google / santa

A binary authorization and monitoring system for macOS
https://santa.dev
Apache License 2.0
4.41k stars 298 forks source link

Upon install app fails to pick up config from MDM #1198

Open chrisathook opened 11 months ago

chrisathook commented 11 months ago

Occasionally when i push Santa to a new machines via JAMF it fails to detect the config profiles for the sync server that have also been placed by the MDM. Running sudo santactl sync --debug i get this error "Missing SyncBaseURL". A restart seems to solve the issue.

izzh commented 11 months ago

I suggest you use Jamf to re-push the profile and give it a try.

p-harrison commented 11 months ago

FWIW we have noticed the same thing using Intune to push the app and config profiles. Running plutil -p "/Library/Managed Preferences/com.google.santa.plist" we can see that the managed config has landed from Intune but Santa has not picked it up yet. I saw in some previous discussion that Santa is notified about new managed config arriving, but it doesn't always seem to receive or process these notifications perhaps. Like you we've tended to just wait until the user next reboots.

dom404 commented 3 months ago

Change the name of the conf or reload the service should resolve the issue