Posts made by Fernando Gietz

To know which code returs, you can do a little change in the code:
File: /var/www/html/fog/lib/plugins/hoststatus/hooks/addhoststatushost.hook.php

case 0:
                        printf($strtoupdate, 'windows', 'windows', 'green', 'Windows');
                        break;
                case 111:
                        $taskID = self::getSubObjectIDs(
                            'Task',
                            array('hostID' => $hostID,
                                      'stateID' => 2
                                ),
                            'id'
                        );
                        if (is_null($taskID)) {
                            printf($strtoupdate, 'linux', 'linux', 'blue', 'Linux');
                        } else {
                            printf($strtoupdate, 'fos', 'cogs', 'green', 'FOS');
                        }
                        break;
                default:
                        printf($strtoupdate, 'down', 'exclamation-circle', 'red', 'Unknown');

Change the line 114:

printf($strtoupdate, 'down', 'exclamation-circle', 'red', $ping);

Now in the host edit page will be appeared the code in the description when the mouse pass over the icon.

The script tries to create a socket from the server to the computer in the 445 TCP port, and depending the code that the computer returns, it determinates the OS.

Code values:

• 0: Windows
• 111: Linux
• 111 and active task in the database: FOS
• default: Unknown

                case 0:
                        printf($strtoupdate, 'windows', 'windows', 'green', 'Windows');
                        break;
                case 111:
                        $taskID = self::getSubObjectIDs(
                            'Task',
                            array('hostID' => $hostID,
                                      'stateID' => 2
                                ),
                            'id'
                        );
                        if (is_null($taskID)) {
                            printf($strtoupdate, 'linux', 'linux', 'blue', 'Linux');
                        } else {
                            printf($strtoupdate, 'fos', 'cogs', 'green', 'FOS');
                        }
                        break;
                default:
                        printf($strtoupdate, 'down', 'exclamation-circle', 'red', 'Unknown');

In your case:

• Or the server can not reach the computer
• Or the computer returns other code (neither 0 nor 111)

14500 computers in the database are a lot of. I had troubles in the past when I tried to list my 8000 computers, this was solved with the php-fpm module but maybe in you case the problem is other (timeouts in the database or used memory)

Any error in the apache logs?

Is a random situation, I have tried to replicate the issue but was unsuccess. The problem is with the first time that the FOGservice runs, if you reboot the computer, in the second time the service runs well. But is necesary do it manually

Hi @JB2019 ,
If you want to install the last version of FOG please follow the instructions of the next link:

Getting FOG

You can see it in:

Host Image History bug?
https://forums.fogproject.org/topic/12934/host-image-history-bug

If you want to not update the server to this release you can do a little change of code, you can see it in:

https://github.com/FOGProject/fogproject/commit/501e2e947abe55f61fec434751e51e517dcba4d4

Hi @Florent ,

Which version og FOg are you using? I think that in the last release this problem is solved

@Sebastian-Roth Yes, we do sysprep to deploy the image but we setup the FOG client to start the service as the post says.

@george1421 In the FOG client log:

10/05/2019 11:24 Main Overriding exception handling
 10/05/2019 13:46 Main Overriding exception handling
 10/05/2019 13:46 Main Bootstrapping Zazzles
 10/05/2019 13:46 Controller Initialize
 10/05/2019 13:46 Controller Start

 10/05/2019 13:46 Service Starting service
 10/05/2019 13:46 Bus Became bus server
 10/05/2019 13:46 Bus Emmiting message on channel: Status
 10/05/2019 13:46 Service Invoking early JIT compilation on needed binaries

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 10/05/2019 13:46 Client-Info Version: 0.11.16
 10/05/2019 13:46 Client-Info OS:      Windows
 10/05/2019 13:46 Middleware::Authentication Waiting for authentication timeout to pass

We can see that the service trid to start at 11:24, then two hour later after reboot the computer the service start well.

In the windows event log we can see more information:

At 11:20 the system starts and at 11:24 an error:

This error launchs a 7000 event, in this page we can see more info about it:

A service does not start, and events 7000 and 7011 are logged in the Windows event log

The service control manager waits for the time that is specified by the ServicesPipeTimeout entry before logging event 7000 or 7011.
Services that depend on the Windows Trace Session Manager service may require more than 60 seconds to start. 
Therefore, increase the ServicesPipeTimeout value appropriately to give all the dependent services enough time to start.

For more information, click the following article number to view the article in the Microsoft Knowledge Base: 
839803 The Windows Trace Session Manager service does not start and Event ID 7000 occurs

Hi,
With the 1.5.6 release version is available one new plugin: Host Status.

This plugin say you the state of the computer in the host edit page:

This plugin detects the OS that is running in the computer:

• Windows
• Linux
• FOS (Fog Operative System): a FOG task is running in the PC
• Unknown: the FOG server can not comunicate with the PC: the PC is shutdown or the firewall is closed (you must open the 445 TCP port in the computer)

The state is detected on fly and only in the host edit page.

NOTE: when you search one host or hosts, in the result list appears the state of the computers too, but this state is read from the database and this entry in the database is updated by FOGHostPing daemon. The daemon need time to iterate with all computers and update his state. If you have a lot of PC in your FOG server, the daemon takes one second per PC to update his state, there may be discrepancies between the two states (host status plugin and FOGHostPing daemon)

Yes, all computers are setup as service delayed. Is possible increase the delayed time?

Hi,
Sometimes when we deploy an image in one IT room and Windows boots, the FOGService doesn´t start. I saw the properties of the FOGService service in the console and this one start delayed. Does´t happen always, but if we deploy 40 computers, maybe 10 don´t start the service.

