I don't see some hosts

LaurentB · Jun 13, 2018, 2:21 PM

Hi all, i have a problem with some off my client which i don’t see in the “pendding host”.

Server :
FOG Version: 1.5.3
OS: Ubuntu Linux

Client :
Fog Version: 0.11.16
OS: windows 10

IT park : about 1200 computers

After a problem in my certificates i just made a fresh installation of all of my clients.
Some works perfectly and i could see it in the menu “List all hosts”, BUT some don’t appears …

If i look in the fog.log i could see this message :

------------------------------------------------------------------------------
----------------------------------UserTracker---------------------------------
------------------------------------------------------------------------------
 13/06/2018 08:48 Client-Info Client Version: 0.11.16
 13/06/2018 08:48 Client-Info Client OS:      Windows
 13/06/2018 08:48 Client-Info Server Version: 1.5.3
 13/06/2018 08:48 Middleware::Response ERROR: Unable to get subsection
 13/06/2018 08:48 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.
 13/06/2018 08:48 Service Sleeping for 177 seconds
 13/06/2018 08:51 Middleware::Communication URL: http://srv-fog1-n0/fog/management/index.php?sub=requestClientInfo&configure&newService&json
 13/06/2018 08:51 Middleware::Response Success
 13/06/2018 08:51 Middleware::Communication URL: http://srv-fog1-n0/fog/management/index.php?sub=requestClientInfo&mac=00:09:0F:AA:00:01|88:B1:11:2A:4B:6C|88:B1:11:2A:4B:6D|18:60:24:4A:D3:FE|00:09:0F:FE:00:01&newService&json
 13/06/2018 08:51 Middleware::Authentication Waiting for authentication timeout to pass
 13/06/2018 08:51 Middleware::Communication Download: http://srv-fog1-n0/fog/management/other/ssl/srvpublic.crt
 13/06/2018 08:51 Data::RSA FOG Server CA cert found
 13/06/2018 08:51 Middleware::Authentication Cert OK
 13/06/2018 08:51 Middleware::Authentication No token found at C:\Program Files (x86)\FOG\token.dat, this is expected if the client has not authenticated before
 13/06/2018 08:51 Middleware::Authentication ERROR: Could not get security token
 13/06/2018 08:51 Middleware::Authentication ERROR: Le fichier 'C:\Program Files (x86)\FOG\token.dat' est introuvable.
 13/06/2018 08:51 Middleware::Communication POST URL: http://srv-fog1-n0/fog/management/index.php?sub=requestClientInfo&authorize&newService
 13/06/2018 08:51 Middleware::Response Invalid security token
 13/06/2018 08:51 Middleware::Response Success
 13/06/2018 08:51 Middleware::Communication URL: http://srv-fog1-n0/fog/service/getversion.php?clientver&newService&json
 13/06/2018 08:51 Middleware::Communication URL: http://srv-fog1-n0/fog/service/getversion.php?newService&json

 13/06/2018 08:51 Service Creating user agent cache
 13/06/2018 08:51 Middleware::Response ERROR: Unable to get subsection
 13/06/2018 08:51 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.
 13/06/2018 08:51 Middleware::Response ERROR: Unable to get subsection
 13/06/2018 08:51 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.
 13/06/2018 08:51 Middleware::Response ERROR: Unable to get subsection
 13/06/2018 08:51 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.

After this i run this mysql command :

mysql
use fog
UPDATE hosts SET hostPubKey="", hostSecToken="", hostSecTime="2018-06-13 14:30:00";

and after a reboot of the client the new error message in fog.log is the following :


 13/06/2018 10:27 Client-Info Version: 0.11.16
 13/06/2018 10:27 Client-Info OS:      Windows
 13/06/2018 10:27 Middleware::Authentication Waiting for authentication timeout to pass
 13/06/2018 10:27 Middleware::Communication Download: http://srv-fog1-n0/fog/management/other/ssl/srvpublic.crt
 13/06/2018 10:27 Data::RSA FOG Server CA cert found
 13/06/2018 10:27 Middleware::Authentication Cert OK
 13/06/2018 10:27 Middleware::Authentication No token found at C:\Program Files (x86)\FOG\token.dat, this is expected if the client has not authenticated before
 13/06/2018 10:27 Middleware::Authentication ERROR: Could not get security token
 13/06/2018 10:27 Middleware::Authentication ERROR: Le fichier 'C:\Program Files (x86)\FOG\token.dat' est introuvable.
 13/06/2018 10:27 Middleware::Communication POST URL: http://srv-fog1-n0/fog/management/index.php?sub=requestClientInfo&authorize&newService
 13/06/2018 10:27 Middleware::Response Invalid security token

