Profile Manager push settings failed

[LinkZ]

I am having issues trying to push settings to some of our macs. We have 15 client macs in total running OS X 10.10.5 and a Mac server running OS X 10.11.1, 13 of the client macs work just fine however 2 of them will fail whenever profile manager tries to push settings to them even after removing the devices from profile manager and re-enrolling them.

 

The only error I can find in the log files on the server is in the php.log file:

 

1:: [68478] [2015/11/06 08:57:43.245] <> Time since script start: 102675us [https:///devicemanagement/api/device/mdm_checkin]
1:: [68478] [2015/11/06 08:57:43.245] <> >>> Processing PUT mdm_checkin
0:: [68478] [2015/11/06 08:57:43.248] <> checkin: "UserAuthenticate"
0:: [68478] [2015/11/06 08:57:43.317] <> LabSession_for_incoming_request: LabSession for UserID 567574ED-776D-4DDA-B2FB-65F3D06AE896, UDID ef75817a037f517f9209731bca5657b3: NETWORK LS: 
1:: [68478] [2015/11/06 08:57:43.317] <> Found target NETWORK LS: 
0:: [68478] [2015/11/06 08:57:43.317] <> Failed auth for target NETWORK LS: , incoming_request={
     'MessageType'=>'UserAuthenticate',
     'UDID'=>'ef75817a037f517f9209731bca5657b3',
     'UserID'=>'567574ED-776D-4DDA-B2FB-65F3D06AE896'
   }
1:: [68478] [2015/11/06 08:57:43.391] <> <<< Sent Final Output (555 bytes) - PUT mdm_checkin
0:: [68478] [2015/11/06 08:57:43.392] <> Completed in 249ms | 200 OK [https:///devicemanagement/api/device/mdm_checkin]
1:: [68477] [2015/11/06 08:57:43.434] <> Time since script start: 39701us [https:///devicemanagement/api/device/mdm_checkin]
1:: [68477] [2015/11/06 08:57:43.435] <> >>> Processing PUT mdm_checkin
0:: [68477] [2015/11/06 08:57:43.438] <> checkin: "UserAuthenticate"
0:: [68477] [2015/11/06 08:57:43.452] <> LabSession_for_incoming_request: LabSession for UserID 567574ED-776D-4DDA-B2FB-65F3D06AE896, UDID ef75817a037f517f9209731bca5657b3: NETWORK LS: 
1:: [68477] [2015/11/06 08:57:43.452] <> Found target NETWORK LS: 
0:: [68477] [2015/11/06 08:57:43.453] <> Failed auth for target NETWORK LS: , incoming_request={
     'DigestResponse'=>'Digest username="",realm="",nonce="qu17qK4Lfm/Q52zXWIaoHG+LNAaYQzrNS9EiEAyAK6Ub07py",nc="00000001",cnonce="hv+5H9P3/KTjKTKlQUW5IidtJXmHf35bSc38oDwl39avav3R",qop="auth",uri="/",response="37803f338fee398a9508b0eede75148d"',
     'MessageType'=>'UserAuthenticate',
     'UDID'=>'ef75817a037f517f9209731bca5657b3',
     'UserID'=>'567574ED-776D-4DDA-B2FB-65F3D06AE896'
   }
1:: [68477] [2015/11/06 08:57:44.254] <> <<< Sent Final Output (277 bytes) - PUT mdm_checkin
0:: [68477] [2015/11/06 08:57:44.254] <> Completed in 858ms | 200 OK [https:///devicemanagement/api/device/mdm_checkin]
1:: [36130] [2015/11/06 08:57:52.041] <> Time since script start: 27362us [https:///devicemanagement/api/device/mdm_connect]
1:: [36130] [2015/11/06 08:57:52.041] <> >>> Processing PUT mdm_connect
0:: [36130] [2015/11/06 08:57:52.051] <> LabSession_for_incoming_request: LabSession for UserID 567574ED-776D-4DDA-B2FB-65F3D06AE896, UDID ef75817a037f517f9209731bca5657b3: NETWORK LS: 
1:: [36130] [2015/11/06 08:57:52.051] <> Found target NETWORK LS: 
0:: [36130] [2015/11/06 08:57:52.051] <> Status="Idle"
0:: [36130] [2015/11/06 08:57:52.076] <> EXCEPTION: 500 Internal Server Error - ExecuteSQLFunction: attempt to call function 'dm_auto_update_all_profiles_for_mdm_target' without a schema defined. at
   #0 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/db.php(227): DieInternalError('ExecuteSQLFunct...')
   #1 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/mdm_connect.php(88): ExecuteSQLFunction('dm_auto_update_...', Array)
   #2 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/db.php(396): _connect_transaction_1(Array)
   #3 /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/php/mdm_connect.php(128): PerformInTransaction('_connect_transa...', Array)
   #4 {main}
1:: [36130] [2015/11/06 08:57:52.077] <> <<< Sent Final Output (26 bytes) - PUT mdm_connect
0:: [36130] [2015/11/06 08:57:52.078] <> Completed in 63ms | 500 Internal Server Error  [https:///devicemanagement/api/device/mdm_connect]
1:: [70030] [2015/11/06 08:57:52.309] <> Time since script start: 6211us [https:///devicemanagement/api/device/mdm_checkin]
1:: [70030] [2015/11/06 08:57:52.310] <> >>> Processing PUT mdm_checkin
0:: [70030] [2015/11/06 08:57:52.312] [FILTERED]
0:: [70030] [2015/11/06 08:57:52.320] <> LabSession_for_incoming_request: LabSession for UserID 567574ED-776D-4DDA-B2FB-65F3D06AE896, UDID ef75817a037f517f9209731bca5657b3: NETWORK LS: 
1:: [70030] [2015/11/06 08:57:52.321] <> Found target NETWORK LS: 
1:: [70030] [2015/11/06 08:57:52.388] <> <<< Sent Final Output (0 bytes) - PUT mdm_checkin
0:: [70030] [2015/11/06 08:57:52.388] <> Completed in 84ms | 200 OK [https:///devicemanagement/api/device/mdm_checkin]
1:: [68478] [2015/11/06 08:57:52.638] <> Time since script start: 6456us [https:///devicemanagement/api/device/mdm_connect]
1:: [68478] [2015/11/06 08:57:52.639] <> >>> Processing PUT mdm_connect
0:: [68478] [2015/11/06 08:57:52.647] <> LabSession_for_incoming_request: LabSession for UserID 567574ED-776D-4DDA-B2FB-65F3D06AE896, UDID ef75817a037f517f9209731bca5657b3: NETWORK LS: 
1:: [68478] [2015/11/06 08:57:52.648] <> Found target NETWORK LS: 
0:: [68478] [2015/11/06 08:57:52.648] <> Status="Idle"
0:: [68478] [2015/11/06 08:57:52.717] <> Sending request "InstallProfile" as CommandUUID=858C8E8E-D58B-4CDF-93D0-1981C131BA45
1:: [68478] [2015/11/06 08:57:52.722] <> <<< Sent Final Output (25572 bytes) - PUT mdm_connect
0:: [68478] [2015/11/06 08:57:52.722] <> Completed in 90ms | 200 OK [https:///devicemanagement/api/device/mdm_connect]
1:: [68477] [2015/11/06 08:57:55.732] <> Time since script start: 9443us [https:///devicemanagement/api/device/mdm_connect]
1:: [68477] [2015/11/06 08:57:55.732] <> >>> Processing PUT mdm_connect
0:: [68477] [2015/11/06 08:57:55.742] <> LabSession_for_incoming_request: LabSession for UserID 567574ED-776D-4DDA-B2FB-65F3D06AE896, UDID ef75817a037f517f9209731bca5657b3: NETWORK LS: 
1:: [68477] [2015/11/06 08:57:55.742] <> Found target NETWORK LS: 
0:: [68477] [2015/11/06 08:57:55.742] <> Status="Error" CommandUUID=858C8E8E-D58B-4CDF-93D0-1981C131BA45
0:: [68477] [2015/11/06 08:57:55.742] <> ErrorChain: [ {
       'ErrorCode'=>-319,
       'ErrorDomain'=>'ConfigProfilePluginDomain',
       'LocalizedDescription'=>'The 'Loginwindow Preferences' payload could not be installed. One or more login items could not be installed.'
     } ]

