Profile Management Framework
I am developing an application in Java Swing and i have a requirement that i should be able to store some UI related User Preferences locally on client's machine. Some of these preferences could be,
1) To store the last appearance of a table in the application( things like column width, column by which the table was sorted) and to restore the table with same look and feel.
2) To always open the application with the module( a particular window) preferred by the user.
Well, i can always achieve this by writing tons of code. But, I was wondering if Core Java or any of its extensions provide some framework for this purpose so that i can go about my job in a seamless manner. To be more precise, I am looking for some API for UI profile management.
Any ideas/pointers are welcome. Even a reference to a 3rd Party API will be of great help !
-Ganesh
I am trying to do something very similar to this. I recently looked into the Preferences API that comes with JDK 1.4, but we chose a JTree paradigm for our application. Basically what this means is that for most of the nodes, the right panel will display a table/grid. We plan on storing the table layout similar to what you want to do, but this has to be specific to each separate node. That will in turn be a lot of data and the preferences API is not recommended for this.
The other option is to use properties files, but the name/value pair might not be flexible enough.
Finally, we're looking into using XML. The idea being to write an XML configuration file that stores all of the prefernces information. Still need to do further research, but if I find something, will let you know. Do the same.
Wasif
Similar Messages
-
Profile Manager not quite loading...
Hi all,
I have a question about Profile Manager not loading on a fresh install. I've got this working in the past, but don't ask me how as I don't know anymore, plus the conditions were different.
Now when I go to https://server.example.com/profilemanager or /mydevices I can't even log in and it doesn't show anything. The status bar in Safari shows that 5 out of 7 items have been loaded and when I view the source, it shows:
<!DOCTYPE html><html> <head> <script> var _SC_performanceEvents = { headStart: new Date().getTime() }; </script> <meta http-equiv="Content-type" content="text/html; charset=utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=8" /> <meta http-equiv="Content-Script-Type" content="text/javascript" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="default" /> <meta name="viewport" content="initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no" /> <link rel="apple-touch-icon" href="/devicemanagement/console/sproutcore/foundation/en/b74a542f762e55107620d6f19465a 4ec3258c4df/images/sproutcore-logo.png" /> <link rel="apple-touch-startup-image" media="screen and (orientation:portrait)" href="/devicemanagement/console/sproutcore/foundation/en/b74a542f762e55107620d6f19465a 4ec3258c4df/images/sproutcore-startup-portrait.png" /> <link rel="apple-touch-startup-image" media="screen and (orientation:landscape)" href="/devicemanagement/console/sproutcore/foundation/en/b74a542f762e55107620d6f19465a 4ec3258c4df/images/sproutcore-startup-landscape.png" /> <link rel="shortcut icon" href="" type="image/x-icon" /> <title>Admin</title> <script type="text/javascript">/* >>>>>>>>>> BEGIN source/core.js */// ==========================================================================// Project: SproutCore - JavaScript Application Framework// Copyright: ©2006-2009 Sprout Systems, Inc. and contributors.// Portions ©2008-2009 Apple Inc. All rights reserved.// License: Licensed under MIT license (see license.js)// ==========================================================================
/* >>>>>>>>>> BEGIN source/system/browser.js */// ==========================================================================// Project: SproutCore - JavaScript Application Framework// Copyright: ©2006-2009 Sprout Systems, Inc. and contributors.// Portions ©2008-2009 Apple Inc. All rights reserved.// License: Licensed under MIT license (see license.js)// ==========================================================================
var SC = SC || { BUNDLE_INFO: {}, LAZY_INSTANTIATION: {} };
SC.browser = (function() { var userAgent = navigator.userAgent.toLowerCase(), version = (userAgent.match( /.+(?:rv|it|ra|ie)[\/: ]([\d.]+)/ ) || [])[1] ;
var browser = { version: version, safari: (/webkit/).test( userAgent ) ? version : 0, opera: (/opera/).test( userAgent ) ? version : 0, msie: (/msie/).test( userAgent ) && !(/opera/).test( userAgent ) ? version : 0, mozilla: (/mozilla/).test( userAgent ) && !(/(compatible|webkit)/).test( userAgent ) ? version : 0, mobileSafari: (/apple.*mobile.*safari/).test(userAgent) ? version : 0, chrome: (/chrome/).test( userAgent ) ? version : 0, windows: !!(/(windows)/).test(userAgent), mac: !!((/(macintosh)/).test(userAgent) || (/(mac os x)/).test(userAgent)), language: (navigator.language || navigator.browserLanguage).split('-', 1)[0] }; browser.current = browser.msie ? 'msie' : browser.mozilla ? 'mozilla' : browser.safari ? 'safari' : browser.opera ? 'opera' : 'unknown' ; return browser ;})();
/* >>>>>>>>>> BEGIN source/system/bench.js */// ==========================================================================// Project: SproutCore - JavaScript Application Framework// Copyright: ©2006-2010 Sprout Systems, Inc. and contributors.// Portions ©2008-2010 Apple Inc. All rights reserved.// License: Licensed under MIT license (see license.js)// ==========================================================================
// sc_require("system/browser")if (typeof _SC_performanceEvents !== "undefined") { SC._performanceEvents = _SC_performanceEvents; _SC_performanceEvents = undefined;} else { SC._performanceEvents = { headStart: new Date().getTime() };}/* >>>>>>>>>> BEGIN source/system/loader.js */// ==========================================================================// Project: SproutCore - JavaScript Application Framework// Copyright: ©2006-2009 Sprout Systems, Inc. and contributors.// Portions ©2008-2009 Apple Inc. All rights reserved.// License: Licensed under MIT license (see license.js)// ==========================================================================
// sc_require("system/browser");
SC.bundleDidLoad = function(bundle) { var info = this.BUNDLE_INFO[bundle] ; if (!info) info = this.BUNDLE_INFO[bundle] = {} ; info.loaded = true ;};
SC.bundleIsLoaded = function(bundle) { var info = this.BUNDLE_INFO[bundle] ; return info ? !!info.loaded : false ;};
SC.loadBundle = function() { throw "SC.loadBundle(): SproutCore is not loaded."; };
SC.setupBodyClassNames = function() { var el = document.body ; if (!el) return ; var browser, platform, shadows, borderRad, classNames, style; browser = SC.browser.current ; platform = SC.browser.windows ? 'windows' : SC.browser.mac ? 'mac' : 'other-platform' ; style = document.documentElement.style; shadows = (style.MozBoxShadow !== undefined) || (style.webkitBoxShadow !== undefined) || (style.oBoxShadow !== undefined) || (style.boxShadow !== undefined); borderRad = (style.MozBorderRadius !== undefined) || (style.webkitBorderRadius !== undefined) || (style.oBorderRadius !== undefined) || (style.borderRadius !== undefined); classNames = el.className ? el.className.split(' ') : [] ; if(shadows) classNames.push('box-shadow'); if(borderRad) classNames.push('border-rad'); classNames.push(browser) ; classNames.push(platform) ; if (parseInt(SC.browser.msie,0)==7) classNames.push('ie7') ; if (SC.browser.mobileSafari) classNames.push('mobile-safari') ; if ('createTouch' in document) classNames.push('touch'); el.className = classNames.join(' ') ;} ;
/* >>>>>>>>>> BEGIN bundle_loaded.js */; if ((typeof SC !== 'undefined') && SC && SC.bundleDidLoad) SC.bundleDidLoad('sproutcore/bootstrap');
</script>
<link href="/devicemanagement/console/sproutcore/en/a8b61437c15a278078f3fffb972489104026f783 /stylesheet-packed.css" rel="stylesheet" type="text/css" /> <link href="/devicemanagement/console/apple_theme_v2/en/63cd5f0fb706373f354a879d93bb4f0dc898 b2b2/stylesheet.css" rel="stylesheet" type="text/css" /> <link href="/devicemanagement/console/admin/en/0803f0af1163f6efa8d9d71f0cc7179d84da0f27/styl esheet.css" rel="stylesheet" type="text/css" /> <script> SC._performanceEvents['headEnd'] = new Date().getTime(); </script> </head> <body class="apple-theme-v2 focus"> <script> SC._performanceEvents['bodyStart'] = new Date().getTime(); </script><script type="text/javascript">/* >>>>>>>>>> BEGIN source/setup_body_class_names.js */// ==========================================================================// Project: SproutCore - JavaScript Application Framework// Copyright: ©2006-2009 Sprout Systems, Inc. and contributors.// Portions ©2008-2009 Apple Inc. All rights reserved.// License: Licensed under MIT license (see license.js)// ==========================================================================
// sc_resource('setup_body_class_names'); // publish into inline format
if (SC.setupBodyClassNames) SC.setupBodyClassNames() ;
</script>
<script type="text/javascript" src="/devicemanagement/console/sproutcore/en/a8b61437c15a278078f3fffb972489104026f783 /javascript-packed.js"></script> <script type="text/javascript" src="/devicemanagement/console/apple_theme_v2/en/63cd5f0fb706373f354a879d93bb4f0dc898 b2b2/javascript.js"></script> <script type="text/javascript" src="/devicemanagement/console/admin/en/0803f0af1163f6efa8d9d71f0cc7179d84da0f27/java script.js"></script><script type="text/javascript">String.preferredLanguage = "en";</script>
<script> SC._performanceEvents['bodyEnd'] = new Date().getTime(); </script> </body></html>
...which looks fine to me. My question is: why doesn't the page show up at all (ultimately it fails)?
I have included a screen print of my server's server.app below:
Thanks in advance.I had multiple IP's set on my server, which randomly seemed to switch. It seems like there is an incompatibility still between Server Admin and server.app. Since Apple is pressing developers to test server admin and server.app I am confident those problems will resolve eventually, but for now I have deleted all-but-1 IPv4 and 1 IPv6 address (same interface), the networking interface overview for my server within Server Admin was updated and it looks like it works solid now, this was not by design I presume, so this must be another bug plaguing Lion...
After upgrading Postgres to 9.1.3 and upgrading webmail (upgrade: usr/share/webmail) from www.roundcube.net, making a new site webmail.example.com with the files stored in /Library/Server/Web/Data/Sites/CustomSitesDefault/webmail/ I made a symbolic link from that 'directory' to the actual built in webmail facility found in /usr/share/webmail by entering the following in terminal.
ln -s -i /usr/share/webmail/ /Library/Server/Web/Data/Sites/CustomSitesDefault/webmail/
By doing this it will ask to remove a directory, if you didn't put any important files in there, which I presume you didn't, confirm with the letter y and press enter.
Webmail now works every time the way I want it The same goes for Profile Manager, at least for now... -
I installed Lion Server on my Mac Pro. Everything looked to be working until I checked Profile Manager and I get an error message "Error Reading Settings" Not sure how to fix it. Tried to download Server agian but can't.
Look at /usr/lib/libpq library. I have had the same problem. There were following files:
-rwxr-xr-x 1 root wheel 163680 30 jul 21:17 /usr/lib/libpq.5.4.dylib
lrwxr-xr-x 1 root wheel 15 30 jul 21:20 /usr/lib/libpq.dylib -> libpq.5.4.dylib
Result for command sudo /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/wipeDB .sh was:
Password:
devicemgr:state = "STOPPED"
postgres:state = "RUNNING"
(in /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend)
Couldn't drop device_management : #<RuntimeError: Please install the postgresql adapter: `gem install activerecord-postgresql-adapter` (dlopen(/Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backen d/vendor/gems/pg-0.9.0/lib/pg_ext.bundle, 9): Library not loaded: /usr/lib/libpq.5.dylib
Referenced from: /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor /gems/pg-0.9.0/lib/pg_ext.bundle
Reason: image not found - /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor /gems/pg-0.9.0/lib/pg_ext.bundle)>
(in /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend)
Please install the postgresql adapter: `gem install activerecord-postgresql-adapter` (dlopen(/Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backen d/vendor/gems/pg-0.9.0/lib/pg_ext.bundle, 9): Library not loaded: /usr/lib/libpq.5.dylib
Referenced from: /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor /gems/pg-0.9.0/lib/pg_ext.bundle
Reason: image not found - /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor /gems/pg-0.9.0/lib/pg_ext.bundle)
/Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor/ rails/activerecord/lib/active_record/connection_adapters/abstract/connection_spe cification.rb:76:in `establish_connection'
/Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor/ rails/railties/lib/tasks/databases.rake:69:in `create_database'
/Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor/ rails/railties/lib/tasks/databases.rake:31
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 636:in `call'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 636:in `execute'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 631:in `each'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 631:in `execute'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 597:in `invoke_with_call_chain'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/monitor. rb:242:in `synchronize'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 590:in `invoke_with_call_chain'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 583:in `invoke'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2051:in `invoke_task'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2029:in `top_level'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2029:in `each'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2029:in `top_level'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2068:in `standard_exception_handling'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2023:in `top_level'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2001:in `run'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2068:in `standard_exception_handling'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 1998:in `run'
/usr/bin/rake:31
Couldn't create database for {"adapter"=>"postgresql", "username"=>"_devicemgr", "encoding"=>"UTF8", "pool"=>5, "database"=>"device_management"}
devicemgr:state = "STARTING"
There was missing symlink to right version of libpq dynamic library!
