Profile Management Framework

I am developing an application in Java Swing and i have a requirement that i should be able to store some UI related User Preferences locally on client's machine. Some of these preferences could be,
1) To store the last appearance of a table in the application( things like column width, column by which the table was sorted) and to restore the table with same look and feel.
2) To always open the application with the module( a particular window) preferred by the user.
Well, i can always achieve this by writing tons of code. But, I was wondering if Core Java or any of its extensions provide some framework for this purpose so that i can go about my job in a seamless manner. To be more precise, I am looking for some API for UI profile management.
Any ideas/pointers are welcome. Even a reference to a 3rd Party API will be of great help !
-Ganesh

I am trying to do something very similar to this. I recently looked into the Preferences API that comes with JDK 1.4, but we chose a JTree paradigm for our application. Basically what this means is that for most of the nodes, the right panel will display a table/grid. We plan on storing the table layout similar to what you want to do, but this has to be specific to each separate node. That will in turn be a lot of data and the preferences API is not recommended for this.
The other option is to use properties files, but the name/value pair might not be flexible enough.
Finally, we're looking into using XML. The idea being to write an XML configuration file that stores all of the prefernces information. Still need to do further research, but if I find something, will let you know. Do the same.
Wasif

Similar Messages

  • Profile Manager not quite loading...

    Hi all,
    I have a question about Profile Manager not loading on a fresh install. I've got this working in the past, but don't ask me how as I don't know anymore, plus the conditions were different.
    Now when I go to https://server.example.com/profilemanager or /mydevices I can't even log in and it doesn't show anything. The status bar in Safari shows that 5 out of 7 items have been loaded and when I view the source, it shows:
    <!DOCTYPE html><html>  <head>    <script>    var _SC_performanceEvents = { headStart: new Date().getTime() };    </script>        <meta http-equiv="Content-type" content="text/html; charset=utf-8" />    <meta http-equiv="X-UA-Compatible" content="IE=8" />    <meta http-equiv="Content-Script-Type" content="text/javascript" />    <meta name="apple-mobile-web-app-capable" content="yes" />    <meta name="apple-mobile-web-app-status-bar-style" content="default" />    <meta name="viewport" content="initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no" />    <link rel="apple-touch-icon" href="/devicemanagement/console/sproutcore/foundation/en/b74a542f762e55107620d6f19465a 4ec3258c4df/images/sproutcore-logo.png" />  <link rel="apple-touch-startup-image" media="screen and (orientation:portrait)" href="/devicemanagement/console/sproutcore/foundation/en/b74a542f762e55107620d6f19465a 4ec3258c4df/images/sproutcore-startup-portrait.png" />        <link rel="apple-touch-startup-image" media="screen and (orientation:landscape)" href="/devicemanagement/console/sproutcore/foundation/en/b74a542f762e55107620d6f19465a 4ec3258c4df/images/sproutcore-startup-landscape.png" />  <link rel="shortcut icon" href="" type="image/x-icon" />        <title>Admin</title>  <script type="text/javascript">/* >>>>>>>>>> BEGIN source/core.js */// ==========================================================================// Project:   SproutCore - JavaScript Application Framework// Copyright: ©2006-2009 Sprout Systems, Inc. and contributors.//            Portions ©2008-2009 Apple Inc. All rights reserved.// License:   Licensed under MIT license (see license.js)// ==========================================================================
    /* >>>>>>>>>> BEGIN source/system/browser.js */// ==========================================================================// Project:   SproutCore - JavaScript Application Framework// Copyright: ©2006-2009 Sprout Systems, Inc. and contributors.//            Portions ©2008-2009 Apple Inc. All rights reserved.// License:   Licensed under MIT license (see license.js)// ==========================================================================
    var SC = SC || { BUNDLE_INFO: {}, LAZY_INSTANTIATION: {} };
    SC.browser = (function() {  var userAgent = navigator.userAgent.toLowerCase(),      version = (userAgent.match( /.+(?:rv|it|ra|ie)[\/: ]([\d.]+)/ ) || [])[1] ;
      var browser = {    version: version,    safari: (/webkit/).test( userAgent ) ? version : 0,    opera: (/opera/).test( userAgent ) ? version : 0,    msie: (/msie/).test( userAgent ) && !(/opera/).test( userAgent ) ? version : 0,    mozilla: (/mozilla/).test( userAgent ) && !(/(compatible|webkit)/).test( userAgent ) ? version : 0,    mobileSafari: (/apple.*mobile.*safari/).test(userAgent) ? version : 0,    chrome: (/chrome/).test( userAgent ) ? version : 0,    windows: !!(/(windows)/).test(userAgent),    mac: !!((/(macintosh)/).test(userAgent) || (/(mac os x)/).test(userAgent)),    language: (navigator.language || navigator.browserLanguage).split('-', 1)[0]  };      browser.current = browser.msie ? 'msie' : browser.mozilla ? 'mozilla' : browser.safari ? 'safari' : browser.opera ? 'opera' : 'unknown' ;  return browser ;})();
    /* >>>>>>>>>> BEGIN source/system/bench.js */// ==========================================================================// Project:   SproutCore - JavaScript Application Framework// Copyright: ©2006-2010 Sprout Systems, Inc. and contributors.//            Portions ©2008-2010 Apple Inc. All rights reserved.// License:   Licensed under MIT license (see license.js)// ==========================================================================
    // sc_require("system/browser")if (typeof _SC_performanceEvents !== "undefined") {  SC._performanceEvents = _SC_performanceEvents;  _SC_performanceEvents = undefined;} else {  SC._performanceEvents = { headStart: new Date().getTime() };}/* >>>>>>>>>> BEGIN source/system/loader.js */// ==========================================================================// Project:   SproutCore - JavaScript Application Framework// Copyright: ©2006-2009 Sprout Systems, Inc. and contributors.//            Portions ©2008-2009 Apple Inc. All rights reserved.// License:   Licensed under MIT license (see license.js)// ==========================================================================
    // sc_require("system/browser");
    SC.bundleDidLoad = function(bundle) {  var info = this.BUNDLE_INFO[bundle] ;  if (!info) info = this.BUNDLE_INFO[bundle] = {} ;  info.loaded = true ;};
    SC.bundleIsLoaded = function(bundle) {  var info = this.BUNDLE_INFO[bundle] ;  return info ? !!info.loaded : false ;};
    SC.loadBundle = function() { throw "SC.loadBundle(): SproutCore is not loaded."; };
    SC.setupBodyClassNames = function() {  var el = document.body ;  if (!el) return ;  var browser, platform, shadows, borderRad, classNames, style;  browser = SC.browser.current ;  platform = SC.browser.windows ? 'windows' : SC.browser.mac ? 'mac' : 'other-platform' ;  style = document.documentElement.style;  shadows = (style.MozBoxShadow !== undefined) ||                 (style.webkitBoxShadow !== undefined) ||                (style.oBoxShadow !== undefined) ||                (style.boxShadow !== undefined);    borderRad = (style.MozBorderRadius !== undefined) ||               (style.webkitBorderRadius !== undefined) ||              (style.oBorderRadius !== undefined) ||              (style.borderRadius !== undefined);    classNames = el.className ? el.className.split(' ') : [] ;  if(shadows) classNames.push('box-shadow');  if(borderRad) classNames.push('border-rad');  classNames.push(browser) ;  classNames.push(platform) ;  if (parseInt(SC.browser.msie,0)==7) classNames.push('ie7') ;  if (SC.browser.mobileSafari) classNames.push('mobile-safari') ;  if ('createTouch' in document) classNames.push('touch');  el.className = classNames.join(' ') ;} ;
    /* >>>>>>>>>> BEGIN bundle_loaded.js */; if ((typeof SC !== 'undefined') && SC && SC.bundleDidLoad) SC.bundleDidLoad('sproutcore/bootstrap');
    </script>
         <link href="/devicemanagement/console/sproutcore/en/a8b61437c15a278078f3fffb972489104026f783 /stylesheet-packed.css" rel="stylesheet" type="text/css" />  <link href="/devicemanagement/console/apple_theme_v2/en/63cd5f0fb706373f354a879d93bb4f0dc898 b2b2/stylesheet.css" rel="stylesheet" type="text/css" />  <link href="/devicemanagement/console/admin/en/0803f0af1163f6efa8d9d71f0cc7179d84da0f27/styl esheet.css" rel="stylesheet" type="text/css" />       <script>    SC._performanceEvents['headEnd'] = new Date().getTime();    </script>  </head>      <body class="apple-theme-v2 focus">      <script>    SC._performanceEvents['bodyStart'] = new Date().getTime();    </script><script type="text/javascript">/* >>>>>>>>>> BEGIN source/setup_body_class_names.js */// ==========================================================================// Project:   SproutCore - JavaScript Application Framework// Copyright: ©2006-2009 Sprout Systems, Inc. and contributors.//            Portions ©2008-2009 Apple Inc. All rights reserved.// License:   Licensed under MIT license (see license.js)// ==========================================================================
    // sc_resource('setup_body_class_names'); // publish into inline format
    if (SC.setupBodyClassNames) SC.setupBodyClassNames() ;
    </script>
      <script type="text/javascript" src="/devicemanagement/console/sproutcore/en/a8b61437c15a278078f3fffb972489104026f783 /javascript-packed.js"></script>  <script type="text/javascript" src="/devicemanagement/console/apple_theme_v2/en/63cd5f0fb706373f354a879d93bb4f0dc898 b2b2/javascript.js"></script>  <script type="text/javascript" src="/devicemanagement/console/admin/en/0803f0af1163f6efa8d9d71f0cc7179d84da0f27/java script.js"></script><script type="text/javascript">String.preferredLanguage = "en";</script>
      <script>  SC._performanceEvents['bodyEnd'] = new Date().getTime();  </script> </body></html>
    ...which looks fine to me. My question is: why doesn't the page show up at all (ultimately it fails)?
    I have included a screen print of my server's server.app below:
    Thanks in advance.

    I had multiple IP's set on my server, which randomly seemed to switch. It seems like there is an incompatibility still between Server Admin and server.app. Since Apple is pressing developers to test server admin and server.app I am confident those problems will resolve eventually, but for now I have deleted all-but-1 IPv4 and 1 IPv6 address (same interface), the networking interface overview for my server within Server Admin was updated and it looks like it works solid now, this was not by design I presume, so this must be another bug plaguing Lion...
    After upgrading Postgres to 9.1.3 and upgrading webmail (upgrade: usr/share/webmail) from www.roundcube.net, making a new site webmail.example.com with the files stored in /Library/Server/Web/Data/Sites/CustomSitesDefault/webmail/ I made a symbolic link from that 'directory' to the actual built in webmail facility found in /usr/share/webmail by entering the following in terminal.
    ln -s -i /usr/share/webmail/ /Library/Server/Web/Data/Sites/CustomSitesDefault/webmail/
    By doing this it will ask to remove a directory, if you didn't put any important files in there, which I presume you didn't, confirm with the letter y and press enter.
    Webmail now works every time the way I want it The same goes for Profile Manager, at least for now...

  • I installed Lion Server and when I click on the Profile Manager I get an error and nothing shows - I can't figure out how to re install Lion Server to fix this - any ideas

    I installed Lion Server on my Mac Pro.  Everything looked to be working until I checked Profile Manager and I get an error message "Error Reading Settings"  Not sure how to fix it.  Tried to download Server agian but can't.

