Anyone upgraded JSS to 10.6.4?

[RobertHammen]

Hi folks,

I normally wait a week or so for major updates before trying it on anything other than my own machine.

However, I'm in a bit of a Catch-22. My JSS is also my Apple Software Update Server. As anyone who's used Snow Leopard Server can tell you, the SUS has been... "fragile" under 10.6.x.

Right now, my SUS will mirror the Security Update 2010-004 for Leopard, but it won't download/mirror/even see the 10.6.4 (client or server) updates. From what I've read elsewhere, updating your SUS to 10.6.4 will allow the updates to be mirrored to clients. But, I don't want to fix one thing (SUS) only to break another (JSS).

Has anyone updated their Casper server from 10.6.3 to 10.6.4? If so, any issues? I already emailed support, and they mentioned they've been testing it, but to also poll the list before doing it.

Thanks,

--Robert

Robert Hammen
rhlist1 at hammen.org

[jstrauss]

I'm running 10.6.4. The JSS and SUS are on the same server, and they're both running fine.

Jeffrey A. Strauss
Systems Administrator
Department of Educational Technology
Loyola High School of Los Angeles
1901 Venice Boulevard
Los Angeles, Ca 90006
213.381.5121 x. 265

[dkucmierz]

I updated to 10.6.4 and it broke my AD integration for jss users.

--

David Kucmierz
Mesquite ISD Technical Services
972.882.5506

[ernstcs]

That's fairly vague...care to elaborate on what's breaking and how? AD
Binding at imaging? binding using Casper Remote? The 10.6.4 upgrade broke an
already AD bound machine?

Craig E

[jarednichols]

It sounds like he means JSS logins
-- 
Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436

[ernstcs]

Ah crap, just read that again. My bad.

You meant user accounts and privileges in the JSS itself...

I have not upgraded my JSS server yet to 10.6.4

Yes, Jared...he did...*foot in mouth*

Craig E

[dkucmierz]

nevermind...

if you set the jss to use LDAP over SSL for AD, remember to reimport your root certificate into tomcat. http://jamfsoftware.com/kb/article.php?id=194

Also, the same scenario applies with the server.xml file being overwritten during the update. I used the combo updater to upgrade from 10.6.3, but maybe the delta update doesn't do the overwrite from 10.6.3 to 10.6.4. http://jamfsoftware.com/kb/article.php?id=265

sorry for the false alarm

--

David Kucmierz
Mesquite ISD Technical Services
972.882.5506

[ernstcs]

It's all good, will help people out that may run into the same issues.

Thanks for posting, and putting up with me. =)

Craig E

[jarednichols]

I just ran the 10.6.4 update on my JSS box and all is well. SUS is
downloading updates it should be and Server Admin seems waaaay more
responsive even over VPN. One thing I *really* wish JAMF would do is
backup the bloody server.xml file every time it needs to get blown away
(at least via the JSS Setup Utility... Apple doing it is kinda
unpreventable.)

After the 10.6.4 update my Tomcat service wouldn't start back up and as
someone previously mentioned, I just re-installed the JSS without the
distribution point and all was well... Except it blew away my server.xml
file which points to my keystore with my SSL cert as well as custom SSL
settings to prevent weak ciphers being used. Not that it's hard to fix as
I keep a master copy of that file elsewhere, but still... Definitely a
nice to have for those of us rolling with SSL certs as a requirement of
operations.

j
-- 
Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436

[RobertHammen]

Well, tonight I manually sync'd my SUS (sudo -u _softwareupdate swupd_syncd) and it pulled down all of the 10.6.4 updates, as well as iTunes 9.2. So the need to update my server to 10.6.4 isn't as critical. Still, good to hear there are no major issues save the potential server.xml issue, which I half-expected. I'll probably do the update sometime over the weekend...
On Jun 16, 2010, at 5:17 PM, Jeff Strauss wrote:

Thanks again,

--Robert