policy FAILED when trying to cache installer,

[tcandela]

Anybody have an idea on why I keep having this policy fail? Computer check-in with no issues etc.. but when this policy runs, it fails

Running 9.65
File Share DP = Master
File Sharing Protocol of Server = SMB
Port = 139
Use HTTP Downloads = Checked

Executing Policy Cache OS X Mavericks Installer...
Caching package InstallOSXMavericksInstallESD.dmg...
Downloading http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg...
The network connection was interrupted while downloading the package from http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg. Attempting to reconnect...
Downloading http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg...
The network connection was interrupted while downloading the package from http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg. Attempting to reconnect...
Downloading http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg...
The network connection was interrupted while downloading the package from http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg. Attempting to reconnect...
Downloading http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg...
The network connection was interrupted while downloading the package from http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg. Attempting to reconnect...
Downloading http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg...
Error: Could not connect to the HTTP server to download InstallOSXMavericksInstallESD.dmg
Running Recon...
Retrieving inventory preferences from https://Casper.local:8443/...
Locating accounts...
Locating package receipts...
Locating software updates...
Searching path: /Applications
Locating printers...
Gathering application usage information...

[pblake]

Is the dmg too big to copy and cache via smb?

[tcandela]

its 5.33GB, no matter if i switch to file share DP to AFP it does the same FAILED log

i have the the 9.65 running on a 10.10 Yosemite system.

[tcandela]

how do i ensure that HTTP downloads are enabled on the server?

now when I change the File Share Distribution Point from hostname to ip address, the policy still fails, BUT i get a much smaller log file info from the computer that the policy ran on; here it is; (AFP used)

Executing Policy Cache OS X Mavericks Installer...
Caching package InstallOSXMavericksInstallESD.dmg...
Downloading http://10.0.0.11/jssdist/Packages/InstallOSXMavericksInstallESD.dmg...
Error: Could not connect to the HTTP server to download InstallOSXMavericksInstallESD.dmg
Running Recon...
Retrieving inventory preferences from https://Casper.local:8443/...
Locating accounts...
Searching path: /Applications
Locating package receipts...
Locating software updates...
Locating printers...
Gathering application usage information...

[nessts]

change casper.local in the share definition to the IP address.

[tcandela]

Hi nessts, this is a test jss setup, I did that already, went into the computer mgmt settings, FS DP and in the General tab I changed the sever from host name to IP address, I posted the results in the comment just before yours.

I'm pretty sure this is the location you are referring to for me to enter the IP address

[tcandela]

I just ran a test Self Service policy from a test1-mb, I recieved the same

ERROR: could not connect to the HTTP server to download Adobe Reader XI installer.pkg

from test1-mb i went into Network Utility --> Port Scan, I entered the ip address of the JSS and ran the Port Scan, Port 80 did not appear!!

[pblake · Accepted solution]

Sounds like the file share cannot be mounted via http. Turn off http and see if it works with afp it smb.

[tcandela]

Via network utility port scan, I do not see any of these ports listed in page 9-10 ( only 3306, 8443,9006) were are these other ports?
http://resources.jamfsoftware.com/documents/products/documentation/Casper-Suite-9.65-Installation-Guide-for-OS-X.pdf?mtime=1424444613

This is were I believe the issue resides.
Doesn't Apache tomcat get installed with the jss installer for Mac? Does Apache tomcat provide/setup/configure these ports on its install?

I unchecked http

[tcandela]

These are the ports that appear when I run the scan:
88
445
631
3306
8005
8009
8443
9006

The JSS Mac installation guide lists a bunch of ports that are used to host communication among client computers, distribution points, and the JAMF Software Server (JSS): that are not listed in my scan.

[bentoms]

@tcandela Sounds like either the services are not enabled on the JSS DP itself or a firewall is blocking them.

Can you verify that the DP has Filesharing &/or web services running?

Also, if you click the link where it says "Dowloading.." What do you see.

[tcandela]

going into the Computer Management - Server Infrastructure --> File Share Distribution Points

GENERAL tab;
display name = casperlocal/jssdist
server = casper.local
use as master distribution point = checked
failover distribution point = none

FILE SHARING tab;
Protocol = smb
Share name = jssdist
port = 139
RW account = all set
R account = all set

HTTP/HTTPS tab;
Use HTTP downloads = currently unchecked (i want to see if smb works)

the policy fail error for the computer does not allow clicking of the "Downloading .." msg

When the JSS is installed on a Mac it also installs Apache Tomcat, does Apache Tomcat then have to be configured? http://127.0.0.1:80 or 8080 does not work.

All these ports that the JSS Mac installation guides lists that are to be open, are not open for me (network port scan shows only the 8 ports listed above open for me) https://jamfnation.jamfsoftware.com/article.html?id=34

System Preferences; File Sharing is checked, Windows Shareing ON, Share Files and folders using SMB is checked. Both the JSS R/W & R accounts have been enabled for windows sharing.

System Preferences: Security & Privacy, Firewall is OFF

[tcandela]

The Cache OS X Mavericks Installer policy just completed without ERROR!!

Based on @pblake s comment to turn off (uncheck) HTTP and see if AFP or SMB would complete the policy, after the computer checked in, it ran the policy and completed.

Whats the deal with the HTTP end not working?
Do you users have HTTP checked or unchecked? How do I check what ports are open? besides running port scan from network utility
Is the JSS supposed to be configured with both the File Share DP setup with File Sharing and HTTP both setup?

[christopher_kac]

Hello, I had the same symptoms.
I found that the posix permissions where not enough while on ACL everything looked fine.
The Package was accessible for CasperAdmin & CasperInstall user (On ACL basis).
Before (just showing Posix):

-rwx------+  1 casperadmin    staff  -  5164763151 Oct 17  2014 Install OS X Yosemite.InstallESD.dmg

Fixed Posix rights to:

-rwxr--r--+  1 casperadmin    staff  -  5164763151 Oct 17  2014 Install OS X Yosemite.InstallESD.dmg

Now it is working :-), for any reason. I think the issue is, that CasperAdmin is remaining Posix rights when importing Packages and the _www Apache user needs to access this file to provide it, but it had now access rights.

Best regards,
Patrick Faust