7 Replies Latest reply: Apr 7, 2014 10:34 AM by jnameth
jnameth Level 1 Level 1 (0 points)

Hello everyone.

 

I'm currently trying to finish setting up our Caching service along with SUS and am running into some issues I hope to get some help with.  Our environment is configured as the following:

 

 

--  OS X Server 3.1.1 with clients running OS X 10.8.5 and 10.9.2.

--  All machines are bound and receiving GP via an AD environment using Centrify.

--  GP pushes out the following two scripts to all machines:

 

     *  sudo defaults write /Library/Preferences/com.apple.appstore restrict-store-softwareupdate-only -bool yes  -->  Setting which disables         all aspects of the App Store except for the Updates section

     *  sudo defaults write /Library/Preferences/com.apple.SoftwareUpdate CatalogURL http://it0038-mmd.coveroregon.us:8088/catalogs.sucatalog          -->  Setting which redirects all of our machines to point to our SUS within our AD environment.

 

 

----

 

 

The problem I'm having is that I believe the Caching Service is working properly (at least with the 10.9.x clients) but it doesn't look like it is with the 10.8.5 clients; the same with SUS but for all clients.  I have two machines with clean images running 10.8.5 and 10.9.0 that I took on 03/05/14; after applying the images and going to Software Update before joining them to my AD environment the following shows as available:

 

 

10.8.5. via Software Update  -->  Java for OS X 2013-005 1.0, Safari 6.1.3

 

10.8.5 via Caching  -->  Nothing appears.

 

10.9.0 via Software Update  -->  Digital Camera RAW Compatability Update 5.04, iBooks Update 1.0.1, iTunes 11.1.5, Java for OS X 2013-005 1.0, OS X Update Combined 10.9.2, Remote Desktop Client Update 3.7.1

 

10.9.0 via Caching  -->  Keynote, Numbers, GarageBand, Pages, iMovie, iPhoto

 

 

----

 

 

Once I join them to my AD environment and have the scripts run on the machines the following appears within Software Update on both machines:

 

 

10.8.5 Clients  -->  Nothing appears!

10.9.0 Clients  -->  Keynote, Numbers, GarageBand, Pages, iMovie, iPhoto

 

 

----

 

 

It looks like Caching is working properly but I'm wondering why nothing shows up on my 10.8.5 clients but I'm guessing it's because the Java and Safari updates are with SUS?  I'm also guessing the other updates showing up on my 10.9.0 clients are specifically for Mavericks and hence why they're not also appearing on my 10.8.5 clients?  Of course the main issue here is that I can't get my machines to see SUS properly.

 

I'm happy to supply any logs or anything else that would help get this issue resolved.  It's really driving me nuts!  **** a Starbucks GC or other compensation is in it if someone can help me! 

 

Thanks in advance!


MacBook Pro (15-inch Mid 2012), OS X Mountain Lion (10.8.5)
  • MrHoffman Level 6 Level 6 (13,150 points)

    This might already be familiar territory, but Apple included both Caching Server 2 and Software Update Server in OS X Server because they don't do quite the same thing.

     

    Caching server caches the app store updates that it happens to see — until the updates exceed the storage limits and the older updates get pushed out of cache — and the other clients then by default get only what's been cached, and they then go directly to Apple for other updates (and which should then get cached).

     

    Software Update Server goes looking for OS X updates and — once everything has been downloaded from Apple — then offers up the OS X updates to clients.

     

    Unless you're short of disk space, run both.

  • jnameth Level 1 Level 1 (0 points)

    MrHoffman,

     

    I think I fully get that now; thanks for the information.  It appears that the Caching Server is working properly from what I can tell so that variable can be eliminated but still having issues with SUS and connectivity with my clients.

     

    Any thoughts/suggestions?

  • MrHoffman Level 6 Level 6 (13,150 points)

    SUS wants to have everything downloaded before it becomes available.

     

    If all of the downloads have completed and you're not getting updates from the local SUS server, check the logs on the SUS server.

     

    I'd also check DNS services with the following (harmless) diagnostic command, as there's been more than a little weirdness when DNS was off:

     

    sudo changeip -checkhostname

     

    The SUS server URL you're using isn't one I've used, either.

  • jnameth Level 1 Level 1 (0 points)

    MrHoffman,

     

    According to SUS I currently have 769 updates and they are all downloaded.  When I check all of the logs I see the following:

     

     

    Access Log


    (The following is what I see below repeatedly for the past couple of weeks; the only change is the IP address.)

