Topics created by Joe Gill

@joe-gill

https://isimagingdead.com

The real answer for Mac is DEP & MDM. There are free MDMs like https://manager.mosyle.com this is missing a few key features that could be rounded out with open source tools like https://github.com/munki/munki

The key to all of this is that you have an Apple Business manager or Apple School Manager account and the devices enrolled there so they get enrollment packages at first startup.

If you have more questions reddit.com/r/macsysadmin is an OK resource, as well as https://www.macadmins.org slack channel. Then there is always JAMF Nation which is another apple MDM but the forum has broad apple questions and answers that apply not only to JAMF

@Joe-Gill Are you still around? Would be great to hear if you still see this issue on some of your machines. I have tried to replicate this problem but wasn’t able to. See here: https://forums.fogproject.org/topic/13902/fog-service-and-interventions

@Wayne-Workman
@george1421

I figured this one out… I was having problems with security. One of Windows 10’s recent updates (as in the last 3 months or so) was blocking connections to anonymous shares. It allowed them but they needed to be authenticated. For those of you who stumble across this post…

Add your FOG server to your domain and configure Kerberos. After you do this you will need to configure your driver share. I have included the way I did mine and it works. This configuration is for using an existing domain controller. In our case, we use Windows Server 2012 to do domain control.

Do the following:

yum install samba*
yum install krb5-libs krb5-workstation

Confuguration Kerberos /etc/krb5.conf

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
default_realm = YOURDOMAIN
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true

[realms]
DOMAIN.TN = {
kdc = dns-name-your-domain-controller
}

[domain_realm]
netbiosnameyourdoamin = NETBIOSNAMEYOURDOMAIN
netbiosnameyourdomain = NETBIOSNAMETYOURDOMAIN
Configuration samba /etc/samba/smb.conf

[global]

workgroup = DOMAIN
password server = dns-name-your-domain-controller:88
realm = NETBIOSNAMETYOURDOMAIN
security = ads
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /bin/bash
winbind use default domain = false
winbind offline logon = true

log file = /var/log/samba/log.%m
max log size = 50

passdb backend = tdbsam

load printers = yes
cups options = raw

[homes]
comment = Home Directories
browseable = no
writable = yes

[printerdrivers]
comment = All FOG Printers
path = /PATHTODRIVERS
browseable = no
guest ok = no
writable = yes

Add dns name in /etc/hosts

Install and configuration ntp server (It’s important for use Kerborose authorization)

yum install ntpd
edit /etc/ntp.conf
server ip-address-your-ntp-server prefer
Create ticket
kinit account-admin-for-active-directory@NETBIOSNAMETYOURDOMAIN
Add server in domain

net ads join -S dns-name-your-domain-controller -U account-admin-for-active-directory
Create keytab for Kerberos

net ads keytab create -U account-admin-for-active-directory
Edit file /etc/nsswitch.conf

passwd: files winbind
shadow: files winbind
group: files winbind

Restart samba and windind

Test
net ads info
wbinfo -t

@Sebastian-Roth

Sounds great! Like I said, let me know what you all are working on and I’ll do my best. I do have some background in programming but it’s been a bit. I am trying to pick up Python and do a little teaching here at our district.

I worked in UNIX for a couple years at one of my first computer jobs. They hired me because I liked tinkering in Linux. I’ve used Linux since the first iterations of Redhat. 🙂 The FOG project does draw you in. It’s a great thing. Some of us can’t afford to throw cash at it but certainly am willing to donate time.

So keep me posted! Thanks!

I’m on fire today guys… I apologize for all of these mis-posts… The reason why my FOG hosts aren’t getting jobs is because my old server is still online… I was running an old image that had my previous server IP on it for the client…

Boy oh boy! Glad it was that simple. I believe that is the end of it.

Please mark this as solved.

Nevermind!!! My browser must have been being an issue…

Disregard this thread. SMH…

Ha!

In a remote session we figured out that the database schema version was kind of oddly set. Still not sure why that was. Fixed that and applied the last couple of schema changes. That fixed a couple of odd issues including the Storage Node setting changes that can be done now again.