    Look at /usr/lib/libpq library. I have had the same problem. There were following files:
    -rwxr-xr-x  1 root  wheel  163680 30 jul 21:17 /usr/lib/libpq.5.4.dylib
    lrwxr-xr-x  1 root  wheel      15 30 jul 21:20 /usr/lib/libpq.dylib -> libpq.5.4.dylib
    Result for command sudo /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/wipeDB .sh was:
    Password:
    devicemgr:state = "STOPPED"
    postgres:state = "RUNNING"
    (in /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend)
    Couldn't drop device_management : #<RuntimeError: Please install the postgresql adapter: `gem install activerecord-postgresql-adapter` (dlopen(/Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backen d/vendor/gems/pg-0.9.0/lib/pg_ext.bundle, 9): Library not loaded: /usr/lib/libpq.5.dylib
      Referenced from: /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor /gems/pg-0.9.0/lib/pg_ext.bundle
      Reason: image not found - /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor /gems/pg-0.9.0/lib/pg_ext.bundle)>
    (in /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend)
    Please install the postgresql adapter: `gem install activerecord-postgresql-adapter` (dlopen(/Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backen d/vendor/gems/pg-0.9.0/lib/pg_ext.bundle, 9): Library not loaded: /usr/lib/libpq.5.dylib
      Referenced from: /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor /gems/pg-0.9.0/lib/pg_ext.bundle
      Reason: image not found - /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor /gems/pg-0.9.0/lib/pg_ext.bundle)
    /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor/ rails/activerecord/lib/active_record/connection_adapters/abstract/connection_spe cification.rb:76:in `establish_connection'
    /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor/ rails/railties/lib/tasks/databases.rake:69:in `create_database'
    /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/vendor/ rails/railties/lib/tasks/databases.rake:31
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 636:in `call'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 636:in `execute'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 631:in `each'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 631:in `execute'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 597:in `invoke_with_call_chain'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/monitor. rb:242:in `synchronize'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 590:in `invoke_with_call_chain'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 583:in `invoke'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2051:in `invoke_task'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2029:in `top_level'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2029:in `each'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2029:in `top_level'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2068:in `standard_exception_handling'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2023:in `top_level'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2001:in `run'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 2068:in `standard_exception_handling'
    /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rake.rb: 1998:in `run'
    /usr/bin/rake:31
    Couldn't create database for {"adapter"=>"postgresql", "username"=>"_devicemgr", "encoding"=>"UTF8", "pool"=>5, "database"=>"device_management"}
    devicemgr:state = "STARTING"
    There was missing symlink to right version of libpq dynamic library!
    After I entered the following commands and now it works well for me:
    $ cd /usr/lib
    $ sudo ln -s libpq.5.4.dylib libpq.5.dylib
    $ sudo /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/wipeDB .sh
    devicemgr:state = "STOPPED"
    postgres:state = "RUNNING"
    (in /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend)
    (in /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend)
    devicemgr:state = "RUNNING"
    Milan

  • 10.7.2 Profile manager semi broken

    Hi,
    Yesterday morning i've upgraded a Mac mini to 10.7.2, since that moment profile manager is acting weird.
    I can still register devices, but when i try to update information or lock the device from the interface, it just hangs.
    However, it doesn't do this all the time.
    The last issue i encountered, was an unhandeld exception when i was testing with the App pushing.
    Oct 14 12:37:03 mac01 ProfileManager[283]: Caught unhandled exception undefined method `each' for nil:NilClass at /usr/share/devicemgr/backend/app/models/cfprefs_knob_set.rb:45:in `replace_string_types'
    When i got this error, the Update Info also stopped working, same for the App push.
    Anyone else who encountered this problems, and perhaps knows a fix?
    Thanks.

    Hi David,
    here is the output of profilemanager.log:
    Jan  9 09:43:40 fqdn ProfileManager[254] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:40) [POST]
    Jan  9 09:43:40 fqdn ProfileManager[255] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:40) [POST]
    Jan  9 09:43:41 fqdn ProfileManager[255] <Info>: Completed in 103ms (View: 0, DB: 3) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:43:41 fqdn ProfileManager[256] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:41) [POST]
    Jan  9 09:43:41 fqdn ProfileManager[254] <Info>: Completed in 294ms (View: 1, DB: 19) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:43:41 fqdn ProfileManager[259] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:41) [POST]
    Jan  9 09:43:41 fqdn ProfileManager[257] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:41) [POST]
    Jan  9 09:43:41 fqdn ProfileManager[256] <Info>: Completed in 303ms (View: 0, DB: 4) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:43:41 fqdn ProfileManager[257] <Info>: Completed in 311ms (View: 0, DB: 4) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:43:41 fqdn ProfileManager[260] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:41) [POST]
    Jan  9 09:43:41 fqdn ProfileManager[259] <Info>: Completed in 465ms (View: 0, DB: 16) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:43:41 fqdn ProfileManager[260] <Info>: Completed in 114ms (View: 0, DB: 3) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:43:41 fqdn ProfileManager[261] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:41) [POST]
    Jan  9 09:43:42 fqdn ProfileManager[261] <Info>: Completed in 398ms (View: 0, DB: 95) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:43:54 fqdn ProfileManager[254] <Info>: Processing DataFileController#upload (for 172.16.0.201 at 2012-01-09 09:43:54) [POST]
    Jan  9 09:43:55 fqdn ProfileManager[254] <Info>: Completed in 103ms (View: 1, DB: 11) | 200 OK [https://fqdn/data_file/upload]
    Jan  9 09:43:55 fqdn ProfileManager[255] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:43:55) [POST]
    Jan  9 09:43:55 fqdn ProfileManager[255] <Error>: Caught unhandled exception undefined method `each' for nil:NilClass at /usr/share/devicemgr/backend/app/models/cfprefs_knob_set.rb:45:in `replace_string_types'
              /usr/share/devicemgr/backend/app/helpers/data_file_helper.rb:63:in `create_ios_application_from_file'
              /usr/share/devicemgr/backend/app/controllers/magic_controller.rb:202:in `send'
              /usr/share/devicemgr/backend/app/controllers/magic_controller.rb:202:in `do_magic'
              /usr/share/devicemgr/backend/app/controllers/magic_controller.rb:176:in `each'
              /usr/share/devicemgr/backend/app/controllers/magic_controller.rb:176:in `do_magic'
              /usr/share/devicemgr/backend/app/controllers/magic_controller.rb:175:in `each'
              /usr/share/devicemgr/backend/app/controllers/magic_controller.rb:175:in `do_magic'
              /usr/share/devicemgr/backend/app/controllers/magic_controller.rb:168:in `each'
              /usr/share/devicemgr/backend/app/controllers/magic_controller.rb:168:in `do_magic'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /base.rb:1333:in `send'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /base.rb:1333:in `perform_action_without_filters'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:617:in `call_filters'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:638:in `run_before_filters'
              /usr/share/devicemgr/backend/app/controllers/application_controller.rb:71: in `give_session_to_models'
              /usr/share/devicemgr/backend/vendor/rails/activesupport/lib/active_support /callbacks.rb:178:in `send'
              /usr/share/devicemgr/backend/vendor/rails/activesupport/lib/active_support /callbacks.rb:178:in `evaluate_method'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:186:in `call'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:635:in `run_before_filters'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:615:in `call_filters'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:610:in `perform_action_without_benchmark'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /benchmarking.rb:68:in `perform_action_without_rescue'
              /usr/share/devicemgr/backend/vendor/rails/activesupport/lib/active_support /core_ext/benchmark.rb:17:in `ms'
              /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/be nchmark.rb:308:in `realtime'
              /usr/share/devicemgr/backend/vendor/rails/activesupport/lib/active_support /core_ext/benchmark.rb:17:in `ms'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /benchmarking.rb:68:in `perform_action_without_rescue'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /rescue.rb:160:in `perform_action_without_flash'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /flash.rb:151:in `perform_action'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /base.rb:532:in `send'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /base.rb:532:in `process_without_filters'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /filters.rb:606:in `process'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /base.rb:391:in `process'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /base.rb:386:in `call'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /routing/route_set.rb:438:in `call'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /dispatcher.rb:87:in `dispatch'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /dispatcher.rb:121:in `_call'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /dispatcher.rb:130:in `build_middleware_stack'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /string_coercion.rb:25:in `call'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /string_coercion.rb:25:in `call'
              /usr/share/devicemgr/backend/vendor/gems/rack-1.1.0/lib/rack/head.rb:9:in `call'
              /usr/share/devicemgr/backend/vendor/gems/rack-1.1.0/lib/rack/methodoverrid e.rb:24:in `call'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /params_parser.rb:15:in `call'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /session/abstract_store.rb:177:in `call'
              /usr/share/devicemgr/backend/vendor/rails/activerecord/lib/active_record/q uery_cache.rb:29:in `call'
              /usr/share/devicemgr/backend/vendor/rails/activerecord/lib/active_record/c onnection_adapters/abstract/query_cache.rb:34:in `cache'
              /usr/share/devicemgr/backend/vendor/rails/activerecord/lib/active_record/q uery_cache.rb:9:in `cache'
              /usr/share/devicemgr/backend/vendor/rails/activerecord/lib/active_record/q uery_cache.rb:28:in `call'
              /usr/share/devicemgr/backend/vendor/rails/activerecord/lib/active_record/c onnection_adapters/abstract/connection_pool.rb:361:in `call'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /failsafe.rb:26:in `call'
              /usr/share/devicemgr/webserver/gems/gems/rack-1.1.0/lib/rack/lock.rb:11:in `call'
              /usr/share/devicemgr/webserver/gems/gems/rack-1.1.0/lib/rack/lock.rb:11:in `synchronize'
              /usr/share/devicemgr/webserver/gems/gems/rack-1.1.0/lib/rack/lock.rb:11:in `call'
              /usr/share/devicemgr/backend/vendor/rails/actionpack/lib/action_controller /dispatcher.rb:106:in `call'
              /usr/share/devicemgr/backend/vendor/rails/railties/lib/rails/rack/static.r b:31:in `call'
              /usr/share/devicemgr/backend/vendor/rails/railties/lib/rails/rack/log_tail er.rb:17:in `call'
              /usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/connection.rb :76:in `pre_process'
              /usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/connection.rb :74:in `catch'
              /usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/connection.rb :74:in `pre_process'
              /usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/connection.rb :57:in `process'
              /usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/connection.rb :42:in `receive_data'
              /usr/share/devicemgr/webserver/gems/gems/eventmachine-0.12.10/lib/eventmac hine.rb:256:in `run_machine'
              /usr/share/devicemgr/webserver/gems/gems/eventmachine-0.12.10/lib/eventmac hine.rb:256:in `run'
              /usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/backends/base .rb:57:in `start'
              /usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/server.rb:156 :in `start'
              /usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/controllers/c ontroller.rb:80:in `start'
              /usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/runner.rb:177 :in `send'
              /usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/runner.rb:177 :in `run_command'
              /usr/share/devicemgr/webserver/gems/gems/thin-1.2.7/lib/thin/runner.rb:143 :in `run!'
              /usr/share/devicemgr/webserver/thin:8
    Jan  9 09:43:55 fqdn ProfileManager[255] <Info>: Completed in 362ms (View: 0, DB: 3) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:45:23 fqdn ProfileManager[259] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
    Jan  9 09:45:23 fqdn ProfileManager[257] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
    Jan  9 09:45:23 fqdn ProfileManager[259] <Info>: Completed in 109ms (View: 0, DB: 3) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:45:23 fqdn ProfileManager[261] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
    Jan  9 09:45:23 fqdn ProfileManager[257] <Info>: Completed in 311ms (View: 0, DB: 17) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:45:23 fqdn ProfileManager[254] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
    Jan  9 09:45:23 fqdn ProfileManager[255] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
    Jan  9 09:45:23 fqdn ProfileManager[261] <Info>: Completed in 307ms (View: 0, DB: 3) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:45:23 fqdn ProfileManager[254] <Info>: Completed in 105ms (View: 0, DB: 4) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:45:23 fqdn ProfileManager[256] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
    Jan  9 09:45:23 fqdn ProfileManager[256] <Info>: Completed in 97ms (View: 0, DB: 2) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:45:23 fqdn ProfileManager[255] <Info>: Completed in 404ms (View: 0, DB: 16) | 200 OK [https://fqdn/magic/do_magic]
    Jan  9 09:45:23 fqdn ProfileManager[258] <Info>: Processing MagicController#do_magic (for 172.16.0.201 at 2012-01-09 09:45:23) [POST]
    Jan  9 09:45:24 fqdn ProfileManager[258] <Info>: Completed in 392ms (View: 0, DB: 72) | 200 OK [https://fqdn/magic/do_magic]
    We can't upload any apps. Do you have any ideas to solve this?
    Thank you!
    Bye Gunnar...