     

    10.210.5.230 - - [04/Apr/2014:16:16:28 -0700] 80 GET "/catalogs.sucatalog" 200 320 "-" "Software%20Update (unknown version) CFNetwork/596.5 Darwin/12.5.0 (x86_64) (MacBookPro9%2C1)"

    10.210.7.121 - - [04/Apr/2014:16:20:42 -0700] 80 GET "/catalogs.sucatalog" 200 320 "-" "Software%20Update (unknown version) CFNetwork/596.6 Darwin/12.5.0 (x86_64) (MacBookPro8%2C2)"

    10.210.4.131 - - [04/Apr/2014:16:25:27 -0700] 80 GET "/catalogs.sucatalog" 200 320 "-" "Software%20Update (unknown version) CFNetwork/596.5 Darwin/12.5.0 (x86_64) (MacBookPro9%2C1)"

     

     

    Error Log

     

     

    [Fri Apr 04 08:07:46 2014] [error] [client 10.210.5.177] File does not exist: /Volumes/Repository/Library/Server/Software Update/Data/html/favicon.ico

    [Mon Apr 07 07:34:37 2014] [notice] caught SIGTERM, shutting down

    Syntax error on line 288 of /Library/Server/Software Update/Config/swupd.conf:

    DocumentRoot must be a directory

    [Mon Apr 07 07:35:26 2014] [notice] mod_bw : Memory Allocated 32 bytes (each conf takes 32 bytes)

    [Mon Apr 07 07:35:26 2014] [notice] mod_bw : Version 0.8 - Initialized [1 Confs]

    [Mon Apr 07 07:35:26 2014] [notice] Apache/2.2.26 (Unix) configured -- resuming normal operations

     

     

    Service Log

     

    (Everything from today so far..)

     

    Apr  7 03:00:00 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Performing scheduled sync.

    Apr  7 03:00:00 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: 

    Apr  7 03:00:00 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: swupd_syncd 10.9 (156) for OS X Server 10.9 (Darwin/x86_64)

    Apr  7 03:00:00 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: ========== Sync Started ==========

    Apr  7 03:00:00 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Checking service data location: /Volumes/Repository/Library/Server/Software Update/Data/html

    Apr  7 03:00:00 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Retrieving catalog list

    Apr  7 03:00:00 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Retrieving deprecated udpates list

    Apr  7 03:00:00 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Retrieving remote catalog (SECURE): index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

    Apr  7 03:00:02 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Retrieving remote catalog (SECURE): index-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

    Apr  7 03:00:03 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Retrieving remote catalog (SECURE): index-lion-snowleopard-leopard.merged-1.sucatalog

    Apr  7 03:00:03 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Retrieving remote catalog (SECURE): index-leopard-snowleopard.merged-1.sucatalog

    Apr  7 03:00:04 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Updating local catalog: index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

    Apr  7 03:02:40 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: * Auto-copy (ALL) option is ON.  Applying option to eligible products.

    Apr  7 03:02:40 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: * Auto-enable option is ON.  Applying option to eligible products.

    Apr  7 03:02:41 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Updating local catalog: index-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

    Apr  7 03:04:13 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: * Auto-copy (ALL) option is ON.  Applying option to eligible products.

    Apr  7 03:04:13 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: * Auto-enable option is ON.  Applying option to eligible products.

    Apr  7 03:04:14 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Updating local catalog: index-lion-snowleopard-leopard.merged-1.sucatalog

    Apr  7 03:07:21 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: * Auto-copy (ALL) option is ON.  Applying option to eligible products.

    Apr  7 03:07:21 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: * Auto-enable option is ON.  Applying option to eligible products.

    Apr  7 03:07:22 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Updating local catalog: index-leopard-snowleopard.merged-1.sucatalog

    Apr  7 03:08:59 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: * Auto-copy (ALL) option is ON.  Applying option to eligible products.

    Apr  7 03:08:59 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: * Auto-enable option is ON.  Applying option to eligible products.

    Apr  7 03:09:00 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Updating product updates information

    Apr  7 03:09:01 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Starting product update downloads

    Apr  7 03:09:04 it0038-mmd.coveroregon.us swupd_syncd[23996] <Info>: Sync Complete

    Apr  7 07:35:15 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: Verifying Software Update catalog configuration.

    Apr  7 07:35:15 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: Performing scheduled sync.

    Apr  7 07:35:15 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: 

    Apr  7 07:35:15 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: swupd_syncd 10.9 (156) for OS X Server 10.9 (Darwin/x86_64)

    Apr  7 07:35:15 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: ========== Sync Started ==========

    Apr  7 07:35:15 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: Checking service data location: /Volumes/Repository/Library/Server/Software Update/Data/html

    Apr  7 07:35:15 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: Waiting for service data volume...

