FOG Project

lebrun78

thanks for your great work

lebrun78

@george1421
I had Pxelinux.0 in my dhcp, the new code replace it now.

lebrun78

Yes, restart computer > ok
If I restart the fogservice, it works too

lebrun78

@joe-gill
https://forums.fogproject.org/category/11/feature-request

lebrun78

I use fog 1.4.4 on centos 6.8.
I use non-resizable image but the problem seem to be on boot chaining between ipxe and windows.

lebrun78

May be I am not clear.
All my compututer are boot first on pxe controlled by FOG.
But I have no problem with computer that are running Linux and Windows10 =< 1709.
But for computer that are running Windows 10 1803, available for 2 weeks, boot chainon between pxe and harddrive doesn’t work.
To start this machine I have to disable PXE.in bios or escape oduring PXE loading.

lebrun78

This morning, I have the problem on several machines which have get 1803 update…
I have changed the dhcp configuration for this machine to point to my testing fog server. (1.5.2)
On this server, I have applied Quazz solution to set grub in place of sanboot and now my Dell machines on 1803 have started passing by PXE…

Now I have to set it to my production fog server…

Thanks for your help

lebrun78

@george1421

Here is the post:
https://lists.isc.org/pipermail/dhcp-users/2020-April/022039.html

lebrun78

@Sebastian-Roth
Yes class and host are now declarated in groups, not in subnets.
So now, I declare all subnets first and after all groups.
Here is my new dhcpd.conf file:

# dhcpd.conf  
#
ddns-update-style standard;
authoritative;

#log-facility local7;
set vendor-string = option vendor-class-identifier;
log (info, option vendor-class-identifier);


##############################################
# rajoute pour les telephones IP IFSIC/ISTIC
# C'est pour pouvoir utiliser le prise LAN
# derriere le telephone dans l'un des reseau ESIR/ISTIC
##################################################
option space Tel-Sip;
option Tel-Sip.cfg-server-address code 2 = text;
option Tel-Sip.contact-rcs code 3 = boolean;

class "telephones-ip" {
	# voir man dhcp-eval
	match if substring(hardware,1,3) = 00:08:5d;
	option server.min-lease-time 40;
        option ntp-servers 129.20.251.1;
        #option tftp-server-name "129.20.131.108";
	option server.vendor-option-space Tel-Sip;
      	option server.boot-unknown-clients true;
      	option Tel-Sip.contact-rcs true;
      	option Tel-Sip.cfg-server-address "ftp://connexio994:xa3SGXZE74@10.21.7.8";
}

# sacker un peu les smartphones ...
class "android" {
  match if substring(option host-name,0,7) = "android";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "iPhone" {
  match if substring(option host-name,0,6) = "iPhone";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "iPad" {
  match if substring(option host-name,0,4) = "iPad";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "Windows-Phone" {
  match if substring(option host-name,0,13) = "Windows-Phone";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "Galaxy" {
  match if substring(option host-name,0,6) = "Galaxy";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "HUAWEI" {
  match if substring(option host-name,0,6) = "HUAWEI";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "Samsung" {
  match if substring(option host-name,0,7) = "Samsung";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "Honor" {
  match if substring(option host-name,0,5) = "Honor";
  default-lease-time 900 ;
  max-lease-time 900 ;
}


#
# machines recevant une IP dynamique dans le vlan2 (lan-free).
#

include "/etc/dhcp/vip.conf";

subnet 145.55.0.0 netmask 255.255.248.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.7.254 ;
option subnet-mask 255.255.248.0 ;
default-lease-time 86400 ;
max-lease-time 172800 ;

pool {
                allow members of "vip";
                range 145.55.7.200 145.55.7.230;
}




	####################################################
        # pool d'adresse dynamique reserve aux telephones IP
	# masque de 255.255.255.240 pour le firewall
        pool {
                allow members of "telephones-ip";
                range 145.55.0.224 145.55.0.239;
        }
}


#subnet 145.55.8.0 netmask 255.255.255.0 {
##########################################                                                
#option domain-name-servers 145.55.15.109,145.55.15.106 ;
#option domain-name "monuniversite1.fr" ;
#option routers 145.55.8.254 ;
#option subnet-mask 255.255.255.0 ;
#default-lease-time 6000 ;
#max-lease-time 12000 ;
#group {
#}
#}

subnet 145.55.10.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.10.254 ;
option subnet-mask 255.255.255.0 ;
default-lease-time 600 ;
max-lease-time 1200 ;



	pool {
		deny members of "telephones-ip";
		range 145.55.10.180 145.55.10.220;
		next-server 145.55.4.1;
        	#filename "pxelinux.0";
	}

