Login Error

Maksvell
Beiträge: 11
Registriert: 23 Dez 2017, 11:38

Login Error

Beitrag von Maksvell »

Hello!
I'm new in opsi and Linux. Have installed opsi on ucs trying to log in with the administrator in opsi config editor getting the error.
Have already checked administrator is in all group opsi groups.
Maybe can someone give a clue?


Dec 23 12:40:00.673 2017 -- Opsi service error: [BackendPermissionDeniedError] Backend permission denied error: Access to method 'config_updateObjects' denied for user 'administrator': Backend permission denied error: Access denied
Dec 23 12:40:00.704 2017 -- Opsi service error: [BackendPermissionDeniedError] Backend permission denied error: Access to method 'config_updateObjects' denied for user 'administrator': Backend permission denied error: Access denied
Dec 23 12:40:00.954 2017 -- Opsi service error: [BackendPermissionDeniedError] Backend permission denied error: Access to method 'group_getObjects' denied for user 'administrator'
Dec 23 12:40:01.110 2017 -- Opsi service error: [BackendPermissionDeniedError] Backend permission denied error: Access to method 'objectToGroup_getObjects' denied for user 'administrator'
Dec 23 12:40:01.142 2017 -- Opsi service error: [BackendPermissionDeniedError] Backend permission denied error: Access to method 'config_updateObjects' denied for user 'administrator': Backend permission denied error: Access denied
Dec 23 12:40:18.760 2017 -- Opsi service error: [BackendPermissionDeniedError] Backend permission denied error: Access to method 'configState_getObjects' denied for user 'administrator'
Dec 23 12:40:18.760 2017 -- JSONReMapper: Exception on reproducing null, java.lang.NullPointerException
Dec 23 12:40:19.447 2017 -- Opsi service error: [BackendPermissionDeniedError] Backend permission denied error: Access to method 'config_updateObjects' denied for user 'administrator': Backend permission denied error: Access denied
Dec 23 12:40:19.494 2017 -- Opsi service error: [BackendPermissionDeniedError] Backend permission denied error: Access to method 'config_updateObjects' denied for user 'administrator': Backend permission denied error: Access denied
Dec 23 12:40:19.822 2017 -- Opsi service error: [BackendPermissionDeniedError] Backend permission denied error: Access to method 'product_getObjects' denied for user 'administrator'
Dec 23 12:40:19.822 2017 -- JSONReMapper: Exception on reproducing null, java.lang.NullPointerException
Dec 23 12:40:19.869 2017 -- Opsi service error: [BackendPermissionDeniedError] Backend permission denied error: Access to method 'productOnDepot_getObjects' denied for user 'administrator'
Dec 23 12:40:19.869 2017 -- JSONReMapper: Exception on reproducing null, java.lang.NullPointerException
Dec 23 12:40:19.916 2017 -- Opsi service error: [BackendPermissionDeniedError] Backend permission denied error: Access to method 'config_getObjects' denied for user 'administrator'
Dec 23 12:40:19.932 2017 -- Opsi service error: [BackendPermissionDeniedError] Backend permission denied error: Access to method 'productProperty_getObjects' denied for user 'administrator'
Dec 23 12:40:19.932 2017 -- JSONReMapper: Exception on reproducing null, java.lang.NullPointerException
Dec 23 12:40:20.342 2017 -- Opsi service error: [BackendPermissionDeniedError] Backend permission denied error: Access to method 'config_getObjects' denied for user 'administrator'
Benutzeravatar
n.wenselowski
Ex-uib-Team
Beiträge: 3194
Registriert: 04 Apr 2013, 12:15

Re: Login Error

Beitrag von n.wenselowski »

Hi Maskvell,

I suggest using a different user (with the appropriate memberships) for logging in.
If this does not help yet try setting the rights and restarting the services:

Code: Alles auswählen

opsi-setup --set-rights
service opsiconfd restart
service opsipxeconfd restart

bye

Niko

Code: Alles auswählen

import OPSI
Maksvell
Beiträge: 11
Registriert: 23 Dez 2017, 11:38

Re: Login Error

Beitrag von Maksvell »

n.wenselowski hat geschrieben:Hi Maskvell,

I suggest using a different user (with the appropriate memberships) for logging in.
If this does not help yet try setting the rights and restarting the services:

