*NEW* The Leopard Desktop/Laptop Baseline document is available in PDF & Word formats.
These documents provide the minimum and recommended configurations for lab owned systems attached to a network.
The Fermilab Mac Users Mailing list & searchable archives have some useful content
In addition you might benefit from attending the occasional Mac Users Meetings
Generating kerberized X509 Certificates for access to some Fermi web resources:
A disk image containing
the kx509 and kxlist executables, built on OS X.3.3
also, Universal binaries (tested on Leopard only) are available here,
and here is a script from Matt to help import certs into the keychain kx509-to-keychain
Now, even more Documentation on getting and using certificates is available.
For coders, there are some older
notes on compiling the kx509 & kxlist Kerberized X509 Client Certificate tools
Some information for users of Accelerator Division (and other) windows resources as they move into the 'Fermi' windows domain are found here.
Prototype install instructions for setting up an OSX machine for use in the Fermi environment can be found here. Comments and corrections to the macusers mailing list please.
There are some notes here & a script to integrate Computing Division's spam reporting webpage with Mail.app
A mailing list post about Certificates in mail may also be of interest.
A screen saver is available that has a Fermilab theme to it. Click here to download it. Once it is on your system, double click the file to have it installed automatically to ~/Library/Screen Savers. (Provided by Rich Neswold)
A kerberized CVS for Tiger/Intel from the darwinports source, with the Fermi-local username patch added, from Matt.
** WARNING ** - the stuff in the paragraph below is very old, and unless you know
exactly what you are doing, you probably don't want to go there... the CLIENT ONLY stuff following is probably more appropriate.
OpenSSH with Fermi Cryptocard support can be found at: ftp://ftp.fnal.gov/pub/openssh-kerberos-macosx/
Note that this overwrites the system ssh binaries, and may itself be overwritten by software updates from Apple.
(If you don't have Stuffit Expander then that won't work... try this disk image instead.)
Just double click after downloading, then double click the open cardboard box icon. You will need to be an administrator for this to work.
OpenSSH CLIENT ONLY 3.x downgrade packages, to install an older 3.x release of the client, needed for backward compatibility with older Fermi ssh servers is available for Panther (OSX 10.3.x), for Tiger (OSX 10.4.x) and for Leopard (OSX 10.5.x) and now for Snow Leopard (OSX 10.6.x) too.
These install renamed clients, leaving the system ssh binaries untouched.
CD Support for Macintosh systems has returned. (a work in progress)
Price quotes for lab purchase of Apple products, can be found in the Fermi Apple Store (KCA Certificate required... possibly restricted to on-site access?)
All FNAL-owned systems are required to install and run software that reports to the FNAL central inventory service. To install the Macintosh Inventory software (QMX from Quest Software) visit http://computing.fnal.gov/xms/Services/Getting_Services/Mac_OSX/QMX_SMS and follow the instructions there.