Profile manager push settings seems to hang...?

[mdench]

Just been setting up the macs to take settings from the mac mini server but the push settings seem to hang randomly? Server is running mountain lion and in the process of updating the macs to mountain lion but the one that has succeeded in that image is on Lion.

Any one have any ideas why it might be hanging?

mac mini.PNG

[Carter]

You need to have the needed ports open on your firewall for this server. See this list Well known TCP and UDP ports used by Apple software products

These are the ports I need to make sure are open with our Network/Security team for each Profile Server I've setup:

2195 TCP Apple Push Notification Service (APNS)
2196 TCP Apple Push Notification Service (APNS)
80 TCP Hypertext Transfer Protocol (HTTP)
443 TCP Secure Sockets Layer (SSL, or "HTTPS")
1640 TCP Certificate Enrollment Server

[Rozzer]

I would of suggested the same but find it very odd that its working for one machine. Not really sure what to suggest apart from make sure those ports are open with your lea.

Ross

[mdench]

we are no longer part of our LEA for internet etc so ill check our firewall when i get in monday would this still apply as all the macs are on the same internal network?

[mezmerrick]

Yes, as part of the push and enrolment process I believe it contacts an apple server. At least, I had problems initially with my LEA and contacting albert.apple.com

[Carter]

Use this handy site to confirm if the needed ports are open or not on the server. Firebind Inc.

.

[mdench]

Do the ports need to be open for all the macs or just to the server?

[Carter]

It's mainly for the server to comunicate with Apple to allow the server to work. The clients will already be on your network.

.

[mdench]

We have added the server as a source exception so it can get out on any ports that it wants to but it is still hanging...

[Carter]

Just for the hell of it, have you tested the ports with Firebind Inc. ?

.

[mezmerrick]

Now that Firebind are charging for use, does anyone have an alternative site to recommend?