Server 4.0 Profile Manager Supported Clients

I'm not ready to pull the trigger on upgrading to Server 4.0 given the bug history, but I'm starting to look at it.
When server 3.0 came out, Profile Manager abandoned support for 10.7.x and caught a few of us off guard.
Does anyone know if Server 4.0 has dropped Profile Manager support for older devices e.g. 10.8.x or iOS 7? I still have some production devices I've not upgraded yet.

After I upgraded my desktop to OSX 10.10 Yosemite I had to upgrade Server to 4.0
Unable to manage the server running 10.9 Server 3.X so I upgraded the server to 10.10 with Server 4.0
Still unable to connect to server on LAN. Its not an IP or authorization issue since I can connect to the server via finder and manage the server via screen sharing...

Similar Messages

Does Profile Manager support iOS7's Managed App Config and App Feedback?

WWDC 2013 talk 301 mentions that iOS7 now supports pushing of app config plists and returning app feedback via new MDM commands.
Does anyone know if Profile Manager supports this or is it only for MDM vendors?
Apples POC app is on the developer web site here: Managed App Configuration
The proejcts readme.txt says this:
* The MDM server must support the ApplicationConfiguration setting and ManagedApplicationFeedback commands
I see other iOS7 specific config profile settings but for the life of me can't find anything on this topic!

At the moment seems that Profile Manager included in OSX Server 3.0 do not supports these features.
I hope that will supports it through an upgrade because that could be super useful and I don't want to pay for another MDM provider and switch only for a single feature.

Push config files made in Server app with Profile manager

As I understand the manual you can distribuate configuration files with Profile manager.
A bit confused now when I want to use Profile manager to distribuate a configuration file I´ve made in Server app.
I saved a VPN configuration file and want to distribuate it with Profile manager but how do I import or add that file into the settings pane for my devices in profile manager?

Hi,
I have the same issue, very frustrating. Using a Win 2003 AD and 10.8.2 server and clients. If i use WGM I can see all users and groups correctly, but Server.app and Profile Manager does not show them correct.
Strange that we see issues like this since Profile Manager has been around for a while, really interested to hear other peoples experiences.
PS I see a similar thing here: https://discussions.apple.com/thread/4417085?start=0&tstart=0

Change Server URL in Profile Manager Enrollment Process?

It appears devices learn the IP or URL of their MDM server during the Profile Manager enrollment process. It must be part of the configuration profile sent to the device. It also appears this is based on the machine's host name. Is there anyway to change that URL - as when the host name of the server changes? If so, where are the files located on the server.
I believe in the previous iPhone Configuration Utility there was a "server URL" and "Check in URL" that could be set. We can't seem to find any parameters in Profile Manger to control the same. Thanks for any help.

Hi Jonathan,
I stumbled on your responses because I was looking for an answer to my own issues.
I am like most just a lay user, although wth 20 years Mac experience.
The issue is as folllows:
I set up Lion Server and I host a Wiki page and I try to run Profile Manager.
I do not have a registered host name. The hostname is server.name.private.
In order to reach the server from the Internet my clients use a DynDNS hostname such as "name.dyndns.org".
My clients can access the Wiki pages with no problems and Safari shows https://name.dyndns.org in the address line.
However, if they want to connect to Profile manager, the server re-directs https://name.dyndns.org/profilemanager https://server.name.private/auth?redirect=https://server.name.private/devicemana gement/api/authentication/callback
which the client's browser cannot resolve because the internal hostname is unknown to public DNS servers.
Why does Profile Manager redirect in the first place ?
Can this issue be resolved without obtaining an "officially registered" hostname ?
Thank you for helping.
Regards,
Twistan

Print server, AD, and Profile Manager

Having a number of issues that I can resolve regarding printing--I am trying to set up profiles in the Profile Manager, but printers are not available or visable. However they are visable in the workgroup manager. The printers reside on Windows print server (2008 R2). Further I can add the printers to my server, but they are not visable in the "Printer Sharing" section of "sharing". So with that, I have a few questions:
1. Do I need to turn on Kerberos in CUPS? User's don't authenticate to our printers via Kerberos, but via the Account manager of the individual printers.
2. Why do settings in Workgroup manager not apply? I can add the printers via LDAP the the new groups I have added, but when I open profile manager the changes or printers are not implemented.
3. How do I make printers visible in Profile Manager?
I have scoured the net and several manuals, but I can seem to stumble upon the correct answer.

