Issue with running the software updater

[MP]

All,

I just finished installing and configuring Munki on our Lion Server
10.7.4. Everything seemed to go fine, but when i run the software
updater from the command line, i get the following error message:

ERROR: Could not retrieve manifest client_manifest from the server
ERROR 51: SSL: certificate subject name 'macserver' does not match
target host name 'localhost'
ERROR: Could not retrieve managed install primary manifest.
No changes to manged software are available

When i open a web browser and go to https://localhost/munki_repo the
folders do appear.

Not sure what i'm doing wrong.

Any help would be appreciated.

[Greg Neagle]

What happens when you go to https://macserver/munki_repo  ?

You may see different behavior in your browser because you've previously told it to trust the certificate.

-Greg

[MP]

I see all the folders when i go to https://macserver/munki_repo

I don't see anything when i go to http://macserver/munki_repo

Not sure where i told it to trust the certificate?

On May 18, 2:04 pm, Greg Neagle <gregnea...@mac.com> wrote:
> On May 18, 2012, at 10:59 AM, MP wrote:
>
>
>
>
>
>
>
>
>
> > All,
>
> > I just finished installing and configuring Munki on our Lion Server
> > 10.7.4.  Everything seemed to go fine, but when i run the software
> > updater from the command line, i get the following error message:
>
> > ERROR:  Could not retrieve manifest client_manifest from the server
> > ERROR 51:  SSL:  certificate subject name 'macserver' does not match
> > target host name 'localhost'
> > ERROR:  Could not retrieve managed install primary manifest.
> > No changes to manged software are available
>
> > When i open a web browser and go tohttps://localhost/munki_repothe
> > folders do appear.
>
> > Not sure what i'm doing wrong.
>

> What happens when you go tohttps://macserver/munki_repo ?

[Greg Neagle]

Is your Lion server _only_ serving web pages via https and not http?

Again, the key bit is this:

>>> ERROR 51: SSL: certificate subject name 'macserver' does not match
>>> target host name 'localhost'

And you haven't told us what happens if you point your Munki client(s) to https://macserver/munki_repo

-Greg

[MP]

Sorry, when i go to https://macserver/munki_repo, the munki folder
structure appears.

I'm not sure if the server is only serving webpages via https. When i
go to the server.app and select macserver under hardware, it says
there's no SSL certificate configured.

Not sure if that helps.

On May 18, 2:19 pm, Greg Neagle <gregnea...@mac.com> wrote:
> Is your Lion server _only_ serving web pages via https and not http?
>
> Again, the key bit is this:
>
> >>> ERROR 51:  SSL:  certificate subject name 'macserver' does not match
> >>> target host name 'localhost'
>

> And you haven't told us what happens if you point your Munki client(s) tohttps://macserver/munki_repo

>
> -Greg
>
> On May 18, 2012, at 11:15 AM, MP wrote:
>
>
>
>
>
>
>

> > I see all the folders when i go tohttps://macserver/munki_repo
>
> > I don't see anything when i go tohttp://macserver/munki_repo

[Greg Neagle]

On May 18, 2012, at 11:36 AM, MP wrote:

> Sorry, when i go to https://macserver/munki_repo, the munki folder
> structure appears.

In a web browser, this sounds like.
What happens if you configure the munki client to contact https://macserver/munki_repo instead of https://localhost/munki_repo, which is what you tried earlier?

>
> I'm not sure if the server is only serving webpages via https. When i
> go to the server.app and select macserver under hardware, it says
> there's no SSL certificate configured.
>
> Not sure if that helps.

It really sounds like your web server is not configured correctly. I can't be of further help on getting it configured. Perhaps someone else on this list can help you.

I made the assumption that since you were using https:// URLs, that you purposely wanted to use SSL connections. It sounds like perhaps you may not?

-Greg

[MP]

Now it gives me the following error:

ERROR: Error 22: The requested URL returned error: 404

But I can still get to https://macserver/munki_repo when i type it in
a web browser.

On May 18, 2:36 pm, MP <marvin.po...@gmail.com> wrote:
> Sorry, when i go tohttps://macserver/munki_repo, the munki folder

[Greg Neagle]

What are the contents of the munki_repo/manifests folder?

Have you set the ClientIdentifier on a Munki client to match the name of a manifest in the manifests folder?
Or are you using manifests named after hostnames or are you using a site_default manifest?

What is the output of `defaults read /Library/Preferences/ManagedInstalls ClientIdentifier` on your test Munki client?

-Greg

[MP]

Just an FYI, during this process i was following the
Demonstrationsetup section of the Munki website.

The contents of the manifests folder is test_munki_client

Yes, the Clientidentifier on the Munki client matches the name of the
manifest in the manifests folder.

The output of defaults read /Library/Preferences/ManagedInstalls
ClientIdentifier is test_munki_client

Thanks for your help

On May 18, 2:48 pm, Greg Neagle <gregnea...@mac.com> wrote:
> What are the contents of the munki_repo/manifests folder?
>
> Have you set the ClientIdentifier on a Munki client to match the name of a manifest in the manifests folder?
> Or are you using manifests named after hostnames or are you using a site_default manifest?
>
> What is the output of `defaults read /Library/Preferences/ManagedInstalls ClientIdentifier` on your test Munki client?
>
> -Greg
>
> On May 18, 2012, at 11:45 AM, MP wrote:
>
>
>
>
>
>
>
> > Now it gives me the following error:
>
> > ERROR:  Error 22:  The requested URL returned error:  404
>

> > But I can still get tohttps://macserver/munki_repowhen i type it in