Hi FOGers!!

I attach some captures of this new plugin

When we list all users, appears the role that they have linked.

We can link a role to one user from user edit page.

In the accesscontrol page we can list, edit and add new roles

And create, list and edit rules

Editing a rule …

@george1421 Yes, the idea is more or less that you say

I will update the initial post to add one Christmas List I don’t know if I will can develop all of them but is important see the different necessities of the people and ideas.

We have been thinking about the different roles of the users. It would be very interesting the possibility of define different roles and each rol with different rules.

For example:
we have the users table in the database, actually this table only define two roles or levels (the uType field {0,1}). With this we can separate the admin users from mobile users.
I don’t want to change this, then from the plugin you could create different roles (admin rol, restrincted user rol, others …) in a new table and rules of access. I am dreaminggg!!! XD

Well, I don’t know if is possible to know the structure of the webUI, the main menu icon, submenus … Is possible?

Hi FOGers!!
I need to develop a control access plugin and, although I have more or less the things clear in my head, I would like share my minds with you. I accept suggestions, corrections, …

Feature:

• Control the access to the icons, menus and submenus in the the webUI by rol.
• Limit the searches and access to the resources (snapin, hosts, groups, tasks and images) of one or more locations.

Necessities:

• Create a new rol: restricted user

This plugin has two levels of control:

• Visual: Limit the access to the menus and submenus by rol user. The admin rol can access to all menus and submenus of the webUI and the restricted user only can access to the some menus and submenus (for example: Home, Hosts, Groups, Images, snapin, printer, tasks and logoff)
• Searches: Limit the range of the search to the resources of one or more locations. The restricted user only can see the hosts, groups, images that are link or associated to his/her location/locations.

This last level have a dependency with Location plugin.

Dependencies:

• Location plugin

Well, hereinafter I accept suggestions, ideas …

Christmas List:

• Imaging techs assigned to Location A, may not touch or deploy any target host at Location B. Possibly read only access to Location B’s host records might be interesting.
• Create different roles
• Create different access rules

eu-EU [Basque]

### SHUTDOWN PROMPT ###
{company} ekipo honetan mantentze lanetan dabil.
{company} needs to perform maintenance on this computer.

Mesedez, gorde zure lana eta itxi programa guztiak.
Please save any work and close all programs.

Ezeztatu
Cancel

Ezkutatu
Hide

Atzeratu
Postpone

Berpiztu Orain
Restart Now

Itzali Orain
Shutdown Now

Atzeratu
Postpone for

X ordu Y minutu Z segundo
X hour(s) Y minute(s) Z second(s)

### NOTIFICATIONS ###

Itzaltze prozesua Ezeztuta
Shutdown Aborted

Itzaltze prozesua ezeztuta izan da
Shutdown has been aborted

Itzaltze prozesua atzeratuta
Shutdown Delayed

Itzaltze prozesua {time} atzeratua izan da
Shutdown has been delayed for {time}

{time} itzaliko da 
Shutdown will occur in {time}

Berehala itziko zaizu saioa
You are about to be logged off

Saioa itziko zaizu aktibitaterik ez bago
You will be logged off if you remain inactive

Instalatzen {snapin name}
Installing {snapin name}

Mesedez, ez itzali ekipo prozesua amaitu arte
Please do not shutdown until this is completed

{snapin name} instalatua izan da
{snapin name} installed

Instalazioa bukatu da eta erabiltzeko prest dago
Installation has finished and is now ready for use

Short version:

### SHUTDOWN PROMPT ###
{company} ekipo honetan mantentze lanetan dabil.
Mesedez, gorde zure lana eta itxi programa guztiak.
Ezeztatu
Ezkutatu
Atzeratu
Berpiztu Orain
Itzali Orain
Atzeratu
X ordu Y minutu Z segundo


### NOTIFICATIONS ###

Itzaltze prozesua Ezeztuta
Itzaltze prozesua ezeztuta izan da
Itzaltze prozesua atzeratuta
Itzaltze prozesua {time} atzeratua izan da
{time} itzaliko da 
Berehala itziko zaizu saioa
Saioa itziko zaizu aktibitaterik ez bago
Instalatzen {snapin name}
Mesedez, ez itzali ekipo prozesua amaitu arte
{snapin name} instalatua izan da
Instalazioa bukatu da eta erabiltzeko prest dago

I didn’t see this post. My two cents.

es-ES [Spanish (Spain)]

### SHUTDOWN PROMPT ###
{company} necesita realizar el mantenimiento en este equipo.
{company} needs to perform maintenance on this computer.

