Munki check update is not working Download error -1005: The network connection was lost.

[subrat kheti]

Hello Everyone,

I need a input on below scenarios on Munki package software. Here is the issue and steps

1. Admin user.

2. Munki is installed.

3. Click on check for update.

4. Nothing happend with below error.

Nov 10 2021 14:39:27 +0530 ### Beginning managed software check ###

Nov 10 2021 14:39:27 +0530 Checking for available updates...

Nov 10 2021 14:39:27 +0530     No client id specified. Requesting Subrats-Mac.local...

Nov 10 2021 14:39:27 +0530     Getting manifest Subrats-Mac.local...

Nov 10 2021 14:39:31 +0530     Download error -1005: The network connection was lost.

Nov 10 2021 14:39:31 +0530     Headers: None

Nov 10 2021 14:39:31 +0530 ERROR: Could not retrieve managed install primary manifest.

Nov 10 2021 14:39:31 +0530 ###    End managed software check    ###

Nov 10 2021 14:39:32 +0530 Finishing...

Nov 10 2021 14:39:32 +0530 Saving application inventory...

Nov 10 2021 14:39:36 +0530 ### Ending managedsoftwareupdate run ###

5. Now the interesting part, instead of doing through software update console.If I have run the command /usr/local/munki/managedsoftwareupdate -vvv. Working here is the log

Nov 10 2021 14:35:59 +0530 ### Beginning managed software check ###

Nov 10 2021 14:35:59 +0530 Checking for available updates...

Nov 10 2021 14:35:59 +0530     No client id specified. Requesting Subrats-Mac.local...

Nov 10 2021 14:35:59 +0530     Getting manifest Subrats-Mac.local...

Nov 10 2021 14:36:18 +0530     Retrieving list of software for this machine...

Nov 10 2021 14:36:18 +0530     Retrieved manifest Subrats-Mac.local

Nov 10 2021 14:36:18 +0530     Using manifest: Subrats-Mac.local

Nov 10 2021 14:36:18 +0530     Preventing idle sleep

Nov 10 2021 14:36:18 +0530     **Checking for installs**

Nov 10 2021 14:36:18 +0530     Getting catalog all...

Nov 10 2021 14:36:20 +0530     Retrieving catalog "all"...

Nov 10 2021 14:36:20 +0530     Opera Installer version 80.0.4170.40 (or newer) is already installed.

Nov 10 2021 14:36:20 +0530     QuickTimePlayer version 7.6.6.1.1249367152 (or newer) is already installed.

Nov 10 2021 14:36:20 +0530     **Checking for removals**

Nov 10 2021 14:36:20 +0530     **Checking for managed updates**

Nov 10 2021 14:36:23 +0530     Getting list of available icons

Nov 10 2021 14:36:23 +0530     Bytes received: 625

Nov 10 2021 14:36:25 +0530     Getting icon L3Zmcy9BcHBsaWNhdGlvbi9JY29ucy82NDkyYmE5Zi05NWM1LTRmYmEtYTQ5MC0yZTU1MzlhOTY0NzktZTI2MTU5ZmMtNTdhMi00ZWQ2LTkzODktNjUwYTE2NjlkYTE4.png for UltraEdit...

Nov 10 2021 14:36:28 +0530     Getting icon L3Zmc2xvdy9saWIvdWlidWlsZC9jb21waWxlZC9pZGFwdGl2ZS9wcm9kdWN0aW9uL3Jlc291cmNlcy9pbWFnZXMvbG9nb3MvaWRhcHRpdmUtaWNvbi5wbmc_.png for CyberArk Identity Agent for Mac - 20.4.162...

Nov 10 2021 14:36:30 +0530     Getting client resources...

Nov 10 2021 14:36:30 +0530     Bytes received: 625

Nov 10 2021 14:36:32 +0530     Getting client resources...

