Posts made by svalding

svalding

@george1421 Awesome! Thanks for the help! I’ll give that a test and see what comes of it.

svalding

FOG Version 1.5.4 on Debian 8

I’m trying to manipulate all the hosts in our FOG server to turn HostnameChanger off. I’d like to run this SQL against the database:

UPDATE ‘moduleStatusByHost’ SET ‘msState’ = ‘0’ WHERE ‘msModuleID’ = ‘9’;

On a test case where I did just one host ID, the value in the database changed as expected, but the change isn’t reflected in the WebUI. What additional steps need I take to make this change work correctly?

svalding

Still combating this issue, incase anyone else cares to chime in

svalding

Hmm, didn’t seem to do much for me. Still getting the same crusty CSM error.

Here’s my refind.conf if it is helpful:

#
# refind.conf
# Configuration file for the rEFInd boot menu
#

# Timeout in seconds for the main menu screen. Setting the timeout to 0
# disables automatic booting (i.e., no timeout). Setting it to -1 causes
# an immediate boot to the default OS *UNLESS* a keypress is in the buffer
# when rEFInd launches, in which case that keypress is interpreted as a
# shortcut key. If no matching shortcut is found, rEFInd displays its
# menu with no timeout.
#
timeout -1

# Screen saver timeout; the screen blanks after the specified number of
# seconds with no keyboard input. The screen returns after most keypresses
# (unfortunately, not including modifier keys such as Shift, Control, Alt,
# or Option). Setting a value of "-1" causes rEFInd to start up with its
# screen saver active. The default is 0, which disables the screen saver.
#screensaver 300

# Hide user interface elements for personal preference or to increase
# security:
#  banner      - the rEFInd title banner (built-in or loaded via "banner")
#  label       - boot option text label in the menu
#  singleuser  - remove the submenu options to boot Mac OS X in single-user
#                or verbose modes; affects ONLY MacOS X
#  safemode    - remove the submenu option to boot Mac OS X in "safe mode"
#  hwtest      - the submenu option to run Apple's hardware test
#  arrows      - scroll arrows on the OS selection tag line
#  hints       - brief command summary in the menu
#  editor      - the options editor (+, F2, or Insert on boot options menu)
#  badges      - device-type badges for boot options
#  all         - all of the above
# Default is none of these (all elements active)
#
#hideui singleuser
#hideui all

# Set the name of a subdirectory in which icons are stored. Icons must
# have the same names they have in the standard directory. The directory
# name is specified relative to the main rEFInd binary's directory. If
# an icon can't be found in the specified directory, an attempt is made
# to load it from the default directory; thus, you can replace just some
# icons in your own directory and rely on the default for others.
# Default is "icons".
#
#icons_dir myicons

# Use a custom title banner instead of the rEFInd icon and name. The file
# path is relative to the directory where refind.efi is located. The color
# in the top left corner of the image is used as the background color
# for the menu screens. Currently uncompressed BMP images with color
# depths of 24, 8, 4 or 1 bits are supported, as well as PNG images.
#
#banner hostname.bmp
#banner mybanner.png

# Specify how to handle banners that aren't exactly the same as the screen
# size:
#  noscale     - Crop if too big, show with border if too small
#  fillscreen  - Fill the screen
# Default is noscale
#
#banner_scale fillscreen

# Icon sizes. All icons are square, so just one value is specified. The
# big icons are used for OS selectors in the first row and the small
# icons are used for tools on the second row. Drive-type badges are 1/4
# the size of the big icons. Legal values are 32 and above. If the icon
# files do not hold icons of the proper size, the icons are scaled to
# the specified size. The default values are 48 and 128 for small and
# big icons, respectively.
#
#small_icon_size 96
#big_icon_size 256

# Custom images for the selection background. There is a big one (144 x 144)
# for the OS icons, and a small one (64 x 64) for the function icons in the
# second row. If only a small image is given, that one is also used for
# the big icons by stretching it in the middle. If only a big one is given,
# the built-in default will be used for the small icons.
#
# Like the banner option above, these options take a filename of an
# uncompressed BMP image file with a color depth of 24, 8, 4, or 1 bits,
# or a PNG image. The PNG format is required if you need transparency
# support (to let you "see through" to a full-screen banner).
#
#selection_big   selection-big.bmp
#selection_small selection-small.bmp

# Set the font to be used for all textual displays in graphics mode.
# The font must be a PNG file with alpha channel transparency. It must
# contain ASCII characters 32-126 (space through tilde), inclusive, plus
# a glyph to be displayed in place of characters outside of this range,
# for a total of 96 glyphs. Only monospaced fonts are supported. Fonts
# may be of any size, although large fonts can produce display
# irregularities.
# The default is rEFInd's built-in font, Luxi Mono Regular 12 point.
#
#font myfont.png

# Use text mode only. When enabled, this option forces rEFInd into text mode.
# Passing this option a "0" value causes graphics mode to be used. Pasing
# it no value or any non-0 value causes text mode to be used.
# Default is to use graphics mode.
#
textonly

# Set the EFI text mode to be used for textual displays. This option
# takes a single digit that refers to a mode number. Mode 0 is normally
# 80x25, 1 is sometimes 80x50, and higher numbers are system-specific
# modes. Mode 1024 is a special code that tells rEFInd to not set the
# text mode; it uses whatever was in use when the program was launched.
# If you specify an invalid mode, rEFInd pauses during boot to inform
# you of valid modes.
# CAUTION: On VirtualBox, and perhaps on some real computers, specifying
# a text mode and uncommenting the "textonly" option while NOT specifying
# a resolution can result in an unusable display in the booted OS.
# Default is 1024 (no change)
#
#textmode 2

