Munki server issue.

[iva...@gmail.com]

Hello,

I know few people had this error but I been reading other threads trying to solve the issue with no luck.
The munki server was working fine, it recently stopped working.. the client stopped pulling packages from the server.
when I run this command on the client side:

sudo /usr/local/munki/managedsoftwareupdate -vvv
I get the following error:

Starting...
Performing preflight tasks...
No CA cert info provided, so nothing to add to System keychain.
No client cert info provided, so no client keychain will be created.
Checking for available updates...
Manifest base URL is: http://xserver.company.com/repo/manifests/
Getting manifest lab_client...
Options: {'logging_function': <function display_debug2 at 0x1036afa28>, 'ignore_system_proxy': False, 'additional_headers': {'User-Agent': u'managedsoftwareupdate/3.6.4.3786 Darwin/18.7.0'}, 'file': u'/Library/Managed Installs/manifests/lab_client.download', 'cache_data': {
etag = "\"ecd-5a9daf988a580\"";
"last-modified" = "Tue, 07 Jul 2020 14:40:38 GMT";
}, 'url': u'http://xserver.company.com/repo/manifests/lab_client', 'follow_redirects': u'none', 'download_only_if_changed': True, 'can_resume': False}
Status: 304
Headers: {u'Keep-Alive': u'timeout=5, max=100', u'Server': u'Apache/2.4.34 (Unix) LibreSSL/2.5.5', u'Connection': u'Keep-Alive', u'Etag': u'"ecd-5a9daf988a580"', u'Cache-Control': u'no-cache', u'Date': u'Thu, 03 Dec 2020 14:29:57 GMT'}
Item is unchanged on the server.
/Library/Managed Installs/manifests/lab_client already exists and is up-to-date.
Using manifest: lab_client
Preventing idle sleep
**Checking for installs**
** Processing manifest lab_client for managed_installs
Catalog base URL is: http://xserver.company.com/repo/catalogs/
Getting catalog IT Managed...
Options: {'logging_function': <function display_debug2 at 0x1036afa28>, 'ignore_system_proxy': False, 'additional_headers': {'User-Agent': u'managedsoftwareupdate/3.6.4.3786 Darwin/18.7.0'}, 'file': u'/Library/Managed Installs/catalogs/IT Managed.download', 'cache_data': {

when I visit this link in the browser: 

http://xserver.company.com/repo/manifests/lab_client

I get a plain text of all the packages which doesn't seems right to me.. like this basically:

catalogs IT Managed managed_installs AdobeFlashPlayer AdobeReaderDC AMPAgent  Cyberduck Disable Photos AutoLaunch with camera devices.mobileconfig DisableMAURequiredDataNotice.mobileconfig dockutil Firefox GarageBand Google Chrome - Suppress First Run.mobileconfig GoogleChrome Handbrake kace-91-mac-agent Lock Screen.mobileconfig Microsoft - SuppressMicrosoftExcelFirstRunDialogWindows.mobileconfig Microsoft - SuppressMicrosoftOneNoteFirstRunDialogWindows.mobileconfig Microsoft - SuppressMicrosoftOutlookFirstRunDialogWindows.mobileconfig Microsoft - SuppressMicrosoftPowerpointFirstRunDialogWindows.mobileconfig Microsoft - SuppressMicrosoftWordFirstRunDialogWindows.mobileconfig Microsoft_Office_2016_Volume_Installer MSAutoUpdate munkitools-3.6.2.3776 SetLoginwindowToUsernamePasswordBlanks.mobileconfigSilverlight System - Disable iCloud Preference Pane.mobileconfig System - Disable Mac App Store.mobileconfig System - Disable Reopen Windows at Logout Prompt.mobileconfig System - Disable WiFi.mobileconfig System - DisableAutomatedCheckforAppleSoftwareUpdates.mobileconfig System - DisableAutomaticDownloadandInstallofOffice2016Updates.mobileconfig System - DisableAutomaticDownloadofAppleSoftwareUpdates.mobileconfig System - DisableBonjourAdvertisement.mobileconfig System - DisableExternalAccounts.mobileconfig System - DisableFastUserSwitching.mobileconfig System - DisableGatekeeperAutomaticReenablement.mobileconfig System - DisableiCloudDesktopandDocuments.mobileconfig System - DisableiCloudDriveandDocumentSync.mobileconfig System - DisableOffice2016Telemetry.mobileconfig System - DisableSiri.mobileconfig System - DisableSiriInMenubar.mobileconfig System - DisableTimeMachineDiskOffer.mobileconfig System - Finder Settings.mobileconfig System - Mouse - Enable Right Click-2.0.mobileconfig System - ShutdownRemovedFromAppleMenu.mobileconfigSystem - ShutdownRemovedFromLoginwindow.mobileconfig System - SkipDarkorLightAppearance.mobileconfig System - SkipDataAndPrivacy.mobileconfig System - SkipiCloudSetup.mobileconfigSystem - SkipSiriSetup.mobileconfig System - SkipTouchIDSetup.mobileconfig System - SleepRemovedFromLoginwindow.mobileconfig System - SuppressSecureTokenDialogBypassWindow.mobileconfigSystem

Any idea?

