In the same boat, Meraki SM still doesn't feel 100% Mojave ready, and we're now a few dot releases in. 10.14.5 Remote screen view connects, selecting things and clicking on stuff doesn't work! Not even a TCC/PPPC user consent dialogue box popup when making the connection for first time. Troubleshooting steps: spoiler: I still haven't got it working... Using this terminal command on a test Mojave Mac: $ log stream --debug --predicate 'subsystem == "com.apple.TCC" AND eventMessage BEGINSWITH "AttributionChain"' Launching remote access from Meraki Dashboard I see the following log stream: MB-Mojave-VM:~ admin$ log stream --debug --predicate 'subsystem == "com.apple.TCC" AND eventMessage BEGINSWITH "AttributionChain"' Filtering the log data using "subsystem == "com.apple.TCC" AND composedMessage BEGINSWITH "AttributionChain"" Timestamp Thread Type Activity PID TTL 2019-05-24 18:41:21.773770-0700 0x2687 Info 0x378f 201 0 tccd: [com.apple.TCC:access] AttributionChain: RESP:{ID: com.apple.bash, PID[1463], auid: 0, euid: 0, responsible path: '/Library/Application Support/Meraki/OSXvnc-server.sh', binary path: '/bin/bash'}, ACC:{ID: ??, PID[1466], auid: 0, euid: 0, binary path: '/Library/Application Support/Meraki/OSXvnc-server-4'}, REQ:{ID: com.apple.WindowServer, PID[177], auid: 88, euid: 88, binary path: '/System/Library/PrivateFrameworks/SkyLight.framework/Versions/A/Resources/WindowServer'} 2019-05-24 18:41:22.097860-0700 0x281f Info 0x0 201 0 tccd: [com.apple.TCC:access] AttributionChain: RESP:{ID: com.apple.bash, PID[1463], auid: 0, euid: 0, responsible path: '/Library/Application Support/Meraki/OSXvnc-server.sh', binary path: '/bin/bash'}, ACC:{ID: ??, PID[1466], auid: 0, euid: 0, binary path: '/Library/Application Support/Meraki/OSXvnc-server-4'}, REQ:{ID: com.apple.appleeventsd, PID[52], auid: 55, euid: 55, binary path: '/System/Library/CoreServices/appleeventsd'} 2019-05-24 18:41:22.099473-0700 0x281f Info 0x0 201 0 tccd: [com.apple.TCC:access] AttributionChain: RESP:{ID: com.apple.bash, PID[1463], auid: 0, euid: 0, responsible path: '/Library/Application Support/Meraki/OSXvnc-server.sh', binary path: '/bin/bash'}, ACC:{ID: ??, PID[1466], auid: 0, euid: 0, binary path: '/Library/Application Support/Meraki/OSXvnc-server-4'}, REQ:{ID: com.apple.appleeventsd, PID[52], auid: 55, euid: 55, binary path: '/System/Library/CoreServices/appleeventsd'} 2019-05-24 18:41:24.394726-0700 0x2687 Info 0x4692 201 0 tccd: [com.apple.TCC:access] AttributionChain: RESP:{ID: com.apple.bash, PID[1463], auid: 0, euid: 0, responsible path: '/Library/Application Support/Meraki/OSXvnc-server.sh', binary path: '/bin/bash'}, REQ:{ID: ??, PID[1466], auid: 0, euid: 0, binary path: '/Library/Application Support/Meraki/OSXvnc-server-4'} 2019-05-24 18:41:24.401944-0700 0x281f Info 0x4680 201 0 tccd: [com.apple.TCC:access] AttributionChain: RESP:{ID: com.apple.bash, PID[1463], auid: 0, euid: 0, responsible path: '/Library/Application Support/Meraki/OSXvnc-server.sh', binary path: '/bin/bash'}, ACC:{ID: ??, PID[1466], auid: 0, euid: 0, binary path: '/Library/Application Support/Meraki/OSXvnc-server-4'}, REQ:{ID: com.apple.WindowServer, PID[177], auid: 88, euid: 88, binary path: '/System/Library/PrivateFrameworks/SkyLight.framework/Versions/A/Resources/WindowServer'} ^C MB-Mojave-VM:~ admin$ (I had to paste into text editor to read each line as one line...otherwise it messy af to read in block of text) Points of interest: '/Library/Application Support/Meraki/OSXvnc-server.sh' '/Library/Application Support/Meraki/OSXvnc-server-4' com.apple.WindowServer com.apple.appleeventsd Using PPPC Utility to try and open the OSXvnc-server-4 binary in didn't do anything. Using ProfileCreator to drag it in there returned an error: The file "OSXvnc-server-4" did not have a designated code requirement for it's code signature, and cannot be used. Hmmm... For test sake, I drag /System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer into ProfileCreator and wants to confirm some things, but for the most part looks like any other signed app I’ve dragged into the profile creator. Checking the code signing of Meraki's own OSXvnc-server-4 binary seems its not signed. Why not? Shouldn’t it be? m_agent is. # codesign -dv /Library/Application\ Support/Meraki/OSXvnc-server-4 /Library/Application Support/Meraki/OSXvnc-server-4: code object is not signed at all # codesign -dv /System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer Executable=/System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer Identifier=com.apple.AppleVNCServer ... # codesign -dr - /Library/Application\ Support/Meraki/OSXvnc-server-4 /Library/Application Support/Meraki/OSXvnc-server-4: code object is not signed at all ARD Agent, again, all signed. Why is Meraki not signing their own VNC Server? Is this part of the issue? -- Manually adding in /Library/Application Support/Meraki/OSXvnc-server-4 to Security and Privacy prefs and allowing has done nothing extra. ¯\_(ツ)_/¯ Any insight from Meraki Support/Dev Team would be greatly appreciated.
... View more