	####################################################
	# pool d'adresse dynamique reserve aux telephones IP
	# testsip
	pool {
		allow members of "telephones-ip";
		range 145.55.10.224 145.55.10.239; #avec un masque de 255.255.255.240 pour erebus
	}
}

subnet 145.55.11.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.11.254 ;
option subnet-mask 255.255.255.0 ;
default-lease-time 86400 ;
max-lease-time 172800 ;
range 145.55.11.1 145.55.11.9 ;


}

subnet 145.55.12.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.12.254 ;
option subnet-mask 255.255.255.0 ;
default-lease-time 86400 ;
max-lease-time 172800 ;
#

range 145.55.12.101 145.55.12.140 ;
#range 145.55.12.100 145.55.12.199 ;
}

subnet 145.55.13.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.13.254 ;
option subnet-mask 255.255.255.0 ;
option ntp-servers 129.20.128.22;
default-lease-time 3600 ;
max-lease-time 3600 ;
adaptive-lease-time-threshold 80;
min-lease-time 900;
range 145.55.13.1 145.55.13.247 ;
}

subnet 145.55.14.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.14.254 ;
option subnet-mask 255.255.255.0 ;
option ntp-servers 129.20.128.22;
default-lease-time 3600 ;
max-lease-time 3600 ;
adaptive-lease-time-threshold 80;
min-lease-time 900;
range 145.55.14.16 145.55.14.253 ;
}

subnet 145.55.15.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.15.254 ;
option subnet-mask 255.255.255.0 ;
default-lease-time 2592000 ;
max-lease-time 5184000 ;
}

subnet 129.20.15.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 129.20.15.254 ;
option subnet-mask 255.255.255.0 ;
default-lease-time 2592000 ;
max-lease-time 172800 ;
#

	####################################################
	# pool d'adresse dynamique reserve aux telephones IP
	# testsip
	pool {
		allow members of "telephones-ip";
		range 129.20.15.224 129.20.15.239; #avec un masque de 255.255.255.240 pour erebus
	}
}

group { #######################################VLAN2 > FOG ########################################
	next-server 145.55.4.1;

class "Legacy" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
        filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }

host admin01 { hardware ethernet 74:e6:e2:d9:dd:cf; fixed-address admin01; option Host-name "admin01";} # 
host admin02 { hardware ethernet b8:85:84:ac:89:fa; fixed-address admin02; option Host-name "admin02";} # proto windows salles istic
..........................................................................
host imp-b42-001 { hardware ethernet 78:e3:b5:fb:31:da; fixed-address imp-b42-001; option Host-name "imp-b42-001";}
host imp-b42-002 { hardware ethernet 10:1F:74:47:1E:4E; fixed-address imp-b42-002; option Host-name "imp-b42-002";}
# Gateway LORA F.Bodin le 11/12/2019


##module niusrp
host niusrp6 { hardware ethernet 00:80:2f:17:b4:e3; fixed-address niusrp6; option Host-name "niusrp6";}

### Salle machines virtuelles
#

host virt01m01 { hardware ethernet aa:bb:aa:bb:aa:aa; fixed-address virt01m01; option Host-name "virt01m01";}
host virt01m02 { hardware ethernet aa:bb:aa:bb:aa:ab; fixed-address virt01m02; option Host-name "virt01m02";}

host w10 { hardware ethernet 9c:8e:99:f5:1a:a9; fixed-address w10; option Host-name "w10";}

# marque debut pour dhcp-vm vlan 2, pas touche SVP.

# marque fin pour dhcp-vm vlan 2, pas touche SVP.

}

group {  #######################################VLAN2 > COSINUS ########################################
# Groupe pointant vers le pxe du Fog de test                                                                                                                                    
  	option domain-name-servers 145.55.15.109,145.55.15.106;
        next-server 145.55.4.2;

class "Legacy" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
        filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }
#
#Machine test cosinus

#host centos7-6 { hardware ethernet 52:54:00:b3:30:b5; fixed-address centos7-6; option Host-name "centos7-6";} # VM sur admin11
..................................................................................................................
#host b06-013m01 { hardware ethernet 9c:8e:99:f5:69:2a; fixed-address b06-013m01; option Host-name "b06-013m01";}



