You are not logged in.

Announcement

[2017.09.08] DeployStudio build v1.7.8 (checksum, release note).
[2016.08.26] DeployStudio build v1.6.19 (release note).
[2013.02.23] DeployStudio last universal build v1.5.17 (release note).

#1 2015-11-03 08:11:13

phillnz
Member
From: New Zealand
Registered: 2015-11-03

DS Assistant Bug with non SSL on 1.6.17

Great to see the release of 1.6.17 today and the support for El Capitan.
A few of us over at the MacAdmins Slack #deploystudio channel today came across an issue when performing an install of 1.6.17 on a server running 10.11.1

In a test environment after installing v17 for the first time and running the DeployStudio Setup Assistant for the first time I can’t specify any HTTP or HTTPS address even though it’s valid. Some users also found the same issue when upgrading from v16 to v17 if their DS setup also didn't have SSL enabled. The issue only occurs on a server running 10.11 - it does not affect 10.10 servers.

The only way we have been able to upgrade an existing setup is to uninstall v17, reinstall v16, enable SSL and then upgrade to v17.
Some believe it could be due to App Transport Security within El Capitan, but given it works find with v16 there might be something more than just this?

Would be great to see this bug fixed in another update soon.

Offline

#2 2015-11-04 03:27:38

tungates
Member
Registered: 2010-03-25

Re: DS Assistant Bug with non SSL on 1.6.17

Hi phillnz,

Can confirm that i was having this error also running 10.11 server.

I found the following link https://medium.com/@squeakytoy/configuring-app-transport-security-exceptions-in-ios-9-and-osx-10-11-94a62f844944
I fixed the issue by adding the keys at the bottom of the page to the Info.plist file in the Deploystudio Assistant.app.

<key>NSAppTransportSecurity</key>
<dict>
  <!--Include to allow all connections (DANGER)-->
  <key>NSAllowsArbitraryLoads</key>
      <true/>
</dict>

SSL is disabled on this also.

Offline

#3 2015-11-04 10:52:32

mbracco
Member
Registered: 2007-04-12

Re: DS Assistant Bug with non SSL on 1.6.17

I did post the lines in plist file at the very last line, Assistant starts but says server is not running cannot connect to....
What am i doing wrong here ?
10.11.1

..
.
.
        <string>public.app-category.utilities</string>
        <key>NSMainNibFile</key>
        <string>MainMenu</string>
        <key>NSPrincipalClass</key>
        <string>NSApplication</string>
</dict>
</plist>
<key>NSAppTransportSecurity</key>
<dict>
  <!--Include to allow all connections (DANGER)-->
  <key>NSAllowsArbitraryLoads</key>
      <true/>
</dict>

Last edited by mbracco (2015-11-04 10:56:10)

Offline

#4 2015-11-04 11:08:13

smurch
Member
From: LYON
Registered: 2008-01-25
Website

Re: DS Assistant Bug with non SSL on 1.6.17

hello
same pb, server 10.11.1 + dsr 1.6.17

assistant is broken

Offline

#5 2015-11-04 13:25:39

lotsofjam
Member
Registered: 2015-10-07

Re: DS Assistant Bug with non SSL on 1.6.17

Same here since update.

10.11.1 and 1.6.17

The assistant does not want to work anymore. Keeps telling me the server address is invalid.

Offline

#6 2015-11-04 14:31:13

tungates
Member
Registered: 2010-03-25

Re: DS Assistant Bug with non SSL on 1.6.17

The text needs to be pasted directly beneath the <string>NSApplication</string>

Looks like you have pasted this in under the last lines of text in the file. Sorry if i didn't explain this clearly..

So it should look like this as the last lines of the file.

    <string>NSApplication</string>
    <key>NSAppTransportSecurity</key>
<dict>
  <!--Include to allow all connections (DANGER)-->
  <key>NSAllowsArbitraryLoads</key>
      <true/>
</dict>
</dict>
</plist>

Offline

#7 2015-11-05 20:12:14

robbytx
Member
Registered: 2015-11-05

Re: DS Assistant Bug with non SSL on 1.6.17

Whatever that did it worked! Thank you! I'll await an official fix.

