AFP / Profile Manager / Wiki problems Lion OSx 10.8.5 Server 2.2.2

I experience strange problems with our AFP sessions after upgrading to 10.8.5 / 2.2.2 where sessions will hang and a second session is opened. Users log out correctly. Seems that iMacs coming out of sleep mode are having this issue more then the ones with sleep disabled.
Most of the time I can solve the issue by having the user logout and then disconnect all the specific sessions in the server.app but sometimes I have to completely disable AFP and enable it again to solve the problem, this action has a lot of impact on th businees though. It also happens that only one session is shown but files remain locked as if there was another session still open.
All my users have their profile on the server so when this happens they cannot open mail etc. due to files being in use by the 'hanging' session already.
The AFP error log does not show me any errors at all, other then the shutdowns of AFP to make it all work again:
Oct 9 11:36:00 proserver AppleFileServer[1176] <Info>: Server shut down.
Oct 11 10:15:38 proserver AppleFileServer[1022] <Info>: Server shut down.
Oct 12 12:43:25 proserver AppleFileServer[35223] <Info>: Server shut down.
Oct 14 13:30:39 proserver AppleFileServer[53368] <Info>: Server shut down.
Oct 15 09:52:02 proserver AppleFileServer[52848] <Info>: Server shut down.
Since the upgrade I also have a non-working Profile manager / Wiki with the infamous "Error reading settings" error. For this I see the following errors in the logs:
Oct 15 14:07:14 proserver.repod.nl Server[23468]: Error: The server '127.0.0.1' reported an error while processing a command of type: 'readSettings' in plug-in: 'servermgr_devicemgr'. Error: Error Domain=servermgr_devicemgr Code=1 "PrepareDatabase: 'devicemgrd -migrate' status = 1" UserInfo=0x7fd70ee67bb0 {NSLocalizedDescription=PrepareDatabase: 'devicemgrd -migrate' status = 1}
d[1] (com.apple.postgres[28978]): Exited with code: 1
Oct 15 14:07:16 proserver com.apple.launchd[1] (com.apple.postgres): Throttling respawn: Will start in 10 seconds
Oct 15 14:07:17 proserver ProfileManager[28974]: Retry #1 of database migration...
Oct 15 14:07:19 proserver ProfileManager[28974]: Retry #2 of database migration...
Oct 15 14:07:21 proserver ProfileManager[28974]: Retry #3 of database migration...
Oct 15 14:07:22 proserver ProfileManager[28974]: Retry #4 of database migration...
This is a production server with 12 people using it daily so for me it is not the first option to take the server down and start hassling with it so I would be pleased if someone could help me to sort these issues without having to interrupt the day2day business here.
If any more information is needed, please let me know, I'll be more then happy to supply it.

Dear Alfi66, i have same issue as yours. Do you have any progress with resolving it?

Similar Messages

How to reset profile manager on mountain lion?

I never manager to get profile manager working on Lion Server.
I was expecting to do a clean install on my mac mini server, I couldn't.
Before reformating the partition any simpler tip?
May be I messed up the certificate as well.
When I try to enroll a compter (e.g. the mac mini server itself) via the web interface, I get the error message:
profile installation failed
could not download the identity profile from the encrypted profile service. The credentials within the device enrollment profile may have expired.
For resetting, I tried in Terminal
cd "Server HD"
sudo sh /usr/share/devicemgr/backend/wipeDB.sh
and I get :
No such file or directory
Thanks in advance

I'm having this same issue.
I can install the Trust Profile
but when I go to Enroll Device, I get:
profile installation failed
could not download the identity profile from the encrypted profile service. The credentials within the device enrollment profile may have expired.
what I've done:
backed up my Device Manager database
wiped the database
re-setup Device Manager
replaced the database
tried to Enroll Device and failed (same error)
wiped the database
re-setup the Device Manager
tried to Enroll Device and failed (same error)
I've tried recreating my ssl certs
Ive tried running it without code signing certs
I refuse to wipe my entire Open Directory
is there any to get this working or am I going to need to go third party to manage my Mac-only shop?

