button "Reset encryption Data" does not appear

martial · Oct 22, 2019, 1:12 PM

Weird it is. So fare I’ve upgraded, cleaned database, removed double entries, added the client to a group to reset encryption data, checked the bios features, deleted en reinstalled client, fog service etc… and stumbled upon a few strange facts:

1: This mac address: 00:09:0F:AA:00:01 is a virtual one made bij forticlient (vpn client) and I think this might be the reason why things are not working.

In my logs I have for instance these lines: (sorry in Dutch)

----------------------------------UserTracker---------------------------------

22/10/2019 14:36 Client-Info Client Version: 0.11.16
22/10/2019 14:36 Client-Info Client OS: Windows
22/10/2019 14:36 Client-Info Server Version: 1.5.7.4
22/10/2019 14:36 Middleware::Response ERROR: Unable to get subsection
22/10/2019 14:36 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.
22/10/2019 14:36 Service Sleeping for 100 seconds
22/10/2019 14:38 Middleware::Communication URL: http://ca-fog/fog/management/index.php?sub=requestClientInfo&configure&newService&json
22/10/2019 14:38 Middleware::Response Success
22/10/2019 14:38 Middleware::Communication URL: http://ca-fog/fog/management/index.php?sub=requestClientInfo&mac=00:09:0F:AA:00:01|04:0E:3C:D7:E4:74|AC:D5:64:BC:A0:2D|AE:D5:64:BC:A0:2D|EE:D5:64:BC:A0:2D|AC:D5:64:BC:A0:2E&newService&json
22/10/2019 14:38 Middleware::Communication ERROR: Could not contact FOG server
22/10/2019 14:38 Middleware::Communication ERROR: De externe server heeft een fout geretourneerd: (500) Interne serverfout.
22/10/2019 14:38 Middleware::Response Success
22/10/2019 14:38 Middleware::Communication URL: http://ca-fog/fog/service/getversion.php?clientver&newService&json
22/10/2019 14:38 Middleware::Communication URL: http://ca-fog/fog/service/getversion.php?newService&json

22/10/2019 14:38 Service Creating user agent cache
22/10/2019 14:38 Middleware::Response ERROR: Unable to get subsection
22/10/2019 14:38 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.
22/10/2019 14:38 Middleware::Response ERROR: Unable to get subsection
22/10/2019 14:38 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.
22/10/2019 14:38 Middleware::Response ERROR: Unable to get subsection
22/10/2019 14:38 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.

I get nothing back but if I leave out the first mac address I get this: #!ihc

When I try to install the certificate directly via web interface: http://“foglocaladdress”/fog/management/other/ssl/srvpublic.crt

I get this: (This is not a certificateauthority-certificate, so it can’t be imported to the certifationauthoritylist.)

According to bios the primary mac address is: 04:0E:3C:D7:E4:76 on my ethernet it is: 04:0E:3C:D7:E4:74 (Could be normal) So I checked on the switch and the connecting mac is indeed 04:0E:3C:D7:E4:74. However the fog server is always saying: not found.

Sebastian Roth · Oct 22, 2019, 2:20 PM

@martial Please post the full fog-client log here.

martial · Oct 22, 2019, 2:30 PM

------------------------------------------------------------------------------
----------------------------------UserTracker---------------------------------
------------------------------------------------------------------------------
 22/10/2019 15:43 Client-Info Client Version: 0.11.16
 22/10/2019 15:43 Client-Info Client OS:      Windows
 22/10/2019 15:43 Client-Info Server Version: 1.5.7.4
 22/10/2019 15:43 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 15:43 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.
 22/10/2019 15:43 Service Sleeping for 127 seconds
 22/10/2019 16:26 Middleware::Communication URL: http://ca-fog/fog/management/index.php?sub=requestClientInfo&configure&newService&json
 22/10/2019 16:26 Middleware::Response Success
 22/10/2019 16:26 Middleware::Communication URL: http://ca-fog/fog/management/index.php?sub=requestClientInfo&mac=00:09:0F:AA:00:01|AC:D5:64:BC:A0:2D|AE:D5:64:BC:A0:2D|EE:D5:64:BC:A0:2D|04:0E:3C:D7:E4:74|AC:D5:64:BC:A0:2E&newService&json
 22/10/2019 16:26 Middleware::Communication ERROR: Could not contact FOG server
 22/10/2019 16:26 Middleware::Communication ERROR: De externe server heeft een fout geretourneerd: (500) Interne serverfout.
 22/10/2019 16:26 Middleware::Response Success
 22/10/2019 16:26 Middleware::Communication URL: http://ca-fog/fog/service/getversion.php?clientver&newService&json
 22/10/2019 16:26 Middleware::Communication URL: http://ca-fog/fog/service/getversion.php?newService&json

 22/10/2019 16:26 Service Creating user agent cache
 22/10/2019 16:26 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:26 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.
 22/10/2019 16:26 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:26 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.
 22/10/2019 16:26 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:26 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.