Hi,
I have the same issue, very frustrating. Using a Win 2003 AD and 10.8.2 server and clients. If i use WGM I can see all users and groups correctly, but Server.app and Profile Manager does not show them correct.
Strange that we see issues like this since Profile Manager has been around for a while, really interested to hear other peoples experiences.
PS I see a similar thing here: https://discussions.apple.com/thread/4417085?start=0&tstart=0

PKCS12 certificate payloads in OS X Server 10.9 Profile Manager

Hi all,
I'm unable to successfully push .p12 packaged certificate identities to devices managed by OS X Server 10.9 Profile Manager. The problem is that while the file is pushed to the device, it doesn't get unpacked and hence is unable to be used.
I've identified the problem as Profile Manager setting the payload type incorrectly to "com.apple.security.pkcs1" in the profile rather than "com.apple.security.pkcs12". If I strip the profile signing data and edit it, the profile works perfectly when manually installed.
So the questions I have:
1) What's the best way of getting Apple's attention for someone to fix this bug, or is this possibly a browser JavaScript issue incorrectly identifying the payload type (using latest Safari though)?
2) Does anyone know of a workaround to allow this to still be automatically pushed out without having to manually edit and install on each device?
(SCEP is out at the moment due to another issue base64 decoding the SCEP request from Mac OS X devices that I'm taking up with the SCEP server vendor - but iOS works fine)
Thanks!
Al

I'm new to OS X Server and Radius, and have just spent way too many hours trying to figure out what I was doing wrong. I could connect to our enterprise wifi perfectly fine when selecting the certificate from the keychain, but I just couldn't get it to work when I uploaded the .p12 file and used it as the WiFi identity. I tried so many combinations of passphrase, no passphrase, pem format, pkcs12 format, resetting Radius server, resetting whole PKI... But I'd always see Certificate: ?Error_-25257? in the Settings window while I was trying to install the profile, and I couldn't see anything useful in the Radius logs when I tried to connect.
But it turns out, all I needed to do was:
sed -i '' -e '1s/pkcs1/pkcs12/;t' -e '1,/pkcs1/s//pkcs12/' wifi_profile.mobileconfig
(changes the first instance of pkcs1 to pkcs12 - don't change both! I was wondering why it was asking me for a password for our public certificate.)
Will try to update and see if that fixes the problem.

What Mac OS X versions does Profile Manager support in Server 4?

I remember that Mavericks server dropped support for lion clients in profile manager when 3.0 came out, and before we decide if we are upgrading to Server 4 and Yosemite, I was wondering if anyone knew what OS's are supported by Profile Manager in Yosemite Server. Thanks!

Same question and answer as https://discussions.apple.com/thread/6601147
Looking at the code for the /mydevices page, it appears that Server 4.0 supports all the same devices as Server 3.2.2:
OSX (10.7 and later):
      if (majorVersion >= 10 && minorVersion >= 7) {
        osIsValid = true;
iOS (iOS 4.1 and later):
      if (osVersion >= 4.1) {
        osIsValid = true;

Does OS X Server 10.6 Snow Leopard support client Time-Machine backups

Hello,
Does OS X Server 10.6 Snow Leopard support multiple clients(20+) Time-Machine backups via LAN?
Thanks,
-Mike

mausimo wrote:
If the 20 users had 500GB hard drives and were planning on filling them, wouldn't i theoretically only need double the space to backup their computers?
I'm not quite sure what you mean by this. If your 20 users had 500GB hard drives, then your total HD capacity would be 10,000GB, or 10TB. Double would be 20TB, which is more than I recommended. The 15TB (1.5 x the amount of data you would theoretically be backing up) would be plenty.
That said, the DroboPro has a maximum of 16TB using currently available 2TB drives, so I would feel confident in recommending that to you. Realistically, your users probably aren't all going to fill their hard drives to capacity, so you might find you need even less.
If I were you, I would look at how much data is on each hard drive right now, add it all up, multiply it by 1.5, then throw in an extra TB for good measure. I would only purchase enough drives to handle that capacity. As your users take up more space, you can order more drives and add them to the DroboPro.
For example, if each user was using an average of 200GB currently, then for 20 machines you would have a total of 4,000GB, or 4TB. I would put 3x2TB drives in the DroboPro, giving you a total of 6TB (minus overhead) of backup capacity. From there, you can add more 2TB drives as you need them. This is almost identical to a system I manage for a client and it works very well.
I hope this helps!

Profile Manager – disable clients' Finder sidebars?

Is it poss to get Profile Manager to disable or hide the sidebar in clients' Finder windows?

As it turned out, I just needed to change the name of my server to the same domain name I was using externally. I did also have to change the certificate it was using, as it crated a new one once I changed the server name. Now it works fine.

