Profile manager not applying settings to Sierra

[kidpressingbuttons]

Just started testing some sierra clients and they are not getting the settings applied by profile manager. All the profiles are installed and it works perfectly on all our El Capitan machines .

 

Server is running on El Capitan.

[free780]

What does /var/log/devicemgrd/php.log say on the server?

[kidpressingbuttons]

LabSession_for_incoming_request: LabSession for UserID A9EE8710-50B6-409C-90E0-79907D9D0A26, UDID 18a354a494ea5efdbd6e531de25470aa: NETWORK LS: 1:: [9985] [2017/09/26 07:57:21.728] Found target NETWORK LS: 0:: [9985] [2017/09/26 07:57:21.728] Failed auth for target NETWORK LS: , incoming_request={ 'DigestResponse'=>'Digest username="kieran",realm="DOMAIN",nonce="LyfKM8TtFaaOQLyV7h2pyr91/aire2up+jsZJDSXdvcJsoPH",nc="00000001",cnonce="3o+v8LTfzx/6q7DQNX+vTPv8Guz0KznChcDX6RkKK19wqJsD",qop="auth",uri="/",response="799263ec8ff2d272a0f93347b3d43782"', 'MessageType'=>'UserAuthenticate', 'UDID'=>'18a354a494ea5efdbd6e531de25470aa', 'UserID'=>'A9EE8710-50B6-409C-90E0-79907D9D0A26'

[free780]

Is it user profiles you are having issues with. I've only done it on Sierra. But users still get 403 errors when they are unable group with a targeted profile.

[kidpressingbuttons]

Ended up recreating the group and all was fine again.... must be some rogue setting somewhere

[free780]

Just in case anyone runs into this in the future PHP.log will tell you which settings section has the wrong section.