Skip navigation

Push settings to users on a mac doesn't seem to work.

4882 Views 22 Replies Latest reply: Aug 23, 2013 7:00 AM by BryanJayhawk RSS
1 2 Previous Next
iArno Calculating status...
Currently Being Moderated
Aug 17, 2011 12:16 PM

I've setup various profiles for devices and users. Settings for ios devices works fine but settings for users on a mac seem to hang indefinetely. IT keeps sending in my profile manager and never seems to be able to push the settings.

 

I keep getting messages like the following, anyone an idea ?

 

Aug 17 21:08:21 iserve.ath.cx ruby[458] <Info>: Pruning certificate chain to 18446744073709551615

Aug 17 21:08:21 iserve.ath.cx ruby[458] <Debug>: Trying to add a bogus certificate

Aug 17 21:08:21 iserve.ath.cx ruby[458] <Debug>: An error occured while inserting an untrusted certificate into the chain

 

All mac's have the trusted certificate installed and are enrolled.

 

I have no clue how to solve this.

 

Arno

MacMini Server, iMac, Macbook Pro, Mac OS X (10.6.2), Former PC User switching to something much better.
  • steven.rogers Calculating status...
    Currently Being Moderated
    Sep 21, 2011 8:46 PM (in response to iArno)

    i have the same error messages and my policy push fails.

     

    I have however figured out by trial and elimination that it was the "Mobility" profile that was causing it, i made no changes from the default and it makes it fail everytime i add this section to the policy.

     

    Are you able to confirm if its the same section that does this for you?

  • Buthidae Calculating status...
    Currently Being Moderated
    Nov 20, 2011 5:27 PM (in response to iArno)

    I was having this issue too. It turned out to be the Network settings in the profile.

     

    When installing the profile manually it was throwing 802.1X errors and not installing our signed certificate. Once the wired and wireless network config was removed everything installed cleanly, and push settings started working without issue.

  • Andrew Baldwin1 Calculating status...

    This fixed it for me after forty minutes of banging my head against a wall.  The log is almost useless.

    THANK YOU!

  • NachoooooooLibre Level 1 Level 1 (0 points)

    Here's what I have found so far, and it doesn't make any sense to me. Both the Directory and the Webclips paylods cause this problem for me. OS X devices are stuck on Sending in the Active tasks. When I cancel those tasks and remove the offending payloads and try to make any changes to the profile, the computers continue to be stuck on Sending in the Active Tasks. Only removing the device from the system and re-enrolling it seems to get past this point, as long as Directory and Webclips payloads are not configured for OS X devices.

  • NachoooooooLibre Level 1 Level 1 (0 points)

    A workaround for the Webclips policy was to create separate profiles for iOS and OS X devices. Just make sure you don't add OS X devices to the group that manages iOS devices...

     

    I have not found a workaround for the Directory payload. It may just be in my environment (Active Directory), so if anyone knows of a fix, I would love to hear about it.

  • ionepoch Calculating status...

    my two cents and experience with Profile Manager documented here:

    -- https://discussions.apple.com/message/19478091

     

    maybe the above will save you some time if some of your profiles fail to deploy. 

     

    we did not experiment with the Directory payload to much other than to say we could never get it to work... and therefore skipped it.

     

    would love to hear more about any specifics (perhaps I can tell you our workaround for specific payloads ... or at least confirm we shared a similar unresolved problem)

  • Peter-Erik Level 1 Level 1 (10 points)
    Currently Being Moderated
    Nov 14, 2012 4:41 AM (in response to iArno)

    @iArno did you find the solution?

     

    I have the same problem. I setup a test server 10.8.2 push is working to client but lock isnt working (failed)

    when i look in the log file is see almost the same as iArno. Try all thinks decriped above but still no solution

     

    Nov 14 11:31:08 srv-mac2.cbs-niob.local ruby[12402] <Info>: Pruning certificate chain to 18446744073709551615

    Nov 14 11:31:08 srv-mac2.cbs-niob.local ruby[12402] <Debug>: Trying to add a bogus certificate

    Nov 14 11:31:08 srv-mac2.cbs-niob.local ruby[12402] <Debug>: An error occured while inserting an untrusted certificate into the chain

    Nov 14 11:31:08 srv-mac2.cbs-niob.local ProfileManager[12402] <Info>: Pushed to <Device:"mlp-auto-001"> with token Nl6Ed4FOOR4fmFKJXiEMfGgvDQnyeCBHK09ctY5qQMI=, {"time":"1352889068.171044","mdm":""}

     

    someone any idea?

