Finding forced preferences

Most NoMAD users are pushing preferences via configuration profiles. This is a great thing, but does make troubleshooting a bit tougher as the defaults¬†command won’t show what keys are forced.

So… have a look at pref-finder.

Launch the tool and specify a preference domain you want to look at. You’ll be able to see all of the keys for that domain, check just a single key, check if a key is forced, or what most people will use it for, show all forced keys for a particular domain.

pref-finder -d com.trusourcelabs.NoMAD -k LastUser -f -F -a

It has a project page, and can be downloaded here.

Apple Events

NoMAD 1.0.3 responds to a number of Apple Events that you can send it from the CLI and other methods.

Current Actions

  • nomad://open – launches the application
  • nomad://signin – opens the sign in dialog if the system is on the domain and a user is not already signed in
  • nomad://user:pass@signin – causes NoMAD to get a Kerberos ticket for that user and password. If the Keychain is set to be used, this password will be stored in the keychain.
  • nomad://update – makes NoMAD update immediately
  • nomad://passwordchange – will show the change password window

If you have 1.0.3 or later installed, clicking on any of the above links will cause NoMAD to react. You can also use this from scripts via the “open” command.

open nomad://signin

In a shell script will cause NoMAD to launch, if it isn’t already and then show the sign in window if AD is reachable. This is a pretty handy thing to use at the end of your enrollment workflow to get the user’s password starting to sync.


NoMAD 1.0.3 is out!

Lots of customization and some bug fixes.

New Features

— Most every menu item is customizable as to the label and able to be hidden from the user. Check out the preference keys for how to do that.

— Automatic retrieval of x509 certificates if a user doesn’t already have one.

— Localized into French, German and Danish with other languages to come shortly. Many thanks to everyone that helped with this.

— NoMAD now responds to custom urls, so nomad://update will cause NoMAD to update itself. nomad://signin will display the sign in window. More info here.

— Trigger a script on successful password changes.

— The Change Password window now allows you to specify a password complexity policy so the users can be reminded of why their password may not work.

— Option-clicking the menu will now show the current version and build of NoMAD in the menu.

— LDAP over SSL support.

You will find a full list of all the preference keys, including all of the new ones for 1.0.3 here.

Bugs Fixed

— Better handling of bound machines. Previously NoMAD would overwrite your prefs each time it launched.

— If you’re on a .local AD domain we now handle DNS lookups better that were causing the NoMAD menu to be unresponsive.

A full list of tickets address in NoMAD can be found here.

Get 1.0.3 at our downloads page.