After I entered the following commands and now it works well for me:
$ cd /usr/lib
$ sudo ln -s libpq.5.4.dylib libpq.5.dylib
$ sudo /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/wipeDB .sh
devicemgr:state = "STOPPED"
postgres:state = "RUNNING"
(in /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend)
(in /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend)
devicemgr:state = "RUNNING"
Milan -
10.7.2 Profile manager semi broken
Hi,
Yesterday morning i've upgraded a Mac mini to 10.7.2, since that moment profile manager is acting weird.
I can still register devices, but when i try to update information or lock the device from the interface, it just hangs.
However, it doesn't do this all the time.
The last issue i encountered, was an unhandeld exception when i was testing with the App pushing.
Oct 14 12:37:03 mac01 ProfileManager[283]: Caught unhandled exception undefined method `each' for nil:NilClass at /usr/share/devicemgr/backend/app/models/cfprefs_knob_set.rb:45:in `replace_string_types'
When i got this error, the Update Info also stopped working, same for the App push.
Anyone else who encountered this problems, and perhaps knows a fix?
Thanks.Hi David,
here is the output of profilemanager.log:
Jan 9 09:43:40 fqdn ProfileManager[254] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:40) [POST]
Jan 9 09:43:40 fqdn ProfileManager[255] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:40) [POST]
Jan 9 09:43:41 fqdn ProfileManager[255] <Info>: Completed in 103ms (View: 0, DB: 3) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:43:41 fqdn ProfileManager[256] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:41) [POST]
Jan 9 09:43:41 fqdn ProfileManager[254] <Info>: Completed in 294ms (View: 1, DB: 19) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:43:41 fqdn ProfileManager[259] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:41) [POST]
Jan 9 09:43:41 fqdn ProfileManager[257] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:41) [POST]
Jan 9 09:43:41 fqdn ProfileManager[256] <Info>: Completed in 303ms (View: 0, DB: 4) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:43:41 fqdn ProfileManager[257] <Info>: Completed in 311ms (View: 0, DB: 4) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:43:41 fqdn ProfileManager[260] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:41) [POST]
Jan 9 09:43:41 fqdn ProfileManager[259] <Info>: Completed in 465ms (View: 0, DB: 16) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:43:41 fqdn ProfileManager[260] <Info>: Completed in 114ms (View: 0, DB: 3) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:43:41 fqdn ProfileManager[261] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:41) [POST]
Jan 9 09:43:42 fqdn ProfileManager[261] <Info>: Completed in 398ms (View: 0, DB: 95) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:43:54 fqdn ProfileManager[254] <Info>: Processing DataFileController#upload (for 172.16.0.201 at 2012-01-09 09:43:54) [POST]
Jan 9 09:43:55 fqdn ProfileManager[254] <Info>: Completed in 103ms (View: 1, DB: 11) | 200 OK [https://fqdn/data_file/upload]
Jan 9 09:43:55 fqdn ProfileManager[255] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:55) [POST]
Jan 9 09:43:55 fqdn ProfileManager[255] <Error>: Caught unhandled exception undefined method `each' for nil:NilClass at /usr/share/devicemgr/backend/app/models/cfprefs_knob_set.rb:45:in `replace_string_types'
/usr/share/devicemgr/backend/app/helpers/data_file_helper.rb:63:in `create_ios_application_from_file'
/usr/share/devicemgr/backend/app/controllers/magic_controller.rb:202:in `send'
/usr/share/devicemgr/backend/app/controllers/magic_controller.rb:202:in `do_magic'
/usr/share/devicemgr/backend/app/controllers/magic_controller.rb:176:in `each'
/usr/share/devicemgr/backend/app/controllers/magic_controller.rb:176:in `do_magic'
/usr/share/devicemgr/backend/app/controllers/magic_controller.rb:175:in `each'
/usr/share/devicemgr/backend/app/controllers/magic_controller.rb:175:in `do_magic'
/usr/share/devicemgr/backend/app/controllers/magic_controller.rb:168:in `each'
/usr/share/devicemgr/backend/app/controllers/magic_controller.rb:168:in `do_magic'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /base.rb:1333:in `send'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /base.rb:1333:in `perform_action_without_filters'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:617:in `call_filters'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:638:in `run_before_filters'
/usr/share/devicemgr/backend/app/controllers/application_controller.rb:71: in `give_session_to_models'
/usr/share/devicemgr/backend/vendor/rails/activesupport/lib/active_support /callbacks.rb:178:in `send'
/usr/share/devicemgr/backend/vendor/rails/activesupport/lib/active_support /callbacks.rb:178:in `evaluate_method'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:186:in `call'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:635:in `run_before_filters'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:615:in `call_filters'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:610:in `perform_action_without_benchmark'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /benchmarking.rb:68:in `perform_action_without_rescue'
/usr/share/devicemgr/backend/vendor/rails/activesupport/lib/active_support /core_ext/benchmark.rb:17:in `ms'
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/be nchmark.rb:308:in `realtime'
/usr/share/devicemgr/backend/vendor/rails/activesupport/lib/active_support /core_ext/benchmark.rb:17:in `ms'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /benchmarking.rb:68:in `perform_action_without_rescue'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /rescue.rb:160:in `perform_action_without_flash'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /flash.rb:151:in `perform_action'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /base.rb:532:in `send'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /base.rb:532:in `process_without_filters'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:606:in `process'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /base.rb:391:in `process'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /base.rb:386:in `call'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /routing/route_set.rb:438:in `call'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /dispatcher.rb:87:in `dispatch'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /dispatcher.rb:121:in `_call'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /dispatcher.rb:130:in `build_middleware_stack'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /string_coercion.rb:25:in `call'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /string_coercion.rb:25:in `call'
/usr/share/devicemgr/backend/vendor/gems/rack-1.1.0/lib/rack/head.rb:9:in `call'
/usr/share/devicemgr/backend/vendor/gems/rack-1.1.0/lib/rack/methodoverrid e.rb:24:in `call'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /params_parser.rb:15:in `call'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /session/abstract_store.rb:177:in `call'
/usr/share/devicemgr/backend/vendor/rails/activerecord/lib/active_record/q uery_cache.rb:29:in `call'
/usr/share/devicemgr/backend/vendor/rails/activerecord/lib/active_record/c onnection_adapters/abstract/query_cache.rb:34:in `cache'
/usr/share/devicemgr/backend/vendor/rails/activerecord/lib/active_record/q uery_cache.rb:9:in `cache'
/usr/share/devicemgr/backend/vendor/rails/activerecord/lib/active_record/q uery_cache.rb:28:in `call'
/usr/share/devicemgr/backend/vendor/rails/activerecord/lib/active_record/c onnection_adapters/abstract/connection_pool.rb:361:in `call'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /failsafe.rb:26:in `call'
/usr/share/devicemgr/webserver/gems/gems/rack-1.1.0/lib/rack/lock.rb:11:in `call'
/usr/share/devicemgr/webserver/gems/gems/rack-1.1.0/lib/rack/lock.rb:11:in `synchronize'
/usr/share/devicemgr/webserver/gems/gems/rack-1.1.0/lib/rack/lock.rb:11:in `call'
/usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /dispatcher.rb:106:in `call'
/usr/share/devicemgr/backend/vendor/rails/railties/lib/rails/rack/static.r b:31:in `call'
/usr/share/devicemgr/backend/vendor/rails/railties/lib/rails/rack/log_tail er.rb:17:in `call'
/usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/connection.rb :76:in `pre_process'
/usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/connection.rb :74:in `catch'
/usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/connection.rb :74:in `pre_process'
/usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/connection.rb :57:in `process'
/usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/connection.rb :42:in `receive_data'
/usr/share/devicemgr/webserver/gems/gems/eventmachine-0.12.10/lib/eventmac hine.rb:256:in `run_machine'
/usr/share/devicemgr/webserver/gems/gems/eventmachine-0.12.10/lib/eventmac hine.rb:256:in `run'
/usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/backends/base .rb:57:in `start'
/usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/server.rb:156 :in `start'
/usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/controllers/c ontroller.rb:80:in `start'
/usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/runner.rb:177 :in `send'
/usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/runner.rb:177 :in `run_command'
/usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/runner.rb:143 :in `run!'
/usr/share/devicemgr/webserver/thin:8
Jan 9 09:43:55 fqdn ProfileManager[255] <Info>: Completed in 362ms (View: 0, DB: 3) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:45:23 fqdn ProfileManager[259] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
Jan 9 09:45:23 fqdn ProfileManager[257] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
Jan 9 09:45:23 fqdn ProfileManager[259] <Info>: Completed in 109ms (View: 0, DB: 3) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:45:23 fqdn ProfileManager[261] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
Jan 9 09:45:23 fqdn ProfileManager[257] <Info>: Completed in 311ms (View: 0, DB: 17) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:45:23 fqdn ProfileManager[254] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
Jan 9 09:45:23 fqdn ProfileManager[255] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
Jan 9 09:45:23 fqdn ProfileManager[261] <Info>: Completed in 307ms (View: 0, DB: 3) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:45:23 fqdn ProfileManager[254] <Info>: Completed in 105ms (View: 0, DB: 4) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:45:23 fqdn ProfileManager[256] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
Jan 9 09:45:23 fqdn ProfileManager[256] <Info>: Completed in 97ms (View: 0, DB: 2) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:45:23 fqdn ProfileManager[255] <Info>: Completed in 404ms (View: 0, DB: 16) | 200 OK [https://fqdn/magic/do_magic]
Jan 9 09:45:23 fqdn ProfileManager[258] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
Jan 9 09:45:24 fqdn ProfileManager[258] <Info>: Completed in 392ms (View: 0, DB: 72) | 200 OK [https://fqdn/magic/do_magic]
We can't upload any apps. Do you have any ideas to solve this?
Thank you!
Bye Gunnar... -
Profile Manager Web Interface Not Loading
I set up a Mac mini with 10.9 and Server 3.1.2 to be our MDM server. After the initial configuration the https://<servername>/profilemanager and /mydevices web interfaces work just fine. I'm able to enroll five test OSX and iOS devices. Then I come in the next day and the /profilemanager web interface is unreachable. The /mydevices web interface still works though.
I tried reinstalling 10.9 and server and setting up from scratch and the problem repeats itself the next day. According to this thread deleting Server.app and reinstalling is one solution, but that did not work. I also tried resetting the Profile Manager, but that did not solve this issue either.
When trying to load /profilemanager on the server, a MacBook, and iPad, Safari will just hang when loading the page. The title bar changes to "Admin," the blue status bar hangs, and the page does not load.
