Hi,
I want to ask to the @developers if is possible nest a group inside another.
Actually I have setup the admin Group with a group of my AD, then the people that is inside doesn’t have problems to login, but this group has nested another group and the people that is in this last group can not login.
Can LDAP plugin manages groups of AD that are nested?
Hola @Joe-Schmitt ,
Both. My gold image installs the client during the sysprep and, normally, the technician uses an image with the client installed.
I have other question 
If I update the server version, is necessary reset the encryption data?
@joe-schmitt said in Which is the best way to install/deploy the FOG client?:
@Fernando-Gietz a reset encryption data should only be done if a client installation losses its security token somehow. This can either be caused via the Debugger, manually deleting it, or uninstalling / re-installing the client. If it is being lost for another reason, then there is some other issue at play here.
When you say “uninstalling / re-installing the client”, what means? If I deploy a new image to the computer and in the sysprep proccess I install the client again, then, is a reinstall? XD
Is valid the new token?
@wayne-workman said in Which is the best way to install/deploy the FOG client?:
@fernando-gietz Here’s the SQL to do it manually for all hosts: https://wiki.fogproject.org/wiki/index.php?title=FOG_Client#Reset_encryption_data
I used it
@joe-schmitt said in Which is the best way to install/deploy the FOG client?:
@Fernando-Gietz resetting encryption data should not be needed, and doing it often/in-bulk posses security risks. Can you describe exactly what you do prior to resetting encryption being needed? In general this only occurs if the client is manually reinstalled, as the server should be handling the case where computers are deployed, automatically. (If it’s not, then it’s a bug).
Maybe the question should be:
When have I or is neccesary reset the encryption data?
Yes, the reseting group encryption data wokrs fine but …
My problem is that I have 7000 computers and 350 groups in the server XD and 50 technician working on it. The proccess must to be transparent for the technicians.
Can I run a postscript to do it?
I have found in FOG Settings -> General Settings an entry:
DEFAULT LOCALE = Español
With this setting I can see the web UI in spanish but I can not change to other language .
Hi,
Maybe this is a stupid question but I just change my FOG server version from 0.30 to 1.5.2. A lot of changes!! And one of this change is the client and the certificates.
I know, I can find the info in the wiki FOG Client. But I have some questions or doubts.
I have two scenarios:
In the both scenarios the computers are joined to the Domain and we use the FOG client to join them (we don’t join the computers to the domain in with sysprep)
Well, my super big question is … what happens with the certificate and with the encryption data? I am having problems with it in the IT rooms. Have I to reset the encryption data every time when I donwload the image? Can I reset them automatically?
Hi,
I try to select other language that is not english, for example, spanish or german, but the web UI appears only in english. Is a bug or maybe the browser configuration? or is a DT’s super filter in inet (America first) XDDD?
OK, thanks @Tom-Elliott for the info.
I would like to be able the files from the list too and ask me if I want to delete the files (In this way you have the same behaviour)
Close the ticket
I have noticed that when you delete an image from the webUI, the files of this image is not be erased from storage. Is a normal behaviour?
OK, Tom. I wil wait for the 1.6 version to see it
Thanks for the information.
Hi,
Actually the reports are very powerful and you can filter them by different concepts, but only after do the query in the DB. The reports show all entries and then you can filter.
I would like to do some pre-filters, like by data or by host name. For example, in the usertracking report you can do some pre-filters.
My problem is the next: I have 7000 computers in my FOG server, and if I need to do an imaging log report, FOG takes 1 minute (and, now, I have little entries in the db ) in show all of the entries in hte DB.
@aur3l FOG Settings -> FOG QUICK REGISTRATION tab, config the “QUICKREG GROUP ASSOC” like “Default Group”
But first you need to create a group called “Default Group” (The name of this goup can be other … be free)
I see a litle backdoor to solve your problem.
Solution:
Now the restricted users can see in the “Membership” tab of the “Default Group” all the computers that are registered by the quick registration method.
Why?
It is not mandatory that all PC of one group be associated in the same Site. If only one of them is associated to one Site, you can see the rest of them in the group tab. In my mind was the possibility to create “Super Groups” that have computers of differents sites.
It is not the better solution, but is a solution for your problem
Hi @Aur3l ,
Is not an issue, it works in this way
I don’t use quick registration in my university and when I developed the plugin I didn’t take into account the quick registration, sorry.
Well, we can try to solve it but is difficult because when you are doing a quick registration, FOG doesn’t know where is the computer or to which site to associate it.
I have fixed some bugs in this plugin, Tom will update the git to fix them.
My two cents.
In RHEL7 I have compiled the dnsmasq 0.78 version using these instructions and doing some changes.
Install the necesary packages:
sudo yum install nettle-devel
sudo yum install libidn2-devel
sudo yum install libnetfilter_conntrack-devel
sudo yum install dbus-devel
config.h options:
/* #define HAVE_LUASCRIPT */
#define HAVE_DBUS
/* #define HAVE_IDN*/
#define HAVE_LIBIDN2
#define HAVE_CONNTRACK
#define HAVE_DNSSEC
Compiling and starting the service:
sudo make install
sudo systemctl start dnsmasq
sudo systemctl status dnsmasq
Output:
dnsmasq -v
Dnsmasq version 2.78 Copyright (c) 2000-2017 Simon Kelley
Compile time options: IPv6 GNU-getopt DBus no-i18n IDN2 DHCP DHCPv6 no-Lua TFTP conntrack ipset auth DNSSEC loop-detect inotify
This software comes with ABSOLUTELY NO WARRANTY.
Dnsmasq is free software, and you are welcome to redistribute it
under the terms of the GNU General Public License, version 2 or 3.
One GB. Is small because in this partition is the WINPE.
/dev/sda4 : start= 102758400, size= 2095104, type=EBD0A0A2-B9E5-4433-87C0-68B6B72699C7, uuid=EDED91DC-7BDE-4F7B-B502-B57A6C90EF
30, name="Basic data partition"```Hi!
Sometimes when I download an image to one computer and the task finished, the webUI doesn’t update the state of the task and the task is forever in the active task page.
Do you know the reason of this behavour?
I think that the possible reason is that last partition downloads so quick that the webUI dones’t refresh the state … Is possible?
FOG version: 1.5.0.1 (I see this problem before this version)
OS: RHEL 7
We are working this with our Systems Operation Center (SOC) team and they are testing something in the EXSI servers.
In this link http://ipxe.org/howto/vmware the iPXE team explains how create a ROM to support iPXE in VMWARE network interefaces, but the instructions are for BIOS. They try it and works fine, but is for BIOS.
vmx config file:
firmware = "bios"
ethernet0.virtualDev = "e1000"
ethernet0.opromsize = 262144
e1000bios.filename = "/usr/lib/vmware/resources/8086100f.mrom"
e1000ebios.filename = "/usr/lib/vmware/resources/808610d3.mrom"
nbios.filename = "/usr/lib/vmware/resources/10222000.rom"
# nxbios.filename = ""
nx3bios.filename = "/usr/lib/vmware/resources/15ad07b0.rom"
They tried create the ROM files to UEFI but did not work. They don’t know how create the EFIROM file with the ROM of the vmware network interfaces.