Skip to main content
Question

Anyone upgraded JSS to 10.6.4?

  • June 16, 2010
  • 9 replies
  • 52 views
RobertHammen
Forum|alt.badge.img+29

Hi folks,

I normally wait a week or so for major updates before trying it on anything other than my own machine.

However, I'm in a bit of a Catch-22. My JSS is also my Apple Software Update Server. As anyone who's used Snow Leopard Server can tell you, the SUS has been... "fragile" under 10.6.x.

Right now, my SUS will mirror the Security Update 2010-004 for Leopard, but it won't download/mirror/even see the 10.6.4 (client or server) updates. From what I've read elsewhere, updating your SUS to 10.6.4 will allow the updates to be mirrored to clients. But, I don't want to fix one thing (SUS) only to break another (JSS).

Has anyone updated their Casper server from 10.6.3 to 10.6.4? If so, any issues? I already emailed support, and they mentioned they've been testing it, but to also poll the list before doing it.

Thanks,

--Robert

Robert Hammen
rhlist1 at hammen.org

    9 replies

    J
    Forum|alt.badge.img+9
    • jstrauss
    • Contributor
    • June 16, 2010

    I'm running 10.6.4. The JSS and SUS are on the same server, and they're both running fine.

    Jeffrey A. Strauss
    Systems Administrator
    Department of Educational Technology
    Loyola High School of Los Angeles
    1901 Venice Boulevard
    Los Angeles, Ca 90006
    213.381.5121 x. 265

    D
    Forum|alt.badge.img+11
    • dkucmierz
    • Contributor
    • June 17, 2010

    I updated to 10.6.4 and it broke my AD integration for jss users.

    --

    David Kucmierz
    Mesquite ISD Technical Services
    972.882.5506

    E
    Forum|alt.badge.img+21
    • ernstcs
    • Contributor
    • June 17, 2010

    That's fairly vague...care to elaborate on what's breaking and how? AD
    Binding at imaging? binding using Casper Remote? The 10.6.4 upgrade broke an
    already AD bound machine?

    Craig E

    J
    Forum|alt.badge.img+24
    • jarednichols
    • Valued Contributor
    • June 17, 2010

    It sounds like he means JSS logins
    -- 
    Jared F. Nichols
    Desktop Engineer, Client Services
    Information Services Department
    MIT Lincoln Laboratory
    244 Wood Street
    Lexington, Massachusetts 02420
    781.981.5436

    E
    Forum|alt.badge.img+21
    • ernstcs
    • Contributor
    • June 17, 2010

    Ah crap, just read that again. My bad.

    You meant user accounts and privileges in the JSS itself...

    I have not upgraded my JSS server yet to 10.6.4

    Yes, Jared...he did...*foot in mouth*

    Craig E

    D
    Forum|alt.badge.img+11
    • dkucmierz
    • Contributor
    • June 17, 2010

    nevermind...

    if you set the jss to use LDAP over SSL for AD, remember to reimport your root certificate into tomcat. http://jamfsoftware.com/kb/article.php?id=194

    Also, the same scenario applies with the server.xml file being overwritten during the update. I used the combo updater to upgrade from 10.6.3, but maybe the delta update doesn't do the overwrite from 10.6.3 to 10.6.4. http://jamfsoftware.com/kb/article.php?id=265

    sorry for the false alarm

    --

    David Kucmierz
    Mesquite ISD Technical Services
    972.882.5506

    E
    Forum|alt.badge.img+21
    • ernstcs
    • Contributor
    • June 17, 2010

    It's all good, will help people out that may run into the same issues.

    Thanks for posting, and putting up with me. =)

    Craig E

    J
    Forum|alt.badge.img+24
    • jarednichols
    • Valued Contributor
    • June 17, 2010

    I just ran the 10.6.4 update on my JSS box and all is well. SUS is
    downloading updates it should be and Server Admin seems waaaay more
    responsive even over VPN. One thing I *really* wish JAMF would do is
    backup the bloody server.xml file every time it needs to get blown away
    (at least via the JSS Setup Utility... Apple doing it is kinda
    unpreventable.)

    After the 10.6.4 update my Tomcat service wouldn't start back up and as
    someone previously mentioned, I just re-installed the JSS without the
    distribution point and all was well... Except it blew away my server.xml
    file which points to my keystore with my SSL cert as well as custom SSL
    settings to prevent weak ciphers being used. Not that it's hard to fix as
    I keep a master copy of that file elsewhere, but still... Definitely a
    nice to have for those of us rolling with SSL certs as a requirement of
    operations.

    j
    -- 
    Jared F. Nichols
    Desktop Engineer, Client Services
    Information Services Department
    MIT Lincoln Laboratory
    244 Wood Street
    Lexington, Massachusetts 02420
    781.981.5436

    RobertHammen
    Forum|alt.badge.img+29
    • RobertHammen
    • Author
    • Esteemed Contributor
    • June 17, 2010

    Well, tonight I manually sync'd my SUS (sudo -u _softwareupdate swupd_syncd) and it pulled down all of the 10.6.4 updates, as well as iTunes 9.2. So the need to update my server to 10.6.4 isn't as critical. Still, good to hear there are no major issues save the potential server.xml issue, which I half-expected. I'll probably do the update sometime over the weekend...
    On Jun 16, 2010, at 5:17 PM, Jeff Strauss wrote:

    Thanks again,

    --Robert

    Terms & ConditionsCookie settingsAccessibility statement