Por favor, guarde su trabajo y cierre todos los programas.
Please save any work and close all programs.

Cancelar
Cancel

Ocultar
Hide

Posponer
Postpone

Reiniciar Ahora
Restart Now

Apagar Ahora
Shutdown Now

Posponer durante 
Postpone for

X hora(s) Y minuto(s) Z segundo(s)
X hour(s) Y minute(s) Z second(s)

### NOTIFICATIONS ###

Apagado Cancelado
Shutdown Aborted

El apagado ha sido cancelado
Shutdown has been aborted

Apagado Retrasado
Shutdown Delayed

El apagado ha sido retrasado {time}
Shutdown has been delayed for {time}

El apagado se producirá en {time}
Shutdown will occur in {time}

Está a punto de ser desconectado
You are about to be logged off

Será desconectado si permanece inactivo
You will be logged off if you remain inactive

Instalando {snapin name}
Installing {snapin name}

Por favor, no apague hasta que no haya finalizado
Please do not shutdown until this is completed

{snapin name} ha sido instalado
{snapin name} installed

La instalación ha finalizado y está listo para ser usado
Installation has finished and is now ready for use

Short version:

### SHUTDOWN PROMPT ###
{company} necesita realizar el mantenimiento en este equipo.
Por favor, guarde su trabajo y cierre todos los programas.
Cancelar
Ocultar
Posponer
Reiniciar Ahora
Apagar Ahora
Posponer durante 
X hora(s) Y minuto(s) Z segundo(s)

### NOTIFICATIONS ###
Apagado Cancelado
El apagado ha sido cancelado
Apagado Retrasado
El apagado ha sido retrasado {time}
El apagado se producirá en {time}
Está a punto de ser desconectado
Será desconectado si permanece inactivo
Instalando {snapin name}
Por favor, no apague hasta que no haya finalizado
{snapin name} ha sido instalado
La instalación ha finalizado y está listo para ser usado```

Hi George,

I can see that you added the option to use AD groups to define admin/mobile profiles or not. Can I test it anyway? I have update the server version to RC13, and in this version until is not operative these changes.

Thanks!! I will try it as soon as possible.

Server

• FOG Version: 1.3.0-RC-11
• OS: RHEL 7

Client

• Service Version:
• OS:

Description

When I try to upload an image an error apears. The error appears after attemp to check in the task.

Class MulticastSessionAssoc does not exist

I had installed a version from april and I updated the version to RC 11 to solve a problem with the assosation of snapin.

IPXE file:

#!ipxe
set fog-ip 10.0.15.8
set fog-webroot fog
set boot-url http://${fog-ip}/${fog-webroot}
kernel bzImage loglevel=4 initrd=init_32.xz root=/dev/ram0 rw ramdisk_size=127000 web=10.0.15.8/fog/ consoleblank=0 rootfstype=ext4 mac=00:25:b3:14:9a:c6 ftp=10.0.15.8 storage=10.0.15.8://images/dev/ storageip=10.0.15.8 osid=50 irqpoll hostname=u006500 chkdsk=0 img=aulabzrectoradocentos7 imgType=mps imgPartitionType=all imgid=22 imgFormat= PIGZ_COMP=-3 shutdown=1 hostearly=1 pct=5 ignorepg=1 mining=1 miningcores=1 miningpath=http://fogproject.org/fogpackage.zip type=up
imgfetch init_32.xz
boot

I dont understand why an upload task needs and multicastSessionAssoc class

Hello!! A little feedback about this wonderful plugin
I installed it this morning (this morning here in Spain) and I like the different options to setup it but, for me, is a little confused fill the correct boxes to run it.

Actually we use openLDAP server (we have AD too but we don use it to validate the user under FOG), then I dont know which boxes need to fill to run the plugin well. The old version (RC-10) was easy (although I need to change some things in the code to run it well).

Questions:
Admin groups and Mobile groups, what these parameters are for? ¿purpose?
If I have a LDAP server, Bind DN and Bind password, is necessary fill these parameters?

Bugs:
In line 370 from ldap.class.php file:

$userDN = sprintf(
                 '%s=%s,%s',
                 $userNamAttr,
                 $user,
                 $userSearchDN
);

The $userNamAttr and $userSearchDN are empty, I dont know the reason, I have changed it to:

$userDN = sprintf(
                 '%s=%s,%s',
                 strtolower($this->get('userNamAttr')),
                 $user,
                 strtolower($this->get('searchDN'))
);

When the code tries to do the bind, always return me false.

