Is it possible Messages Settings break Profile Manager?

I've recently been playing about with the Messages app in ML and ML server.
I've got everything working manually, as in going to each machine, logging in as the user and adding their credentials to the Messages app.
I'm trying to automate this using profile manager, I've done simialr for Mail settings but the profile never succeeds. Always fails.
Removing the Messages component from the Profile makes everything work again.
Is this possible? I don't see how it could be any of the information that I am typing in the boxes that breaks it, I've been using %short_name% for the use names, this works for the Mail settings, could this be breaking it?

Hi,
Partner profile setting are actually soft configuration and you cannot transport them.
You have to set partner profile in all stages.
Nilesh

Similar Messages

Messages Settings in Profile Manager 2.1 Mountain Lion

Just want to let anyone and everyone know about something that I've found in Profile Manager.
I have been messing about with Messages, trying to get it set up without any success but I have found something that could be useful to anyone else in the same situation.
When applying messages settings to a Profile it seems to spoil all other settings, or at least Dock settings.
I set up my Dock and other settings for a group and all was fine. I then added the messages settings to the group and all of the Dock settings were removed leaving just Finder and the Trash Can in the dock.
Removing the Messages setting restored the previous Dock settings and everything is back to normal. Perhaps I am doing something wrong but this seems to be a bit of a bug with Profile Manager.
On a side note, I'd really appreciate some help with setting Messages up. I work in a school where it would be great if the teachers could use Messages as instant messaging between classrooms.

Did you ever get this resolved? This error is usually related to DNS, hostname, or Open Directory configuration. Let me know if you still need help.

Set advanced IMAP settings with profile manager?

I've finally gotten profile manager working successfully so that my employees can enroll their iOS devices and laptops for easy setup of our company services. However, there are two advanced IMAP settings we need to manage that are not available in the Profile Manager controls.
Is there a way to crack open a profile source and add in the keys for advanced IMAP settings? Specifically, i need to set "Remove Deleted Messages" to "Never" and assign an alternate mailbox for "Deleted Mailbox" under "Mailbox Behaviors"
Thanks for any help or advice!

While I was not at the time trying to do it via Profile Manager I did previously look at trying to enable Location Services via a script. Unfortunately I found it too hard or more accurately I failed to do this. I ended up 'cheating' by logging in on a test Mac, manually setting up Locations Services the way I wanted including most importantly setting the Security & Privacy settings to allow a specific application to use Location Services. I then saved a copy of the relevant configuration file which is -
/private/var/db/locationd/clients.plist
I then as part of my DeployStudio workflow to image fresh computers included a step to copy this to the correct location on the fresh computer, thereby 'restoring' the settings.
So the short answer is that /private/var/db/locationd/clients.plist is the file but the structure is such that a simple defaults write is not possible.
Let me know if you get anywhere with this.

Complete list of settings in Profile Manager

Hi!
I'm looking for a complete list of the settings available in the Profile Manager for iOS devices.
Restrictions
Push Apps
Push books and PDF's
Passcode policy
etc. etc.
So, is there a list out there with all the settings and features of Profile Manager with iOS?
Thanks!

Apple has a good developer page on most of the payloads:
https://developer.apple.com/library/ios/featuredarticles/iphoneconfigurationprof ileref/introduction/introduction.html
Sadly, Apple does not provide many examples nor a clear explanation of the management levels. But this is a great reference and now it includes OS X payloads, despite the URL name. Sadly, not all profiles are listed yet but Apple seems to be revising the document.
Reid
Apple Consultants Network
Author "Yosemite Server – Foundation Services" :: Exclusively available in Apple's iBooks Store
Author "Mavericks Server – Foundation Services" :: Exclusively available in Apple's iBooks Store
Author "Mavericks Server – Control and Collaboration" :: Exclusively available in Apple's iBooks Store

Is there an easier/more-automated way to create user settings in Profile Manager?

I'm setting up a Mavericks Server and am setting up the settings for each user within the Profile Manager. I'm finding somewhat tedious to have to enter all of the server and account information per service per user. Seeing that it knows the details of the server it's running on – and the user for whom I'm setting up the profiles, is there no automatic way to produce a settings bundle for each user? At the very least, the server hostname and username should be prefilled.