------------------------------------------------------------------------------
---------------------------------ClientUpdater--------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:26 Client-Info Client Version: 0.11.16
 22/10/2019 16:26 Client-Info Client OS:      Windows
 22/10/2019 16:26 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:26 Middleware::Response Success
------------------------------------------------------------------------------


------------------------------------------------------------------------------
----------------------------------TaskReboot----------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:26 Client-Info Client Version: 0.11.16
 22/10/2019 16:26 Client-Info Client OS:      Windows
 22/10/2019 16:26 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:26 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:26 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.

------------------------------------------------------------------------------
--------------------------------HostnameChanger-------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:26 Client-Info Client Version: 0.11.16
 22/10/2019 16:26 Client-Info Client OS:      Windows
 22/10/2019 16:26 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:26 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:26 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.

------------------------------------------------------------------------------
---------------------------------SnapinClient---------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:26 Client-Info Client Version: 0.11.16
 22/10/2019 16:26 Client-Info Client OS:      Windows
 22/10/2019 16:26 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:26 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:26 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.

------------------------------------------------------------------------------
--------------------------------PrinterManager--------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:26 Client-Info Client Version: 0.11.16
 22/10/2019 16:26 Client-Info Client OS:      Windows
 22/10/2019 16:26 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:26 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:26 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.

------------------------------------------------------------------------------
--------------------------------PowerManagement-------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:26 Client-Info Client Version: 0.11.16
 22/10/2019 16:26 Client-Info Client OS:      Windows
 22/10/2019 16:26 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:26 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:26 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.

------------------------------------------------------------------------------
----------------------------------UserTracker---------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:26 Client-Info Client Version: 0.11.16
 22/10/2019 16:26 Client-Info Client OS:      Windows
 22/10/2019 16:26 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:26 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:26 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.
 22/10/2019 16:26 Service Sleeping for 120 seconds
 22/10/2019 16:28 Middleware::Communication URL: http://ca-fog/fog/management/index.php?sub=requestClientInfo&configure&newService&json
 22/10/2019 16:28 Middleware::Response Success
 22/10/2019 16:28 Middleware::Communication URL: http://ca-fog/fog/management/index.php?sub=requestClientInfo&mac=00:09:0F:AA:00:01|AC:D5:64:BC:A0:2D|AE:D5:64:BC:A0:2D|EE:D5:64:BC:A0:2D|04:0E:3C:D7:E4:74|AC:D5:64:BC:A0:2E&newService&json
 22/10/2019 16:28 Middleware::Communication ERROR: Could not contact FOG server
 22/10/2019 16:28 Middleware::Communication ERROR: De externe server heeft een fout geretourneerd: (500) Interne serverfout.
 22/10/2019 16:28 Middleware::Response Success
 22/10/2019 16:28 Middleware::Communication URL: http://ca-fog/fog/service/getversion.php?clientver&newService&json
 22/10/2019 16:28 Middleware::Communication URL: http://ca-fog/fog/service/getversion.php?newService&json

 22/10/2019 16:28 Service Creating user agent cache
 22/10/2019 16:28 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:28 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.
 22/10/2019 16:28 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:28 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.
 22/10/2019 16:28 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:28 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.

------------------------------------------------------------------------------
---------------------------------ClientUpdater--------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:28 Client-Info Client Version: 0.11.16
 22/10/2019 16:28 Client-Info Client OS:      Windows
 22/10/2019 16:28 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:28 Middleware::Response Success
------------------------------------------------------------------------------


------------------------------------------------------------------------------
----------------------------------TaskReboot----------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:28 Client-Info Client Version: 0.11.16
 22/10/2019 16:28 Client-Info Client OS:      Windows
 22/10/2019 16:28 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:28 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:28 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.

------------------------------------------------------------------------------
--------------------------------HostnameChanger-------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:28 Client-Info Client Version: 0.11.16
 22/10/2019 16:28 Client-Info Client OS:      Windows
 22/10/2019 16:28 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:28 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:28 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.