Trouble accessing Profile manager, Wiki, and iCal from Safari

I have Lion Server.
When I try to access the Profile Manager, a Wiki User or iCal from https://server.local/wiki, I get the following error and can anyone help me determine why:
Service Temporarily Unavailable
The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.
Apache/2.2.19 (Unix) mod_ssl/2.2.19 OpenSSL/0.9.8r DAV/2 Server at server.local Port 443
I can access https://server.local/wiki, but not https://server.local/wiki/profilemanager for example.
I checked for postgres issues, not sure if I am having something going wrong there or not.
$ psql -U _postgres
psql: FATAL: database "_postgres" does not exist
$ psql -U _postgres collab
psql (9.0.4)
Type "help" for help.
collab=#
Also, does this prove that Apache is running?
server:~ allen$ ps ax | grep /usr/sbin/http | grep -v "grep"
171   ?? Ss     0:00.06 /usr/sbin/httpd -D FOREGROUND -f /etc/swupd/swupd.conf
173   ?? S      0:00.00 /usr/sbin/httpd -D FOREGROUND -f /etc/swupd/swupd.conf
983   ?? Ss     0:00.21 /usr/sbin/httpd -D FOREGROUND -D MACOSXSERVER -D WEBSERVICE_ON -D WEBSHARING_ON
1266   ?? S      0:00.10 /usr/sbin/httpd -D FOREGROUND -D MACOSXSERVER -D WEBSERVICE_ON -D WEBSHARING_ON
1267   ?? S      0:00.08 /usr/sbin/httpd -D FOREGROUND -D MACOSXSERVER -D WEBSERVICE_ON -D WEBSHARING_ON

I'm not sure how to move messages, so I am reposting this to the Lion Server forum.

HT1822 [Add Certificate...] hangs in Profile Manager 2 (Mountain Lion)

I just installed Mac OS X Server on Mountain Lion for the sole purpose of configuring a new network profile for my workplace. After configuring my system to enable Profile Manager, I launched the Profile Manager web interface, logged in, went to Device Groups, and created a new profile.
Settings are to include:
General (required): includes general info about the profile itself
Network: configure profile for both wired and wireless 802.1x authentication
Certificates: include two certificates to trust for authentication to the network.
I was able to easily configure General and Network. However, whenever/however I attempt to upload the required certificates, the browser window displays "Uploading <name of certificate file.cer>...", with the spinning indicator and does nothing else, regardless of how long I leave it alone.
Thoughts appreciated. Considered firewall, DNS, etc issues but haven't found anything that may be getting in the way.
Thanks.

I'm having this same issue.
I can install the Trust Profile
but when I go to Enroll Device, I get:
profile installation failed
could not download the identity profile from the encrypted profile service. The credentials within the device enrollment profile may have expired.
what I've done:
backed up my Device Manager database
wiped the database
re-setup Device Manager
replaced the database
tried to Enroll Device and failed (same error)
wiped the database
re-setup the Device Manager
tried to Enroll Device and failed (same error)
I've tried recreating my ssl certs
Ive tried running it without code signing certs
I refuse to wipe my entire Open Directory
is there any to get this working or am I going to need to go third party to manage my Mac-only shop?

Devices not showing in profile manager after updating to OSX Server 3.1.1

Hey,
After the upgrade I restored the Open Directory just fine. The Profile Manager hence works okay, but I just can't find a way to retrieve the devices info I had setup already... pls help...

Hey,
After the upgrade I restored the Open Directory just fine. The Profile Manager hence works okay, but I just can't find a way to retrieve the devices info I had setup already... pls help...

Profile Manager/Contacts/Mountain Lion Server 10.8

Hello All,
I am running a small network with a combination of laptops, desktops, iPads, iPhones etc. I finally upgraded to 10.8 Server and am running into a few problems. I installed, added a trusted SSL cert, and started services without a problem. I propogated a profile consisting of mail, contacts, calendar, and chat to an iPad without a problem. All worked as expected. I then tried to propogate to a new MacAir and received a failure notice indicating something along the lines that the installation failed due to an inability to autodiscover services. Please forgive me as I wont be back to the server for a few hours and therefore cant put the exact verbiage in now. Next, I tried to connect the laptop to the server through the very simple gui process. Again, I recieve an error. I have made sure that all relevant ports are open and that the contact server is running without errors. I'm hoping someone might have experienced something similar.

