Private key failed

[Wayne Workman]

r6961 - Fedora 21
Host is a Lenovo L530 with Win7 Pro x64 with all recommended windows updates installed.

I have FOG Client version 0.9.11 installed on it. I’m not sure if this is because 0.9.12 was rolled back or if it’s because of the authentication failure.

The reset-encryption button was also missing for this host.

Here is the relevant logs, they just repeat this over and over:

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/28/2016 8:33 AM Client-Info Version: 0.9.11
 3/28/2016 8:33 AM Middleware::Communication URL: http://10.2.1.11/fog/management/other/ssl/srvpublic.crt
 3/28/2016 8:33 AM Data::RSA FOG Server CA cert found
 3/28/2016 8:33 AM Middleware::Authentication Cert OK
 3/28/2016 8:33 AM Middleware::Communication POST URL: http://10.2.1.11/fog/management/index.php?sub=authorize
 3/28/2016 8:33 AM Middleware::Communication Unknown Response: Private key failed
 3/28/2016 8:33 AM Service Sleeping for 120 seconds

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/28/2016 8:35 AM Client-Info Version: 0.9.11
 3/28/2016 8:35 AM Middleware::Communication URL: http://10.2.1.11/fog/management/other/ssl/srvpublic.crt
 3/28/2016 8:35 AM Data::RSA FOG Server CA cert found
 3/28/2016 8:35 AM Middleware::Authentication Cert OK
 3/28/2016 8:35 AM Middleware::Communication POST URL: http://10.2.1.11/fog/management/index.php?sub=authorize
 3/28/2016 8:35 AM Middleware::Communication Unknown Response: Private key failed
 3/28/2016 8:35 AM Service Sleeping for 120 seconds

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/28/2016 8:37 AM Client-Info Version: 0.9.11
 3/28/2016 8:37 AM Middleware::Communication URL: http://10.2.1.11/fog/management/other/ssl/srvpublic.crt
 3/28/2016 8:37 AM Data::RSA FOG Server CA cert found
 3/28/2016 8:37 AM Middleware::Authentication Cert OK
 3/28/2016 8:37 AM Middleware::Communication POST URL: http://10.2.1.11/fog/management/index.php?sub=authorize
 3/28/2016 8:37 AM Middleware::Communication Unknown Response: Private key failed
 3/28/2016 8:37 AM Service Sleeping for 120 seconds
 3/28/2016 8:39 AM Service Stop requested
 3/28/2016 8:39 AM Bus {
  "channel": "Status",
  "data": "{\r\n  \"action\": \"unload\"\r\n}"
}
 3/28/2016 8:39 AM Bus Emmiting message on channel: Status
 3/28/2016 8:39 AM Bus Became bus server
 3/28/2016 8:39 AM Bus {
  "channel": "Status",
  "data": "{\r\n  \"action\": \"load\"\r\n}"
}
 3/28/2016 8:39 AM Bus Emmiting message on channel: Status

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/28/2016 8:39 AM Client-Info Version: 0.9.11
 3/28/2016 8:39 AM Middleware::Communication URL: http://10.2.1.11/fog/management/other/ssl/srvpublic.crt
 3/28/2016 8:39 AM Data::RSA FOG Server CA cert found
 3/28/2016 8:39 AM Middleware::Authentication Cert OK
 3/28/2016 8:39 AM Middleware::Communication POST URL: http://10.2.1.11/fog/management/index.php?sub=authorize
 3/28/2016 8:39 AM Middleware::Communication Unknown Response: Private key failed
 3/28/2016 8:39 AM Service Sleeping for 120 seconds

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/28/2016 8:41 AM Client-Info Version: 0.9.11
 3/28/2016 8:41 AM Middleware::Communication URL: http://10.2.1.11/fog/management/other/ssl/srvpublic.crt
 3/28/2016 8:41 AM Data::RSA FOG Server CA cert found
 3/28/2016 8:41 AM Middleware::Authentication Cert OK
 3/28/2016 8:41 AM Middleware::Communication POST URL: http://10.2.1.11/fog/management/index.php?sub=authorize
 3/28/2016 8:41 AM Middleware::Communication Unknown Response: Private key failed
 3/28/2016 8:41 AM Service Sleeping for 120 seconds

I noticed the issue when the target host wouldn’t join the domain automatically. I’ve not done anything to my key. This morning I just ran svn up in the trunk directory and then ran the installer with the -y argument as usual.

For the moment I’m going to roll back because I need to go image a lab. Later today I’ll have more time to look at what’s wrong.

[Wayne Workman]

Rolling back to r6677 caused the error to change to “Invalid Security Token”, and the “Reset Encryption” button also came back. After resetting the encryption, it seems to be working fine now.

[Tom Elliott]

@Wayne-Workman Should now be fixed.

[Wayne Workman]

Confirmed fixed in r6963

[Raymond Bell]

@Tom-Elliott I am getting this with r5130 v6963 over and over

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/28/2016 7:10 PM Client-Info Version: 0.9.11
 3/28/2016 7:10 PM Middleware::Communication URL: http://10.24.28.18/fog/management/other/ssl/srvpublic.crt
 3/28/2016 7:10 PM Data::RSA FOG Server CA cert found
 3/28/2016 7:10 PM Middleware::Authentication Cert OK
 3/28/2016 7:10 PM Middleware::Communication POST URL: http://10.24.28.18/fog/management/index.php?sub=authorize
 3/28/2016 7:10 PM Middleware::Communication Unknown Response: Private key not found
 3/28/2016 7:10 PM Service Sleeping for 120 seconds```

[Tom Elliott]

@Raymond-Bell No, you’re not.