Nov 10 2021 14:36:32 +0530     Bytes received: 625

Nov 10 2021 14:36:32 +0530 ###    End managed software check    ###

Nov 10 2021 14:36:32 +0530     Allowing idle sleep

Nov 10 2021 14:36:32 +0530 Finishing...

Nov 10 2021 14:36:32 +0530 Saving application inventory...

Nov 10 2021 14:36:35 +0530 ### Ending managedsoftwareupdate run ###

Nov 10 2021 14:39:26 +0530 managedsoftwareupdate run triggered by /private/tmp/.com.googlecode.munki.updatecheck.launchd

Nov 10 2021 14:39:26 +0530 ### Starting managedsoftwareupdate run: manualcheck ###

Nov 10 2021 14:39:26 +0530 Starting...

Nov 10 2021 14:39:27 +0530     Completed creation of client keychain at /Library/Managed Installs/Keychains/munki.keychain

I am not seeing any error. Can someone help me on this.

Note: Our all users are non admin users and they can't run that command to fetch the software update.

It would be greate if someone share any input on this.

[digam...@gmail.com]

I also noticed a similar behavior on our clients at work, most users do not have admin permission either, ergo it's up to me to help them out.

I inherited this environment from a previous admin and have been trying to maintain it to the best of my ability since then. There was no documentation about the setup whatsoever.

What I came to find out for this particular issue though, was that some of the clients had more than one client certificate issued, and it seems munki don't/didn't use the most recent issued one. 

We also once had ClientCertificatePath and ClientKeyPath set in the preferences (still figuring out if this is needed after the most recent changes) and that caused root to "see"/use one certificate through /Library/Managed Installs/Keychains/munki.keychain while the user saw/used the one in /Library/Keychains/System.keychain. 

Things to look at:

- Do you specify ClientCertificatePath in the munki preferences?

-- Is that certificate valid?

- Does the client have more than one certificate and/or a certificate chain?

-- If there are more than one, are they all valid?

- Does the command security list-keychain differer between user and root (except for the locally created one for the user ofc.).

In our environment I sent out a nopkg to about 100 clients that reported "ERROR: Could not retrieve managed install primary manifest." . 

This package checked if the certificate provided in our munki.keychain differed from the one that the user saw, checked if there were more certificates issued and last but not least deleted all but the most recent issued client certificate.

I expected this package to be able to without any trouble when munki run it's automatic check, especially since you could run command manually and everything gave a thumbs up, but unfortunately not. 

For it to work, and my boss ordered me to get this sorted "quickly", I've had to ssh to each and every client and run sudo managedsoftwareupdate --auto it manually. After that everything behaves as it should be. Client updates/creates the munki.keychain, starts its checks and then downloads things from the repo. - I would be more than happy to learn why this is the case! 

Please let me know how it goes. :-)

[subrat kheti]

It looks like an issue in munki. Here are more updates. As I mentioned in an earlier email, running through root user with terminal command managed software update is working. But through managessoftware UI it's not.

Here is the log for both scenarios.

It looks like an issue in munki. Here are more updates. As I mentioned in an earlier email, running through root user with terminal command managed software update is working. But through managessoftware UI it's not.

Here is the log for both scenarios.

Non_working Through Managed Software Center

Nov 10 2021 21:20:59 -0800 managedsoftwareupdate run triggered by /private/tmp/.com.googlecode.munki.updatecheck.launchd

Nov 10 2021 21:20:59 -0800 ### Starting managedsoftwareupdate run: manualcheck ###

Nov 10 2021 21:20:59 -0800 Starting...

Nov 10 2021 21:21:01 -0800     Completed creation of client keychain at /Library/Managed Installs/Keychains/munki.keychain

Nov 10 2021 21:21:01 -0800 ### Beginning managed software check ###

Nov 10 2021 21:21:01 -0800 Checking for available updates...

Nov 10 2021 21:21:01 -0800     No client id specified. Requesting Subrats-Mac.local...