This one is baffling. Any suggestions as to what to do would be most appreciated.xcscredd(1156) deny file-read-metadata /Library/Server/ProfileManager
Process: xcscredd [1156]
Path: /Applications/Server.app/Contents/ServerRoot/System/Library/CoreServices/XCSCre dentialServer.bundle/Contents/MacOS/xcscredd
Load Address: 0x10a244000
Identifier: com.apple.XCSCredentialServer
Version: 1 (1.0)
Build Info: 255-XCSCredentialServer~32000000000000
Code Type: x86_64 (Native)
Parent Process: launchd [1]
Date/Time: 2014-05-21 16:46:38.051 -0500
OS Version: Mac OS X 10.9.3 (13D65)
Report Version: 8
Thread 0:
0 libsystem_kernel.dylib 0x00007fff965a20aa __getattrlist + 10
1 Security 0x00007fff8c81f9de ___ZN8Security15cached_realpathEPKcPc_block_invoke_2 + 260
2 libdispatch.dylib 0x00007fff8c95a28d _dispatch_client_callout + 8
3 libdispatch.dylib 0x00007fff8c95b146 _dispatch_barrier_sync_f_invoke + 39
4 Security 0x00007fff8c81f864 Security::cached_realpath(char const*, char*) + 148
5 Security 0x00007fff8c676529 Security::DbName::CanonicalizeName() + 209
6 Security 0x00007fff8c676418 Security::DbName::DbName(char const*, cssm_net_address const*) + 144
7 Security 0x00007fff8c68292c Security::DLDbIdentifier::DLDbIdentifier(cssm_subservice_uid const&, char const*, cssm_net_address const*) + 100
8 Security 0x00007fff8c6c53a4 Security::NameValueDictionary::MakeDLDbIdentifierFromNameValueDictionary(Securi ty::NameValueDictionary const&) + 206
9 Security 0x00007fff8c6c4e82 Security::KeychainCore::CCallbackMgr::consume(unsigned int, unsigned int, Security::CssmData const&) + 192
10 Security 0x00007fff8c7f679b Security::SecurityServer::NotificationPort::ReceiveImplementation(unsigned char*, unsigned int, Security::UnavailableReason) + 189
11 Security 0x00007fff8c7f686b ___ZN8Security14SecurityServer16NotificationPort7receiveERKNS_12MachPlusPlus7Me ssageE_block_invoke + 21
12 Security 0x00007fff8c7f6839 Security::SecurityServer::NotificationPort::HandleRunLoopTimer(__CFRunLoopTimer *, void*) + 19
13 CoreFoundation 0x00007fff9127e494 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
14 CoreFoundation 0x00007fff9127dfcf __CFRunLoopDoTimer + 1151
15 CoreFoundation 0x00007fff912ef5aa __CFRunLoopDoTimers + 298
16 CoreFoundation 0x00007fff91239755 __CFRunLoopRun + 1525
17 CoreFoundation 0x00007fff91238f25 CFRunLoopRunSpecific + 309
18 Foundation 0x00007fff908cfadc -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 253
19 Foundation 0x00007fff9091810b -[NSRunLoop(NSRunLoop) runUntilDate:] + 78
20 xcscredd 0x000000010a245e6f
21 libdyld.dylib 0x00007fff8c9585fd start + 1
Binary Images:
0x10a244000 - 0x10a256fff com.apple.XCSCredentialServer (1.0 - 1) <75a88431-46dc-35fc-8350-f97c59b411df> /Applications/Server.app/Contents/ServerRoot/System/Library/CoreServices/XCSCre dentialServer.bundle/Contents/MacOS/xcscredd
0x7fff8c670000 - 0x7fff8c8caffd com.apple.security (7.0 - 55471.14.4) <1d5da20e-db48-3e1d-9bf5-baa694192b25> /System/Library/Frameworks/Security.framework/Versions/A/Security
0x7fff8c955000 - 0x7fff8c958ff7 libdyld.dylib (239.4) <7c9ec3b7-dde3-33ff-953f-4067c743951d> /usr/lib/system/libdyld.dylib
0x7fff8c959000 - 0x7fff8c973fff libdispatch.dylib (339.92.1) <c4e4a18d-3c3b-3c9c-8709-a4270d998de7> /usr/lib/system/libdispatch.dylib
0x7fff90867000 - 0x7fff90b65fff com.apple.Foundation (6.9 - 1056.13) <2ee9ab07-3ea0-37d3-b407-4a520f2cb497> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x7fff911c9000 - 0x7fff913aefff com.apple.CoreFoundation (6.9 - 855.16) <a63e680e-e4b2-368b-8564-9dbe0d8ddb91> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x7fff9658d000 - 0x7fff965a9ff7 libsystem_kernel.dylib (2422.100.13) <498aebd7-4194-3cf2-aa16-d5d03ffbd8c0> /usr/lib/system/libsystem_kernel.dylib -
Add computer to profile manager
I have set up MAC Min Server and enable profile manager.
I am having the following issues:
1. How do i add windows PC & laptop on the mac workgroup?
2. How do i enable users to log in on the Mac server workgroup and enable a roaming profile
Thanks
Kind regards
Modely
[email protected]I'm not sure why files aren't syncing though. The process looks like it works, but the last sync date still says 12/31/01 7:03PM.
I have my suspicions.
9/17/12 9:07:35.439 AM com.apple.SystemUIServer.agent: Mon Sep 17 09:07:35 2012 HomeSync[315] (FileSync.framework) _SFSendMessage: gServerMessagePortName = 'com.apple.FileSyncAgent.iDisk'
9/17/12 9:07:35.441 AM com.apple.SystemUIServer.agent: Mon Sep 17 09:07:35 2012 HomeSync[315] (FileSync.framework) -[SFSyncSet registerForCallbacks]: 0x10c54e810
9/17/12 9:07:35.564 AM mount_url: mount_url: Mount of afp://;AUTH=NO%20USER%20AUTHENT@[SERVERNAME]/staff_data on /Network/Servers/co-osxs1.rockingham.k12.va.us/Volumes/User_Data/Homes/staff_da ta gives status -5997
9/17/12 9:07:35.686 AM mount_url: mount_url: Mount of afp://;AUTH=NO%20USER%20AUTHENT@[SERVERNAME]/staff_data on /Network/Servers/co-osxs1.rockingham.k12.va.us/Volumes/User_Data/Homes/staff_da ta gives status -5997
9/17/12 9:07:35.812 AM mount_url: mount_url: Mount of afp://;AUTH=NO%20USER%20AUTHENT@[SERVERNAME]/staff_data on /Network/Servers/[SERVERNAME]/Volumes/User_Data/Homes/staff_data gives status -5997
9/17/12 9:07:36.004 AM com.apple.launchd.peruser.50990025: (com.apple.TMLaunchAgent) Throttling respawn: Will start in 2 seconds
9/17/12 9:07:36.000 AM kernel: AFP_VFS afpfs_mount: /Volumes/staff_data, pid 250
9/17/12 9:07:36.600 AM com.apple.SystemUIServer.agent: Mon Sep 17 09:07:36 2012 HomeSync[315] (FileSync.framework) -[SFSyncSet registerForCallbacks]: 0x7fe82212fdc0
9/17/12 9:07:38.065 AM Finder: ISGetIconFamilyFromStorage: seed mismatch for 28540011, actual seed is 1befd79f
9/17/12 9:07:38.065 AM Finder: ISGetIconFamilyFromStorage: seed mismatch for 27f80012, actual seed is 41a7c4c9
9/17/12 9:07:38.000 AM kernel: AFP_VFS afpfs_unmount: /Volumes/staff_data, flags 524288, pid 322 -
Profile Manager backend won't start
I'm having trouble starting Profile Manager on one of my servers. Near as I can tell, the Profile Manager is trying to reverse proxy through to a webapp called "devicemgr". This starts up four backend daemons running on TCP 3320, 3321, 3322 and 3323, as shown in this log.
Jul 24 00:38:18 loki com.apple.devicemanager[4234]: DEBUG: Initializing DeviceManagerDaemon with ports 3320,3321,3322,3323 (physmem = 4GB)
Jul 24 00:38:18 loki com.apple.devicemanager[4234]: DEBUG: Making sure Rails is configured properly
Jul 24 00:38:18 loki com.apple.devicemanager[4234]: DEBUG: Running rake command: /usr/bin/rake db:migrate
However the four backend daemons don't actually start. They try to start, but then fail, and try again, ad infinitum.
bash-3.2# ps ax | grep devicemgr | grep ruby
4234 ?? Ss 0:00.03 /usr/bin/ruby /usr/share/devicemgr/backend/devicemgrd
4348 ?? R 0:01.74 /usr/bin/ruby /usr/share/devicemgr/webserver/thin --chdir /usr/share/devicemgr/backend --rackup config.ru --address localhost --port 3321 --debug start
4350 ?? R 0:01.71 /usr/bin/ruby /usr/share/devicemgr/webserver/thin --chdir /usr/share/devicemgr/backend --rackup config.ru --address localhost --port 3320 --debug start
4352 ?? R 0:01.56 /usr/bin/ruby /usr/share/devicemgr/webserver/thin --chdir /usr/share/devicemgr/backend --rackup config.ru --address localhost --port 3323 --debug start
4354 ?? R 0:01.39 /usr/bin/ruby /usr/share/devicemgr/webserver/thin --chdir /usr/share/devicemgr/backend --rackup config.ru --address localhost --port 3322 --debug start
If I wait a few seconds then in the process listing the PIDs will all have changed; i.e. the backends are bombing out on startup.
The end result is the Profile Manager doesn't work. I see messages in apache's error_log, trying to connect to the failed backend daemons.
[Sun Jul 24 00:27:09 2011] [error] ap_proxy_connect_backend disabling worker for (127.0.0.1)
[Sun Jul 24 00:27:09 2011] [error] (61)Connection refused: proxy: HTTP: attempt to connect to 127.0.0.1:3321 (127.0.0.1) failed
[Sun Jul 24 00:27:09 2011] [error] ap_proxy_connect_backend disabling worker for (127.0.0.1)
[Sun Jul 24 00:27:09 2011] [error] (61)Connection refused: proxy: HTTP: attempt to connect to 127.0.0.1:3320 (127.0.0.1) failed
[Sun Jul 24 00:27:09 2011] [error] ap_proxy_connect_backend disabling worker for (127.0.0.1)
I've tried all the obvious stuff;
this is a clean upgrade to Lion, then a clean install of Server
hostname is correct (loki.local) and network is working
there is a loki.local Open Directory Intermediate CA certificate
the apache daemon starts up with SSL using that cert
under Hardware -> Settings the SSL certificate is correct
under Hardware -> Network the hostname is correct (loki.local)
stopped, started, rebooted, etc
Where else can I look to find out why /usr/share/devicemgr/backend fails to start? Despite having DEBUG turned on, very few messages are being logged, and nothing that helps my pinpoint what's going wrong.
I'd also be happy to just start from fresh, but I haven't found the "Reset" button for Lion Server, so to speak.Also having the exact same problem.
Also, when trying to manually run the process i get the following:
sudo -u _devicemgr /usr/bin/ruby /usr/share/devicemgr/webserver/thin --chdir /usr/share/devicemgr/backend --rackup config.ru --address localhost --port 3321 --debug start
./config/../vendor/rails/railties/lib/initializer.rb:271:in `require_frameworks': can't activate rack (~> 1.1.0, runtime) for [], already activated rack-1.2.1 for ["thin-1.2.8"] (RuntimeError)
from ./config/../vendor/rails/railties/lib/initializer.rb:134:in `process'
from ./config/../vendor/rails/railties/lib/initializer.rb:113:in `send'
from ./config/../vendor/rails/railties/lib/initializer.rb:113:in `run'
from ./config/environment.rb:41
from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `gem_original_require'
from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `require'
from config.ru:2
from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ge ms/rack-1.2.1/lib/rack/builder.rb:46:in `instance_eval'
from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ge ms/rack-1.2.1/lib/rack/builder.rb:46:in `initialize'
from config.ru:1:in `new'
from config.ru:1 -
Server 4.0 stuck on "Updating Profile Manager service"
Updated my Mac mini server to Yosemite, bought server 4.0 and installed it.
Then started the update procedure, but the progress bar only goes half, then stuck at "Updating Profile Manager service".
Waited for more than an hour, no progress. Killed the update and tried again, but the same result.
Anyone a solution ?
