9.3 quirks

[jwojda]

Anybody run into any quirks from 9.3 yet?
Looks like they addressed quite a few bugs from 9.2x

[bentoms]

9.3 seems ok to me.

Issues we have are all 9.x related.

[jhbush]

@jardoin1][/url I used your suggestion about removing the comma between the company name and that seems to resolve at least the MDM enrollment at imaging time for my machines. I disabled the MDM settings over the weekend and just turned them back on after I made that minor change. I ran a jamf manage on the machines and they seem to be grabbing the MDM profiles just fine. I did notice that the override building locations was also acting strange. The log show two checkins for the same time. One grabs the building and assigns it according to IP range the other removes it.

[matt_jamison]

Looks like 9.3 should have never made it out of QA. I have everything working again EXCEPT JDS Cert Auth. I am however still getting some errors about generating a certificate when debug is turned on in /logging.html that JAMF appears to have no idea how to fix. It doesn't seem like it's affecting anything as far as I can tell.

@jhbush1973 We seem to have had the same exact problems with our upgrades. I also turned back on MDM after removing a "," in our company name and it appears to have fixed the issue. jamf manage also got the rest of the computers back on to MDM. Is your JDS cert auth turned on and working? I can't get it to work on computers already enrolled and with fresh new computers enrolling.

[ahopkins]

We upgraded to 9.3, now our new MacBooks won't bind to the directory, when I go to check the logs, The JSS locks up and fails, its not been fun.

[dvasquez]

To add to this discussion and I am seeing clients move in and out of smart groups all by themselves. Theses smart groups are mainly based on Building and Department criteria. They just move in and out all the time. This is over and above the normal activity usually seen. Clients that belong to locations are disappearing. I am also seeing crashes regularly with Casper Admin, I am having a tough time getting OS upgrades to work out of Self Service, I am using createdOSXInstall. I am seeing issues after packages install or policies run with recon the error is the "Running Recon... Error running recon: Connection failure: "The host MYSERVER.com is not accessible."
Nothing is unreachable either my server is totally up and available.

I am seeing some issues with enrollments. I agree with @oneloveamaru][/url][/url QA was not done right on this release.

[nsdjoe]

Hi dvasquez,

The Smart Groups issue you are experiencing is one we have had problems with for over a year. JAMF Support acknowledged that this was a defect (D-002920) where smart groups based on fields from Location Information have computers leave unexpectedly and rejoin. At the time I contacted them (Feb 2013) there was no workarounds listed other than to base the smart groups on another variable (other than Location Info). Here's an old post on this issue:

https://jamfnation.jamfsoftware.com/discussion.html?id=5227

Looks like it is still an issue with v9. We haven't been able to rely on Smart Groups based on Location for over a year now. Things would be much more efficient if we could count on Location Smart Groups to be accurate. I really hope this can be fixed soon.

~Joe

[lhscasper]

Hi dvasquez and nsdjoe,

I am having the same problems with iPads leaving smart groups and reappearing. Mine seems to be caused by the inventory disappearing during an update. I watched it happen this afternoon - I clicked the "Update Inventory" button on the management tab, then reasonably quickly had a look at the device in question.

The inventory page listed 0 Apps, 0 certificates and 0 profiles. After a few seconds these values were once again correctly displayed.

Cheers,
Chris.

[rtrouton]

The Failed to enforce the management framework: Unknown Error - An unknown error has occurred. showed up for me as well in my test environment. What appears to have fixed it is adding my Casper URL to the previously blank JSS Url for Enrollment Using Built-in SCEP and iPCU, saving the change, then removing the URL and saving the change.

[rtrouton]

I also had a comma in my organization's name for the Activation Code section which I removed for good measure, but things started working again before I made that change.

[fcloth]

Just want to add another comment that the tip from @johnnasset to remove the JSS URL for Enrollment Using Built-in SCEP and iPCU worked for me.

After doing that, I did a jamf removeMdmProfile and a jamf manage, and MDM enrolled fine.