Q: AD users can't log in after waking managed computer from sleep
I've set up Profile Manager on my OSX server running 10.11 El Capitan.
I've installed configuration profiles on the machines that automate binding to AD and various other settings.
Since distributing these computers to users, they've increasingly begun reporting that after waking the computer up from sleep or from a locked state (specifically a laptop; ethernet connected machines don't seem to have this issue), they can't log in until after a restart. It seems to be getting worse and more frequent. In checking the device server log for profile manager I see the following for a time when a user told me he had experienced the problem:
1:: [81466] [2016/08/23 12:08:49.849] <172.20.141.56> >>> Processing PUT mdm_checkin
0:: [81466] [2016/08/23 12:08:49.852] <172.20.141.56> checkin: "UserAuthenticate"
0:: [81466] [2016/08/23 12:08:49.895] <172.20.141.56> EXCEPTION: 410 Gone - User with GUID D0290F2C-A3A4-4BCF-8BFB-31C35F282FCC is unknown or a local user. at
#0 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/ta rget.php(249): DieGone('User with GUID ...')
#1 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/ta rget.php(433): LabSession_for_incoming_request(Array, Array)
#2 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/ta rget.php(370): Target_for_incoming_request(Array, true, Array)
#3 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/md m_checkin.php(57): Target_for_checkin_request(Array, true)
#4 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/db .php(410): _checkin_transaction(Array)
#5 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/md m_checkin.php(174): PerformInTransaction('_checkin_transa...', Array)
#6 {main}
1:: [81466] [2016/08/23 12:08:49.896] <172.20.141.56> <<< Sent Final Output (9 bytes) - PUT mdm_checkin
0:: [81466] [2016/08/23 12:08:49.896] <172.20.141.56> Completed in 49ms | 410 Gone [https://[MYSERVER.MYORGANIZATION.NET/devicemanagement/api/device/mdm_checkin]
I'm kind of out of my depth here and not sure what to do. I can't find reference to the 410 Gone error message with profile manager anywhere online. Any idea what this means and how I can fix it? We never had this problem before I started using profile manager to push settings.
Posted on Aug 23, 2016 11:42 AM