Profile Manager does not send APN(?)

I got only this on first terminal:

root# tail -n 0 -f /Library/Logs/ProfileManager/devicemgrd.log | grep APNS

1:: [42833] [2018/04/06 10:03:25.511] Incoming request: activateAPNS

0:: [42833] [2018/04/06 10:03:27.609] APNS topic = com.apple.mgmt.XServer.[UUID]

I had removed UUID (or at least it looks like some kind of UUID) because I'm not sure if it's safe to publish it.

Unfortunately commands used in second terminal does not help. Result of last command was:

root# ./dm_tool activateAPNS

Sending command activateAPNS

Response: {"result"=>"ok"}

Still, when I try to use "Update Info" or even "Lock" command there is no extra network traffic to Apple's servers. Endpoints are still connecting to server "when they want".

Also I tired this:

root# ./dm_tool sendPushNotifications

Sending command sendPushNotifications

Response: {"result"=>"ok"}

Unfortunately this does nothing in my case.

Thanks for answer. Unfortunately this doesn't give me any new information. I grep through all /var/log/system.log(.N.gz) files and there is no even one line containing "apspd". There is only "applepm com.apple.apsd[NNN]: = mps_limit 0" after every "killall apsd" used to reload process to turn on/off logging.

Also as I wrote in my first post I test connection to Apple's servers with app "Push Diagnostics", but I checked if curl will work and I get handshake failure - error (35). Also I check on netstat and there is always established connection to one of Apple's server IP (17.0.0.0/8).

I started tcpdump on all Apple's IPs and it shows me that server is connecting from time to time to NTP server, but when I am requesting "Update Info" in Profile Manager there is no traffic to Apple's server. Also there is some extra traffic from time to time but it does not look like sending requests from Profile Manager (on port 443 or 5223 but without any "reaction" on my testing endpoint). It looks more like keepalive.

Thanks for answer. Unfortunately this also does not help. In system.log I see only entry about kill 9 on apspd. After that I made two requests in PM. One for "Update Info", second for "Lock" but no entry for apspd for this two requests. Also I have checked if there is new log file for apspd but I did not see anything that would match this.

Lot of lines like these:

1:: [45094] [2018/04/09 11:13:31.041] Sending 4 Push Notifications:

1:: [45094] [2018/04/09 11:15:38.385] Sending 1 Push Notifications:

1:: [45094] [2018/04/09 11:16:09.045] Sending 1 Push Notifications:

1:: [45094] [2018/04/09 11:17:40.638] Sending 1 Push Notifications:

Sometimes:

1:: [42833] [2018/04/06 10:55:11.736] Incoming request: sendPushNotifications

Still there is no even one entry in /var/log/system.log containing 'apspd'. Also I'm sure that there is no MITM mechanism in our network. Also problem exist when using smartphone as hotspot. Beside that, while connected to company network on endpoint I can see with netstat that there is established connection to Apple's server on port 5223 and according to docs this port is used to communicate with APNs.

Well, still I need to looking for solution, maybe there is anyone with any other idea what is the problem.

@mscott_mdm, thanks you tried to help me 😉

I'm aware that port 5223 is used for the receiving of push notifications. But what I wrote prove that endpoints are able to connect to Apple's server at this port.

About port 2195, 2196 and 443, I ran tcpdump on MacOS and on router. I was looking for connections to network 17.0.0.0/8 and to ports 2195, 2196 (according to docs these are for sending push notifications from Profile Manager) and 443. When I requested in Profile Manager for "Update Info" for my testing MacBook there was not even one packet sent from MacOS to port 2195, 2196 or 443. So problem still exist somewhere in MacOS Server. If this would be a problem with network filtering then I would be able to "catch" at MacOS packet sent from MacOS Server to Apple's server.

Ok. Now the most confusing part. Trying to find some clues so I'm looking for any file with logs that may help. Meanwhile made request to "Update Info". Completed almost in no time. So I made second request for "Lock". Also completed almost in no time. I turn on tcpdump, made another request. There is traffic at port 2195 to Apple's IP. I didn't do anything more than looking for more information (no configuration changes etc.) since my last post.

Question is for how long it will work, because now it looks like everything works fine.