How To: Connect Clients To Lion Servers Apple Software Update Service
Standard
UPDATE: Apple have now posted a support document verifying the above, it's available here.
In 10.6 Apple release unified the ASUS url into http://myserver.fqdn:8088/index.sucatalog as per the this page. This same URL will work for 10.7 clients too.
30 thoughts on “How To: Connect Clients To Lion Servers Apple Software Update Service”
Almost works. My index-lion-snowleopard-leopard.merged-1.sucatalog has nothing in it, while index-leopard.merged-1.sucatalog is having at least most of the updates I have managed to download (strange problem with iWeb tho)
Yes, this is 10.7 server. I can verify that situation persists. SnowLep+Lep works and Leopard only works too. I think this is a buggie they hopefully fix, I just linked the snowlep/lep index to index.sucatalog and I’m updating already snow leopards & lions over the network.
I second KT, I had to change it to catalogs.sucatalogs to get it to EVEN WORK. Prior it would just fail connecting. I assume this is for machines with a clean install of 10.7 -> Upgrade 10.7 server.
Can you update your post and be more clear? Which string is for Lion clients connecting to lion server and what is needed for PRE Lion clients to connect to lion server.
Actually if you have a 10.7 Server running and you want to serve updates to your 10.7 clients, it is currently broken, It will not download 10.7.1 update to your SUS
Just to advise i was having the same issue as yourself. But i ran the following on my master ASUS. (172.250.248.95 is what swscan.apple.com resolves to for me when using Googles 8.8.8.8 DNS):
No I don’t have an internal dns entry for swscan.apple,com.
It’s not the SUS, it’s specific to 10.7 as my 10.6x clients are pulling updates without issue from the same 10.7 Server SUS. This morning 3 new updates appeared (now the updates list as 352)
My Lion Client hits my 10.7 SUS with: /index-leopard-snowleopard.merged-1.sucatalog
This morning iTunes 10.4.1 is showing so Lion Client is seeing the latest updates, however 10.7 SUS is not pulling down 10.7.1
LJS
I have a case open with Apple and they are able to replicate the issue on their end. They advised NOT TO do this on a lion server, as this was designed for 10.6x server to serve updates to 10.7 clients. http://support.apple.com/kb/ht4771
I also have a 10.6x Server running SUS that I will do this on and see if 10.7.1 updates appear.
LJS
Finally heard back from Apple regarding my 10.7 Server SUS not downloading all the updates, specifically 10.7.1
They told me to do the following, which I did, and it did not resolve the issue.
1. Stop the Software Update Service
2. Run the following 3 commands in Terminal:
sudo -s
cd /etc/swupd
mv swupd.conf swupd.conf.old
3. Start the Software Update Service
On a positive not regarding my SL Server SUS Apple’s kb http://support.apple.com/kb/HT4771 does allow my 10.7 clients to pull updates from my 10.6x Server.
Now I’m waiting on apple to tell me how to get my 10.7 Server SUS working properly.
LJS
I have multiple clients with multiple os versions… do you have a script i can use to change it to my server and another script that will change it back to defaults?
Almost works. My index-lion-snowleopard-leopard.merged-1.sucatalog has nothing in it, while index-leopard.merged-1.sucatalog is having at least most of the updates I have managed to download (strange problem with iWeb tho)
Strange. Had your server finished it’s SWUPD sync? Also this is a 10.7 Server right?
Yes, this is 10.7 server. I can verify that situation persists. SnowLep+Lep works and Leopard only works too. I think this is a buggie they hopefully fix, I just linked the snowlep/lep index to index.sucatalog and I’m updating already snow leopards & lions over the network.
I had to change it to: http://myserver.fqdn:8088/catalogs.sucatalog
I think catalogs.sucatalog is just list of catalogs, I’m afraid that the updates will not work… or they might… Windowspooky!
I second KT, I had to change it to catalogs.sucatalogs to get it to EVEN WORK. Prior it would just fail connecting. I assume this is for machines with a clean install of 10.7 -> Upgrade 10.7 server.
Can anyone confirm?
I think I need to re-word my post quite a bit!!
Are you using catalogs.sucatalog with lion clients?
What I posted was for pre 10.7 clients.
Can you update your post and be more clear? Which string is for Lion clients connecting to lion server and what is needed for PRE Lion clients to connect to lion server.
I’ll be double checking this Monday. Looking back i’m sure I did test it.
Also, the catalog name would indicate it supports lion clients too. (index-lion-snowleopard-leopard.merged-1.sucatalog).
But it wouldn’t be the last time!
It’s also the same URL used by 10.6 to serve updates for 10.7 too. (http://support.apple.com/kb/ht4771)
Ok.. well my testing has so far backed what i posted.
/catalogs.sucatalog just gives the catalogs:
[?xml version="1.0" encoding="UTF-8"?]
[!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"]
[plist version="1.0"]
[dict]
[key]CatalogsList[/key]
[array]
[string]http://asus-01.macmule.com:8088/content/catalogs/others/index-leopard.merged-1.sucatalog[/string]
[string]http://asus-01.macmule.com:8088/content/catalogs/others/index-leopard-snowleopard.merged-1.sucatalog[/string]
[string]http://asus-01.macmule.com:8088/content/catalogs/others/index-lion-snowleopard-leopard.merged-1.sucatalog[/string]
[/array]
[key]PrimaryCatalog[/key]
[string]http://asus-01.macmule.com:8088/content/catalogs/others/index-leopard.merged-1.sucatalog[/string]
[/dict]
[/plist]
When using this on 10.6 & 10.7 clients & performing a software update check, the mac doesn’t error. But it doesn’t find any updates:
Last login: Mon Aug 1 10:48:22 on ttys001
ls-mac-99:~ mis$ sudo -s
bash-3.2# defaults read /Library/Preferences/com.apple.SoftwareUpdate CatalogURLhttp://asus-01.macmule.com:8088/catalogs.sucatalog
bash-3.2# softwareupdate -l
Software Update Tool
Copyright 2002-2010 Apple
No new software available.