Nov 10 2021 21:21:01 -0800     Getting manifest Subrats-Mac.local...

Nov 10 2021 21:21:05 -0800     Download error -1005: The network connection was lost.

Nov 10 2021 21:21:05 -0800     Headers: None

Nov 10 2021 21:21:05 -0800 ERROR: Could not retrieve managed install primary manifest.

Nov 10 2021 21:21:05 -0800 ###    End managed software check    ###

Nov 10 2021 21:21:05 -0800 Finishing...

Nov 10 2021 21:21:05 -0800 Saving application inventory...

Nov 10 2021 21:21:09 -0800 ### Ending managedsoftwareupdate run ###

Nov 10 2021 21:28:32 -0800 managedsoftwareupdate run triggered by /private/tmp/.com.googlecode.munki.updatecheck.launchd

Nov 10 2021 21:28:32 -0800 ### Starting managedsoftwareupdate run: manualcheck ###

Nov 10 2021 21:28:32 -0800 Starting...

Nov 10 2021 21:28:33 -0800 DEBUG2: No CA cert info provided, so nothing to add to System keychain.

Nov 10 2021 21:28:33 -0800 DEBUG1: Client cert path: /Library/Managed Installs/certs/munki_client.pem

Nov 10 2021 21:28:33 -0800 DEBUG1: Client key path:  None

Nov 10 2021 21:28:33 -0800 DEBUG1: Creating client keychain...

Nov 10 2021 21:28:33 -0800 DEBUG2: Adding client keychain to search path...

Nov 10 2021 21:28:33 -0800 DEBUG2: Importing client cert and key...

Nov 10 2021 21:28:33 -0800 DEBUG2: 1 key imported.

1 certificate imported.

Nov 10 2021 21:28:33 -0800 DEBUG1: Creating identity preferences...

Nov 10 2021 21:28:33 -0800 DEBUG2: Default keychain is     "/Library/Keychains/System.keychain"

Nov 10 2021 21:28:33 -0800 DEBUG2: Adding identity preference for https://myrepourl/munki/...

Nov 10 2021 21:28:33 -0800 DEBUG2: Adding identity preference for https://myrepourl/munki/manifests/...

Nov 10 2021 21:28:33 -0800 DEBUG1: Removing /Library/Managed Installs/Keychains/munki.keychain from search path...

Nov 10 2021 21:28:33 -0800     Completed creation of client keychain at /Library/Managed Installs/Keychains/munki.keychain

Nov 10 2021 21:28:33 -0800 DEBUG2: Adding client keychain to search path...

Nov 10 2021 21:28:34 -0800 ### Beginning managed software check ###

Nov 10 2021 21:28:34 -0800 Checking for available updates...

Nov 10 2021 21:28:34 -0800     No client id specified. Requesting Subrats-Mac.local...

Nov 10 2021 21:28:34 -0800 DEBUG2: Manifest base URL is: https://myrepourl/munki/manifests/

Nov 10 2021 21:28:34 -0800     Getting manifest Subrats-Mac.local...

Nov 10 2021 21:28:34 -0800 DEBUG2: Options: {'url': 'https://myrepourl/munki/manifests/Subrats-Mac.local', 'file': '/Library/Managed Installs/manifests/Subrats-Mac.local.download', 'follow_redirects': 'all', 'ignore_system_proxy': False, 'can_resume': False, 'additional_headers': {'User-Agent': 'managedsoftwareupdate/5.5.0.4360 Darwin/20.6.0'}, 'download_only_if_changed': True, 'cache_data': {

}, 'logging_function': <function display_debug2 at 0x10717c040>, 'pkginfo': None}

Nov 10 2021 21:28:34 -0800 DEBUG2: URLSession_task_didReceiveChallenge_completionHandler_

Nov 10 2021 21:28:34 -0800 DEBUG2: Authentication challenge for Host:myrepourl Realm: None AuthMethod: NSURLAuthenticationMethodServerTrust

