Posts made by Scott B

@fry_p

This is good information. It’s how I automate the FOG client install after my sysprep images have been restored.

@Daniel-Miller @Sebastian-Roth

Thanks for the explanation. I always wondered since I have always done the MSI.

Other than the file type what is the difference between the fog client MSI installer and the smart installer?

@Sebastian-Roth

I’ll have to brush up on the commands for replacing the certs on the clients. Been a long time.

@Sebastian-Roth

We were not able to bring his setup back online and reconnect the client. I ended up building a new fresh FOG install and we will reimport the machines as we go around. It’s not to big a deal as we needed an excuse to clean up the database anyway.

@Sebastian-Roth said in Migrated FOG, Clients Not Happy:

@Scott-B Did you find what was causing this?

No, I have not. My backup, clients, and current running server all have different thumbprints. I have no idea how that’s happened. Is it possible to take the cert from a client and add it to the server?

@Sebastian-Roth said in Migrated FOG, Clients Not Happy:

@Scott-B Can you get the thumbprints on the old server?

The tumbprint from srvpublic.crt in /var/fog/management/other/ssl on the older server is
88901133f4640b294ec5f4538e3f098eccadca45

@Sebastian-Roth said in Migrated FOG, Clients Not Happy:

systemctl restart apache2

Restarted apache and rechecked the thumbprints. They are still different. Same thumbprints as before.

@Sebastian-Roth

They are still not happy.

------------------------------------------------------------------------------
----------------------------------UserTracker---------------------------------
------------------------------------------------------------------------------
 12/19/2019 12:14 PM Client-Info Client Version: 0.11.17
 12/19/2019 12:14 PM Client-Info Client OS:      Windows
 12/19/2019 12:14 PM Client-Info Server Version: 1.5.7.86
 12/19/2019 12:14 PM Middleware::Response ERROR: Unable to get subsection
 12/19/2019 12:14 PM Middleware::Response ERROR: Object reference not set to an instance of an object.
 12/19/2019 12:14 PM Service Sleeping for 84 seconds
 12/19/2019 12:15 PM Middleware::Communication URL: http://fogserver/fog/management/index.php?sub=requestClientInfo&configure&newService&json
 12/19/2019 12:15 PM Middleware::Response Success
 12/19/2019 12:15 PM Middleware::Communication URL: http://fogserver/fog/management/index.php?sub=requestClientInfo&mac=2C:41:38:8F:55:FF&newService&json
 12/19/2019 12:15 PM Middleware::Authentication Waiting for authentication timeout to pass
 12/19/2019 12:15 PM Middleware::Communication Download: http://fogserver/fog/management/other/ssl/srvpublic.crt
 12/19/2019 12:16 PM Data::RSA FOG Server CA cert found
 12/19/2019 12:16 PM Data::RSA ERROR: Certificate validation failed
 12/19/2019 12:16 PM Data::RSA ERROR: Trust chain did not complete to the known authority anchor. Errors: The signature of the certificate cannot be verified. (NotSignatureValid)
 12/19/2019 12:16 PM Middleware::Authentication ERROR: Could not authenticate
 12/19/2019 12:16 PM Middleware::Authentication ERROR: Certificate is not from FOG CA
 12/19/2019 12:16 PM Middleware::Response Success
 12/19/2019 12:16 PM Middleware::Communication URL: http://fogserver/fog/service/getversion.php?clientver&newService&json
 12/19/2019 12:16 PM Middleware::Communication URL: http://fogserver/fog/service/getversion.php?newService&json

 12/19/2019 12:16 PM Service Creating user agent cache
 12/19/2019 12:16 PM Middleware::Response ERROR: Unable to get subsection
 12/19/2019 12:16 PM Middleware::Response ERROR: Object reference not set to an instance of an object.
 12/19/2019 12:16 PM Middleware::Response ERROR: Unable to get subsection
 12/19/2019 12:16 PM Middleware::Response ERROR: Object reference not set to an instance of an object.
 12/19/2019 12:16 PM Middleware::Response ERROR: Unable to get subsection
 12/19/2019 12:16 PM Middleware::Response ERROR: Object reference not set to an instance of an object.

@Sebastian-Roth

I did copy them over and ran the installer again. Is it only files in /opt/fog/snapins/ssl/ or do I have to worry about the certs in /var/www/fog/management/other/ as well?

@Sebastian-Roth said in Migrated FOG, Clients Not Happy:

openssl x509 -in /opt/fog/snapins/ssl/CA/.fogCA.pem -fingerprint -noout

Comparing the FOG Server CA on the workstation and the server shows two different thumbprints.

Server:
E5:D3:32:A3:5F:8D:A4:B8:BD:3C:6B:CC:76:A6:A5:F0:85:3C:9B:B8

Client:
6B:9D:5B:3F:BC:23:7B:9D:1E:69:46:80:C2:90:CB:9A:BC:97:DD:70

Here is the output when using wget from the server console.

root@fogserver:~/fogproject/bin# wget http://fogserver/fog/management/other/ssl/srvpublic.crt
--2019-12-18 20:23:57--  http://fogserver/fog/management/other/ssl/srvpublic.crt
Resolving fogserver (fogserver)... 127.0.1.1
Connecting to fogserver (fogserver)|127.0.1.1|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1757 (1.7K) [application/x-x509-ca-cert]
Saving to: ‘srvpublic.crt’

srvpublic.crt                           100%[============================================================================>]   1.72K  --.-KB/s    in 0s

2019-12-18 20:23:57 (189 MB/s) - ‘srvpublic.crt’ saved [1757/1757]

I can try from a different computer if you need me to. Looking at the cert store on the windows device I have both the FOG Server CA which is valid as well as the FOG Project cert.

