Security

 View Only

  • 1.  Clearpass Upgraded - Jamf Pro Extension No Longer Runs Successfully

    Posted Mar 04, 2025 07:30 AM

    This issue has happened since we've upgraded out ClearPass.

    Prior to this we had running the "Jamf Pro" extension within our ClearPass Guest "extensions" used to authenticate our Jamf devices using 0auth2.

    Now after the upgrade we are running on: ClearPass: 6.11.1.251304 

    However since this upgrade we can no longer run the "Jamf Pro" extension I've tried the original extension on version: 4.2.11 and the latest version on 4.3.2 both using the original working config however it goes through the process and the logs show it's positive then it just stops with the error "Sigterm".

    I found that after the upgrade we hadn't re-enabled the the "Access" or "Onboard" Application licences - however upon activating these it still hasn't fixed the issue.

    Hopeful I might find some answers here on anything that might be missed since upgrading Clearpass to get this extension to work.



  • 2.  RE: Clearpass Upgraded - Jamf Pro Extension No Longer Runs Successfully

    Posted Mar 04, 2025 07:41 AM

    First of all, I would recommended to upgrade ClearPass to the latest patch release of 6.11. Latest patch is 6.11.10.

    Is there any error showed in the Extension log?



    ------------------------------
    Willem Bargeman
    Systems Engineer Aruba
    ACEX #125
    ------------------------------

    Original Message


  • 3.  RE: Clearpass Upgraded - Jamf Pro Extension No Longer Runs Successfully

    Posted Mar 04, 2025 08:11 AM

    Hi Willem,

    Is there a feature reason for upgrading further to x.x.10?

    That might not be possible for a while.

    The logs running from the extension itself are as follows:

    [2025-03-04T11:26:46.809] [INFO] JAMF - Initialising Jamf extension...
[2025-03-04T11:26:46.869] [INFO] JAMF - Server version information load complete (Version: 6.11.1.251304).
[2025-03-04T11:26:46.870] [WARN] JAMF - No stats credentials found in configuration.  Update "statsUsername" and "statsPassword".
[2025-03-04T11:26:46.870] [INFO] JAMF - Stats tracking is disabled. A placeholder webservice will be started...
[2025-03-04T11:26:46.870] [INFO] JAMF - Starting stats web service...
[2025-03-04T11:26:46.872] [INFO] JAMF - Starting liveness web service...
[2025-03-04T11:26:46.872] [INFO] JAMF - Starting base web services...
[2025-03-04T11:26:46.873] [INFO] JAMF - This extension supports Aruba Skyhook for realtime updates.
[2025-03-04T11:26:46.873] [INFO] JAMF - You must configure a Skyhook tenant (skyhookTenant) and access token (dbAccessToken) to use Webhooks. No webhooks will be processed.
[2025-03-04T11:26:46.874] [INFO] JAMF - TOKEN: No token exists - creating.
[2025-03-04T11:26:46.886] [INFO] JAMF - Stats web server listening on port 8080.
[2025-03-04T11:26:46.886] [INFO] JAMF - Liveness web server listening on port 7070.
[2025-03-04T11:26:46.886] [INFO] JAMF - Base web services listening on port 80.
[2025-03-04T11:26:47.067] [INFO] JAMF - API Token Generated. Token expires at Tue Mar 04 2025 11:27:47 GMT+0000 (Greenwich Mean Time) (59.933 seconds).
[2025-03-04T11:26:47.068] [INFO] JAMF - TOKEN: Next rotation in 29.966 seconds.
[2025-03-04T11:26:47.068] [INFO] JAMF - Checking to see if the script "cppm-all-mac-addresses" exists...
[2025-03-04T11:26:47.068] [INFO] JAMF - TOKEN: Token fast approaching expiration - rotating.
[2025-03-04T11:26:47.247] [INFO] JAMF - API Token Generated. Token expires at Tue Mar 04 2025 11:27:47 GMT+0000 (Greenwich Mean Time) (59.753 seconds).
[2025-03-04T11:26:47.247] [INFO] JAMF - TOKEN: Next rotation in 29.876 seconds.
[2025-03-04T11:26:47.307] [INFO] JAMF - The script "cppm-all-mac-addresses" already exists.
[2025-03-04T11:26:47.308] [INFO] JAMF - The system is set to sync all devices using the schedule */30 * * * *.
[2025-03-04T11:26:47.323] [INFO] JAMF - First sync all update at: Tue Mar 04 2025 11:30:00 GMT+0000 (Greenwich Mean Time).
[2025-03-04T11:26:47.324] [INFO] JAMF - Extension processes have been initialized.
[2025-03-04T11:27:15.797] [ERROR] JAMF - Process State: About to exit with code: SIGTERM

    This is pretty similar to what was being shown when it was working, it's why I wander if something isn't correct within ClearPass itself for it to then just stop running 5 seconds later.


    Original Message


  • 4.  RE: Clearpass Upgraded - Jamf Pro Extension No Longer Runs Successfully

    Posted Mar 04, 2025 09:15 AM

    There was an issue where extensions sometimes stopped. This is fixed in 6.11.5 but not sure if you're hitting this issue. See the release notes for more info.

    Bug info from the release notes

    CP‑49387

    CP‑50919

    Corrected an issue where certain extensions and the ClearPass Stats collection service were sometimes unresponsive while restarting, and log messages showed them in a disabled state.

    I can be helpful to enable debug logging but I think nothing helpful will be logged there. This because SIGTERM means that something told the Extension to be stopped.

    Because this is a really specific issue I would recommended to open a TAC case for future analysis. 



    ------------------------------
    Willem Bargeman
    Systems Engineer Aruba
    ACEX #125
    ------------------------------

    Original Message


  • 5.  RE: Clearpass Upgraded - Jamf Pro Extension No Longer Runs Successfully

    Posted Mar 05, 2025 02:16 AM

    You should always apply the latest patches within a major software train. They contain a multitude of bug fixes and improvements.

    I have several deployments running JAMF Pro without issue on 6.11 - I would either patch or open a TAC case (though they will likely tell you to patch)


    Original Message


Related Content