I don't see some hosts
-
@Wayne-Workman yes i uninstall manually and reinstall, i also made a script in my AD like this :
@echo on Echo "Test if FOG already exist" If exist "C:\Program Files (x86)\FOG\settings.json" goto :REINSTALL Echo "Installation de fog" msiexec.exe /i "\\xxx\FOGNew.msi" WEBADDRESS="srv-fog1-n0" /quiet /norestart /Lvx "c:\NewInstallFog.log" ping 127.0.0.1 -n 15 > nul goto :FIN :REINSTALL Echo "REInstallation de fog" msiexec.exe /i "\\xxx\FOGNew.msi" WEBADDRESS="srv-fog1-n0" /quiet /norestart /Lvx "c:\NewInstallFog.log" REINSTALL=ALL REINSTALLMODE=A ping 127.0.0.1 -n 15 > nul net start fogservice goto :FIN :FIN -
And if i look the actual fog.log i got this :
------------------------------------------------------------------------------ ----------------------------------UserTracker--------------------------------- ------------------------------------------------------------------------------ 14/06/2018 09:38 Client-Info Client Version: 0.11.16 14/06/2018 09:38 Client-Info Client OS: Windows 14/06/2018 09:38 Client-Info Server Version: 1.5.3 14/06/2018 09:38 Middleware::Response ERROR: Unable to get subsection 14/06/2018 09:38 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. 14/06/2018 09:38 Service Sleeping for 149 seconds 14/06/2018 09:41 Middleware::Communication URL: http://srv-fog1-n0/fog/management/index.php?sub=requestClientInfo&configure&newService&json 14/06/2018 09:41 Middleware::Response Success 14/06/2018 09:41 Middleware::Communication URL: http://srv-fog1-n0/fog/management/index.php?sub=requestClientInfo&mac=00:09:0F:AA:00:01|88:B1:11:2A:4B:6C|88:B1:11:2A:4B:6D|18:60:24:4A:D3:FE|00:09:0F:FE:00:01&newService&json 14/06/2018 09:41 Middleware::Authentication Waiting for authentication timeout to pass 14/06/2018 09:41 Middleware::Communication Download: http://srv-fog1-n0/fog/management/other/ssl/srvpublic.crt 14/06/2018 09:41 Data::RSA FOG Server CA cert found 14/06/2018 09:41 Middleware::Authentication Cert OK 14/06/2018 09:41 Middleware::Authentication No token found at C:\Program Files (x86)\FOG\token.dat, this is expected if the client has not authenticated before 14/06/2018 09:41 Middleware::Authentication ERROR: Could not get security token 14/06/2018 09:41 Middleware::Authentication ERROR: Le fichier 'C:\Program Files (x86)\FOG\token.dat' est introuvable. 14/06/2018 09:41 Middleware::Communication POST URL: http://srv-fog1-n0/fog/management/index.php?sub=requestClientInfo&authorize&newService 14/06/2018 09:41 Middleware::Response Invalid security token 14/06/2018 09:41 Middleware::Response Success 14/06/2018 09:41 Middleware::Communication URL: http://srv-fog1-n0/fog/service/getversion.php?clientver&newService&json 14/06/2018 09:41 Middleware::Communication URL: http://srv-fog1-n0/fog/service/getversion.php?newService&json 14/06/2018 09:41 Service Creating user agent cache 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ ---------------------------------ClientUpdater-------------------------------- ------------------------------------------------------------------------------ 14/06/2018 09:41 Client-Info Client Version: 0.11.16 14/06/2018 09:41 Client-Info Client OS: Windows 14/06/2018 09:41 Client-Info Server Version: 1.5.3 14/06/2018 09:41 Middleware::Response Success ------------------------------------------------------------------------------ ------------------------------------------------------------------------------ ----------------------------------TaskReboot---------------------------------- ------------------------------------------------------------------------------ 14/06/2018 09:41 Client-Info Client Version: 0.11.16 14/06/2018 09:41 Client-Info Client OS: Windows 14/06/2018 09:41 Client-Info Server Version: 1.5.3 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ --------------------------------HostnameChanger------------------------------- ------------------------------------------------------------------------------ 14/06/2018 09:41 Client-Info Client Version: 0.11.16 14/06/2018 09:41 Client-Info Client OS: Windows 