Setting up munki on IIS

1,041 views
Skip to first unread message

pgab...@my.putnamschools.org

unread,
Mar 27, 2015, 2:29:26 PM3/27/15
to munk...@googlegroups.com
Hey all! I'm very sorry if this is the wrong discussion group, I've been researching all over the place the past few days and can't seem to find out what I'm looking for.
Is there any sort of guide for setting up munki using IIS? 

I set my server as the repo URL but it's not reading it correctly. I have the site all set up on IIS, I can get to the directory and see all the munki files and everything. Now what I think is the issue, is I do get a 404 when trying to access the files with no extensions (Such as the catalogs and manifests) the pkginfo I can add to MIME as .plist but the catalogs and manifests have no file extension. Should I add the .plist file extension to reach them?

I tested the files by hosting them locally on the client and it does work just not when I switch the URL to the server with the same files.

My knowledge of IIS is very limited, I've only been researching information for the past 2 days. Any help in trying to get this set up would be much appreciated!

Thanks ~Pierre

Marnin Goldberg

unread,
Mar 27, 2015, 2:37:04 PM3/27/15
to munk...@googlegroups.com
This is the right discussion group. Add these mime types:

<mimeMap fileExtension="." mimeType="text/xml" />
<mimeMap fileExtension=".dmg" mimeType="application/octet-stream" />
<mimeMap fileExtension=".pkg" mimeType="application/octet-stream" />
<mimeMap fileExtension=".mpkg" mimeType="application/octet-stream" />
<mimeMap fileExtension=".plist" mimeType="text/xml" />
<mimeMap fileExtension=".pkginfo" mimeType="text/xml" />
<mimeMap fileExtension=".mobileconfig" mimeType="text/xml" />


Marnin





--
You received this message because you are subscribed to the Google Groups "munki-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-dev+...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Gregory Neagle

unread,
Mar 27, 2015, 2:41:18 PM3/27/15
to munk...@googlegroups.com
On Mar 27, 2015, at 11:36 AM, Marnin Goldberg <list...@GMAIL.COM> wrote:

This is the right discussion group. Add these mime types:

<mimeMap fileExtension="." mimeType="text/xml" />
<mimeMap fileExtension=".dmg" mimeType="application/octet-stream" />
<mimeMap fileExtension=".pkg" mimeType="application/octet-stream" />
<mimeMap fileExtension=".mpkg" mimeType="application/octet-stream" />
<mimeMap fileExtension=".plist" mimeType="text/xml" />
<mimeMap fileExtension=".pkginfo" mimeType="text/xml" />

I'd note that in normal operation, a Munki client never requests files from the pkgsinfo directory, so those don't really need to be mapped. (but obviously you can if you want). Any idea why IIS needs all this explicit mapping?

Marnin Goldberg

unread,
Mar 27, 2015, 2:49:02 PM3/27/15
to munk...@googlegroups.com


From: Gregory Neagle <gregn...@mac.com>
Reply-To: <munk...@googlegroups.com>
Date: Friday, March 27, 2015 at 2:41 PM
To: <munk...@googlegroups.com>
Subject: Re: [munki-dev] Setting up munki on IIS


On Mar 27, 2015, at 11:36 AM, Marnin Goldberg <list...@GMAIL.COM> wrote:

This is the right discussion group. Add these mime types:

<mimeMap fileExtension="." mimeType="text/xml" />
<mimeMap fileExtension=".dmg" mimeType="application/octet-stream" />
<mimeMap fileExtension=".pkg" mimeType="application/octet-stream" />
<mimeMap fileExtension=".mpkg" mimeType="application/octet-stream" />
<mimeMap fileExtension=".plist" mimeType="text/xml" />
<mimeMap fileExtension=".pkginfo" mimeType="text/xml" />

I'd note that in normal operation, a Munki client never requests files from the pkgsinfo directory, so those don't really need to be mapped. (but obviously you can if you want). Any idea why IIS needs all this explicit mapping?



I found that if IIS doesn’t know about a file extension it won’t serve that file as documented here: http://support.microsoft.com/en-us/kb/326965 (also applies to version IIS 7).

Marnin

Bart Reardon

unread,
Mar 29, 2015, 7:40:52 PM3/29/15
to munk...@googlegroups.com
By default this is true. IIS will give you a 404 or 403 (can't remember exactly) if it doesn't know about the mime type. If you're lazy you can just add a .* type to the repo root and host all file types presuming your repo is secure.

A.E. van Bochoven

unread,
Mar 30, 2015, 1:33:28 AM3/30/15
to munk...@googlegroups.com
You have to explicitly allow all extensions *and* files without an extension as Marnin said. Below (part of) the web.config file that munkireport uses to make sure all relevant files can be downloaded:

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<system.webServer>
<directoryBrowse enabled="false" />
<staticContent>
<mimeMap fileExtension="." mimeType="application/octet-stream" /> <!-- Allows files without extension -->
<mimeMap fileExtension="*" mimeType="application/octet-stream" /> <!-- Allows all extensions -->
</staticContent>
    </system.webServer>
</configuration>

-Arjen


Reply all
Reply to author
Forward
0 new messages