Starting on or around Monday June 26th we recently ran into some issues where the Jamf Pro Binary located at /usr/local/bin/jamf was missing on newly enrolled computers. The computers would be MDM enrolled but and would receive configuration profiles but the Jamf Management Framework, including Self Service and the jamf binary would be missing. Because of this check-in and inventory were not fully taking place.
This was easily reproducible on computers by using the API to issue the redploy command curl -X POST "https://COMPANY.jamfcloud.com/api/v1/jamf-management-framework/redeploy/{id}".
After further review we found errors in the install.log during enrollment:
[******/com.jamfsoftware.enrollment.dep.quickadd] Failing installation after receiving error: Error Domain=PKInstallErrorDomain Code=100 "Authorization is required to install the packages." UserInfo={NSLocalizedDescription=Authorization is required to install the packages.}After some digging we identified there was a Configuration Profile with a Restrictions payload that enabled the setting “Require admin password to install or update apps“. Excluding a computer from the this group or unchecking this box and reinstalling resulted in the Jamf Management Framework to properly install.
It’s unclear if this was caused by the macOS 13.4.1 update or if changes to Jamf in the 10.47 upgrade caused this issue. I’ll post more after testing. For now if you use restrictions to prevent standard users from installing from the Appstore we recommend scoping this profile to computers after their enrollment is over a day ago.
Update: This issue also blocks the installation of Jamf App Catalog apps. We tested with Discord, at 15:17:00 Jamf Pro issued the InstallEnterpriseApplication - Discord - 0.0.275 command to a device, after which we saw the following error in the logs:
2023-07-03 15:17:10-07 MacBook-Pro installd[21959]: PackageKit: Install rejected with error: Error Domain=PKInstallErrorDomain Code=100 "Authorization is required to install the packages." UserInfo={NSLocalizedDescription=Authorization is required to install the packages.}
IT Notes 