Profile Manager Login Screen message limit?

I'm trying to use profile manager to set a login screen message. Our message has 360 characters including spaces. The profile manager web page crashed every time I try to save it. If I halve the length of the message it will save and apply. The online documentation I have looked at,http://help.apple.com/profilemanager/mac/2.2/#apd2A822B29-31B2-4DA7-9E3A-6E68DE5 4F5DE doesn't state a maximum character length for the message; is there one? and what is it?
Thanks,
Rebecca

I would reccomend the use of a Login banner if you have that much content.
http://support.apple.com/kb/HT4788

Similar Messages

Keep 443 open for profile updates, but limit profile manager login

I notice that port 443 is used by clients to communicate with the server when profiles are pushed (I assume as an encrypted connection for transmitting the profile file). Therefore it seems that for profiles to be pushed to devices outside the LAN 443 needs to be available when clients come calling to the FQDN to get a new profile (when Apple's push notification service says 'hey something is waiting for you').
However, from a security standpoint I'm not thrilled about exposing the profile manager login to the page to the whole world. Is there a way to limit access to this page to say just our LAN (e.g., using .htaccess) and still allow clients to come calling to the server from anywhere on 443 to fetch profiles? How have others handled this scenario?
Thanks!

...minor updates (see below) after some additional testing. Added /auth as this is another mechanism for authenticating against the admin panel. Also Added an additional allow for loopback traffic since logs showed some items being blocked on : : 1
<Location /profilemanager>
    AllowOverride None
    Options MultiViews FollowSymlinks
    Order deny,allow
    Deny from all
    Allow from 10.0.0.0/8                   #OUR LAN
    Allow from XXX.XXX.XXX.XXX              #SERVER'S PUBLIC IP
    Allow from 127.0.0.0/255.0.0.0 ::1/128    #FOR INTERNAL LOOPBACK TRAFFIC
    Header Set Cache-Control no-cache
</Location>
<Location /mydevices>
    AllowOverride None
    Options MultiViews FollowSymlinks
    Order deny,allow
    Deny from all
    Allow from 10.0.0.0/8                   #OUR LAN
    Allow from XXX.XXX.XXX.XXX              #SERVER'S PUBLIC IP
    Allow from 127.0.0.0/255.0.0.0 ::1/128    #FOR INTERNAL LOOPBACK TRAFFIC
    Header Set Cache-Control no-cache
</Location>
<Location /auth>
    AllowOverride None
    Options MultiViews FollowSymlinks
    Order deny,allow
    Deny from all
    Allow from 10.0.0.0/8                   #OUR LAN
    Allow from XXX.XXX.XXX.XXX              #SERVER'S PUBLIC IP
    Allow from 127.0.0.0/255.0.0.0 ::1/128    #FOR INTERNAL LOOPBACK TRAFFIC
    Header Set Cache-Control no-cache
</Location>

Profile Manager login issues

When I login to Profile manger by clicking on the link from Server.app and using an administrator account I get the following
Any one have any ideas on how to fix this.
TIA
P.S. This install was an upgrade from 10.6.8. Other than the stats/alerts indicators not working this is the only issue I have ATM.

The image isn't loading for me. Could you please repost it or type what it says? I'm having issues with Profile Manager as well.

Profile Manager Login Item Apps

Where does Profile Manager get the list of apps that you can select from for the applications to load at login in the "Login Items" payload?
I have several apps that I've added on the server, but they do not show up in the list of applications?!? Weird.

I would reccomend the use of a Login banner if you have that much content.
http://support.apple.com/kb/HT4788

Yosemite profile manager login hook

Hi. We have recently purchased a Mini running Yosemite server. The server is running profile manager and an open directory server, it is bound to active directory. This is all working, however I would like to roll out a login script for users. I have created this script and it works when run manually, however is there a way to specify this to run via Profile Manager? If the script is located on a server, how can I have a client run this script remotely? I want to push this out automatically so I don't need to go to all the laptops throughout the company. Thanks

If the Login Hook works on your machine, maybe the best way to share the script is using Apple Remote Desktop. But your machines have to be prepared for the remote maintenance.