Offline

#8 2015-11-10 16:23:02

jakov
Member
From: Delft, Netherlands
Registered: 2008-04-22

Re: DS Assistant Bug with non SSL on 1.6.17

Hi

Just installed a new Mac Server with OS X 10.11.1 and Server 5.0.15. After that I installed DS 1.6.18 with SSL enabled.
Everything works fine, it seems like DS 1.6.18 fixed the SSL-problem

Offline

#9 2015-11-10 20:53:32

mbracco
Member
Registered: 2007-04-12

Re: DS Assistant Bug with non SSL on 1.6.17

yes ssl problem is fixed, but non ssl is no longer working ....
it always defaults back to 60443 as port and https....
we workarounded by modifying manually the com.deploystudio.server.plist inside our old netbootsets. so pointing to the ssl 60443 https ports.

Offline

#10 2015-11-11 10:33:24

Andware
Member
Registered: 2012-04-13

Re: DS Assistant Bug with non SSL on 1.6.17

Hi

i has problem with SSL connection on port 60443. It say every times "Unknown host" and "The request timed out". It does not matter whether you are connecting to an OS X 10.11.1 or an OSX 10.10.5 DP server with version 1.6.18 installed. If i use DP NetBoot set with Server version 5.0.15 installed on OS X 10.11.1 so it works. Link below you can see a picture with the mistakes I have.
Someone that has an idea?

https://www.dropbox.com/s/ujlax9vxk0yyiay/IMG_0627.jpg?dl=0

Offline

#11 2015-12-18 09:46:56

philb
Member
From: Belgium
Registered: 2011-05-04

Re: DS Assistant Bug with non SSL on 1.6.17

Still facing this issue in O X 10.11.2 and DS1.6.18.

Server not using SSL, but DS 1.6.18 always revert the server port to 60443.
Tried the fix explained in this post (editing /Applications/Utilities/DeployStudio\ Admin.app/Contents/Applications/DeployStudio\ Assistant.app/Contents/Info.plist) but issue remains.

Now the assistant dos not find the service, and even when started in System Preferences, the service status remains "Stopped".
Any way to get out of this ??

Will reinstall DS help ? Or upgrade to 1.7.0 ?

Offline

#12 2015-12-18 10:12:27

philb
Member
From: Belgium
Registered: 2011-05-04

Re: DS Assistant Bug with non SSL on 1.6.17

Could solve the issue by editing /Library/Preferences/com.deploystudio.server, and removing the SSL port.
This way, I was able to start the service again, and then use the assistant to update settings.

Offline

#13 2016-01-27 00:04:05

ComputerConnection
Member
Registered: 2015-01-20

Re: DS Assistant Bug with non SSL on 1.6.17

Still broken, did anyone find a solution that works for most of us??

Last edited by ComputerConnection (2016-01-27 00:04:21)

Offline

#14 2016-03-17 16:32:03

cstott
Member
Registered: 2016-03-17

Re: DS Assistant Bug with non SSL on 1.6.17

I received this error after updating my server to 1.7.2 from 1.6.15.

After the upgrade I couldn't configure the server with Assistant. Kept saying the service was unreachable.

Turned out it worked OK if I switched from SSL to non-SSL by changing https:// to http://,
however I *wanted* SSL, so, it turned out the real solution was this:

1. Uninstall DS Server & install 1.6.18. Don't worry, your repository and all its masters/packages/workflows will stay untouched.
2. Enter appropriate server address/login info and point it at your repository. You will have to respecify most of your server configuration including: address, username/passwords, address to repository, access groups for admin/assistant/runtime.
3. After I confirmed that SSL was working and I could access DS through Admin remotely, then I upgraded to 1.7.2.
4. After this I had to run Assistant again and respecify the address of the network repository, but the other information stayed intact.
5. Other post-upgrade stuff like updating netboots has to be done, but is off-topic.

Offline

Board footer

Powered by FluxBB