Nov 10 2021 21:28:34 -0800 DEBUG2: Allowing OS to handle authentication request

Nov 10 2021 21:28:35 -0800 DEBUG2: URLSession_task_didReceiveChallenge_completionHandler_

Nov 10 2021 21:28:35 -0800 DEBUG2: Authentication challenge for Host: myrepourl Realm: None AuthMethod: NSURLAuthenticationMethodClientCertificate

Nov 10 2021 21:28:35 -0800 DEBUG2: Client certificate required

Nov 10 2021 21:28:35 -0800 DEBUG2: Accepted certificate-issuing authority: Common Name: xxx

Nov 10 2021 21:28:35 -0800 DEBUG2: Accepted certificate-issuing authority: Common Name: xxx Cloud Services

Nov 10 2021 21:28:35 -0800 DEBUG2: Found matching identity

Nov 10 2021 21:28:35 -0800 DEBUG2: Will attempt to authenticate

Nov 10 2021 21:28:36 -0800 DEBUG2: URLSession_task_didReceiveChallenge_completionHandler_

Nov 10 2021 21:28:36 -0800 DEBUG2: Authentication challenge for Host: myrepourl Realm: None AuthMethod: NSURLAuthenticationMethodServerTrust

Nov 10 2021 21:28:36 -0800 DEBUG2: Allowing OS to handle authentication request

Nov 10 2021 21:28:37 -0800 DEBUG2: URLSession_task_didReceiveChallenge_completionHandler_

Nov 10 2021 21:28:37 -0800 DEBUG2: Authentication challenge for Host: myrepourl Realm: None AuthMethod: NSURLAuthenticationMethodClientCertificate

Nov 10 2021 21:28:37 -0800 DEBUG2: Client certificate required

Nov 10 2021 21:28:37 -0800 DEBUG2: Accepted certificate-issuing authority: Common Name: xxx

Nov 10 2021 21:28:37 -0800 DEBUG2: Accepted certificate-issuing authority: Common Name: xxx Cloud Services

Nov 10 2021 21:28:37 -0800 DEBUG2: Found matching identity

Nov 10 2021 21:28:37 -0800 DEBUG2: Will attempt to authenticate

Nov 10 2021 21:28:38 -0800 DEBUG2: URLSession_task_didReceiveChallenge_completionHandler_

Nov 10 2021 21:28:38 -0800 DEBUG2: Authentication challenge for Host: myrepourl Realm: None AuthMethod: NSURLAuthenticationMethodClientCertificate

Nov 10 2021 21:28:38 -0800 DEBUG2: Client certificate required

Nov 10 2021 21:28:38 -0800 DEBUG2: Accepted certificate-issuing authority: Common Name: xxx

Nov 10 2021 21:28:38 -0800 DEBUG2: Accepted certificate-issuing authority: Common Name:xxx Cloud Services

Nov 10 2021 21:28:38 -0800 DEBUG2: Found matching identity

Nov 10 2021 21:28:38 -0800 DEBUG2: Will attempt to authenticate

Nov 10 2021 21:28:38 -0800     Download error -1005: The network connection was lost.

Nov 10 2021 21:28:38 -0800     Headers: None

Nov 10 2021 21:28:38 -0800 ERROR: Could not retrieve managed install primary manifest.

Nov 10 2021 21:28:38 -0800 ###    End managed software check    ###

Nov 10 2021 21:28:38 -0800 DEBUG1: Nothing found to precache.

Nov 10 2021 21:28:38 -0800 DEBUG1: Removing /Library/Managed Installs/Keychains/munki.keychain from search path...

Nov 10 2021 21:28:38 -0800 Finishing...

Nov 10 2021 21:28:38 -0800 Saving application inventory...

Nov 10 2021 21:28:38 -0800 DEBUG1: Getting info on currently installed applications...