Server 4.1 Profile Manager - Something Went Wrong

Hi,
I just updated my Mac Mini Server from 10.10.2 to 10.10.3, updating to Server 4.1.
It seemed to go okay, but now Profile Manager is messed up. When users try to log in, they get the message:
We're sorry, but something went wrong.
We've been notified about this issue and we'll take a look at it shortly.
(If you're the administrator of this website, then please read the log file "profilemanager.log" to find out what went wrong.)
When I look through the logs I find this:
[2015/04/09 23:15:47.194] F: ActiveRecord::StatementInvalid (PG::Error: ERROR: relation "view_all_user_groups_users_flat" does not exist
[2015/04/09 23:15:47.195] I: Rendering /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/public /500.html (500 Internal Server Error)
Any suggestions?
Thanks!
Frederick

mscott_mdm wrote:
Frederick,
Can you look at the /Library/Logs/ProfileManager/migration_tool.log file and paste in the last 50 or so lines?
Thanks for the help!
Here is the entire migration_tool.log file from updating:
[20723] [2015/04/09 17:13:17.136] -[SULogFileCollection setGlobalLogLevelPrefix:]: YES
0:: [20723] [2015/04/09 17:13:17.138]
    migration_tool-886.204 (PID:20723, OS:14D131, SERVER:14S1092, ARCH:x86_64) starting
    LA: migration_tool
0:: [20723] [2015/04/09 17:13:17.203] Waiting for postgres to startup....
0:: [20723] [2015/04/09 17:13:17.624] +[PGConnection reloadPreferences]: DBDebug = NO, DBLogNotices = NO, DBLogSQL = NO, DBMonitor = NO
0:: [20723] [2015/04/09 17:13:19.409] +[PGConnection reloadPreferences]: DBDebug = NO, DBLogNotices = NO, DBLogSQL = NO, DBMonitor = NO
0:: [20723] [2015/04/09 17:13:20.476] Dropping views...
0:: [20723] [2015/04/09 17:13:21.427] Dropping trigger functions...
0:: [20723] [2015/04/09 17:13:22.172] Dropping remaining non-dependent functions...
0:: [20723] [2015/04/09 17:13:23.810] MIGRATE_00885.001 completed successfully
0:: [20723] [2015/04/09 17:13:23.949] MIGRATE_00885.003 completed successfully
0:: [20723] [2015/04/09 17:13:24.566] EXCEPTION: Postgres <-[PGConnection executeCSQL:] (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-886.204/Compiled/Fr amework-Models/Postgres/PGConnection.m:339): "Postgres error 2BP01 (ERROR: cannot drop function dm_current_timestamp() because other objects depend on it
    DETAIL: default for table devices column last_update_info_time depends on function dm_current_timestamp()
    HINT: Use DROP ... CASCADE to drop the dependent objects too.
    )">
    USERINFO: {
        SQLSTATE = 2BP01;
        errorMessage = "ERROR: cannot drop function dm_current_timestamp() because other objects depend on it\nDETAIL: default for table devices column last_update_info_time depends on function dm_current_timestamp()\nHINT: Use DROP ... CASCADE to drop the dependent objects too.\n";
0:: [20723] [2015/04/09 17:13:24.566] SQL Module failed at statement:
    DROP FUNCTION dm_current_timestamp();
    -[PGConnection executeCSQL:] (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-886.204/Compiled/Fr amework-Models/Postgres/PGConnection.m:339): "Postgres error 2BP01 (ERROR: cannot drop function dm_current_timestamp() because other objects depend on it
    DETAIL: default for table devices column last_update_info_time depends on function dm_current_timestamp()
    HINT: Use DROP ... CASCADE to drop the dependent objects too.
0:: [20723] [2015/04/09 17:13:24.567] Caught unhandled exception -[PGConnection executeCSQL:] (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-886.204/Compiled/Fr amework-Models/Postgres/PGConnection.m:339): "Postgres error 2BP01 (ERROR: cannot drop function dm_current_timestamp() because other objects depend on it
