Tuesday, September 10, 2019

Update: distributing ERB Secure Browser on Mojave


Mojave introduces some security enhancements that mess up the distribution of the ERB secure browser (the "App"). 


First, thanks to Mosyle for figuring this out.  Mosyle is a very cost-effective but powerful MDM. 

Here's what they provided:


  • Use this script as a custom command to download and install the App:
#!/bin/bash
DOWNLOADURL='https://www.programworkshop.com/sbrowser/ws/GetSecureBrowser.aspx?programid=80&agentidentifier=MacOSXDSB&ipaddress=71.214.30.168&institutionid=&candidateid=&language=ENU&sc=abca88f08ef67be5648507dcfd191400a509c5d7'
NAME="/tmp/erbtestingapp.zip"
curl -s -o "$NAME" "$DOWNLOADURL"
ditto -x -k "$NAME" "/tmp/testingapp"
shopt -s dotglob
mv /tmp/testingapp/* /Applications/
rm -rf "$NAME"
rm -rf "/tmp/testingapp"


  • Adjust you App restrictions:
    • In Mosyle I use Restrictions > Apps and then allow by folders. 
    • If you use this method you must allow /private/var/ 


Tuesday, December 11, 2018

Distributing the ERB Secure Browser (Macintosh) Using Munki

Distributing the ERB Secure Browser App for Macintosh using MUNKI.

ERB provides a zipped file but trying to create a package of the file with Packages doesn't work.   This method simulates unzipping the zipped application, and then copying it to the Applications folder.


  • Download ERB Online zip file
  • Package the zip file using Packages (or your packaging software of choice). 
  • After upload to Munki put this in the post install script:



#!/bin/bash
ditto -xk /Users/Shared/ERBSecureBrowser_7.1.1.1.zip /Users/Shared/
cp -R /Users/Shared/ERB\ Secure\ Browser.app /Applications


The other loose end to this situation are application restrictions in your MDM. The old style app restrictions don't seem to work well with the ERB secure browser. Even when you have an exception for apps in the Applications folder or for the ERB Secure Browser app (treating it like a folder) doesn't work.

I found that you have to use the Allowed or Blocked Apps restriction profile.


Sunday, July 24, 2016

Apple School Manager and ZuluDesk - Tips and Tricks


It's been a wild ride since Apple School Manager (ASM) rolled out on July 14.  Here are some tips and tricks that will help make your integration easier.

I chose ZuluDesk (ZMS for ZuluDesk Management System) as my MDM but all the MDM's have common data structures and integration as required by ASM.

ASM documentation at this point is vague on some points.


ASM

  • Uploading Instructors to ASM
    • Upload instructor to ZMS first with password
    • Then upload instructor to ASM with this format:
      • First Name, Last Name, Person Id (=SIS user ID), Person Number (=username), email
      • ZMS will sync and add Managed Apple ID
    • Changing name in ZMS changes name in AMS but changing in AMS doesn’t change name in ZMS

 

    • Uploading Students to ASM
    • Fields
        • First Name, Last Name -  match
        • Person ID = (used our SIS 8 digit user ID)
        • Person Number = username (doej2025 e.g.)
        • Password Policy = Digit4 (for Shared iPad’s)
        • Email = email

  • Uploading Classes to ASM
    • For ZMS the ASM sync is a one-way sync from ASM to ZuluDesk. Classes created in ZMS need to be exported and imported in ASM. Currently there is no automated way to sync from ZMS to ASM. Your MDM maybe different.
    • Fields
      • Course Name (1-HR-Smith e.g.)
      • Course Number (1,2,3 etc.)(hidden not used ZMS)
      • Class id (use WH = Course ID 71735 from our SIS e.g. Jones' HR) (in ZMS 1002470-39) (hidden in ASM)
      • Class Number (leave blank) (1A e.g. in ASM)(hidden not used ZMS)
      • Instructor Ids = Person Id = used the 8 digit SIS user ID, you can add multiple teacher ID's in this cell, just separate by commas. I setup homerooms with all special areas teachers and other grade level teachers as teachers for these classes so they could all leverage the iPad management features introduced with ASM without having to manage multiple classes for each homeroom. So the librarian is a teacher for all homerooms, so she can control the iPads and if a student leaves or a new student arrives during the year I only have to edit that homeroom.
      • Students Ids = Person Id = WH ID (put all in one cell separated by commas)
    • Deleting class in ASM does not delete the class in ZMS
    • If you delete a class in ZMS and not in ASM - class comes back (on way from ASM to ZMS)(This may vary with your MDM).

