Posted on 10-16-2014 06:37 PM
Now that Yosemite is out and JAMF have released version 9.6 of the Casper Suite.
We are currently using version 9.32 on a virtualised REHL 6.5 server and will need to upgrade to 9.6 soonish.
I wanted to ask what everyones experiences were with upgrading there JSS Servers to version 9.6
What version of JSS were you upgrading from?
How long did it take?
Was there anything nonstandard that you had to do to prepare for the upgrade?
I'm also keen on hearing experiences from people who are supporting JSS in a clustered environment.
How are you guys approaching the upgrade?
Thanks in advance for your assistance.
Posted on 10-17-2014 12:36 AM
Upgraded our JSS to 9.6 (Linux) and now I get a version mismatch in Casper Admin (9.6).
Maybe something wrong with the Linux JSS installer?
Posted on 10-17-2014 02:58 AM
@emilh][/url, are you running the latest version of the Casper Admin app as well? Do you have the same problem on a 10.9 machine?
@maktime][/url perhaps it would be beneficial to spin up a new test vm environment to mirror your production setup. install the same version of the JSS as your prod, then import your latest prod backup to your test environment. Once thats operational. test the upgrade and make sure everything is working ok.
I'd also be looking through the change log of the casper suite, to see whats been fixed and known issues from 9.32 to 9.6 (theres a LOT) to see if any of them affect you.
Posted on 10-17-2014 04:06 AM
Posted on 10-17-2014 04:07 AM
@calum_oac][/url Yeah, as you can see from the screenshot I was running Casper Admin 9.6.
After contacting JAMF support I noticed that the JSS didn't report a version number in the web interface either, so I reran the installer. Two times. It seems like the third time really is the charm and after that the JSS started reporting itself as running version 9.6 and now everything seems to run properly.
Posted on 10-17-2014 04:37 AM
@emih What version of JSS are you upgrading from? Wow 3rd time is the charm eh.
@calum_oac - Yup that's exactly what I did and it's currently stuck during the upgrade process. So am wondering if other's are experiencing issues with the upgrade. I also went through the release notes of 9.6 and yes there's a few things on the defects list.
I'm wondering if it's worth while to upgrade to 9.4 or 9.5 before upgrading to 9.6
I'll let you guys know how it goes I've left the upgrade going in my test environment.
Thanks again guys.
Posted on 10-17-2014 06:21 AM
Posted on 10-27-2014 04:16 PM
Posted on 10-31-2014 11:18 AM
One thing to note if you have any 10.6 client machines. The Self Service app in 9.6 will not run on Snow Leopard machines. I had saved a copy of Self Service from my 9.32 install and that seems to work just fine on 10.6 systems.
Posted on 11-01-2014 05:15 AM
9.32>9.61 found a glitch with Restricted Software.
We restrict access to Terminal.app, however our group (IT) is allowed to launch. After upgrading to 9.61, each of us got bounced out of Terminal.app:
Relaunch Terminal.app and all is fine.
Run sudo jamf manage, and now we get the dialog box every 5 minutes.
Anyone seeing this?
UPDATE: Looks like we lost our exempted LDAP user list in Restricted Software. Terminal.app was set to restrict on All Computers, and exempt by user...the scope for the Terminal.app Restricted Software item doesn't show the list.
Posted on 11-01-2014 01:47 PM
Thanks for the update @donmontavio
I use the restricted software as well I'll keep an eye on the exclusions as well.
Posted on 11-02-2014 10:50 AM
... ewww. Just to follow up on that. Our 'exclusions' list remained. We're fortunate, or just dumb enough to fast track JSS upgrades on a priority basis. Therefore, we almost never have to jump versions. For better or worse we were OK on this one.
To clarify that was 9.52 to 9.6 and then on to 9.61. However, I do tend to scour MySQL records for corruption. Anytime I have something tweak out on me I can almost always find it there. I thank @amanda.wulff for pointing me in this direction long ago!
Posted on 11-02-2014 01:58 PM
We have also successfully upgraded our Production Environment in a incremental staged upgrade process
Going from version 9.32 > 9.4 then finally 9.61
And yes in between each upgrade I did UAT as well as running checks and analysing the DB just to ensure there was no corruption or errors.
And yes definitely thanks to @amanda.wulff on providing her own set of notes in my previous thread.
I hope everyone else has had success in upgrading there own servers.
Posted on 11-02-2014 07:39 PM
UPDATE: Looks like we lost our user exclusions in Restricted Software. Terminal.app was set to restrict on All Computers, and exempt by user...the scope for the Terminal.app Restricted Software item doesn't show our list of exempted users anymore.
UPDATE: Looks like the missing LDAP user exemptions for Restricted Software is a known issue (D-007418) that should be fixed in 9.62.
Kudos to Travis for confirming on Sunday night, above and beyond!
Posted on 11-02-2014 09:51 PM
Posted on 11-03-2014 01:32 PM
Posted on 11-05-2014 04:25 PM
After upgrading the JSS to 9.61 we ran into an issue with MDM capability not function after enrolling a workstation using the quickadd package or Recon. This turned out to be a Defect
- QuickAdd package fails to install. MDM errors are found in the jamf.log on the client and in the JAMFSoftwareServer.log
Error installing the computer level mdm profile: profiles install for file:'/Library/Application Support/JAMF/tmp/mdm.mobileconfig' and user:'(null)' returned -915 (Unable to contact the SCEP server
Workstation is enrolled but the installer displays a error message
Just wanted to thank @adam.sippl for working through this with me and providing the work around of recreating the Tomcat Cert and restarting the Tomcat Service. After re-enrolling the affected workstation into the JSS it reported that MDM capability was back to normal.
Posted on 11-05-2014 05:54 PM
Updated my OS X server to 9.61. VM usage is pits, the server practically locks up.
Inactive memory maxes out and doesn't release.
Workaround for me is to run purge with a LaunchDaemon every 5 minutes. Currently purging between 3GB and 10GB every 5 minutes.
Might be time to investigate an OS migration.
Posted on 11-05-2014 05:59 PM
I'd recommend going to RHEL Server, we went that route and have never looked back!