Nov 10 2021 21:28:42 -0800 ### Ending managedsoftwareupdate run ###

Nov 10 2021 21:38:46 -0800 ### Starting managedsoftwareupdate run: auto ###

Nov 10 2021 21:38:46 -0800 Starting...

Nov 10 2021 21:38:47 -0800 DEBUG2: No CA cert info provided, so nothing to add to System keychain.

Nov 10 2021 21:38:47 -0800 DEBUG1: Client cert path: /Library/Managed Installs/certs/munki_client.pem

Nov 10 2021 21:38:47 -0800 DEBUG1: Client key path:  None

Nov 10 2021 21:38:47 -0800 DEBUG1: Creating client keychain...

Nov 10 2021 21:38:47 -0800 DEBUG2: Adding client keychain to search path...

Nov 10 2021 21:38:47 -0800 DEBUG2: Importing client cert and key...

Nov 10 2021 21:38:47 -0800 DEBUG2: 1 key imported.

1 certificate imported.

Nov 10 2021 21:38:47 -0800 DEBUG1: Creating identity preferences...

Nov 10 2021 21:38:47 -0800 DEBUG2: Default keychain is     "/Library/Keychains/System.keychain"

Nov 10 2021 21:38:47 -0800 DEBUG2: Adding identity preference for https://myrepourl/munki/...

Nov 10 2021 21:38:47 -0800 DEBUG2: Adding identity preference for https://myrepourl/munki/manifests/...

Nov 10 2021 21:38:47 -0800 DEBUG1: Removing /Library/Managed Installs/Keychains/munki.keychain from search path...

Nov 10 2021 21:38:47 -0800     Completed creation of client keychain at /Library/Managed Installs/Keychains/munki.keychain

Nov 10 2021 21:38:47 -0800 DEBUG2: Adding client keychain to search path...

Nov 10 2021 21:38:48 -0800 ### Beginning managed software check ###

Nov 10 2021 21:38:48 -0800 Checking for available updates...

Nov 10 2021 21:38:48 -0800     No client id specified. Requesting Subrats-Mac.local...

Nov 10 2021 21:38:48 -0800 DEBUG2: Manifest base URL is: https:/myrepourl/munki/manifests/

Nov 10 2021 21:38:48 -0800     Getting manifest Subrats-Mac.local...

Nov 10 2021 21:38:48 -0800 DEBUG2: Options: {'url': 'https://myrepourl/munki/manifests/Subrats-Mac.local', 'file': '/Library/Managed Installs/manifests/Subrats-Mac.local.download', 'follow_redirects': 'all', 'ignore_system_proxy': False, 'can_resume': False, 'additional_headers': {'User-Agent': 'managedsoftwareupdate/5.5.0.4360 Darwin/20.6.0'}, 'download_only_if_changed': True, 'cache_data': {

}, 'logging_function': <function display_debug2 at 0x10990c040>, 'pkginfo': None}

Nov 10 2021 21:38:48 -0800 DEBUG2: URLSession_task_didReceiveChallenge_completionHandler_

Nov 10 2021 21:38:48 -0800 DEBUG2: Authentication challenge for Host: myrepourl Realm: None AuthMethod: NSURLAuthenticationMethodServerTrust

Nov 10 2021 21:38:48 -0800 DEBUG2: Allowing OS to handle authentication request

Nov 10 2021 21:38:49 -0800 DEBUG2: URLSession_task_didReceiveChallenge_completionHandler_

Nov 10 2021 21:38:49 -0800 DEBUG2: Authentication challenge for Host: myrepourl Realm: None AuthMethod: NSURLAuthenticationMethodClientCertificate

Nov 10 2021 21:38:49 -0800 DEBUG2: Client certificate required

Nov 10 2021 21:38:49 -0800 DEBUG2: Accepted certificate-issuing authority: Common Name: xxxx

Nov 10 2021 21:38:49 -0800 DEBUG2: Accepted certificate-issuing authority: Common Name: xxx Cloud Services