14/06/2018 09:41 Client-Info Server Version: 1.5.3 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ ---------------------------------SnapinClient--------------------------------- ------------------------------------------------------------------------------ 14/06/2018 09:41 Client-Info Client Version: 0.11.16 14/06/2018 09:41 Client-Info Client OS: Windows 14/06/2018 09:41 Client-Info Server Version: 1.5.3 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ --------------------------------PrinterManager-------------------------------- ------------------------------------------------------------------------------ 14/06/2018 09:41 Client-Info Client Version: 0.11.16 14/06/2018 09:41 Client-Info Client OS: Windows 14/06/2018 09:41 Client-Info Server Version: 1.5.3 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ --------------------------------PowerManagement------------------------------- ------------------------------------------------------------------------------ 14/06/2018 09:41 Client-Info Client Version: 0.11.16 14/06/2018 09:41 Client-Info Client OS: Windows 14/06/2018 09:41 Client-Info Server Version: 1.5.3 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ ----------------------------------UserTracker--------------------------------- ------------------------------------------------------------------------------ 14/06/2018 09:41 Client-Info Client Version: 0.11.16 14/06/2018 09:41 Client-Info Client OS: Windows 14/06/2018 09:41 Client-Info Server Version: 1.5.3 14/06/2018 09:41 Middleware::Response ERROR: Unable to get subsection 14/06/2018 09:41 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. 14/06/2018 09:41 Service Sleeping for 122 seconds -
@LaurentB I haven’t read through the whole thread, so sorry if this has been said and tried already: Did you reset the encryption data in the web UI for this client (see host settings)?
-
@Sebastian-Roth i cannot do that because the client wasn’t in my host list ! (it’s my problem).
moreover I’ve never seen this option… -
@laurentb Looking through the code and the messages you posted again I might have found some interesting point here. See the list of MAC addresses the clients sends: 00:09:0F:AA:00:01|88:B1:11:2A:4B:6C|88:B1:11:2A:4B:6D|18:60:24:4A:D3:FE|00:09:0F:FE:00:01
The very first one seems to be one by Fortinet Inc. and it looks kind of generic ending on
00:01. So I searched the web and found this: https://forum.fortinet.com/tm.aspx?m=17420Any chance you have some kind of IPSec VPN client running on that machine? I am wondering if our fog-client is just being confused by that MAC address especially as you don’t seem to have registered that client with your FOG server yet. What do you think @Joe-Schmitt? You know a lot better how the fog-client handles several MACs…
-
Yeahhhh Absolutely right ! I have a Fortigate firewall for all my site AND in some computer (about 350) i also have the Forticlient VPN when the computers want to connect from the outside !
So… how i could solve that… ???
Is there a way to ignore this particular MAC adress in fog ? -
@laurentb You can edit clients and ignore specific MAC on that client.
I don’t believe there’s currently a way to do it for a group since each client is presumed to have unique MAC addresses.
-
@quazz i can’t edit the client because i don’t see the client in my pending hosts
-
@laurentb I know that, but presumably there will be another client that already has that MAC is my thinking. Although, I don’t know if that will allow you to add the other host as it may still complain about duplicate MACs
-
@Quazz ok but there is a way to look for the hosts who have this duplicate MAC ?
In the menu “list all hosts” i don’t have the possibility search by MAC and in the menu “Host Listing Export” it don’t find any “00:09:0F:AA:00:01”.
-
@laurentb Interesting, that means none of the clients with this software have been able to retrieve their security tokens from the server.
We’ll likely have to wait on @Joe-Schmitt 's input on this as he is the main developer of the client.