@Fernando-Gietz
@Sebastian-Roth

Fernando’s fix takes it! That worked!

The first statement didn’t produce any results. But the second one did and after I restarted Multicasting, things are working again! Woo Whoo!

Thanks guys! I owe you both a beer!

Cheers!

For the record, if anyone else has this issue…

This was the fix…

ALTER TABLE multicastSessions ADD COLUMN msAnon4 VARCHAR(250) AFTER msAnon3;

@Tom-Elliott
Strange. What’s even weirder is it started working once I entered into a forum thread… Now it’s working fine. LOL!

For what it’s worth, I’m running Ubuntu 19 and the Chrome Browser…

I’m OK with it since it’s working now. Can’t explain it though! Ha!

Thanks Tom!

@Joe-Gill said in Keeping WIN10 Images Updated (Windows Updates):

Thanks for that info. I’m looking into setting up a server with MDT on it. Hopefully that will help these issues.

FWIW: For MDT you don’t need a server class machine or OS. You can use desktop os and computer for this task. Virtualize if you can, but lower class physical hardware for “MDT server” is usable.

@Joe-Gill Great to hear you are making progress here! Definitely seems like one of the more difficult ones to figure out. Keep it up! 🙂

@Wayne-Workman

You can mark this one solved.

I deleted ALL power management entries. (Regardless of seeing any listed.) I haven’t had any hosts shutdown since.

Thanks again!

@tom-elliott
OK that would make since. I’d say that is not an issue.

I was jumping back and forth from 1.5.4 to 1.6 yesterday trying to get some kind of stability. Currently I’m on 1.5.4 and have moved on to other projects. But… Would love to get things going again to multicast. PM me if you have any ideas please.

Thanks!

@joe-gill Well in a way I’m glad this issue was a FOG specific one, but rather an infrastructure. I can say multicasting is a bit of a fickle beast no matter what imaging technology you are using. When it works, its great.

It sounds like your network was configured for dense mode multicasting where it would just send the mutlicast stream to all ports even if there were no multicast subscribers.

Thank you for providing solid feedback and sticking with this issue until it is resolved.

I remoted into Joe’s system and looked about for a bit.

What I found was there was/is 3 versions of php and php-fpm installed and all were trying to run at the same time.

I stopped, php-fpm v5, php-fpm v7.0, and left php-fpm 7.2 running.

I could not find a handy copy of the official fog configuration for the www.conf file so I hand edited the distro’s version setting max processes to 50, start, min to 5 and spares to 6. I also set php max memory size to 256M.

After that I asked Joe to multicast deploy an image. He reported that he deployed to 24 systems. I watched the process status screen and the number of active php-fpm processes never went above 6 workers (where 50 is the max). Joe stated that all 24 machines deployed to completion.

So at this point I’m pretty sure the issue with this system was having multiple versions of php installed as the root cause. I’m not ready to rule out a www.conf file setting that is not right, but I’m happy with what I saw from the performance of php-fpm service in this multicast deployment.

@joe-schmitt
I see. I did discover a BIOS/UEFI setting on this lab model that does not allow the computer to completely go to sleep. This may at least let me invoke shutdown or WOL. We’ll see. Otherwise, I can always use CRON to set the shutdown settings after things have been updated.

Thanks again!

@george1421
As always, I appreciate the help! I am happy to help out where I can.

@quazz

So I tried re-capturing the image from my VM and it finally finished but took forever. I left a ping running on the host and the server and never had any lost packets. I had some higher ping times going to the VM were average with one very high number. But never any packet loss.

I decided to try and capture the image to a brand new image and not one I had used previously. I noticed my transfer rate was higher and it ultimately finished capturing the image.

Could the delay simply be the difference between imaging a Windows 10 machine versus a Windows 7 Machine? This is the first image I have created of a Windows 10 machine.

Let me know if you have any thoughts on this.

Thanks again for making me think more about it. 🙂

Cheers!

@Joe-Gill glad you found a quick fix. I’ll keep this ticket open though, as it points to a deeper issue in the client: PrinterManager has a thread safety issue.