I also try to execute the command “Database Maintenance Commands” in https://wiki.fogproject.org/wiki/index.php?title=Troubleshoot_MySQL#Hosts_think_they_are_not_registered_.2F_can.27t_register_.2F_other_weirdness
but it’s always the same.

Any ideas to resolve this ???

Wayne Workman · Jun 13, 2018, 7:46 PM

@laurentb have you tried manually uninstalling & reinstalling the fog client on this particular machine & then rebooting?

LaurentB · Jun 14, 2018, 7:39 AM

@Wayne-Workman yes i uninstall manually and reinstall, i also made a script in my AD like this :

@echo on
Echo "Test if FOG already exist"
If exist "C:\Program Files (x86)\FOG\settings.json" goto :REINSTALL

Echo "Installation de fog"
msiexec.exe /i "\\xxx\FOGNew.msi" WEBADDRESS="srv-fog1-n0" /quiet /norestart /Lvx "c:\NewInstallFog.log"
ping 127.0.0.1 -n 15 > nul
goto :FIN

:REINSTALL
Echo "REInstallation de fog"
msiexec.exe /i "\\xxx\FOGNew.msi" WEBADDRESS="srv-fog1-n0" /quiet /norestart /Lvx "c:\NewInstallFog.log" REINSTALL=ALL REINSTALLMODE=A
ping 127.0.0.1 -n 15 > nul
net start fogservice
goto :FIN

:FIN

LaurentB · Jun 14, 2018, 7:45 AM

And if i look the actual fog.log i got this :


------------------------------------------------------------------------------
----------------------------------UserTracker---------------------------------
------------------------------------------------------------------------------
 14/06/2018 09:38 Client-Info Client Version: 0.11.16
 14/06/2018 09:38 Client-Info Client OS:      Windows
 14/06/2018 09:38 Client-Info Server Version: 1.5.3
 14/06/2018 09:38 Middleware::Response ERROR: Unable to get subsection
 14/06/2018 09:38 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.
 14/06/2018 09:38 Service Sleeping for 149 seconds
 14/06/2018 09:41 Middleware::Communication URL: http://srv-fog1-n0/fog/management/index.php?sub=requestClientInfo&configure&newService&json
 14/06/2018 09:41 Middleware::Response Success
 14/06/2018 09:41 Middleware::Communication URL: http://srv-fog1-n0/fog/management/index.php?sub=requestClientInfo&mac=00:09:0F:AA:00:01|88:B1:11:2A:4B:6C|88:B1:11:2A:4B:6D|18:60:24:4A:D3:FE|00:09:0F:FE:00:01&newService&json
 14/06/2018 09:41 Middleware::Authentication Waiting for authentication timeout to pass
 14/06/2018 09:41 Middleware::Communication Download: http://srv-fog1-n0/fog/management/other/ssl/srvpublic.crt
 14/06/2018 09:41 Data::RSA FOG Server CA cert found
 14/06/2018 09:41 Middleware::Authentication Cert OK
 14/06/2018 09:41 Middleware::Authentication No token found at C:\Program Files (x86)\FOG\token.dat, this is expected if the client has not authenticated before
 14/06/2018 09:41 Middleware::Authentication ERROR: Could not get security token
 14/06/2018 09:41 Middleware::Authentication ERROR: Le fichier 'C:\Program Files (x86)\FOG\token.dat' est introuvable.
 14/06/2018 09:41 Middleware::Communication POST URL: http://srv-fog1-n0/fog/management/index.php?sub=requestClientInfo&authorize&newService
 14/06/2018 09:41 Middleware::Response Invalid security token
 14/06/2018 09:41 Middleware::Response Success
 14/06/2018 09:41 Middleware::Communication URL: http://srv-fog1-n0/fog/service/getversion.php?clientver&newService&json
 14/06/2018 09:41 Middleware::Communication URL: http://srv-fog1-n0/fog/service/getversion.php?newService&json

 14/06/2018 09:41 Service Creating user agent cache
 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection
 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.
 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection
 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.
 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection
 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.