[Gregory Neagle]

See in-line...

I don't see (or am missing) any errors. This looks like the start of a normal run.

when I visit this link in the browser: 

http://xserver.company.com/repo/manifests/lab_client

I get a plain text of all the packages which doesn't seems right to me.. like this basically:

catalogs IT Managed managed_installs AdobeFlashPlayer AdobeReaderDC AMPAgent  Cyberduck Disable Photos AutoLaunch with camera devices.mobileconfig DisableMAURequiredDataNotice.mobileconfig dockutil Firefox GarageBand Google Chrome - Suppress First Run.mobileconfig GoogleChrome Handbrake kace-91-mac-agent Lock Screen.mobileconfig Microsoft - SuppressMicrosoftExcelFirstRunDialogWindows.mobileconfig Microsoft - SuppressMicrosoftOneNoteFirstRunDialogWindows.mobileconfig Microsoft - SuppressMicrosoftOutlookFirstRunDialogWindows.mobileconfig Microsoft - SuppressMicrosoftPowerpointFirstRunDialogWindows.mobileconfig Microsoft - SuppressMicrosoftWordFirstRunDialogWindows.mobileconfig Microsoft_Office_2016_Volume_Installer MSAutoUpdate munkitools-3.6.2.3776 SetLoginwindowToUsernamePasswordBlanks.mobileconfigSilverlight System - Disable iCloud Preference Pane.mobileconfig System - Disable Mac App Store.mobileconfig System - Disable Reopen Windows at Logout Prompt.mobileconfig System - Disable WiFi.mobileconfig System - DisableAutomatedCheckforAppleSoftwareUpdates.mobileconfig System - DisableAutomaticDownloadandInstallofOffice2016Updates.mobileconfig System - DisableAutomaticDownloadofAppleSoftwareUpdates.mobileconfig System - DisableBonjourAdvertisement.mobileconfig System - DisableExternalAccounts.mobileconfig System - DisableFastUserSwitching.mobileconfig System - DisableGatekeeperAutomaticReenablement.mobileconfig System - DisableiCloudDesktopandDocuments.mobileconfig System - DisableiCloudDriveandDocumentSync.mobileconfig System - DisableOffice2016Telemetry.mobileconfig System - DisableSiri.mobileconfig System - DisableSiriInMenubar.mobileconfig System - DisableTimeMachineDiskOffer.mobileconfig System - Finder Settings.mobileconfig System - Mouse - Enable Right Click-2.0.mobileconfig System - ShutdownRemovedFromAppleMenu.mobileconfigSystem - ShutdownRemovedFromLoginwindow.mobileconfig System - SkipDarkorLightAppearance.mobileconfig System - SkipDataAndPrivacy.mobileconfig System - SkipiCloudSetup.mobileconfigSystem - SkipSiriSetup.mobileconfig System - SkipTouchIDSetup.mobileconfig System - SleepRemovedFromLoginwindow.mobileconfig System - SuppressSecureTokenDialogBypassWindow.mobileconfigSystem

Your browser might be (badly) formatting the xml. What does 

curl http://xserver.company.com/repo/manifests/lab_client

show?

Any idea?

You haven't actually explained what _problem_ you are having and/or are trying to fix.

-Greg

[iva...@gmail.com]

my bad, the issue am having is.. 

when I configure the client to talk to the server..  it doesn't show/get the packages from the server - it starts looking for available updates/softwares and then it returns saying "no available updates".

here is the strange thing.. when I reboot the munki server, and run the managedsoftwareupdate command again.. it shows the available applications.

which makes it hard for me to troubleshoot.

[iva...@gmail.com]

here is the error before I restart the muni server:

Starting...