# Set the screen's video resolution. Pass this option either:
#  * two values, corresponding to the X and Y resolutions
#  * one value, corresponding to a GOP (UEFI) video mode
# Note that not all resolutions are supported. On UEFI systems, passing
# an incorrect value results in a message being shown on the screen to
# that effect, along with a list of supported modes. On EFI 1.x systems
# (e.g., Macintoshes), setting an incorrect mode silently fails. On both
# types of systems, setting an incorrect resolution results in the default
# resolution being used. A resolution of 1024x768 usually works, but higher
# values often don't.
# Default is "0 0" (use the system default resolution, usually 800x600).
#
#resolution 1024 768
#resolution 1440 900
#resolution 3

# Launch specified OSes in graphics mode. By default, rEFInd switches
# to text mode and displays basic pre-launch information when launching
# all OSes except OS X. Using graphics mode can produce a more seamless
# transition, but displays no information, which can make matters
# difficult if you must debug a problem. Also, on at least one known
# computer, using graphics mode prevents a crash when using the Linux
# kernel's EFI stub loader. You can specify an empty list to boot all
# OSes in text mode.
# Valid options:
#   osx     - Mac OS X
#   linux   - A Linux kernel with EFI stub loader
#   elilo   - The ELILO boot loader
#   grub    - The GRUB (Legacy or 2) boot loader
#   windows - Microsoft Windows
# Default value: osx
#
#use_graphics_for osx,linux

# Which non-bootloader tools to show on the tools line, and in what
# order to display them:
#  shell            - the EFI shell (requires external program; see rEFInd
#                     documentation for details)
#  memtest          - the memtest86 program, in EFI/tools, EFI/memtest86,
#                     EFI/memtest, EFI/tools/memtest86, or EFI/tools/memtest
#  gptsync          - the (dangerous) gptsync.efi utility (requires external
#                     program; see rEFInd documentation for details)
#  gdisk            - the gdisk partitioning program
#  apple_recovery   - boots the Apple Recovery HD partition, if present
#  windows_recovery - boots an OEM Windows recovery tool, if present
#                     (see also the windows_recovery_files option)
#  mok_tool         - makes available the Machine Owner Key (MOK) maintenance
#                     tool, MokManager.efi, used on Secure Boot systems
#  about            - an "about this program" option
#  exit             - a tag to exit from rEFInd
#  shutdown         - shuts down the computer (a bug causes this to reboot
#                     many UEFI systems)
#  reboot           - a tag to reboot the computer
#  firmware         - a tag to reboot the computer into the firmware's
#                     user interface (ignored on older computers)
#  netboot          - launch the ipxe.efi tool for network (PXE) booting
# Default is shell,memtest,gdisk,apple_recovery,windows_recovery,mok_tool,about,shutdown,reboot,firmware
#
#showtools shell, gdisk, memtest, mok_tool, about, reboot, exit, firmware

# Boot loaders that can launch a Windows restore or emergency system.
# These tend to be OEM-specific.
# Default is LRS_ESP:/EFI/Microsoft/Boot/LrsBootmgr.efi
#
#windows_recovery_files LRS_ESP:/EFI/Microsoft/Boot/LrsBootmgr.efi

# Directories in which to search for EFI drivers. These drivers can
# provide filesystem support, give access to hard disks on plug-in
# controllers, etc. In most cases none are needed, but if you add
# EFI drivers and you want rEFInd to automatically load them, you
# should specify one or more paths here. rEFInd always scans the
# "drivers" and "drivers_{arch}" subdirectories of its own installation
# directory (where "{arch}" is your architecture code); this option
# specifies ADDITIONAL directories to scan.
# Default is to scan no additional directories for EFI drivers
#
#scan_driver_dirs EFI/tools/drivers,drivers

# Which types of boot loaders to search, and in what order to display them:
#  internal      - internal EFI disk-based boot loaders
#  external      - external EFI disk-based boot loaders
#  optical       - EFI optical discs (CD, DVD, etc.)
#  netboot       - EFI network (PXE) boot options
#  hdbios        - BIOS disk-based boot loaders
#  biosexternal  - BIOS external boot loaders (USB, eSATA, etc.)
#  cd            - BIOS optical-disc boot loaders
#  manual        - use stanzas later in this configuration file
# Note that the legacy BIOS options require firmware support, which is
# not present on all computers.
# The netboot option is experimental and relies on the ipxe.efi and
# ipxe_discover.efi program files.
# On UEFI PCs, default is internal,external,optical,manual
# On Macs, default is internal,hdbios,external,biosexternal,optical,cd,manual
#
#scanfor internal,hdbios,external,biosexternal
scanfor internal,external,optical,manual

# By default, rEFInd relies on the UEFI firmware to detect BIOS-mode boot
# devices. This sometimes doesn't detect all the available devices, though.
# For these cases, uefi_deep_legacy_scan results in a forced scan and
# modification of NVRAM variables on each boot. Adding "0", "off", or
# "false" resets to the default value. This token has no effect on Macs or
# when no BIOS-mode options are set via scanfor.
# Default is unset (or "uefi_deep_legacy_scan false")
#
#uefi_deep_legacy_scan

# Delay for the specified number of seconds before scanning disks.
# This can help some users who find that some of their disks
# (usually external or optical discs) aren't detected initially,
# but are detected after pressing Esc.
# The default is 0.
#
#scan_delay 5

# When scanning volumes for EFI boot loaders, rEFInd always looks for
# Mac OS X's and Microsoft Windows' boot loaders in their normal locations,
# and scans the root directory and every subdirectory of the /EFI directory
# for additional boot loaders, but it doesn't recurse into these directories.
# The also_scan_dirs token adds more directories to the scan list.
# Directories are specified relative to the volume's root directory. This
# option applies to ALL the volumes that rEFInd scans UNLESS you include
# a volume name and colon before the directory name, as in "myvol:/somedir"
# to scan the somedir directory only on the filesystem named myvol. If a
# specified directory doesn't exist, it's ignored (no error condition
# results). The default is to scan the "boot" directory in addition to
# various hard-coded directories.
#
#also_scan_dirs boot,ESP2:EFI/linux/kernels

