Communication problems between fog client and server
-
@sebastian-roth Just deploy a image on a another pc. In this image i installed fog client with smart installer with the ip address of the server.
That is what i have in the fog.log
------------------------------------------------------------------------------ ----------------------------------UserTracker--------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:50:26 Client-Info Client Version: 0.12.0 01/12/2020 12:50:26 Client-Info Client OS: Windows 01/12/2020 12:50:26 Client-Info Server Version: 1.5.9 01/12/2020 12:50:26 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:50:26 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. 01/12/2020 12:50:26 Service Sleeping for 89 seconds 01/12/2020 12:51:55 Middleware::Communication URL: http://10.149.20.67/fog/management/index.php?sub=requestClientInfo&configure&newService&json 01/12/2020 12:51:55 Middleware::Response Success 01/12/2020 12:51:55 Middleware::Communication URL: http://10.149.20.67/fog/management/index.php?sub=requestClientInfo&mac=EC:B1:D7:55:FC:F2&newService&json 01/12/2020 12:51:55 Middleware::Authentication Waiting for authentication timeout to pass 01/12/2020 12:52:25 Middleware::Communication Download: http://10.149.20.67/fog/management/other/ssl/srvpublic.crt 01/12/2020 12:52:25 Data::RSA FOG Server CA cert found 01/12/2020 12:52:25 Middleware::Authentication Cert OK 01/12/2020 12:52:25 Middleware::Communication POST URL: http://10.149.20.67/fog/management/index.php?sub=requestClientInfo&authorize&newService 01/12/2020 12:52:25 Middleware::Response Failed to decrypt data on server 01/12/2020 12:52:25 Middleware::Response Success 01/12/2020 12:52:25 Middleware::Communication URL: http://10.149.20.67/fog/service/getversion.php?clientver&newService&json 01/12/2020 12:52:25 Middleware::Communication URL: http://10.149.20.67/fog/service/getversion.php?newService&json 01/12/2020 12:52:25 Service Creating user agent cache 01/12/2020 12:52:25 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:52:25 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. 01/12/2020 12:52:25 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:52:25 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. 01/12/2020 12:52:25 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:52:25 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ ---------------------------------ClientUpdater-------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:52:25 Client-Info Client Version: 0.12.0 01/12/2020 12:52:25 Client-Info Client OS: Windows 01/12/2020 12:52:25 Client-Info Server Version: 1.5.9 01/12/2020 12:52:25 Middleware::Response Success ------------------------------------------------------------------------------ ------------------------------------------------------------------------------ ----------------------------------TaskReboot---------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:52:25 Client-Info Client Version: 0.12.0 01/12/2020 12:52:25 Client-Info Client OS: Windows 01/12/2020 12:52:25 Client-Info Server Version: 1.5.9 01/12/2020 12:52:25 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:52:26 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ --------------------------------HostnameChanger------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:52:26 Client-Info Client Version: 0.12.0 01/12/2020 12:52:26 Client-Info Client OS: Windows 01/12/2020 12:52:26 Client-Info Server Version: 1.5.9 01/12/2020 12:52:26 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:52:26 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ ---------------------------------SnapinClient--------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:52:26 Client-Info Client Version: 0.12.0 01/12/2020 12:52:26 Client-Info Client OS: Windows 01/12/2020 12:52:26 Client-Info Server Version: 1.5.9 01/12/2020 12:52:26 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:52:26 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ --------------------------------PrinterManager-------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:52:26 Client-Info Client Version: 0.12.0 01/12/2020 12:52:26 Client-Info Client OS: Windows 01/12/2020 12:52:26 Client-Info Server Version: 1.5.9 01/12/2020 12:52:26 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:52:26 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ --------------------------------PowerManagement------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:52:26 Client-Info Client Version: 0.12.0 01/12/2020 12:52:26 Client-Info Client OS: Windows 01/12/2020 12:52:26 Client-Info Server Version: 1.5.9 01/12/2020 12:52:26 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:52:26 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ ----------------------------------UserTracker--------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:52:26 Client-Info Client Version: 0.12.0 01/12/2020 12:52:26 Client-Info Client OS: Windows 01/12/2020 12:52:26 Client-Info Server Version: 1.5.9 01/12/2020 12:52:26 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:52:26 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. 