Profile manager hanging pushing settings to macs, works perfect on ios devices

Question

Level 1

91 points

Profile manager hanging pushing settings to macs, works perfect on ios devices

Hi All,

I've got profile manager running on a late 2012 mac mini server and I'm trying to admin both OS X (laptops and desktops) and ios devices with it. I've got trust profiles installed on all the devices, as well as the enrollment profiles. When I go to push settings to an IOS devices, everything works as expected, both in and outside of our office, however when I try to push new setttings profiles to an OS X machine (either lion or MT Lion), the task will just hang at "sending" until I cancel it. I've let them go on over night, I've logged out and rebooted client machines, and these settings just won't take.

Any suggestions?

Thanks in advance!

MAC MINI SERVER (LATE 2012), OS X Mountain Lion (10.8.2), ios 6.0.1

Posted on Feb 28, 2013 5:32 PM

Reply

Answer 1

Mar 1, 2013 1:22 PM in response to fkick1

Same problem.

What i found is that the profile will apear on the cliernt computer and then will disapear. I have files a bug report hopfully it will be fixed in 10.8.3 and Server update soon.

Reply

Answer 2

fkick1 Author

Level 1

91 points

Mar 1, 2013 2:07 PM in response to -{ jonohayes }-

I get this issue on 10.7.5 machines as well :/

Reply

Answer 3

Mar 1, 2013 5:23 PM in response to fkick1

My clients are running 10.8.2 and have this problem. What version of Server are you running?

Reply

Answer 4

fkick1 Author

Level 1

91 points

Mar 1, 2013 5:41 PM in response to -{ jonohayes }-

Server is running 10.8.2 with the newest version of the OS X Server software. I've got clients with 10.8.2 and 10.7.5

Reply

Answer 5

McSpooky

Level 1

0 points

Mar 5, 2013 6:07 AM in response to fkick1

I have the same issue. I am new to MacOSX and need to set this up to combine and better control our mac pool.

Not using this for ipads but I am using is with osx clients (latest version since I just purchased licenses) sometimes at random something goes through , usually though it just gets stuck

I guess I have to manage with workgroup manager for now but it is annoying that the official control app does not seem to work,

Can anyone tell me if there has to be a connection to apple at all times to make it work in the first place? That would seem like a weird requierement to me .

Reply

Answer 6

Mar 7, 2013 9:14 AM in response to McSpooky

See this article about which ports need to opened on your network in order for PM to work:

http://support.apple.com/kb/HT5302

Reply

Answer 7

fkick1 Author

Level 1

91 points

Mar 7, 2013 9:31 AM in response to Templeton Peck

Thanks Templeton,

These machines are all on the same internal subnet, though I had opened those ports on my sonicwall firewall. I let the last test of mine run for the past 48 hours, and it seems some of the push notifcations are getting through, they're just taking a very very long time to push, with some of the settings still hanging.

Is there a limit to the number of machines one can have in a group? I've got two groups with around 20 members and a third with only 5, and the smaller group does appear to process better.

Anyone know how often machines request updates from apples servers for push settings? I had thought it was supposed to be within a few minutes if all machines had an active network connection, similar to how iOS devices receive push notifcations from apps.

Thanks!

Reply

Answer 8

Mar 7, 2013 11:45 AM in response to fkick1

even though they're all internal, you'll still need to open port 5223 on your firewall so the server can send the policies to the apple push notification servers and the client can then receive them.

You can also enable logging on both the clients and server using these commands:

defaults write /Library/Preferences/com.apple.apsd APSWriteLogs -bool TRUE

defaults write /Library/Preferences/com.apple.apsd APSLogLevel -int 7

killall apsd

The log can be found in /Library/Logs and it's actually pretty easy to understand and find where any issue might be.

Reply

Answer 9

fkick1 Author

Level 1

91 points

Mar 7, 2013 12:38 PM in response to Templeton Peck

Thanks Templeton,

I've enabled logging, and iniated a simple "update info" on one of our macbook pros.

The log for apsd.log reads:

Mar 7 12:23:35 tgroupmail.com ProfileManager[5530] <Info>: Pushed to <Device:"Macbook Pro 17" DIT 1265"> with token hlWgB9+SPpPg8u0LhCiAwWCqBw4SWi6ScW3uRSUkVsE=, {"mdm":"","time":"1362687815.80418"}

Mar 7 12:23:35 tgroupmail.com ProfileManager[5530] <Info>: Completed in 571ms (View: 0, DB: 49) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:23:35 tgroupmail.com ProfileManager[5532] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:23:35) [POST]

Mar 7 12:23:35 tgroupmail.com ProfileManager[5532] <Info>: Completed in 111ms (View: 0, DB: 18) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:23:37 tgroupmail.com ProfileManager[5534] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:23:37) [POST]

Mar 7 12:23:37 tgroupmail.com ProfileManager[5534] <Info>: Completed in 161ms (View: 0, DB: 39) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:23:38 tgroupmail.com ProfileManager[5536] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:23:38) [POST]

Mar 7 12:23:38 tgroupmail.com ProfileManager[5536] <Info>: Completed in 103ms (View: 0, DB: 38) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:23:43 tgroupmail.com ProfileManager[5531] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:23:43) [POST]

Mar 7 12:23:43 tgroupmail.com ProfileManager[5531] <Info>: Completed in 138ms (View: 0, DB: 38) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:24:45 tgroupmail.com ProfileManager[5534] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:24:45) [POST]

Mar 7 12:24:45 tgroupmail.com ProfileManager[5534] <Info>: Completed in 136ms (View: 0, DB: 24) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:24:46 tgroupmail.com ProfileManager[5536] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:24:46) [POST]