------------------------------------------------------------------------------
---------------------------------SnapinClient---------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:28 Client-Info Client Version: 0.11.16
 22/10/2019 16:28 Client-Info Client OS:      Windows
 22/10/2019 16:28 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:28 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:28 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.

------------------------------------------------------------------------------
--------------------------------PrinterManager--------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:28 Client-Info Client Version: 0.11.16
 22/10/2019 16:28 Client-Info Client OS:      Windows
 22/10/2019 16:28 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:28 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:28 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.

------------------------------------------------------------------------------
--------------------------------PowerManagement-------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:28 Client-Info Client Version: 0.11.16
 22/10/2019 16:28 Client-Info Client OS:      Windows
 22/10/2019 16:28 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:28 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:28 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.

------------------------------------------------------------------------------
----------------------------------UserTracker---------------------------------
------------------------------------------------------------------------------
 22/10/2019 16:28 Client-Info Client Version: 0.11.16
 22/10/2019 16:28 Client-Info Client OS:      Windows
 22/10/2019 16:28 Client-Info Server Version: 1.5.7.4
 22/10/2019 16:28 Middleware::Response ERROR: Unable to get subsection
 22/10/2019 16:28 Middleware::Response ERROR: De objectverwijzing is niet op een exemplaar van een object ingesteld.
 22/10/2019 16:28 Service Sleeping for 139 seconds

Sebastian Roth · Oct 22, 2019, 3:36 PM

@martial said:

22/10/2019 16:26 Middleware::Communication ERROR: De externe server heeft een fout geretourneerd: (500) Interne serverfout.

This is the only valuable part of the log. All the rest is just subsequent errors from following the initial communication problem.

How many hosts with fog-client do you have installed? What is the client checkin time set to? Can you still access the Web UI?

martial · Oct 23, 2019, 6:24 AM

Almost 1000 clients. Client checkin time is the default: 60. The Web UI is accessible.

Sebastian Roth · Oct 23, 2019, 6:42 AM

@martial Do you get any errors in the apache and PHP logs? See my signature on where to find them.

Almost 1000 clients.

Do you see the exact same error message on many clients or is it just one or two? Are all the clients missing the “Reset Encryption” button?

To me it seems like those clients missing the button have never actually finished one round of full communication with the FOG server. That’s why you don’t see the button. There is no encryption key to reset for those hosts.

martial · Oct 23, 2019, 7:01 AM

apache:
[Wed Oct 23 08:46:30.246304 2019] [proxy_fcgi:error] [pid 17952] [client 10.52.97.41:51112] AH01071: Got error ‘PHP message: PHP Fatal error: Uncaught Exception: Error multiple hosts returned for list of mac addresses in /var/www/fog/lib/fog/hostmanager.class.php:209\nStack trace:\n#0 /var/www/fog/lib/fog/fogbase.class.php(571): HostManager->getHostByMacAddresses(Array)\n#1 /var/www/fog/lib/client/registerclient.class.php(46): FOGBase::getHostItem(true, false, false, true)\n#2 /var/www/fog/lib/fog/fogpage.class.php(3013): RegisterClient->json()\n#3 /var/www/fog/lib/fog/fogpage.class.php(249): FOGPage->requestClientInfo()\n#4 /var/www/fog/lib/pages/dashboardpage.class.php(76): FOGPage->__construct(‘Dashboard’)\n#5 /var/www/fog/lib/fog/loadglobals.class.php(67): DashboardPage->__construct()\n#6 /var/www/fog/lib/fog/loadglobals.class.php(81): LoadGlobals::_init()\n#7 /var/www/fog/commons/base.inc.php(49): LoadGlobals->__construct()\n#8 /var/www/fog/management/index.php(22): require(’/var/www/fog/co…‘)\n#9 {main}\n thrown in /var/www/fog/lib/fog/hostmanager.class.php on line 209\n’

root@CA-FOG:~# tail /var/log/php7.1-fpm.log
[23-Oct-2019 07:43:13] NOTICE: [pool www] child 16192 exited with code 0 after 19698.543795 seconds from start
[23-Oct-2019 07:43:13] NOTICE: [pool www] child 18584 started
[23-Oct-2019 07:44:01] NOTICE: [pool www] child 16200 exited with code 0 after 19645.138709 seconds from start
[23-Oct-2019 07:44:01] NOTICE: [pool www] child 18590 started
[23-Oct-2019 07:51:59] NOTICE: [pool www] child 16246 exited with code 0 after 19417.576327 seconds from start
[23-Oct-2019 07:51:59] NOTICE: [pool www] child 18628 started
[23-Oct-2019 08:16:02] NOTICE: [pool www] child 16588 exited with code 0 after 18111.903284 seconds from start
[23-Oct-2019 08:16:02] NOTICE: [pool www] child 18812 started
[23-Oct-2019 08:20:12] NOTICE: [pool www] child 16635 exited with code 0 after 17674.710593 seconds from start
[23-Oct-2019 08:20:12] NOTICE: [pool www] child 18862 started

