Server.app 5 and HTTP downloads

al_platt
Contributor II

Hi,

I'm struggling to get HTTP downloads working with server.app 5

I've followed https://jamfnation.jamfsoftware.com/article.html?id=116

The symlink is there and working but downloads aren't. I get, Error: Could not connect to the HTTP server to download

On top of this, i can't even connect to localhost from the test in server.app.

I'm assuming this is to do with the reverse proxy bit in the new app but i'm not great on apache so struggling to find where it's going wrong.

SMB/AFP working perfectly.

Any help would be much appreciated.

Thanks

Al

7 REPLIES 7

Sandy
Valued Contributor II

Hi Al,

I have got this working now on three mac minis using Server.app 5.0.15 and it was a struggle.

I also updated my minis to 10.11.3, because in discussing with Apple, it was suggested that if my issue need to go to engineering they would require it (they were still at 10.10.5).

Some of this is redundant but was my checklist:
I am using the default Server Website (SSL) , and I have a symlink to my CasperShare here:
/Library/Server/Web/Data/Sites/Default/(symlink here)
Initially I had created an additional "Site" but second time through with better understanding I removed that and went with the default.
Advanced Settings>Allow Folder Listing
I followed the directions to create a cert using the JSS Built-in Cert. Authority.
I have one redirect that redirects the http port 80 Default Site to the https Default
FIleSharing: WebDAV checked.
Check permissions in a browser using https://myserver.mydomain.org/CasperShare/Packages/
I believe "System Group" needs read only access to the share in addition to your casper read only account (casperinstall)

In scouring logs I think I found an error with permissions to /private/var/folders and cleared everything out of "folders" and I think that was the final fix.....but the log is gone now so cannot verify that (I was also troubleshooting netboot on these and so the two issues are a bit mixed in my brain)

Weird thing is I had previously gotten https working a few weeks back, and then they all stopped working inexplicably.....
Since getting this going my rate of failure on policies with packages has gone WAAAY down.

Now, nobody breathe on them, please... oh wait, 10.11.4 and Server.app 5.1 came out yesterday....grrr

Good Luck!
Sandy

barnesaw
Contributor III

I had to disable Server.app's Web server from trying to grab 8443, fighting with the JSS, and crashing the whole damn thing.

Pretty sure that was in /Library/Server/Web/Config/Proxy/apache:service proxy.conf

Sandy
Valued Contributor II

I have now successfully updated 2 of 3 minis to 10.11.4 and Server.app 5.1 and all services including https downloads are still functional.
Miracle.
S

millersc
Valued Contributor

@alplatt183 email me offline. I have a document that seems to work. You can try and see if it works for you. Follow my github profile for the email.

kevindw
New Contributor

Sandy or Millersc,

Mind sharing the config you are using to get Server app 5.1 and OSX 10.11.4 working?

I have a couple JDS's that were updated last week. After the Server app updated form 5.0 to 5.1 the configuration files changed in the same way as when the app when from 4.x to 5.0.

I've gone through the Troubleshooting JAMF Distribution Server (JDS) Issues on Computers with OS X Server v5.0.x Installed directions [https://jamfnation.jamfsoftware.com/discussion.html?id=19298](here), but it did not resolved the issue this time.

Thanks!
Kevin

bentoms
Release Candidate Programs Tester

Over the weekend, I updated 25 ish OSX Servers to 10.11.4 & Sever 5.1 (from 10.10.5 & server 4).

HTTP & HTTPS downloads all working fine.

Just a symlink in place pointing to CasperShare. No folder listing etc.

al_platt
Contributor II

Glad it's not just me then!

I'm running 10.11.4 and 5.1

Sandy, I'll try those steps and millersc i'll ping you an email directly.

Thank guys.

I'll post back when i get it sorted.