Greetings
RobinUSER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
root 7898 0.4 0.1 2543068 9704 ?? Ss 12:09AM 0:13.98 servermgr_config
root 9368 0.0 0.1 2509172 7064 ?? Ss 12:57AM 0:00.03 servermgr_devicemgr
root 9367 0.0 0.1 2479968 5988 ?? Ss 12:57AM 0:00.01 /Applications/Server.app/Contents/ServerRoot/usr/sbin/serveradmin settings de
root 9366 0.0 0.1 2504004 6456 ?? Ss 12:57AM 0:00.02 servermgr_caching
root 9364 0.0 0.1 2506564 6456 ?? Ss 12:57AM 0:00.02 servermgr_afp
root 9361 0.0 0.1 2515608 7372 ?? Ss 12:57AM 0:00.04 servermgr_accounts
root 9359 0.0 0.1 2473460 5704 ?? Ss 12:57AM 0:00.01 /Applications/Server.app/Contents/ServerRoot/usr/libexec/server_backup/server
root 9357 0.0 0.1 2501928 6340 ?? Ss 12:57AM 0:00.02 /Applications/Server.app/Contents/ServerRoot/usr/sbin/ServerBackup -cmd backu
root 9356 0.0 0.2 2543828 14220 ?? Ss 12:57AM 0:00.18 /System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd
osxadmin 9354 0.0 0.2 2625500 15884 ?? S 12:56AM 0:00.28 /System/Library/CoreServices/RemoteManagement/ScreensharingAgent.bundle/Conte
root 9353 0.0 0.4 2543064 35048 ?? Ss 12:56AM 0:00.56 /System/Library/CoreServices/RemoteManagement/screensharingd.bundle/Contents/
osxadmin 9349 0.0 0.1 2536468 7612 ?? S 12:48AM 0:00.13 /System/Library/PrivateFrameworks/AOSKit.framework/Versions/A/XPCServices/com
osxadmin 9297 0.0 0.1 2508888 6912 ?? S 12:19AM 0:00.06 /usr/libexec/secinitd
_teamsserver 9179 0.0 0.0 2506080 1128 ?? S 12:10AM 0:00.01 /usr/sbin/cfprefsd agent
root 8990 0.0 0.1 2539648 7660 ?? Ss 12:09AM 0:00.08 /Applications/Server.app/Contents/ServerRoot/usr/libexec/ServerEventsDaemon
root 8706 0.0 0.0 2441984 1320 ?? S 12:09AM 0:00.03 chmod u=rwX,go=rX /Library/Server/ProfileManager/ /Library/Server/ProfileMana
root 8700 0.0 0.0 2433020 712 ?? S 12:09AM 0:00.01 /usr/bin/xargs chmod u=rwX,go=rX
root 8617 0.0 0.1 2540700 8900 ?? Ss 12:09AM 0:00.63 /Applications/Server.app/Contents/ServerRoot/usr/libexec/ServerEventAgent
root 8555 0.0 0.0 2456924 1084 ?? S 12:09AM 0:00.02 /bin/bash /Applications/Server.app/Contents/ServerRoot/usr/libexec/deviceMana
osxadmin 8165 0.0 0.1 2520636 5600 ?? S 12:09AM 0:00.02 /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/Resources/hel
root 8054 0.0 0.1 2538892 6544 ?? Ss 12:09AM 0:00.33 /sbin/emond
root 7957 0.0 0.0 2536904 2792 ?? Ss 12:09AM 0:00.02 /Applications/Server.app/Contents/ServerRoot/System/Library/PrivateFrameworks
root 7953 0.0 0.1 2537432 8060 ?? Ss 12:09AM 0:03.62 /Applications/Server.app/Contents/ServerRoot/usr/libexec/servermetricsd.app/C
root 7897 0.0 0.1 2540880 7676 ?? Ss 12:09AM 0:00.20 /Applications/Server.app/Contents/ServerRoot/System/Library/CoreServices/Serv
root 7892 0.0 0.3 2554524 27428 ?? Ss 12:09AM 0:00.71 /Library/PrivilegedHelperTools/com.apple.serverd
osxadmin 7824 0.0 0.5 2639788 39372 ?? S 12:08AM 0:02.14 /Applications/Server.app/Contents/MacOS/Server
root 7755 0.0 0.1 2477248 5628 ?? Ss 12:00AM 0:00.03 /System/Library/CoreServices/SubmitDiagInfo server-init
osxadmin 7716 0.0 0.1 2500704 6352 ?? S 11:56PM 0:00.04 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
osxadmin 6929 0.0 0.1 2496904 6576 ?? Ss 10:15PM 0:00.05 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCService
_assetcache 6911 0.0 0.0 2470496 2680 ?? S 10:15PM 0:00.01 /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
_assetcache 6908 0.0 0.1 2544348 6100 ?? Ss 10:15PM 0:00.19 /System/Library/CoreServices/AssetCacheLocatorService
_softwareupdate 6907 0.0 0.1 2538904 8008 ?? Ss 10:15PM 0:00.19 /System/Library/CoreServices/Software Update.app/Contents/Resources/softwareu
root 6906 0.0 0.3 2555692 23160 ?? Ss 10:15PM 0:00.70 /System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
osxadmin 5521 0.0 0.0 2538972 3200 ?? S 7:15PM 0:00.03 /System/Library/PrivateFrameworks/CloudServices.framework/Resources/com.apple
osxadmin 5451 0.0 0.0 2464092 1412 s000 S 7:10PM 0:00.31 -bash
root 5450 0.0 0.0 2497452 2880 s000 Ss 7:10PM 0:00.08 login -pf osxadmin
osxadmin 5448 0.0 0.8 2731008 68600 ?? U 7:10PM 0:49.51 /Applications/Utilities/Terminal.app/Contents/MacOS/Terminal
osxadmin 4533 0.0 1.4 2699644 117024 ?? S 4:38PM 1:37.34 /Applications/Utilities/Console.app/Contents/MacOS/Console
root 4102 0.0 0.0 2500124 4012 ?? Ss 4:19PM 0:00.11 /System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/
osxadmin 4098 0.0 0.2 2584668 15648 ?? S 4:19PM 0:00.35 /System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/
osxadmin 4097 0.0 0.2 2581536 16692 ?? S 4:19PM 0:00.14 /System/Library/PrivateFrameworks/CloudServices.framework/Resources/EscrowSec
root 4030 0.0 0.0 2477408 740 ?? SNs 4:18PM 0:00.01 /usr/libexec/periodic-wrapper daily
osxadmin 3313 0.0 0.0 2514460 3480 ?? S 1:36PM 0:00.04 /System/Library/PrivateFrameworks/KerberosHelper/Helpers/DiskUnmountWatcher
osxadmin 3139 0.0 0.1 2496048 6236 ?? S 1:09PM 0:00.03 /usr/libexec/USBAgent
_devicemgr 1736 0.0 0.0 2477408 848 ?? S 12:45PM 0:00.01 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
_devicemgr 1688 0.0 0.0 2505312 3664 ?? S 12:45PM 0:00.02 /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
root 1591 0.0 0.1 2499324 6392 ?? Ss 12:41PM 0:00.03 /usr/sbin/spindump
root 1585 0.0 0.0 2478972 1864 ?? Ss 12:41PM 0:01.46 /usr/libexec/systemstatsd
_calendar 1480 0.0 0.0 2506336 3660 ?? S 12:40PM 0:00.03 /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
_teamsserver 1444 0.0 0.0 2506860 3692 ?? U 12:40PM 0:00.03 /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
root 359 0.0 0.0 2489696 904 ?? S 12:39PM 0:00.13 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
osxadmin 344 0.0 0.1 2516508 7020 ?? S 12:39PM 0:00.11 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
_spotlight 343 0.0 0.1 2517340 10008 ?? S 12:39PM 0:12.24 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
_spotlight 342 0.0 0.0 2514844 1464 ?? S 12:39PM 0:00.11 /usr/sbin/distnoted agent
osxadmin 340 0.0 0.0 2477408 868 ?? S 12:38PM 0:00.03 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
osxadmin 339 0.0 0.2 2568464 16968 ?? Ss 12:38PM 0:00.11 /Applications/Reminders.app/Contents/PlugIns/com.apple.RemindersNC.appex/Cont
osxadmin 337 0.0 0.1 2504212 7612 ?? S 12:38PM 0:00.07 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/
osxadmin 336 0.0 0.2 2581648 12972 ?? S 12:38PM 0:00.14 /System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.
osxadmin 335 0.0 0.1 2544580 12160 ?? S 12:38PM 0:00.90 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/
osxadmin 334 0.0 0.1 2505780 6432 ?? S 12:38PM 0:00.03 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/
osxadmin 325 0.0 0.1 2541832 8536 ?? S 12:38PM 0:00.10 /System/Library/Frameworks/InputMethodKit.framework/Versions/A/XPCServices/co
osxadmin 323 0.0 0.2 2598344 16280 ?? U 12:38PM 0:01.31 /System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell -psn_0_
osxadmin 318 0.0 0.0 2514056 3992 ?? S 12:38PM 0:00.04 /System/Library/PrivateFrameworks/CommunicationsFilter.framework/CMFSyncAgent
osxadmin 317 0.0 0.1 2495524 9200 ?? Ss 12:38PM 0:00.02 /System/Library/CoreServices/NotificationCenter.app/Contents/XPCServices/com.
root 316 0.0 0.0 2535732 2980 ?? Ss 12:38PM 0:00.03 /System/Library/CoreServices/CrashReporterSupportHelper server-init
root 315 0.0 0.0 2507868 3724 ?? Ss 12:38PM 0:00.06 /System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicati
root 314 0.0 0.1 2550164 5268 ?? Ss 12:38PM 0:00.44 /usr/libexec/sandboxd -n PluginProcess -n
osxadmin 312 0.0 0.1 2537416 11976 ?? S 12:38PM 0:00.04 /System/Library/PrivateFrameworks/Notes.framework/Versions/A/XPCServices/com.
