPA/user.pkcs12 | |||
# | |||