# Partitions (or whole disks, for legacy-mode boots) to omit from scans.
# For EFI-mode scans, you must specify a volume by its label, which you
# can obtain in an EFI shell by typing "vol", from Linux by typing
# "blkid /dev/{devicename}", or by examining the disk's label in various
# OSes' file browsers.
# For legacy-mode scans, you can specify any subset of the boot loader
# description shown when you highlight the option in rEFInd.
# The default is "LRS_ESP".
#
#dont_scan_volumes "Recovery HD"

# Directories that should NOT be scanned for boot loaders. By default,
# rEFInd doesn't scan its own directory, the EFI/tools directory, the
# EFI/memtest directory, the EFI/memtest86 directory, or the
# com.apple.recovery.boot directory. Using the dont_scan_dirs option
# enables you to "blacklist" other directories; but be sure to use "+"
# as the first element if you want to continue blacklisting existing
# directories. You might use this token to keep EFI/boot/bootx64.efi out
# of the menu if that's a duplicate of another boot loader or to exclude
# a directory that holds drivers or non-bootloader utilities provided by
# a hardware manufacturer. If a directory is listed both here and in
# also_scan_dirs, dont_scan_dirs takes precedence. Note that this
# blacklist applies to ALL the filesystems that rEFInd scans, not just
# the ESP, unless you precede the directory name by a filesystem name,
# as in "myvol:EFI/somedir" to exclude EFI/somedir from the scan on the
# myvol volume but not on other volumes.
#
#dont_scan_dirs ESP:/EFI/boot,EFI/Dell,EFI/memtest86

# Files that should NOT be included as EFI boot loaders (on the
# first line of the display). If you're using a boot loader that
# relies on support programs or drivers that are installed alongside
# the main binary or if you want to "blacklist" certain loaders by
# name rather than location, use this option. Note that this will
# NOT prevent certain binaries from showing up in the second-row
# set of tools. Most notably, various Secure Boot and recovery
# tools are present in this list, but may appear as second-row
# items.
# The file may be specified as a bare name (e.g., "notme.efi"), as
# a complete filename (e.g., "/EFI/somedir/notme.efi"), or as a
# complete filename with volume (e.g., "SOMEDISK:/EFI/somedir/notme.efi").
# The default is shim.efi,shim-fedora.efi,shimx64.efi,PreLoader.efi,
# TextMode.efi,ebounce.efi,GraphicsConsole.efi,MokManager.efi,HashTool.efi,
# HashTool-signed.efi,bootmgr.efi
#
#dont_scan_files shim.efi,MokManager.efi

# Scan for Linux kernels that lack a ".efi" filename extension. This is
# useful for better integration with Linux distributions that provide
# kernels with EFI stub loaders but that don't give those kernels filenames
# that end in ".efi", particularly if the kernels are stored on a
# filesystem that the EFI can read. When set to "1", "true", or "on", this
# option causes all files in scanned directories with names that begin with
# "vmlinuz" or "bzImage" to be included as loaders, even if they lack ".efi"
# extensions. Passing this option a "0", "false", or "off" value causes
# kernels without ".efi" extensions to NOT be scanned.
# Default is "true" -- to scan for kernels without ".efi" extensions.
#
#scan_all_linux_kernels false

# Combine all Linux kernels in a given directory into a single entry.
# When so set, the kernel with the most recent time stamp will be launched
# by default, and its filename will appear in the entry's description.
# To launch other kernels, the user must press F2 or Insert; alternate
# kernels then appear as options on the sub-menu.
# Default is "true" -- kernels are "folded" into a single menu entry.
#
#fold_linux_kernels false

# Set the maximum number of tags that can be displayed on the screen at
# any time. If more loaders are discovered than this value, rEFInd shows
# a subset in a scrolling list. If this value is set too high for the
# screen to handle, it's reduced to the value that the screen can manage.
# If this value is set to 0 (the default), it's adjusted to the number
# that the screen can handle.
#
#max_tags 0

# Set the default menu selection.  The available arguments match the
# keyboard accelerators available within rEFInd.  You may select the
# default loader using:
#  - A digit between 1 and 9, in which case the Nth loader in the menu
#    will be the default.
#  - A "+" symbol at the start of the string, which refers to the most
#    recently booted loader.
#  - Any substring that corresponds to a portion of the loader's title
#    (usually the OS's name, boot loader's path, or a volume or
#    filesystem title).
# You may also specify multiple selectors by separating them with commas
# and enclosing the list in quotes. (The "+" option is only meaningful in
# this context.)
# If you follow the selector(s) with two times, in 24-hour format, the
# default will apply only between those times. The times are in the
# motherboard's time standard, whether that's UTC or local time, so if
# you use UTC, you'll need to adjust this from local time manually.
# Times may span midnight as in "23:30 00:30", which applies to 11:30 PM
# to 12:30 AM. You may specify multiple default_selection lines, in which
# case the last one to match takes precedence. Thus, you can set a main
# option without a time followed by one or more that include times to
# set different defaults for different times of day.
# The default behavior is to boot the previously-booted OS.
#
#default_selection 1
#default_selection Microsoft
#default_selection "+,bzImage,vmlinuz"
#default_selection Maintenance 23:30 2:00
#default_selection "Maintenance,OS X" 1:00 2:30
#default_selection "Default Boot Entry"
default_selection 1

# Enable VMX bit and lock the CPU MSR if unlocked.
# On some Intel Apple computers, the firmware does not lock the MSR 0x3A.
# The symptom on Windows is Hyper-V not working even if the CPU
# meets the minimum requirements (HW assisted virtualization and SLAT)
# DO NOT SET THIS EXCEPT ON INTEL CPUs THAT SUPPORT VMX! See
# http://www.thomas-krenn.com/en/wiki/Activating_the_Intel_VT_Virtualization_Feature!
# for more on this subject.
# The default is false: Don't try to enable and lock the MSR.
#
#enable_and_lock_vmx false