-
@LaurentB I think you should start by filtering those MACs. Go to FOG Configuration -> FOG Settings -> FOG Client - Host Register and set
QUICKREG PENDING MAC FILTERto00:09:0F. Now with that no clients should be able to register those MACs anymore. But we also need to see if there are entries with those MACs in the database and clear those:shell> mysql -u root -p Enter password: ... mysql> use fog; Database changed mysql> SELECT hmID,hmHostID,hmMAC,hmPending FROM hostMAC WHERE hmMAC LIKE '%00:09:0F%';Post output here…
PS: Turns out Joe is very busy at the moment so we’ll have to try and sort this one out.
-
I made the change and the SQL, the result follows :
root@srv-fog1-n0:~# mysql Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 6992132 Server version: 5.7.22-0ubuntu18.04.1 (Ubuntu) Copyright (c) 2000, 2018, Oracle and/or its affiliates. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql> use fog Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> SELECT hmID,hmHostID,hmMAC,hmPending FROM hostMAC WHERE hmMAC LIKE '%00:09:0F%'; +------+----------+-------------------+-----------+ | hmID | hmHostID | hmMAC | hmPending | +------+----------+-------------------+-----------+ | 13 | 5 | 00:09:0f:fe:00:01 | 0 | | 1817 | 5 | 00:09:0f:aa:00:01 | 0 | +------+----------+-------------------+-----------+ 2 rows in set (0.00 sec) mysql> -
@Quazz and @Sebastian-Roth have you an idea ?
-
are you there ?
-
@laurentb Sorry, I didn’t really know how to proceed on this, I don’t really use clients often myself.
The host with ID 5 has the offending MAC address, see if you can remove it from that one as a starting point.
-
@Quazz could you tell me how ? i’m not really good in mysql…
-
@LaurentB I am real sorry. Have been very busy in the last days and could’t find the time to answer. To delete those entries form the hostMAC table follow this:
shell> mysql -u root -p Enter password: ... mysql> use fog; Database changed mysql> DELETE FROM hostMAC WHERE hmMAC LIKE '%00:09:0F%';After that you might want to check if there is still a MAC entry for that host - hope there is:
mysql> SELECT hmID,hmHostID,hmMAC,hmPending,hmPrimary FROM hostMAC WHERE hmHostID = 5; -
don’t worry @Sebastian-Roth you are already very nice to help me !!!
Here the result :
mysql> DELETE FROM hostMAC WHERE hmMAC LIKE '%00:09:0F%'; Query OK, 2 rows affected (0.00 sec) mysql> SELECT hmID,hmHostID,hmMAC,hmPending,hmPrimary FROM hostMAC WHERE hmHostID = 5; +------+----------+-------------------+-----------+-----------+ | hmID | hmHostID | hmMAC | hmPending | hmPrimary | +------+----------+-------------------+-----------+-----------+ | 10 | 5 | 58:82:a8:92:b1:bf | | 1 | | 2413 | 5 | 18:60:24:48:df:c6 | 1 | 0 | | 2414 | 5 | 88:b1:11:2a:50:9a | 1 | 0 | | 2415 | 5 | 88:b1:11:2a:50:9d | 1 | 0 | | 2416 | 5 | 88:b1:11:2a:50:99 | 1 | 0 | | 2418 | 5 | ec:8e:b5:a4:5e:a3 | 1 | 0 | | 2419 | 5 | 00:50:b6:78:8a:9a | 1 | 0 | | 2420 | 5 | e4:b3:18:d0:7a:51 | 1 | 0 | | 2421 | 5 | e6:b3:18:d0:7a:50 | 1 | 0 | | 2422 | 5 | e4:b3:18:d0:7a:50 | 1 | 0 | +------+----------+-------------------+-----------+-----------+ 10 rows in set (0.00 sec) mysql> exit -
@LaurentB I am really wondering about all those different MAC addresses for this host. Does it have that many ethernet/wireless interfaces?
Now that you have blacklisted the MACs and cleared the database what do you get from the fog-client logs?