  • Assigning iPads
  • This probably applies mostly to ZMS. After you have the students, teachers and classes setup you will want to automatically assign your iPads. I have a database of our iPads with serial numbers linked to an asset ID. ZMS uses "Placeholders" that when you use DEP to enroll your iPads you can automatically assign the iPads to a user and name it with your asset ID.
  • Import csv file into ZMS with these additional fields:
    • Username
    • Email
    • FirstName
    • LastName
    • SerialNumber (of the iPad)
    • Placeholder (name of the iPad, iPad-2233 e.g.)
     
    • Rerun the sync from ZMS and that brings the class assignment back
    • This will create placeholders so that when you DEP the iPad it will assign it to the student and name it

Managed Apple ID's:
  • Keep in mind these limitations on Managed Apple ID's (MAID's)
  • MAID's do allow use of iCloud, ITunes U and ASM (all those management features like screen lock, app launching, etc.)
  • Limits of MAID - prohibited from
      • App Store (allow browsing but not purchasing, paid or free)
      • iTunes Store (allow browsing but not purchasing, paid or free)
      • HomeKit connected devices
      • Touch ID
      • Apple Pay
      • Find My iPhone
      • Find My Mac
      • Find My Friends
      • iCloud Mail
      • iCloud photo sharing
      • iCloud Keychain
      • FaceTime (can be enabled for your institution)
      • iMessage (can be enabled for your institution)
     
I hope this post has been helpful. 
 
 
 
 

Sunday, June 19, 2016

Running Digital Signage on a Raspberry Pi 3 over WiFi through a web browser

Note: I am not sure there is a memory leak with Chromium in kiosk mode. I am testing that now. I have had the pi lock up. I have been experimenting with Firefox but launching from autostart isn’t as fully featured.

Also, I am conceiving of a Pi running over WiFi that can take a power outage an recover automatically.

Steps:
  1. Reset pi user password
  2. Turn of eth0: pluggy wrote:Turn off the eth0 in /etc/network/interfaces . Put a '#' in front of any line to do with eth0.
  3. Keep Screen awake from blanking
CODE: SELECT ALL
sudo nano ~/.config/lxsession/LXDE-pi/autostart
add:
CODE: SELECT ALL
@xset s 0 0
@xset s noblank
@xset s noexpose
@xset dpms 0 0 0

Select All (from above code), then right click 'copy', then in '/autostart', 'paste' so it looks like this:
@lxpanel --profile LXDE-pi
@pcmanfm --desktop --profile LXDE-pi
@xscreensaver -no-splash
@xset s 0 0
@xset s noblank
@xset s noexpose
@xset dpms 0 0 0


save with 'Ctrl' + 'x' key, then 'y', then 'enter'
then:
CODE: SELECT ALL
sudo reboot


  1. Set Chromium to automatically launch
  2. Set Static IP address via MAC address and DHCP
  3. Setup cron job to restart at certain time
    • sudo crontab -e
    • Add this line (here reboots at 11:51pm every night)
    • 51 23 * * * /sbin/reboot -n
  4. Setup VNC viewer
How to setup remote desktop VNC viewer


steps:
install and set password
- sudo apt-get install x11vnc
- x11vnc -storepasswd


create autostart entry


- cd .config
- mkdir autostart
- cd autostart
- nano x11vnc.desktop
- paste following text:


[Desktop Entry]
Encoding=UTF-8
Type=Application
Name=X11VNC
Comment=
Exec=x11vnc -forever -usepw -display :0 -ultrafilexfer
StartupNotify=false
Terminal=false
Hidden=false


- save and exit (Ctrl-X, Y, <Enter>)