Profile Manager & Login Items & Variables

Hello doomed!
I tried to use variables such as %short_name% in Login Items (OS X) section in Profile Manager.
Bad luck again...
Authenticated Networks Mounts:
smb://nas-01/Public – works like a charm!
smb://nas-01/Private/%short_name% – doesn't work
If someone in Apple walk here once a year, please note this terrible "feature"
One thousand thx to you.

Hello!
Thanks for advices.
I know how variables in PM works. I use it alot.
And I have tons of shares which names equal to %short_name% (user login)
I need mount user-private-space-share (lets call it so) and I can do it in Finder just press Cmd+K and type: smb://nas-01/Private/cook
where cook equal to AD login cook and of course it equal to %short_name% in my case.
So, what I do wrong? Thx.
Sorry for worse language.

Firefox begins to start but then stops before loading any screen. Profile manager/safe mode appear then disappear. Task manager shows programs briefly in CPU then they disappear. Uninstall & reload makes no difference. Any ideas please ?

When we clicked as usual on the firefox icon the egg-timer started then went off. Nothing started up.
Checking the Task Manager showed firefox.exe briefly using the CPU then it dropped off the list.
We tried to uninstall and reload from the mozilla site (http://www.mozilla-europe.org/en/firefox/). Installation seemed to work ok, but the same problem recurred when we tried to start firefox.
Did this again, this time removing bookmarks, etc. same result.
Tried to use the profile manager - the screen came up but disappeared before we could use it.
Same thing happened when we tried to start in safe mode - screen briefly appeared but then disappeared.
Tried googling in IE to solve the problem but nothing seems to apply.
Have run all security checks but no apparent bugs or problems.
Have had to abandon firefox and use another browser. How do we get it back please ?

Did you check your security software (firewall)?
A possible cause is security software (firewall) that blocks or restricts Firefox without informing you about that, possibly after detecting changes (update) to the Firefox program.
Remove all rules for Firefox from the permissions list in the firewall and let your firewall ask again for permission to get full unrestricted access to internet for Firefox.
See [[Server not found]] and [[Firewalls]] and http://kb.mozillazine.org/Firewalls

How to edit the custom message in login screen

I did this and forgot how I done it, And having remembered I hope this will help any one who needs to customise their login screen message.
1     Callup system preferencies pane and click on Security & Privacy
2     Unlock the padlock in the lower left corner
3     In the General tab edit the box under "Show a message when screen is locked" then close the padlock to make changes.
There are many times this has been asked with various answers ranging from "download ......" to "find... and edit file...." all seems too much work there when its already catered for in osx.

Try resetting your device.
Hold down the Home and Sleep/Power Buttons until the Apple Logo shows up.
Ignore the red slider if it appears.
This will reboot the phone, no data should be lost.

