Upgrade Server 4 - stalled at profile manager

Am trying to upgrade to Server 4.0 from 3.2.1
The server install process stalls at about halfway across the blue line - with the statement "updating profile manager service".
This is odd because we don't use the profile manager service, and it was disabled in the 3.2.1 configuration (i.e. set to not start in the Server app)
No obvious errors in the system log.
Anyone got any suggestions about what I can do to kick it along?
Thanks in advance for any help.

Hi
This is the last block of entries in a log called "ServerSetup_DeviceManager.log" in /Library/Logs. Is this what you are looking for? It contains an error at least...
2014-10-17 20:32:22 deviceManagerCommon.sh: A postgres cluster appers to already exist at /Library/Server/ProfileManager/Config/ServiceData/Data/PostgreSQL
2014-10-17 20:32:22 deviceManagerCommon.sh: Pre-flight starting postgres...
2014-10-17 20:32:22 deviceManagerCommon.sh: Started xpostgres with PID 10294
2014-10-17 20:32:22 XPG.10297: Process parent is PID 10294
2014-10-17 20:32:22 XPG.10297: Excluding data directory.
2014-10-17 20:32:22 XPG.10297: Turning on archive logging.
2014-10-17 20:32:22 XPG.10297: Cleaning up any existing postmaster.pid file
2014-10-17 20:32:22 XPG.10297: Starting postgres.
2014-10-17 20:32:22 XPG.10297: Waiting for data directory: /Library/Server/ProfileManager/Config/ServiceData/Data/PostgreSQL
2014-10-17 20:32:22 XPG.10297: Data directory exists.
2014-10-17 20:32:22 XPG.10297: Spawning postgres now.
2014-10-17 20:32:22 XPG.10297: Waiting for socket to appear in socket directory: /Library/Server/ProfileManager/Config/var/PostgreSQL
2014-10-17 20:32:23 deviceManagerCommon.sh: Stopping postgres pre-flight instance...
2014-10-17 20:32:23 XPG.10297: Decremented reference count. Count is now: 0
2014-10-17 20:32:23 XPG.10297: Reference count reached zero. Shutting down.
2014-10-17 20:32:23 XPG.10297: Killing idle connections...
2014-10-17 20:32:23 XPG.10297: Spawning... ('/Applications/Server.app/Contents/ServerRoot/usr/bin/psql', '-q', '-h', '/Library/Server/ProfileManager/Config/var/PostgreSQL', '-d', 'postgres', '-c', "SELECT pid, (SELECT pg_terminate_backend(pid)) as killed from pg_stat_activity WHERE state LIKE 'idle';")
pid | killed
-----+--------
(0 rows)
2014-10-17 20:32:23 XPG.10297: Socket available; starting should now be complete.
2014-10-17 20:32:24 XPG.10297: log receiver: pg_receivexlog: could not connect to server: FATAL: the database system is shutting down
pg_receivexlog: disconnected; waiting 5 seconds to try again
2014-10-17 20:32:24 XPG.10297: Postgres exited.
2014-10-17 20:32:24 XPG.10297: pg_receivexlog still running; terminating.
2014-10-17 20:32:24 XPG.10297: log receiver: pg_receivexlog: could not connect to server: could not connect to server: No such file or directory
Is the server running locally and accepting
connections on Unix domain socket "/Library/Server/ProfileManager/Config/var/PostgreSQL/.s.PGSQL.5432"?
2014-10-17 20:32:24 deviceManagerCommon.sh: Starting postgres under launchd...
2014-10-17 20:32:24 deviceManagerCommon.sh: Migrating PM SACL in OD...
PM SACL group has already been migrated
2014-10-17 20:32:24 deviceManagerCommon.sh: Preparing/migrating database...
2014-10-17 20:32:29 deviceManagerCommon.sh: Done!
Oct 17 20:32:55.009 Applying DeviceManager<7fca7144d750> Profile Manager
Oct 17 20:32:55.010 DeviceManager<7fca7144d750> Running '/Applications/Server.app/Contents/ServerRoot/usr/libexec/deviceManagerCommon.s h'
2014-10-17 20:32:55 deviceManagerCommon.sh: Starting...
2014-10-17 20:32:55 deviceManagerCommon.sh: Ensuring Profile Manager services are unloaded and terminated...