------------------------------------------------------------------------------
---------------------------------ClientUpdater--------------------------------
------------------------------------------------------------------------------
 14/06/2018 09:41 Client-Info Client Version: 0.11.16
 14/06/2018 09:41 Client-Info Client OS:      Windows
 14/06/2018 09:41 Client-Info Server Version: 1.5.3
 14/06/2018 09:41 Middleware::Response Success
------------------------------------------------------------------------------


------------------------------------------------------------------------------
----------------------------------TaskReboot----------------------------------
------------------------------------------------------------------------------
 14/06/2018 09:41 Client-Info Client Version: 0.11.16
 14/06/2018 09:41 Client-Info Client OS:      Windows
 14/06/2018 09:41 Client-Info Server Version: 1.5.3
 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection
 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.

------------------------------------------------------------------------------
--------------------------------HostnameChanger-------------------------------
------------------------------------------------------------------------------
 14/06/2018 09:41 Client-Info Client Version: 0.11.16
 14/06/2018 09:41 Client-Info Client OS:      Windows
 14/06/2018 09:41 Client-Info Server Version: 1.5.3
 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection
 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.

------------------------------------------------------------------------------
---------------------------------SnapinClient---------------------------------
------------------------------------------------------------------------------
 14/06/2018 09:41 Client-Info Client Version: 0.11.16
 14/06/2018 09:41 Client-Info Client OS:      Windows
 14/06/2018 09:41 Client-Info Server Version: 1.5.3
 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection
 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.

------------------------------------------------------------------------------
--------------------------------PrinterManager--------------------------------
------------------------------------------------------------------------------
 14/06/2018 09:41 Client-Info Client Version: 0.11.16
 14/06/2018 09:41 Client-Info Client OS:      Windows
 14/06/2018 09:41 Client-Info Server Version: 1.5.3
 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection
 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.

------------------------------------------------------------------------------
--------------------------------PowerManagement-------------------------------
------------------------------------------------------------------------------
 14/06/2018 09:41 Client-Info Client Version: 0.11.16
 14/06/2018 09:41 Client-Info Client OS:      Windows
 14/06/2018 09:41 Client-Info Server Version: 1.5.3
 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection
 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.

------------------------------------------------------------------------------
----------------------------------UserTracker---------------------------------
------------------------------------------------------------------------------
 14/06/2018 09:41 Client-Info Client Version: 0.11.16
 14/06/2018 09:41 Client-Info Client OS:      Windows
 14/06/2018 09:41 Client-Info Server Version: 1.5.3
 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection
 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet.
 14/06/2018 09:41 Service Sleeping for 122 seconds

Sebastian Roth · Jun 14, 2018, 5:49 PM

@LaurentB I haven’t read through the whole thread, so sorry if this has been said and tried already: Did you reset the encryption data in the web UI for this client (see host settings)?

LaurentB · Jun 18, 2018, 6:52 AM

@Sebastian-Roth i cannot do that because the client wasn’t in my host list ! (it’s my problem).
moreover I’ve never seen this option…

Sebastian Roth · Jun 18, 2018, 6:24 PM

@laurentb Looking through the code and the messages you posted again I might have found some interesting point here. See the list of MAC addresses the clients sends: 00:09:0F:AA:00:01|88:B1:11:2A:4B:6C|88:B1:11:2A:4B:6D|18:60:24:4A:D3:FE|00:09:0F:FE:00:01

The very first one seems to be one by Fortinet Inc. and it looks kind of generic ending on 00:01. So I searched the web and found this: https://forum.fortinet.com/tm.aspx?m=17420

Any chance you have some kind of IPSec VPN client running on that machine? I am wondering if our fog-client is just being confused by that MAC address especially as you don’t seem to have registered that client with your FOG server yet. What do you think @Joe-Schmitt? You know a lot better how the fog-client handles several MACs…

LaurentB · Jun 19, 2018, 8:25 AM

Yeahhhh Absolutely right ! I have a Fortigate firewall for all my site AND in some computer (about 350) i also have the Forticlient VPN when the computers want to connect from the outside !

