Internal SUS - Proxy error

[russell_kennyOL]

Hey Gents.
I've setup my environment with a series of internal SUS servers.

and setting a policy up to run on the machines to run updates pointing to the specific server depending on the Network Segment etc.

if i force the machine to point to the local SUS server and manually run updates via the Software update menu, everything runs fine, picks up updates and installs them.

but if i run the policy I get an error saying Cannot install software updates. There may be a proxy in place. but I am not running a proxy for my macs.

here's the log after the policy executes:

/usr/sbin/jamf is version 8.6
Executing Policy Software Update 32 Gros Copy...
[STEP 1 of 3]
Setting Software Update Server to http://<SUSServer>:8088/index.sucatalog for root...
Setting Software Update Server to http://<SUSServer>:8088/index.sucatalog for all accounts...
[STEP 2 of 3]
Installing all available Software Updates...
Cannot install software updates. There may be a proxy in place.

Has anyone come across this issue in an environment without a proxy in place?

JSS: 8.6
Clients: 10.7
SUS Servers: 10.6 with Lion updates, and tried with a 10.7 server.

Cheers all

-Rusty

[jarednichols · Accepted solution]

https://jamfnation.jamfsoftware.com/discussion.html?id=4068

[CypherCookie]

I'm not sure how you have set the machines to reach the SUS, but what i would do is set a policy for all machines to have their SUS details changed on login, then have a separate policy to run to actually update the machines.

Unfortunately i have no idea where you initial problem lays.

[russell_kennyOL]

i might give that a test, cheers!

i have it set via network segment, and added into the server list in the JSS.

then the policy is setting the server and installing updates. through the check boxes in the packages tab (i believe its in that tab, not on my network atm)

[jarednichols · Accepted solution]

https://jamfnation.jamfsoftware.com/discussion.html?id=4068

[russell_kennyOL]

hah thanks Jared, i went through that post earlier.
Charles' suggestion just defaults the SUS server on the machine, where Setting the server System wide (in the SUS Server section of the JSS) and setting the server option in the Packages Tab.

All the software updates are being collected at recon already.

but still same issue, if i point the machine to the local SUS, then the policy is set to install all software updates. i get a proxy error (and i have no proxy set) but clicking it manually through the apple menu does work....

I might try maybe forcing the software update via a command rather than via the JSS entry and test that....

let me know if you might have other suggestions, ill post my results.

[jarednichols]

Right, because root is running the softwareupdate command. You need to set the SUS for the root user. MCX and the SUS assignment in the JSS (e.g. through network segments) doesn't do this.

It took me forever to figure that out.

[russell_kennyOL]

haha really? with it "Set System Wide" ticked, the logs say:

[STEP 1 of 3]
Setting Software Update Server to http://<SUSServer>:8088/index.sucatalog for root...
Setting Software Update Server to http://<SUSServer>:8088/index.sucatalog for all accounts...

<SUSServer> is my predefined server...
Saying its setting the server for root and all accounts.

I'll test again with the script mate!

Cheers

[russell_kennyOL]

hrm, further to this, when running sudo jamf recon after Jared's script:

sudo defaults write /var/root/Library/Preferences/com.apple.SoftwareUpdate CatalogURL 'http://10.132.108.31:8088/index.sucatalog'

I get the following log when running the recon from ARD:

Locating printers...
Locating software updates...
Cannot connect to http://10.132.108.31. There may be a proxy in place.
Locating plugins...
Locating mobile device records...
Submitting data to https://sydapp05:8443/...
<computer_id>567</computer_id>

but the computer can still connect to the local SUS and download updates via the Apple > Software Updates menu...

Hahaha, not my day.

[russell_kennyOL]

have just got it working, will post about it tomorrow

[russell_kennyOL · Accepted solution]

Ok,
Looks like its a concurrent issue with the Casper Imaging 8.6 and the spotlight issue.

https://jamfnation.jamfsoftware.com/discussion.html?id=4939

All is working fine now via the policies :)

Thanks for your help guys.

[russell_kennyOL]

More investigation,
i have encountered the same issue at another site, its not related to the spotlight issue above...

cannot remove the answer notification, looking into this more to try and find out. i believe it might be my network/sus servers rather than casper etc.

Will post once i have a resolution

Cheers