This start x11vnc when lxde starts





Sunday, April 12, 2015

iOS Email Clients for Gmail

 Click here for a Chart Comparing Features and Ratings

This review considers which iOS (iPhone, iPad) email clients are best for Gmail.  I am a huge fan of Gmail.  I consider it the best free email platform.  I am also a huge fan of the iOS ecosystem.  I will confess I have not had a lot of experience with Android.  This review does not consider other email systems such as Exchange, Yahoo Mail, Comcast email, etc. except in assigning a rating to multiple email accounts.  I do rate the ability for the apps to add non Gmail accounts for this feature only.   Here are the candidates:




Features Compared:
  • Stability
  • Search
    • Search terms highlighted in results
  • Email Readability
    • Dynamic Type Support
    • Pinch and Zoom
    • Special: double click on email to automatically show zoomed view.
  • Swipe Actions
    • Customizable swipe actions
    • Swipe Actions
    • Short and Long Swipe
  • Attachments
    • Opens Google Docs directly in app
    • Open other file types directly in app
    • Attach Google Doc to composed email easily within app
    • Can attach calendar invites directly
    • Can respond to calendar invites directly in the email
  • Calendar
  • Google 2 Factor Authentication Integration
  • Multiple Email Accounts
    • Shared Inbox view
    • Unlimited accounts


Boxer
  • Stability
  • Search
    • Search terms highlighted in results
  • Email Readability
    • Dynamic Type Support
    • Pinch and Zoom
    • Special: double click on email to automatically show zoomed view.
  • Swipe Actions
    • Customizable swipe actions
    • Swipe Actions
    • Short and Long Swipe
  • Attachments
    • Opens Google Docs directly in app
    • Open other file types directly in app
    • Attach Google Doc to composed email easily within app
    • Can attach calendar invites directly
    • Can respond to calendar invites directly in the email
  • Calendar
  • Google 2 Factor Authentication Integration
  • Multiple Email Accounts
    • Shared Inbox view
    • Unlimited accounts


Boxer was an early alternative to the default Mail app.  Readability is excellent.  Other than Apple’s Mail app, this is the only other app to support dynamic type support.  Swipe actions are also excellent.  Other than Mail and Mailbox, Boxer is the only other app to support customizable long and short swipes.  Like Mailbox,  Boxer allows you to move emails to “To-Do” folders.  If you only check your email through Boxer, this may hold an appeal but if you are like me and use other email clients on different devices I don’t find this to be a helpful feature.    
Attachment support is average.   If text size is important, Boxer is a better alternative than Apple’s Mail.  But it will set you back $4.99 in the app store.


CloudMagic
  • Stability: C
  • Search: A
    • Search terms highlighted in results: Y
  • Email Readability: A-
    • Dynamic Type Support: N
    • Pinch and Zoom: Y
    • Special: double click on email to automatically show zoomed view.
  • Swipe Actions: B
    • Customizable swipe actions: N
    • Swipe Actions: Delete, Archive, Unread
    • Short and Long Swipe:N
  • Attachments: A
    • Opens Google Docs directly in app: Y
    • Open other file types directly in app: Y
    • Attach Google Doc to composed email easily within app: Y
    • Can attach calendar invites directly: N
    • Can respond to calendar invites directly in the email: Yes, takes you to web calendar.
  • Calendar: n/a
  • Google 2 Factor Authentication Integration: A
  • Multiple Email Accounts: B
    • Shared Inbox view: Y
    • Unlimited accounts: No for free version





CloudMagic excels at attachments, readability and search.  Unlike the other apps,  Google Drive apps open directly in the app.  Other attachments open smoothly and quickly.  Search is fast and accurate and highlights search terms in the results. Emails with smaller fonts can be tapped and opened for better viewing.  Adding attachment to composed emails offer Google Drive integration.  Emails can be pinched and zoomed.
Swipe actions are a bit different.  Once you swipe you can choose delete, archive or mark as unread.  So, to delete you can to swipe and tap.  There are no customizations for swipe actions.   If you want unlimited email accounts you have to upgrade to pro version.  You can view multiple accounts in a combined inbox.
CloudMagic’s biggest weakness, for me at least, is stability.  I have experienced numerous crashes.  After the app crashes you have to watch old emails reload.


