Q: iPhone fails to enroll with Lion server

Question

InGen

Level 1 (5 points)

Q: iPhone fails to enroll with Lion server

I go to my website from the Verizon network, and I click enroll (I added the trust profile already) It asks for my passcode, then says enrolling certificate, then it stays thatway for a while, and fails. The error I get is "A network error occured. The request timed out" What do I have to do to fix this? What ports are supposed to be forwarded for this to work? I currently have 443 forwarded to the server.

Mac mini, Mac OS X (10.7), Server OS & iPhone 4 running 4.2.8

Posted on Jul 21, 2011 10:23 AM

I have this question too

Solved

Thezez

Level 1 (30 points)

A:

I have this working on an iPad with iOS 4.3.3. You'll need to have port 1640 open to enroll, and gateway.push.apple.com port 2195 to Lock/Update etc.

Posted on Jul 21, 2011 5:03 PM

Q: iPhone fails to enroll with Lion server

All replies

Helpful answers

Page 1

by Grant Griffith,

Grant Griffith Jul 21, 2011 10:43 AM in response to InGen
Level 2 (165 points)

Jul 21, 2011 10:43 AM in response to InGen

Same.
Reply options

Link to this post

by InGen,

InGen Jul 21, 2011 11:14 AM in response to InGen
Level 1 (5 points)

Jul 21, 2011 11:14 AM in response to InGen

Grant. What router do you use? What steps have you tried so far to fix it?
Reply options

Link to this post

by Grant Griffith,

Grant Griffith Jul 21, 2011 11:22 AM in response to InGen
Level 2 (165 points)

Jul 21, 2011 11:22 AM in response to InGen

Mapped everything in in Apple's Lion help page under "Next Steps" execpt 22 to a mac mini server behind a DD-WRT Linksys box. Nothing fancy. Just testing phase at this point with a dummy domain and a self signed cert.
Reply options

Link to this post

by InGen,

InGen Jul 21, 2011 11:26 AM in response to Grant Griffith
Level 1 (5 points)

Jul 21, 2011 11:26 AM in response to Grant Griffith

Hmmm I never found a page of ports to map. How do I find it? I'm using a linux server as a router running Ubuntu and Shorewall firewall. I've used it for years.
Reply options

Link to this post

by Grant Griffith,

Grant Griffith Jul 21, 2011 11:33 AM in response to InGen
Level 2 (165 points)

Jul 21, 2011 11:33 AM in response to InGen

Next Steps > Configure Network > (blue) configure port mapping > (botton link) Router port mapping > Service and ports

I'm sure there is a faster way, but that's the path I took as I was reading the help pages.
Reply options

Link to this post

by InGen,

InGen Jul 21, 2011 11:37 AM in response to Grant Griffith
Level 1 (5 points)

Jul 21, 2011 11:37 AM in response to Grant Griffith

Thanks I'll try that but first I have to figure out why my Apple Remote Desktop won't work now on it Lion has just been a major PITA so far.
Reply options

Link to this post

by Grant Griffith,

Grant Griffith Jul 21, 2011 11:41 AM in response to InGen
Level 2 (165 points)

Jul 21, 2011 11:41 AM in response to InGen

Lion request ARD 3.5

You can always Connect to Server...

vnc://hostname or IP

If ARD isn't sharing correctly ssh and use kickstart to enable remote mangement. Old commands still work.
Reply options

Link to this post

by InGen,

InGen Jul 21, 2011 11:43 AM in response to Grant Griffith
Level 1 (5 points)

Jul 21, 2011 11:43 AM in response to Grant Griffith

What's the command to kickstart it over SSH. It shows Available as ARD 3.5.1 OS 10.7
Reply options

Link to this post

by InGen,

InGen Jul 21, 2011 11:46 AM in response to InGen
Level 1 (5 points)

Jul 21, 2011 11:46 AM in response to InGen

Looks like something corrupted my operating system on that machine. I need to reinstall everything from scratch. I've never had this problem with 10.6 server.
Reply options

Link to this post

by sbkeith,

sbkeith Jul 21, 2011 2:43 PM in response to InGen
Level 1 (54 points)

Jul 21, 2011 2:43 PM in response to InGen

From what I gather in the Dev Forums, you have to be on iOS 5 B3 or later to get this to work. Other than that, who knows? The documentation for Lion Server is pitiful
Reply options

Link to this post

by Grant Griffith,

Grant Griffith Jul 21, 2011 2:45 PM in response to sbkeith
Level 2 (165 points)

Jul 21, 2011 2:45 PM in response to sbkeith

Really? They released a Server OS with features that aren't compatible with any current products? Not surprised, but dang.
Reply options

Link to this post

by InGen,

InGen Jul 21, 2011 5:14 PM in response to Thezez
Level 1 (5 points)

Jul 21, 2011 5:14 PM in response to Thezez

Thezez, I'll give that a shot and see what happens. I'm glad it works with current iOS. I'm using 4.2.8 on a Verizon iPhone. Once I reinstall the server, I will test it out with the open ports, and let you know. They should really tell you when you need to open ports.
Reply options

Link to this post

by Grant Griffith,

Grant Griffith Jul 21, 2011 5:57 PM in response to Thezez
Level 2 (165 points)

Jul 21, 2011 5:57 PM in response to Thezez

Woo! Opening 1640 to the server worked!

Thanks!!
Reply options

Link to this post

Page 1

Accepted Answer · Jul 21, 2011 5:03 PM

Thezez

Level 1 (30 points)

Jul 21, 2011 5:03 PM in response to InGen

I have this working on an iPad with iOS 4.3.3. You'll need to have port 1640 open to enroll, and gateway.push.apple.com port 2195 to Lock/Update etc.

Q: iPhone fails to enroll with Lion server

All replies Helpful answers

by Grant Griffith,

by InGen,

by Grant Griffith,

by InGen,

by Grant Griffith,

by InGen,

by Grant Griffith,

by InGen,

by InGen,

by sbkeith,

by Grant Griffith,

by Thezez,Solvedanswer

by InGen,

by Grant Griffith,

All replies

Helpful answers