Normaly the problem happen in computers with SSD disks, we think that the problem is that the system boots so quickly that one or more dependecies don´t start.

Any idea?

Hi @Sebastian-Roth and @EduardoTSeoane ,

I tested the changes in my dev environment and the suggestions work fine. I think we can push the changes in the repository.

I don´t use the location plugin but Ithink that the problem is the same. Maybe, @Tom-Elliott can say us want think about them XD and the reason it does not wok correctly

@Miodog This is for 1.5.5 version.
But you can do a workaround:

1. go to FOG_DIRECTORY/lib/plugin/ldap/hooks
2. Do a copy of ldappluginhook.hook.php

#cp ldappluginhook.hook.php ldappluginhook.hook.php.ori

3. Lets go to edit one line of the code:

# vim ldappluginhook.hook.php

    /**
     * Sets our user type to filter from user list
     *
     * @param mixed $arguments the item to adjust
     *
     * @return void
     */
    public function setTypeFilter($arguments)
    {
          $arguments['types'] = array(990,991);
    }

4. Change the line:

$arguments['types'] = array(990,991);

To:

$arguments['types'] = array(991);

With this change you can see the local users and LDAP admin users

@Miodog said in Access Control Plugin working with AD:

Re: Access Control
I’m currently setting up FoG and I got the LDAP plugin working with two security groups Admin and Mobile and I found this thread form earlier this year that mobile no longer exists.

Is there plans to tie the Access Control plugin with the LDAP plugin where I can assign roles to LDAP users of FoG?

If not is the only way to use the Access Control plugin to use users created from the FoG GUI user menu?

When you install and config the LDAP plugin, you can setup two user profiles: Admin and mobile. The users of admin group can see all options of the interface (dashboard, hosts, images, groups, configuration, …) and the mobile users load a small and limit interface. As you read in the post Access Control the mobile interface is obsolete and will be deprecated in the future.

We can distinct two users in FOG: Local users and LDAP users.

• Local users
  These users are create in the web interface and you can create it on demand and you can have as many users as you need. In the table users of the database these users have the uType = 0 or 1 (0 for admins and 1 for mobile)

• LDAP users
  These users are create in the database automatically when one user log on successfully. In the database have uType values equal 900 and 901 (900 for users of admin group and 901 for users of mobile group). By default the user of admin group can see all options in the web interface.

With the AccessControl plugin you can limit the access of the users to the some menus of the interface web, you can define some rules (access to one menu or submenu), you can define some roles (groups of users) and tie rules to roles. With this you can define different access levels. But you must config it manually.

You can assign local users and LDAP users to one role. By default you can only see the local users list, to see all users of the database you must to config the user filter in FOG Configuration -> FOG Settings -> Plugin LDAP -> User Filter.

Hi @antonionardella ,

I tried to reproduce the problem but I can’t (log with bad credentials). My log files don’t show the password or the username.

Can you paste the error to try find where launch the exception or the error?

You can reset the encryption data:

1. Host management page

2. Group management page:

Try to reset the encryption data in the web UI.

You can do it XD
First you must to know the name of the System product want to deploy.

1. Go to reports -> Inventory Reports
2. If you have the lastest dev-branch version, you can filter by System Product. If you don’t have this last version, in the report will appears all the hosts
3. Copy the System Product string that you want to deploy
4. Go to Host menu
5. And paste the string in the search box
6. Create a new group with the results

@antonionardella said in LDAP Plugin with openLDAP:

Hi @Fernando-Gietz, I am terribly sorry, but making everyone an admin does not look like an option.
It’s less about the web UI access, but more about restricting users (see students) from deploying random images to the systems and breaking things or activating licenses of pre-imaged software.

OK, you are right if you have student in the same LDAP server. Then the second option XD

What if the group would be called dsp, is it in no way possibile to limit the access only to this group here?
What is the issue exactly?

the problem is the filter that the code construct, in your case this filter is bad and doesn t work.

Bad filter:

(&(|(name=dsp))(memberuid=uid=dsptest,ou=Users,dc=****,dc=***))

Good filter:

(&(|(name=dsp))(memberuid=dsptest))

To do it well, the $userDN variable value should be dsptest and not uid=dsptest,ou=Users,dc=xxx,dc=xxx. If you do the previous suggested change in the code, $userDN = $user;, the filter should be fine and the validation proccess works fine for all users.

Hi @antonionardella ,

Ok the erorr is normal XD. I see two ways to solve your case:

1. Not use admin groups and all users are administrators, later you can restrict the access to the web UI using the AccessControl plugin.

2. Do a little change in your code:

        /**
         * Only one entry
         */
        $entries = $this->get_entries($result);
        /**
         * Pull out the user dn
         */
        $userDN = $entries[0]['dn'];
        /**
         * If use group match is used, get access level,
         * otherwise group scanning isn't used. Assume all
         * are admins.
         */
        if ($useGroupMatch) {
            $accessLevel = $this->_getAccessLevel($grpMemAttr, $userDN);
        } else {
            $accessLevel = 2;
        }

Change the 541 line in ldap.class.php file to:

        /**
         * Only one entry
         */
        $entries = $this->get_entries($result);
        /**
         * Pull out the user dn
         */
//        $userDN = $entries[0]['dn'];
           $userDN = $user;
        /**
         * If use group match is used, get access level,
         * otherwise group scanning isn't used. Assume all
         * are admins.
         */
        if ($useGroupMatch) {
            $accessLevel = $this->_getAccessLevel($grpMemAttr, $userDN);
        } else {
            $accessLevel = 2;
        }

I prefer the first one