Well, the service is logging but this file is not in /opt/fog/log/fogscheduler.log. The file is in /fogscheduler.log

I will do it tomorrow

Yes!!!

tail -n 1 /opt/fog/log/multicast.log
[05-05-16 7:36:18 pm] * No tasks found!
[root@fog6 bczgiflf]# date
jue may 5 19:36:30 CEST 2016

Hi,

I have noticed that FOGScheduler service is not writing in the log file. I updated the version May 29 and since then the service don’t update the log file.

systemctl status FOGScheduler -l
● FOGScheduler.service - FOGScheduler
Loaded: loaded (/usr/lib/systemd/system/FOGScheduler.service; enabled; vendor preset: disabled)
Active: active (running) since jue 2016-05-05 19:25:32 CEST; 3min 11s ago
Main PID: 2503 (FOGTaskSchedule)
CGroup: /system.slice/FOGScheduler.service

tail -n 1 /opt/fog/log/fogscheduler.log
[04-28-16 2:04:25 pm] * Task run time: Fri, 29 Apr 2016 08:00:25 +0000
├─2503 /usr/bin/php -q /opt/fog/service/FOGTaskScheduler/FOGTaskScheduler &
└─2516 /usr/bin/php -q /opt/fog/service/FOGTaskScheduler/FOGTaskScheduler &

tail -n 1 /opt/fog/log/fogscheduler.log
[04-28-16 2:04:25 pm] * Task run time: Fri, 29 Apr 2016 08:00:25 +0000

With the other services this issue does not appear.

OK. Thanks Tom. I don’t see it before

The option is FOG_TZ_INFO

Hi,

I noticed that the system hour and the service logs hour are differents.

[root@fog6 log]# tail -n 1 multicast.log
[05-05-16 5:15:19 pm] * No tasks found!
[root@fog6 log]# date
jue may 5 19:15:26 CEST 2016

Normally this is not a problem, but when I schedule a task, I need to schedule it two hours before

Can I solve this any way?

I have update the version and it seems that it works fine. The second disk is recovering the image. I need to do more test but windows 7 and windows 7 disks works fine.

If I have in the first disk Windows7 and in the second disk Ubuntu, How do I setup the image type?

Thanks, Sebastian, for your quick answer

I will wait then for the definitive patch and test it.

Hi support,

Finally I can upload images multidisk to the server. I have one question. If you have a multidisk computer, and in the first disk you have installed W7 with recovery partition, system partition and another one for data and the other disk Ubuntu, What type of image do you must setup in the image definition?

-rwxrwxrwx  1 root root 1,0M feb 26 16:02 d1.mbr
-rwxrwxrwx  1 root root 8,6M feb 26 16:02 d1p1.img
-rwxrwxrwx  1 root root 5,0G feb 26 16:11 d1p2.img
-rwxrwxrwx  1 root root  190 feb 26 16:02 d1.partitions
-rwxrwxrwx  1 root root    0 feb 26 16:11 d2.has_grub
-rwxrwxrwx  1 root root 1,0M feb 26 16:11 d2.mbr
-rwxrwxrwx  1 root root   47 feb 26 16:13 d2.original.swapuuids
-rwxrwxrwx  1 root root 1,4G feb 26 16:13 d2p1.img
-rwxrwxrwx  1 root root  512 feb 26 16:13 d2p2.ebr
-rwxrwxrwx  1 root root  512 feb 26 16:11 d2p5.ebr
-rwxrwxrwx  1 root root  250 feb 26 16:11 d2.partitions

When I try to download this image to the computer, I get different errors.

If I setup the image type like “Other(99)”, the error that appears is

Ig I setup image like “Windows 7” or “Windows Other”, I can download the first disk image but when partclone try to download the first partition of the second disk fails because FOG tries to copy the d2p1.img file in /dev/sda1.

Partclone error

And the error log

Edite: I could dowload image multidisk before December versions

Ok. Actually works fine with the version 6371. The second disk filesystem was corrupted

No, my second disks was not encrypted.

After a complex update process

Now the problem is the partclone, doesn’t detect well the partition type.

 more 0025b3149ac6/d2.partitions 
label: dos
label-id: 0x000b6c36
device: /dev/sdb
unit: sectors

/dev/sdb1 : start=        2048, size=   312494080, type=7