osxadmin 311 0.0 0.0 2516156 3932 ?? S 12:38PM 0:00.05 /System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeych
osxadmin 308 0.0 0.2 2540828 16264 ?? S 12:38PM 0:00.38 /usr/libexec/fmfd
osxadmin 307 0.0 0.2 2543012 17632 ?? S 12:38PM 0:00.54 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/
osxadmin 304 0.0 0.1 2537712 6356 ?? S 12:38PM 0:00.08 /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTune
osxadmin 303 0.0 0.2 2547160 16320 ?? Ss 12:38PM 0:00.94 /System/Library/CoreServices/Spotlight.app/Contents/XPCServices/com.apple.met
osxadmin 300 0.0 0.1 2537608 8956 ?? S 12:38PM 0:00.33 /System/Library/CoreServices/diagnostics_agent
osxadmin 299 0.0 0.1 2573092 11436 ?? S 12:38PM 0:00.11 /System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
osxadmin 296 0.0 0.1 2538156 6000 ?? S 12:38PM 0:00.12 /System/Library/CoreServices/cloudpaird
osxadmin 295 0.0 0.1 2537144 11892 ?? S 12:38PM 0:00.05 /System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resource
osxadmin 293 0.0 0.2 2542076 15044 ?? S 12:38PM 0:00.29 /System/Library/CoreServices/AppleIDAuthAgent
osxadmin 291 0.0 0.3 2620956 25636 ?? S 12:38PM 0:00.78 /System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/Notificati
osxadmin 289 0.0 0.2 2581580 17304 ?? S 12:38PM 0:00.13 /System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/
osxadmin 287 0.0 0.1 2537088 7168 ?? S 12:38PM 0:00.09 /System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAge
osxadmin 284 0.0 0.0 2506296 3584 ?? S 12:38PM 0:00.02 /usr/libexec/spindump_agent
osxadmin 282 0.0 0.2 2539492 13856 ?? Ss 12:38PM 0:00.82 /System/Library/PrivateFrameworks/CloudDocsDaemon.framework/XPCServices/Conta
osxadmin 280 0.0 0.2 2553068 17812 ?? S 12:38PM 0:00.33 /System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
osxadmin 278 0.0 0.1 2537776 5464 ?? S 12:38PM 0:00.05 /System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPer
osxadmin 277 0.0 0.2 2551380 17648 ?? S 12:38PM 0:01.39 /System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Content
osxadmin 276 0.0 0.1 2541216 8344 ?? S 12:38PM 0:00.42 /System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
osxadmin 275 0.0 0.3 2555700 25172 ?? S 12:38PM 0:08.23 /System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
osxadmin 274 0.0 0.2 2593076 13792 ?? S 12:38PM 0:00.18 /System/Library/CoreServices/CoreServicesUIAgent.app/Contents/MacOS/CoreServi
osxadmin 273 0.0 0.2 2545472 12944 ?? S 12:38PM 0:00.08 /System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySy
osxadmin 272 0.0 0.2 2541052 15044 ?? S 12:38PM 0:00.43 /System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS
osxadmin 271 0.0 0.1 2545360 11772 ?? S 12:38PM 0:00.05 /System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPl
osxadmin 270 0.0 0.2 2568952 20008 ?? S 12:38PM 0:00.24 /System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app
osxadmin 269 0.0 0.3 2594616 26144 ?? S 12:38PM 0:00.50 /System/Library/PrivateFrameworks/InternetAccounts.framework/Versions/A/XPCSe
osxadmin 267 0.0 0.1 2518244 8112 ?? S 12:38PM 0:03.80 /usr/libexec/nsurlstoraged
osxadmin 266 0.0 0.3 2583088 21032 ?? Ss 12:38PM 0:00.20 /System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.ext
osxadmin 264 0.0 0.1 2541028 5364 ?? S 12:38PM 0:00.31 /usr/libexec/secd
osxadmin 263 0.0 0.0 2485344 3168 ?? Ss 12:38PM 0:00.02 /System/Library/CoreServices/Menu Extras/AirPort.menu/Contents/XPCServices/co
osxadmin 262 0.0 0.4 2570676 33472 ?? S 12:38PM 0:00.22 /System/Library/CoreServices/iconservicesagent
osxadmin 258 0.0 0.2 2543268 19860 ?? Ss 12:38PM 0:00.32 /System/Library/PrivateFrameworks/CalendarAgent.framework/Versions/A/XPCServi
osxadmin 257 0.0 0.1 2541760 5776 ?? S 12:38PM 0:00.54 /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
osxadmin 256 0.0 0.1 2541496 9572 ?? S 12:38PM 0:00.24 /usr/libexec/pkd
osxadmin 255 0.0 0.2 2549624 18152 ?? S 12:38PM 0:00.26 /usr/libexec/sharingd
root 254 0.0 0.1 2515924 11476 ?? Ss 12:38PM 0:00.10 /System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
osxadmin 253 0.0 0.2 2544636 19632 ?? S 12:38PM 0:00.85 /System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Suppor
root 252 0.0 0.1 2514876 4460 ?? Ss 12:38PM 0:00.23 /System/Library/PrivateFrameworks/CacheDelete.framework/deleted
osxadmin 251 0.0 0.1 2539560 5212 ?? S 12:38PM 0:00.10 /System/Library/CoreServices/pbs
osxadmin 248 0.0 0.1 2572060 6088 ?? S 12:38PM 0:01.37 /System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.frame
osxadmin 246 0.0 0.5 3807188 44048 ?? S 12:38PM 0:03.61 /System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
osxadmin 245 0.0 0.1 2566432 11496 ?? S 12:38PM 0:00.12 /System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent
osxadmin 243 0.0 0.1 2542312 12016 ?? S 12:38PM 0:01.44 /usr/libexec/nsurlsessiond
osxadmin 242 0.0 0.4 2569976 29436 ?? S 12:38PM 0:02.90 /System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/Calenda
osxadmin 241 0.0 0.1 2541864 7636 ?? S 12:38PM 0:00.09 /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARD
_locationd 240 0.0 0.1 2546964 8100 ?? Ss 12:38PM 0:01.76 /usr/libexec/locationd
osxadmin 239 0.0 0.1 2537692 6220 ?? S 12:38PM 0:00.96 /usr/sbin/usernoted
osxadmin 238 0.0 0.0 2497480 1156 ?? S 12:38PM 0:00.01 /usr/sbin/pboard
_coreaudiod 237 0.0 0.0 2537856 2536 ?? Us 12:38PM 0:00.06 /System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.app
_coreaudiod 234 0.0 0.1 2543576 9696 ?? Ss 12:38PM 0:00.93 /usr/sbin/coreaudiod
osxadmin 233 0.0 0.6 2637352 50092 ?? S 12:38PM 0:03.72 /System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
osxadmin 232 0.0 0.2 2600648 17764 ?? S 12:38PM 0:02.04 /System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
osxadmin 230 0.0 0.3 2596140 27276 ?? S 12:38PM 0:01.23 /System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
osxadmin 228 0.0 0.0 2516620 3020 ?? S 12:38PM 0:01.89 /usr/sbin/cfprefsd agent
osxadmin 226 0.0 0.0 2522656 4164 ?? S 12:38PM 0:03.07 /usr/sbin/distnoted agent
osxadmin 224 0.0 0.2 2541912 13468 ?? S 12:38PM 0:01.28 /usr/libexec/UserEventAgent (Aqua)
root 223 0.0 0.0 2529360 2288 ?? Ss 12:38PM 0:00.17 /usr/libexec/securityd_service
_nsurlstoraged 219 0.0 0.1 2514380 4696 ?? Ss 12:37PM 0:00.22 /usr/libexec/nsurlstoraged
root 218 0.0 0.1 2546836 10188 ?? Ss 12:37PM 0:00.17 /System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelper
_softwareupdate 217 0.0 2.0 3726564 165920 ?? Ss 12:37PM 0:19.22 /System/Library/CoreServices/Software Update.app/Contents/Resources/softwareu
_netbios 214 0.0 0.1 2515060 6808 ?? SNs 12:37PM 0:00.08 /usr/sbin/netbiosd
root 213 0.0 0.0 2516660 3888 ?? Ss 12:37PM 0:00.06 /System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.app
root 211 0.0 0.1 2540132 4480 ?? Ss 12:37PM 0:00.05 /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
root 206 0.0 0.1 2522040 7852 ?? Ss 12:37PM 0:04.75 /usr/sbin/PasswordService -n
root 204 0.0 0.0 2466640 2076 ?? S 12:37PM 0:00.00 /usr/libexec/xssendevent
root 203 0.0 0.0 2495904 1204 ?? Ss 12:37PM 0:00.01 /usr/libexec/discoveryd_helper --loglevel Detailed --logclass Everything --lo
root 201 0.0 0.1 2538264 4704 ?? Us 12:37PM 0:00.21 /usr/libexec/smd
root 199 0.0 0.1 2541420 7780 ?? Ss 12:37PM 0:03.90 /usr/sbin/diskmanagementd
root 197 0.0 0.1 2539164 8576 ?? Ss 12:37PM 0:07.56 /System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd
root 195 0.0 0.0 2514280 1192 ?? Ss 12:37PM 0:00.05 /usr/libexec/networkd_privileged
root 194 0.0 0.1 2539132 5448 ?? Ss 12:37PM 0:09.65 /usr/libexec/ApplicationFirewall/socketfilterfw
root 192 0.0 0.6 2657512 48544 ?? Ss 12:37PM 0:00.54 /System/Library/PrivateFrameworks/SystemMigration.framework/Resources/systemm
root 191 0.0 0.0 2489528 2472 ?? Ss 12:37PM 0:00.02 /System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kadmind
root 189 0.0 0.0 2514700 3604 ?? Ss 12:37PM 0:00.02 /System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kpasswdd
root 187 0.0 0.1 2498660 4392 ?? Ss 12:37PM 0:00.09 /usr/bin/perl -T /usr/libexec/emlog.pl -l
_networkd 186 0.0 0.1 2519188 6404 ?? Ss 12:37PM 0:01.34 /usr/libexec/networkd
root 185 0.0 0.0 2514388 2864 ?? Ss 12:37PM 0:01.94 sysmond
root 184 0.0 0.0 2497552 2604 ?? Ss 12:37PM 0:00.03 /System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.a
root 183 0.0 0.0 2516212 1452 ?? Ss 12:37PM 0:04.30 /usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -
root 182 0.0 0.6 3067528 53912 ?? Ss 12:37PM 0:01.94 /usr/libexec/slapd -d 0 -h ldap:/// ldapi://%2Fvar%2Frun%2Fldapi
root 180 0.0 0.1 2537080 6056 ?? Ss 12:37PM 0:00.05 /usr/libexec/usbd
root 179 0.0 0.0 2518248 3312 ?? Us 12:37PM 0:00.04 /usr/libexec/nehelper
_nsurlsessiond 178 0.0 0.1 2519660 7980 ?? Ss 12:37PM 0:00.21 /usr/libexec/nsurlsessiond --privileged
root 177 0.0 0.0 2514272 1532 ?? Ss 12:37PM 0:00.09 /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.appl
root 169 0.0 0.1 2514716 5756 ?? Ss 12:37PM 0:00.07 /System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServ
root 166 0.0 0.0 2549388 1556 ?? Ss 12:37PM 0:00.10 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
root 164 0.0 0.0 2497252 3584 ?? Ss 12:37PM 0:00.02 /System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
root 163 0.0 3.6 4765120 303824 ?? Ss 12:37PM 3:26.09 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
root 146 0.0 0.1 2519316 4584 ?? Ss 12:37PM 0:00.17 /usr/sbin/filecoordinationd
_windowserver 144 0.0 1.0 3679744 82044 ?? Rs 12:37PM 2:58.68 /System/Library/Frameworks/ApplicationServices.framework/Frameworks/CoreGraph
root 137 0.0 0.0 2507500 3612 ?? Ss 12:37PM 0:00.02 /System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ct
root 136 0.0 0.1 2459172 4992 ?? Ss 12:37PM 0:03.70 /usr/libexec/watchdogd
root 111 0.0 0.0 2516356 1236 ?? Ss 12:37PM 0:00.03 /usr/libexec/diagnosticd
root 85 0.0 0.0 2522720 3596 ?? Ss 12:37PM 0:07.23 /usr/sbin/cfprefsd daemon
root 84 0.0 0.1 2542036 7776 ?? Ss 12:37PM 0:03.51 /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xp
_distnote 81 0.0 0.0 2521608 2132 ?? Ss 12:37PM 0:00.89 /usr/sbin/distnoted daemon
root 80 0.0 0.1 2548900 10272 ?? Ss 12:37PM 0:01.78 /System/Library/CoreServices/coreservicesd
root 78 0.0 0.1 2539308 8052 ?? Ss 12:37PM 0:03.60 /usr/libexec/amfid
root 77 0.0 0.0 2516908 1908 ?? Ss 12:37PM 0:08.50 /usr/sbin/notifyd
root 76 0.0 0.1 2537072 5360 ?? Ss 12:37PM 0:03.31 /usr/libexec/taskgated -s
root 75 0.0 0.0 2497380 1328 ?? Ss 12:37PM 0:00.01 /usr/libexec/hidd
root 73 0.0 0.0 2489720 1104 ?? Ss 12:37PM 0:00.02 /usr/sbin/KernelEventAgent
root 72 0.0 0.0 2513788 2680 ?? Ss 12:37PM 0:00.04 /System/Library/CoreServices/logind
osxadmin 71 0.0 0.3 2619492 23172 ?? Ss 12:37PM 0:02.80 /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow conso
root 70 0.0 0.1 2543272 4724 ?? Ss 12:37PM 0:00.12 /System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Su
root 69 0.0 0.0 2514316 1400 ?? Ss 12:37PM 0:00.02 /usr/libexec/stackshot -t -O
root 66 0.0 0.1 2518248 5724 ?? Ss 12:37PM 0:00.96 /System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kdc
root 64 0.0 0.1 2538200 5468 ?? Ss 12:37PM 0:00.10 /usr/sbin/blued
root 63 0.0 0.0 2514580 3628 ?? Ss 12:37PM 0:00.03 autofsd
root 58 0.0 0.1 2539708 4868 ?? Ss 12:37PM 0:08.86 /usr/sbin/securityd -i
_usbmuxd 57 0.0 0.0 2516596 3840 ?? Ss 12:37PM 0:01.71 /System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources
root 56 0.0 0.1 2539856 6724 ?? Ss 12:37PM 0:01.90 /System/Library/CoreServices/launchservicesd
root 55 0.0 0.2 2543752 13604 ?? Ss 12:37PM 0:01.64 /System/Library/PrivateFrameworks/ApplePushService.framework/apsd
_mdnsresponder 54 0.0 0.1 2548656 8856 ?? Ss 12:37PM 0:01.78 /usr/libexec/discoveryd --udsocket standard --loglevel Basic --logclass Every
root 52 0.0 0.1 2517780 5136 ?? Ss 12:37PM 0:00.06 /usr/sbin/wirelessproxd
root 51 0.0 0.4 2619460 36356 ?? Ss 12:37PM 0:20.64 /usr/libexec/opendirectoryd
root 50 0.0 0.1 2533284 5772 ?? Ss 12:37PM 0:00.07 /System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
root 48 0.0 0.1 2498180 5508 ?? Ss 12:37PM 0:00.03 /usr/libexec/wdhelper
root 47 0.0 0.1 2516496 11656 ?? Ss 12:37PM 0:00.16 /System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd-helper
root 46 0.0 0.1 2544732 8540 ?? Ss 12:37PM 0:04.10 /usr/libexec/coreduetd
root 43 0.0 0.0 2539440 2844 ?? Ss 12:37PM 0:02.82 /usr/libexec/diskarbitrationd
root 42 0.0 0.0 2514460 3700 ?? Ss 12:37PM 0:00.03 /System/Library/CoreServices/iconservicesagent
_iconservices 41 0.0 0.1 2519280 4268 ?? Ss 12:37PM 0:00.11 /System/Library/CoreServices/iconservicesd
root 37 0.0 0.9 2662580 71792 ?? Ss 12:37PM 3:06.11 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
root 36 0.0 0.1 2515488 7360 ?? SNs 12:37PM 0:00.14 /usr/libexec/warmd
root 34 0.0 0.1 2540736 5692 ?? Ss 12:37PM 0:00.14 /usr/libexec/airportd
root 30 0.0 0.0 2539008 2428 ?? Ss 12:37PM 0:00.92 /System/Library/CoreServices/powerd.bundle/powerd
root 29 0.0 0.1 2542068 7280 ?? Ss 12:37PM 0:01.26 /usr/libexec/configd
_appleevents 28 0.0 0.1 2537528 4848 ?? Ss 12:37PM 0:00.14 /System/Library/CoreServices/appleeventsd --server
root 26 0.0 0.1 2514072 5608 ?? Ss 12:37PM 0:00.10 /usr/libexec/thermald
root 24 0.0 0.1 2542276 12316 ?? Ss 12:37PM 0:00.83 /usr/libexec/kextd
root 23 0.0 0.1 2537252 8604 ?? Ss 12:37PM 0:06.88 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEve
root 21 0.0 0.0 2519584 2124 ?? Ss 12:37PM 0:10.02 /usr/sbin/syslogd
root 20 0.0 0.2 2544336 18572 ?? Ss 12:37PM 0:06.56 /usr/libexec/UserEventAgent (System)
root 9369 0.0 0.0 2432928 804 s000 R+ 12:57AM 0:00.00 ps aux
root 1 0.0 0.2 2539208 13600 ?? Ss 12:36PM 1:13.51 /sbin/launchd -
Profile manager spotlight message "com.apple.iTunesLibraryService"
Hi
Before asking my question a quick overview of my computer environment:
I've a Mac mini with OS X server (Mavericks) connected to a Windows Server 2003 Active Directory. I'm going to use some 40 iMac's on our school (combined with Windows computers).