If you are running OS X 10.8.1 and want to upgrade to 10.8.2 this is normally done by selecting 'Software Update' from the Apple menu. This will then tell the Mac to get the update from the App store.
This updates the basic operating system of the Mac, the server software is now separate to the operating system. Again to upgrade the server software you select 'Software Update' and it will look in the App store for any available updates.

Mountain Lion Server Profile Manager error

I recently setup a Mountain Lion server (10.8.2) to manage multiple ipads and Macs with Profile Manager in a PC oriented Active Directory environment.
I setup an SSL certificate and bound to the organization's active directory (with Directory Utility) and that all works fine.
We are now simply trying to assign the rights to individual users to use Profile Manager and running into trouble.
Using the Server app, we click on a user (or group) and then go to assign rights (with the gear menu).
The list of items to assign is supposed to come up.
Instead the list never comes up.
Can anyone shed any light on what we have to do?

What are you trying to do
Assign what users can use the profile managers web interface
or restrict what users can and can't have devices registered to their name in profile manager

Beginner needs help to fix server web, wiki, profile manager

Hi All,
I seem to have messed up my server by changing settings for the hostname.
Now I cant get profile manager, wiki, web to show in Safari anymore.
Can someone please help me with a step by step walkthrough?
Greatly appreciate any help I can get

I have had the same thing and a hostname change is killing for your configuration.
What I suggest is that you backup your stuff and reinstall your server with the correct hostname if possible.