Mar 7 12:24:46 tgroupmail.com ProfileManager[5537] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:24:46) [POST]

Mar 7 12:24:47 tgroupmail.com ProfileManager[5537] <Info>: Completed in 743ms (View: 0, DB: 10) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:24:47 tgroupmail.com ProfileManager[5536] <Info>: Completed in 810ms (View: 0, DB: 92) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:24:47 tgroupmail.com ProfileManager[5538] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:24:47) [POST]

Mar 7 12:24:47 tgroupmail.com ProfileManager[5538] <Info>: Completed in 64ms (View: 0, DB: 7) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:24:47 tgroupmail.com ProfileManager[5530] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:24:47) [POST]

Mar 7 12:24:47 tgroupmail.com ProfileManager[5530] <Info>: Completed in 215ms (View: 0, DB: 20) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:24:49 tgroupmail.com ProfileManager[5533] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:24:49) [POST]

Mar 7 12:24:49 tgroupmail.com ProfileManager[5533] <Info>: Completed in 138ms (View: 0, DB: 24) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:25:05 tgroupmail.com ProfileManager[5532] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:25:05) [POST]

Mar 7 12:25:05 tgroupmail.com ProfileManager[5533] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:25:05) [POST]

Mar 7 12:25:05 tgroupmail.com ProfileManager[5532] <Info>: Completed in 70ms (View: 0, DB: 3) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:25:05 tgroupmail.com ProfileManager[5535] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:25:05) [POST]

Mar 7 12:25:05 tgroupmail.com ProfileManager[5533] <Info>: Completed in 229ms (View: 0, DB: 18) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:25:05 tgroupmail.com ProfileManager[5535] <Info>: Completed in 147ms (View: 0, DB: 26) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:25:05 tgroupmail.com ProfileManager[5536] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:25:05) [POST]

Mar 7 12:25:05 tgroupmail.com ProfileManager[5536] <Info>: Completed in 72ms (View: 0, DB: 2) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:25:05 tgroupmail.com ProfileManager[5537] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:25:05) [POST]

Mar 7 12:25:05 tgroupmail.com ProfileManager[5538] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:25:05) [POST]

Mar 7 12:25:05 tgroupmail.com ProfileManager[5538] <Info>: Completed in 114ms (View: 0, DB: 3) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:25:05 tgroupmail.com ProfileManager[5537] <Info>: Completed in 161ms (View: 0, DB: 14) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:25:52 tgroupmail.com ProfileManager[6288] <Info>: ServermgrDevicemgr starting...

Mar 7 12:25:52 tgroupmail.com ProfileManager[6288] <Info>: default_profile_created_at_least_once was already true

Mar 7 12:25:52 tgroupmail.com ProfileManager[6288] <Warning>: ** has_many_polymorphs: Warning; not all usage scenarios for polymorphic scopes are supported yet.

Mar 7 12:25:52 tgroupmail.com ProfileManager[6288] <Info>: ServermgrDevicemgr done!

Mar 7 12:26:49 tgroupmail.com ProfileManager[5535] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:26:49) [POST]

Mar 7 12:26:49 tgroupmail.com ProfileManager[5536] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:26:49) [POST]

Mar 7 12:26:50 tgroupmail.com ProfileManager[5537] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:26:50) [POST]

Mar 7 12:26:51 tgroupmail.com ProfileManager[5535] <Info>: Completed in 1989ms (View: 0, DB: 8) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:26:51 tgroupmail.com ProfileManager[5539] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:26:51) [POST]

Mar 7 12:26:51 tgroupmail.com ProfileManager[5537] <Info>: Completed in 1100ms (View: 0, DB: 11) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:26:51 tgroupmail.com ProfileManager[5530] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:26:51) [POST]

Mar 7 12:26:51 tgroupmail.com ProfileManager[5530] <Info>: Completed in 57ms (View: 0, DB: 2) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:26:51 tgroupmail.com ProfileManager[5531] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:26:51) [POST]

Mar 7 12:26:51 tgroupmail.com ProfileManager[5539] <Info>: Completed in 157ms (View: 0, DB: 15) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:26:51 tgroupmail.com ProfileManager[5536] <Info>: Completed in 2195ms (View: 0, DB: 126) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:26:51 tgroupmail.com ProfileManager[5532] <Info>: Processing MagicController#do_magic (for 206.214.40.205 at 2013-03-07 12:26:51) [POST]

Mar 7 12:26:51 tgroupmail.com ProfileManager[5531] <Info>: Completed in 126ms (View: 0, DB: 14) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:26:51 tgroupmail.com ProfileManager[5532] <Info>: Completed in 124ms (View: 0, DB: 14) | 200 OK [https://tgroupmail.com/magic/do_magic]

Mar 7 12:28:52 tgroupmail.com ProfileManager[6397] <Info>: ServermgrDevicemgr starting...

Mar 7 12:28:52 tgroupmail.com ProfileManager[6397] <Info>: default_profile_created_at_least_once was already true

Mar 7 12:28:52 tgroupmail.com ProfileManager[6397] <Warning>: ** has_many_polymorphs: Warning; not all usage scenarios for polymorphic scopes are supported yet.

Mar 7 12:28:52 tgroupmail.com ProfileManager[6397] <Info>: ServermgrDevicemgr done!

I'm not seeing any errors within the 5 minutes that I started the process. However, in the profilemanager.log I do notice a recurring warning regarding has_many_polymorphs and one regarding an error about an untrusted certificate. Any thoughts? Log below: