mac os server 10.14.6
Jamf Pro 10.15.1
we had to move all our data from old SAN to new one. This has been done and working.
We updated to mojave our server with the Jamf pro 10.15.1
We wanted to use now SMB be cause of the new APFS machine we are getting with our new DEP process in place.
here what's happening
i CAN user Jamf Admin and the share CAN be mounted no problem
Jamf Remote : error could not mount distribution point
any help ? i tried many things...
Solved! Go to Solution.
You should have two sets of credentials. One with read/write permissions and one with read only permissions. It seems your read/write account is working fine since Jamf Admin works and you're probably using that to mount it manually.
You have an issue with your read only account since that's what your Macs will use with Self Service and automated or Jamf Remote policies.
So first make sure you have a read only account configured both in SMB and in Jamf and then manually try mounting the SMB share with the read only account.
@jmercier I would strongly recommend you consider enabling http/https content delivery for your distribution point if possible. It should be much more performant than an SMB share as there is no need to mount/unmount the file system when doing http/https downloads. You also get the benefit of resumable downloads.
@jmercier I second @sdagley's previous comment. Setup SMB so you can use it to upload packages and get your updated infrastructure in place, but work on getting HTTPS content delivery setup too. I setup a basic NGINX server on top of samba on a few CentOS Linux boxes, HTTPS downloads on my Macs are far faster and more reliable than SMB.
Keep in mind that if you plan on using SMB distribution points on macOS Catalina clients, you're going to need to whitelist that server, else DP mounting will fail.
Yet another reason to move to https distribution points (especially if your JSS is Internet-facing... a lot of ISP's and public networks block SMB over the Internet by default. https, not so much ;-)
Was reading about this and in the process of setting up my own on prep Jamf server and have question about the read and read/write accounts for the SMB share. I am assuming these two accounts need to be on my client macs as well? Is this is how they are able to get packages and have them installed. I am a little new to Jamf and just trying to figure out where these accounts need to be and how they rely on each other for permissions to the DP. The documentation said to have the two accounts with the appropriate access to the share and it seems like that's just on the server? Again just trying to understand better.