  • Profile Manager Web Interface Not Loading

    I set up a Mac mini with 10.9 and Server 3.1.2 to be our MDM server. After the initial configuration the https://<servername>/profilemanager and /mydevices web interfaces work just fine. I'm able to enroll five test OSX and iOS devices. Then I come in the next day and the /profilemanager web interface is unreachable. The /mydevices web interface still works though.
    I tried reinstalling 10.9 and server and setting up from scratch and the problem repeats itself the next day. According to this thread deleting Server.app and reinstalling is one solution, but that did not work. I also tried resetting the Profile Manager, but that did not solve this issue either.
    When trying to load /profilemanager on the server, a MacBook, and iPad, Safari will just hang when loading the page. The title bar changes to "Admin," the blue status bar hangs, and the page does not load.
    This one is baffling. Any suggestions as to what to do would be most appreciated.

    xcscredd(1156) deny file-read-metadata /Library/Server/ProfileManager
    Process:         xcscredd [1156]
    Path:            /Applications/Server.app/Contents/ServerRoot/System/Library/CoreServices/XCSCre dentialServer.bundle/Contents/MacOS/xcscredd
    Load Address:    0x10a244000
    Identifier:      com.apple.XCSCredentialServer
    Version:         1 (1.0)
    Build Info:      255-XCSCredentialServer~32000000000000
    Code Type:       x86_64 (Native)
    Parent Process:  launchd [1]
    Date/Time:       2014-05-21 16:46:38.051 -0500
    OS Version:      Mac OS X 10.9.3 (13D65)
    Report Version:  8
    Thread 0:
    0   libsystem_kernel.dylib                  0x00007fff965a20aa __getattrlist + 10
    1   Security                                0x00007fff8c81f9de ___ZN8Security15cached_realpathEPKcPc_block_invoke_2 + 260
    2   libdispatch.dylib                       0x00007fff8c95a28d _dispatch_client_callout + 8
    3   libdispatch.dylib                       0x00007fff8c95b146 _dispatch_barrier_sync_f_invoke + 39
    4   Security                                0x00007fff8c81f864 Security::cached_realpath(char const*, char*) + 148
    5   Security                                0x00007fff8c676529 Security::DbName::CanonicalizeName() + 209
    6   Security                                0x00007fff8c676418 Security::DbName::DbName(char const*, cssm_net_address const*) + 144
    7   Security                                0x00007fff8c68292c Security::DLDbIdentifier::DLDbIdentifier(cssm_subservice_uid const&, char const*, cssm_net_address const*) + 100
    8   Security                                0x00007fff8c6c53a4 Security::NameValueDictionary::MakeDLDbIdentifierFromNameValueDictionary(Securi ty::NameValueDictionary const&) + 206
    9   Security                                0x00007fff8c6c4e82 Security::KeychainCore::CCallbackMgr::consume(unsigned int, unsigned int, Security::CssmData const&) + 192
    10  Security                                0x00007fff8c7f679b Security::SecurityServer::NotificationPort::ReceiveImplementation(unsigned char*, unsigned int, Security::UnavailableReason) + 189
    11  Security                                0x00007fff8c7f686b ___ZN8Security14SecurityServer16NotificationPort7receiveERKNS_12MachPlusPlus7Me ssageE_block_invoke + 21
    12  Security                                0x00007fff8c7f6839 Security::SecurityServer::NotificationPort::HandleRunLoopTimer(__CFRunLoopTimer *, void*) + 19
    13  CoreFoundation                          0x00007fff9127e494 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
    14  CoreFoundation                          0x00007fff9127dfcf __CFRunLoopDoTimer + 1151
    15  CoreFoundation                          0x00007fff912ef5aa __CFRunLoopDoTimers + 298
    16  CoreFoundation                          0x00007fff91239755 __CFRunLoopRun + 1525
    17  CoreFoundation                          0x00007fff91238f25 CFRunLoopRunSpecific + 309
    18  Foundation                              0x00007fff908cfadc -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 253
    19  Foundation                              0x00007fff9091810b -[NSRunLoop(NSRunLoop) runUntilDate:] + 78
    20  xcscredd                                0x000000010a245e6f
    21  libdyld.dylib                           0x00007fff8c9585fd start + 1
    Binary Images:
           0x10a244000 -        0x10a256fff  com.apple.XCSCredentialServer (1.0 - 1) <75a88431-46dc-35fc-8350-f97c59b411df> /Applications/Server.app/Contents/ServerRoot/System/Library/CoreServices/XCSCre dentialServer.bundle/Contents/MacOS/xcscredd
        0x7fff8c670000 -     0x7fff8c8caffd  com.apple.security (7.0 - 55471.14.4) <1d5da20e-db48-3e1d-9bf5-baa694192b25> /System/Library/Frameworks/Security.framework/Versions/A/Security
        0x7fff8c955000 -     0x7fff8c958ff7  libdyld.dylib (239.4) <7c9ec3b7-dde3-33ff-953f-4067c743951d> /usr/lib/system/libdyld.dylib
        0x7fff8c959000 -     0x7fff8c973fff  libdispatch.dylib (339.92.1) <c4e4a18d-3c3b-3c9c-8709-a4270d998de7> /usr/lib/system/libdispatch.dylib
        0x7fff90867000 -     0x7fff90b65fff  com.apple.Foundation (6.9 - 1056.13) <2ee9ab07-3ea0-37d3-b407-4a520f2cb497> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
        0x7fff911c9000 -     0x7fff913aefff  com.apple.CoreFoundation (6.9 - 855.16) <a63e680e-e4b2-368b-8564-9dbe0d8ddb91> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
        0x7fff9658d000 -     0x7fff965a9ff7  libsystem_kernel.dylib (2422.100.13) <498aebd7-4194-3cf2-aa16-d5d03ffbd8c0> /usr/lib/system/libsystem_kernel.dylib

  • Add computer to profile manager

    I have set up MAC Min Server and enable profile manager.
    I am having the following issues:
    1. How do i add windows PC & laptop on the mac workgroup?
    2. How do i enable users to log in on the Mac server workgroup and enable a roaming profile
    Thanks
    Kind regards
    Modely
    [email protected]

    I'm not sure why files aren't syncing though. The process looks like it works, but the last sync date still says 12/31/01 7:03PM.
    I have my suspicions.
    9/17/12 9:07:35.439 AM com.apple.SystemUIServer.agent: Mon Sep 17 09:07:35 2012 HomeSync[315] (FileSync.framework) _SFSendMessage: gServerMessagePortName = 'com.apple.FileSyncAgent.iDisk'
    9/17/12 9:07:35.441 AM com.apple.SystemUIServer.agent: Mon Sep 17 09:07:35 2012 HomeSync[315] (FileSync.framework) -[SFSyncSet registerForCallbacks]: 0x10c54e810
    9/17/12 9:07:35.564 AM mount_url: mount_url: Mount of afp://;AUTH=NO%20USER%20AUTHENT@[SERVERNAME]/staff_data on /Network/Servers/co-osxs1.rockingham.k12.va.us/Volumes/User_Data/Homes/staff_da ta gives status -5997
    9/17/12 9:07:35.686 AM mount_url: mount_url: Mount of afp://;AUTH=NO%20USER%20AUTHENT@[SERVERNAME]/staff_data on /Network/Servers/co-osxs1.rockingham.k12.va.us/Volumes/User_Data/Homes/staff_da ta gives status -5997
    9/17/12 9:07:35.812 AM mount_url: mount_url: Mount of afp://;AUTH=NO%20USER%20AUTHENT@[SERVERNAME]/staff_data on /Network/Servers/[SERVERNAME]/Volumes/User_Data/Homes/staff_data gives status -5997
    9/17/12 9:07:36.004 AM com.apple.launchd.peruser.50990025: (com.apple.TMLaunchAgent) Throttling respawn: Will start in 2 seconds
    9/17/12 9:07:36.000 AM kernel: AFP_VFS afpfs_mount: /Volumes/staff_data, pid 250
    9/17/12 9:07:36.600 AM com.apple.SystemUIServer.agent: Mon Sep 17 09:07:36 2012 HomeSync[315] (FileSync.framework) -[SFSyncSet registerForCallbacks]: 0x7fe82212fdc0
    9/17/12 9:07:38.065 AM Finder: ISGetIconFamilyFromStorage: seed mismatch for 28540011, actual seed is 1befd79f
    9/17/12 9:07:38.065 AM Finder: ISGetIconFamilyFromStorage: seed mismatch for 27f80012, actual seed is 41a7c4c9
    9/17/12 9:07:38.000 AM kernel: AFP_VFS afpfs_unmount: /Volumes/staff_data, flags 524288, pid 322

  • Profile Manager backend won't start

    I'm having trouble starting Profile Manager on one of my servers. Near as I can tell, the Profile Manager is trying to reverse proxy through to a webapp called "devicemgr". This starts up four backend daemons running on TCP 3320, 3321, 3322 and 3323, as shown in this log.
    Jul 24 00:38:18 loki com.apple.devicemanager[4234]: DEBUG: Initializing DeviceManagerDaemon with ports 3320,3321,3322,3323 (physmem = 4GB)
    Jul 24 00:38:18 loki com.apple.devicemanager[4234]: DEBUG: Making sure Rails is configured properly
    Jul 24 00:38:18 loki com.apple.devicemanager[4234]: DEBUG: Running rake command: /usr/bin/rake db:migrate
    However the four backend daemons don't actually start. They try to start, but then fail, and try again, ad infinitum.
    bash-3.2# ps ax | grep devicemgr | grep ruby
    4234   ??  Ss     0:00.03 /usr/bin/ruby /usr/share/devicemgr/backend/devicemgrd
    4348   ??  R      0:01.74 /usr/bin/ruby /usr/share/devicemgr/webserver/thin --chdir /usr/share/devicemgr/backend --rackup config.ru --address localhost --port 3321 --debug start
    4350   ??  R      0:01.71 /usr/bin/ruby /usr/share/devicemgr/webserver/thin --chdir /usr/share/devicemgr/backend --rackup config.ru --address localhost --port 3320 --debug start
    4352   ??  R      0:01.56 /usr/bin/ruby /usr/share/devicemgr/webserver/thin --chdir /usr/share/devicemgr/backend --rackup config.ru --address localhost --port 3323 --debug start
    4354   ??  R      0:01.39 /usr/bin/ruby /usr/share/devicemgr/webserver/thin --chdir /usr/share/devicemgr/backend --rackup config.ru --address localhost --port 3322 --debug start
    If I wait a few seconds then in the process listing the PIDs will all have changed; i.e. the backends are bombing out on startup.
    The end result is the Profile Manager doesn't work. I see messages in apache's error_log, trying to connect to the failed backend daemons.
    [Sun Jul 24 00:27:09 2011] [error] ap_proxy_connect_backend disabling worker for (127.0.0.1)
    [Sun Jul 24 00:27:09 2011] [error] (61)Connection refused: proxy: HTTP: attempt to connect to 127.0.0.1:3321 (127.0.0.1) failed
    [Sun Jul 24 00:27:09 2011] [error] ap_proxy_connect_backend disabling worker for (127.0.0.1)
    [Sun Jul 24 00:27:09 2011] [error] (61)Connection refused: proxy: HTTP: attempt to connect to 127.0.0.1:3320 (127.0.0.1) failed
    [Sun Jul 24 00:27:09 2011] [error] ap_proxy_connect_backend disabling worker for (127.0.0.1)
    I've tried all the obvious stuff;
    this is a clean upgrade to Lion, then a clean install of Server
    hostname is correct (loki.local) and network is working
    there is a loki.local Open Directory Intermediate CA certificate
    the apache daemon starts up with SSL using that cert
    under Hardware -> Settings the SSL certificate is correct
    under Hardware -> Network the hostname is correct (loki.local)
    stopped, started, rebooted, etc
    Where else can I look to find out why /usr/share/devicemgr/backend fails to start? Despite having DEBUG turned on, very few messages are being logged, and nothing that helps my pinpoint what's going wrong.
    I'd also be happy to just start from fresh, but I haven't found the "Reset" button for Lion Server, so to speak.

