Push settings to users on a mac doesn't seem to work.

i have the same error messages and my policy push fails.

I have however figured out by trial and elimination that it was the "Mobility" profile that was causing it, i made no changes from the default and it makes it fail everytime i add this section to the policy.

Are you able to confirm if its the same section that does this for you?

I was having this issue too. It turned out to be the Network settings in the profile.

When installing the profile manually it was throwing 802.1X errors and not installing our signed certificate. Once the wired and wireless network config was removed everything installed cleanly, and push settings started working without issue.

This fixed it for me after forty minutes of banging my head against a wall. The log is almost useless.

THANK YOU!

Here's what I have found so far, and it doesn't make any sense to me. Both the Directory and the Webclips paylods cause this problem for me. OS X devices are stuck on Sending in the Active tasks. When I cancel those tasks and remove the offending payloads and try to make any changes to the profile, the computers continue to be stuck on Sending in the Active Tasks. Only removing the device from the system and re-enrolling it seems to get past this point, as long as Directory and Webclips payloads are not configured for OS X devices.

A workaround for the Webclips policy was to create separate profiles for iOS and OS X devices. Just make sure you don't add OS X devices to the group that manages iOS devices...

I have not found a workaround for the Directory payload. It may just be in my environment (Active Directory), so if anyone knows of a fix, I would love to hear about it.

my two cents and experience with Profile Manager documented here:

-- https://discussions.apple.com/thread/4254271?answerId=19478091022#19478091022

maybe the above will save you some time if some of your profiles fail to deploy.

we did not experiment with the Directory payload to much other than to say we could never get it to work... and therefore skipped it.

would love to hear more about any specifics (perhaps I can tell you our workaround for specific payloads ... or at least confirm we shared a similar unresolved problem)

@iArno did you find the solution?

I have the same problem. I setup a test server 10.8.2 push is working to client but lock isnt working (failed)

when i look in the log file is see almost the same as iArno. Try all thinks decriped above but still no solution

Nov 14 11:31:08 srv-mac2.cbs-niob.local ruby[12402] <Info>: Pruning certificate chain to 18446744073709551615

Nov 14 11:31:08 srv-mac2.cbs-niob.local ruby[12402] <Debug>: Trying to add a bogus certificate

Nov 14 11:31:08 srv-mac2.cbs-niob.local ruby[12402] <Debug>: An error occured while inserting an untrusted certificate into the chain

Nov 14 11:31:08 srv-mac2.cbs-niob.local ProfileManager[12402] <Info>: Pushed to <Device:"mlp-auto-001"> with token Nl6Ed4FOOR4fmFKJXiEMfGgvDQnyeCBHK09ctY5qQMI=, {"time":"1352889068.171044","mdm":""}

someone any idea?

Just out of interest, did you get anywhere with this? I'm also now banging my head against the wall with a similar problem. Inches away from a reinstall.

@EifelITDept

Yes it works now but i test it with .local adress and that wass no good idea so i setup a new server with an mac.domain.com name and no more errors what is your problem?

Was working yesterday, now it's not.

Dock settings and everything would push, it was awesome, now today it's stopped. The webapp reports failed, and the log reports 'bogus certificate' and 'untrusted' error that is named in original post.

Very frustrating, I don't want to have to do a clean install and start again 😟

The host changed but it's been working since that change. Very strange.

Can you post some log files?

EiffelITDept ...

sorrry to repost and sound like a broken record... but we spent a ton of time on profile manager ... some things worked ... some things didn't ... some of the time ... all of the time. basically, it was unreliable.

https://discussions.apple.com/thread/4254271?answerId=19478091022#19478091022

we have been using Workgroup Manager and MCX settings on 10.8.2 as we have for years... it is so much more reliable. consider this before reinstalling and spending countless hours to get no results with profile manager.

Sure 🙂 - thanks for your help.

Jan 18 14:44:20 server.mydomain.com ProfileManager[9359] <Info>: ServermgrDevicemgr starting...

Jan 18 14:44:20 server.mydomain.com ProfileManager[9359] <Info>: default_profile_created_at_least_once was already true

Jan 18 14:44:20 server.mydomain.com ProfileManager[9359] <Warning>: ** has_many_polymorphs: Warning; not all usage scenarios for polymorphic scopes are supported yet.

Jan 18 14:44:20 server.mydomain.com ProfileManager[9359] <Info>: ServermgrDevicemgr done!

Jan 18 15:04:43 server.mydomain.com ProfileManager[532] <Info>: DemandProcess: running with arguments '-e production'

Jan 18 15:04:45 server.mydomain.com ruby[532] <Info>: Pruning certificate chain to 18446744073709551615

Jan 18 15:04:45 server.mydomain.com ruby[532] <Debug>: Trying to add a bogus certificate

Jan 18 15:04:45 server.mydomain.com ruby[532] <Debug>: An error occured while inserting an untrusted certificate into the chain

Jan 18 15:04:45 server.mydomain.com ProfileManager[532] <Info>: Pushed to <LabSession:'MyUsername@ComputerImUsing'> with token sxXIeO/L4l/Pwa/1McJu83m048GBa+xH2SR+KRF1Xds=, {"time":"1358521484.604173","mdm":""}

Jan 18 15:04:50 server.mydomain.com ProfileManager[532] <Warning>: ** has_many_polymorphs: Warning; not all usage scenarios for polymorphic scopes are supported yet.

Jan 18 15:04:51 server.mydomain.com ProfileManager[532] <Warning>: ** has_many_polymorphs: Warning; not all usage scenarios for polymorphic scopes are supported yet.

Jan 18 15:04:51 server.mydomain.com ruby[532] <Info>: Pruning certificate chain to 18446744073709551615

Jan 18 15:04:51 server.mydomain.com ruby[532] <Debug>: Trying to add a bogus certificate

Jan 18 15:04:51 server.mydomain.com ruby[532] <Debug>: An error occured while inserting an untrusted certificate into the chain

Jan 18 15:04:51 server.mydomain.com ProfileManager[532] <Info>: Pushed to <LabSession:'MyUsername@ComputerImUsing'> with token sxXIeO/L4l/Pwa/1McJu83m048GBa+xH2SR+KRF1Xds=, {"time":"1358521491.205980","mdm":""}

Jan 18 15:09:51 server.mydomain.com ProfileManager[532] <Info>: DemandProcess: quitting after 300 seconds of inactivity

This is the computer that I'm playing with, just assigning it to myself in the profile manager, which causes the profile to be 'pushed' supposedly, and obviously.

Thanks again.

cheers ione ... I understand, but I have faith, and it was working yesterday, this is the thing. It was like someone giving me something really tasty and then taking it away. I WANT IT BACK! hah