Access Mac Mini Server (profile management) through reverse proxy

Hi,
Newbie in Mac's world and yet trying to make it more complicated as it is.
As we recently (last month) decided to equip our sales force with iPads, they were configured through Apple Configurator tool running on a dedicated Mac Mini Mountain Lion.
Now, I'd be keen in moving this configuration to the Profile Manager, part of the OSx Server plugin. So far so good.
Problem is the following : another web server is already on the LAN using both 80 and 443 ports. So all incoming traffic on those ports was routed to this other server. As Mac Mini Server default http/s ports may not be altered, I installed a reverse proxy server (Oracle VM - Ubuntu 12.04LTS - pound), configured to deal differently traffic on those ports according to the domain name (host) of the web request (header). Each 'local' server has been allocated a domain name. Just to be clear, traffic is now routed by the WAN/LAN router, for those ports, towards the reverse proxy, configured to reroute the traffic to the correct destination.
So far so good, it works like a charm, except... as soon as we enter https protocol on Mac Mini Server Profile Manager.
Access from an iDevice to the Mac Mini Server Profile Manager login page is fine, but as soon as password is confirmed, safari is pending and finally a message 'An internal serer error occured. Please try later again' appears.
Looking to both reverse proxy system log and Mac Mini profilemanager.log files to trace the problem, the following lines are produced at this particular moment :
reverse proxy system.log
Jan 15 14:44:03 reverseproxy pound: 91.... GET /devicemanagement/console/apple_theme_v2/en/da56af0a69e733b259dac3991419fa928b4 94a56/resources/images/sprites/me_controls.png HTTP/1.1 - HTTP/1.1 200 OK
Jan 15 14:44:03 reverseproxy pound: 91.... GET /auth?redirect=http://osxsrv.fiks.net/devicemanagement/api/authentication/callback HTTP/1.1 - HTTP/1.1 302 Moved Temporarily
Jan 15 14:44:04 reverseproxy pound: 91.... GET /devicemanagement/api/authentication/callback?auth_token=336952DE-BDDE-4390-82F 7-8475B79FB2D3 HTTP/1.1 - HTTP/1.1 302 Moved Temporarily
Jan 15 14:44:04 reverseproxy pound: (b7680b40) e500 can't read header
Jan 15 14:44:04 reverseproxy pound: (b7680b40) e500 response error read from 192.168....:443/GET /profilemanager/ HTTP/1.1: Success (0.007 secs)
Jan 15 14:44:08 reverseproxy pound: 91.... POST /devicemanagement/api/magic/get_updated HTTP/1.1 - HTTP/1.1 200 OK
OSx Server profilemanager.log
Jan 15 14:44:05 osxsrv ProfileManager[1748] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:05) [POST]Jan 15 14:44:05 osxsrv ProfileManager[1749] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:05) [POST]
Jan 15 14:44:06 osxsrv ProfileManager[1748] <Info>: Completed in 492ms (View: 0, DB: 6) | 200 OK [http://osxsrv.../magic/do_magic]
Jan 15 14:44:06 osxsrv ProfileManager[1749] <Info>: Completed in 687ms (View: 0, DB: 5) | 200 OK [http://osxsrv..../magic/do_magic]
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Completed in 4ms (View: 1, DB: 14) | 403 Forbidden [http://osxsrv..../magic/do_magic]
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Completed in 45ms (View: 1, DB: 43) | 403 Forbidden [http://osxsrv..../magic/do_magic]
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Completed in 55ms (View: 0, DB: 1) | 403 Forbidden [http://osxsrv..../magic/do_magic]
Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Processing AuthenticationController#callback (for 91.... at 2013-01-15 14:44:08) [GET]
Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Redirected to https://osxsrv..../profilemanager/
Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Completed in 149ms (DB: 5) | 302 Found [http://osxsrv..../authentication/callback?auth_token=[FILTERED]]
I guess the '302 Found' is causing or explaining the problem.
I agree this might not be a Mac issue, so I still knock your doors hoping some of you could at least give a hint for what to search for !
If the pound configuration file is of interest, just ask, but this is pretty trivial, saying basically listen these protocols (http/https) on these ports (80/443) and according to Header content (check destination host) and reroute packet to LAN device (with given LAN IP address).
As the default port(s) of the Mac Mini Web Services may not be altered (so far I know), I guess I am stuck using 80 and 443 anyway.
Maybe should I invest time in changing my other apache server ports to some more exotic 8080 or 88 or whatever so Mac Mini Server Profile Manager default ports 80 and 443 are maintained and can be easily and directly rerouted to my Mac server without any reverse proxy along the way.
Thanks in advance for your help
Alx

HI All,
i'm also using reverse proxy technique to publish my server to the internet. The ip is used by twice domains. The problem is by using the profile manager
after login it redirects the url to the Local Area network addresse instead to the domain.
How to configure this on OS X Server and the Profile Manager Service?
Kind Regards
Oemer