    Also having the exact same problem.
    Also, when trying to manually run the process i get the following:
    sudo -u _devicemgr /usr/bin/ruby /usr/share/devicemgr/webserver/thin --chdir /usr/share/devicemgr/backend --rackup config.ru --address localhost --port 3321 --debug start
    ./config/../vendor/rails/railties/lib/initializer.rb:271:in `require_frameworks': can't activate rack (~> 1.1.0, runtime) for [], already activated rack-1.2.1 for ["thin-1.2.8"] (RuntimeError)
              from ./config/../vendor/rails/railties/lib/initializer.rb:134:in `process'
              from ./config/../vendor/rails/railties/lib/initializer.rb:113:in `send'
              from ./config/../vendor/rails/railties/lib/initializer.rb:113:in `run'
              from ./config/environment.rb:41
              from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `gem_original_require'
              from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `require'
              from config.ru:2
              from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ge ms/rack-1.2.1/lib/rack/builder.rb:46:in `instance_eval'
              from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ge ms/rack-1.2.1/lib/rack/builder.rb:46:in `initialize'
              from config.ru:1:in `new'
              from config.ru:1

  • Server 4.0 stuck on "Updating Profile Manager service"

    Updated my Mac mini server to Yosemite, bought server 4.0 and installed it.
    Then started the update procedure, but the progress bar only goes half, then stuck at "Updating Profile Manager service".
    Waited for more than an hour, no progress. Killed the update and tried again, but the same result.
    Anyone a solution ?
    Greetings
    Robin

