Mac GODS please help

[kevin_lane]

Hello Mac Gods

we are having a problem with our Mac server we are using OS X El Capitan running we have logged a support case with apple who are helpfully going to be giving us an answer to our problems bear mind this has been going on for over 2 weeks, and our problem is somewhat closer to being sorted but i have came to edugeek to see if anyone can shed any light or have had a simaler problem,

 

our server has a static IP address and also has a public IP address with the following ports open 2195, 2196, 5223, 443 our test mac server is enrolled with the server and we can do basic updates and what i mean by this is that we can update the name of the mac remotely and also apply restrictions on the mac as well. it is also binded to our active directory so we can logon to the mac using an AD account which is fine.

 

but we are having problems pushing apps to the devices under the profile manager we have the vpp token applied to the server, but when i come to push the app under the active tasks nothing happens zlich its only when i push a settings update i.e change the dock size it seems to do something, my knowledge and experience with mac are somewhat being tested an is a massive learning curve atm even just looking at the logs is a mission i just feel like im looking at code i cant decipher what is actually going on

 

so please help from an unhappy NM

[Homer]

Hi mate

 

Check your APNS certificates, they may have expired. This sounds like the kind of crap that happens when they expire.

 

Also, check that the client you're trying to push apps to can reach the APNS servers through your firewall

[kevin_lane]

@Homer my certificates are 2018

 

i have opened these ports on our firewall that wants to try and access apples APNS Server

 

the below is from apple website

 

The APNs servers use load balancing, so your devices won't always connect to the same public IP address for notifications. It's best to allow access to these ports on the entire 17.0.0.0/8 address block, which is assigned to Apple.

 

TCP port 5223: For communicating with Apple Push Notification services (APNs)

TCP port 2195: For sending notifications to APNs

TCP port 2196: For the APNs feedback service

TCP port 443: For a fallback on Wi-Fi only, when devices can't reach APNs on port 5223

[kevin_lane]

this is from device server log

[kevin_lane]

i've just changed the dock size and thats worked

[Brimstone]

A Mac Server using a .local domain will always give you problems....and will be even more unrealiable when used with AD Edited March 11, 2016 by Brimstone