Access Mac Mini Server (profile management) through reverse proxy

Hi,
Newbie in Mac's world and yet trying to make it more complicated as it is.
As we recently (last month) decided to equip our sales force with iPads, they were configured through Apple Configurator tool running on a dedicated Mac Mini Mountain Lion.
Now, I'd be keen in moving this configuration to the Profile Manager, part of the OSx Server plugin. So far so good.
Problem is the following : another web server is already on the LAN using both 80 and 443 ports. So all incoming traffic on those ports was routed to this other server. As Mac Mini Server default http/s ports may not be altered, I installed a reverse proxy server (Oracle VM - Ubuntu 12.04LTS - pound), configured to deal differently traffic on those ports according to the domain name (host) of the web request (header). Each 'local' server has been allocated a domain name. Just to be clear, traffic is now routed by the WAN/LAN router, for those ports, towards the reverse proxy, configured to reroute the traffic to the correct destination.
So far so good, it works like a charm, except... as soon as we enter https protocol on Mac Mini Server Profile Manager.
Access from an iDevice to the Mac Mini Server Profile Manager login page is fine, but as soon as password is confirmed, safari is pending and finally a message 'An internal serer error occured. Please try later again' appears.
Looking to both reverse proxy system log and Mac Mini profilemanager.log files to trace the problem, the following lines are produced at this particular moment :
reverse proxy system.log
Jan 15 14:44:03 reverseproxy pound: 91.... GET /devicemanagement/console/apple_theme_v2/en/da56af0a69e733b259dac3991419fa928b4 94a56/resources/images/sprites/me_controls.png HTTP/1.1 - HTTP/1.1 200 OK
Jan 15 14:44:03 reverseproxy pound: 91.... GET /auth?redirect=http://osxsrv.fiks.net/devicemanagement/api/authentication/callback HTTP/1.1 - HTTP/1.1 302 Moved Temporarily
Jan 15 14:44:04 reverseproxy pound: 91.... GET /devicemanagement/api/authentication/callback?auth_token=336952DE-BDDE-4390-82F 7-8475B79FB2D3 HTTP/1.1 - HTTP/1.1 302 Moved Temporarily
Jan 15 14:44:04 reverseproxy pound: (b7680b40) e500 can't read header
Jan 15 14:44:04 reverseproxy pound: (b7680b40) e500 response error read from 192.168....:443/GET /profilemanager/ HTTP/1.1: Success (0.007 secs)
Jan 15 14:44:08 reverseproxy pound: 91.... POST /devicemanagement/api/magic/get_updated HTTP/1.1 - HTTP/1.1 200 OK
OSx Server profilemanager.log
Jan 15 14:44:05 osxsrv ProfileManager[1748] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:05) [POST]Jan 15 14:44:05 osxsrv ProfileManager[1749] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:05) [POST]
Jan 15 14:44:06 osxsrv ProfileManager[1748] <Info>: Completed in 492ms (View: 0, DB: 6) | 200 OK [http://osxsrv.../magic/do_magic]
Jan 15 14:44:06 osxsrv ProfileManager[1749] <Info>: Completed in 687ms (View: 0, DB: 5) | 200 OK [http://osxsrv..../magic/do_magic]
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Completed in 4ms (View: 1, DB: 14) | 403 Forbidden [http://osxsrv..../magic/do_magic]
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Completed in 45ms (View: 1, DB: 43) | 403 Forbidden [http://osxsrv..../magic/do_magic]
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Completed in 55ms (View: 0, DB: 1) | 403 Forbidden [http://osxsrv..../magic/do_magic]
Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Processing AuthenticationController#callback (for 91.... at 2013-01-15 14:44:08) [GET]
Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Redirected to https://osxsrv..../profilemanager/
Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Completed in 149ms (DB: 5) | 302 Found [http://osxsrv..../authentication/callback?auth_token=[FILTERED]]
I guess the '302 Found' is causing or explaining the problem.
I agree this might not be a Mac issue, so I still knock your doors hoping some of you could at least give a hint for what to search for !
If the pound configuration file is of interest, just ask, but this is pretty trivial, saying basically listen these protocols (http/https) on these ports (80/443) and according to Header content (check destination host) and reroute packet to LAN device (with given LAN IP address).
As the default port(s) of the Mac Mini Web Services may not be altered (so far I know), I guess I am stuck using 80 and 443 anyway.
Maybe should I invest time in changing my other apache server ports to some more exotic 8080 or 88 or whatever so Mac Mini Server Profile Manager default ports 80 and 443 are maintained and can be easily and directly rerouted to my Mac server without any reverse proxy along the way.
Thanks in advance for your help
Alx

HI All,
i'm also using reverse proxy technique to publish my server to the internet. The ip is used by twice domains. The problem is by using the profile manager
after login it redirects the url to the Local Area network addresse instead to the domain.
How to configure this on OS X Server and the Profile Manager Service?
Kind Regards
Oemer

Profile Manager Broken after Migration to OS X Server 10.8

After migrating from Lion Server to OS X Server 10.8, Profile Manager will not start. Server.app -> Profile Manager reports "Error Reading Settings". Apache Error log reports:
[Thu Aug 30 13:32:29 2012] [error] (61)Connection refused: proxy: HTTP: attempt to connect to 127.0.0.1:3329 (127.0.0.1) failed
[Thu Aug 30 13:32:29 2012] [error] ap_proxy_connect_backend disabling worker for (127.0.0.1)
I tried shutting down all web services (Profile Manager, Wiki, Web), ran "serveradmin command web:command=restoreFactorySettings", then turned back on Web and Profile Manger... same problem.
Any ideas what, exactly, is wrong and how to fix it?

this might not be true in your case but when I've seen "error reading setting"it has been a permission problem on the Library/Server/profilemanager folder (or other service)
Profile manager should have owner _devicemgr RW, group _devicemgr R, everyone R
same for the Data folder inside.
Might be forth checking

Why can't I turn profile manager on?

I just downloaded Lion Server and I am a complete novice. There is a pretty good chance I am doing something wrong, but basically I am trying to set up profile manager so I can get VPN access from my Mac at work to my network at home. From what I understand, profile manager can make this happen with ease, but for whatever reason I cannot turn profile manager on. It says its on in Server.app, but when I click to get to the web interface, it says the service is turned off. Anyone have any advice on how I can resolve this problem?
Thanks in adavnce.