    USER              PID  %CPU %MEM      VSZ    RSS   TT  STAT STARTED      TIME COMMAND
    root             7898   0.4  0.1  2543068   9704   ??  Ss   12:09AM   0:13.98 servermgr_config   
    root             9368   0.0  0.1  2509172   7064   ??  Ss   12:57AM   0:00.03 servermgr_devicemgr   
    root             9367   0.0  0.1  2479968   5988   ??  Ss   12:57AM   0:00.01 /Applications/Server.app/Contents/ServerRoot/usr/sbin/serveradmin settings de
    root             9366   0.0  0.1  2504004   6456   ??  Ss   12:57AM   0:00.02 servermgr_caching   
    root             9364   0.0  0.1  2506564   6456   ??  Ss   12:57AM   0:00.02 servermgr_afp   
    root             9361   0.0  0.1  2515608   7372   ??  Ss   12:57AM   0:00.04 servermgr_accounts   
    root             9359   0.0  0.1  2473460   5704   ??  Ss   12:57AM   0:00.01 /Applications/Server.app/Contents/ServerRoot/usr/libexec/server_backup/server
    root             9357   0.0  0.1  2501928   6340   ??  Ss   12:57AM   0:00.02 /Applications/Server.app/Contents/ServerRoot/usr/sbin/ServerBackup -cmd backu
    root             9356   0.0  0.2  2543828  14220   ??  Ss   12:57AM   0:00.18 /System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd
    osxadmin         9354   0.0  0.2  2625500  15884   ??  S    12:56AM   0:00.28 /System/Library/CoreServices/RemoteManagement/ScreensharingAgent.bundle/Conte
    root             9353   0.0  0.4  2543064  35048   ??  Ss   12:56AM   0:00.56 /System/Library/CoreServices/RemoteManagement/screensharingd.bundle/Contents/
    osxadmin         9349   0.0  0.1  2536468   7612   ??  S    12:48AM   0:00.13 /System/Library/PrivateFrameworks/AOSKit.framework/Versions/A/XPCServices/com
    osxadmin         9297   0.0  0.1  2508888   6912   ??  S    12:19AM   0:00.06 /usr/libexec/secinitd
    _teamsserver     9179   0.0  0.0  2506080   1128   ??  S    12:10AM   0:00.01 /usr/sbin/cfprefsd agent
    root             8990   0.0  0.1  2539648   7660   ??  Ss   12:09AM   0:00.08 /Applications/Server.app/Contents/ServerRoot/usr/libexec/ServerEventsDaemon
    root             8706   0.0  0.0  2441984   1320   ??  S    12:09AM   0:00.03 chmod u=rwX,go=rX /Library/Server/ProfileManager/ /Library/Server/ProfileMana
    root             8700   0.0  0.0  2433020    712   ??  S    12:09AM   0:00.01 /usr/bin/xargs chmod u=rwX,go=rX
    root             8617   0.0  0.1  2540700   8900   ??  Ss   12:09AM   0:00.63 /Applications/Server.app/Contents/ServerRoot/usr/libexec/ServerEventAgent
    root             8555   0.0  0.0  2456924   1084   ??  S    12:09AM   0:00.02 /bin/bash /Applications/Server.app/Contents/ServerRoot/usr/libexec/deviceMana
    osxadmin         8165   0.0  0.1  2520636   5600   ??  S    12:09AM   0:00.02 /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/Resources/hel
    root             8054   0.0  0.1  2538892   6544   ??  Ss   12:09AM   0:00.33 /sbin/emond
    root             7957   0.0  0.0  2536904   2792   ??  Ss   12:09AM   0:00.02 /Applications/Server.app/Contents/ServerRoot/System/Library/PrivateFrameworks
    root             7953   0.0  0.1  2537432   8060   ??  Ss   12:09AM   0:03.62 /Applications/Server.app/Contents/ServerRoot/usr/libexec/servermetricsd.app/C
    root             7897   0.0  0.1  2540880   7676   ??  Ss   12:09AM   0:00.20 /Applications/Server.app/Contents/ServerRoot/System/Library/CoreServices/Serv
    root             7892   0.0  0.3  2554524  27428   ??  Ss   12:09AM   0:00.71 /Library/PrivilegedHelperTools/com.apple.serverd
    osxadmin         7824   0.0  0.5  2639788  39372   ??  S    12:08AM   0:02.14 /Applications/Server.app/Contents/MacOS/Server
    root             7755   0.0  0.1  2477248   5628   ??  Ss   12:00AM   0:00.03 /System/Library/CoreServices/SubmitDiagInfo server-init
    osxadmin         7716   0.0  0.1  2500704   6352   ??  S    11:56PM   0:00.04 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
    osxadmin         6929   0.0  0.1  2496904   6576   ??  Ss   10:15PM   0:00.05 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCService
    _assetcache      6911   0.0  0.0  2470496   2680   ??  S    10:15PM   0:00.01 /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
    _assetcache      6908   0.0  0.1  2544348   6100   ??  Ss   10:15PM   0:00.19 /System/Library/CoreServices/AssetCacheLocatorService
    _softwareupdate  6907   0.0  0.1  2538904   8008   ??  Ss   10:15PM   0:00.19 /System/Library/CoreServices/Software Update.app/Contents/Resources/softwareu
    root             6906   0.0  0.3  2555692  23160   ??  Ss   10:15PM   0:00.70 /System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
    osxadmin         5521   0.0  0.0  2538972   3200   ??  S     7:15PM   0:00.03 /System/Library/PrivateFrameworks/CloudServices.framework/Resources/com.apple
    osxadmin         5451   0.0  0.0  2464092   1412 s000  S     7:10PM   0:00.31 -bash
    root             5450   0.0  0.0  2497452   2880 s000  Ss    7:10PM   0:00.08 login -pf osxadmin
    osxadmin         5448   0.0  0.8  2731008  68600   ??  U     7:10PM   0:49.51 /Applications/Utilities/Terminal.app/Contents/MacOS/Terminal
    osxadmin         4533   0.0  1.4  2699644 117024   ??  S     4:38PM   1:37.34 /Applications/Utilities/Console.app/Contents/MacOS/Console
    root             4102   0.0  0.0  2500124   4012   ??  Ss    4:19PM   0:00.11 /System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/
    osxadmin         4098   0.0  0.2  2584668  15648   ??  S     4:19PM   0:00.35 /System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/
    osxadmin         4097   0.0  0.2  2581536  16692   ??  S     4:19PM   0:00.14 /System/Library/PrivateFrameworks/CloudServices.framework/Resources/EscrowSec
    root             4030   0.0  0.0  2477408    740   ??  SNs   4:18PM   0:00.01 /usr/libexec/periodic-wrapper daily
    osxadmin         3313   0.0  0.0  2514460   3480   ??  S     1:36PM   0:00.04 /System/Library/PrivateFrameworks/KerberosHelper/Helpers/DiskUnmountWatcher
    osxadmin         3139   0.0  0.1  2496048   6236   ??  S     1:09PM   0:00.03 /usr/libexec/USBAgent
    _devicemgr       1736   0.0  0.0  2477408    848   ??  S    12:45PM   0:00.01 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
    _devicemgr       1688   0.0  0.0  2505312   3664   ??  S    12:45PM   0:00.02 /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
    root             1591   0.0  0.1  2499324   6392   ??  Ss   12:41PM   0:00.03 /usr/sbin/spindump
    root             1585   0.0  0.0  2478972   1864   ??  Ss   12:41PM   0:01.46 /usr/libexec/systemstatsd
    _calendar        1480   0.0  0.0  2506336   3660   ??  S    12:40PM   0:00.03 /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
    _teamsserver     1444   0.0  0.0  2506860   3692   ??  U    12:40PM   0:00.03 /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
    root              359   0.0  0.0  2489696    904   ??  S    12:39PM   0:00.13 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
    osxadmin          344   0.0  0.1  2516508   7020   ??  S    12:39PM   0:00.11 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
    _spotlight        343   0.0  0.1  2517340  10008   ??  S    12:39PM   0:12.24 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
    _spotlight        342   0.0  0.0  2514844   1464   ??  S    12:39PM   0:00.11 /usr/sbin/distnoted agent
    osxadmin          340   0.0  0.0  2477408    868   ??  S    12:38PM   0:00.03 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
    osxadmin          339   0.0  0.2  2568464  16968   ??  Ss   12:38PM   0:00.11 /Applications/Reminders.app/Contents/PlugIns/com.apple.RemindersNC.appex/Cont
    osxadmin          337   0.0  0.1  2504212   7612   ??  S    12:38PM   0:00.07 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/
    osxadmin          336   0.0  0.2  2581648  12972   ??  S    12:38PM   0:00.14 /System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.
    osxadmin          335   0.0  0.1  2544580  12160   ??  S    12:38PM   0:00.90 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/
    osxadmin          334   0.0  0.1  2505780   6432   ??  S    12:38PM   0:00.03 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/
    osxadmin          325   0.0  0.1  2541832   8536   ??  S    12:38PM   0:00.10 /System/Library/Frameworks/InputMethodKit.framework/Versions/A/XPCServices/co
    osxadmin          323   0.0  0.2  2598344  16280   ??  U    12:38PM   0:01.31 /System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell -psn_0_
    osxadmin          318   0.0  0.0  2514056   3992   ??  S    12:38PM   0:00.04 /System/Library/PrivateFrameworks/CommunicationsFilter.framework/CMFSyncAgent
    osxadmin          317   0.0  0.1  2495524   9200   ??  Ss   12:38PM   0:00.02 /System/Library/CoreServices/NotificationCenter.app/Contents/XPCServices/com.
    root              316   0.0  0.0  2535732   2980   ??  Ss   12:38PM   0:00.03 /System/Library/CoreServices/CrashReporterSupportHelper server-init
    root              315   0.0  0.0  2507868   3724   ??  Ss   12:38PM   0:00.06 /System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicati
    root              314   0.0  0.1  2550164   5268   ??  Ss   12:38PM   0:00.44 /usr/libexec/sandboxd -n PluginProcess -n
    osxadmin          312   0.0  0.1  2537416  11976   ??  S    12:38PM   0:00.04 /System/Library/PrivateFrameworks/Notes.framework/Versions/A/XPCServices/com.
    osxadmin          311   0.0  0.0  2516156   3932   ??  S    12:38PM   0:00.05 /System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeych
    osxadmin          308   0.0  0.2  2540828  16264   ??  S    12:38PM   0:00.38 /usr/libexec/fmfd
    osxadmin          307   0.0  0.2  2543012  17632   ??  S    12:38PM   0:00.54 /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/
    osxadmin          304   0.0  0.1  2537712   6356   ??  S    12:38PM   0:00.08 /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTune
    osxadmin          303   0.0  0.2  2547160  16320   ??  Ss   12:38PM   0:00.94 /System/Library/CoreServices/Spotlight.app/Contents/XPCServices/com.apple.met
    osxadmin          300   0.0  0.1  2537608   8956   ??  S    12:38PM   0:00.33 /System/Library/CoreServices/diagnostics_agent
    osxadmin          299   0.0  0.1  2573092  11436   ??  S    12:38PM   0:00.11 /System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
    osxadmin          296   0.0  0.1  2538156   6000   ??  S    12:38PM   0:00.12 /System/Library/CoreServices/cloudpaird
    osxadmin          295   0.0  0.1  2537144  11892   ??  S    12:38PM   0:00.05 /System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resource
    osxadmin          293   0.0  0.2  2542076  15044   ??  S    12:38PM   0:00.29 /System/Library/CoreServices/AppleIDAuthAgent
    osxadmin          291   0.0  0.3  2620956  25636   ??  S    12:38PM   0:00.78 /System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/Notificati
    osxadmin          289   0.0  0.2  2581580  17304   ??  S    12:38PM   0:00.13 /System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/
    osxadmin          287   0.0  0.1  2537088   7168   ??  S    12:38PM   0:00.09 /System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAge
    osxadmin          284   0.0  0.0  2506296   3584   ??  S    12:38PM   0:00.02 /usr/libexec/spindump_agent
    osxadmin          282   0.0  0.2  2539492  13856   ??  Ss   12:38PM   0:00.82 /System/Library/PrivateFrameworks/CloudDocsDaemon.framework/XPCServices/Conta
    osxadmin          280   0.0  0.2  2553068  17812   ??  S    12:38PM   0:00.33 /System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
    osxadmin          278   0.0  0.1  2537776   5464   ??  S    12:38PM   0:00.05 /System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPer
    osxadmin          277   0.0  0.2  2551380  17648   ??  S    12:38PM   0:01.39 /System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Content
    osxadmin          276   0.0  0.1  2541216   8344   ??  S    12:38PM   0:00.42 /System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
    osxadmin          275   0.0  0.3  2555700  25172   ??  S    12:38PM   0:08.23 /System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
    osxadmin          274   0.0  0.2  2593076  13792   ??  S    12:38PM   0:00.18 /System/Library/CoreServices/CoreServicesUIAgent.app/Contents/MacOS/CoreServi
    osxadmin          273   0.0  0.2  2545472  12944   ??  S    12:38PM   0:00.08 /System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySy
    osxadmin          272   0.0  0.2  2541052  15044   ??  S    12:38PM   0:00.43 /System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS
    osxadmin          271   0.0  0.1  2545360  11772   ??  S    12:38PM   0:00.05 /System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPl
    osxadmin          270   0.0  0.2  2568952  20008   ??  S    12:38PM   0:00.24 /System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app
    osxadmin          269   0.0  0.3  2594616  26144   ??  S    12:38PM   0:00.50 /System/Library/PrivateFrameworks/InternetAccounts.framework/Versions/A/XPCSe
    osxadmin          267   0.0  0.1  2518244   8112   ??  S    12:38PM   0:03.80 /usr/libexec/nsurlstoraged
    osxadmin          266   0.0  0.3  2583088  21032   ??  Ss   12:38PM   0:00.20 /System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.ext
    osxadmin          264   0.0  0.1  2541028   5364   ??  S    12:38PM   0:00.31 /usr/libexec/secd
    osxadmin          263   0.0  0.0  2485344   3168   ??  Ss   12:38PM   0:00.02 /System/Library/CoreServices/Menu Extras/AirPort.menu/Contents/XPCServices/co
    osxadmin          262   0.0  0.4  2570676  33472   ??  S    12:38PM   0:00.22 /System/Library/CoreServices/iconservicesagent
    osxadmin          258   0.0  0.2  2543268  19860   ??  Ss   12:38PM   0:00.32 /System/Library/PrivateFrameworks/CalendarAgent.framework/Versions/A/XPCServi
    osxadmin          257   0.0  0.1  2541760   5776   ??  S    12:38PM   0:00.54 /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
    osxadmin          256   0.0  0.1  2541496   9572   ??  S    12:38PM   0:00.24 /usr/libexec/pkd
    osxadmin          255   0.0  0.2  2549624  18152   ??  S    12:38PM   0:00.26 /usr/libexec/sharingd
    root              254   0.0  0.1  2515924  11476   ??  Ss   12:38PM   0:00.10 /System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
    osxadmin          253   0.0  0.2  2544636  19632   ??  S    12:38PM   0:00.85 /System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Suppor
    root              252   0.0  0.1  2514876   4460   ??  Ss   12:38PM   0:00.23 /System/Library/PrivateFrameworks/CacheDelete.framework/deleted
    osxadmin          251   0.0  0.1  2539560   5212   ??  S    12:38PM   0:00.10 /System/Library/CoreServices/pbs
    osxadmin          248   0.0  0.1  2572060   6088   ??  S    12:38PM   0:01.37 /System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.frame
    osxadmin          246   0.0  0.5  3807188  44048   ??  S    12:38PM   0:03.61 /System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
    osxadmin          245   0.0  0.1  2566432  11496   ??  S    12:38PM   0:00.12 /System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent
    osxadmin          243   0.0  0.1  2542312  12016   ??  S    12:38PM   0:01.44 /usr/libexec/nsurlsessiond
    osxadmin          242   0.0  0.4  2569976  29436   ??  S    12:38PM   0:02.90 /System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/Calenda
    osxadmin          241   0.0  0.1  2541864   7636   ??  S    12:38PM   0:00.09 /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARD
    _locationd        240   0.0  0.1  2546964   8100   ??  Ss   12:38PM   0:01.76 /usr/libexec/locationd
    osxadmin          239   0.0  0.1  2537692   6220   ??  S    12:38PM   0:00.96 /usr/sbin/usernoted
    osxadmin          238   0.0  0.0  2497480   1156   ??  S    12:38PM   0:00.01 /usr/sbin/pboard
    _coreaudiod       237   0.0  0.0  2537856   2536   ??  Us   12:38PM   0:00.06 /System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.app
    _coreaudiod       234   0.0  0.1  2543576   9696   ??  Ss   12:38PM   0:00.93 /usr/sbin/coreaudiod
    osxadmin          233   0.0  0.6  2637352  50092   ??  S    12:38PM   0:03.72 /System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
    osxadmin          232   0.0  0.2  2600648  17764   ??  S    12:38PM   0:02.04 /System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
    osxadmin          230   0.0  0.3  2596140  27276   ??  S    12:38PM   0:01.23 /System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
    osxadmin          228   0.0  0.0  2516620   3020   ??  S    12:38PM   0:01.89 /usr/sbin/cfprefsd agent
    osxadmin          226   0.0  0.0  2522656   4164   ??  S    12:38PM   0:03.07 /usr/sbin/distnoted agent
    osxadmin          224   0.0  0.2  2541912  13468   ??  S    12:38PM   0:01.28 /usr/libexec/UserEventAgent (Aqua)
    root              223   0.0  0.0  2529360   2288   ??  Ss   12:38PM   0:00.17 /usr/libexec/securityd_service
    _nsurlstoraged    219   0.0  0.1  2514380   4696   ??  Ss   12:37PM   0:00.22 /usr/libexec/nsurlstoraged
    root              218   0.0  0.1  2546836  10188   ??  Ss   12:37PM   0:00.17 /System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelper
    _softwareupdate   217   0.0  2.0  3726564 165920   ??  Ss   12:37PM   0:19.22 /System/Library/CoreServices/Software Update.app/Contents/Resources/softwareu
    _netbios          214   0.0  0.1  2515060   6808   ??  SNs  12:37PM   0:00.08 /usr/sbin/netbiosd
    root              213   0.0  0.0  2516660   3888   ??  Ss   12:37PM   0:00.06 /System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.app
    root              211   0.0  0.1  2540132   4480   ??  Ss   12:37PM   0:00.05 /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
    root              206   0.0  0.1  2522040   7852   ??  Ss   12:37PM   0:04.75 /usr/sbin/PasswordService -n
    root              204   0.0  0.0  2466640   2076   ??  S    12:37PM   0:00.00 /usr/libexec/xssendevent
    root              203   0.0  0.0  2495904   1204   ??  Ss   12:37PM   0:00.01 /usr/libexec/discoveryd_helper --loglevel Detailed --logclass Everything --lo
    root              201   0.0  0.1  2538264   4704   ??  Us   12:37PM   0:00.21 /usr/libexec/smd
    root              199   0.0  0.1  2541420   7780   ??  Ss   12:37PM   0:03.90 /usr/sbin/diskmanagementd
    root              197   0.0  0.1  2539164   8576   ??  Ss   12:37PM   0:07.56 /System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd
    root              195   0.0  0.0  2514280   1192   ??  Ss   12:37PM   0:00.05 /usr/libexec/networkd_privileged
    root              194   0.0  0.1  2539132   5448   ??  Ss   12:37PM   0:09.65 /usr/libexec/ApplicationFirewall/socketfilterfw
    root              192   0.0  0.6  2657512  48544   ??  Ss   12:37PM   0:00.54 /System/Library/PrivateFrameworks/SystemMigration.framework/Resources/systemm
    root              191   0.0  0.0  2489528   2472   ??  Ss   12:37PM   0:00.02 /System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kadmind
    root              189   0.0  0.0  2514700   3604   ??  Ss   12:37PM   0:00.02 /System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kpasswdd
    root              187   0.0  0.1  2498660   4392   ??  Ss   12:37PM   0:00.09 /usr/bin/perl -T /usr/libexec/emlog.pl -l
    _networkd         186   0.0  0.1  2519188   6404   ??  Ss   12:37PM   0:01.34 /usr/libexec/networkd
    root              185   0.0  0.0  2514388   2864   ??  Ss   12:37PM   0:01.94 sysmond
    root              184   0.0  0.0  2497552   2604   ??  Ss   12:37PM   0:00.03 /System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.a
    root              183   0.0  0.0  2516212   1452   ??  Ss   12:37PM   0:04.30 /usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -
    root              182   0.0  0.6  3067528  53912   ??  Ss   12:37PM   0:01.94 /usr/libexec/slapd -d 0 -h ldap:/// ldapi://%2Fvar%2Frun%2Fldapi
    root              180   0.0  0.1  2537080   6056   ??  Ss   12:37PM   0:00.05 /usr/libexec/usbd
    root              179   0.0  0.0  2518248   3312   ??  Us   12:37PM   0:00.04 /usr/libexec/nehelper
    _nsurlsessiond    178   0.0  0.1  2519660   7980   ??  Ss   12:37PM   0:00.21 /usr/libexec/nsurlsessiond --privileged
    root              177   0.0  0.0  2514272   1532   ??  Ss   12:37PM   0:00.09 /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.appl
    root              169   0.0  0.1  2514716   5756   ??  Ss   12:37PM   0:00.07 /System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServ
    root              166   0.0  0.0  2549388   1556   ??  Ss   12:37PM   0:00.10 /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
    root              164   0.0  0.0  2497252   3584   ??  Ss   12:37PM   0:00.02 /System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
    root              163   0.0  3.6  4765120 303824   ??  Ss   12:37PM   3:26.09 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
    root              146   0.0  0.1  2519316   4584   ??  Ss   12:37PM   0:00.17 /usr/sbin/filecoordinationd
    _windowserver     144   0.0  1.0  3679744  82044   ??  Rs   12:37PM   2:58.68 /System/Library/Frameworks/ApplicationServices.framework/Frameworks/CoreGraph
    root              137   0.0  0.0  2507500   3612   ??  Ss   12:37PM   0:00.02 /System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ct
    root              136   0.0  0.1  2459172   4992   ??  Ss   12:37PM   0:03.70 /usr/libexec/watchdogd
    root              111   0.0  0.0  2516356   1236   ??  Ss   12:37PM   0:00.03 /usr/libexec/diagnosticd
    root               85   0.0  0.0  2522720   3596   ??  Ss   12:37PM   0:07.23 /usr/sbin/cfprefsd daemon
    root               84   0.0  0.1  2542036   7776   ??  Ss   12:37PM   0:03.51 /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xp
    _distnote          81   0.0  0.0  2521608   2132   ??  Ss   12:37PM   0:00.89 /usr/sbin/distnoted daemon
    root               80   0.0  0.1  2548900  10272   ??  Ss   12:37PM   0:01.78 /System/Library/CoreServices/coreservicesd
    root               78   0.0  0.1  2539308   8052   ??  Ss   12:37PM   0:03.60 /usr/libexec/amfid
    root               77   0.0  0.0  2516908   1908   ??  Ss   12:37PM   0:08.50 /usr/sbin/notifyd
    root               76   0.0  0.1  2537072   5360   ??  Ss   12:37PM   0:03.31 /usr/libexec/taskgated -s
    root               75   0.0  0.0  2497380   1328   ??  Ss   12:37PM   0:00.01 /usr/libexec/hidd
    root               73   0.0  0.0  2489720   1104   ??  Ss   12:37PM   0:00.02 /usr/sbin/KernelEventAgent
    root               72   0.0  0.0  2513788   2680   ??  Ss   12:37PM   0:00.04 /System/Library/CoreServices/logind
    osxadmin           71   0.0  0.3  2619492  23172   ??  Ss   12:37PM   0:02.80 /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow conso
    root               70   0.0  0.1  2543272   4724   ??  Ss   12:37PM   0:00.12 /System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Su
    root               69   0.0  0.0  2514316   1400   ??  Ss   12:37PM   0:00.02 /usr/libexec/stackshot -t -O
    root               66   0.0  0.1  2518248   5724   ??  Ss   12:37PM   0:00.96 /System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kdc
    root               64   0.0  0.1  2538200   5468   ??  Ss   12:37PM   0:00.10 /usr/sbin/blued
    root               63   0.0  0.0  2514580   3628   ??  Ss   12:37PM   0:00.03 autofsd
    root               58   0.0  0.1  2539708   4868   ??  Ss   12:37PM   0:08.86 /usr/sbin/securityd -i
    _usbmuxd           57   0.0  0.0  2516596   3840   ??  Ss   12:37PM   0:01.71 /System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources
    root               56   0.0  0.1  2539856   6724   ??  Ss   12:37PM   0:01.90 /System/Library/CoreServices/launchservicesd
    root               55   0.0  0.2  2543752  13604   ??  Ss   12:37PM   0:01.64 /System/Library/PrivateFrameworks/ApplePushService.framework/apsd
    _mdnsresponder     54   0.0  0.1  2548656   8856   ??  Ss   12:37PM   0:01.78 /usr/libexec/discoveryd --udsocket standard --loglevel Basic --logclass Every
    root               52   0.0  0.1  2517780   5136   ??  Ss   12:37PM   0:00.06 /usr/sbin/wirelessproxd
    root               51   0.0  0.4  2619460  36356   ??  Ss   12:37PM   0:20.64 /usr/libexec/opendirectoryd
    root               50   0.0  0.1  2533284   5772   ??  Ss   12:37PM   0:00.07 /System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
    root               48   0.0  0.1  2498180   5508   ??  Ss   12:37PM   0:00.03 /usr/libexec/wdhelper
    root               47   0.0  0.1  2516496  11656   ??  Ss   12:37PM   0:00.16 /System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd-helper
    root               46   0.0  0.1  2544732   8540   ??  Ss   12:37PM   0:04.10 /usr/libexec/coreduetd
    root               43   0.0  0.0  2539440   2844   ??  Ss   12:37PM   0:02.82 /usr/libexec/diskarbitrationd
    root               42   0.0  0.0  2514460   3700   ??  Ss   12:37PM   0:00.03 /System/Library/CoreServices/iconservicesagent
    _iconservices      41   0.0  0.1  2519280   4268   ??  Ss   12:37PM   0:00.11 /System/Library/CoreServices/iconservicesd
    root               37   0.0  0.9  2662580  71792   ??  Ss   12:37PM   3:06.11 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
    root               36   0.0  0.1  2515488   7360   ??  SNs  12:37PM   0:00.14 /usr/libexec/warmd
    root               34   0.0  0.1  2540736   5692   ??  Ss   12:37PM   0:00.14 /usr/libexec/airportd
    root               30   0.0  0.0  2539008   2428   ??  Ss   12:37PM   0:00.92 /System/Library/CoreServices/powerd.bundle/powerd
    root               29   0.0  0.1  2542068   7280   ??  Ss   12:37PM   0:01.26 /usr/libexec/configd
    _appleevents       28   0.0  0.1  2537528   4848   ??  Ss   12:37PM   0:00.14 /System/Library/CoreServices/appleeventsd --server
    root               26   0.0  0.1  2514072   5608   ??  Ss   12:37PM   0:00.10 /usr/libexec/thermald
    root               24   0.0  0.1  2542276  12316   ??  Ss   12:37PM   0:00.83 /usr/libexec/kextd
    root               23   0.0  0.1  2537252   8604   ??  Ss   12:37PM   0:06.88 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEve
    root               21   0.0  0.0  2519584   2124   ??  Ss   12:37PM   0:10.02 /usr/sbin/syslogd
    root               20   0.0  0.2  2544336  18572   ??  Ss   12:37PM   0:06.56 /usr/libexec/UserEventAgent (System)
    root             9369   0.0  0.0  2432928    804 s000  R+   12:57AM   0:00.00 ps aux
    root                1   0.0  0.2  2539208  13600   ??  Ss   12:36PM   1:13.51 /sbin/launchd

