penguinaut

Q: AD users can't log in after waking managed computer from sleep

I've set up Profile Manager on my OSX server running 10.11 El Capitan.

 

I've installed configuration profiles on the machines that automate binding to AD and various other settings.

 

Since distributing these computers to users, they've increasingly begun reporting that after waking the computer up from sleep or from a locked state (specifically a laptop; ethernet connected machines don't seem to have this issue), they can't log in until after a restart.  It seems to be getting worse and more frequent.  In checking the device server log for profile manager I see the following for a time when a user told me he had experienced the problem:

 

1:: [81466] [2016/08/23 12:08:49.849] <172.20.141.56> >>> Processing PUT mdm_checkin

0:: [81466] [2016/08/23 12:08:49.852] <172.20.141.56> checkin: "UserAuthenticate"

0:: [81466] [2016/08/23 12:08:49.895] <172.20.141.56> EXCEPTION: 410 Gone - User with GUID D0290F2C-A3A4-4BCF-8BFB-31C35F282FCC is unknown or a local user. at

    #0 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/ta rget.php(249): DieGone('User with GUID ...')

    #1 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/ta rget.php(433): LabSession_for_incoming_request(Array, Array)

    #2 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/ta rget.php(370): Target_for_incoming_request(Array, true, Array)

    #3 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/md m_checkin.php(57): Target_for_checkin_request(Array, true)

    #4 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/db .php(410): _checkin_transaction(Array)

    #5 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/md m_checkin.php(174): PerformInTransaction('_checkin_transa...', Array)

    #6 {main}

1:: [81466] [2016/08/23 12:08:49.896] <172.20.141.56> <<< Sent Final Output (9 bytes) - PUT mdm_checkin

0:: [81466] [2016/08/23 12:08:49.896] <172.20.141.56> Completed in 49ms | 410 Gone  [https://[MYSERVER.MYORGANIZATION.NET/devicemanagement/api/device/mdm_checkin]

 

I'm kind of out of my depth here and not sure what to do. I can't find reference to the 410 Gone error message with profile manager anywhere online.  Any idea what this means and how I can fix it? We never had this problem before I started using profile manager to push settings.

Posted on Aug 23, 2016 11:42 AM

Close

Q: AD users can't log in after waking managed computer from sleep

  • All replies
  • Helpful answers

  • by dwbrecovery,

    dwbrecovery dwbrecovery Aug 26, 2016 12:22 AM in response to penguinaut
    Level 3 (510 points)
    Servers Enterprise
    Aug 26, 2016 12:22 AM in response to penguinaut

    Hi penguinaut,

    - Check whether the configuration files are changing settings to System Preferences -> Energy Saver.

    - Check if a laptop has the issue if it is left with the display ( clamshell ) left opened but after laptop is in sleep mode.

    - Test a configuration on a laptop with all Energy Saver settings disabled.  

     

    There might be a combination of Energy Saver settings which will work with a login to AD.

     

    HTH

    Cheers, dwbrecovery