No CA cert info provided, so nothing to add to System keychain.
No client cert info provided, so no client keychain will be created.
Checking for available updates...
Manifest base URL is: http://xserver.company.com/repo/manifests/

Getting manifest munki_client...
Options: {'logging_function': <function display_debug2 at 0x104e43410>, 'ignore_system_proxy': False, 'additional_headers': {'User-Agent': u'managedsoftwareupdate/3.6.4.3786 Darwin/19.6.0'}, 'file': u'/Library/Managed Installs/manifests/munki_client.download', 'cache_data': None, 'url': u'http://xserver.company.com/repo/manifests/munki_client', 'follow_redirects': u'none', 'download_only_if_changed': False, 'can_resume': False}
Download error -1001: The request timed out.
Headers: None
ERROR: Could not retrieve managed install primary manifest.
Nothing found to precache.
Finishing...
Getting info on currently installed applications...
Done.

[Gregory Neagle]

On Dec 3, 2020, at 8:09 AM, iva...@gmail.com <iva...@gmail.com> wrote:

here is the error before I restart the muni server:

Starting...
No CA cert info provided, so nothing to add to System keychain.
No client cert info provided, so no client keychain will be created.
Checking for available updates...
Manifest base URL is: http://xserver.company.com/repo/manifests/
Getting manifest munki_client...
Options: {'logging_function': <function display_debug2 at 0x104e43410>, 'ignore_system_proxy': False, 'additional_headers': {'User-Agent': u'managedsoftwareupdate/3.6.4.3786 Darwin/19.6.0'}, 'file': u'/Library/Managed Installs/manifests/munki_client.download', 'cache_data': None, 'url': u'http://xserver.company.com/repo/manifests/munki_client', 'follow_redirects': u'none', 'download_only_if_changed': False, 'can_resume': False}
Download error -1001: The request timed out.

^^^^ --  your web server is not responding. You reboot it and it starts responding for a while before eventually dying again.

There's nothing Munki-specific about this problem. You'll need to start debugging your webserver and why it's dying.

--
You received this message because you are subscribed to the Google Groups "munki-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-discus...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/b5bdac08-847f-4066-971c-8884952a09d7n%40googlegroups.com.

[iva...@gmail.com]

I'm not sure why this is happening.. so here is whats happening:

I rebuild the whole server from scratch including the OSX and reconfigured munki again, am not even using the server app, I only started apache and I got the message "It works" on safari when I browse to the server hostname.

Everything works fine with munki, but when I leave the munki server untouched for few hours.. then it dies again but for some reason it doesn't talk to munki server, here is the output: 

sudo /usr/local/munki/managedsoftwareupdate -v
Managed Software Update Tool
Copyright 2010-2019 The Munki Project
https://github.com/munki/munki
Starting...
Checking for available updates...
Getting manifest lab_client...

Download error -1001: The request timed out.

Headers: None
ERROR: Could not retrieve managed install primary manifest.

Checking Apple Software Update catalog...
Caching CatalogURL https://swscan.apple.com/content/catalogs/others/index-10.14-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog
Skipping Apple Software Update check because sucatalog is unchanged, installed Apple packages are unchanged and we recently did a full check.
Finishing...
Done.

Here is the strange thing, as soon I remote in to the server.. munki works fine and starts pulling the packages with no errors, its like it was in a sleep mode.. I have already checked energy saver settings under the server.. no sleep or power nap is enabled.

Keep in mind, when munki isn't working.. I can ping the server fine also can browse to the webpage and shows the message "It works", also I can browse to the manifest page.

And here is also the output of managed install plist:

sudo defaults read /Library/Preferences/ManagedInstalls

{
AppleSoftwareUpdatesOnly = 0;
ClientIdentifier = "lab_client";
DaysBetweenNotifications = 1;
FollowHTTPRedirects = none;
IgnoreSystemProxies = 0;
InstallAppleSoftwareUpdates = 1;
InstalledApplePackagesChecksum = 553740fd5993ba17d88cefd26c5b41aa31ac8030dbcfedd056cfd09b4e7a330c;
LastAppleSoftwareUpdateCheck = "2020-12-08 02:01:20 +0000";
LastCheckDate = "2020-12-08 05:37:12 +0000";
LastCheckResult = 0;
LogFile = "/Library/Managed Installs/Logs/ManagedSoftwareUpdate.log";
LogToSyslog = 0;
LoggingLevel = 1;
ManagedInstallDir = "/Library/Managed Installs";
OldestUpdateDays = 0;
PackageVerificationMode = hash;
PendingUpdateCount = 0;
PerformAuthRestarts = 0;
ShowOptionalInstallsForHigherOSVersions = 0;
SoftwareRepoURL = "http://xserver.company.com/repo";
SuppressAutoInstall = 0;
SuppressLoginwindowInstall = 0;
SuppressStopButtonOnInstall = 1;
SuppressUserNotification = 0;
UseClientCertificate = 0;