    DETAIL: default for table devices column last_update_info_time depends on function dm_current_timestamp()
    HINT: Use DROP ... CASCADE to drop the dependent objects too.
0:: [20723] [2015/04/09 17:13:24.567] Migration failed at MIGRATE_00885.004 (final step is MIGRATE_00886.204)
0:: [20723] [2015/04/09 17:13:24.764] +[PGConnection reloadPreferences]: DBDebug = NO, DBLogNotices = NO, DBLogSQL = NO, DBMonitor = NO
0:: [20723] [2015/04/09 17:13:24.769] ShutdownMigrator: 2015-04-10 00:13:24 +0000
0:: [20723] [2015/04/09 17:13:24.770] BYE
[22210] [2015/04/09 22:45:34.642] -[SULogFileCollection setGlobalLogLevelPrefix:]: YES
0:: [22210] [2015/04/09 22:45:34.657]
    migration_tool-886.204 (PID:22210, OS:14D131, SERVER:14S1092, ARCH:x86_64) starting
    LA: migration_tool
0:: [22210] [2015/04/09 22:45:34.799] +[PGConnection reloadPreferences]: DBDebug = NO, DBLogNotices = NO, DBLogSQL = NO, DBMonitor = NO
0:: [22210] [2015/04/09 22:45:35.010] +[PGConnection reloadPreferences]: DBDebug = NO, DBLogNotices = NO, DBLogSQL = NO, DBMonitor = NO
0:: [22210] [2015/04/09 22:45:35.637] Dropping views...
0:: [22210] [2015/04/09 22:45:35.638] Dropping trigger functions...
0:: [22210] [2015/04/09 22:45:35.683] Dropping remaining non-dependent functions...
0:: [22210] [2015/04/09 22:45:36.515] EXCEPTION: Postgres <-[PGConnection executeCSQL:] (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-886.204/Compiled/Fr amework-Models/Postgres/PGConnection.m:339): "Postgres error 2BP01 (ERROR: cannot drop function dm_current_timestamp() because other objects depend on it
    DETAIL: default for table devices column last_update_info_time depends on function dm_current_timestamp()
    HINT: Use DROP ... CASCADE to drop the dependent objects too.
    )">
    USERINFO: {
        SQLSTATE = 2BP01;
        errorMessage = "ERROR: cannot drop function dm_current_timestamp() because other objects depend on it\nDETAIL: default for table devices column last_update_info_time depends on function dm_current_timestamp()\nHINT: Use DROP ... CASCADE to drop the dependent objects too.\n";
0:: [22210] [2015/04/09 22:45:36.548] SQL Module failed at statement:
    DROP FUNCTION dm_current_timestamp();
    -[PGConnection executeCSQL:] (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-886.204/Compiled/Fr amework-Models/Postgres/PGConnection.m:339): "Postgres error 2BP01 (ERROR: cannot drop function dm_current_timestamp() because other objects depend on it
    DETAIL: default for table devices column last_update_info_time depends on function dm_current_timestamp()
    HINT: Use DROP ... CASCADE to drop the dependent objects too.
0:: [22210] [2015/04/09 22:45:36.548] Caught unhandled exception -[PGConnection executeCSQL:] (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-886.204/Compiled/Fr amework-Models/Postgres/PGConnection.m:339): "Postgres error 2BP01 (ERROR: cannot drop function dm_current_timestamp() because other objects depend on it
    DETAIL: default for table devices column last_update_info_time depends on function dm_current_timestamp()
    HINT: Use DROP ... CASCADE to drop the dependent objects too.
0:: [22210] [2015/04/09 22:45:36.548] Migration failed at MIGRATE_00885.004 (final step is MIGRATE_00886.204)
0:: [22210] [2015/04/09 22:45:36.842] +[PGConnection reloadPreferences]: DBDebug = NO, DBLogNotices = NO, DBLogSQL = NO, DBMonitor = NO
0:: [22210] [2015/04/09 22:45:36.847] ShutdownMigrator: 2015-04-10 05:45:36 +0000
0:: [22210] [2015/04/09 22:45:36.848] BYE