THe indicator?

Your client version is on 0.9.11. It’s about about a week or so that 0.9.12 has been out.

[Raymond Bell]

@Tom-Elliott so i need to upload the new client to all 900 computers?

[Tom Elliott]

@Raymond-Bell You shouldn’t need to do anything because the client’s auto update.

[Raymond Bell]

@Tom-Elliott said:

@Raymond-Bell You shouldn’t need to do anything because the client’s auto update.

Ok i will just sit back and give it time and see what happens
Thanks

[Tom Elliott]

Does the /opt/fog/snapins/ssl/.srvprivate.key exist on the 10.24.28.18 server?

[Raymond Bell]

@Tom-Elliott said:

Does the /opt/fog/snapins/ssl/.srvprivate.key exist on the 10.24.28.18 server?

Yes sir

[Raymond Bell]

@Tom-Elliott Client is updated on all computers
This was on a test computer i just had put a image on and the image has the old 9.11
Did not give it time to update

MY MISTAKE!!!

[Tom Elliott]

@Raymond-Bell So you’re good to go now?

[Raymond Bell]

@Tom-Elliott said:

@Raymond-Bell So you’re good to go now?

Just re-imaged going to let it sit and update the client and see what happens. but i checked random computers i imaged from last week with same image and they are doing fine. So i am guessing i did not give it time to update after i imaged it. Going to check it and make sure after lunch. Will let you know…

[Raymond Bell]

@Tom-Elliott
It still has not up to 9.12
How long does it take? it has been about 1 1/2 hour
Is there a way to force this update to a client

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/28/2016 10:23 PM Client-Info Version: 0.9.11
 3/28/2016 10:23 PM Middleware::Communication URL: http://10.24.28.18/fog/management/other/ssl/srvpublic.crt
 3/28/2016 10:23 PM Data::RSA FOG Server CA cert found
 3/28/2016 10:23 PM Middleware::Authentication Cert OK
 3/28/2016 10:23 PM Middleware::Communication POST URL: http://10.24.28.18/fog/management/index.php?sub=authorize
 3/28/2016 10:23 PM Middleware::Communication Unknown Response: Private key not found
 3/28/2016 10:23 PM Service Sleeping for 120 seconds

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/28/2016 10:25 PM Client-Info Version: 0.9.11
 3/28/2016 10:25 PM Middleware::Communication URL: http://10.24.28.18/fog/management/other/ssl/srvpublic.crt
 3/28/2016 10:25 PM Data::RSA FOG Server CA cert found
 3/28/2016 10:25 PM Middleware::Authentication Cert OK
 3/28/2016 10:25 PM Middleware::Communication POST URL: http://10.24.28.18/fog/management/index.php?sub=authorize
 3/28/2016 10:26 PM Middleware::Communication Unknown Response: Private key not found
 3/28/2016 10:26 PM Service Sleeping for 120 seconds```

[Joe Schmitt]

@Raymond-Bell said:

How long does it take

The client will only update if it can authenticate. You have to get the private key not found error fixed before the client will function. If this error was not present, the client would auto update within a minute.

[Raymond Bell]

@Jbob
Thats what i was thinking so it has to be something with the new trunk

[Joe Schmitt]

@Raymond-Bell for the record I too had this issue but upgrading to the latest revision in trunk fixed it.

[Raymond Bell]

@Jbob Updating now to r5136 and will see what happens

[Raymond Bell]

@Tom-Elliott @Jbob Update trunk to r5136 and still getting same error

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/29/2016 7:45 AM Client-Info Version: 0.9.11
 3/29/2016 7:45 AM Middleware::Communication URL: http://10.24.28.18/fog/management/other/ssl/srvpublic.crt
 3/29/2016 7:45 AM Data::RSA FOG Server CA cert found
 3/29/2016 7:45 AM Middleware::Authentication Cert OK
 3/29/2016 7:45 AM Middleware::Communication POST URL: http://10.24.28.18/fog/management/index.php?sub=authorize
 3/29/2016 7:47 AM Bus Became bus server
 3/29/2016 7:47 AM Bus {
  "channel": "Status",
  "data": "{\r\n  \"action\": \"load\"\r\n}"
}
 3/29/2016 7:47 AM Bus Emmiting message on channel: Status

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/29/2016 7:47 AM Client-Info Version: 0.9.11
 3/29/2016 7:47 AM Middleware::Communication URL: http://10.24.28.18/fog/management/other/ssl/srvpublic.crt
 3/29/2016 7:47 AM Data::RSA FOG Server CA cert found
 3/29/2016 7:47 AM Middleware::Authentication Cert OK
 3/29/2016 7:47 AM Middleware::Communication POST URL: http://10.24.28.18/fog/management/index.php?sub=authorize
 3/29/2016 7:48 AM Middleware::Communication Unknown Response: Private key not found
 3/29/2016 7:48 AM Service Sleeping for 120 seconds

And the key is there

fog@fog-virtual-machine14:/opt/fog/snapins/ssl$ ls
CA  fog.csr
fog@fog-virtual-machine14:/opt/fog/snapins/ssl$ ls .?*
.srvprivate.key

..:
ssl
fog@fog-virtual-machine14:/opt/fog/snapins/ssl$