git 4551: Error: Required Domain Joining information is Missing

dwood · Sep 1, 2015, 9:36 PM

Yes, this is what I see.

#!ok=ComputerName01 #AD=1 #ADDom=Mydomain.com #ADOU= #ADUser=Mydomain.com\Administrator #ADPass=

Wayne Workman · Sep 1, 2015, 9:48 PM

I think that @Jbob should probably at least read through your thread - if something truly is wrong with the new client and/or FOG (and I don’t know if there is or not), I want him to know about it.

Tom Elliott · Sep 1, 2015, 9:55 PM

@dwood Based on what I’m seeing there, your using the legacy client still?

Tom Elliott · Sep 2, 2015, 5:44 AM

@dwood One of the new (features?) caveats to be aware of with the development FOG is that you have a new and legacy client. The way it handles passwords are separate. We created two fields in the default active directory flags. One that takes the “new client method” by typing in the plaintext password and saving it encrypts and stores the encrypted password to the “FOG_AD_DEFAULT_PASSWORD” or whatever you type in per the host/group ad password to the relevant item. This, being relatively new, also meant I cannot guess what your old password is/was. Maybe a flaw on my initial implementation, but a caveat to be aware of nonetheless.

To maintain backward compatibility, I created a field that is Identical to the “default” password but added the text: Legacy. This field does not take the plaintext password, rather the old FOGCrypted password of your plaintext password. This field is what is used for the Legacy client. During the change over, I was unable to get the original value that probably contained the fogcrypted value. It’s relatively simple to recover from though.

tian · Sep 3, 2015, 12:52 PM

The same problem seems to happen with SVN3959/GIT4557.

Here is the HostnameChanger part of the log on the client:

------------------------------------------------------------------------------
--------------------------------HostnameChanger-------------------------------
------------------------------------------------------------------------------
 03.09.2015 13:32 Client-Info Version: 0.9.4
 03.09.2015 13:32 HostnameChanger Running...
 03.09.2015 13:32 Middleware::Communication URL: http://IPofFOGSERVER/fog/service/servicemodule-active.php?moduleid=hostnamechanger&mac=MACfromNIC|MACfromVirtualBox|&newService=1
 03.09.2015 13:32 Middleware::Communication Response: Success
 03.09.2015 13:32 Middleware::Communication URL: http://IPofFOGSERVER/fog/service/hostname.php?moduleid=hostnamechanger&mac=MACfromNIC|MACfromVirtualBox|&newService=1
 03.09.2015 13:32 Middleware::Communication Response: Invalid host certificate
 03.09.2015 13:32 Middleware::Communication URL: http://IPofFOGSERVER/fog/management/other/ssl/srvpublic.crt
 03.09.2015 13:32 Data::RSA CA cert found
 03.09.2015 13:32 Middleware::Authentication Cert OK
 03.09.2015 13:32 Middleware::Communication POST URL: http://IPofFOGSERVER/fog/management/index.php?sub=authorize
 03.09.2015 13:32 Middleware::Communication Response: Success
 03.09.2015 13:32 Middleware::Authentication Authenticated
 03.09.2015 13:32 Middleware::Communication URL: http://IPofFOGSERVER/fog/service/hostname.php?moduleid=hostnamechanger&mac=MACfromNIC|MACfromVirtualBox|&newService=1&newService=1
 03.09.2015 13:32 Middleware::Communication Response: Success
 03.09.2015 13:32 HostnameChanger Checking Hostname
 03.09.2015 13:32 HostnameChanger Hostname is correct
 03.09.2015 13:32 HostnameChanger Registering host with active directory
 03.09.2015 13:32 HostnameChanger ERROR: Required Domain Joining information is missing
 03.09.2015 13:32 HostnameChanger Activing host with product key
------------------------------------------------------------------------------

The srvpublic.crt exists and was last changed with the update to SVN3959

Going to “http://IP.OF.FOG.HERE/fog/service/hostname.php?mac=MACOFHOSTTOJOINAD” results in:

#!ok=OURCOMPUTERNAME #AD=1 #ADDom=OURDOMAIN #ADOU= #ADUser=OURDOMAIN\OURUSER #ADPass=

The last Version of FOG I remember the Domain Join worked was SVN3901/GIT4457. Resetting the Encryption Data doesn’t help.