  • EiffelITDept Calculating status...

    Just out of interest, did you get anywhere with this? I'm also now banging my head against the wall with a similar problem. Inches away from a reinstall.

  • Peter-Erik Level 1 Level 1 (10 points)

    @EifelITDept

     

    Yes it works now but i test it with .local adress and that wass no good idea  so i setup a new server with an  mac.domain.com name  and no more errors what is your problem?

  • EiffelITDept Level 1 Level 1 (0 points)

    Was working yesterday, now it's not.

     

    Dock settings and everything would push, it was awesome, now today it's stopped. The webapp reports failed, and the log reports 'bogus certificate' and 'untrusted' error that is named in original post.

     

    Very frustrating, I don't want to have to do a clean install and start again

     

    The host changed but it's been working since that change. Very strange.

  • Peter-Erik Level 1 Level 1 (10 points)

    Can you post some log files?

  • ionepoch Level 1 Level 1 (0 points)

    EiffelITDept ...

     

    sorrry to repost and sound like a broken record... but we spent a ton of time on profile manager ... some things worked ... some things didn't ... some of the time ... all of the time.  basically, it was unreliable.

    https://discussions.apple.com/message/19478091

     

    we have been using Workgroup Manager and MCX settings on 10.8.2 as we have for years... it is so much more reliable.  consider this before reinstalling and spending countless hours to get no results with profile manager.

  • EiffelITDept Level 1 Level 1 (0 points)

    Sure - thanks for your help.

     

    Jan 18 14:44:20 server.mydomain.com ProfileManager[9359] <Info>: ServermgrDevicemgr starting...

    Jan 18 14:44:20 server.mydomain.com ProfileManager[9359] <Info>: default_profile_created_at_least_once was already true

    Jan 18 14:44:20 server.mydomain.com ProfileManager[9359] <Warning>: ** has_many_polymorphs: Warning; not all usage scenarios for polymorphic scopes are supported yet.

    Jan 18 14:44:20 server.mydomain.com ProfileManager[9359] <Info>: ServermgrDevicemgr done!

    Jan 18 15:04:43 server.mydomain.com ProfileManager[532] <Info>: DemandProcess: running with arguments '-e production'

    Jan 18 15:04:45 server.mydomain.com ruby[532] <Info>: Pruning certificate chain to 18446744073709551615

    Jan 18 15:04:45 server.mydomain.com ruby[532] <Debug>: Trying to add a bogus certificate

    Jan 18 15:04:45 server.mydomain.com ruby[532] <Debug>: An error occured while inserting an untrusted certificate into the chain

    Jan 18 15:04:45 server.mydomain.com ProfileManager[532] <Info>: Pushed to <LabSession:'MyUsername@ComputerImUsing'> with token sxXIeO/L4l/Pwa/1McJu83m048GBa+xH2SR+KRF1Xds=, {"time":"1358521484.604173","mdm":""}

    Jan 18 15:04:50 server.mydomain.com ProfileManager[532] <Warning>: ** has_many_polymorphs: Warning; not all usage scenarios for polymorphic scopes are supported yet.

    Jan 18 15:04:51 server.mydomain.com ProfileManager[532] <Warning>: ** has_many_polymorphs: Warning; not all usage scenarios for polymorphic scopes are supported yet.

    Jan 18 15:04:51 server.mydomain.com ruby[532] <Info>: Pruning certificate chain to 18446744073709551615

    Jan 18 15:04:51 server.mydomain.com ruby[532] <Debug>: Trying to add a bogus certificate

    Jan 18 15:04:51 server.mydomain.com ruby[532] <Debug>: An error occured while inserting an untrusted certificate into the chain

    Jan 18 15:04:51 server.mydomain.com ProfileManager[532] <Info>: Pushed to <LabSession:'MyUsername@ComputerImUsing'> with token sxXIeO/L4l/Pwa/1McJu83m048GBa+xH2SR+KRF1Xds=, {"time":"1358521491.205980","mdm":""}

    Jan 18 15:09:51 server.mydomain.com ProfileManager[532] <Info>: DemandProcess: quitting after 300 seconds of inactivity

     

    This is the computer that I'm playing with, just assigning it to myself in the profile manager, which causes the profile to be 'pushed' supposedly, and obviously.

     

    Thanks again.

1 2 Previous Next

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.