Profile Manager Not Loading - auth_token doesn't exit

We've have an instance of Server 3.1.2 where the Profile Manager login is no longer working, so we are effectively locked out of profile manager for the time being :-(.
On the front-end, visiting the /profilemanager login page redirects to (FQDN in place of our actual domain):
auth?redirect=https://FQDN/devicemanagement/api/authentication/callback
and the page then hangs forever and never gets to the login prompt. Occasionally the login prompt will display but nothing happens after the credentials are entered.
On the back-end, the profile manager log shows the following entries that coincide with the hanging of the login pages:
[91384] [2014/08/20 01:43:46.401] I: Processing MagicController#do_magic (for 10.XXX.XXX.XXX at 2014-08-20 01:43:46) [POST]
[91384] [2014/08/20 01:43:46.402] I: auth_token doesn't exist
[91384] [2014/08/20 01:43:46.402] I: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Other services on the server (e.g., DNS and Open Directory) seem to be operating normally. On other threads I've seen a suggestion to replace the FQDN with the IP, but that's yields the same result for us.
Any ideas? This one is driving us nuts!
Thanks for any input.

I had multiple IP's set on my server, which randomly seemed to switch. It seems like there is an incompatibility still between Server Admin and server.app. Since Apple is pressing developers to test server admin and server.app I am confident those problems will resolve eventually, but for now I have deleted all-but-1 IPv4 and 1 IPv6 address (same interface), the networking interface overview for my server within Server Admin was updated and it looks like it works solid now, this was not by design I presume, so this must be another bug plaguing Lion...
After upgrading Postgres to 9.1.3 and upgrading webmail (upgrade: usr/share/webmail) from www.roundcube.net, making a new site webmail.example.com with the files stored in /Library/Server/Web/Data/Sites/CustomSitesDefault/webmail/ I made a symbolic link from that 'directory' to the actual built in webmail facility found in /usr/share/webmail by entering the following in terminal.
ln -s -i /usr/share/webmail/ /Library/Server/Web/Data/Sites/CustomSitesDefault/webmail/
By doing this it will ask to remove a directory, if you didn't put any important files in there, which I presume you didn't, confirm with the letter y and press enter.
Webmail now works every time the way I want it The same goes for Profile Manager, at least for now...

Profile manager spotlight message "com.apple.iTunesLibraryService"

Hi
Before asking my question a quick overview of my computer environment:
I've a Mac mini with OS X server (Mavericks) connected to a Windows Server 2003 Active Directory. I'm going to use some 40 iMac's on our school (combined with Windows computers).
On the Mac mini I'm using Profile manager to allow or deny some settings on the iMac's.
My environment uses the Dutch language - I try to translate as accurate as possible!
I only have settings installed on machine-level (not on user or group level).
Here are my settings for the use of Spotlight (in Profile manager):
Devicegroup IMACS > Dock > Apps in dock: Launchpad, Maps, Safari, iTunes (11.1.4)
Devicegroup IMACS > Restrictions > Preferences:all selected items are deactivated except Dock, Mission Control, Sound and Spotlight
Devicegroup IMACS > Restrictions > Apps:Allow apps: iTunes, Spotlight, ...
Devicegroup IMACS > Restrictions > Media:Access to disks: internal disks allowed, ...
When a (test)user enters some characters in Spotlight and then erases those characters a message pops up stating: "You don't have access to use the application com.apple.iTunesLibraryService". This happens every first time the user makes use of Spotlight.
Anyone a clue what's missing of what I forgetting to adjust?

