PaperCut Blocked by Profile Manager

[aarono]

Hi,

 

I have been able to successfully setup Papercut PCClient on macs (OS Yosemite) to log and update users printing with no Profile Manager restrictions enabled.

 

However, when I apply Profile Managers apps restrictions I receive the following message even though PCClient is added in the allowed list...

 

You don't have permission to use the application "PCClient."

 

Has anyone come across this issue?

 

Does anyone know if Profile Manager does its check/block based on digital signatures?

 

Thanks

[techyluke]

Try Checking the permissions on PCClient.app, Right Click on it and click "Get Info" and make sure everyone has at least Read-Only Permissions on it and then click the Cog and click "Apply to enclosed items...". This can happen sometimes by copying any Mac App from a network location, like what you may do for PaperCut. Hope this helps!

[alfatec]

If you put in 'Restrict which apps are allow to launch' and then put the app in the 'Allow Apps' you also need to put the path in the 'Allow Folders' to the application that you want to run.

[aarono]

Thanks for the reply's so far.

 

Techyluke, nice idea sadly still no luck.

 

Alfatec, I have already set it up as you have explained with all sorts of different folder locations pulled from Activity monitor for PCClient on a mac without any restrictions. But no luck.

The image shows just the path in Applications.

 

[aarono]

Below are some logs I received yesterday after searching for pcclient in Console, any ideas?...

 

17/09/2015 09:52:07.994 parentalcontrolsd[11993] -[ActivityTracker(ALR) checkApp:csFlags:] [674:ladmin] -- *** Incoming app appears to be masquerading as white listed app and failed signature validation: /Applications/PCClient.app/Contents/MacOS/JavaAppLauncher. Note: This may be a valid app of a different version than what was whitelisted (on a different volume?)

 

 

17/09/2015 09:52:07.000 kernel[0] mcxalr{113} ** Denying execute for uid=501 path=/Applications/PCClient.app/Contents/MacOS/JavaAppLauncher

 

 

17/09/2015 09:52:18.007 parentalcontrolsd[11993] -[ActivityTracker(ALR) checkApp:csFlags:] [617:ladmin] -- *** Failed code signature validation (4294967295): /Applications/PCClient.app/Contents/MacOS/JavaAppLauncher

 

 

17/09/2015 09:52:18.007 parentalcontrolsd[11993] -[ActivityTracker(ALR) checkApp:csFlags:] [674:ladmin] -- *** Incoming app appears to be masquerading as white listed app and failed signature validation: /Applications/PCClient.app/Contents/MacOS/JavaAppLauncher. Note: This may be a valid app of a different version than what was whitelisted (on a different volume?)

 

 

17/09/2015 09:52:18.000 kernel[0] mcxalr{114} ** Denying execute for uid=501 path=/Applications/PCClient.app/Contents/MacOS/JavaAppLauncher

 

 

17/09/2015 09:52:28.016 parentalcontrolsd[11993] -[ActivityTracker(ALR) checkApp:csFlags:] [617:ladmin] -- *** Failed code signature validation (4294967295): /Applications/PCClient.app/Contents/MacOS/JavaAppLauncher

 

 

17/09/2015 09:52:28.016 parentalcontrolsd[11993] -[ActivityTracker(ALR) checkApp:csFlags:] [674:ladmin] -- *** Incoming app appears to be masquerading as white listed app and failed signature validation: /Applications/PCClient.app/Contents/MacOS/JavaAppLauncher. Note: This may be a valid app of a different version than what was whitelisted (on a different volume?)

 

 

17/09/2015 09:52:28.000 kernel[0] mcxalr{115} ** Denying execute for uid=501 path=/Applications/PCClient.app/Contents/MacOS/JavaAppLauncher

 

 

17/09/2015 09:52:38.026 parentalcontrolsd[11993] -[ActivityTracker(ALR) checkApp:csFlags:] [617:ladmin] -- *** Failed code signature validation (4294967295): /Applications/PCClient.app/Contents/MacOS/JavaAppLauncher

 

 

17/09/2015 09:52:38.026 parentalcontrolsd[11993] -[ActivityTracker(ALR) checkApp:csFlags:] [674:ladmin] -- *** Incoming app appears to be masquerading as white listed app and failed signature validation: /Applications/PCClient.app/Contents/MacOS/JavaAppLauncher. Note: This may be a valid app of a different version than what was whitelisted (on a different volume?)

 

 

17/09/2015 09:52:38.000 kernel[0] mcxalr{116} ** Denying execute for uid=501 path=/Applications/PCClient.app/Contents/MacOS/JavaAppLauncher

[nickalmond]

Hello.

 

We have just started the setup of a class set of iMacs and have run into the same issue - just wondering if you managed to resolve this problem? I have just emailed PaperCut support to see if they have any suggestions.

 

Our setup;

OSX El Capitan on server & client

PaperCut Client 15.2

Profile Manager running with 'Restrict which apps are allowed to launch' option enabled but PCClient white-listed

 

Works perfectly under the administrator or accounts not restricted by the above setting but fails to open with message 'You don't have permission to use the application "PCClient"' for those with the setting enabled

 

As per other suggestions, I have also checked the permissions and also added it to the 'Allow Folders' menu.

 

 

Thank you,

Nick

[Ben-at-work]

I had the same problem with a couple of applications, including PaperCut.

 

Listing the application in 'Allow Folders' (/Applications/PCClient.app/) would only work if the application was not also in the 'Allow Apps' list.

[aarono]

Ben-at-work you genius!

 

That worked, thank you.

 

Nickalmond - give it a go

[Ben-at-work]

Happy to help.

 

Had a bit of a Mac heavy summer...

[nickalmond]

Absolutely amazing! Thank you Ben - really appreciate your help with this.

 

We had the PCClient.app added to the application whitelist as well as /Applications/PCClient.app/ in the folder whitelist - as per your suggestion, we removed the PCClient.app from the application whitelist and all works great. Will definitely remember this one.

 

Thank you again!

Nick