  • Profile manager spotlight message "com.apple.iTunesLibraryService"

    Hi
    Before asking my question a quick overview of my computer environment:
    I've a  Mac mini with OS X server (Mavericks) connected to a Windows Server 2003 Active Directory. I'm going to use some 40 iMac's on our school (combined with Windows computers).
    On the Mac mini I'm using Profile manager to allow or deny some settings on the iMac's.
    My environment uses the Dutch language - I try to translate as accurate as possible!
    I only have settings installed on machine-level (not on user or group level).
    Here are my settings for the use of Spotlight (in Profile manager):
    Devicegroup IMACS > Dock > Apps in dock: Launchpad, Maps, Safari, iTunes (11.1.4)
    Devicegroup IMACS > Restrictions > Preferences:all selected items are deactivated except Dock, Mission Control, Sound and Spotlight
    Devicegroup IMACS > Restrictions > Apps:Allow apps: iTunes, Spotlight, ...
    Devicegroup IMACS > Restrictions > Media:Access to disks: internal disks allowed, ...
    When a (test)user enters some characters in Spotlight and then erases those characters a message pops up stating: "You don't have access to use the application com.apple.iTunesLibraryService". This happens every first time the user makes use of Spotlight.
    Anyone a clue what's missing of what I forgetting to adjust?

    So I potentially have the issue resolved. After a few minutes of cranking away at spotlight I have no error and have never had it take that long to pop up.
    I opened console and when the error popped up stating “You do not have permission to use the application “com.apple.iTunesLibraryService.” in console this popped up:
    com.apple.quicklook.sattelite:
    [QL] Could not get ITLibrary: Error Domain=NSPOSIXErrorDomain Code=100001 “Could not load.” UserInfo=0x7fd480609040 {NSLocalizedDescription=Could not load., NSUnderlyingError= 0x7fd48040d1e0 “The operation couldn’t be completed. (OSstatus error 100005.)”}
    So I looked around a bit and found these paths contain references to QuickLook:
    /System/Library/Frameworks/
    /System/Library/QuickLook/
    /Library/
    ~/Library/
    I added all of those to the allowed folder list and so far that error has not popped up again. I added the /System/Library/QuickLook/ folder explicitly as opposed to just /System/Library/ as I do not want kids using screen sharing (cheating issue) or the jar launcher (minecrafting in class)
    For reference I am on 10.9.4 using Profile Manager, payloads are managed with in a machine group. The folders mentioned above were added to the Allow Folders section of Apps under Restrictions. Hope this helps someone else. YMMV so far it appears to have worked. I'll update if it breaks again.

  • Error reading settings in wiki and profile manager

    I have just upgraded from Snow Leopard Server to Lion server.
    I now have the following errors in server app:-
    Wiki : message "Error Reading Settings"
    Profile Manager: message  "Error Reading Settings"
    What do I do to get my wiki back!
    When I visit my default ssl Wiki I get the following:-
    Collaboration::PGCConnectionError in Sources#index
    Showing /usr/share/collabd/coreclient/app/views/layouts/application.html.erb where line #5 raised:
    FATAL:  role "collab" does not exist
    Extracted source (around line #5):
    2:      :user => @user,3:      :entity => @entity,4:      :owner => @owner,5:      :service_client => service_client,6:      :controller => controller7: }) %>8:
    Rails.root: /usr/share/collabd/coreclient
    Application Trace | Framework Trace | Full Traceapp/controllers/application_controller.rb:325:in `service_client'app/views/layouts/application.html.erb:5:in `_app_views_layouts_application_html_erb___1616978790_2215846900_0'app/controllers/application_controller.rb:44:in `render_server_error'app/controllers/application_controller.rb:43:in `render_server_error'
    Request
    Parameters:
    None
    Show session dump
    Show env dump
    Response
    Headers:
    None
    Please help

    I did a clean install of Lion/Lion Server, but I ran ino the same problem too with "Error Reading Settings" for both the profile manager and the wiki.
    INVESTIGATION: I checked to see if the postgres database (which I presumed was were the settings were being read from).
    # sudo serveradmin fullstatus postgres
    postgres:dataDirHasBeenInitialized = yes
    postgres:PG_VERSION = "9.0.4"
    postgres:dataDir = "/var/pgsql"
    postgres:postgresIsResponding = no     # !!! why isn't it responding???
    postgres:dataDirIsDirectory = yes
    postgres:PGserverVersion = 0
    postgres:dataDirExists = yes
    postgres:setStateVersion = 1
    postgres:state = "RUNNING"
    PROBLEM: The postgres service hadn't been started properly; I found this by doing the following:
    # sudo serveradmin stop postgres
    postgres:state = "STOPPED"
    # sudo serveradmin start postgres
    postgres:error = "CANNOT_START_SERVICE_TIMEOUT_ERR"
    FIX: The postgres service couldn't create the log file because it didn't have permission. I did this to fix it, then simply restarted it and all was well:
    # sudo chmod 777 /Library/Logs/
    # sudo serveradmin start postgres
    postgres:state = "RUNNING"
    I hope this helps someone.

  • Calendar and Profile Manager Services - Service Unavailable

    Not sure what has changed in my environment, because I have not made any manual changes lately.  However I can't seem to access either iCal or Profile Manager from the web.  Nor does the iCal seem to be propagating any informtion across the same account to different devices.  I've read through many, many of the listings in these forums to no avail.  That said, I haven't really been able to find one that displays the same error logs as I'm experiencing.
    When trying to access from the web, I always get a the below...
    Service Temporarily Unavailable
    The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.
    Apache/2.2.21 (Unix) mod_ssl/2.2.21 OpenSSL/0.9.8r DAV/2 PHP/5.3.8 with Suhosin-Patch Server at jared-hill.com Port 443
    I've monitored my logs and here's the output I'm given....
    Apr 27 16:15:24 jared-hill servermgrd[88]: servermgr_devicemgr: response statusCode: 0
    Apr 27 16:15:24 jared-hill servermgrd[88]: servermgr_devicemgr: waiting for devicemgr to respond
    Apr 27 16:15:24 jared-hill com.apple.launchd[1] (com.apple.collabcored4[2877]): Tried to setup shared memory more than once
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:1217:in `chmod': Operation not permitted - /var/log/collabd/coreclient.log (Errno::EPERM)
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:1217:in `chmod'
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:870:in `chmod'
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:869:in `each'
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:869:in `chmod'
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /usr/share/collabd/coreclient/config/application.rb:83
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `gem_original_require'
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `require'
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /usr/share/collabd/coreclient/config/environment.rb:11
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `gem_original_require'
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `require'
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /usr/share/collabd/coreclient/config.ru:13
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /Library/Ruby/Gems/1.8/gems/rack-1.2.1/lib/rack/builder.rb:46:in `instance_eval'
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /Library/Ruby/Gems/1.8/gems/rack-1.2.1/lib/rack/builder.rb:46:in `initialize'
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /usr/share/collabd/coreclient/config.ru:1:in `new'
    Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /usr/share/collabd/coreclient/config.ru:1
    Apr 27 16:15:25 jared-hill com.apple.launchd[1] (com.apple.collabcored4[2877]): Exited with code: 1
    Apr 27 16:15:25 jared-hill com.apple.launchd[1] (com.apple.collabcored4): Throttling respawn: Will start in 9 seconds
    Any help would be greatly appreciated!!!!

    hi there. did you find a way to solve this?
    I am getting many (non-stop every minute) of "10/8/12 4:24:48.966 PM com.apple.launchd[1]: (com.apple.collabcored4) Throttling respawn: Will start in 7 seconds" errors. And my wiki is now unstable with error page once every few clicks.
    Thanks in advance for any suggestion you might have.
    Edward

  • Profile manager: profile not verified

    Hi. I have a problem with Profile manager enroll IPhones.
    System: OS X 10.9.3 (Build 13D65)
    Server: Server 3.1.2 (Build 13S4517)
    Installed wildcard certificate for all services. Installed apple signed code signing certificate.
    On my macbook all right, but on Iphones profile not verified and errors in system.log:
    Jun  3 14:25:54 mdm.unact.ru xscertd-helper[49630]: Failed to find CRL, unknown CA : \352\023rr\u02c7\177
    Jun  3 14:25:54 mdm.unact.ru ServerEventAgent[162]: CertsKeychainMonitor: received a keychain add event
    Jun  3 14:25:54 mdm.unact.ru ReportCrash[49653]: Metadata.framework [Error]: couldn't get the client port
    Jun  3 14:25:54 mdm.unact.ru ReportCrash[49653]: DebugSymbols was unable to start a spotlight query: spotlight is not responding or disabled.
    Jun  3 14:25:55 mdm.unact.ru xscertd[49629]: Failed sending RemoveKeyFromKeychain command to com.apple.xscertd.helper: Connection interrupted
    Jun  3 14:25:55 mdm com.apple.launchd[1] (com.apple.xscertd-helper[49630]): Job appears to have crashed: Segmentation fault: 11
    Jun  3 14:25:55 mdm.unact.ru ReportCrash[49653]: Saved crash report for xscertd-helper[49630] version 63 to /Library/Logs/DiagnosticReports/xscertd-helper_2014-06-03-142555_mdm.crash

    MacBook certificates:
    Iphone certificates:

  • How To Install A (Almost) Working Lion Server With Profile Management/SSL/OD/Mail/iCal/Address Book/VNC/Web/etc.