Similar Messages

Mac Mini Server won't load Profile Manager

My Mac Mini Server has stopped loading Profile Manager in a web browser, and gives me the following message:
Caught exception "Connection to DB failed" [CSDatabaseError] executing route /auth/?redirect=https://stormforce.no-ip.biz/devicemanagement/api/authentication/callback:
0 CoreFoundation 0x00007fff8f42d25c __exceptionPreprocess + 172
1 libobjc.A.dylib 0x00007fff8f5b5e75 objc_exception_throw + 43
2 CSService 0x0000000101f549bd -[CSConnectionPool openConnection] + 3309
3 CSService 0x0000000101f5538a -[CSConnectionPool currentConnection] + 98
4 CSService 0x0000000101fe313c -[CSAuthService _sessionForField:value:] + 96
5 CSService 0x0000000101fd4bff +[CSHTTPRouteHelper setCurrentSessionForRequest:] + 150
6 CSService 0x0000000101fdec09 __21-[CSAuthService init]_block_invoke + 367
7 CSService 0x0000000101fd081a __53-[CSRoutingHTTPConnection httpResponseForMethod:URI:]_block_invoke + 95
8 CSService 0x0000000101fd3d6c -[CSHTTPBackgroundResponse bounce:] + 286
9 Foundation 0x00007fff8fa0e76b __NSThread__main__ + 1318
10 libsystem_pthread.dylib 0x00007fff8d749899 _pthread_body + 138
11 libsystem_pthread.dylib 0x00007fff8d74972a _pthread_struct_init + 0
12 libsystem_pthread.dylib 0x00007fff8d74dfc9 thread_start + 13
Anyone got any ideas how I fix this? My current plan is to try and re-install server.app, but I thought I'd post this to see if anyone had any ideas.

I'm still trying to trace this fault - if anyone has any ideas they'd be much appreciated.

