iPhone fails to enroll with Lion server

Question

Level 1

5 points

iPhone fails to enroll with Lion server

I go to my website from the Verizon network, and I click enroll (I added the trust profile already) It asks for my passcode, then says enrolling certificate, then it stays thatway for a while, and fails. The error I get is "A network error occured. The request timed out" What do I have to do to fix this? What ports are supposed to be forwarded for this to work? I currently have 443 forwarded to the server.

Mac mini, Mac OS X (10.7), Server OS & iPhone 4 running 4.2.8

Posted on Jul 21, 2011 10:23 AM

Reply

Answer 1

Jul 21, 2011 10:43 AM in response to InGen

Same.

Reply

Answer 2

InGen Author

Level 1

5 points

Jul 21, 2011 11:14 AM in response to InGen

Grant. What router do you use? What steps have you tried so far to fix it?

Reply

Answer 3

Jul 21, 2011 11:22 AM in response to InGen

Mapped everything in in Apple's Lion help page under "Next Steps" execpt 22 to a mac mini server behind a DD-WRT Linksys box. Nothing fancy. Just testing phase at this point with a dummy domain and a self signed cert.

Reply

Answer 4

InGen Author

Level 1

5 points

Jul 21, 2011 11:26 AM in response to Grant Griffith

Hmmm I never found a page of ports to map. How do I find it? I'm using a linux server as a router running Ubuntu and Shorewall firewall. I've used it for years.

Reply

Answer 5

Jul 21, 2011 11:33 AM in response to InGen

Next Steps > Configure Network > (blue) configure port mapping > (botton link) Router port mapping > Service and ports

I'm sure there is a faster way, but that's the path I took as I was reading the help pages.

Reply

Answer 6

InGen Author

Level 1

5 points

Jul 21, 2011 11:37 AM in response to Grant Griffith

Thanks I'll try that but first I have to figure out why my Apple Remote Desktop won't work now on it 😟 Lion has just been a major PITA so far.

Reply

Answer 7

Jul 21, 2011 11:41 AM in response to InGen

Lion request ARD 3.5

You can always Connect to Server...

vnc://hostname or IP

If ARD isn't sharing correctly ssh and use kickstart to enable remote mangement. Old commands still work.

Reply

Answer 8

InGen Author

Level 1

5 points

Jul 21, 2011 11:43 AM in response to Grant Griffith

What's the command to kickstart it over SSH. It shows Available as ARD 3.5.1 OS 10.7

Reply

Answer 9

InGen Author

Level 1

5 points

Jul 21, 2011 11:46 AM in response to InGen

Looks like something corrupted my operating system on that machine. I need to reinstall everything from scratch. I've never had this problem with 10.6 server.

Reply

Answer 10

sbkeith

Level 1

54 points

Jul 21, 2011 2:43 PM in response to InGen

From what I gather in the Dev Forums, you have to be on iOS 5 B3 or later to get this to work. Other than that, who knows? The documentation for Lion Server is pitiful

Reply

Answer 11

Jul 21, 2011 2:45 PM in response to sbkeith

Really? They released a Server OS with features that aren't compatible with any current products? Not surprised, but dang.

Reply

Answer 12

Thezez

Level 1

30 points

Jul 21, 2011 5:03 PM in response to InGen

I have this working on an iPad with iOS 4.3.3. You'll need to have port 1640 open to enroll, and gateway.push.apple.com port 2195 to Lock/Update etc.

Reply

Answer 13

InGen Author

Level 1

5 points

Jul 21, 2011 5:14 PM in response to Thezez

Thezez, I'll give that a shot and see what happens. I'm glad it works with current iOS. I'm using 4.2.8 on a Verizon iPhone. Once I reinstall the server, I will test it out with the open ports, and let you know. They should really tell you when you need to open ports.

Reply

Answer 14

Jul 21, 2011 5:57 PM in response to Thezez

Woo! Opening 1640 to the server worked!

Thanks!!

Reply

Answer 15

InGen Author

Level 1

5 points

Jul 21, 2011 6:32 PM in response to Grant Griffith

Now I reinstalled from scratch without backup, and the server is telling me it is already configured for directory management, but at the same time it's asking me to configure it. What should I do?

Reply