The Legacy Domain Password is empty since we just use the new Client with the new FOG Server. The Image (Windows 7 Prof.) contains the FOG-Client 0.94.

tian · Sep 4, 2015, 11:09 AM

some additional information:

After:

filling the “Active Directory Defaults” with fake AD and User Data
Save
filling in the “Active Directory Defaults” values from before (including the FOG_AD_DEFAULT_PASSWORD to re-encrypt)
save
resetting the host encryption data
the log entry changed to the following (for once only - the HostnameChanger log entries after this look like the one I posted before)

------------------------------------------------------------------------------
--------------------------------HostnameChanger-------------------------------
------------------------------------------------------------------------------
 04.09.2015 12:46 Client-Info Version: 0.9.4
 04.09.2015 12:46 HostnameChanger Running...
 04.09.2015 12:46 Middleware::Communication URL: http://IPofFOGSERVER/fog/service/servicemodule-active.php?moduleid=hostnamechanger&mac=MACfromNIC|MACfromVirtualBox|&newService=1
 04.09.2015 12:46 Middleware::Communication Response: Success
 04.09.2015 12:46 Middleware::Communication URL: http://IPofFOGSERVER/fog/service/hostname.php?moduleid=hostnamechanger&mac=MACfromNIC|MACfromVirtualBox|&newService=1
 04.09.2015 12:46 Middleware::Communication Response: Success
 04.09.2015 12:46 HostnameChanger Checking Hostname
 04.09.2015 12:46 HostnameChanger Hostname is correct
 04.09.2015 12:46 HostnameChanger Registering host with active directory
 04.09.2015 12:46 HostnameChanger ERROR: Required Domain Joining information is missing
 04.09.2015 12:46 HostnameChanger Activing host with product key
------------------------------------------------------------------------------```

Tom Elliott · Sep 4, 2015, 9:32 PM

@tian said:

“http://IP.OF.FOG.HERE/fog/service/hostname.php?mac=MACOFHOSTTOJOINAD”

Of course blocking out sensitive information, what is the output if you goto:
http://IP.OF.FOG.HERE/fog/service/hostname.php?mac=MACOFHOSTTOJOINAD&newService

Is the password correct? This may or may not work properly, as it should return either IHC (Invalid Host Certificate) or #enkey=RandomGarble

tian · Sep 9, 2015, 4:17 PM

@Tom-Elliott said:

@tian said:

“http://IP.OF.FOG.HERE/fog/service/hostname.php?mac=MACOFHOSTTOJOINAD”

Of course blocking out sensitive information, what is the output if you goto:
http://IP.OF.FOG.HERE/fog/service/hostname.php?mac=MACOFHOSTTOJOINAD&newService

Is the password correct? This may or may not work properly, as it should return either IHC (Invalid Host Certificate) or #enkey=RandomGarble

Thanks for your help.

Going to the page you mention I get “#!ihc” as a result.

The domain user to join the domain is working correctly when joining the domain manually. The password/user is the same as I entered in fog (username without domain).

(The Hostname Changer services is activated and the computer’s name gets renamed correctly based on the name in fog. The computer I get the Image from is removed from the domain and restarted before uploading.)

Maybe tomorrow or on Friday (or next week …) I will try the newest SVN/GIT and check if anything is different to the currently installed SVN/GIT.

tian · Sep 10, 2015, 2:07 PM

Today I updated to SVN3973/GIT4486 and re-entered the (same) AD join data and reset the host encryption keys and suddenly it works again:

...
 10.09.2015 14:19 HostnameChanger Checking Hostname
 10.09.2015 14:19 HostnameChanger Hostname is correct
 10.09.2015 14:19 HostnameChanger Registering host with active directory
 10.09.2015 14:19 HostnameChanger Success, code =  0
 10.09.2015 14:19 Power Creating shutdown request
 10.09.2015 14:19 Power Parameters: /r /c "Host joined to Active Directory, restart required" /t 0
 10.09.2015 14:19 HostnameChanger Activing host with product key

The log entries after this still contain “Middleware::Communication Response: Invalid host certificate”, but additionally also “HostnameChanger The machine is already joined to the domain, code = 2691” is there instead of “ERROR: Required Domain Joining information is missing”.

going to:
http://IP.OF.FOG.HERE/fog/service/hostname.php?mac=MACOFHOSTTOJOINAD
and
http://IP.OF.FOG.HERE/fog/service/hostname.php?mac=MACOFHOSTTOJOINAD&newService
resulted in the same outputs as when it was not working.

I really don’t know why it is working now - on the client computer nothing was changed since yesterday.

Joe Schmitt · Sep 10, 2015, 2:37 PM

@tian unfortunately I cannot replicate your issue.Would I be able to teamviewer in sometime today / tommorow ? (PM me with details).

milley · Sep 11, 2015, 7:10 AM

I have similiar issue, trying to join Windows 7 machine to AD.

I’ve tried different variations of parameters, in different ways I give administrator name and password and nothing, all the time error 1326.

But I noticed today that when HostnameChanger try to add machine to the AD, password in the database is changing as if it was encrypted again. Is this normal?

On the machine is installed FOGService 0.9.4 and on server FOG 4586 from git

git 4551: Error: Required Domain Joining information is Missing

158

12.0k

17.3k

155.2k