Code: Alles auswählen

opsi-setup --set-rights
service opsiconfd restart
service opsipxeconfd restart

bye

Niko

No results. I tried with a different account which is in the opsiadmins group.
When i try to install something on virtual PC I'm getting error (Errno 103)
https://imgur.com/a/IbuEG
When I try to install on real server I'm getting "No product action requests set"
https://imgur.com/a/EIVSh


opsi-setup --set-rights
service opsiconfd restart
service opsipxeconfd restart
Don't give out any errors.
Benutzeravatar
n.wenselowski
Ex-uib-Team
Beiträge: 3194
Registriert: 04 Apr 2013, 12:15

Re: Login Error

Beitrag von n.wenselowski »

Hi Maksvell,

just to get this clear: have you now been able to login?
Maksvell hat geschrieben:When i try to install something on virtual PC I'm getting error (Errno 103)
https://imgur.com/a/IbuEG
Is the opsi-client-agent installed on that client?
There are multiple ways to achieve this described here.
Maksvell hat geschrieben:When I try to install on real server I'm getting "No product action requests set"
https://imgur.com/a/EIVSh
This simply means that no setup is requested for the client.
See the getting started on how to request an installation for an client.


Kind regards

Niko

Code: Alles auswählen

import OPSI
Maksvell
Beiträge: 11
Registriert: 23 Dez 2017, 11:38

Re: Login Error

Beitrag von Maksvell »

Ok, i got installed hwaudit on pc, but only when I restart pc.
If I wanna to install with the command "Execute now" I'm getting error https://imgur.com/a/833LG how can fix it?
Maksvell
Beiträge: 11
Registriert: 23 Dez 2017, 11:38

Re: Login Error

Beitrag von Maksvell »

Ok I got hwaudit install or remote pc.
1 question do opsi server need to be a member of domain? Because at this point I did all settings how told in your installation manual.
But opsiserver was not joined to AD.
And now when I change client IP opsiserver don't update it.
And I have changed resolveHostAddress = true,update ip = no.
Benutzeravatar
n.wenselowski
Ex-uib-Team
Beiträge: 3194
Registriert: 04 Apr 2013, 12:15

Re: Login Error

Beitrag von n.wenselowski »

Hi Maksvell,
Maksvell hat geschrieben:Ok I got hwaudit install or remote pc.
Great :)
Maksvell hat geschrieben:1 question do opsi server need to be a member of domain? Because at this point I did all settings how told in your installation manual.
But opsiserver was not joined to AD.
If you are running opsi on UCS it is expected that the server is joined.
If you don't want to have it joined I would recommend running opsi on a different OS.
Maksvell hat geschrieben:And now when I change client IP opsiserver don't update it.
And I have changed resolveHostAddress = true,update ip = no.
update ip should be true if you want opsi to update the IP of the client. It will be updated the next time the client contacts the opsi server.


Kind regards

Niko

Code: Alles auswählen

import OPSI
Maksvell
Beiträge: 11
Registriert: 23 Dez 2017, 11:38

Re: Login Error

Beitrag von Maksvell »

n.wenselowski hat geschrieben:Hi Maksvell,
Maksvell hat geschrieben:1 question do opsi server need to be a member of the domain? Because at this point I did all settings how told in your installation manual.
But opsiserver was not joined to AD.
If you are running opsi on UCS it is expected that the server is joined.
If you don't want to have it joined I would recommend running opsi on a different OS.

Kind regards

Niko
I would like to use OPSI as UCS Role but there are some problems. I have already asked on UCS forumhttps://help.univention.com/t/opsi-clie ... on/7573/16 so war I know that problem is with samba 4 haven't found out how to fix it.
But I want t join opsi server machine to domain what OS I should better to use?

And what is with
Maksvell hat geschrieben:If I wanna to install hwaduit with the command "Execute now" I'm getting error https://imgur.com/a/833LG how can fix it?
Benutzeravatar
n.wenselowski
Ex-uib-Team
Beiträge: 3194
Registriert: 04 Apr 2013, 12:15

Re: Login Error

Beitrag von n.wenselowski »

Hi Maksvell,
Maksvell hat geschrieben:I would like to use OPSI as UCS Role but there are some problems. I have already asked on UCS forumhttps://help.univention.com/t/opsi-clie ... on/7573/16 so war I know that problem is with samba 4 haven't found out how to fix it.
But I want t join opsi server machine to domain what OS I should better to use?
What does univention-check-join-status display?
Does univention-run-join-scripts report all scripts as executed? I fear that the manual creation of users / groups may not have been the wisest move as this could have side effects on this.