# Include a secondary configuration file within this one. This secondary
# file is loaded as if its options appeared at the point of the "include"
# token itself, so if you want to override a setting in the main file,
# the secondary file must be referenced AFTER the setting you want to
# override. Note that the secondary file may NOT load a tertiary file.
#
#include manual.conf

# Sample manual configuration stanzas. Each begins with the "menuentry"
# keyword followed by a name that's to appear in the menu (use quotes
# if you want the name to contain a space) and an open curly brace
# ("{"). Each entry ends with a close curly brace ("}"). Common
# keywords within each stanza include:
#
#  volume    - identifies the filesystem from which subsequent files
#              are loaded. You can specify the volume by filesystem
#              label, by partition label, or by partition GUID number
#              (but NOT yet by filesystem UUID number).
#  loader    - identifies the boot loader file
#  initrd    - Specifies an initial RAM disk file
#  icon      - specifies a custom boot loader icon
#  ostype    - OS type code to determine boot options available by
#              pressing Insert. Valid values are "MacOS", "Linux",
#              "Windows", and "XOM". Case-sensitive.
#  graphics  - set to "on" to enable graphics-mode boot (useful
#              mainly for MacOS) or "off" for text-mode boot.
#              Default is auto-detected from loader filename.
#  options   - sets options to be passed to the boot loader; use
#              quotes if more than one option should be passed or
#              if any options use characters that might be changed
#              by rEFInd parsing procedures (=, /, #, or tab).
#  disabled  - use alone or set to "yes" to disable this entry.
#
# Note that you can use either DOS/Windows/EFI-style backslashes (\)
# or Unix-style forward slashes (/) as directory separators. Either
# way, all file references are on the ESP from which rEFInd was
# launched.
# Use of quotes around parameters causes them to be interpreted as
# one keyword, and for parsing of special characters (spaces, =, /,
# and #) to be disabled. This is useful mainly with the "options"
# keyword. Use of quotes around parameters that specify filenames is
# permissible, but you must then use backslashes instead of slashes,
# except when you must pass a forward slash to the loader, as when
# passing a root= option to a Linux kernel.

# A minimal entry, which loads the default EFI bootloader.
#menuentry "Default Boot Entry" {
#	volume C12A7328-F81F-11D2-BA4B-00A0C93EC93B
#	loader \EFI\Boot\bootx64.efi
#	loader ESP:EFI/ubuntu/grubx64.efi
#}

svalding

It’s happening across Dell Optiplex 9030, 7440, 7450, and Microsoft Surface Pro 3 devices. All of which have updated BIOS, and previously had no issues.

I will download 0.11.3 and see what kind of difference that may make for me.

Also, just so I’m on the same page you mean refind.efi and not refind.exe as stated, correct?

svalding

We recently updated to FOG 1.5.4. Things are going swimmingly, aside from one issue. It seems that after the update, refind no longer wants to boot our UEFI machines properly. The screen says something about one or more legacy boot options being found on the scanner line and that my PC lacks the necessary CSM support.

My scanfor line, however, only contains internal, external, which according to comments in the file should be fine for UEFI machines.

I’ve tried to downgrade refind.efi to an earlier version, as I found a post on here referencing that, but it did not help.

Have any of you fine folks any recommendations on where I can look next? Could I have an instance of refind that is trying to boot that ISN’T in /var/www/fog/service/ipxe?

svalding

I tried with a different dock, and everything worked without any issues whatsoever. It was the same “style” of dock (the new brick style ones). Not sure if a chipset changed inside them or what, but that did the trick for this issue.

svalding

So I’ve got a weird one. It seems that FOS doesn’t see the NIC on a Surface Pro 4 using:
Fog Server Version 1.5.4
bzImage details:

file bzImage
bzImage: Linux kernel x86 boot executable bzImage, version 4.10.10 (root@debian64) #1 SMP Sat Apr 15 13:21:35 EDT 2017, RO-rootFS, swap_dev 0x7, Normal VGA

SP4 updated to latest firmware.

Any suggestions?

Running udhcpc from within FOS just kinda sits there sending discovers, eventually gives up. Where are the logs located that would help track down this issue? I didn’t see anything interesting in /var/log while booted into FOS

svalding

I was able to resolve this. It was something in .fogsettings during the upgade. I re-ran the installer without -y and everything went off without a hitch.

svalding

Debian 8.10
Fog 1.4.0-RC-8
php 5.6.30-0+deb8ul

svalding

I did try to rerun the installer, but the same thing seems to occur.
I’m doing an upgrade from 1.4.0-RC-8. Do I possibly need to upgrade to a 1.5.x branch first, before I move to 1.5.4 stable?

svalding

Interestingly, I just tried to update to 1.5.4, and the final line of the install states Updating Database…Failed!

Here’s the fog_error_1.5.4.log:

/usr/bin/lsb_release
/bin/systemctl
Ign http://ftp.us.debian.org jessie InRelease
Hit http://ftp.us.debian.org jessie-updates InRelease
Hit http://security.debian.org jessie/updates InRelease
Hit http://ftp.us.debian.org jessie Release.gpg
Hit http://ftp.us.debian.org jessie-updates/main Sources
Hit http://security.debian.org jessie/updates/main Sources
Hit https://packages.microsoft.com jessie InRelease
Get:1 http://ftp.us.debian.org jessie-updates/main amd64 Packages/DiffIndex [11.8 kB]
Hit http://security.debian.org jessie/updates/main amd64 Packages
Hit https://packages.microsoft.com jessie/main amd64 Packages
Get:2 http://ftp.us.debian.org jessie-updates/main Translation-en/DiffIndex [3,688 B]
Get:3 https://packages.microsoft.com jessie/main Translation-en_US [178 B]
Hit http://security.debian.org jessie/updates/main Translation-en
Hit http://ftp.us.debian.org jessie Release
Get:4 https://packages.microsoft.com jessie/main Translation-en [178 B]
Get:5 https://packages.microsoft.com jessie/main Translation-en_US [178 B]
Hit http://ftp.us.debian.org jessie/main Sources
Get:6 https://packages.microsoft.com jessie/main Translation-en [178 B]
Hit http://ftp.us.debian.org jessie/main amd64 Packages
Get:7 https://packages.microsoft.com jessie/main Translation-en_US [178 B]
Get:8 https://packages.microsoft.com jessie/main Translation-en [178 B]
Hit http://ftp.us.debian.org jessie/main Translation-en
Get:9 https://packages.microsoft.com jessie/main Translation-en_US [178 B]
Get:10 https://packages.microsoft.com jessie/main Translation-en [178 B]
Get:11 https://packages.microsoft.com jessie/main Translation-en_US [178 B]
Ign https://packages.microsoft.com jessie/main Translation-en_US
Get:12 https://packages.microsoft.com jessie/main Translation-en [178 B]
Ign https://packages.microsoft.com jessie/main Translation-en
Fetched 15.5 kB in 2s (6,214 B/s)
Reading package lists...
ii  apache2        2.4.10-10+deb8u11 amd64        Apache HTTP Server
ii  bc             1.06.95-9    amd64        GNU bc arbitrary precision calculator language
ii  build-essential 11.7         amd64        Informational list of build-essential packages
ii  cpp            4:4.9.2-2    amd64        GNU C preprocessor (cpp)
ii  curl           7.38.0-4+deb8u8 amd64        command line tool for transferring data with URL syntax
ii  g++            4:4.9.2-2    amd64        GNU C++ compiler
ii  gawk           1:4.1.1+dfsg-1 amd64        GNU awk, a pattern scanning and processing language
ii  gcc            4:4.9.2-2    amd64        GNU C compiler
ii  genisoimage    9:1.1.11-3   amd64        Creates ISO-9660 CD-ROM filesystem images
ii  gzip           1.6-4        amd64        GNU compression utilities
ii  htmldoc        1.8.27-8+b1  amd64        HTML processor that generates indexed HTML, PS, and PDF
ii  isolinux       3:6.03+dfsg-5+deb8u2 all          collection of bootloaders (ISO 9960 bootloader)
ii  lftp           4.6.0-1+deb8u1 amd64        Sophisticated command-line FTP/HTTP/BitTorrent client programs
ii  libapache2-mod-php5 5.6.30+dfsg-0+deb8u1 amd64        server-side, HTML-embedded scripting language (Apache 2 module)
ii  libc6:amd64    2.19-18+deb8u10 amd64        GNU C Library: Shared libraries
ii  libcurl3:amd64 7.38.0-4+deb8u8 amd64        easy-to-use client-side URL transfer library (OpenSSL flavour)
ii  liblzma-dev:amd64 5.1.1alpha+20120614-2+b3 amd64        XZ-format compression library - development files
ii  m4             1.4.17-4     amd64        macro processing language
ii  mysql-client   5.5.58-0+deb8u1 all          MySQL database client (metapackage depending on the latest version)
mysql-server-core-5.5
mysql-server-5.5
mysql-server
ii  mysql-server   5.5.58-0+deb8u1 all          MySQL database server (metapackage depending on the latest version)
ii  net-tools      1.60-26+b1   amd64        NET-3 networking toolkit
ii  nfs-kernel-server 1:1.2.8-9    amd64        support for NFS kernel server
ii  openssh-server 1:6.7p1-5+deb8u4 amd64        secure shell (SSH) server, for secure access from remote machines
ii  php5           5.6.30+dfsg-0+deb8u1 all          server-side, HTML-embedded scripting language (metapackage)
dpkg-query: no packages found matching php5-bcmath
ii  php5-cli       5.6.30+dfsg-0+deb8u1 amd64        command-line interpreter for the php5 scripting language
ii  php5-curl      5.6.30+dfsg-0+deb8u1 amd64        CURL module for php5
ii  php5-fpm       5.6.30+dfsg-0+deb8u1 amd64        server-side, HTML-embedded scripting language (FPM-CGI binary)
ii  php5-gd        5.6.30+dfsg-0+deb8u1 amd64        GD module for php5
php5-json
ii  php5-json      1.3.6-1      amd64        JSON module for php5
ii  php5-mcrypt    5.6.30+dfsg-0+deb8u1 amd64        MCrypt module for php5
php5-mysqlnd-ms
php5-mysqlnd
ii  php5-mysqlnd   5.6.30+dfsg-0+deb8u1 amd64        MySQL module for php5 (Native Driver)
php5-mysqlnd-ms
php5-mysqlnd
ii  php5-mysqlnd   5.6.30+dfsg-0+deb8u1 amd64        MySQL module for php5 (Native Driver)
ii  php-gettext    1.0.11-1     all          read gettext MO files directly, without requiring anything other than PHP
ii  sysv-rc-conf   0.99-7       all          SysV init runlevel configuration tool for the terminal
ii  tar            1.27.1-2+deb8u1 amd64        GNU version of the tar archiving utility
ii  tftpd-hpa      5.2+20140608-3 amd64        HPA's tftp server
ii  tftp-hpa       5.2+20140608-3 amd64        HPA's tftp client
ii  unzip          6.0-16+deb8u3 amd64        De-archiver for .zip files
ii  vsftpd         3.0.2-17+deb8u1 amd64        lightweight, efficient FTP server written for security
ii  wget           1.16-1+deb8u4 amd64        retrieves files from the web
ii  xinetd         1:2.3.15-3   amd64        replacement for inetd with many enhancements
ii  zlib1g:amd64   1:1.2.8.dfsg-2+b1 amd64        compression library - runtime
Reading package lists...
Building dependency tree...
Reading state information...
bc is already the newest version.
build-essential is already the newest version.
genisoimage is already the newest version.
gawk is already the newest version.
cpp is already the newest version.
g++ is already the newest version.
gcc is already the newest version.
libc6 is already the newest version.
gzip is already the newest version.
htmldoc is already the newest version.
lftp is already the newest version.
m4 is already the newest version.
net-tools is already the newest version.
nfs-kernel-server is already the newest version.
openssh-server is already the newest version.
php-gettext is already the newest version.
php5-json is already the newest version.
isolinux is already the newest version.
sysv-rc-conf is already the newest version.
tar is already the newest version.
tftp-hpa is already the newest version.
tftpd-hpa is already the newest version.
unzip is already the newest version.
vsftpd is already the newest version.
xinetd is already the newest version.
liblzma-dev is already the newest version.
zlib1g is already the newest version.
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 php5-ldap : Depends: php5-common (= 5.6.30+dfsg-0+deb8u1) but 5.6.33+dfsg-0+deb8u1 is to be installed
 php5-readline : Depends: php5-common (= 5.6.30+dfsg-0+deb8u1) but 5.6.33+dfsg-0+deb8u1 is to be installed
                 Depends: php5-cli (= 5.6.30+dfsg-0+deb8u1) but 5.6.33+dfsg-0+deb8u1 is to be installed
E: Broken packages
ii  apache2        2.4.10-10+deb8u11 amd64        Apache HTTP Server
ii  bc             1.06.95-9    amd64        GNU bc arbitrary precision calculator language
ii  build-essential 11.7         amd64        Informational list of build-essential packages
ii  cpp            4:4.9.2-2    amd64        GNU C preprocessor (cpp)
ii  curl           7.38.0-4+deb8u8 amd64        command line tool for transferring data with URL syntax
ii  g++            4:4.9.2-2    amd64        GNU C++ compiler
ii  gawk           1:4.1.1+dfsg-1 amd64        GNU awk, a pattern scanning and processing language
ii  gcc            4:4.9.2-2    amd64        GNU C compiler
ii  genisoimage    9:1.1.11-3   amd64        Creates ISO-9660 CD-ROM filesystem images
ii  gzip           1.6-4        amd64        GNU compression utilities
ii  htmldoc        1.8.27-8+b1  amd64        HTML processor that generates indexed HTML, PS, and PDF
ii  isolinux       3:6.03+dfsg-5+deb8u2 all          collection of bootloaders (ISO 9960 bootloader)
ii  lftp           4.6.0-1+deb8u1 amd64        Sophisticated command-line FTP/HTTP/BitTorrent client programs
ii  libapache2-mod-php5 5.6.30+dfsg-0+deb8u1 amd64        server-side, HTML-embedded scripting language (Apache 2 module)
ii  libc6:amd64    2.19-18+deb8u10 amd64        GNU C Library: Shared libraries
ii  libcurl3:amd64 7.38.0-4+deb8u8 amd64        easy-to-use client-side URL transfer library (OpenSSL flavour)
ii  liblzma-dev:amd64 5.1.1alpha+20120614-2+b3 amd64        XZ-format compression library - development files
ii  m4             1.4.17-4     amd64        macro processing language
ii  mysql-client   5.5.58-0+deb8u1 all          MySQL database client (metapackage depending on the latest version)
ii  mysql-server   5.5.58-0+deb8u1 all          MySQL database server (metapackage depending on the latest version)
ii  net-tools      1.60-26+b1   amd64        NET-3 networking toolkit
ii  nfs-kernel-server 1:1.2.8-9    amd64        support for NFS kernel server
ii  openssh-server 1:6.7p1-5+deb8u4 amd64        secure shell (SSH) server, for secure access from remote machines
ii  php5           5.6.30+dfsg-0+deb8u1 all          server-side, HTML-embedded scripting language (metapackage)
ii  php5-cli       5.6.30+dfsg-0+deb8u1 amd64        command-line interpreter for the php5 scripting language
ii  php5-curl      5.6.30+dfsg-0+deb8u1 amd64        CURL module for php5
ii  php5-fpm       5.6.30+dfsg-0+deb8u1 amd64        server-side, HTML-embedded scripting language (FPM-CGI binary)
ii  php5-gd        5.6.30+dfsg-0+deb8u1 amd64        GD module for php5
ii  php5-json      1.3.6-1      amd64        JSON module for php5
ii  php5-mcrypt    5.6.30+dfsg-0+deb8u1 amd64        MCrypt module for php5
ii  php5-mysqlnd   5.6.30+dfsg-0+deb8u1 amd64        MySQL module for php5 (Native Driver)
ii  php-gettext    1.0.11-1     all          read gettext MO files directly, without requiring anything other than PHP
ii  sysv-rc-conf   0.99-7       all          SysV init runlevel configuration tool for the terminal
ii  tar            1.27.1-2+deb8u1 amd64        GNU version of the tar archiving utility
ii  tftpd-hpa      5.2+20140608-3 amd64        HPA's tftp server
ii  tftp-hpa       5.2+20140608-3 amd64        HPA's tftp client
ii  unzip          6.0-16+deb8u3 amd64        De-archiver for .zip files
ii  vsftpd         3.0.2-17+deb8u1 amd64        lightweight, efficient FTP server written for security
ii  wget           1.16-1+deb8u4 amd64        retrieves files from the web
ii  xinetd         1:2.3.15-3   amd64        replacement for inetd with many enhancements
ii  zlib1g:amd64   1:1.2.8.dfsg-2+b1 amd64        compression library - runtime
Enter new UNIX password: Retype new UNIX password: passwd: password updated successfully
Synchronizing state for mysql.service with sysvinit using update-rc.d...
Executing /usr/sbin/update-rc.d mysql defaults
insserv: warning: script 'K01initiscsi' missing LSB tags and overrides
insserv: warning: script 'initiscsi' missing LSB tags and overrides
Executing /usr/sbin/update-rc.d mysql enable
insserv: warning: script 'K01initiscsi' missing LSB tags and overrides
insserv: warning: script 'initiscsi' missing LSB tags and overrides
● mysql.service - LSB: Start and stop the mysql database server daemon
   Loaded: loaded (/etc/init.d/mysql)
   Active: active (running) since Thu 2018-06-21 17:08:29 EDT; 2s ago
  Process: 19216 ExecStop=/etc/init.d/mysql stop (code=exited, status=0/SUCCESS)
  Process: 19256 ExecStart=/etc/init.d/mysql start (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/mysql.service
           ├─19283 /bin/sh /usr/bin/mysqld_safe
           └─19615 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib/mysql/plugin --user=mysql --log-error=/var/log/mysql/error.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/run/mysqld/mysqld.sock --port=3306

