Gary,
It is important to realize that the Auth Plugin must be compiled for each version 10.4 and 10.5. If you are trying to run the same one compiled for 10.4 on a 10.5 machine, you will need to recompile.
A common requirement in both government and educational environments is to display a banner before login. Although there are hacks for doing this, a better way is to use an authorization plugin. There is sample code in:
/Developer/Examples/Security/bannersample
...that will display a semi-transparent image in front of the login panel, and requires a user to accept a license before proceeding. This is designed to be quickly customizable; change the logos and warning text in the nib, compile and go.
A very late change to Leopard caused the sample code that ships with Leopard to fail. This will be corrected in a future developer tools release, but as this is sample code that you have to compile anyway, the fix is easy.
For those wanting to play with the Xcode Project prior to my making something available, be aware of the above issue and make the changes noted below in the bannersample/BannerController.m file:
__________________________________________________________________________
--- ./BannerController.m +++ ./bannersample/BannerController.m @@ -94,9 +94,13 @@ { if ([targetWindow respondsToSelector:@selector(setCanBecomeVisibleWithoutLogin:)]) { +#if MAC_OS_X_VERSION_MAX_ALLOWED >= MAC_OS_X_VERSION_10_5 + [targetWindow setCanBecomeVisibleWithoutLogin:YES]; +#else NSNumber *tmpYes = [NSNumber numberWithBool:YES]; SEL selector = @selector(setCanBecomeVisibleWithoutLogin:); [targetWindow performSelector:selector withObject:tmpYes afterDelay:0.0]; +#endif } }
__________________________________________________________________________
If you do not want to the above or can wait, I will have something available for folks.
- Shawn _____________________________________________________ Shawn Geddis Security Consulting Engineer Apple Enterprise
On Dec 7, 2007, at 10:41 AM, Simon, Gary wrote: Shawn, I have not been able to get Paul’s version to work with 10.5. Is there some other step we need to do to make it work in Leopard? I added the entry into /etc/authorization just before the smartcard sniffer in system.login.console, but when I “switch user” or log out it just comes back to the login window. I have gotten it to work in Tiger just fine. Any ideas? Gary On 12/7/07 8:33 AM, "Shawn A. Geddis" <email@hidden> wrote: On Dec 7, 2007, at 8:27 AM, Rich Trouton wrote: Shawn, Is there a place where there's a good write-up (or even better, a finished application) on how to use AuthPlugin for displaying the login banner on 10.5? A lot of the folks who need to implement this will not necessarily be up to the programming task of rolling their own login banner solution. Thanks, Rich Rich, Well understood and that is why I plan to make a modified version of the Banner Sample matching Government Notice requirements available in compiled version for easy deployment for those who need it. if folks wanted yet another source for this Banner Sample, you could always look to Paul Suh's work. Paul posted a notice to the list back on Sept 25, 2007: From: Paul Suh <email@hidden> Date: September 25, 2007 1:36:22 AM EDT To: email@hidden Subject: [Fed-Talk] Policy Banner 1.0.1 Folks, I've been lurking on this list for a while now. A short announcement for a free software package that a lot of you might find useful. I tweaked the banner sample that was referred to in the afp548.com article a few weeks ago, and turned it into more polished and usable form. You can pick it up at <http://ps-enable.com/software/PolicyBanner1.0.1.dmg>. Free, LGPL license. --Paul Paul Suh http://www.ps-enable.com/ email@hidden (240) 672-4212 - Shawn _____________________________________________________ Shawn Geddis Security Consulting Engineer Apple Enterprise
|