Os x Server 3.1 breaks Profile Manager

Hi all,
since i update to server 3.1, the Profile Manager wont start.
In the ive got these Error:
0:: [245] [2014/03/20 20:15:14.725] Waiting for postgres to startup....
0:: [245] [2014/03/20 20:15:18.445] +[PGConnection reloadPreferences]: DBDebug = NO, DBLogNotices = NO, DBLogSQL = NO, DBMonitor = NO
0:: [245] [2014/03/20 20:15:29.432] Profile Manager service STOPPED
1:: [245] [2014/03/20 20:15:29.927] Incoming request: noOp
1:: [245] [2014/03/20 20:15:29.928] Incoming request: getWebAppState
1:: [245] [2014/03/20 20:15:29.963] Registering for network reachability notifications to "gateway.push.apple.com".
0:: [245] [2014/03/20 20:15:29.981] Profile Manager service stopped.
0:: [245] [2014/03/20 20:15:29.987] APNS topic = com.apple.mgmt.XServer.dcbf90a0-c0ba-4dee-bcb6-39de366d4e87
1:: [245] [2014/03/20 20:15:30.681] >>> networkSettingsChanged: "gateway.push.apple.com" is apparently reachable (flags = 0x2)
1:: [245] [2014/03/20 20:16:03.409] Incoming request: getWebAppState
0:: [245] [2014/03/20 20:16:03.727] Profile Manager service stopped.
1:: [245] [2014/03/20 20:16:07.547] Incoming request: readSettings
1:: [245] [2014/03/20 20:16:07.798] Incoming request: readAppDistributionSettings
1:: [245] [2014/03/20 20:16:07.856] Incoming request: readSimplifiedDeviceEnrollmentSettings
1:: [245] [2014/03/20 20:25:39.511] Incoming request: readSettings
1:: [245] [2014/03/20 20:25:39.578] Incoming request: readAppDistributionSettings
1:: [245] [2014/03/20 20:25:39.637] Incoming request: readSimplifiedDeviceEnrollmentSettings
1:: [245] [2014/03/20 20:25:40.054] Incoming request: readSettings
1:: [245] [2014/03/20 20:25:40.116] Incoming request: readAppDistributionSettings
1:: [245] [2014/03/20 20:25:40.170] Incoming request: readSimplifiedDeviceEnrollmentSettings
1:: [245] [2014/03/20 20:25:41.165] Incoming request: writeSettings
0:: [245] [2014/03/20 20:25:41.508] -[NSString(devicemgr_Additions) dateFromOpenSSLString]: 'Jan 27 19:45:36 2015 GMT'
0:: [245] [2014/03/20 20:25:41.672] -[Settings setSigningState:]: self.signing_org = cgrx
0:: [245] [2014/03/20 20:25:41.679] Loaded strings for locale 'de'.
0:: [245] [2014/03/20 20:25:42.105] EXCEPTION: Postgres <-[PGConnection executeSQL:withParams:] (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-864.18/Compiled/Fra mework-Models/Postgres/PGConnection.m:421): "Postgres error 23503 (ERROR: insert or update on table "internal_tasks" violates foreign key constraint "internal_tasks_internal_task_id_fkey"
    DETAIL: Key (internal_task_id)=(4) is not present in table "internal_tasks".
    CONTEXT: SQL statement "INSERT INTO internal_tasks (internal_task_id, profile_substitution_cache_id) VALUES(p_it_id, psc.id) RETURNING id"
    PL/pgSQL function _dm_internal_psc_generation_task(profile_substitution_caches,integer,integer) line 19 at SQL statement
    SQL statement "SELECT _dm_internal_psc_generation_task(p, NEW.signing_certificate_id)
    FROM profile_substitution_caches AS p
    WHERE p.profile_cache IS NOT NULL
    AND p.signing_certificate_id <> NEW.signing_certificate_id"
    PL/pgSQL function _dm_trigger_after_settings_update() line 30 at PERFORM
    )">
0:: [245] [2014/03/20 20:25:42.108] Caught unhandled exception -[PGConnection executeSQL:withParams:] (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-864.18/Compiled/Fra mework-Models/Postgres/PGConnection.m:421): "Postgres error 23503 (ERROR: insert or update on table "internal_tasks" violates foreign key constraint "internal_tasks_internal_task_id_fkey"
    DETAIL: Key (internal_task_id)=(4) is not present in table "internal_tasks".
    CONTEXT: SQL statement "INSERT INTO internal_tasks (internal_task_id, profile_substitution_cache_id) VALUES(p_it_id, psc.id) RETURNING id"
    PL/pgSQL function _dm_internal_psc_generation_task(profile_substitution_caches,integer,integer) line 19 at SQL statement
    SQL statement "SELECT _dm_internal_psc_generation_task(p, NEW.signing_certificate_id)
    FROM profile_substitution_caches AS p
    WHERE p.profile_cache IS NOT NULL
    AND p.signing_certificate_id <> NEW.signing_certificate_id"
    PL/pgSQL function _dm_trigger_after_settings_update() line 30 at PERFORM
1:: [245] [2014/03/20 20:25:53.541] Incoming request: readSettings
1:: [245] [2014/03/20 20:25:53.605] Incoming request: readAppDistributionSettings
1:: [245] [2014/03/20 20:25:53.664] Incoming request: readSimplifiedDeviceEnrollmentSettings