01/12/2020 12:52:26 Service Sleeping for 82 seconds 01/12/2020 12:53:48 Middleware::Communication URL: http://10.149.20.67/fog/management/index.php?sub=requestClientInfo&configure&newService&json 01/12/2020 12:53:48 Middleware::Response Success 01/12/2020 12:53:48 Middleware::Communication URL: http://10.149.20.67/fog/management/index.php?sub=requestClientInfo&mac=EC:B1:D7:55:FC:F2&newService&json 01/12/2020 12:53:48 Middleware::Authentication Waiting for authentication timeout to pass 01/12/2020 12:54:25 Middleware::Communication Download: http://10.149.20.67/fog/management/other/ssl/srvpublic.crt 01/12/2020 12:54:25 Data::RSA FOG Server CA cert found 01/12/2020 12:54:25 Middleware::Authentication Cert OK 01/12/2020 12:54:25 Middleware::Communication POST URL: http://10.149.20.67/fog/management/index.php?sub=requestClientInfo&authorize&newService 01/12/2020 12:54:25 Middleware::Response Failed to decrypt data on server 01/12/2020 12:54:25 Middleware::Response Success 01/12/2020 12:54:25 Middleware::Communication URL: http://10.149.20.67/fog/service/getversion.php?clientver&newService&json 01/12/2020 12:54:25 Middleware::Communication URL: http://10.149.20.67/fog/service/getversion.php?newService&json 01/12/2020 12:54:25 Service Creating user agent cache 01/12/2020 12:54:25 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:54:25 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. 01/12/2020 12:54:25 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:54:25 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. 01/12/2020 12:54:25 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:54:25 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ ---------------------------------ClientUpdater-------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:54:25 Client-Info Client Version: 0.12.0 01/12/2020 12:54:25 Client-Info Client OS: Windows 01/12/2020 12:54:25 Client-Info Server Version: 1.5.9 01/12/2020 12:54:25 Middleware::Response Success ------------------------------------------------------------------------------ ------------------------------------------------------------------------------ ----------------------------------TaskReboot---------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:54:25 Client-Info Client Version: 0.12.0 01/12/2020 12:54:25 Client-Info Client OS: Windows 01/12/2020 12:54:25 Client-Info Server Version: 1.5.9 01/12/2020 12:54:25 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:54:25 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ --------------------------------HostnameChanger------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:54:26 Client-Info Client Version: 0.12.0 01/12/2020 12:54:26 Client-Info Client OS: Windows 01/12/2020 12:54:26 Client-Info Server Version: 1.5.9 01/12/2020 12:54:26 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:54:26 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ ---------------------------------SnapinClient--------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:54:26 Client-Info Client Version: 0.12.0 01/12/2020 12:54:26 Client-Info Client OS: Windows 01/12/2020 12:54:26 Client-Info Server Version: 1.5.9 01/12/2020 12:54:26 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:54:26 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ --------------------------------PrinterManager-------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:54:26 Client-Info Client Version: 0.12.0 01/12/2020 12:54:26 Client-Info Client OS: Windows 01/12/2020 12:54:26 Client-Info Server Version: 1.5.9 01/12/2020 12:54:26 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:54:26 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ --------------------------------PowerManagement------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:54:26 Client-Info Client Version: 0.12.0 01/12/2020 12:54:26 Client-Info Client OS: Windows 01/12/2020 12:54:26 Client-Info Server Version: 1.5.9 01/12/2020 12:54:26 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:54:26 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. ------------------------------------------------------------------------------ ----------------------------------UserTracker--------------------------------- ------------------------------------------------------------------------------ 01/12/2020 12:54:26 Client-Info Client Version: 0.12.0 01/12/2020 12:54:26 Client-Info Client OS: Windows 01/12/2020 12:54:26 Client-Info Server Version: 1.5.9 01/12/2020 12:54:26 Middleware::Response ERROR: Unable to get subsection 01/12/2020 12:54:26 Middleware::Response ERROR: La référence d'objet n'est pas définie à une instance d'un objet. 01/12/2020 12:54:26 Service Sleeping for 67 seconds 01/12/2020 12:55:33 Middleware::Communication URL: http://10.149.20.67/fog/management/index.php?sub=requestClientInfo&configure&newService&json 01/12/2020 12:55:33 Middleware::Response Success 01/12/2020 12:55:33 Middleware::Communication URL: http://10.149.20.67/fog/management/index.php?sub=requestClientInfo&mac=EC:B1:D7:55:FC:F2&newService&json 01/12/2020 12:55:33 Middleware::Authentication Waiting for authentication timeout to passYou are right, i assume the problem is here “01/12/2020 12:54:25 Middleware::Response Failed to decrypt data on server”
Is there a way to check manually this point of the communication ?