    I recently installed a fresh version of Lion Server after attempting to fix a broken upgrade. With some help from others, I've managed to get all the new features working and have kept notes, having found that many or most of the necessary installation steps for both the OS and its services are almost entirely undocumented. When you get them working, they work great, but the entire process is very fragile, with simple setup steps causing breaks or even malicious behaviors. In case this is useful to others, here are my notes.
    Start with an erased, virgin, single guid partitioned drive. Not an upgrade. Not simply a repartitioned drive. Erased. Clean. Anything else can and probably will break the Lion Server install, as I discovered myself more than once. Before erasing my drive, I already had Lion and made a Lion install DVD from instructions widely available on the web. I suppose you could also boot into the Lion recovery partition and use disk utility to erase the OS X partition then install a new partition, but I cut a DVD. The bottom line is to erase any old OS partitions. And of course to have multiple, independent backups: I use both Time Machine with a modified StdExclusions.plist and Carbon Copy Cloner.
    Also, if you will be running your own personal cloud, you will want to know your domain name ahead of time, as this will be propagated everywhere throughout server, and changing anything related to SSL on Lion Server is a nightmare that I haven't figured out. If you don't yet have a domain name, go drop ten dollars at namecheap.com or wherever and reserve one before you start. Soemday someone will document how to change this stuff without breaking Lion Server, but we're not there yet. I'll assume the top-level domain name "domain.com" here.
    Given good backups, a Lion Install DVD (or Recovery Partition), and a domain name, here are the steps, apparently all of which must be more-or-less strictly followed in this order.
    DVD>Disk Utility>Erase Disk  [or Recovery Partition>Disk Utility>Erase Partition]
    DVD>Install Lion
    Reboot, hopefully Lion install kicks in
    Update, update, update Lion (NOT Lion Server yet) until no more updates
    System Preferences>Network>Static IP on the LAN (say 10.0.1.2) and Computer name ("server" is a good standbye)
    Terminal>$ sudo scutil --set HostName server.domain.com
    App Store>Install Lion Server and run through the Setup
    Download install Server Admin Tools, then update, update, update until no more updates
    Server Admin>DNS>Zones [IF THIS WASN'T AUTOMAGICALLY CREATED (mine wasn't): Add zone domain.com with Nameserver "server.domain.com." (that's a FQDN terminated with a period) and a Mail Exchanger (MX record) "server.domain.com." with priority 10. Add Record>Add Machine (A record) server.domain.com pointing to the server's static IP. You can add fancier DNS aliases and a simpler MX record below after you get through the crucial steps.]
    System Prefs>Network>Advanced>Set your DNS server to 127.0.0.1
    A few DNS set-up steps and these most important steps:
    A. Check that the Unix command "hostname" returns the correct hostname and you can see this hostname in Server.app>Hardware>Network
    B. Check that DNS works: the unix commands "host server.domain.com" and "host 10.0.1.2" (assuming that that's your static IP) should point to each other. Do not proceed until DNS works.
    C. Get Apple Push Notification Services CA via Server.app>Hardware>Settings><Click toggle, Edit... get a new cert ...>
    D. Server.app>Profile Manager>Configure... [Magic script should create OD Master, signed SSL cert]
    E. Server.app>Hardware>Settings>SSL Certificate> [Check to make sure it's set to the one just created]
    F. Using Server.app, turn on the web, then Server.app>Profile Manager> [Click on hyperlink to get to web page, e.g. server.domain.com/profilemanager] Upper RHS pull-down, install Trust Profile
    G. Keychain Access>System>Certificates [Find the automatically generated cert "Domain", the one that is a "Root certificate authority", Highlight and Export as .cer, email to all iOS devices, and click on the authority on the device. It should be entered as a trusted CA on all iOS devices. While you're at it, highlight and Export... as a .cer the certificate "IntermediateCA_SERVER.DOMAIN.COM_1", which is listed an an "Intermediate CA" -- you will use this to establish secure SSL connections with remote browsers hitting your server.]
    H. iOS on LAN: browse to server.domain.com/mydevices> [click on LHS Install trust cert, then RHS Enroll device.
    I. Test from web browser server.domain.com/mydevices: Lock Device to test
    J. ??? Profit
    12. Server Admin>DNS>Zones> Add convenient DNS alias records if necessary, e.g., mail.domain.com, smtp.domain.com, www.domain.com. If you want to refer to your box using the convenient shorthand "domain.com", you must enter the A record (NOT alias) "domain.com." FQDN pointing to the server's fixed IP. You can also enter the convenient short MX record "domain.com." with priority 11. This will all work on the LAN -- all these settings must be mirrored on the outside internet using the service from which you registered domain.com.
    You are now ready to begin turning on your services. Here are a few important details and gotchas setting up cloud services.
    Firewall
    Server Admin>Firewall>Services> Open up all ports needed by whichever services you want to run and set up your router (assuming that your server sits behind a router) to port forward these ports to your router's LAN IP. This is most a straightforward exercise in grepping for the correct ports on this page, but there are several jaw-droppingly undocumented omissions of crucial ports for Push Services and Device Enrollment. If you want to enroll your iOS devices, make sure port 1640 is open. If you want Push Notifications to work (you do), then ports 2195, 2196, 5218, and 5223 must be open. The Unix commands "lsof -i :5218" and "nmap -p 5218 server.domain.com" (nmap available from Macports after installing Xcode from the App Store) help show which ports are open.
    SSH
    Do this with strong security. Server.app to turn on remote logins (open port 22), but edit /etc/sshd_config to turn off root and password logins.
    PermitRootLogin no
    PasswordAuthentication no
    ChallengeResponseAuthentication no
    I'm note sure if toggling the Allow remote logins will load this config file or, run "sudo launchctl unload -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist ; sudo launchctl load -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist" to restart the server's ssh daemon.
    Then use ssh-keygen on remote client to generate public/private keys that can be used to remotely login to the server.
    client$ ssh-keygen -t rsa -b 2048 -C client_name
    [Securely copy ~/.ssh/id_rsa.pub from client to server.]
    server$ cat id_rsa.pub > ~/.ssh/known_hosts
    I also like DenyHosts, which emails detected ssh attacks to [email protected]. It's amazing how many ssh attacks there are on any open port 22. Not really an added security feature if you've turned off password logins, but good to monitor. Here's a Lion Server diff for the config file /usr/share/denyhosts:
    $ diff denyhosts.cfg-dist denyhosts.cfg
    12c12
    < SECURE_LOG = /var/log/secure
    > #SECURE_LOG = /var/log/secure
    22a23
    > SECURE_LOG = /var/log/secure.log
    34c35
    < HOSTS_DENY = /etc/hosts.deny
    > #HOSTS_DENY = /etc/hosts.deny
    40a42,44
    > #
    > # Mac OS X Lion Server
    > HOSTS_DENY = /private/etc/hosts.deny
    195c199
    < LOCK_FILE = /var/lock/subsys/denyhosts
    > #LOCK_FILE = /var/lock/subsys/denyhosts
    202a207,208
    > LOCK_FILE = /var/denyhosts/denyhosts.pid
    > #
    219c225
    < ADMIN_EMAIL =
    > ADMIN_EMAIL = [email protected]
    286c292
    < #SYSLOG_REPORT=YES
    > SYSLOG_REPORT=YES
    Network Accounts
    User Server.app to create your network accounts; do not use Workgroup Manager. If you use Workgroup Manager, as I did, then your accounts will not have email addresses specified and iCal Server WILL NOT COMPLETELY WORK. Well, at least collaboration through network accounts will be handled clunkily through email, not automatically as they should. If you create a network account using Workgroup Manager, then edit that account using Server.app to specify the email to which iCal invitations may be sent. Server.app doesn't say anything about this, but that's one thing that email address entry is used for. This still isn't quite solid on Lion Server, as my Open Directory logs on a freshly installed Lion Server are filled with errors that read:
    2011-12-12 15:05:52.425 EST - Module: SystemCache - Misconfiguration detected in hash 'Kerberos':
         User 'uname' (/LDAPv3/127.0.0.1) - ID 1031 - UUID 98B4DF30-09CF-42F1-6C31-9D55FE4A0812 - SID S-0-8-83-8930552043-0845248631-7065481045-9092
    Oh well.
    Email
    Email aliases are handled with the file /private/etc/postfix/aliases. Do something like this
    root:           myname
    admin:          myname
    sysadmin:       myname
    certadmin:      myname
    webmaster:      myname
    my_alternate:   myname
    Then run "sudo newaliases". If your ISP is Comcast or some other large provider, you probably must proxy your outgoing mail through their SMTP servers to avoid being blocked as a spammer (a lot of SMTP servers will block email from Comcast/whatever IP addresses that isn't sent by Comcast). Use Server.app>Mail to enter your account information. Even then, the Lion Server default setup may fail using this proxy. I had to do this with the file /private/etc/postfix/main.cf:
    cd /etc/postfix
    sudo cp ./main.cf ./main.cf.no_smtp_sasl_security_options
    sudo echo 'smtp_sasl_security_options = noanonymous' >> ./main.cf
    sudo serveradmin stop mail
    sudo serveradmin start mail
    Finally, make sure that you're running a blacklisting srevice yourself! Server Admin>Mail>Filter> Use spamhaus.org as a blacklister. Finally, set up mail to use strong Kerberos/MD5 settings under on Server Admin>Mail>Advanced. Turn off password and clear logins. The settings should be set to "Use" your SSL cert, NOT "Require". "Require" consistently breaks things for me.
    If you already installed the server's Trust Certificate as described above (and opened up the correct ports), email to your account should be pushed out to all clients.
    iCal Server
    Server.app>Calendar>Turn ON and Allow Email Invitations, Edit... . Whatever you do, do NOT enter your own email account information in this GUI. You must enter the account information for local user com.apple.calendarserver, and the password for this account, which is stored in the System keychain: Keychain Access>System> Item com.apple.servermgr_calendar. Double-click and Show Password, copy and paste into Server.app dialog. This is all described in depth here. If you enter your own account information here (DO NOT!), the iCal Server will delete all Emails in your Inbox just as soon as it reads them, exactly like it works for user com.apple.calendarserver. Believe me, you don't want to discover this "feature", which I expect will be more tightly controlled in some future update.
    Web
    The functionality of Server.app's Web management is pretty limited and awful, but a few changes to the file /etc/apache2/httpd.conf will give you a pretty capable and flexible web server, just one that you must manage by hand. Here's a diff for httpd.conf:
    $ diff httpd.conf.default httpd.conf
    95c95
    < #LoadModule ssl_module libexec/apache2/mod_ssl.so
    > LoadModule ssl_module libexec/apache2/mod_ssl.so
    111c111
    < #LoadModule php5_module libexec/apache2/libphp5.so
    > LoadModule php5_module libexec/apache2/libphp5.so
    139,140c139,140
    < #LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
    < #LoadModule encoding_module libexec/apache2/mod_encoding.so
    > LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
    > LoadModule encoding_module libexec/apache2/mod_encoding.so
    146c146
    < #LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
    > LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
    177c177
    < ServerAdmin [email protected]
    > ServerAdmin [email protected]
    186c186
    < #ServerName www.example.com:80
    > ServerName domain.com:443
    677a678,680
    > # Server-specific configuration
    > # sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart
    > Include /etc/apache2/mydomain/*.conf
    I did "sudo mkdir /etc/apache2/mydomain" and add specific config files for various web pages to host. For example, here's a config file that will host the entire contents of an EyeTV DVR, all password controlled with htdigest ("htdigest ~uname/.htdigest EyeTV uname"). Browsing to https://server.domain.com/eyetv points to /Users/uname/Sites/EyeTV, in which there's an index.php script that can read and display the EyeTV archive at https://server.domain.com/eyetv_archive. If you want Apache username accounts with twiddles as in https://server.domain.com/~uname, specify "UserDir Sites" in the configuration file.
    Alias /eyetv /Users/uname/Sites/EyeTV
    <Directory "/Users/uname/Sites/EyeTV">
        AuthType Digest
        AuthName "EyeTV"
        AuthUserFile /Users/uname/.htdigest
        AuthGroupFile /dev/null
        Require user uname
        Options Indexes MultiViews
        AllowOverride All
        Order allow,deny
        Allow from all
    </Directory>
    Alias /eyetv_archive "/Volumes/Macintosh HD2/Documents/EyeTV Archive"
    <Directory "/Volumes/Macintosh HD2/Documents/EyeTV Archive">
        AuthType Digest
        AuthName "EyeTV"
        AuthUserFile /Users/uname/.htdigest
        AuthGroupFile /dev/null
        Require user uname
        Options Indexes MultiViews
        AllowOverride All
        Order allow,deny
        Allow from all
    </Directory>
    I think you can turn Web off/on in Server.app to relaunch apached, or simply "sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart".
    Securely copy to all desired remote clients the file IntermediateCA_SERVER.DOMAIN.COM_1.cer, which you exported from System Keychain above. Add this certificate to your remote keychain and trust it, allowing secure connections between remote clients and your server. Also on remote clients: Firefox>Advanced>Encryption>View Certificates>Authorities>Import...> Import this certificate into your browser. Now there should be a secure connection to https://server.domain.com without any SSL warnings.
    One caveat is that there should be a nice way to establish secure SSL to https://domain.com and https://www.domain.com, but the automagically created SSL certificate only knows about server.domain.com. I attempted to follow this advice when I originally created the cert and add these additional domains (under "Subject Alternate Name Extension"), but the cert creation UI failed when I did this, so I just gave up. I hope that by the time these certs expire, someone posts some documentation on how to manage and change Lion Server SSL scripts AFTER the server has been promoted to an Open Directory Master. In the meantime, it would be much appreciated if anyone can post either how to add these additional domain names to the existing cert, or generate and/or sign a cert with a self-created Keychain Access root certificate authority. In my experience, any attempt to mess with the SSL certs automatically generated just breaks Lion Server.
    Finally, if you don't want a little Apple logo as your web page icon, create your own 16×16 PNG and copy it to the file /Library/Server/Web/Data/Sites/Default/favicon.ico. And request that all web-crawling robots go away with the file /Library/Server/Web/Data/Sites/Default/robots.txt:
    User-agent: *
    Disallow: /
    Misc
    VNC easily works with iOS devices -- use a good passphrase. Edit /System/Library/LaunchDaemons/org.postgresql.postgres.plist and set "listen_addresses=127.0.0.1" to allow PostgreSQL connections over localhost. I've also downloaded snort/base/swatch to build an intrusion detection system, and used Macports's squid+privoxy to build a privacy-enhanced ad-blocking proxy server.