Great, now i have a new problem:
sudo /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/wipeDB .sh
Password:
***    Failed to create/update new Profile Manager database!     ***
*** Please check /Library/Logs/ProfileManager/migration_tool.log ***
*** for more information. Profile Manager will be non-functional ***
*** until a new database can be successfully created/updated.    ***
[1034] [2014/03/23 09:56:07.266] -[SULogFileCollection setGlobalLogLevelPrefix:]: YES
0:: [1034] [2014/03/23 09:56:07.268]
    migration_tool-864.18 (PID:1034, OS:13C64, SERVER:13S4138, ARCH:x86_64) starting
    LA: migration_tool --wipeDB
    Log verbosity level = 1
    UID = 220, EUID = 220
1:: [1034] [2014/03/23 09:56:13.050] DropPostgresDatabase RESULT:
    ————————+—————————————————————————————————————————————————————————————————————— —————————————————————————————————————————————————————————————
    COMMAND | /Applications/Server.app/Contents/ServerRoot/usr/bin/dropdb devicemgr_v2m0 -h /Library/Server/ProfileManager/Config/var/PostgreSQL
    WD      | /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr
    ————————+—————————————————————————————————————————————————————————————————————— —————————————————————————————————————————————————————————————
    STATUS | 1
    ————————+—————————————————————————————————————————————————————————————————————— —————————————————————————————————————————————————————————————
    STDERR | dropdb: database removal failed: ERROR: database "devicemgr_v2m0" is being accessed by other users
            | DETAIL: There are 10 other sessions using the database.
    ————————+—————————————————————————————————————————————————————————————————————— —————————————————————————————————————————————————————————————
    STDOUT |
    ————————+—————————————————————————————————————————————————————————————————————— —————————————————————————————————————————————————————————————
0:: [1034] [2014/03/23 09:56:13.050] EXCEPTION: !IF <void DropPostgresDatabase(NSString *__strong) (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-864.18/Compiled/Fra mework-Base/Support/PGUtilities.m:81): "'((status != 0))'">
0:: [1034] [2014/03/23 09:56:13.052] Terminating on unhandled exception void DropPostgresDatabase(NSString *__strong) (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-864.18/Compiled/Fra mework-Base/Support/PGUtilities.m:81): "'((status != 0))'", ? | 140735467216501
    ? | 4437587723
    ? | 4437841481
    ? | 4437841694
    ? | 4437434900
    ? | 140735464949245
    ? | 2
0:: [1034] [2014/03/23 09:56:13.053] ShutdownMigrator: 2014-03-23 08:56:13 +0000
0:: [1034] [2014/03/23 09:56:13.053] BYE

Yosemite Server 4 upgrade is stuck at updating Profile Manager service

My iMac was using Mac OS 10.9 and Server v3 and I just upgraded to Yosemite and then purchased Server v4. When I launched Server it said that it was going to update my services. It got as far as "updating Profile Manager service." Is anyone else having this issue? It has been stuck at doing the updating for about 9 hours now and no change. Any ideas?

My iMac was using Mac OS 10.9 and Server v3 and I just upgraded to Yosemite and then purchased Server v4. When I launched Server it said that it was going to update my services. It got as far as "updating Profile Manager service." Is anyone else having this issue? It has been stuck at doing the updating for about 9 hours now and no change. Any ideas?

OS X Server 4.0.3 Profile Manager Settings for Mobile Users problems

OS X Yosemite 10.10.2 with Server 4.0.3
We are using Profile Manager to control Settings for Mobile Users, and give homeSync to the users. Our problem is that the exclude / Skip items (Items matching any of the following will not sync" This setting is not working an example. I have put this folder to Skip Items ~/Downloads but the home Sync still Syncing items in the Downloads folder.
I have this problem on all the 3 users/machines on that server. Every client is using os x 10.10.1 og 10.10.2 I have check that the profile from the server is on the client.
Has any a solution to that?
Regards
Brian

I have no solution but have experienced failing sync settings (quite often) in both 10.6 Server and 10.9 + Server 3 (upgraded from 10.6 Server) in the same way as you described, it syncs too much. We have given up on synched home folders and will cut them and use other backup methods since we’re not so dependant on switching between different devices. Our users usually have one computer, one iPhone, one iPad and stay with those until it’s time to exchange them.