On the Mac mini I'm using Profile manager to allow or deny some settings on the iMac's.
My environment uses the Dutch language - I try to translate as accurate as possible!
I only have settings installed on machine-level (not on user or group level).
Here are my settings for the use of Spotlight (in Profile manager):
Devicegroup IMACS > Dock > Apps in dock: Launchpad, Maps, Safari, iTunes (11.1.4)
Devicegroup IMACS > Restrictions > Preferences:all selected items are deactivated except Dock, Mission Control, Sound and Spotlight
Devicegroup IMACS > Restrictions > Apps:Allow apps: iTunes, Spotlight, ...
Devicegroup IMACS > Restrictions > Media:Access to disks: internal disks allowed, ...
When a (test)user enters some characters in Spotlight and then erases those characters a message pops up stating: "You don't have access to use the application com.apple.iTunesLibraryService". This happens every first time the user makes use of Spotlight.
Anyone a clue what's missing of what I forgetting to adjust?So I potentially have the issue resolved. After a few minutes of cranking away at spotlight I have no error and have never had it take that long to pop up.
I opened console and when the error popped up stating “You do not have permission to use the application “com.apple.iTunesLibraryService.” in console this popped up:
com.apple.quicklook.sattelite:
[QL] Could not get ITLibrary: Error Domain=NSPOSIXErrorDomain Code=100001 “Could not load.” UserInfo=0x7fd480609040 {NSLocalizedDescription=Could not load., NSUnderlyingError= 0x7fd48040d1e0 “The operation couldn’t be completed. (OSstatus error 100005.)”}
So I looked around a bit and found these paths contain references to QuickLook:
/System/Library/Frameworks/
/System/Library/QuickLook/
/Library/
~/Library/
I added all of those to the allowed folder list and so far that error has not popped up again. I added the /System/Library/QuickLook/ folder explicitly as opposed to just /System/Library/ as I do not want kids using screen sharing (cheating issue) or the jar launcher (minecrafting in class)
For reference I am on 10.9.4 using Profile Manager, payloads are managed with in a machine group. The folders mentioned above were added to the Allow Folders section of Apps under Restrictions. Hope this helps someone else. YMMV so far it appears to have worked. I'll update if it breaks again. -
Error reading settings in wiki and profile manager
I have just upgraded from Snow Leopard Server to Lion server.
I now have the following errors in server app:-
Wiki : message "Error Reading Settings"
Profile Manager: message "Error Reading Settings"
What do I do to get my wiki back!
When I visit my default ssl Wiki I get the following:-
Collaboration::PGCConnectionError in Sources#index
Showing /usr/share/collabd/coreclient/app/views/layouts/application.html.erb where line #5 raised:
FATAL: role "collab" does not exist
Extracted source (around line #5):
2: :user => @user,3: :entity => @entity,4: :owner => @owner,5: :service_client => service_client,6: :controller => controller7: }) %>8:
Rails.root: /usr/share/collabd/coreclient
Application Trace | Framework Trace | Full Traceapp/controllers/application_controller.rb:325:in `service_client'app/views/layouts/application.html.erb:5:in `_app_views_layouts_application_html_erb___1616978790_2215846900_0'app/controllers/application_controller.rb:44:in `render_server_error'app/controllers/application_controller.rb:43:in `render_server_error'
Request
Parameters:
None
Show session dump
Show env dump
Response
Headers:
None
Please helpI did a clean install of Lion/Lion Server, but I ran ino the same problem too with "Error Reading Settings" for both the profile manager and the wiki.
INVESTIGATION: I checked to see if the postgres database (which I presumed was were the settings were being read from).
# sudo serveradmin fullstatus postgres
postgres:dataDirHasBeenInitialized = yes
postgres:PG_VERSION = "9.0.4"
postgres:dataDir = "/var/pgsql"
postgres:postgresIsResponding = no # !!! why isn't it responding???
postgres:dataDirIsDirectory = yes
postgres:PGserverVersion = 0
postgres:dataDirExists = yes
postgres:setStateVersion = 1
postgres:state = "RUNNING"
PROBLEM: The postgres service hadn't been started properly; I found this by doing the following:
# sudo serveradmin stop postgres
postgres:state = "STOPPED"
# sudo serveradmin start postgres
postgres:error = "CANNOT_START_SERVICE_TIMEOUT_ERR"
FIX: The postgres service couldn't create the log file because it didn't have permission. I did this to fix it, then simply restarted it and all was well:
# sudo chmod 777 /Library/Logs/
# sudo serveradmin start postgres
postgres:state = "RUNNING"
I hope this helps someone. -
Calendar and Profile Manager Services - Service Unavailable
Not sure what has changed in my environment, because I have not made any manual changes lately. However I can't seem to access either iCal or Profile Manager from the web. Nor does the iCal seem to be propagating any informtion across the same account to different devices. I've read through many, many of the listings in these forums to no avail. That said, I haven't really been able to find one that displays the same error logs as I'm experiencing.
When trying to access from the web, I always get a the below...
Service Temporarily Unavailable
The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.
Apache/2.2.21 (Unix) mod_ssl/2.2.21 OpenSSL/0.9.8r DAV/2 PHP/5.3.8 with Suhosin-Patch Server at jared-hill.com Port 443
I've monitored my logs and here's the output I'm given....
Apr 27 16:15:24 jared-hill servermgrd[88]: servermgr_devicemgr: response statusCode: 0
Apr 27 16:15:24 jared-hill servermgrd[88]: servermgr_devicemgr: waiting for devicemgr to respond
Apr 27 16:15:24 jared-hill com.apple.launchd[1] (com.apple.collabcored4[2877]): Tried to setup shared memory more than once
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:1217:in `chmod': Operation not permitted - /var/log/collabd/coreclient.log (Errno::EPERM)
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:1217:in `chmod'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:870:in `chmod'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:869:in `each'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:869:in `chmod'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /usr/share/collabd/coreclient/config/application.rb:83
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `gem_original_require'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `require'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /usr/share/collabd/coreclient/config/environment.rb:11
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `gem_original_require'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `require'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /usr/share/collabd/coreclient/config.ru:13
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /Library/Ruby/Gems/1.8/gems/rack-1.2.1/lib/rack/builder.rb:46:in `instance_eval'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /Library/Ruby/Gems/1.8/gems/rack-1.2.1/lib/rack/builder.rb:46:in `initialize'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /usr/share/collabd/coreclient/config.ru:1:in `new'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: from /usr/share/collabd/coreclient/config.ru:1
Apr 27 16:15:25 jared-hill com.apple.launchd[1] (com.apple.collabcored4[2877]): Exited with code: 1
Apr 27 16:15:25 jared-hill com.apple.launchd[1] (com.apple.collabcored4): Throttling respawn: Will start in 9 seconds
Any help would be greatly appreciated!!!!hi there. did you find a way to solve this?
I am getting many (non-stop every minute) of "10/8/12 4:24:48.966 PM com.apple.launchd[1]: (com.apple.collabcored4) Throttling respawn: Will start in 7 seconds" errors. And my wiki is now unstable with error page once every few clicks.
Thanks in advance for any suggestion you might have.
Edward -
Profile manager: profile not verified
Hi. I have a problem with Profile manager enroll IPhones.
System: OS X 10.9.3 (Build 13D65)
Server: Server 3.1.2 (Build 13S4517)
Installed wildcard certificate for all services. Installed apple signed code signing certificate.
On my macbook all right, but on Iphones profile not verified and errors in system.log:
Jun 3 14:25:54 mdm.unact.ru xscertd-helper[49630]: Failed to find CRL, unknown CA : \352\023rr\u02c7\177
Jun 3 14:25:54 mdm.unact.ru ServerEventAgent[162]: CertsKeychainMonitor: received a keychain add event
Jun 3 14:25:54 mdm.unact.ru ReportCrash[49653]: Metadata.framework [Error]: couldn't get the client port
Jun 3 14:25:54 mdm.unact.ru ReportCrash[49653]: DebugSymbols was unable to start a spotlight query: spotlight is not responding or disabled.
Jun 3 14:25:55 mdm.unact.ru xscertd[49629]: Failed sending RemoveKeyFromKeychain command to com.apple.xscertd.helper: Connection interrupted
Jun 3 14:25:55 mdm com.apple.launchd[1] (com.apple.xscertd-helper[49630]): Job appears to have crashed: Segmentation fault: 11
Jun 3 14:25:55 mdm.unact.ru ReportCrash[49653]: Saved crash report for xscertd-helper[49630] version 63 to /Library/Logs/DiagnosticReports/xscertd-helper_2014-06-03-142555_mdm.crashMacBook certificates:
Iphone certificates: -
I recently installed a fresh version of Lion Server after attempting to fix a broken upgrade. With some help from others, I've managed to get all the new features working and have kept notes, having found that many or most of the necessary installation steps for both the OS and its services are almost entirely undocumented. When you get them working, they work great, but the entire process is very fragile, with simple setup steps causing breaks or even malicious behaviors. In case this is useful to others, here are my notes.
