Software Update on 10.3.x computers via Policy fails to perform

[#1]

Hello,

I set a policy to run Software Update on a group of computers, some were 10.3.x and some were 10.4.x. We're running a local Software Update server, so the 10.4.x machines can get their updates quickly. I understand that 10.3.x does not support getting updates from any other location but Apple's Software Update servers.

I set a trigger for after-hours use -- it would be active starting at 8:00PM with a 1-hour randomizer.

Initially I set the policy, via the Packages tab, to set Software Update Server to our local server, even though I knew the 10.3.x computers would ignore the setting. Additionally, I set the checkbox to "Install All Software Updates" and "Set As Server". The intent was to have any 10.4.x computer install locally, since any 10.3.x computer would ignore the command to use a different server.

When the policy was triggered, I noticed that the 10.4.x computers would run the updates, but the 10.3.x computers would not. The log for a given 10.3.x computer looks like this:

/usr/sbin/jamf is version 4.1 Executing Policy Test Updates... Running OS Mac OS X 10.3.9 (7W98)... Software Update Servers can not be automated in this OS.

OK, so I understand that Software Update servers cannot be *set* in that OS, but what does it mean when they cannot be *automated*?

So I edited the policy -- I unselected "Set As Server", so the policy won't try to force 10.3.x computers to use our local software update server.

Running OS Mac OS X 10.3.9 (7W98)... Executing Policy Test Updates... /usr/sbin/jamf is version 4.1 Software Update Servers can not be automated in this OS.

I edited the policy again. This time setting "Software Update Server" to "System Defaults", so the policy won't try to use our local software update server for updates, and won't try to *set* our local software update server as the default server. The policy should tell the 10.3.x computers to run their updates from Apple's Software Update servers at this point. The settings in the Packages tab on the policy are:

Software Update Server: System Defaults Install All Software Updates: [Ã] Set As Server: [ ]

Upon execution of this policy, I get these results in the policy log:

/usr/sbin/jamf is version 4.1 Executing Policy Test Updates... Running OS Mac OS X 10.3.9 (7W98)... Software Update Servers can not be automated in this OS.

OK. So this tells me that I am not going to be able to have a policy that runs Software Update on Mac OS X 10.3.x computers. Is that correct?

HOWEVER: Using the Casper application, I can: Select a 10.3.x computer, Use these exact same settings in the Packages tab,

...and it works. Log information from the Casper application:

Sending Wake On LAN command...
Opening SSH Connection to 10.1.2.247...
Authenticating...
Successfully authenticated.
Verifying Computer's Identity...
The MAC Address has been verified.
Checking Operating System Version...
Running Mac OS X 10.3.9 (7W98)
Getting Processor Architecture...
Processor architecture is powerpc.
Getting Processor Type...
Processor type is ppc7450.
Verifying /usr/sbin/jamf...
/usr/sbin/jamf is current (4.1)
Verifying /usr/sbin/jamfvnc...
/usr/sbin/jamfvnc is current (4.00)
Checking external dependencies...
Verifying /private/etc/jamf.conf...
The jamf.conf file was recreated.
Verifying Startup Item...
Verifying Login/Logout Hooks...
Running Software Updates from Apple's Servers...
Result of Software Update:
Software Update Tool
Copyright 2002-2003 Apple Computer, Inc.

AirPort Extreme Driver Update 2005-001: 0...10...20...30...40...
Apple Bluetooth Module Firmware Update: 0...10...20...30...40...
iSight Update: 0...10...20...30...40...
Java for Mac OS X 10.3, Update 5: 0...10...20...30...40...
QuickTime: 0...10...20...30...40...
iTunes: 0...10...20...30...40...
Security Update 2007-002: 0...10...20...30...40...
Daylight Saving Time Update: 0...10...20...30...40...
AirPort Extreme Driver Update 2005-001: 0...10...20...30...40...50...60...70...80...90...100
Apple Bluetooth Module Firmware Update: 0...10...20...30...40...50...60...70...80...90...100
iSight Update: 0...10...20...30...40...50...60...70...80...90...100
Java for Mac OS X 10.3, Update 5: 0...10...20...30...40...50...60...70...80...90...100
QuickTime: 0...10...20...30...40...50...60...70...80...90...100
iTunes: nprocs 49
0...10...20...30...40...50...60...70...80...90...100
Security Update 2007-002: 0...10...20...30...40...50...60...70...80...90...100
Daylight Saving Time Update: 0...10...20...30...40...50...60...70...80...90...100
Optimizing system performance. This may take a while...
Done.

You have installed one or more updates that requires that you restart your
computer. Please restart immediately.
Checking for Scheduled Tasks/Blacklist...
Checking for active users...
Nobody is logged in.
Updating receipts...
Rebooting the computer immediately...
Finished.

So -- I cannot perform software updates on 10.3.x computers via a policy, but I can update them manually via the Casper application. Why am I unable to do this via a policy? The settings used are identical between Casper.app and the policy in JSS.

Any thoughts?
--
Bryan K. Vines
Systems Administrator
Department of Information Systems
Watts Law Firm, L.L.P.