}


group {  ###################################### VLAN2 IMPRIMANTES ########################################
host imp-2a-020 { hardware ethernet 00:11:85:FA:28:9A; fixed-address imp-2a-020; option Host-name "imp-2a-020";} # 
h
host d262m03 { hardware ethernet 00:11:43:2C:11:8D; fixed-address d262m03; option Host-name "d262m03";} # gx280 carte acquisition
host e114m01 { hardware ethernet 00:13:72:0D:55:B7; fixed-address e114m01; option Host-name "e114m01";} # F Lamarche
#host imp-b05-001 { hardware ethernet 00:1f:29:1f:23:c9; fixed-address imp-b05-001; option Host-name "imp-b05-001";} 

}
group {  #######################################VLAN2 COMMUT ########################################
#
# groupe  : commut
#
host c12eb { hardware ethernet ; fixed-address c12eb; option Host-name "c12eb";} # 
host c12ea { hardware ethernet ; fixed-address c12ea; option Host-name "c12ea";} # 
host c12ee { hardware ethernet ; fixed-address c12ee; option Host-name "c12ee";} # 
host c2ba { hardware ethernet ; fixed-address c2ba; option Host-name "c2ba";} # 
.................................................................................
host c12dt { hardware ethernet ; fixed-address c12dt; option Host-name "c12dt";} # 
host c12du { hardware ethernet ; fixed-address c12du; option Host-name "c12du";} # 
}


group { ####################################################VLAN10################################################
# On commente les deux lignes suivantes pour eviter le menu de Fog
 	next-server 145.55.4.1;

class "Legacy" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
        filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }

host arrakis { hardware ethernet 00:23:AE:6A:83:FA; fixed-address arrakis; option Host-name "arrakis";} # Gx360 Gentoo AD
host admin11 { hardware ethernet 9c:8e:99:f5:68:ca; fixed-address admin11; option Host-name "admin11";} #linux test 8300 AD
......................................................................................................................
#host miage-dell6 { hardware ethernet 10:65:30:83:5c:4b; fixed-address miage-dell6; option Host-name "miage-dell6";} #   
# marque debut pour dhcp-vm vlan 10, pas touche SVP.
host winrm10 {hardware ethernet 00:11:E2:61:00:03; fixed-address winrm10; option Host-name "winrm10";}     # Ajout par dhcp-vm le 22/08/2016 (11:32:32)
# marque fin pour dhcp-vm vlan 10, pas touche SVP.

}

group { ####################################################VLAN11################################################
# marque debut pour dhcp-vm vlan 11, pas touche SVP.
host pret13 {hardware ethernet 00:11:E7:61:00:10; fixed-address pret13; option Host-name "pret13";}     # Ajout par dhcp-vm le 24/5/2013 (11:21:05)
...........................................................................................................
host palme02 { hardware ethernet 00:23:ae:74:66:85; fixed-address palme02; option Host-name "palme02";} # poste asso Palme d193 Maxime Lambert 12006967
}


group { ##########################################VLAN12#######################################
	next-server 145.55.4.1;

class "Legacy" {
      match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
        filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }
#
### Salle_i204
#
host i204m01 { hardware ethernet 14:b3:1f:19:81:02; fixed-address i204m01; option Host-name "i204m01";}
.........................................................................................................
host i204m10 { hardware ethernet 14:b3:1f:19:80:20; fixed-address i204m10; option Host-name "i204m10";}

### Salle_i206
#
host i206m01 { hardware ethernet b8:85:84:b9:68:49; fixed-address i206m01; option Host-name "i206m01";}
...........................................................................................................
host i206m10 { hardware ethernet b8:85:84:b9:5e:9f; fixed-address i206m10; option Host-name "i206m10";}
#

### Salle_i207
#
host i207m01 { hardware ethernet 78:ac:c0:b1:aa:f6; fixed-address i207m01; option Host-name "i207m01";} # 
............................................................................................................
host i207m22 { hardware ethernet 00:11:43:14:42:11; fixed-address i207m22; option Host-name "i207m22";} #

}
group {
host psyche { hardware ethernet 00:13:72:08:e1:93; fixed-address psyche; option Host-name "psyche";} # 
# host psyche { hardware ethernet 00:13:72:0D:70:D8; fixed-address psyche; option Host-name "psyche";} # 
host anubis { hardware ethernet 00:14:22:75:AF:18; fixed-address anubis; option Host-name "anubis";} # 
}


group { ##############################################VLAN15################################################
#
        next-server 145.55.4.1;

class "Legacy" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
        filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }

#
host wifsic1 { hardware ethernet 00:42:68:44:79:18; fixed-address wifsic1; option Host-name "wifsic1";} #
h....................................................................................................
host satus {hardware ethernet 78:2B:CB:6D:38:C3; fixed-address satus; option Host-name "satus";} 
}


group { ######################################## VLAN3 Personnels ############################
# On commente les deux lignes suivantes pour eviter le menu de Fog 
 	next-server 145.55.4.1;

class "Legacy" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
	filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }
                                                                                                                                                                               #
host ad-istic1 { hardware ethernet 00:15:5d:0f:fb:00; fixed-address ad-istic1; option Host-name "ad-istic1";}
.....................................................................................................
host b06-014m01 { hardware ethernet 8c:04:ba:5d:81:cc; fixed-address b06-014m01; option Host-name "b06-014m01";} # portable Samuel Crand 2019-06
host bug { hardware ethernet 9c:8e:99:f5:9c:2e; fixed-address bug; option Host-name "bug";} # HP 8300 
}
group {  ######################################## VLAN3 Personnels > COSINUS############################
# boot cosinus pour 129.20.15
    next-server 145.55.4.2;

class "Legacy" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
        filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }
#host d000m02 { hardware ethernet c8:1f:66:aa:26:b2; fixed-address d000m02; option Host-name "d000m02";}
#host b42-015m01new {hardware ethernet b8:85:84:b5:ea:9c; fixed-address b42-015m01new;option Host-name "b42-015m01new";}

}

lebrun78

@sebastian-roth
It’s still working for me.

lebrun78

@sebastian-roth

Here is the content of the fog_snapin_inst.ps1 script which mounts the share and which launches either a batch script or a powershell script

param (
    [String] $programme
)
$user = "fog"
$pwd = "EncriptpasswordwBiADEAZA="

$serveur = "\\wolala.univ-rennes1.fr\snapins$"
[Byte[]] $key = (1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16)
$password = ConvertTo-SecureString -key $key -string $pwd
$credential = New-Object -TypeName system.management.Automation.PSCredential -ArgumentList $user, $password

if (!(Test-Path -Path Q:)){
    $net = new-object -ComObject WScript.Network
    $net.MapNetworkDrive("p:", $serveur, $false, $credential.GetNetworkCredential().UserName,$credential.GetNetworkCredential().password)
   
}

#lorsque l'on lance un script powershell, si il y avait des espaces dans le nom, cela ne passait pas 
#lorsque l'on faisait un start-process et ce nom en argument. Donc on utilise plutot le nom court
$prog_court = (New-Object -ComObject Scripting.FileSystemObject).GetFile($programme).ShortPath

					
    write-host "$(hostname):Dossier de l'installer $($dossier_installer)"
	write-host ""
	write-host "$(hostname):lancement de $($programme)"
    write-host "$(hostname):lancement de $($prog_court)"

#start-process -FilePath $programme -wait -NoNewWindow
$dossier_installer = $((get-item -path $programme).DirectoryName)

if (!(Test-Path -Path "$dossier_installer\logs_fog_install")){New-Item -ItemType directory -Path "$dossier_installer\logs_fog_install"}
$extension = (get-item -path $programme).Extension
if ($extension -eq ".bat" -or $extension -eq ".cmd") {
	write-host "$env:COMPUTERNAME:C'est un script bat"
	start-process -FilePath $prog_court -wait -NoNewWindow -RedirectStandardOutput ${dossier_installer}\logs_fog_install\${env:COMPUTERNAME}_log.txt -RedirectStandardError ${dossier_installer}\logs_fog_install\${env:COMPUTERNAME}_error.txt
    
}
if ($extension -eq ".ps1") {
	write-host "$env:COMPUTERNAME:C'est un script powershell"
	$policy = Get-ExecutionPolicy
	Set-ExecutionPolicy AllSigned
	start-process -FilePath PowerShell -Arg $prog_court -wait -NoNewWindow -RedirectStandardOutput ${dossier_installer}\logs_fog_install\${env:COMPUTERNAME}_log.txt -RedirectStandardError ${dossier_installer}\logs_fog_install\${env:COMPUTERNAME}_error.txt
    Set-ExecutionPolicy $policy
}


$net.RemoveNetworkDrive("p:")
Remove-SmbMapping -RemotePath $serveur -Force


# SIG # Begin signature block
# MIIECAYJKoZIhvcNAQcCoIID+TCCA/UCAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB

So I get this Snapin Command read-only:

powershell.exe -ExecutionPolicy Bypass -NoProfile -File fog_snapin_inst.ps1 -programme P:\officepro2010\inst_office2010.bat

lebrun78

Hello
Do you have any suggestions or examples of snapins running powershell scripts for installing programs hosted on an authenticated share?
I am unable to do an authenticated samba mount with the system account used by the fog client.

lebrun78

@sebastian-roth
No actually, the share is only accessible to administrators.
I use a powershell script which mount with a samba share account the share and launch the installer.
but the script seems not working when run as system.
I’m investigating

lebrun78

@sebastian-roth
Yes, I now unterdstand the problem, fog client is running with local\install account, not system.