Or is there a way to reinitialize certification creation process on the server without modify anything else ?
Regards.
-
@LittleTux Thanks for the update. So we are down to
Middleware::Response Failed to decrypt data on serverfor all the hosts now. Do you see other clients working fine?Do you have more than one FOG server by any chance or did you re-install (not update) at some point?
Please take a look at the Windows certificate store and see if you have more than one certificate named “FOG Server CA” on those hosts that show the issue.
I will look through the code again later on.
-
@sebastian-roth Thanks for the answer, actually it’s a fresh new install on a Debian 10.6. I had to delete old FOG server after backup images/hosts/groups because we don’t have enough space on our SAN to have two at the same time (1 tera octects of images).
I just backup the /opt/fog/snapins/ssl directory of the old one in case of certificate client/server issues :-).So no clients is working fine at this moment.
On the client i got one “FOG Server CA”, “FOG Project CA” & “FOG Project” certificate.
Have a good one, regards
-
@LittleTux I find it strange we see the “Data::RSA FOG Server CA cert found” and “Middleware::Authentication Cert OK” messages. As far as I see it this would mean the client does use the certificate provided by the new server already.
I just backup the /opt/fog/snapins/ssl directory of the old one in case of certificate client/server issues :-).
Did you copy this backup of the certificate, key and CA of your old server to the new install at some point yet?
Please run the following commands to see if the certs are somehow messed up:
openssl x509 -noout -fingerprint -md5 -in /opt/fog/snapins/ssl/CA/.fogCA.pem openssl x509 -noout -fingerprint -md5 -in /var/www/html/fog/management/other/ca.cert.pem openssl x509 -noout -modulus -in /var/www/fog/management/other/ssl/srvpublic.crt | openssl md5 openssl rsa -noout -modulus -in /opt/fog/snapins/ssl/.srvprivate.key | openssl md5 openssl verify -verbose -CAfile /opt/fog/snapins/ssl/CA/.fogCA.pem /var/www/fog/management/other/ssl/srvpublic.crt -
@sebastian-roth “Did you copy this backup of the certificate, key and CA of your old server to the new install at some point yet?”
To answer to this point i tried with WinScp from a Windows Server but i have some permissions errors then i don’t try again. I checked file versions and it seems to me that files in this directory was the one created during the installation and not the files of the old one.
I try commands and feedback very soon.
Have a good day, regards.