[Jambon360]

As you are most likely aware the way profile manager applies these push settings is not to directly send these to the devices but to apple central servers. This intern will push these back down towards your clients.

The first thing to check will be to ensure these apple macs have a reliable internet connection.

 

The other possibility I have come across is each mac will need to have the initial trust profile installed and enrolled under a particular user (Say a dedicated service account for the Apple Device such as "appleadmin").

 

Regards,

A

[LinkZ]

I've checked our internet filter logs and it shows all internet requests were allowed (I wasn't aware that they received settings from apple rather than the server, but it shows the URL http://init-p01st.push.apple.com/ being used which was allowed) so I don't think this is the issue.

 

When I register the device via the mydevices site it installs the remote management profile for the initial settings then it successfully installs the device settings configured in profile manager. It seems to just be the settings which have been applied to users that it struggles to deploy.

[Ben-at-work]

I had this on a couple of macs and our problem was the same payload that is showing in your log.

 

For us we had set a print management app to run at login for students in Profile Manager. For a couple of reasons this app failed to install on a couple of machines and because the app wasn't installed on that mac the entire profile failed to apply on those machines.

 

Removing that one app from login items and re-sending the profile worked fine, we then installed the missing app on those machines, added the app back to the login items, resent the profile it then worked.

 

You might be having a totally different issues, but this is what happened with us.

[LinkZ]

That was exactly it Ben, thanks!

 

I have an applescript setup to mount the AD users home drive on login, the script was in the right place however there must have been some issues with it as I copied it back over from the mac server and logins work fine now.

 

I don't suppose there is a log file anywhere that would have given me a hint towards this? All I really have is the ambiguous error message from the mac server, i'm assuming there must be a log file on the client that i'm not aware of that would have pointed me in the right direction.

[Ben-at-work]

I found the same log as you posted when when we had the same issue, at the bottom it says which payload in the profile was having trouble applying.

 

'The 'Loginwindow Preferences' payload could not be installed.

 

The really, really annoying thing (which threw me originally) was that the problem is with Login Items not the Login Window, but it put me in the direction of where to look.

[LinkZ]

It was staring me in the face the whole time I was too focused on the Failed auth for target NETWORK LS: message.

[Ben-at-work]

To be fair it would help if Apple gave us more information in Profile Manager's completed tasks, rather than just 'failed'.

 

Knowing something failed is important, but so is why it failed!

[crof]

I would try push diagnostics just to check that all the APN Servers are being contacted - this is vital to Profile Manager working properly.

 

https://itunes.apple.com/gb/app/push-diagnostics/id689859502?mt=12

 

Crof