Start with an erased, virgin, single guid partitioned drive. Not an upgrade. Not simply a repartitioned drive. Erased. Clean. Anything else can and probably will break the Lion Server install, as I discovered myself more than once. Before erasing my drive, I already had Lion and made a Lion install DVD from instructions widely available on the web. I suppose you could also boot into the Lion recovery partition and use disk utility to erase the OS X partition then install a new partition, but I cut a DVD. The bottom line is to erase any old OS partitions. And of course to have multiple, independent backups: I use both Time Machine with a modified StdExclusions.plist and Carbon Copy Cloner.
Also, if you will be running your own personal cloud, you will want to know your domain name ahead of time, as this will be propagated everywhere throughout server, and changing anything related to SSL on Lion Server is a nightmare that I haven't figured out. If you don't yet have a domain name, go drop ten dollars at namecheap.com or wherever and reserve one before you start. Soemday someone will document how to change this stuff without breaking Lion Server, but we're not there yet. I'll assume the top-level domain name "domain.com" here.
Given good backups, a Lion Install DVD (or Recovery Partition), and a domain name, here are the steps, apparently all of which must be more-or-less strictly followed in this order.
DVD>Disk Utility>Erase Disk [or Recovery Partition>Disk Utility>Erase Partition]
DVD>Install Lion
Reboot, hopefully Lion install kicks in
Update, update, update Lion (NOT Lion Server yet) until no more updates
System Preferences>Network>Static IP on the LAN (say 10.0.1.2) and Computer name ("server" is a good standbye)
Terminal>$ sudo scutil --set HostName server.domain.com
App Store>Install Lion Server and run through the Setup
Download install Server Admin Tools, then update, update, update until no more updates
Server Admin>DNS>Zones [IF THIS WASN'T AUTOMAGICALLY CREATED (mine wasn't): Add zone domain.com with Nameserver "server.domain.com." (that's a FQDN terminated with a period) and a Mail Exchanger (MX record) "server.domain.com." with priority 10. Add Record>Add Machine (A record) server.domain.com pointing to the server's static IP. You can add fancier DNS aliases and a simpler MX record below after you get through the crucial steps.]
System Prefs>Network>Advanced>Set your DNS server to 127.0.0.1
A few DNS set-up steps and these most important steps:
A. Check that the Unix command "hostname" returns the correct hostname and you can see this hostname in Server.app>Hardware>Network
B. Check that DNS works: the unix commands "host server.domain.com" and "host 10.0.1.2" (assuming that that's your static IP) should point to each other. Do not proceed until DNS works.
C. Get Apple Push Notification Services CA via Server.app>Hardware>Settings><Click toggle, Edit... get a new cert ...>
D. Server.app>Profile Manager>Configure... [Magic script should create OD Master, signed SSL cert]
E. Server.app>Hardware>Settings>SSL Certificate> [Check to make sure it's set to the one just created]
F. Using Server.app, turn on the web, then Server.app>Profile Manager> [Click on hyperlink to get to web page, e.g. server.domain.com/profilemanager] Upper RHS pull-down, install Trust Profile
G. Keychain Access>System>Certificates [Find the automatically generated cert "Domain", the one that is a "Root certificate authority", Highlight and Export as .cer, email to all iOS devices, and click on the authority on the device. It should be entered as a trusted CA on all iOS devices. While you're at it, highlight and Export... as a .cer the certificate "IntermediateCA_SERVER.DOMAIN.COM_1", which is listed an an "Intermediate CA" -- you will use this to establish secure SSL connections with remote browsers hitting your server.]
H. iOS on LAN: browse to server.domain.com/mydevices> [click on LHS Install trust cert, then RHS Enroll device.
I. Test from web browser server.domain.com/mydevices: Lock Device to test
J. ??? Profit
12. Server Admin>DNS>Zones> Add convenient DNS alias records if necessary, e.g., mail.domain.com, smtp.domain.com, www.domain.com. If you want to refer to your box using the convenient shorthand "domain.com", you must enter the A record (NOT alias) "domain.com." FQDN pointing to the server's fixed IP. You can also enter the convenient short MX record "domain.com." with priority 11. This will all work on the LAN -- all these settings must be mirrored on the outside internet using the service from which you registered domain.com.
You are now ready to begin turning on your services. Here are a few important details and gotchas setting up cloud services.
Firewall
Server Admin>Firewall>Services> Open up all ports needed by whichever services you want to run and set up your router (assuming that your server sits behind a router) to port forward these ports to your router's LAN IP. This is most a straightforward exercise in grepping for the correct ports on this page, but there are several jaw-droppingly undocumented omissions of crucial ports for Push Services and Device Enrollment. If you want to enroll your iOS devices, make sure port 1640 is open. If you want Push Notifications to work (you do), then ports 2195, 2196, 5218, and 5223 must be open. The Unix commands "lsof -i :5218" and "nmap -p 5218 server.domain.com" (nmap available from Macports after installing Xcode from the App Store) help show which ports are open.
SSH
Do this with strong security. Server.app to turn on remote logins (open port 22), but edit /etc/sshd_config to turn off root and password logins.
PermitRootLogin no
PasswordAuthentication no
ChallengeResponseAuthentication no
I'm note sure if toggling the Allow remote logins will load this config file or, run "sudo launchctl unload -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist ; sudo launchctl load -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist" to restart the server's ssh daemon.
Then use ssh-keygen on remote client to generate public/private keys that can be used to remotely login to the server.
client$ ssh-keygen -t rsa -b 2048 -C client_name
[Securely copy ~/.ssh/id_rsa.pub from client to server.]
server$ cat id_rsa.pub > ~/.ssh/known_hosts
I also like DenyHosts, which emails detected ssh attacks to [email protected]. It's amazing how many ssh attacks there are on any open port 22. Not really an added security feature if you've turned off password logins, but good to monitor. Here's a Lion Server diff for the config file /usr/share/denyhosts:
$ diff denyhosts.cfg-dist denyhosts.cfg
12c12
< SECURE_LOG = /var/log/secure
> #SECURE_LOG = /var/log/secure
22a23
> SECURE_LOG = /var/log/secure.log
34c35
< HOSTS_DENY = /etc/hosts.deny
> #HOSTS_DENY = /etc/hosts.deny
40a42,44
> #
> # Mac OS X Lion Server
> HOSTS_DENY = /private/etc/hosts.deny
195c199
< LOCK_FILE = /var/lock/subsys/denyhosts
> #LOCK_FILE = /var/lock/subsys/denyhosts
202a207,208
> LOCK_FILE = /var/denyhosts/denyhosts.pid
> #
219c225
< ADMIN_EMAIL =
> ADMIN_EMAIL = [email protected]
286c292
< #SYSLOG_REPORT=YES
> SYSLOG_REPORT=YES
Network Accounts
User Server.app to create your network accounts; do not use Workgroup Manager. If you use Workgroup Manager, as I did, then your accounts will not have email addresses specified and iCal Server WILL NOT COMPLETELY WORK. Well, at least collaboration through network accounts will be handled clunkily through email, not automatically as they should. If you create a network account using Workgroup Manager, then edit that account using Server.app to specify the email to which iCal invitations may be sent. Server.app doesn't say anything about this, but that's one thing that email address entry is used for. This still isn't quite solid on Lion Server, as my Open Directory logs on a freshly installed Lion Server are filled with errors that read:
2011-12-12 15:05:52.425 EST - Module: SystemCache - Misconfiguration detected in hash 'Kerberos':
User 'uname' (/LDAPv3/127.0.0.1) - ID 1031 - UUID 98B4DF30-09CF-42F1-6C31-9D55FE4A0812 - SID S-0-8-83-8930552043-0845248631-7065481045-9092
Oh well.
Email
Email aliases are handled with the file /private/etc/postfix/aliases. Do something like this
root: myname
admin: myname
sysadmin: myname
certadmin: myname
webmaster: myname
my_alternate: myname
Then run "sudo newaliases". If your ISP is Comcast or some other large provider, you probably must proxy your outgoing mail through their SMTP servers to avoid being blocked as a spammer (a lot of SMTP servers will block email from Comcast/whatever IP addresses that isn't sent by Comcast). Use Server.app>Mail to enter your account information. Even then, the Lion Server default setup may fail using this proxy. I had to do this with the file /private/etc/postfix/main.cf:
cd /etc/postfix
sudo cp ./main.cf ./main.cf.no_smtp_sasl_security_options
sudo echo 'smtp_sasl_security_options = noanonymous' >> ./main.cf
sudo serveradmin stop mail
sudo serveradmin start mail
Finally, make sure that you're running a blacklisting srevice yourself! Server Admin>Mail>Filter> Use spamhaus.org as a blacklister. Finally, set up mail to use strong Kerberos/MD5 settings under on Server Admin>Mail>Advanced. Turn off password and clear logins. The settings should be set to "Use" your SSL cert, NOT "Require". "Require" consistently breaks things for me.
If you already installed the server's Trust Certificate as described above (and opened up the correct ports), email to your account should be pushed out to all clients.
iCal Server
Server.app>Calendar>Turn ON and Allow Email Invitations, Edit... . Whatever you do, do NOT enter your own email account information in this GUI. You must enter the account information for local user com.apple.calendarserver, and the password for this account, which is stored in the System keychain: Keychain Access>System> Item com.apple.servermgr_calendar. Double-click and Show Password, copy and paste into Server.app dialog. This is all described in depth here. If you enter your own account information here (DO NOT!), the iCal Server will delete all Emails in your Inbox just as soon as it reads them, exactly like it works for user com.apple.calendarserver. Believe me, you don't want to discover this "feature", which I expect will be more tightly controlled in some future update.
Web
The functionality of Server.app's Web management is pretty limited and awful, but a few changes to the file /etc/apache2/httpd.conf will give you a pretty capable and flexible web server, just one that you must manage by hand. Here's a diff for httpd.conf:
$ diff httpd.conf.default httpd.conf
95c95
< #LoadModule ssl_module libexec/apache2/mod_ssl.so
> LoadModule ssl_module libexec/apache2/mod_ssl.so
111c111
< #LoadModule php5_module libexec/apache2/libphp5.so
> LoadModule php5_module libexec/apache2/libphp5.so
139,140c139,140
< #LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
< #LoadModule encoding_module libexec/apache2/mod_encoding.so
> LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
> LoadModule encoding_module libexec/apache2/mod_encoding.so
146c146
< #LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
> LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
177c177
< ServerAdmin [email protected]
> ServerAdmin [email protected]
186c186
< #ServerName www.example.com:80
> ServerName domain.com:443
677a678,680
> # Server-specific configuration
> # sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart
> Include /etc/apache2/mydomain/*.conf
I did "sudo mkdir /etc/apache2/mydomain" and add specific config files for various web pages to host. For example, here's a config file that will host the entire contents of an EyeTV DVR, all password controlled with htdigest ("htdigest ~uname/.htdigest EyeTV uname"). Browsing to https://server.domain.com/eyetv points to /Users/uname/Sites/EyeTV, in which there's an index.php script that can read and display the EyeTV archive at https://server.domain.com/eyetv_archive. If you want Apache username accounts with twiddles as in https://server.domain.com/~uname, specify "UserDir Sites" in the configuration file.
Alias /eyetv /Users/uname/Sites/EyeTV
<Directory "/Users/uname/Sites/EyeTV">
AuthType Digest
AuthName "EyeTV"
AuthUserFile /Users/uname/.htdigest
AuthGroupFile /dev/null
Require user uname
Options Indexes MultiViews
AllowOverride All
Order allow,deny
Allow from all
</Directory>
Alias /eyetv_archive "/Volumes/Macintosh HD2/Documents/EyeTV Archive"
<Directory "/Volumes/Macintosh HD2/Documents/EyeTV Archive">
AuthType Digest
AuthName "EyeTV"
AuthUserFile /Users/uname/.htdigest
AuthGroupFile /dev/null
Require user uname
Options Indexes MultiViews
AllowOverride All
Order allow,deny
Allow from all
</Directory>
I think you can turn Web off/on in Server.app to relaunch apached, or simply "sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart".