Have you tried connecting with HTTP instead of HTTPS?

Purge a device from Profile Manager

Is there a way to completely remove any record of a device from profile manager ?
Problem: I have two phones which were managed/supervised by Profile Manager/Configurator but were then reset and deleted from Profile Manager. BUT for some reason their SIMs have been swapped so when I reinstate them on Profile Manager it gets confused as it seems to have "remembered" each phone but using its old number i.e. the number on the SIM swapped to the other phone. As a result we cannot push any settings to those phones (they do enrol though).
Any ideas?

You're not going crazy :)
There were a few posts about this problem along with a fix being posted
The fix consisted of manually purging the sim/iphone records from the profile manager database via terminal
From memory the method changed when mountain lion was released, the old method didn't work
Sorry I can't find the post that referred to the fix
This problem persisted from lion to mountain lion, I'm not sure if it's been fixed

How to Resolve Bitnami/MAMP Conflict with Profile Manager

I've been working on a new Lion Server for several weeks, and most of my services work great. However, I want to set up several development environments for WP, Drupal, and Magento, among other things. I prefer to use something like MAMP Pro or, in this case, Bitnami stacks for my various environments. However, this machine currently is used for managing Wiki, Profile Manager, and Device Manager, among other things. Of course, if you activate the Bitnami MAMPstack, that poses an issue for Profile Manager, as both use the 80 and 443 ports, I presume. So, the question is how can I configure Lion Server to run Bitnami (or MAMP Pro, as an alternate possibility) and not break Profile Manager, Wiki, Device Manager, etc.?

Let me edit the statement a bit. Device Manager is the term that I intuitively have attached to the link https://server/mydevices, which is nothing more than a web interface for adding profiles to your Mac and iOS devices. Apple doesn't call it that, but I have taken to doing so, so when I'm referring to it, that's what it is.
Anyway, I haven't tried Wiki on its own, but I know that if I activate MAMP, or BitNami, and I run Profile Manager, it is inaccessible. Obviously, there is a conf setup, or something I am missing here, but I'm not finding it in the server documentation, if it exists at all.

Setting apn with Profile Manager

apn profiles in Profile Manager seemes malformed.
This is a snippet of how it looks when downloaded from Profile Manager:
<dict>
          <key>DefaultsData</key>
          <dict>
                    <key>apns</key>
                    <array>
                              <dict>
                                        <key>apn</key>
                                        <string>mytestapn</string>
                                        <key>proxy</key>
                                        <string></string>
                                        <key>proxyPort</key>
                                        <string></string>
                              </dict>
                    </array>
          </dict>
</dict>
<dict>
          <key>DefaultsDomainName</key>
          <string>com.apple.managedCarrier</string>
</dict>
when I create a .mobileconfig file with IPCU, the xml looks like this:
<dict>
          <key>DefaultsData</key>
          <dict>
                    <key>apns</key>
                    <array>
                              <dict>
                                        <key>apn</key>
                                        <string>mytestapn</string>
                                        <key>proxy</key>
                                        <string></string>
                                        <key>proxyPort</key>
                                        <integer></integer>
                              </dict>
                    </array>
          </dict>
          <key>DefaultsDomainName</key>
          <string>com.apple.managedCarrier</string>
</dict>
that is, in profile Manager, DefaultsDomainName key is contained within its own dict tag, and in IPCU it is located together with the DefaultsData key.
when I try to deploy the profile to a device using profile manager, the job failed with MCPayloadErrorDomain
Has anyone had any luck on setting apn settings with Profile Manager?

Just updated OSX - problem solved

Profile manager wireless issue

Hi all,
Having a problem with profile manager on Mountain Lion, I am unable to connect to the user portal area via my wireless network.
But it works perfectly fine from another computer on the lan or a different vlan.
Does anybody have any ideas????

What is profile manager?

AFP / Profile Manager / Wiki problems Lion OSx 10.8.5 Server 2.2.2

Similar Messages

Maybe you are looking for