Server 3.1 and Profile Manager woes

I was hoping the 3.1 upgrade would resolve the Profile Manager not working with "real" Code Signing certificates, but it seems to have made things even worse. (I swear there's no Q/A on this product.)
I readded my Digicert code signing certificate after upgrading (they have been amazing and have even issued me a special certificate to match all of the extensions and critical flags that the self-signed one Apple generates has).
With 3.1, it lets me pick the Digicert certificate for Profile Manager, but silently doesn't actually honour the preference. The self-signed certificate continues to be used. The logs are full of errors that I believe are related:
scep_helper.log after picking the certificate:
0:: [738] [2014/03/18 10:39:44.942] EXCEPTION: Error <NSData *ExportIdentityToPKCS12Data(SecIdentityRef, NSString *__strong) (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-864.18/Compiled/Fra mework-Base/Support/CryptoUtilities.m:483): "'((SecItemExport((__bridge CFTypeRef)items, kSecFormatPKCS12, 0, &keyParams, &pkcs12Data)))' error -25308">
0:: [738] [2014/03/18 10:39:44.943] SCEPHELPERS_GetIdentity: Caught exception NSData *ExportIdentityToPKCS12Data(SecIdentityRef, NSString *__strong) (/SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-864.18/Compiled/Fra mework-Base/Support/CryptoUtilities.m:483): "'((SecItemExport((__bridge CFTypeRef)items, kSecFormatPKCS12, 0, &keyParams, &pkcs12Data)))' error -25308"
2014-03-18 10:34:41.330 AM sandboxd[442]: ([67306]) xscertd(67306) deny file-read-metadata /Library/Preferences/com.apple.security.plist
2014-03-18 10:34:41.352 AM sandboxd[442]: ([67306]) xscertd(67306) deny file-read-data /Library/Preferences/com.apple.security.plist
2014-03-18 10:36:04.224 AM servermgrd[148]: servermgr_certs[148] -[CertsRequestHandler(HelperAdditions) certificateForIdentity:]: SecIdentityCopyCertificate (err = -25304)
And every 4 seconds:
2014-03-18 10:30:36.155 AM devicemgrd[210]: SecOSStatusWith error:[-25291] The operation couldn’t be completed. (com.apple.security.xpc error 3 - <connection: 0x7fd3ed309e40> { name = com.apple.securityd.xpc, listener = false, pid = 0, euid = 4294967295, egid = 4294967295, asid = 4294967295 }: Connection invalid)
*sighs*

The private key already had the "Allow all applications to access this item". I went in there and hit Save anyway, and tried again. Still the same issue. Profile Manager lets me pick the certificate, but if leave the Profile Manager section and go back in, I find that it has been reverted.
And interestingly enough, if I set the values from the command line:
serveradmin settings devicemgr devicemgr:devicemgr:CodeSigningPrivateKey = /etc/certificates/Coverall\ Crew\ Corporation.5504F8C4DA768FC0253A9E8264EDAFC29AC75328.key.pem
serveradmin settings devicemgr devicemgr:CodeSigningCertificate = /etc/certificates/Coverall\ Crew\ Corporation.5504F8C4DA768FC0253A9E8264EDAFC29AC75328.cert.pem
serveradmin settings devicemgr devicemgr:CodeSigningAuthorityChain = /etc/certificates/Coverall\ Crew\ Corporation.5504F8C4DA768FC0253A9E8264EDAFC29AC75328.chain.pem
It's as if it completely ignores any updates.
I guess I may have to contact Apple for support.

OSX Server 10.8.5 (Server 2.2.1) Profile Manager

Hello all, wondering if somebody can help. I have a Mac Mini server (2011) running OSX Server 10.8.5 (Server 2.2.1). I have a fully signed Certificate for the Web/OD services etc.. and its using the self assigned certificate for Profile manager. Profile manager is running and I can add place holders for iPads, users/groups and apps etc... Problem is the iPads running iOS6 and 7 simply will not enrol. You goto the servers web page, then profile manager my devices and it downloads the trust certificate fine. You click enroll and you see the browser access OTA BOOTSTRAP or something (it goes off way to quick) and does nothing. If I try and use the Enrollment Profile I get "The Profile SECENROLL com.apple.ota blah blah blah .bootstrap could not be installed due to an unexpected error. Can anybody help?

Hello all, wondering if somebody can help. I have a Mac Mini server (2011) running OSX Server 10.8.5 (Server 2.2.1). I have a fully signed Certificate for the Web/OD services etc.. and its using the self assigned certificate for Profile manager. Profile manager is running and I can add place holders for iPads, users/groups and apps etc... Problem is the iPads running iOS6 and 7 simply will not enrol. You goto the servers web page, then profile manager my devices and it downloads the trust certificate fine. You click enroll and you see the browser access OTA BOOTSTRAP or something (it goes off way to quick) and does nothing. If I try and use the Enrollment Profile I get "The Profile SECENROLL com.apple.ota blah blah blah .bootstrap could not be installed due to an unexpected error. Can anybody help?

Server 3.1 Breaks Profile Manager (PM won't start)

Hi All,
Updated to server 3.1 this am and now Profile manager will not start. When I go to turn it on via the server app, its simple hangs on "starting" for a few minutes then reverts to "Off".
I tried reverting to my backup of 3.0.3, but of course the service updates that are done by 3.1 prevent this.
I'm also not seeing any devicemgr logs in the console.
Any suggestions?