    Apr  7 07:35:22 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: Retrieving catalog list

    Apr  7 07:35:28 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: Retrieving deprecated udpates list

    Apr  7 07:35:29 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: Retrieving remote catalog (SECURE): index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

    Apr  7 07:35:31 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: Retrieving remote catalog (SECURE): index-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

    Apr  7 07:35:32 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: Retrieving remote catalog (SECURE): index-lion-snowleopard-leopard.merged-1.sucatalog

    Apr  7 07:35:34 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: Retrieving remote catalog (SECURE): index-leopard-snowleopard.merged-1.sucatalog

    Apr  7 07:35:36 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: Updating local catalog: index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

    Apr  7 07:38:10 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: * Auto-copy (ALL) option is ON.  Applying option to eligible products.

    Apr  7 07:38:10 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: * Auto-enable option is ON.  Applying option to eligible products.

    Apr  7 07:38:11 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: Updating local catalog: index-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

    Apr  7 07:39:32 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: * Auto-copy (ALL) option is ON.  Applying option to eligible products.

    Apr  7 07:39:32 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: * Auto-enable option is ON.  Applying option to eligible products.

    Apr  7 07:39:33 it0038-mmd.coveroregon.us swupd_syncd[186] <Info>: Updating local catalog: index-lion-snowleopard-leopard.merged-1.sucatalog

  • jnameth Level 1 Level 1 (0 points)

    I also have the following within my catalogs.sucatalog file:

     

     

    <?xml version="1.0" encoding="UTF-8"?>

    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

    <plist version="1.0">

    <dict>

        <key>CatalogsList</key>

        <array>

            <string>http://it0038-mmd.coveroregon.us:8088/content/catalogs/others/index-mountainlion -lion-snowleopard-leopard.merged-1.sucatalog</string>

            <string>http://it0038-mmd.coveroregon.us:8088/content/catalogs/others/index-10.9-mountai nlion-lion-snowleopard-leopard.merged-1.sucatalog</string>

            <string>http://it0038-mmd.coveroregon.us:8088/content/catalogs/others/index-lion-snowleo pard-leopard.merged-1.sucatalog</string>

            <string>http://it0038-mmd.coveroregon.us:8088/content/catalogs/others/index-leopard-snow leopard.merged-1.sucatalog</string>

        </array>

        <key>PrimaryCatalog</key>

        <string>http://it0038-mmd.coveroregon.us:8088/content/catalogs/others/index-mountainlion -lion-snowleopard-leopard.merged-1.sucatalog</string>

    </dict>

    </plist>

  • MrHoffman Level 6 Level 6 (13,150 points)

    Try the URL listed in the tech note linked earlier.  On the systems just checked, they're all using index.sucatalog.

     

    Track down this error:

    Syntax error on line 288 of /Library/Server/Software Update/Config/swupd.conf:

    DocumentRoot must be a directory

     

    In the local test configuration, that's this line:

     

    DocumentRoot "/Library/Server/Software Update/Data/html"

     

    and it's a directory:

    $ ls -aled /Library/Server/Software\ Update/Data/html

    drwxr-xr-x  9 _softwareupdate  _softwareupdate  306 Apr  7 03:00 /Library/Server/Software Update/Data/html

    $

     

    containing catalog files owned by _softwareupdate.

  • jnameth Level 1 Level 1 (0 points)

    If I try going to the URL http://it0038-mmd.coveroregon.us:8088/index.sucatalog I get a 404 Not Found error message stating "The Requested URL /index.sucatalog was not found on this server.

     

    If I try going to the URL http://it0038-mmd.coveroregon.us:8088/catalogs.sucatalog I get the contents that I pasted above in my last post regarding that file.

     

    I can verify that the path does exist of /Library/Server/Software Update/Data/html on our repository and that within that directory there are the following files:

     

     

    catalogs.sucatalog

    catalogs.sucatalog.alternate

    content (folder that looks like it is housing all of the updates from SUS)

    index-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

    index-leopard-snowleopard.merged-1.sucatalog

    index-lion-snowleopard-leopard.merged-1.sucatalog

    inded-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

     

     

    Within the swupd.conf file on line 288 the following is listed:

     

     

    DocumentRoot "/Volumes/Repository/Library/Server/Software Update/Data/html"

     

     

    Now perhaps this is grasping for straws but just something I noticed and I don't know.. maybe this will help. 

     

    On my local machine there is the /Library/Server/Software Update/Config/swupd.conf file that has the information I listed above.  On my external repository there is a path (again as listed above) of /Volumes/Repository/Library/Server/Software Update/Data/html that has updates within that directory... however there is no Config/swupd.conf directory on the respository under the Software Update folder.  Does that need to be there since that's where the updates are housed?  I would think not since the file on the local machine is pointing to the external repository for it but just wanted to make sure it was out there.

     

    Regarding the last part of what you put with the "and it's a directory" section forgive me but I don't see that anywhere nor know how to pull that information.