Nov 10 2021 21:38:49 -0800 DEBUG2: Found matching identity

Nov 10 2021 21:38:49 -0800 DEBUG2: Will attempt to authenticate

Nov 10 2021 21:38:50 -0800 DEBUG2: URLSession_task_didReceiveChallenge_completionHandler_

Nov 10 2021 21:38:50 -0800 DEBUG2: Authentication challenge for Host: myrepourl Realm: None AuthMethod: NSURLAuthenticationMethodClientCertificate

Nov 10 2021 21:38:50 -0800 DEBUG2: Client certificate required

Nov 10 2021 21:38:50 -0800 DEBUG2: Accepted certificate-issuing authority: Common Name: xxx

Nov 10 2021 21:38:50 -0800 DEBUG2: Accepted certificate-issuing authority: Common Name: xxx Cloud Services

Nov 10 2021 21:38:50 -0800 DEBUG2: Found matching identity

Nov 10 2021 21:38:50 -0800 DEBUG2: Will attempt to authenticate

Nov 10 2021 21:38:51 -0800 DEBUG2: URLSession_task_didReceiveChallenge_completionHandler_

Nov 10 2021 21:38:51 -0800 DEBUG2: Authentication challenge for Host: myrepourl Realm: None AuthMethod: NSURLAuthenticationMethodServerTrust

Nov 10 2021 21:38:51 -0800 DEBUG2: Allowing OS to handle authentication request

Nov 10 2021 21:38:51 -0800 DEBUG2: URLSession_task_didReceiveChallenge_completionHandler_

Nov 10 2021 21:38:51 -0800 DEBUG2: Authentication challenge for Host: myrepourl Realm: None AuthMethod: NSURLAuthenticationMethodClientCertificate

Nov 10 2021 21:38:51 -0800 DEBUG2: Client certificate required

Nov 10 2021 21:38:51 -0800 DEBUG2: Accepted certificate-issuing authority: Common Name: xxxx

Nov 10 2021 21:38:51 -0800 DEBUG2: Accepted certificate-issuing authority: Common Name: xxx Cloud Services

Nov 10 2021 21:38:51 -0800 DEBUG2: Found matching identity

Nov 10 2021 21:38:51 -0800 DEBUG2: Will attempt to authenticate

Nov 10 2021 21:38:51 -0800     Download error -1005: The network connection was lost.

Nov 10 2021 21:38:51 -0800     Headers: None

Nov 10 2021 21:38:51 -0800 ERROR: Could not retrieve managed install primary manifest.

Nov 10 2021 21:38:51 -0800 ###    End managed software check    ###

Nov 10 2021 21:38:51 -0800 DEBUG1: Nothing found to precache.

Nov 10 2021 21:38:51 -0800 DEBUG1: Removing /Library/Managed Installs/Keychains/munki.keychain from search path...

Nov 10 2021 21:38:51 -0800 Finishing...

Nov 10 2021 21:38:51 -0800 Saving application inventory...

Nov 10 2021 21:38:51 -0800 DEBUG1: Getting info on currently installed applications...

Nov 10 2021 21:38:55 -0800 ### Ending managedsoftwareupdate run ###

Working (/usr/local/munki/managedsofteareupdate -vvv)

Last login: Wed Nov 10 21:11:51 on console

subratkheti@Subrats-Mac ~ % sudo /usr/local/munki/managedsoftwareupdate -vvv

Password:

Managed Software Update Tool

Copyright 2010-2021 The Munki Project

https://github.com/munki/munki

Starting...

    No CA cert info provided, so nothing to add to System keychain.

    Client cert path: /Library/Managed Installs/certs/munki_client.pem

    Client key path:  None

    Creating client keychain...

    Adding client keychain to search path...

    Importing client cert and key...

    1 key imported.

1 certificate imported.

    Creating identity preferences...

    Adding identity preference for https://myrepourl/munki/...

    Adding identity preference for https://myrepourl/munki/manifests/...