When starting devicemgr from the terminal I get the following errors:
2014-03-18 09:30:40.264 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:42.294 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:44.334 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:46.366 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:50.800 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:52.834 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:55.487 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:57.514 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:30:59.563 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:31:01.588 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:31:03.600 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:31:05.613 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:31:07.625 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:31:09.642 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
2014-03-18 09:31:14.284 serveradmin[3097:4e1f] NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)
Thanks

OS X Server 3.1.1 Profile Manager fails again

Now profiles which contain variables such as %short_name% doesn't push at all.
That's all folks.
Thanks.

I have recognized that profiles with variable %short_name% is pushed with the shortname of the local admin of my server. I thought it is a variable to use clients username ... Something went wrong in this place at apple. I tried using this variable %short_name% for VPN Profile.

Lion Server Profile Manager Configuration

Hi Guys,
Currently have been testing Lion Server and Profile Manager Configuration.
So Far Have setup
Lion with Server App and Server Admin Tools
Configured Open Directory Master and enabled SSL on LDAP
Once Configured OD has created a CA Certificate can use for Profile Manager
Have Enabled in Server.app Web and Profile manager
In SSL Certificate Configuration have set CA Certificate for Web and Enabled Apple push notifications with my apple ID
In Profile Manager Enabled Device Management and Enabled Sign configuration profiles and selected CA Open Directory Certificate Created when setting up OD Master.
On Server Originally could install Trust Profile OK and Enroll Server OK with no issues, but on any other 10.7 Devices could install Trust Profile OK but would always say unsigned and Enroll would never work or just hang.
Now Since Played around with settings on 10.7 Server can no longer enroll but trust OK.
Questions have is
For SSL and Profile Manager to work properly as well as Certificates do you require to purchase a proper SSL Certificate or can we use the OD Master Certificate that gets created. All we are testing is on the Local LAN so don't want to get a SSL certificate from the internet.
Also why cannot 10.7 clients trust profile and enroll Devices Properly? How do I get this working properly?
Any ideas?
Regards,
Shane

taubmas wrote:
Not sure if its that as finally got Lion Server working on a VM setup so network shouldn't be an issue...
Had 1 OSX Lion Server VM and 1 OSX Lion Client VM and OSX Lion Server VM gets profile and enrolls device fine but again OSX client doesn't get enroll just sits again at installing..... even if set keychain to trust and make trust profile verified..
any other ideas? I think need to somehow get the server to trust trust profile by default instead of going to keychain all the time.
Shane
Did you get this to work in an ESXI envrionment? If so, which version are you running?

Profile Manager - Not Found The requested URL /wiki was not found on this server.

I have installed Lion Server with Web and Profile Manager services. When I log into the profile manager web page I receive the message "Not Found The requested URL /wiki was not found on this server." I followed the guide here for install http://krypted.com/iphone/setting-up-profile-manager-in-lion-server/.

This was the fixed I found
Fixing profile manager has been solved by someone else:
1. Turn off all services under Server app.
2. Under Hardware, settings, change SSL certificate to "none"
3. Under Hardware, network, reset host name again.
4. Under Hardware, settings, change SSL certificate back to correct one
5. Turn Web service ON.
It may still say /var/empty.
6. Turn Wiki service ON
7. Recheck Web service. It should be changed to /Library/Server/Web/Data/Sites/Default.

Backup Server Settingd - Including Profile Manager

We want to ensure that we have a backup of our server settings and also the network settings of the machine. We have experienced issues with TimeMachine in the past and want to ensure we are backing our server up including the Profile Manager database and active directory database.
Thanks,
James.

The files are created by PostGreSQL and contain WAL (write-ahead-logging) data. It's still not clear why these files should be growing at more than 33 MB a day.
Why is there no snapshot of the database taken, past WAL files deleted and new ones started every day/week/month? Can I do this myself? I'm now wasting 16GB of storage as an inefficient backup for PostgreSQL.

How to configure profile manager in Maverics when DNS is externally managed?