What settings are you setting in the profiles? You can set a general setting that is available to all users, and also create various device configurations and add devices to them. I personally have not found much use for user specific profiles within profile management.

Os x Server 3.1 breaks Profile Manager

Hi all,
since i update to server 3.1, the Profile Manager wont start.
In the ive got these Error:
0:: [245] [2014/03/20 20:15:14.725] Waiting for postgres to startup....
0:: [245] [2014/03/20 20:15:18.445] +[PGConnection reloadPreferences]: DBDebug = NO, DBLogNotices = NO, DBLogSQL = NO, DBMonitor = NO
0:: [245] [2014/03/20 20:15:29.432] Profile Manager service STOPPED
1:: [245] [2014/03/20 20:15:29.927] Incoming request: noOp
1:: [245] [2014/03/20 20:15:29.928] Incoming request: getWebAppState
1:: [245] [2014/03/20 20:15:29.963] Registering for network reachability notifications to "gateway.push.apple.com".
0:: [245] [2014/03/20 20:15:29.981] Profile Manager service stopped.
0:: [245] [2014/03/20 20:15:29.987] APNS topic = com.apple.mgmt.XServer.dcbf90a0-c0ba-4dee-bcb6-39de366d4e87
1:: [245] [2014/03/20 20:15:30.681] >>> networkSettingsChanged: "gateway.push.apple.com" is apparently reachable (flags = 0x2)
1:: [245] [2014/03/20 20:16:03.409] Incoming request: getWebAppState
0:: [245] [2014/03/20 20:16:03.727] Profile Manager service stopped.
1:: [245] [2014/03/20 20:16:07.547] Incoming request: readSettings
1:: [245] [2014/03/20 20:16:07.798] Incoming request: readAppDistributionSettings
1:: [245] [2014/03/20 20:16:07.856] Incoming request: readSimplifiedDeviceEnrollmentSettings
1:: [245] [2014/03/20 20:25:39.511] Incoming request: readSettings
1:: [245] [2014/03/20 20:25:39.578] Incoming request: readAppDistributionSettings
1:: [245] [2014/03/20 20:25:39.637] Incoming request: readSimplifiedDeviceEnrollmentSettings
1:: [245] [2014/03/20 20:25:40.054] Incoming request: readSettings
1:: [245] [2014/03/20 20:25:40.116] Incoming request: readAppDistributionSettings
1:: [245] [2014/03/20 20:25:40.170] Incoming request: readSimplifiedDeviceEnrollmentSettings
1:: [245] [2014/03/20 20:25:41.165] Incoming request: writeSettings
0:: [245] [2014/03/20 20:25:41.508] -[NSString(devicemgr_Additions) dateFromOpenSSLString]: 'Jan 27 19:45:36 2015 GMT'
0:: [245] [2014/03/20 20:25:41.672] -[Settings setSigningState:]: self.signing_org = cgrx
0:: [245] [2014/03/20 20:25:41.679] Loaded strings for locale 'de'.
0:: [245] [2014/03/20 20:25:42.105] EXCEPTION: Postgres <-[PGConnection executeSQL:withParams:] (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-864.18/Compiled/Fra mework-Models/Postgres/PGConnection.m:421): "Postgres error 23503 (ERROR: insert or update on table "internal_tasks" violates foreign key constraint "internal_tasks_internal_task_id_fkey"
    DETAIL: Key (internal_task_id)=(4) is not present in table "internal_tasks".
    CONTEXT: SQL statement "INSERT INTO internal_tasks (internal_task_id, profile_substitution_cache_id) VALUES(p_it_id, psc.id) RETURNING id"
    PL/pgSQL function _dm_internal_psc_generation_task(profile_substitution_caches,integer,integer) line 19 at SQL statement
    SQL statement "SELECT _dm_internal_psc_generation_task(p, NEW.signing_certificate_id)
    FROM profile_substitution_caches AS p
    WHERE p.profile_cache IS NOT NULL
    AND p.signing_certificate_id <> NEW.signing_certificate_id"
    PL/pgSQL function _dm_trigger_after_settings_update() line 30 at PERFORM
    )">
0:: [245] [2014/03/20 20:25:42.108] Caught unhandled exception -[PGConnection executeSQL:withParams:] (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-864.18/Compiled/Fra mework-Models/Postgres/PGConnection.m:421): "Postgres error 23503 (ERROR: insert or update on table "internal_tasks" violates foreign key constraint "internal_tasks_internal_task_id_fkey"
    DETAIL: Key (internal_task_id)=(4) is not present in table "internal_tasks".
    CONTEXT: SQL statement "INSERT INTO internal_tasks (internal_task_id, profile_substitution_cache_id) VALUES(p_it_id, psc.id) RETURNING id"
    PL/pgSQL function _dm_internal_psc_generation_task(profile_substitution_caches,integer,integer) line 19 at SQL statement
    SQL statement "SELECT _dm_internal_psc_generation_task(p, NEW.signing_certificate_id)
    FROM profile_substitution_caches AS p
    WHERE p.profile_cache IS NOT NULL
    AND p.signing_certificate_id <> NEW.signing_certificate_id"
    PL/pgSQL function _dm_trigger_after_settings_update() line 30 at PERFORM
1:: [245] [2014/03/20 20:25:53.541] Incoming request: readSettings
1:: [245] [2014/03/20 20:25:53.605] Incoming request: readAppDistributionSettings
1:: [245] [2014/03/20 20:25:53.664] Incoming request: readSimplifiedDeviceEnrollmentSettings