-
@sebastian-roth Got this with the command, not sure is a good thing
:root@SRV-IMAGE:/home/administrateur# openssl x509 -noout -fingerprint -md5 -in /opt/fog/snapins/ssl/CA/.fogCA.pem MD5 Fingerprint=59:28:75:0D:E3:95:B7:93:2E:9C:20:F2:67:3F:EF:70 root@SRV-IMAGE:/home/administrateur# openssl x509 -noout -fingerprint -md5 -in /var/www/html/fog/management/other/ca.cert.pem MD5 Fingerprint=59:28:75:0D:E3:95:B7:93:2E:9C:20:F2:67:3F:EF:70 root@SRV-IMAGE:/home/administrateur# openssl x509 -noout -modulus -in /var/www/fog/management/other/ssl/srvpublic.crt | openssl md5 (stdin)= 0a10916be9139c568a8450b82b70bb27 root@SRV-IMAGE:/home/administrateur# openssl rsa -noout -modulus -in /opt/fog/snapins/ssl/.srvprivate.key | openssl md5 (stdin)= bb94e9a98c8319baf8e365174cdb262c root@SRV-IMAGE:/home/administrateur# openssl verify -verbose -CAfile /opt/fog/snapins/ssl/CA/.fogCA.pem /var/www/fog/management/other/ssl/srvpublic.crt /var/www/fog/management/other/ssl/srvpublic.crt: OKI manage another school network, FOG is 1.5.9 too on a Debian 9. I checked clients on this network and all seems ok for communication. Is there any way this server can help us ?
Regards
-
@LittleTux The other server has its own CA and certificates and it’s not a good idea to copy things over from that.
From the output you posted we see that most of the files match (same fingerprints and verify OK) but the key file doesn’t!! This is causing the issue for sure.
So let’s check the backup of the old files you have to see if we can get things back this way. How did you take that backup copy? Does it have the file
.srvprivate.keyin it (on Linux systems files starting with a dot are kind of hidden)? -
@sebastian-roth Ok i see, this a screenshot of the things:
On the left, backup from the old Ubuntu server who is deleted
On the right the actual server.
Actually i see that he new server miss the .srvprivate.key file. But if i copy this one it will works ? This file come from the old server so i don’t know
Important thing to note too is that the CA directory is empty on the new one and have 3 files and the old one :
- .fogCA.key
-.fogCA.pem
-.fogCA.srl
-.srl
So there are two questions :
-
If i copy the .srvprivate.key file and the 4 file i nthe CA directory, it will works ?
-
Is there a way to relaunch the installation on the server without delete configurations and data (images, hosts, etc…) but with renitialize the certification ?
Regards.
- .fogCA.key
-
@LittleTux Please check the speech bubble in the top right corner.
-
@sebastian-roth Hi again Sebastian, thanks again a lot for the time you spend to fix my issue …
Tried 2 things and get the same result/error :
-Deploy the fresh msi 0.12 client fog installer you download from Github by GPO :
------------------------------------------------------------------------------ --------------------------------Authentication-------------------------------- ------------------------------------------------------------------------------ 04/12/2020 13:07 Client-Info Version: 0.11.16 04/12/2020 13:07 Client-Info OS: Windows 04/12/2020 13:07 Middleware::Authentication Waiting for authentication timeout to pass 04/12/2020 13:07 Controller Stop 04/12/2020 13:07 Service Stop requested 04/12/2020 13:07 Middleware::Authentication ERROR: Could not authenticate 04/12/2020 13:07 Middleware::Authentication ERROR: Le thread a été abandonné. 04/12/2020 13:07 Bus Emmiting message on channel: Status 04/12/2020 13:12:44 Main Overriding exception handling 04/12/2020 13:12:45 Main Bootstrapping Zazzles 04/12/2020 13:12:45 Controller Initialize 04/12/2020 13:12:45 Controller Start 04/12/2020 13:12:45 Service Starting service 04/12/2020 13:12:50 Bus Became bus server 04/12/2020 13:12:50 Bus Emmiting message on channel: Status 04/12/2020 13:12:50 Service Invoking early JIT compilation on needed binaries ------------------------------------------------------------------------------ --------------------------------Authentication-------------------------------- ------------------------------------------------------------------------------ 04/12/2020 13:12:50 Client-Info Version: 0.12.0 04/12/2020 13:12:50 Client-Info OS: Windows 04/12/2020 13:12:50 Middleware::Authentication Waiting for authentication timeout to pass 04/12/2020 13:12:50 Middleware::Communication Download: http://fogserver/fog/management/other/ssl/srvpublic.crt 