Gmail (by Google)
  • Stability: A
  • Search: B+
    • Search terms highlighted in results: N
  • Email Readability: B-
    • Dynamic Type Support: N
    • Pinch and Zoom: only for some items but not straight text.
  • Swipe Actions: C
    • Customizable swipe actions: N
    • Swipe Actions: Archive
    • Short and Long Swipe:N
  • Attachments: A-
    • Opens Google Docs directly in app: N, but launches in Google Native Apps
    • Open other file types directly in app: Y
    • Attach Google Doc to composed email easily within app: Y.
    • Can attach calendar invites directly: N
    • Can respond to calendar invites directly in the email: Yes, takes you to web calendar.
  • Calendar: n/a
  • Google 2 Factor Authentication Integration: A
  • Multiple Email Accounts: B-
    • Shared Inbox view: Y, but for Gmail accounts only.
    • Unlimited accounts: Yes, but GMail accounts only.





Gmail from Google is a worthy contender.  Search is fast and accurate.  Google Drive attachments launch directly in the appropriate native Google Drive app.  You can attach Google Drive documents directly to composted emails. Readability is a weakness. Emails written is small fonts stay small.  No pinch and zoom is available.
Swipe actions are archive only and are not customizable.  You can only setup Gmail accounts and you cannot see multiple configured accounts in one inbox.


Inbox (by Google)


  • Stability: A
  • Search: A
    • Search terms highlighted in results: Y
  • Email Readability: B-
    • Dynamic Type Support: N
    • Pinch and Zoom: only for some items but not straight text.
  • Swipe Actions: C
    • Customizable swipe actions: No; you can customize snooze times.
    • Swipe Actions: Archive, Snooze.
    • Short and Long Swipe:N
  • Attachments: A-
    • Opens Google Docs directly in app: N, but launches in Google Native Apps
    • Open other file types directly in app: Y
    • Attach Google Doc to composed email easily within app: N.
    • Can attach calendar invites directly: N
    • Can respond to calendar invites directly in the email: Yes, take you to Google Calendar App, if installed.
  • Calendar: n/a
  • Google 2 Factor Authentication Integration: A
  • Multiple Email Accounts: C
    • Shared Inbox view: N
    • Unlimited accounts: N




Inbox is Gmail’s new app that aims to organize your emails by predefined categories.  It is most unlike any of the other apps in this review in presentation and function.  I have been using it off and on almost since it was release.  And to use Inbox you have to email Google to get an invite.
Search not only brings up the search term highlighted in yellow but categorizes results by contacts and all other results. Inbox is one of the few apps that links calendar invites directly to the Google Calendar  app which is one of my favorite calendar apps these days.  Swipe actions are not customizable and allow for swipe and snooze.  You can customize the times for the snooze settings.   Attachments are a mixed bag.  You would think with tight Google Apps integration you could attach a Google Doc directly or a calendar invite; but neither is available in Inbox.
Overall, Inbox is tightly integrated with other Google iOS apps but is not as customizable as other apps.  In this design approach, Google knows best and if you buy into the system it can be powerful.  However, Inbox is not available for Google Apps for Education, Work or Business accounts.  I find it is great for dealing with low priority personal emails but when you are looking for that important email it can get lost in the category system leading to a hunt through the multiple categories.

Mail (by Apple)
  • Stability: A
  • Search: B+
    • Search terms highlighted in results: Y but not in color
  • Email Readability: A-
    • Dynamic Type Supported: Y
    • Pinch and Zoom: Y
  • Swipe Actions: A-
    • Customizable swipe actions: Y
    • Swipe Actions: Mark as read, flag, archive, reply, forward, mark as read, move to junk, move message and notify me.
    • Short and Long Swipe:Y
  • Attachments: C
    • Opens Google Docs directly in app: N
    • Open other file types directly in app: Y
    • Attach Google Doc to composed email: N
  • Calendar: n/a
  • Google 2 Factor Authentication Integration: C
  • Multiple Email Accounts: AAa
    • Shared Inbox view: Y
    • Unlimited accounts: Y


Apple’s Mail is the old standby that offers the best integration into the iOS world but not necessarily for Gmail.  
Readability is aided by pinch and zoom and Dynamic Type makes reading the inbox easy. Swipe actions allow customization and multiple choices upon swiping.
Mail shows its Apple-centric roots with Google Drive attachments (must open a browser, like Outlook) and are hard to attach to a composed email (you must copy and paste the Google Doc URL).  In order to setup Google 2 factor authentication you must configure a special code through your Google account.  You cannot use the Google Authenticator app or have a code texted to you.  