Great, now i have a new problem:
sudo /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/wipeDB .sh
Password:
***    Failed to create/update new Profile Manager database!     ***
*** Please check /Library/Logs/ProfileManager/migration_tool.log ***
*** for more information. Profile Manager will be non-functional ***
*** until a new database can be successfully created/updated.    ***
[1034] [2014/03/23 09:56:07.266] -[SULogFileCollection setGlobalLogLevelPrefix:]: YES
0:: [1034] [2014/03/23 09:56:07.268]
    migration_tool-864.18 (PID:1034, OS:13C64, SERVER:13S4138, ARCH:x86_64) starting
    LA: migration_tool --wipeDB
    Log verbosity level = 1
    UID = 220, EUID = 220
1:: [1034] [2014/03/23 09:56:13.050] DropPostgresDatabase RESULT:
    ————————+—————————————————————————————————————————————————————————————————————— —————————————————————————————————————————————————————————————
    COMMAND | /Applications/Server.app/Contents/ServerRoot/usr/bin/dropdb devicemgr_v2m0 -h /Library/Server/ProfileManager/Config/var/PostgreSQL
    WD      | /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr
    ————————+—————————————————————————————————————————————————————————————————————— —————————————————————————————————————————————————————————————
    STATUS | 1
    ————————+—————————————————————————————————————————————————————————————————————— —————————————————————————————————————————————————————————————
    STDERR | dropdb: database removal failed: ERROR: database "devicemgr_v2m0" is being accessed by other users
            | DETAIL: There are 10 other sessions using the database.
    ————————+—————————————————————————————————————————————————————————————————————— —————————————————————————————————————————————————————————————
    STDOUT |
    ————————+—————————————————————————————————————————————————————————————————————— —————————————————————————————————————————————————————————————
0:: [1034] [2014/03/23 09:56:13.050] EXCEPTION: !IF <void DropPostgresDatabase(NSString *__strong) (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-864.18/Compiled/Fra mework-Base/Support/PGUtilities.m:81): "'((status != 0))'">
0:: [1034] [2014/03/23 09:56:13.052] Terminating on unhandled exception void DropPostgresDatabase(NSString *__strong) (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-864.18/Compiled/Fra mework-Base/Support/PGUtilities.m:81): "'((status != 0))'", ? | 140735467216501
    ? | 4437587723
    ? | 4437841481
    ? | 4437841694
    ? | 4437434900
    ? | 140735464949245
    ? | 2
0:: [1034] [2014/03/23 09:56:13.053] ShutdownMigrator: 2014-03-23 08:56:13 +0000
0:: [1034] [2014/03/23 09:56:13.053] BYE

Early on while configuring the Device Management settings in Profile Manager (Mavericks server) I received an error code -1

When I started up the Server application, Profile Manager was not selected as expected. I selected it and started the first step of configuring Device Management in the Settings section. I entered the organization information and went on to the next step which was to Configure an SSL Certificate
I selected a "Self Signed" Cert. Which was the only one of the two choices that made sense. The other being the, com.deploystudio.server - Self signed
Hit next and it processed the info and went to "Finish" I click "Finish" and this is what I get when the setting are confirmed.
I stopped there since I suspect this error will probably come back to haunt me further down the line as if you recall we could not get the Profile to install due to the invalid cert which I suspect has something to do with this code -1 error at the get go. I ran the one command line instruction twice to verify this was not a quirk and the same occurred.
sudo /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/wipeDB.sh

Did you ever get this resolved? This error is usually related to DNS, hostname, or Open Directory configuration. Let me know if you still need help.