Securely copy to all desired remote clients the file IntermediateCA_SERVER.DOMAIN.COM_1.cer, which you exported from System Keychain above. Add this certificate to your remote keychain and trust it, allowing secure connections between remote clients and your server. Also on remote clients: Firefox>Advanced>Encryption>View Certificates>Authorities>Import...> Import this certificate into your browser. Now there should be a secure connection to https://server.domain.com without any SSL warnings.
One caveat is that there should be a nice way to establish secure SSL to https://domain.com and https://www.domain.com, but the automagically created SSL certificate only knows about server.domain.com. I attempted to follow this advice when I originally created the cert and add these additional domains (under "Subject Alternate Name Extension"), but the cert creation UI failed when I did this, so I just gave up. I hope that by the time these certs expire, someone posts some documentation on how to manage and change Lion Server SSL scripts AFTER the server has been promoted to an Open Directory Master. In the meantime, it would be much appreciated if anyone can post either how to add these additional domain names to the existing cert, or generate and/or sign a cert with a self-created Keychain Access root certificate authority. In my experience, any attempt to mess with the SSL certs automatically generated just breaks Lion Server.
Finally, if you don't want a little Apple logo as your web page icon, create your own 16×16 PNG and copy it to the file /Library/Server/Web/Data/Sites/Default/favicon.ico. And request that all web-crawling robots go away with the file /Library/Server/Web/Data/Sites/Default/robots.txt:
User-agent: *
Disallow: /
Misc
VNC easily works with iOS devices -- use a good passphrase. Edit /System/Library/LaunchDaemons/org.postgresql.postgres.plist and set "listen_addresses=127.0.0.1" to allow PostgreSQL connections over localhost. I've also downloaded snort/base/swatch to build an intrusion detection system, and used Macports's squid+privoxy to build a privacy-enhanced ad-blocking proxy server.Privacy Enhancing Filtering Proxy and SSH Tunnel
Lion Server comes with its own web proxy, but chaining Squid and Privoxy together provides a capable and effective web proxy that can block ads and malicious scripts, and conceal information used to track you around the web. I've posted a simple way to build and use a privacy enhancing web proxy here. While you're at it, configure your OS and browsers to block Adobe Flash cookies and block Flash access to your camera, microphone, and peer networks. Read this WSJ article series to understand how this impacts your privacy. If you configure it to allow use for anyone on your LAN, be sure to open up ports 3128, 8118, and 8123 on your firewall.
If you've set up ssh and/or VPN as above, you can securely tunnel in to your proxy from anywhere. The syntax for ssh tunnels is a little obscure, so I wrote a little ssh tunnel script with a simpler flexible syntax. This script also allows secure tunnels to other services like VNC (port 5900). If you save this to a file ./ssht (and chmod a+x ./ssht), example syntax to establish an ssh tunnel through localhost:8080 (or, e.g., localhost:5901 for secure VNC Screen Sharing connects) looks like:
$ ./ssht 8080:[email protected]:3128
$ ./ssht 8080:alice@:
$ ./ssht 8080:
$ ./ssht 8018::8123
$ ./ssht 5901::5900 [Use the address localhost:5901 for secure VNC connects using OS X's Screen Sharing or Chicken of the VNC (sudo port install cotvnc)]
$ vi ./ssht
#!/bin/sh
# SSH tunnel to squid/whatever proxy: ssht [-p ssh_port] [localhost_port:][user_name@][ip_address][:remotehost][:remote_port]
USERNAME_DEFAULT=username
HOSTNAME_DEFAULT=domain.com
SSHPORT_DEFAULT=22
# SSH port forwarding specs, e.g. 8080:localhost:3128
LOCALHOSTPORT_DEFAULT=8080 # Default is http proxy 8080
REMOTEHOST_DEFAULT=localhost # Default is localhost
REMOTEPORT_DEFAULT=3128 # Default is Squid port
# Parse ssh port and tunnel details if specified
SSHPORT=$SSHPORT_DEFAULT
TUNNEL_DETAILS=$LOCALHOSTPORT_DEFAULT:$USERNAME_DEFAULT@$HOSTNAME_DEFAULT:$REMOT EHOST_DEFAULT:$REMOTEPORT_DEFAULT
while [ "$1" != "" ]
do
case $1
in
-p) shift; # -p option
SSHPORT=$1;
shift;;
*) TUNNEL_DETAILS=$1; # 1st argument option
shift;;
esac
done
# Get local and remote ports, username, and hostname from the command line argument: localhost_port:user_name@ip_address:remote_host:remote_port
shopt -s extglob # needed for +(pattern) syntax; man sh
LOCALHOSTPORT=$LOCALHOSTPORT_DEFAULT
USERNAME=$USERNAME_DEFAULT
HOSTNAME=$HOSTNAME_DEFAULT
REMOTEHOST=$REMOTEHOST_DEFAULT
REMOTEPORT=$REMOTEPORT_DEFAULT
# LOCALHOSTPORT
CDR=${TUNNEL_DETAILS#+([0-9]):} # delete shortest leading +([0-9]):
CAR=${TUNNEL_DETAILS%%$CDR} # cut this string from TUNNEL_DETAILS
CAR=${CAR%:} # delete :
if [ "$CAR" != "" ] # leading or trailing port specified
then
LOCALHOSTPORT=$CAR
fi
TUNNEL_DETAILS=$CDR
# REMOTEPORT
CDR=${TUNNEL_DETAILS%:+([0-9])} # delete shortest trailing :+([0-9])
CAR=${TUNNEL_DETAILS##$CDR} # cut this string from TUNNEL_DETAILS
CAR=${CAR#:} # delete :
if [ "$CAR" != "" ] # leading or trailing port specified
then
REMOTEPORT=$CAR
fi
TUNNEL_DETAILS=$CDR
# REMOTEHOST
CDR=${TUNNEL_DETAILS%:*} # delete shortest trailing :*
CAR=${TUNNEL_DETAILS##$CDR} # cut this string from TUNNEL_DETAILS
CAR=${CAR#:} # delete :
if [ "$CAR" != "" ] # leading or trailing port specified
then
REMOTEHOST=$CAR
fi
TUNNEL_DETAILS=$CDR
# USERNAME
CDR=${TUNNEL_DETAILS#*@} # delete shortest leading +([0-9]):
CAR=${TUNNEL_DETAILS%%$CDR} # cut this string from TUNNEL_DETAILS
CAR=${CAR%@} # delete @
if [ "$CAR" != "" ] # leading or trailing port specified
then
USERNAME=$CAR
fi
TUNNEL_DETAILS=$CDR
# HOSTNAME
HOSTNAME=$TUNNEL_DETAILS
if [ "$HOSTNAME" == "" ] # no hostname given
then
HOSTNAME=$HOSTNAME_DEFAULT
fi
ssh -p $SSHPORT -L $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT -l $USERNAME $HOSTNAME -f -C -q -N \
&& echo "SSH tunnel established via $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT\n\tto $USERNAME@$HOSTNAME:$SSHPORT." \
|| echo "SSH tunnel FAIL." -
Unable to push user profiles to AD groups with Profile Manager since upgrade to Server v3
Since upgrading our OS X Mac server from 10.8.5 to 10.9.1, and OS X Server app to v3 (now 3.0.2) I have been unable to push or modify user profiles to AD groups (or AD users) using Profile Manager. This was working fine on OS X 10.8.5. Pushing device profiles is still working OK after the upgrade.
From what I can see from the logs on the client side and server side, it seems related to a problem with the mdm authtoken.
In the client console I can see this entry:
27/01/14 14:30:15.844 mdmclient[38557]: *** ERROR *** [Agent:636102071] Unable to proceed with connection to: https://ourserver.ourdomain/devicemanagement/api/device/mdm_connect (com.apple.mdmconfig.mdm) because don't have valid MDM AuthToken
On the server, in the php.log I can see the corresponding attempt to authenticate:
1::Jan 27 14:29:50.930 [158] <192.168.28.171> {require_once (mdm_checkin.php:11)} vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv - PUT mdm_checkin
0::Jan 27 14:29:50.931 [158] <192.168.28.171> checkin: 'UserAuthenticate'
1::Jan 27 14:29:50.936 [158] <192.168.28.171> {Target_for_incoming_request (target.php:209)} Found target NETWORK LS: <User[156]@ourclientmachine>
0::Jan 27 14:29:50.937 [158] <192.168.28.171> {LabSession_validate_auth_token (mdm_checkin.php:22)} Failed auth for target NETWORK LS: <User[156]@Device[1697]>, incoming_request={
0::Jan 27 14:29:50.937 [158] <192.168.28.171> 'MessageType'=>'UserAuthenticate',
0::Jan 27 14:29:50.937 [158] <192.168.28.171> 'UDID'=>'17aff5c5a40f51acbbd78023d0028c80',
0::Jan 27 14:29:50.937 [158] <192.168.28.171> 'UserID'=>'A5EA25B7-7CCD-4EF4-B240-F23DED275EEC'
0::Jan 27 14:29:50.937 [158] <192.168.28.171> }
1::Jan 27 14:29:50.965 [158] <192.168.28.171> {SendFinalOutput (mdm_checkin.php:145)} Sent Final Output (407 bytes)
1::Jan 27 14:29:50.965 [158] <192.168.28.171> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ - /devicemanagement/mdm/mdm_checkin
0::Jan 27 14:29:50.965 [158] <192.168.28.171> {SendFinalOutput (mdm_checkin.php:145)} Completed in 34ms | 200 OK [https://ourserver.ourdomain/devicemanagement/api/device/mdm_checkin]
So I can see there is a failure to authenticate, but don't really know how to troubleshoot this further. Or maybe this is just a bug in the new server app?
I have tried to remove and re-enroll clients in Profile Manager but no joy there.
In the client's Keychain I can see an MDM user AuthToken linked to the correct user account.
Thanks in advance for any help or suggestionsI just wanted to update my post, as this issue for me is resolved.
I uninstalled and reinstalled the Server.app on our Mac server, since then I've been able to push profiles to AD Users and Groups. I guess that in my case the Server app got into a bit of a mess when it was upgraded to v3.
Now the next headache I have is that my AD Groups which are displayed in Profile Manager are not syncing any recent changes. I think I'm probably seeing the same issue as described in this post
https://discussions.apple.com/message/25420919#25420919 -
VPP Distribution issues with OSX Server Profile Manager
Hi, I have a new issue with my OSX 10.9.5 Server. I use VPP to distribute apps to users devices, when I would add a new user I would send them an invitation message through /profilemanager . All was working well until recenetly , the message still arrives in the users mailbox however when you click the "sign in" link on the "receive apps and books from xxxxx" email instead of opening through the Mac App store app it now opens Safari and connects to the profile manager server , any ideas ? it never has done this before and although I thought it was a new feature or method I can not seem to resolve the issue.
Hi if when you are redirected back to your Mac Server you enter the user name and password of the user you are trying to receive VPP apps for i.e the Open Directory credentials it will then open the App Store providing the credentials are correctly entered so it looks like an additional layer of security. The process is click on the link in the VPP invite email, this takes you to your Mac Server profile manager, log on with your OD account, App store then opens on your Mac like it used to.
Maybe you are looking for
-
Oracle 9i export error after running catexp.sql file
After running catexp.sql file in oracle 9i 9.2.0.7.0 as system user,it gives the following error while logging ORA-04020: deadlock detected while trying to lock object SYS.DBMS_STANDARD please help me..............
-
Not sure if this is the place to post this but here goes, I am getting all these errors on my mac clients. The problem is they freeze on log out and must be manually shut down. They are all brand new eMacs, 10.4.7, My server is 10.4.8, xserve. =====
-
HT6114 Update 10.9.2. fails to install
When I try to install the 10.9.2 update, the SoftwareUpdateLauncher shows up and hangs, any ideas what to do? -- https://twitter.com/drkrab/status/438975312106635264/photo/1 I've tried both installing it via the AppStore app, and downloading the "com
-
Podcast 'artists' appearing in music Artists
Hi, Is there an option that prevents the name of podcasts artists from appearing in my music->artists list? I listen a lot of TWiT.tv podcasts but the names of the panel change regularly and they appear in the artist tag. So now my artists list conta
-
Hi all: I have an user who gets this message when trying to load Esscmd from command lines: "Error: unable to init client" All others users have essmcd with same version working OK. The version is 5.0.2. He had version 6.5.4.7 which was uninstalled b