@Sebastian-Roth said in Migrated FOG, Clients Not Happy:

http://fogserver/fog/management/other/ssl/srvpublic.crt

I am able to download the file with wget as well.

@Sebastian-Roth said in Migrated FOG, Clients Not Happy:

Scott-B I pushed out a new fog-client release (0.11.17) a couple of days ago. This is the first time I have done this (took over the work from another person) and seems like something is wrong although we did some thorough testing before the release.

Visiting that URL I am prompted to download a crt file. All the details inside the cert seem to be correct.

I migrated out FOG install over to a new server. But the clients are not happy and cannot connect to it. Below is the fog.log file.

I installed the OS (Ubuntu 18.04)
Installed latest SVN
Imported backup of our FOG database
Copied all files from /opt/fog/snapins/ssl to the new server at /opt/fog/snapins/ssl
Ran FOG installer again
Reset encryption data on all clients

 12/18/2019 11:53 AM Main Overriding exception handling
 12/18/2019 11:53 AM Main Bootstrapping Zazzles
 12/18/2019 11:53 AM Controller Initialize
 12/18/2019 11:53 AM Controller Start

 12/18/2019 11:53 AM Service Starting service
 12/18/2019 11:54 AM Bus Became bus server
 12/18/2019 11:54 AM Bus Emmiting message on channel: Status
 12/18/2019 11:54 AM Service Invoking early JIT compilation on needed binaries

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 12/18/2019 11:54 AM Client-Info Version: 0.11.17
 12/18/2019 11:54 AM Client-Info OS:      Windows
 12/18/2019 11:54 AM Middleware::Authentication Waiting for authentication timeout to pass
 12/18/2019 11:54 AM Middleware::Communication Download: http://fogserver/fog/management/other/ssl/srvpublic.crt
 12/18/2019 11:54 AM Data::RSA FOG Server CA cert found
 12/18/2019 11:54 AM Data::RSA ERROR: Certificate validation failed
 12/18/2019 11:54 AM Data::RSA ERROR: Trust chain did not complete to the known authority anchor. Errors: The signature of the certificate cannot be verified. (NotSignatureValid)
 12/18/2019 11:54 AM Middleware::Authentication ERROR: Could not authenticate
 12/18/2019 11:54 AM Middleware::Authentication ERROR: Certificate is not from FOG CA

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 12/18/2019 11:54 AM Client-Info Version: 0.11.17
 12/18/2019 11:54 AM Client-Info OS:      Windows
 12/18/2019 11:54 AM Middleware::Authentication Waiting for authentication timeout to pass

After clearing all the details from the active directory tab in the individual client then reapplying the stored ad details the client was able to join the domain. Is there a way to set this across all clients at once?

Since updating to FOG v1.5.7.56 newly imaged clients have not been auto joining our domain. I was reading THIS thread about the same issue. I created a user with admin rights and a password without any special characters to test as mentioned in that thread but it did not correct the issue. Manually joining a client with the same credientails stored in FOG will join the client with no issue.

Server is Ubuntu 18.04.3 LTS

------------------------------------------------------------------------------
--------------------------------HostnameChanger-------------------------------
------------------------------------------------------------------------------
 12/4/2019 10:58 AM Client-Info Client Version: 0.11.16
 12/4/2019 10:58 AM Client-Info Client OS:      Windows
 12/4/2019 10:58 AM Client-Info Server Version: 1.5.7.56
 12/4/2019 10:58 AM Middleware::Response Success
 12/4/2019 10:58 AM HostnameChanger Checking Hostname
 12/4/2019 10:58 AM HostnameChanger Hostname is correct
 12/4/2019 10:58 AM HostnameChanger Attempting to join domain
 12/4/2019 10:58 AM HostnameChanger Logon failure: unknown username or bad password, code =  1326
------------------------------------------------------------------------------

@Scott-B said in New Image Upload - Stuck on Updating Database:

@george1421 said in New Image Upload - Stuck on Updating Database:

I have an image going up now. I’ll see what it does.

Well those two images just completed successfully, so I don’t know what the deal was. The 4 test images before them all had the error.

@george1421 said in New Image Upload - Stuck on Updating Database:

I have an image going up now. I’ll see what it does.

@george1421 said in New Image Upload - Stuck on Updating Database:

php-fpm error log

root@fogserver:/# tail /var/log/php7.2-fpm.log

[28-May-2019 18:58:44] NOTICE: [pool www] child 820 exited with code 0 after 989.730318 seconds from start
[28-May-2019 18:58:44] NOTICE: [pool www] child 11586 started
[28-May-2019 18:58:44] NOTICE: [pool www] child 813 exited with code 0 after 990.608738 seconds from start
[28-May-2019 18:58:44] NOTICE: [pool www] child 11587 started
[28-May-2019 18:58:47] NOTICE: [pool www] child 836 exited with code 0 after 991.969990 seconds from start
[28-May-2019 18:58:47] NOTICE: [pool www] child 11632 started
[28-May-2019 19:04:56] NOTICE: [pool www] child 4953 exited with code 0 after 990.381560 seconds from start
[28-May-2019 19:04:56] NOTICE: [pool www] child 15598 started
[28-May-2019 19:05:41] NOTICE: [pool www] child 5491 exited with code 0 after 983.723588 seconds from start
[28-May-2019 19:05:41] NOTICE: [pool www] child 16055 started