04/12/2020 13:12:50 Data::RSA FOG Server CA cert found 04/12/2020 13:12:50 Data::RSA ERROR: Certificate validation failed 04/12/2020 13:12:50 Data::RSA ERROR: Trust chain did not complete to the known authority anchor. Errors: La signature du certificat ne peut pas être vérifiée. (NotSignatureValid) 04/12/2020 13:12:50 Middleware::Authentication ERROR: Could not authenticate 04/12/2020 13:12:50 Middleware::Authentication ERROR: Certificate is not from FOG CA ------------------------------------------------------------------------------ --------------------------------Authentication-------------------------------- ------------------------------------------------------------------------------ 04/12/2020 13:12:50 Client-Info Version: 0.12.0 04/12/2020 13:12:50 Client-Info OS: Windows 04/12/2020 13:12:50 Middleware::Authentication Waiting for authentication timeout to pass 04/12/2020 13:14:50 Middleware::Communication Download: http://fogserver/fog/management/other/ssl/srvpublic.crt 04/12/2020 13:14:50 Data::RSA FOG Server CA cert found 04/12/2020 13:14:50 Data::RSA ERROR: Certificate validation failed 04/12/2020 13:14:50 Data::RSA ERROR: Trust chain did not complete to the known authority anchor. Errors: La signature du certificat ne peut pas être vérifiée. (NotSignatureValid) 04/12/2020 13:14:50 Middleware::Authentication ERROR: Could not authenticate 04/12/2020 13:14:50 Middleware::Authentication ERROR: Certificate is not from FOG CA ------------------------------------------------------------------------------ --------------------------------Authentication-------------------------------- ------------------------------------------------------------------------------ 04/12/2020 13:14:50 Client-Info Version: 0.12.0 04/12/2020 13:14:50 Client-Info OS: Windows 04/12/2020 13:14:50 Middleware::Authentication Waiting for authentication timeout to pass 04/12/2020 13:16:50 Middleware::Communication Download: http://fogserver/fog/management/other/ssl/srvpublic.crt 04/12/2020 13:16:50 Data::RSA FOG Server CA cert found 04/12/2020 13:16:50 Data::RSA ERROR: Certificate validation failed 04/12/2020 13:16:50 Data::RSA ERROR: Trust chain did not complete to the known authority anchor. Errors: La signature du certificat ne peut pas être vérifiée. (NotSignatureValid) 04/12/2020 13:16:50 Middleware::Authentication ERROR: Could not authenticate 04/12/2020 13:16:50 Middleware::Authentication ERROR: Certificate is not from FOG CA ------------------------------------------------------------------------------ --------------------------------Authentication-------------------------------- ------------------------------------------------------------------------------ 04/12/2020 13:16:50 Client-Info Version: 0.12.0 04/12/2020 13:16:50 Client-Info OS: Windows 04/12/2020 13:16:50 Middleware::Authentication Waiting for authentication timeout to passAs you see, the GPO is working great as the version is update after a reboot but we got that certificate error
- Tried to desinstall fog client and reinstall with the same the fresh msi 0.12 client fog installer you download from Github on a test pc and have the exact same error about certificate
You have already spend many times on my issue so i don’t want to busy you more …
I assume that my problem is when i tried to copy old “/opt/snapins/ssl” repository to the new one.
So if i install a new server from start without copying nothing, the client downloaded from the new server will work fine so i will deploy this client on my all network by GPO.Am i right ?
Have a good day, regards.
-
@LittleTux Before you go ahead an reinstall the whole server let’s take a look at the files the fog-client uses to pin and talk to that server. Possibly I just missed creating one of the files last time or you have a mixed up web root. Please run the following commands and post output here:
ls -alR /var/www/fog/management/other/ ls -alR /var/www/html/fog/management/other/ ls -al /var/www/ -
@sebastian-roth Well read this kinda too late …
At this moment, fog install is running on a fresh new install.I will let you know if it’s good for me for client/server communication after.
Have a good day.
-
@sebastian-roth Thanks again for all the help.
Fresh install is fine, and client is updating well by GPO.
We can pass this to solved :-).
Have a good day, regards.
-
@LittleTux Thanks for the feedback on this!