site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com On Aug 21, 2009, at 4:07 PM, Tim Murison wrote: --Ted _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... Given all those possibilities, does your original question still hold? As a reminder: "I'm trying to determine how to get a list of BSD user ids that can login to the machine, either with a GUI or via ssh". My original query needs some amending given the new info you guys have given me. Maybe some background will help. I'm building a web filter that is configurable on a per-user basis. It should be easy to configure, so I had assumed that getting the system configuration accounts dialog user list would be a nice way to set the filter up. Evidently it turns out that this is not a trivial thing to do, and quite possibly not even the desired list. So far I'm thinking I'll just list accounts that have real names, pictures and are members of the Users group, but I was hoping for a more robust approach. Supporting network user accounts isn't that important, at least not yet; I haven't even got a test setup for it. But it would be nice to choose an approach that makes network accounts easy(ier) to configure in the future. -Tim Just musing, based on your info, if I understand and infer correctly about your situation... Big assumption on my part in what follows: you can't store the web- filter preferences for a user in the local account of the user either because you don't trust the user to set them appropriately or you lack access to modify their individual account info (e.g. dot-files or account preferences). This implies that you'll have your own database, somewhere secure, of who gets what web-filter settings, so your list of users' preferences is effectively orthogonal to the list of users on the machine. You may want to seed it with the accounts already present, but supporting 'network user accounts' means it shouldn't depend on the machine's account list as the final arbiter of who you have preferences for. Which means you'll need some tool to add new (network) account preferences to your "database" of who wants what. So you might as well think of the database initialization as being "give a set of listed users 'these default preferences'" - where the "listed users" is read from an appropriate source - not necessarily the list of user accounts on the given machine. This email sent to site_archiver@lists.apple.com