We use install account for a long time to access samba share with snapin scripts. Have you example to access samba share with client running under system account ?

I have No error 2691 running fogservice with system account

lebrun78

@sebastian-roth
(currentIP.Intersect(targetIP).Any()) = true

lebrun78

@sebastian-roth
I 've just run the script as a domain-admin.
domain as value ur.local (the ad domain name)
targetIP and targetIP contain the same address (the AD controler addresses )

lebrun78

@sebastian-roth
Yes I ran this script as administrator. But administrator is not member of the AD domain.
I tried disabling IPv6.

[admin07]: PS C:\Users\Administrateur\Documents>  $o = [System.Net.Dns]::GetHostAddresses("admin07")
[admin07]: PS C:\Users\Administrateur\Documents> $o


Address            :
AddressFamily      : InterNetworkV6
ScopeId            : 0
IsIPv6Multicast    : False
IsIPv6LinkLocal    : False
IsIPv6SiteLocal    : False
IsIPv6Teredo       : False
IsIPv4MappedToIPv6 : False
IPAddressToString  : ::1

Address            : xxxx724
AddressFamily      : InterNetwork
ScopeId            :
IsIPv6Multicast    : False
IsIPv6LinkLocal    : False
IsIPv6SiteLocal    : False
IsIPv6Teredo       : False
IsIPv4MappedToIPv6 : False
IPAddressToString  : *.*.6.250

And with IPV6 disabled, I have error 2691

lebrun78

@sebastian-roth
Hello, thank you for your answer
Here is the result of this C# script:

// Main Method 
using System;
using System.Collections.Generic;
using System.DirectoryServices.ActiveDirectory;
using System.Linq;
using System.Net;
using System.Runtime.InteropServices;
//using Zazzles;
class test
{
    static public void Main(String[] args)
    {
        string idealDomain = "ur.local";
        Console.WriteLine("Main Method");
        var domain = Domain.GetComputerDomain();
        Console.WriteLine(domain);
        var currentIP = Dns.GetHostAddresses(domain.Name);
        Console.WriteLine(currentIP);
        var targetIP = Dns.GetHostAddresses(idealDomain);
        Console.WriteLine(targetIP);
        var result = currentIP.Intersect(targetIP).Any();
        Console.WriteLine(result);
    }
}

Exception levée : ‘System.Security.Authentication.AuthenticationException’ dans System.DirectoryServices.dll
Une exception non gérée du type ‘System.Security.Authentication.AuthenticationException’ s’est produite dans System.DirectoryServices.dll
User or password incorrect

Which user is used in the script ?

[admin07]: PS C:\Users\Administrateur\Documents>  $o = [System.Net.Dns]::GetHostAddresses("admin07")
[admin07]: PS C:\Users\Administrateur\Documents> $o


Address            :
AddressFamily      : InterNetworkV6
ScopeId            : 5
IsIPv6Multicast    : False
IsIPv6LinkLocal    : True
IsIPv6SiteLocal    : False
IsIPv6Teredo       : False
IsIPv4MappedToIPv6 : False
IPAddressToString  : fe80::7164:xxxxxxxx:7d52%5

Address            : xxxx724
AddressFamily      : InterNetwork
ScopeId            :
IsIPv6Multicast    : False
IsIPv6LinkLocal    : False
IsIPv6SiteLocal    : False
IsIPv6Teredo       : False
IsIPv4MappedToIPv6 : False
IPAddressToString  : xxx.xx.6.250

lebrun78

@sebastian-roth
How could I create a small script in C to test this function ?
Have you a procedure ?
i used to use powershell

private bool IsJoinedToDomain(string idealDomain)
      {
          try
          {
              using (var domain = Domain.GetComputerDomain())
              {
                  var currentIP = Dns.GetHostAddresses(domain.Name);
                  var targetIP = Dns.GetHostAddresses(idealDomain);

                  return (currentIP.Intersect(targetIP).Any());
              }
          }
          catch (Exception)
          {
          }

          return false;
      }

lebrun78

@lebrun78

Best posts made by lebrun78

Latest posts made by lebrun78