If i change the URL to what i posted both 10.6 & 10.7 clients can see updates:
bash-3.2# sudo defaults write /Library/Preferences/com.apple.SoftwareUpdate CatalogURL http://asus-01.macmule.com:8088/content/catalogs/others/index-lion-snowleopard-leopard.merged-1.sucatalog
bash-3.2# defaults read /Library/Preferences/com.apple.SoftwareUpdate CatalogURL http://asus-01.macmule.com:8088/content/catalogs/others/index-lion-snowleopard-leopard.merged-1.sucatalog
bash-3.2# softwareupdate -lSoftware Update ToolCopyright 2002-2010 Apple
Software Update found the following new or updated software:
* RemoteDesktopClient-3.5.1
Remote Desktop Client Update (3.5.1), 3564K [recommended]
However, as my server has now finished it’s SWUPD sync, index.sucatalog now works:
bash-3.2# sudo defaults write /Library/Preferences/com.apple.SoftwareUpdate CatalogURL http://asus-01.macmule.com:8088/index.sucatalogbash-3.2# defaults read /Library/Preferences/com.apple.SoftwareUpdate CatalogURL http://asus-01.macmule.com:8088/index.sucatalog
bash-3.2# softwareupdate -lSoftware Update Tool
Copyright 2002-2010 Apple
Software Update found the following new or updated software:
* RemoteDesktopClient-3.5.1
Remote Desktop Client Update (3.5.1), 3564K [recommended]
I’ll amend the post accordingly.
Thanks for the experience, I’d be browing through a bit more : )
Actually if you have a 10.7 Server running and you want to serve updates to your 10.7 clients, it is currently broken, It will not download 10.7.1 update to your SUS
I’m seeing the same.. do you have a DNS entry internally for swscan.apple.com?
Just to advise i was having the same issue as yourself. But i ran the following on my master ASUS. (172.250.248.95 is what swscan.apple.com resolves to for me when using Googles 8.8.8.8 DNS):
sudo cp /etc/swupd/swupd.plist /etc/swupd/swupd.plist.bak
sudo /usr/libexec/PlistBuddy -c 'set metaIndexURL http://172.250.248.95:8088/catalogs.sucatalog' /etc/swupd/swupd.plist
No I don’t have an internal dns entry for swscan.apple,com.
It’s not the SUS, it’s specific to 10.7 as my 10.6x clients are pulling updates without issue from the same 10.7 Server SUS. This morning 3 new updates appeared (now the updates list as 352)
My Lion Client hits my 10.7 SUS with: /index-leopard-snowleopard.merged-1.sucatalog
This morning iTunes 10.4.1 is showing so Lion Client is seeing the latest updates, however 10.7 SUS is not pulling down 10.7.1
LJS
Hi Larry,
I think iTunes updates are “advertised” somewhere else, (possibly probos.apple.com), so they show.
iTunes 10.4.1 is showing as being available to my Mac but it’s not on my ASUS, yet we have an entry for swscan.apple.com to our master ASUS.
Anyways, you mention you client is using /index-leopard-snowleopard.merged-1.sucatalog. That’s the 10.5 & 10.6 url.
As mentioned in the post, please try http://myserver.fqdn:8088/index.sucatalog or http://myserver.fqdn:8088/content/catalogs/others/index-lion-snowleopard-leopard.merged-1.sucatalog
RRS subscribed, was a pretty good read actually tho I, personally, have a different view on the matter (well, kind of).
I have a case open with Apple and they are able to replicate the issue on their end. They advised NOT TO do this on a lion server, as this was designed for 10.6x server to serve updates to 10.7 clients. http://support.apple.com/kb/ht4771
I also have a 10.6x Server running SUS that I will do this on and see if 10.7.1 updates appear.
LJS
Larry,
I did not make any changes as per the kb article. The catalogs are there as part of each default install i’ve done.
Finally heard back from Apple regarding my 10.7 Server SUS not downloading all the updates, specifically 10.7.1
They told me to do the following, which I did, and it did not resolve the issue.
1. Stop the Software Update Service
2. Run the following 3 commands in Terminal:
sudo -s
cd /etc/swupd
mv swupd.conf swupd.conf.old
3. Start the Software Update Service
On a positive not regarding my SL Server SUS Apple’s kb http://support.apple.com/kb/HT4771 does allow my 10.7 clients to pull updates from my 10.6x Server.
Now I’m waiting on apple to tell me how to get my 10.7 Server SUS working properly.
LJS
Having the same issue with 10.7 clients not being served updates from a 10.7 server – eager to hear what comes out of this…
Just found this article: http://support.apple.com/kb/TS3867
Testing now….
Well, that had no effect.
Sorry to hear Chris.
Tbh, as a rule I never upgrade Macs. Always erase & install. So I’d not see this issue myself.
But if you find a resolution, please post.
I have multiple clients with multiple os versions… do you have a script i can use to change it to my server and another script that will change it back to defaults?
Apple have now posted a support document verifying the above http://support.apple.com/kb/HT5240
Heres the new mountain lion document
http://1.1.1.1:8088/index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog
Is it possible to serve 10.8.x updates from a Lion SUS Server?
I don’t think so.
Maybe with respado running on the server?