So… how i could solve that… ???
Is there a way to ignore this particular MAC adress in fog ?

Quazz · Jun 19, 2018, 8:33 AM

@laurentb You can edit clients and ignore specific MAC on that client.

I don’t believe there’s currently a way to do it for a group since each client is presumed to have unique MAC addresses.

LaurentB · Jun 19, 2018, 8:46 AM

@quazz i can’t edit the client because i don’t see the client in my pending hosts

Quazz · Jun 19, 2018, 2:50 AM

@laurentb I know that, but presumably there will be another client that already has that MAC is my thinking. Although, I don’t know if that will allow you to add the other host as it may still complain about duplicate MACs

LaurentB · Jun 19, 2018, 8:58 AM

@Quazz ok but there is a way to look for the hosts who have this duplicate MAC ?

In the menu “list all hosts” i don’t have the possibility search by MAC and in the menu “Host Listing Export” it don’t find any “00:09:0F:AA:00:01”.

Quazz · Jun 19, 2018, 9:03 AM

@laurentb Interesting, that means none of the clients with this software have been able to retrieve their security tokens from the server.

We’ll likely have to wait on @Joe-Schmitt 's input on this as he is the main developer of the client.

Sebastian Roth · Jun 20, 2018, 5:40 PM

@LaurentB I think you should start by filtering those MACs. Go to FOG Configuration -> FOG Settings -> FOG Client - Host Register and set QUICKREG PENDING MAC FILTER to 00:09:0F. Now with that no clients should be able to register those MACs anymore. But we also need to see if there are entries with those MACs in the database and clear those:

shell> mysql -u root -p
Enter password: 
...
mysql> use fog;
Database changed

mysql> SELECT hmID,hmHostID,hmMAC,hmPending FROM hostMAC WHERE hmMAC LIKE '%00:09:0F%';

Post output here…

PS: Turns out Joe is very busy at the moment so we’ll have to try and sort this one out.

LaurentB · Jun 21, 2018, 7:45 AM

I made the change and the SQL, the result follows :

root@srv-fog1-n0:~# mysql
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 6992132
Server version: 5.7.22-0ubuntu18.04.1 (Ubuntu)

Copyright (c) 2000, 2018, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> use fog
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Database changed
mysql> SELECT hmID,hmHostID,hmMAC,hmPending FROM hostMAC WHERE hmMAC LIKE '%00:09:0F%';
+------+----------+-------------------+-----------+
| hmID | hmHostID | hmMAC             | hmPending |
+------+----------+-------------------+-----------+
|   13 |        5 | 00:09:0f:fe:00:01 | 0         |
| 1817 |        5 | 00:09:0f:aa:00:01 | 0         |
+------+----------+-------------------+-----------+
2 rows in set (0.00 sec)

mysql>

LaurentB · Jun 22, 2018, 9:50 AM

@Quazz and @Sebastian-Roth have you an idea ?

LaurentB · Jun 25, 2018, 1:12 PM

are you there ?

Quazz · Jun 26, 2018, 12:11 PM

@laurentb Sorry, I didn’t really know how to proceed on this, I don’t really use clients often myself.

The host with ID 5 has the offending MAC address, see if you can remove it from that one as a starting point.

LaurentB · Jun 26, 2018, 3:28 PM

@Quazz could you tell me how ? i’m not really good in mysql…

Sebastian Roth · Jun 26, 2018, 5:51 PM

@LaurentB I am real sorry. Have been very busy in the last days and could’t find the time to answer. To delete those entries form the hostMAC table follow this:

shell> mysql -u root -p
Enter password: 
...
mysql> use fog;
Database changed

mysql> DELETE FROM hostMAC WHERE hmMAC LIKE '%00:09:0F%';

After that you might want to check if there is still a MAC entry for that host - hope there is:

mysql> SELECT hmID,hmHostID,hmMAC,hmPending,hmPrimary FROM hostMAC WHERE hmHostID = 5;

I don't see some hosts

217

12.0k

17.3k

155.2k