IPSEC VPN Settings via Profile Manager

It is not possible to set the following lines via GUI in Apples ProfileManager or via Apple Configurator in the IPSec section:
<key>XAuthPassword</key>
<string>myVPNuserPassword</string>
You can set the lines via GUI in the old iPhone Configuration Program on Windows.
If you can't set the "XAuthPassword", you have to type in the password every time you want to establish the VPN.
We use certificates for device authentication.
Anyone a solution ?
greetings
robin

klatuu wrote:
It is not possible to set the following lines via GUI in Apples ProfileManager or via Apple Configurator in the IPSec section:
<key>XAuthPassword</key>
<string>myVPNuserPassword</string>
You can set the lines via GUI in the old iPhone Configuration Program on Windows.
If you can't set the "XAuthPassword", you have to type in the password every time you want to establish the VPN.
We use certificates for device authentication.
Anyone a solution ?
greetings
robin
Yes, there are two possible solutions.
1. As per my article here http://jelockwood.blogspot.co.uk/2014/03/how-to-do-vpn-on-demand-for-ios-at-zero .html you would use a StrongSwan VPN server and as per my article use the xauth-noauth plugin to prevent it asking for a username and password, it will then only use the client certificate for device authentication.
2. You can use the two keys listed above but you will have to manually edit the mobileconfig file and add them. Therefore you cannot use Profile Manager or Apple Configurator. For this I used iPhone Configuration Utility to create the initial mobileconfig file, and then I used TextWrangler to add the two keys. With a manually produced mobileconfig file I do not believe there is anyway to send it via Profile Manager but you can either email it to the device or make it available via a web server. Other MDM solutions than Profile Manager do allow pushing uploaded mobileconfig files, I used Meraki Systems Manager and pushed my hand edited mobileconfig files 'over the air' to the devices.
It should be noted that if you are authenticating usernames and password against a directory server e.g. Active-Directory, Open Directory or LDAP, then if you enforce password ageing and changes you are going to have to hand edit and resend an updated mobileconfig file with the new password in it. This is why I chose option 1 above for my own situation. It is in theory less secure as it only uses a single basis for authentication - the certificate but I felt this an acceptable trade-off.

How to deploy settings in Profile Manager through Device Groups

When I go to the Profile Manager web page and create a device group and configure the payload settings it doesn't seem to send the profile settings to the Mac devices that are in the group. How do I go about getting this to work so when I get a new device that is enrolled all I have to do is throw it in the group so it will automatically push out the correct payload settings that I configured?

What you're asking should work. You should be able to create a Device Group and adjust the setting for that group. Then when you add a device to that group, the settings will be pushed to the device automatically. So, it leaves me with a few questions for you:
Why don't you think it sends the payload? When you look under "Activity" do you see tasks in the "Active" area or in the "Completed" area... or something else?
What are you trying to change? Setting up email accounts on iPhones will appear right away, but there are other changes (especially on computers) that don't take affect until it restarts (or the user at least logs out and back in).
Are you sure you have devices in your device group? Sorry, probably a really silly question, but under your device group, do you see the devices under the "Members" section?
Are your devices "trusting" your server? Did you add the trust profile to the device when you enrolled it?
Sorry I can't be more help... but I can tell you that you can do what you are asking. We have it set up in our office, and it works really well. We just add the new device to the device group and it does the rest.

Lion Server app not responding(it says Error reading settings under profile manager tab)

Hello,
I have installed Lion server app 10.7.3 but due to some reason i am unable to use it since it gives me an error (Error reading settings)
I have fully made server app functional also added devices but now i cant use the profile manager tab.
Even when i try turning ON the tab it comes back to off state.
Need help.
Regards,
Vikram Madhav Shinde
<Phone number Edited by Host>

I ended up booting to the recovery partition, erasing the hard drive, and starting over.
All is working fine now.