    Privacy Enhancing Filtering Proxy and SSH Tunnel
    Lion Server comes with its own web proxy, but chaining Squid and Privoxy together provides a capable and effective web proxy that can block ads and malicious scripts, and conceal information used to track you around the web. I've posted a simple way to build and use a privacy enhancing web proxy here. While you're at it, configure your OS and browsers to block Adobe Flash cookies and block Flash access to your camera, microphone, and peer networks. Read this WSJ article series to understand how this impacts your privacy. If you configure it to allow use for anyone on your LAN, be sure to open up ports 3128, 8118, and 8123 on your firewall.
    If you've set up ssh and/or VPN as above, you can securely tunnel in to your proxy from anywhere. The syntax for ssh tunnels is a little obscure, so I wrote a little ssh tunnel script with a simpler flexible syntax. This script also allows secure tunnels to other services like VNC (port 5900). If you save this to a file ./ssht (and chmod a+x ./ssht), example syntax to establish an ssh tunnel through localhost:8080 (or, e.g., localhost:5901 for secure VNC Screen Sharing connects) looks like:
    $ ./ssht 8080:[email protected]:3128
    $ ./ssht 8080:alice@:
    $ ./ssht 8080:
    $ ./ssht 8018::8123
    $ ./ssht 5901::5900  [Use the address localhost:5901 for secure VNC connects using OS X's Screen Sharing or Chicken of the VNC (sudo port install cotvnc)]
    $ vi ./ssht
    #!/bin/sh
    # SSH tunnel to squid/whatever proxy: ssht [-p ssh_port] [localhost_port:][user_name@][ip_address][:remotehost][:remote_port]
    USERNAME_DEFAULT=username
    HOSTNAME_DEFAULT=domain.com
    SSHPORT_DEFAULT=22
    # SSH port forwarding specs, e.g. 8080:localhost:3128
    LOCALHOSTPORT_DEFAULT=8080      # Default is http proxy 8080
    REMOTEHOST_DEFAULT=localhost    # Default is localhost
    REMOTEPORT_DEFAULT=3128         # Default is Squid port
    # Parse ssh port and tunnel details if specified
    SSHPORT=$SSHPORT_DEFAULT
    TUNNEL_DETAILS=$LOCALHOSTPORT_DEFAULT:$USERNAME_DEFAULT@$HOSTNAME_DEFAULT:$REMOT EHOST_DEFAULT:$REMOTEPORT_DEFAULT
    while [ "$1" != "" ]
    do
      case $1
      in
        -p) shift;                  # -p option
            SSHPORT=$1;
            shift;;
         *) TUNNEL_DETAILS=$1;      # 1st argument option
            shift;;
      esac
    done
    # Get local and remote ports, username, and hostname from the command line argument: localhost_port:user_name@ip_address:remote_host:remote_port
    shopt -s extglob                        # needed for +(pattern) syntax; man sh
    LOCALHOSTPORT=$LOCALHOSTPORT_DEFAULT
    USERNAME=$USERNAME_DEFAULT
    HOSTNAME=$HOSTNAME_DEFAULT
    REMOTEHOST=$REMOTEHOST_DEFAULT
    REMOTEPORT=$REMOTEPORT_DEFAULT
    # LOCALHOSTPORT
    CDR=${TUNNEL_DETAILS#+([0-9]):}         # delete shortest leading +([0-9]):
    CAR=${TUNNEL_DETAILS%%$CDR}             # cut this string from TUNNEL_DETAILS
    CAR=${CAR%:}                            # delete :
    if [ "$CAR" != "" ]                     # leading or trailing port specified
    then
        LOCALHOSTPORT=$CAR
    fi
    TUNNEL_DETAILS=$CDR
    # REMOTEPORT
    CDR=${TUNNEL_DETAILS%:+([0-9])}         # delete shortest trailing :+([0-9])
    CAR=${TUNNEL_DETAILS##$CDR}             # cut this string from TUNNEL_DETAILS
    CAR=${CAR#:}                            # delete :
    if [ "$CAR" != "" ]                     # leading or trailing port specified
    then
        REMOTEPORT=$CAR
    fi
    TUNNEL_DETAILS=$CDR
    # REMOTEHOST
    CDR=${TUNNEL_DETAILS%:*}                # delete shortest trailing :*
    CAR=${TUNNEL_DETAILS##$CDR}             # cut this string from TUNNEL_DETAILS
    CAR=${CAR#:}                            # delete :
    if [ "$CAR" != "" ]                     # leading or trailing port specified
    then
        REMOTEHOST=$CAR
    fi
    TUNNEL_DETAILS=$CDR
    # USERNAME
    CDR=${TUNNEL_DETAILS#*@}                # delete shortest leading +([0-9]):
    CAR=${TUNNEL_DETAILS%%$CDR}             # cut this string from TUNNEL_DETAILS
    CAR=${CAR%@}                            # delete @
    if [ "$CAR" != "" ]                     # leading or trailing port specified
    then
        USERNAME=$CAR
    fi
    TUNNEL_DETAILS=$CDR
    # HOSTNAME
    HOSTNAME=$TUNNEL_DETAILS
    if [ "$HOSTNAME" == "" ]                # no hostname given
    then
        HOSTNAME=$HOSTNAME_DEFAULT
    fi
    ssh -p $SSHPORT -L $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT -l $USERNAME $HOSTNAME -f -C -q -N \
        && echo "SSH tunnel established via $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT\n\tto $USERNAME@$HOSTNAME:$SSHPORT." \
        || echo "SSH tunnel FAIL."

  • Unable to push user profiles to AD groups with Profile Manager since upgrade to Server v3

    Since upgrading our OS X Mac server from 10.8.5 to 10.9.1, and OS X Server app to v3 (now 3.0.2) I have been unable to push or modify user profiles to AD groups (or AD users) using Profile Manager. This was working fine on OS X 10.8.5. Pushing device profiles is still working OK after the upgrade.
    From what I can see from the logs on the client side and server side, it seems related to a problem with the mdm authtoken.
    In the client console I can see this entry:
    27/01/14 14:30:15.844 mdmclient[38557]: *** ERROR *** [Agent:636102071] Unable to proceed with connection to: https://ourserver.ourdomain/devicemanagement/api/device/mdm_connect (com.apple.mdmconfig.mdm) because don't have valid MDM AuthToken
    On the server, in the php.log I can see the corresponding attempt to authenticate:
    1::Jan 27 14:29:50.930 [158] <192.168.28.171> {require_once (mdm_checkin.php:11)} vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv - PUT mdm_checkin
    0::Jan 27 14:29:50.931 [158] <192.168.28.171> checkin: 'UserAuthenticate'
    1::Jan 27 14:29:50.936 [158] <192.168.28.171> {Target_for_incoming_request (target.php:209)} Found target NETWORK LS: <User[156]@ourclientmachine>
    0::Jan 27 14:29:50.937 [158] <192.168.28.171> {LabSession_validate_auth_token (mdm_checkin.php:22)} Failed auth for target NETWORK LS: <User[156]@Device[1697]>, incoming_request={
    0::Jan 27 14:29:50.937 [158] <192.168.28.171>   'MessageType'=>'UserAuthenticate',
    0::Jan 27 14:29:50.937 [158] <192.168.28.171>   'UDID'=>'17aff5c5a40f51acbbd78023d0028c80',
    0::Jan 27 14:29:50.937 [158] <192.168.28.171>   'UserID'=>'A5EA25B7-7CCD-4EF4-B240-F23DED275EEC'
    0::Jan 27 14:29:50.937 [158] <192.168.28.171> }
    1::Jan 27 14:29:50.965 [158] <192.168.28.171> {SendFinalOutput (mdm_checkin.php:145)} Sent Final Output (407 bytes)
    1::Jan 27 14:29:50.965 [158] <192.168.28.171> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ - /devicemanagement/mdm/mdm_checkin
    0::Jan 27 14:29:50.965 [158] <192.168.28.171> {SendFinalOutput (mdm_checkin.php:145)} Completed in 34ms | 200 OK [https://ourserver.ourdomain/devicemanagement/api/device/mdm_checkin]
    So I can see there is a failure to authenticate, but don't really know how to troubleshoot this further. Or maybe this is just a bug in the new server app?
    I have tried to remove and re-enroll clients in Profile Manager but no joy there.
    In the client's Keychain I can see an MDM user AuthToken linked to the correct user account.
    Thanks in advance for any help or suggestions

    I just wanted to update my post, as this issue for me is resolved.
    I uninstalled and reinstalled the Server.app on our Mac server, since then I've been able to push profiles to AD Users and Groups. I guess that in my case the Server app got into a bit of a mess when it was upgraded to v3.
    Now the next headache I have is that my AD Groups which are displayed in Profile Manager are not syncing any recent changes. I think I'm probably seeing the same issue as described in this post
    https://discussions.apple.com/message/25420919#25420919

  • VPP Distribution issues with OSX Server Profile Manager

    Hi, I have a new issue with my OSX 10.9.5 Server. I use VPP to distribute apps to users devices, when I would add a new user I would send them an invitation message through /profilemanager . All was working well until recenetly , the message still arrives in the users mailbox however when you click the "sign in" link on the "receive apps and books from xxxxx" email instead of opening through the Mac App store app it now opens Safari and connects to the profile manager server , any ideas ? it never has done this before and although I thought it was a new feature or method I can not seem to resolve the issue.

    Hi if when you are redirected back to your Mac Server you enter the user name and password of the user you are trying to receive VPP apps for i.e the Open Directory credentials it will then open the App Store providing the credentials are correctly entered so it looks like an additional layer of security. The process is click on the link in the VPP invite email, this takes you to your Mac Server profile manager, log on with your OD account, App store then opens on your Mac like it used to.

Maybe you are looking for

  • Oracle 9i export error after running catexp.sql file

    After running catexp.sql file in oracle 9i 9.2.0.7.0 as system user,it gives the following error while logging ORA-04020: deadlock detected while trying to lock object SYS.DBMS_STANDARD please help me..............

  • Help with error log.

    Not sure if this is the place to post this but here goes, I am getting all these errors on my mac clients. The problem is they freeze on log out and must be manually shut down. They are all brand new eMacs, 10.4.7, My server is 10.4.8, xserve. =====

  • HT6114 Update 10.9.2. fails to install

    When I try to install the 10.9.2 update, the SoftwareUpdateLauncher shows up and hangs, any ideas what to do? -- https://twitter.com/drkrab/status/438975312106635264/photo/1 I've tried both installing it via the AppStore app, and downloading the "com

  • Podcast 'artists' appearing in music Artists

    Hi, Is there an option that prevents the name of podcasts artists from appearing in my music->artists list? I listen a lot of TWiT.tv podcasts but the names of the panel change regularly and they appear in the artist tag. So now my artists list conta

  • Esscmd failing to init

    Hi all: I have an user who gets this message when trying to load Esscmd from command lines: "Error: unable to init client" All others users have essmcd with same version working OK. The version is 5.0.2. He had version 6.5.4.7 which was uninstalled b