Are there any guides to configuring Profile Manager as a MDM?
Here is my story.
Recently installed Mac mini at a school where the DNS is externally managed by the Education departments IT group. Upgraded to Maverics and installed Server app. Configured profile manager to the point where we could generate a trust profile and enrolment profile. Doesn't work because there is no DNS entry for Mac mini server. Create entry but need to change host name and computer name and local machine name to match entry. Suddenly profile manager not working at all. Delete server app and it's configuration file in ~/Library/. Reinstall. Now Profile manager won't even activate. Speak to Apple on phone, run various commands to reinitialise Open Directory and reset profile manager. To no avail. Apple say to reinstall Mavericks, Server and try again.
Funny thing is I got profile manager to work as an MDM in a test environment, but changing DNS after doing so much configuration seems to have made a real mess of things. Vowing to make a time machine backup as soon as Mavericks re-installs.
Anyone know of any guides other than the one on krypted.com, which appears to be for the previous version of Profile Manager.
Stom

In general, either your OS X Server box has a DNS translation for its address, or it doesn't.
If you don't have valid DNS, you will have problems with various services, as DNS is fundamental to distributed authentication and encryption, among other uses.
OS X Server doesn't recover well from installations that start off with DNS errors, and the wipe and reinstallation suggested by Apple is usually easier than resolving the various issues that tend to arise within the configurations of the various services.
If your server doesn't have a valid DNS translation, then either add the DNS translation into your organization's local DNS environment, or work to retrain or replace the folks that are unwilling or unable to administer and to properly maintain local DNS services, or (far less desirably) configure and start your own parallel DNS services. There are other options, of course.
I'd escalate this discussion to management, and let them sort this out — at its core, this very likely isn't a technical issue.

Can't log in to Profile Manager or My Devices with Active Directory logins

I have an OSX Lion 10.7.4 Server set up with Profile Manager and it is joined to AD.
I am able to see AD groups in the Profile Manager groups section.
I can also see and add AD users and groups using the server app.
I have enabled the "Can Enable Remote Management" check box for Domain Users through Profile Manager. I have also added Domain Admins to the Workgroup group in the Server app. I'm not sure that I want or need either of these options, but they were suggestions to try.
I am not able to log on to the Profile Manager or My Devices pages with AD logins.
I found these directions about nested groups in Workgroup Manager http://krypted.com/iphone/integrating-mac-os-x-lion-servers-profile-manager-with -active-directory/ but I don't have a com.apple.access_devicemanagement local group or any groups like are shown in the picture.
Any ideas what I'm missing?
Cheers,
Ian

I found the two pieces I was missing:
1) Install the Lion Server Admin Tools
Launch the Server Admin App
Click on the server name in the left pane
Click on the Access button in the upper part of the window
Click on Profile Manager
Either manually add specific groups to the list or if you're feeling brave choose the "Allow all users and groups" radio button
2) Run the command line steps on this page to change the authentication to plain text to support AD authentication:
http://support.apple.com/kb/HT4837
Voila!

Errors deploying Enterprise iOS app through Profile Manager

We manage about 35 iPads through Profile Manager, including deploying a custom made app.
We first deployed this app in July and had no problems with it. Our third party developers have released an update for iOS 7 and we are running into problems pushing it out through Profile Manager.
When I try to upload the IPA file through the web interface I get the attached error. Looking at the logs I see the following errors:
Sep 16 14:42:50 mdm.servername.com ProfileManager[210] <Info>: Unable to find icon file for '/var/devicemgr/ServiceData/Data/tmp/temp_extracted_folder_for_data_file_30/Pay load/Hope.app/Icon-72.png'
Sep 16 14:42:50 mdm.servername.com ProfileManager[210] <Info>: Unable to find icon file for '/var/devicemgr/ServiceData/Data/tmp/temp_extracted_folder_for_data_file_30/Pay load/Hope.app/Icon.png'
This is the first time we've tried to update our custom app. In trying to narrow down whether it was a problem with Profile Manager or the app I uploaded an older version of Apple's Podcast app, and pushed it out to a test iPad, then uploaded the current version through Profile Manager and pushed it out to the iPads with no problems.
Our developers say that nothing has changed from the original version to the new version.
Any ideas?

We could solve this by opening the firewall for some ports (443, 1640, 2195, 2196, 5223, ) and ip addresses (17.0.0.0/8). Have a look at
OS X Server: Ports used by Profile Manager
Start Profile Manager

Upgrade Server 4 - stalled at profile manager

Similar Messages

Maybe you are looking for