Xcode developer help

Question

Level 1

26 points

Xcode developer help

I am a maintained account (non-admin) working in Xcode and i can execute all types of file (iPhone or Mac) with ease, but when i work on a command line code and execute it, it will ask for an admin password. The command line code is VERY basic, just saying stuff on the screen and not editing any (system) files, why is this and how can i prevent it?

iMac Late 2009, Mac OS X (10.6.4), iMac, iPod Touch 2nd Generation w/ OS 3.1.3, iPod Nano 3rd Generation,

Posted on Nov 20, 2010 8:13 AM

Reply

Answer 1

_graph

Level 1

0 points

Jan 11, 2016 2:05 PM in response to RockabillyJoe

Yes, I have! Make sure each station is bound to your AD and create a group "Your Xcode AD Group" through the AD MMC on Windows.

this command that has to be entered once on each station: sudo dseditgroup -o edit -a "Your Xcode AD Group" -t group _developer

There should be a database programmer at your university/employer that can pull class flag data and auto-populate a bunch of people's IDs into a 'COMP 101 Students' AD group, and if everyone in COMP 101 needs Xcode access, put this group in your Your Xcode AD Group group. It took me a long time to figure this out but it works on 10.7-10.11.

Reply

Answer 2

etresoft

Level 9

56,200 points

Nov 20, 2010 10:07 AM in response to red_menace

I think if appleaka could run "sudo", this wouldn't be a problem 🙂

You will have to ask whomever administers your network to add you to that group. As a developer, you really should have admin access to your own machine. That is standard corporate policy at most places, including the very restrictive places that I have worked in.

Reply

Answer 3

cdhw

Level 4

3,594 points

Sep 7, 2015 3:37 PM in response to Cheryl Tarbox

Install a login script:

#! /bin/bash

  dscl . append /Groups/_developer GroupMembership $1

exit 0

on your clients. This will be executed will root privileges and be passed the username logging in as $1. You can use profiles or MCX to set this up, choose your poison.

C.

Reply

Answer 4

red_menace

Level 6

17,066 points

Nov 20, 2010 8:57 AM in response to appleaka

From the Xcode 3.2 Release Notes:

Standard user accounts are be asked to authorize developer privileges with either an admin or developer
group user and password once per log-in session when debugging or using the performance tools.

You can add your user to the _developer group. Note that there is also a Developer forum.

Reply

Answer 5

red_menace

Level 6

17,066 points

Nov 20, 2010 9:33 AM in response to appleaka

There are several ways to add your user to the *Developer Tools* group. You can use System Preferences > Accounts, a utility such as TinkerTool System, or a Terminal command - I haven't used this method, but it is mentioned in several places (for example the Xcode-users mailing list)

sudo dscl . append /Groups/_developer GroupMembership <username>

Reply

Answer 6

appleaka Author

Level 1

26 points

Nov 20, 2010 10:37 AM in response to red_menace

sudo dscl . append /Groups/_developer GroupMembership <username>
just to clarigy, when you type in <username> at the end, do you type in "<appleaka>" or "appleaka"?
in other words
sudo dscl . append /Groups/_developer GroupMembership appleaka
or
sudo dscl . append /Groups/_developer GroupMembership <appleaka>

Reply

Answer 7

red_menace

Level 6

17,066 points

Nov 20, 2010 10:46 AM in response to appleaka

Just your user name

sudo dscl . append /Groups/_developer GroupMembership appleaka

... and as etresoft mentioned 😝 , you will need administrative access (I use a standard account myself, but am the admin).

Reply

Answer 8

etresoft

Level 9

56,200 points

Nov 21, 2010 6:17 AM in response to appleaka

Xcode normally doesn't ask for admin access. I think it is an artifact of how your managed account is setup. I have a similar setup on my work machine. Although I rarely run Xcode, I do get asked for an admin account password every so often. I think the cause is my Juniper VPN, but I'm not sure.

Reply

Answer 9

appleaka Author

Level 1

26 points

Nov 21, 2010 5:50 AM in response to red_menace

ok thank you everyone for your help, but why does Xcode ask for admin access? when you run a terminal script (or as i found any Mac app made in Xcode) are you editing sytem files, that could end up messing up the computer?

Reply

Answer 10

red_menace

Level 6

17,066 points

Nov 21, 2010 7:28 AM in response to appleaka

There might be something in the Developer Tools that they are concerned about, although I don't know what it would be - maybe something that runs as root in order to do its thing. I normally run from a standard account, and was asked for admin access for that until I added it to the group.

Reply

Answer 11

Questor

Level 1

5 points

Jan 27, 2012 12:44 PM in response to red_menace

Unfortunately adding over 300 constantly changing users to almost 300 machines isn't an option for me.

Instead of adding users to _lpadmin, I can change /etc/cups/cupsd.conf to give mere mortals the power

to unpause a printer. If there isn't anything that I can change in my image to make it work including file

perms, is there something I can do in Workgroup Manager using an AD group to populate _developer?

Reply

Answer 12

Jun 25, 2013 3:22 PM in response to Questor

Bumping this response as I'm in the same boat. I have an instructor that wants to teach XCode, but it keeps asking for an admin password. My knee jerk reaction is to create an AD group and give them to run Xcode as an admin.

So much easier, and quicker to create an AD group . . . . she teaches in several classrooms and I just don't plain have the time to manually enter 20+ users on all those machines.

Anyone done the above and can live to tell the tale 🙂

Reply

Answer 13

Aug 28, 2015 7:39 AM in response to RockabillyJoe

I am also facing this issue with Xcode 6.x installed in public labs at university. I have no idea who may want to run and use Xcode in the labs, so have no 'list' to even add to the Developers Group on my master image, or to an AD group (which wouldn't be allowed by the AD admins anyway).

Open to any other suggestions or workarounds anyone may have found.

Cheryl

Reply