Jun 21 17:08:29 Slipstream mysql[19256]: Starting MySQL database server: mysqld ..
Jun 21 17:08:29 Slipstream mysql[19256]: Checking for tables which need an upgrade, are corrupt or were
Jun 21 17:08:29 Slipstream mysql[19256]: not closed cleanly..
Jun 21 17:08:29 Slipstream systemd[1]: Started LSB: Start and stop the mysql database server daemon.
Site 001-fog disabled.
To activate the new configuration, you need to run:
  service apache2 reload
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)
Synchronizing state for mysql.service with sysvinit using update-rc.d...
Executing /usr/sbin/update-rc.d mysql defaults
insserv: warning: script 'K01initiscsi' missing LSB tags and overrides
insserv: warning: script 'initiscsi' missing LSB tags and overrides
Executing /usr/sbin/update-rc.d mysql enable
insserv: warning: script 'K01initiscsi' missing LSB tags and overrides
insserv: warning: script 'initiscsi' missing LSB tags and overrides
● mysql.service - LSB: Start and stop the mysql database server daemon
   Loaded: loaded (/etc/init.d/mysql)
   Active: active (running) since Thu 2018-06-21 17:08:55 EDT; 2s ago
  Process: 19993 ExecStop=/etc/init.d/mysql stop (code=exited, status=0/SUCCESS)
  Process: 20034 ExecStart=/etc/init.d/mysql start (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/mysql.service
           ├─20061 /bin/sh /usr/bin/mysqld_safe
           └─20394 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib/mysql/plugin --user=mysql --log-error=/var/log/mysql/error.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/run/mysqld/mysqld.sock --port=3306