Mailbox (by Dropbox)


  • Stability: A
  • Search: B
    • Search terms highlighted in results:
  • Email Readability: B
    • Dynamic Type Supported: N
    • Pinch and Zoom: Y
  • Swipe Actions:  A
    • Customizable swipe actions: Y
    • Swipe Actions: Archive, Delete, Snooze and List.
    • Short and Long Swipe: Y
  • Attachments: B-
    • Opens Google Docs directly in app: N
    • Open other file types directly in app: Y
    • Attach Google Doc to composed email: N
  • Calendar: n/a
  • Google 2 Factor Authentication Integration: A
  • Multiple Email Accounts: B
    • Shared Inbox view: Y
    • Unlimited accounts: Y




Mailbox’s big feature set is sending emails to custom folders and using them to get your inbox to zero. This is fine if all you use to check your email is this app.  But that is rarely the case for most users.  So now these custom folders appear in other clients but not as prominently or seamlessly as they do in Mailbox. Swipe is very capable.  Short and long swipes left and right perform delete, archive, schedule and put in a custom folder.  Readability is supported by pinch and zoom (only after you tap on the email and open it in another view). The default and non customizable font size is small.
Search is capable but does not highlight search terms in results.  Attached Google documents open in a web browser.   Being a Dropbox product, only direct attachment of Dropbox documents is supported.
Multiple email accounts are supported but only for Gmail and iCloud.  


Outlook (by Microsoft)
  • Stability: A
  • Search: A
    • Search terms highlighted in results: Y in color.
  • Email Readability: A-
    • Dynamic Type Support: N
    • Pinch and Zoom: Y
  • Swipe Actions: A-
    • Customizable swipe actions: Y
    • Swipe Actions: Delete, archive, schedule, move, mark as read/unread, flag but only maximum of 2 swipe actions.
  • Attachments: B-
    • Opens Google Docs directly in app: N
    • Open other file types directly in app: Y
    • Attach Google Doc to composed email: Y with preview of document.
    • Can attach calendar invites directly: Y
    • Can respond to calendar invites directly in the email: Yes; takes you to web calendar.
  • Calendar: B+
  • Google 2 Factor Authentication Integration: A
  • Multiple Email Accounts: A
    • Shared Inbox view: Y
    • Unlimited accounts: Y


Microsoft’s new strategy is to embrace more platforms and Outlook for iOS is a very capable email client.  Outlooks biggest advantage is integrated calendar support.  You can view your Google Calendar within the same app. Although the calendar in Outlook isn’t as full-featured or as well layed out as the Calendar app from Google or other calendar apps,  the calendar in Outlook is capable and logically presented.   It is one of the few apps that allows you to insert a calendar invitation directly into a composed email.
Outlook also has a built in email filter.  Emails are sorted automatically as either “focused” or “other” emails.  The feature works well and helps you concentrate on the important emails.  Search, like CloudMagic, is fast and highlights search terms in results.
Readability is strong.  Fonts are large and easy to read.  Pinch and zoom is available. Swipe actions are customizable and logical.  You can turn threading off.
Outlook, at least for Google Drive attachments, shows its Microsoft roots.  Clicking on a Google Drive attachment forces you to open it in a browser window after forcing you to sign into your Google account.   Attaching Google documents is also awkward.
There “files” section seem added on and not fully developed.   However,  the “people” section is unique and interesting.  You can quickly search for emails from selected contacts in this part of the app.






Conclusion:

I have yet to find a perfect iOS email app for Gmail.  I use different email apps for different purposes.  I find that I am using CloudMagic, Outlook and Inbox the most but for different reasons.  Inbox I use to whittle away at personal emails.  Outlook is best used when trying to compose an email with calendar attachments or when viewing my calendar quickly.  CloudMagic is the overall winner:  I can view attachments easily and the swipe actions are sufficient  CloudMagic’s biggest drawback is its stability issues and that is it is a freemium product.

Update: distributing ERB Secure Browser on Mojave

Mojave introduces some security enhancements that mess up the distribution of the ERB secure browser (the "App").  First, than...