    Removing /Library/Managed Installs/Keychains/munki.keychain from search path...

    Completed creation of client keychain at /Library/Managed Installs/Keychains/munki.keychain

Checking for available updates...

    No client id specified. Requesting Subrats-Mac.local...

    Manifest base URL is: https://myrepourl/munki/manifests/

    Getting manifest Subrats-Mac.local...

    Options: {'url': 'https://myrepourl/munki/manifests/Subrats-Mac.local', 'file': '/Library/Managed Installs/manifests/Subrats-Mac.local.download', 'follow_redirects': 'all', 'ignore_system_proxy': False, 'can_resume': False, 'additional_headers': {'User-Agent': 'managedsoftwareupdate/5.5.0.4360 Darwin/20.6.0'}, 'download_only_if_changed': False, 'cache_data': None, 'logging_function': <function display_debug2 at 0x10f4d30d0>, 'pkginfo': None}

    URLSession_task_didReceiveChallenge_completionHandler_

    Authentication challenge for Host: myrepourl Realm: None AuthMethod: NSURLAuthenticationMethodServerTrust

    Allowing OS to handle authentication request

    URLSession_task_didReceiveChallenge_completionHandler_

    Authentication challenge for Host: myrepourl Realm: None AuthMethod: NSURLAuthenticationMethodClientCertificate

    Client certificate required

    Accepted certificate-issuing authority: Common Name: xxxx

    Accepted certificate-issuing authority: Common Name: xxxx Cloud Services

    Found matching identity

    Will attempt to authenticate

    Retrieving list of software for this machine...

0..20..40..60..80..100

    Status: 200

 

    

   

Thanks & Regrads,

Subrat Kumar Kheti

Mob:09160111547

--

You received this message because you are subscribed to the Google Groups "munki-discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to munki-discus...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/c61185e3-cbce-4260-8229-1edc76f6a0fan%40googlegroups.com.

Thanks & Regrads,

Subrat Kumar Kheti

Mob:09160111547

--
You received this message because you are subscribed to the Google Groups "munki-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-discus...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/c61185e3-cbce-4260-8229-1edc76f6a0fan%40googlegroups.com.

[Gregory Neagle]

It is almost certainly an issue with your local configuration, or a configuration problem with your web server.

I will bet that periodic background runs also fail. (Your logs would confirm this)

The background runs and runs triggered by MSC.app are initiated by launchd.

Your successful run in a shell has a shell as a parent. Something is available (a keychain perhaps) to the shell session that is not available to the launchd job(s).

To me, the key line is:

Nov 10 2021 21:21:05 -0800     Download error -1005: The network connection was lost.

You’ll want to look at the logs for the web server to see why it’s dropping the connection to the client.

-Greg

To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/CA%2B5EF88gbOfbQp-XMOj_EtLFXgAvwjLZLArX%3DnjhpA4z4MHRpQ%40mail.gmail.com.

[subrat kheti]

Thanks for the update.

Can I know a little bit more about which launchd process is referring here. Is it com.googlecode.munki.updatecheck.launchd. 

Thanks,

Subrat

You received this message because you are subscribed to a topic in the Google Groups "munki-discuss" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/munki-discuss/6sM9kOkFZOw/unsubscribe.
To unsubscribe from this group and all its topics, send an email to munki-discus...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/B335C6F4-9470-4811-8323-721CB2E5A681%40mac.com.

[subrat kheti]

I think because of this line the issue is popping, from the above log message could see  *Default keychain is     "/Library/Keychains/System.keychain"*, But in working scenario the message should be 

"/Library/Managed Installs/Keychains/munki.keychain"

It's not looking right keychain when doing update from managedsoftware center. How to fix it?

[subrat kheti]

My issue looks bit similar to 

https://groups.google.com/g/munki-discuss/c/Hvlqfx-bWD0

Thanks & Regrads,

Subrat Kumar Kheti

Mob:09160111547