Jun 21 17:08:55 Slipstream mysql[20034]: Starting MySQL database server: mysqld ..
Jun 21 17:08:55 Slipstream mysql[20034]: Checking for tables which need an upgrade, are corrupt or were
Jun 21 17:08:55 Slipstream mysql[20034]: not closed cleanly..
Jun 21 17:08:55 Slipstream systemd[1]: Started LSB: Start and stop the mysql database server daemon.
Archive:  binaries1.5.4.zip
  inflating: packages/kernels/bzImage  
  inflating: packages/kernels/bzImage32  
  inflating: packages/kernels/arm_Image32  
  inflating: packages/kernels/arm_Image  
  inflating: packages/inits/arm_init.cpio.gz  
  inflating: packages/inits/init_32.xz  
  inflating: packages/inits/init.xz  
 extracting: packages/clientfiles/FOGCrypt.zip  
 extracting: packages/clientfiles/FogService.zip  
  inflating: packages/clientfiles/SmartInstaller.exe  
  inflating: packages/clientfiles/FOGService.msi  
  inflating: packages/FOGService.msi  
‘../packages/clientfiles/FOGCrypt.zip’ -> ‘/var/www/html/fog//client/FOGCrypt.zip’
‘../packages/clientfiles/FOGService.msi’ -> ‘/var/www/html/fog//client/FOGService.msi’
‘../packages/clientfiles/FogService.zip’ -> ‘/var/www/html/fog//client/FogService.zip’
‘../packages/clientfiles/SmartInstaller.exe’ -> ‘/var/www/html/fog//client/SmartInstaller.exe’
‘../packages/kernels/arm_Image’ -> ‘/var/www/html/fog//service/ipxe/arm_Image’
‘../packages/kernels/arm_Image32’ -> ‘/var/www/html/fog//service/ipxe/arm_Image32’
‘../packages/kernels/bzImage’ -> ‘/var/www/html/fog//service/ipxe/bzImage’
‘../packages/kernels/bzImage32’ -> ‘/var/www/html/fog//service/ipxe/bzImage32’
‘../packages/inits/arm_init.cpio.gz’ -> ‘/var/www/html/fog//service/ipxe/arm_init.cpio.gz’
‘../packages/inits/init_32.xz’ -> ‘/var/www/html/fog//service/ipxe/init_32.xz’
‘../packages/inits/init.xz’ -> ‘/var/www/html/fog//service/ipxe/init.xz’
mysqlnd
mcrypt
Synchronizing state for apache2.service with sysvinit using update-rc.d...
Executing /usr/sbin/update-rc.d apache2 defaults
insserv: warning: script 'K01initiscsi' missing LSB tags and overrides
insserv: warning: script 'initiscsi' missing LSB tags and overrides
Executing /usr/sbin/update-rc.d apache2 enable
insserv: warning: script 'K01initiscsi' missing LSB tags and overrides
insserv: warning: script 'initiscsi' missing LSB tags and overrides
Synchronizing state for php5-fpm.service with sysvinit using update-rc.d...
Executing /usr/sbin/update-rc.d php5-fpm defaults
insserv: warning: script 'K01initiscsi' missing LSB tags and overrides
insserv: warning: script 'initiscsi' missing LSB tags and overrides
Executing /usr/sbin/update-rc.d php5-fpm enable
insserv: warning: script 'K01initiscsi' missing LSB tags and overrides
insserv: warning: script 'initiscsi' missing LSB tags and overrides
Generating RSA private key, 4096 bit long modulus
.............................................++
................................................................................................................................................................................++
e is 65537 (0x10001)
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:State or Province Name (full name) [Some-State]:Locality Name (eg, city) []:Organization Name (eg, company) [Internet Widgits Pty Ltd]:Organizational Unit Name (eg, section) []:Common Name (e.g. server FQDN or YOUR name) []:Email Address []:Generating RSA private key, 4096 bit long modulus
................................................++
..............................................................................................................................................++
e is 65537 (0x10001)
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:State or Province Name (full name) [Some-State]:Locality Name (eg, city) []:Organization Name (eg, company) [Internet Widgits Pty Ltd]:Organizational Unit Name (eg, section) []:Common Name (e.g. server FQDN or YOUR name) []:Email Address []:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:An optional company name []:Signature ok
subject=/CN=10.20.103.238
Getting CA Private Key
ln: failed to create symbolic link ‘/var/www/html/fog/fog’: File exists
Module php5 already enabled
Considering dependency proxy for proxy_fcgi:
Module proxy already enabled
Module proxy_fcgi already enabled
Module setenvif already enabled
Module rewrite already enabled
Considering dependency setenvif for ssl:
Module setenvif already enabled
Considering dependency mime for ssl:
Module mime already enabled
Considering dependency socache_shmcb for ssl:
Module socache_shmcb already enabled
Module ssl already enabled
Enabling site 001-fog.
To activate the new configuration, you need to run:
  service apache2 reload
● apache2.service - LSB: Apache2 web server
   Loaded: loaded (/etc/init.d/apache2)
  Drop-In: /lib/systemd/system/apache2.service.d
           └─forking.conf
   Active: active (running) since Thu 2018-06-21 17:09:07 EDT; 2s ago
  Process: 20843 ExecStart=/etc/init.d/apache2 start (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/apache2.service
           ├─20868 /usr/sbin/apache2 -k start
           ├─20871 /usr/sbin/apache2 -k start
           ├─20872 /usr/sbin/apache2 -k start
           ├─20873 /usr/sbin/apache2 -k start
           ├─20874 /usr/sbin/apache2 -k start
           ├─20875 /usr/sbin/apache2 -k start
           ├─20882 /usr/sbin/apache2 -k start
           ├─20883 /usr/sbin/apache2 -k start
           └─20884 /usr/sbin/apache2 -k start