So I potentially have the issue resolved. After a few minutes of cranking away at spotlight I have no error and have never had it take that long to pop up.
I opened console and when the error popped up stating “You do not have permission to use the application “com.apple.iTunesLibraryService.” in console this popped up:
com.apple.quicklook.sattelite:
[QL] Could not get ITLibrary: Error Domain=NSPOSIXErrorDomain Code=100001 “Could not load.” UserInfo=0x7fd480609040 {NSLocalizedDescription=Could not load., NSUnderlyingError= 0x7fd48040d1e0 “The operation couldn’t be completed. (OSstatus error 100005.)”}
So I looked around a bit and found these paths contain references to QuickLook:
/System/Library/Frameworks/
/System/Library/QuickLook/
/Library/
~/Library/
I added all of those to the allowed folder list and so far that error has not popped up again. I added the /System/Library/QuickLook/ folder explicitly as opposed to just /System/Library/ as I do not want kids using screen sharing (cheating issue) or the jar launcher (minecrafting in class)
For reference I am on 10.9.4 using Profile Manager, payloads are managed with in a machine group. The folders mentioned above were added to the Allow Folders section of Apps under Restrictions. Hope this helps someone else. YMMV so far it appears to have worked. I'll update if it breaks again.

When trying to start Firefox I keep getting message saying "A copy of Firefox is already open. Only one copy of Firefox can be open at a time." I've started a new Profile but Profile Manager keeps telling me the Default one is still in use.

When trying to start Firefox again I got a message saying "Close Firefox. A copy of Firefox is already open. Only one copy of Firefox can be open at a time." This question is addressed in Mozillazine but nothing I've tried from there seems to work. I started a new Profile from the Profile Manager which at least gets me up and functioning, but weirdly enough the Manager also tells me the old (Default) profile is still running, though I can't find a way to close it. I also can't find the Default profile in my profile manager. can anyone help?
== This happened ==
Just once or twice
== i thought I'd exited Firefox and was going in again.

Had this problem on my MacBook after I deleted my profile (the profile folder is named something like asd8f7as.default). The solution for me was to open profiles.ini and delete the information about the profile I had deleted. It should look something like this:
[Profile0]
Name=default
IsRelative=1
Path=Profiles/2xr4hi1g.default
Delete, save, problem solved.

Firefox won't start; no error message; profile manager also won't start. What can I do?

Suddenly, firefox won't start. I get no error message--it just won't open. System restore to a month before the problem did not help.
From the suggestions on this page: http://support.mozilla.com/en-US/kb/Firefox%20will%20not%20start... I did not recently install add-ons or clean the registry, so I think it may be a profile problem. But profile manager will not open--only a tiny window with a white rectangle and no text.
I would like to not lose all my bookmarks. And I would like to continue using Firefox.
What can I do?

dmcritchie, thank you for your reply!
Before I received your response, I tried something that seems to have worked. I used Chrome to go to the Firefox website and downloaded Firefox (without uninstalling it first) and went through the installation process again. For some reason, this worked, even though I already had the latest version of Firefox, and I can now open Firefox successfully.
If it stops working again, I will try your suggestion. In the meantime, thank you much!

Cant add Apps to login items with profile manager

I can set up profile manager successfully, and set certain settings like the Dock, the login window, etc. But when I click on Login Items, and try to add an Application, the list of applications is blank. Tried it from my server, tried it logged in remotely, tried rebooting, tried it on several accounts and several groups, and its always empty.

found it:
/usr/bin/osascript -e 'tell application "System Events" to make new login item with properties { path: "/Applications/iChat.app", hidden:false } at end'

Posting message on Vendor login screen

Hi,
I want to display a message in red on the vendor login screen i.e. just below the username password entry. This message is just to notify the vendor that the application is unavailable during a particular timeframe. Does anyone know if there are any settings for this or how this can be done?
Thanks,
Patricia

Patricia,
We occasionally create system maintenance messages to alert our users of upcoming system outages.
To do this, navigate to Setup, select Company, select your Company record, and then create a new "Welcome Page" in edit mode.
This will allow you to create a message (you can control the font, font size, color, etc.) that can be displayed to the users (internal, external, or both ... your choice) when they log into the system. The message will be displayed to each user only once.
After the system outage has occurred, make sure you inactivate the message.
Best Regards, Scott

Profile Manager Login Screen message limit?

Similar Messages

Maybe you are looking for