root@CA-FOG:~# tail /var/log/php7.1-fpm.log.1
[13-Oct-2019 06:25:09] NOTICE: error log file re-opened
[18-Oct-2019 13:15:24] NOTICE: fpm is running, pid 942
[18-Oct-2019 13:15:24] NOTICE: ready to handle connections
[18-Oct-2019 13:15:24] NOTICE: systemd monitor interval set to 10000ms

martial · Oct 23, 2019, 1:49 AM

As it says: multiple hosts… I’ve again checked for multiple hosts in de DB:
mysql> select * from hostMAC where hmMAC IN (‘04:0e:3c:d7:e4:74’,‘04:0e:3c:d7:e4:76’,‘ac:d5:64:bc:a0:2e’,‘ac:d5:64:bc:a0:2d’,‘00:09:0f:aa:00:01’)
-> ;
±------±---------±------------------±-------±----------±----------±---------------±----------------+
| hmID | hmHostID | hmMAC | hmDesc | hmPrimary | hmPending | hmIgnoreClient | hmIgnoreImaging |
±------±---------±------------------±-------±----------±----------±---------------±----------------+
| 12905 | 1175 | 00:09:0f:aa:00:01 | | 1 | | | |
| 12907 | 1176 | 04:0e:3c:d7:e4:74 | | 1 | | | |
| 12904 | 1174 | 04:0e:3c:d7:e4:76 | | 0 | | 0 | 0 |
| 12900 | 1175 | ac:d5:64:bc:a0:2d | | 0 | 0 | 0 | 0 |
| 12903 | 1175 | ac:d5:64:bc:a0:2e | | 0 | 0 | 0 | 0 |
±------±---------±------------------±-------±----------±----------±---------------±----------------+
5 rows in set (0.00 sec)

I’ve been repeating this and deleting entries from hostMAC untill only one hmHostID remained:
if it is the virtual mac address from forticlient that’s creating the problem I deleted all entries of it:

mysql> delete from hostMAC where hmMAC=‘00:09:0f:aa:00:01’;

than checked again:

mysql> select * from hostMAC where hmMAC IN (‘04:0e:3c:d7:e4:74’,‘04:0e:3c:d7:e4:76’,‘ac:d5:64:bc:a0:2e’,‘ac:d5:64:bc:a0:2d’,‘00:09:0f:aa:00:01’);
±------±---------±------------------±-------±----------±----------±---------------±----------------+
| hmID | hmHostID | hmMAC | hmDesc | hmPrimary | hmPending | hmIgnoreClient | hmIgnoreImaging |
±------±---------±------------------±-------±----------±----------±---------------±----------------+
| 12907 | 1176 | 04:0e:3c:d7:e4:74 | | 1 | | | |
| 12915 | 1176 | ac:d5:64:bc:a0:2d | | 0 | 1 | 0 | 0 |
| 12918 | 1176 | ac:d5:64:bc:a0:2e | | 0 | 1 | 0 | 0 |
±------±---------±------------------±-------±----------±----------±---------------±----------------+
3 rows in set (0.00 sec)

So now it is working again!!

I guess the virtual mac address made by forticlient is the big problem as it is created on multiple clients?

Quazz · Oct 23, 2019, 7:52 AM

@martial Correct, they generate the same MAC address regardless of their host.

The real problem was likely that they were set as ‘primary MAC’ for multiple hosts.

martial · Oct 23, 2019, 8:51 AM

Super, thanks everyone!!

Sebastian Roth · Oct 23, 2019, 11:13 AM

@martial said in button "Reset encryption Data" does not appear:

I guess the virtual mac address made by forticlient is the big problem as it is created on multiple clients?

Yes, most probably. Take a look at the option QUICKREG PENDING MAC FILTER in FOG Configuration -> FOG Settings -> FOG Client - Host Register!

button "Reset encryption Data" does not appear

----------------------------------UserTracker---------------------------------

157

12.0k

17.3k

155.2k