Jun 21 17:09:07 Slipstream apache2[20843]: Starting web server: apache2.
Jun 21 17:09:07 Slipstream systemd[1]: Started LSB: Apache2 web server.

● php5-fpm.service - The PHP FastCGI Process Manager
   Loaded: loaded (/lib/systemd/system/php5-fpm.service; enabled)
   Active: active (running) since Thu 2018-06-21 17:09:06 EDT; 3s ago
  Process: 20852 ExecStartPre=/usr/lib/php5/php5-fpm-checkconf (code=exited, status=0/SUCCESS)
 Main PID: 20860 (php5-fpm)
   Status: "Ready to handle connections"
   CGroup: /system.slice/php5-fpm.service
           ├─20860 php-fpm: master process (/etc/php5/fpm/php-fpm.conf)                    
           ├─20866 php-fpm: pool www                                                       
           └─20867 php-fpm: pool www                                                       

Jun 21 17:09:06 Slipstream systemd[1]: Started The PHP FastCGI Process Manager.
--2018-06-21 17:09:09--  http://10.20.103.238//fog//maintenance/backup_db.php
Connecting to 10.20.103.238:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: ?node=schema [following]
--2018-06-21 17:09:11--  http://10.20.103.238//fog//maintenance/backup_db.php?node=schema
Connecting to 10.20.103.238:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: ‘/home//fogDBbackups/fog_sql_1.5.4_20180621_050909.sql’

     0K                                                        2.61M=0s

2018-06-21 17:09:11 (2.61 MB/s) - ‘/home//fogDBbackups/fog_sql_1.5.4_20180621_050909.sql’ saved [31]

svalding

Thanks for the information! This is very helpful, however I have found that adding a new rule doesn’t quite work the way I expect.

I add the rule using the data called out above and when I click “Add Rule”, it takes me back to the home page with the bandwidth and other graphs. However, the URL doesn’t change to ?node=home. It remains ?node=accesscontrol&sub=addrule.

Rather curious don’t you think? Also, the new rule isn’t really created either.

svalding

Put in a Feature request only to find out that Access Control is already a thing via the Access Control plugin.

I’ve got it installed and working, but would like to restrict the UI a bit further, but am struggling how to remove the last 2 menu items: The Access Control button itself, and the LDAP plugin.

0_1507312680876_9f82f18b-454e-4cfd-8c5a-3c4db56ce1ea-image.png

I don’t see anywhere within the Access Control Rules to restrict that? Any help would be greatly appreciated. I’m sure it’s possible, I’m just not seeing it.

svalding

It would be great to have a way to restrict access to things in FOG Web UI. Admins who can do anything, imagers who can push images to computers, power users who can manipulate hosts, etc.

Having an all-or-nothing structure to the WebUI is opening yourself up to issues I believe. What would it take to implement something like this?

svalding

Perfect. I’ll do just that.

svalding

Server

FOG Version: 1.3.5 stable (svn revision 6067)
OS: Debian

Client

Service Version: 0.11.11
OS: Win 8.1

Description

Running a Login History Report from Report management shows a White page only after selecting the criteria to search on.

The info is in the database correctly (verified with phpmyadmin), and the Login history is working under host management.

I’ve seen several forum posts surrounding this issue, and I’ve yet to see any form of errors in the apache error.log file. In fact, I have 0 errors in there. Just some service startup information. I can provide whatever info you require, just know that my Linux command line skills are not on par with my Windows Powershell skills, so be a little verbose in the commands you’d like me to run if you would.