Is there a way to have separate permissions between Server app and Profile manager?

I'm running OS X 10.10.1 (Yosemite) with Server app 4.0 installed.
I am a System Administrator for a University. I want to give our college techs the ability to manage Profile Manager, but if I grant them Admin rights on the Apple server they will also have access to the Server app, if they have the server app installed on their computer.
Is there a way to limit access to the Server app, but allow certain individuals admin right to Profile Manager?

This provides instructions:
How to use multiple iPods, iPads, or iPhones with one computer

Can I use OS X Server 4.0 Profile Manager to distribute iOS apps with iOS Developer Enterprise Program (iDEP)?

We are developing an iOS and complementary Mac OS X app for in house use by about 1500 users. I need to manage the devices and distribute the in-house app to these users.
We have an iOS Developer Enterprise Program (iDEP) licence.
Can I combine OSX Server and iDEP to distribute and manage the app? Or do I nee dot move to something like Air Watch?

You should not have to do anything the user/group import should be automatic and you should not have to manually create any accounts and it does onging syncs automatically but I do not know how often.
Once you are install and connect to profile manager all the accounts should show up just by clinking on users or the groups icons and they will work with that. You should not need to mess with them in the actual server application Although I would assume the other services all ink into the OD directory I don't know exactly how services like email, file sharing or VPN work as we have other more full featured better scaling services for that like MS Exchange for email/calendar and Cisco VPN.
We are only using OD, Profile Manager and Software Update.
Just a note I am using Server 3.2 on OS 10.9.5 if you are using Server 4.X your mileage will probably vary slightly as I am not sure what the areas of major change are.

OS X Server 10.7 Profile Manager - Force User Pin

Hi.
My company has hit a show stopper with OS X Server 10.7 and its Profile Manager. We would like to use OS X as a mobile device manager for iOS but we cannot find the option to force a PIN lock and deny the user the ability to remove the PIN lock. The iPhone configuration utility does have this option however. The user cannot remove the PIN without a master password that we define in the iPhone Config Utility.
The omission of this feature seriously undermines the usefulness of the Profile Manager.
Is this a known bug? Can a PIN lock be applied and not removed by the user in the latest OS X server 10.8?
Thanks for your help.
James

I'm new to OS X Server and Radius, and have just spent way too many hours trying to figure out what I was doing wrong. I could connect to our enterprise wifi perfectly fine when selecting the certificate from the keychain, but I just couldn't get it to work when I uploaded the .p12 file and used it as the WiFi identity. I tried so many combinations of passphrase, no passphrase, pem format, pkcs12 format, resetting Radius server, resetting whole PKI... But I'd always see Certificate: ?Error_-25257? in the Settings window while I was trying to install the profile, and I couldn't see anything useful in the Radius logs when I tried to connect.
But it turns out, all I needed to do was:
sed -i '' -e '1s/pkcs1/pkcs12/;t' -e '1,/pkcs1/s//pkcs12/' wifi_profile.mobileconfig
(changes the first instance of pkcs1 to pkcs12 - don't change both! I was wondering why it was asking me for a password for our public certificate.)
Will try to update and see if that fixes the problem.

Server 10.8 Profile Manager error

I hope some one just help me out here:
Last week, shortly after the 2.2 update came out, I installed the update. Unfortunately, doing so made our NetInstall service run very badly. We rolled back the Server.app from a Time Machine backup. That caused out Profile Manager process to not be able to find it's info. I suspect it was updated with the first 2. update and rolling back the server.app confused it. So, we reapplied the update to 2.2. That allowed Profile Manager to work, and we have been living with the poorly working NetImage. Now, we seem to have an error with Profile Mamager not being able to start due to errors. I would like to restore the database from Time machine and perhaps even the postgreSQL and DeviceManager process to get it working, but I can't figure out which folders I need to restore. I've spent the better aprt of the day surfing for answers to a non functional Profile Manager, but nothing works.
What is the proper location for the Profile Manager database ?
How can I tell that postgreSQL is looking in the right place ?
Can I reindex the database to repair it ?

I hope some one just help me out here:
Last week, shortly after the 2.2 update came out, I installed the update. Unfortunately, doing so made our NetInstall service run very badly. We rolled back the Server.app from a Time Machine backup. That caused out Profile Manager process to not be able to find it's info. I suspect it was updated with the first 2. update and rolling back the server.app confused it. So, we reapplied the update to 2.2. That allowed Profile Manager to work, and we have been living with the poorly working NetImage. Now, we seem to have an error with Profile Mamager not being able to start due to errors. I would like to restore the database from Time machine and perhaps even the postgreSQL and DeviceManager process to get it working, but I can't figure out which folders I need to restore. I've spent the better aprt of the day surfing for answers to a non functional Profile Manager, but nothing works.
What is the proper location for the Profile Manager database ?
How can I tell that postgreSQL is looking in the right place ?
Can I reindex the database to repair it ?

Backup Server Settingd - Including Profile Manager

We want to ensure that we have a backup of our server settings and also the network settings of the machine. We have experienced issues with TimeMachine in the past and want to ensure we are backing our server up including the Profile Manager database and active directory database.
Thanks,
James.

The files are created by PostGreSQL and contain WAL (write-ahead-logging) data. It's still not clear why these files should be growing at more than 33 MB a day.
Why is there no snapshot of the database taken, past WAL files deleted and new ones started every day/week/month? Can I do this myself? I'm now wasting 16GB of storage as an inefficient backup for PostgreSQL.

Server 4.0 Profile Manager Supported Clients

Similar Messages

Maybe you are looking for