Configuration Profile Custom Settings in Profile Manager

Hi All,
I'm a newbie when it comes to OS X configuration profiles. Does anyone have any resources on customizing or editing configuration profiles?
I've been playing around with Profile Manager for a few days and see the "Custom Settings" tab. I'm curious what kind of things I can customize here. Being a newbie I don't know where to start.... If anyone has any documentation or link to online resource or book recommendation on editing mobileconfig files or creating custom settings with payloads in Profile Manager I'd really appreciate it!! There are a lot of tweeks that I'd like to set on our computers and I'd like to see if I can do these tweeks with configuration profiles.
Thanks in advance for your help!
~Joe

Thanks for posting Brian You're 100% right. It's been noted and the revised article should be published shortly.

Server 3.1 Breaks Profile Manager (PM won't start)

Hi All,
Updated to server 3.1 this am and now Profile manager will not start. When I go to turn it on via the server app, its simple hangs on "starting" for a few minutes then reverts to "Off".
I tried reverting to my backup of 3.0.3, but of course the service updates that are done by 3.1 prevent this.
I'm also not seeing any devicemgr logs in the console.
Any suggestions?

When starting devicemgr from the terminal I get the following errors:
2014-03-18 09:30:40.264 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:42.294 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:44.334 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:46.366 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:50.800 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:52.834 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:55.487 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:57.514 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:59.563 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:31:01.588 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:31:03.600 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:31:05.613 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:31:07.625 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:31:09.642 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:31:14.284 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
Thanks

How to Resolve Bitnami/MAMP Conflict with Profile Manager

I've been working on a new Lion Server for several weeks, and most of my services work great. However, I want to set up several development environments for WP, Drupal, and Magento, among other things. I prefer to use something like MAMP Pro or, in this case, Bitnami stacks for my various environments. However, this machine currently is used for managing Wiki, Profile Manager, and Device Manager, among other things. Of course, if you activate the Bitnami MAMPstack, that poses an issue for Profile Manager, as both use the 80 and 443 ports, I presume. So, the question is how can I configure Lion Server to run Bitnami (or MAMP Pro, as an alternate possibility) and not break Profile Manager, Wiki, Device Manager, etc.?

Let me edit the statement a bit. Device Manager is the term that I intuitively have attached to the link https://server/mydevices, which is nothing more than a web interface for adding profiles to your Mac and iOS devices. Apple doesn't call it that, but I have taken to doing so, so when I'm referring to it, that's what it is.
Anyway, I haven't tried Wiki on its own, but I know that if I activate MAMP, or BitNami, and I run Profile Manager, it is inaccessible. Obviously, there is a conf setup, or something I am missing here, but I'm not finding it in the server documentation, if it exists at all.

Can I use the Profile Manager as an MDM while distributing app through app store?

Is it possible to use the Profile Manager within the OSX Server to provision profiles through apps purchased in the app store?
Ex: userX buys app in the app store, in downloading the app they get enrolled in the MDM / OSX Server I control. They select profile settings within my app and submit to OSX Server (Profile Manager) at which point I send back OTA the provisioned profile for them to upload.
Ex: https://itunes.apple.com/us/app/parentkit/id600618138?mt=8
Thanks for the feedback!

Is this not possible? Is it possible but not allowed?

Profile Manager without Internet connection?

At the company I work we have two networks, one is a normal one and has a connection to the Internet and I already have Profile Manager up and running successfully on this network. The second network is however totally isolated from the outside world and is also not connected to the first network. As MCX preferences are being phased out by Apple it would seem one should use Profile Manager or similar MDM to now manage settings, however as officially this requires push notifications to go via Apple's APNS servers this would not seem possible in this second case.
Is it possible to run a Profile Manager system with Mac clients but without an Internet connection and hence without being able to use push notifications? The client Macs would be on the same isolated LAN as the proposed Profile Manager server. No iOS devices would be involved.

Hi!
I'm not 100% sure but i don't think so.
If i'm not wrong, i'll say that all updates, settings and profiles are sent via push. So, without push the Profile Manager would not function.

Is it possible Messages Settings break Profile Manager?

Similar Messages

Maybe you are looking for