What do you want to achieve with having your server as part of the domain?
Being able to log in through AD? Or some things more?

Usually it is easier to have opsi installed on a role that is not member if you are new to opsi on UCS because of the many specialities this role has.
If you just want to try opsi you can go with the prepared VM that makes the tryout a lot easier.
Unfortunately running opsi on an UCS member is probably the hardest tryout attempt you can pick :(
Maksvell hat geschrieben: I would like to use OPSI as UCS Role but there are some problems. I have already asked on UCS forumhttps://help.univention.com/t/opsi-clie ... on/7573/16 so war I know that problem is with samba 4 haven't found out how to fix it.
But I want t join opsi server machine to domain what OS I should better to use?
Maksvell hat geschrieben:And what is with
Maksvell hat geschrieben:If I wanna to install hwaduit with the command "Execute now" I'm getting error https://imgur.com/a/833LG how can fix it?
Is the server reachable as opsiserver?
Next thing to check is if the mount can be made as user pcpatch - for a member keep in mind the need to set the password for opsi and in UCS!
Can you post the complate error along with some preceding lines from C:\opsi.org\logs\opsiclientd.log from the client where the error appears?


Kind regards

Niko

Code: Alles auswählen

import OPSI
Maksvell
Beiträge: 11
Registriert: 23 Dez 2017, 11:38

Re: Login Error

Beitrag von Maksvell »

What do you want to achieve with having your server as part of the domain?
Being able to log in through AD? Or some things more?
I just thought that opsi need to be a member of the domain, for all features.

Is the server reachable as opsiserver?
Next thing to check is if the mount can be made as user pcpatch - for a member keep in mind the need to set the password for opsi and in UCS!
Can you post the complete error along with some preceding lines from C:\opsi.org\logs\opsiclientd.log from the client where the error appears?
I have installed clean prepared opsi VM, and looks almost good. I have installed on other pc remotely hwaudit(have used Execut now) with adminsuser (because with pcpatch i was not able to do this got error No product actions request set ). And when i have tried to install swaudit i was not able to install it on the same PC with adminuser (got error No product actions request set) but pcpatch has installed it :?: :?: ...

Code: Alles auswählen

[5] [Jan 13 18:50:25] [ event processing on_demand{user_logged_in}] Writing log to service   (EventProcessing.pyo|257)
[5] [Jan 13 18:50:25] [ opsiclientd                   ] Shutdown request in Registry: 0   (Windows.pyo|327)
[4] [Jan 13 18:50:25] [ opsiclientd                   ] Failed to get RebootRequested from registry: [Error 2]    (Windows.pyo|308)
[5] [Jan 13 18:50:25] [ opsiclientd                   ] Reboot request in Registry: 0   (Windows.pyo|311)
[5] [Jan 13 18:50:25] [ opsiclientd                   ] Block login now set to 'False'   (Opsiclientd.pyo|109)
[6] [Jan 13 18:50:25] [ event processing on_demand{user_logged_in}] Stopping notification server   (EventProcessing.pyo|235)
[6] [Jan 13 18:50:26] [ event config silent_install   ] client connection lost   (Message.pyo|448)
[6] [Jan 13 18:50:27] [ event processing on_demand{user_logged_in}] Notification server stopped   (Message.pyo|636)
[5] [Jan 13 18:50:30] [ opsiclientd                   ] Done processing event '<ocdlib.Events.CustomEvent object at 0x04D44490>'   (Opsiclientd.pyo|419)
[5] [Jan 13 18:51:17] [ opsiclientd                   ] Session '920Iwi3qHmx9LaCDvPIcnsyMs3Vfjuyf' from ip '192.168.1.100', application 'unknown' expired after 120 seconds   (Session.pyo|190)
[6] [Jan 13 18:51:17] [ opsiclientd                   ] Session timer <_Timer(Thread-71, started daemon 11708)> canceled   (Session.pyo|128)
[5] [Jan 13 18:51:17] [ opsiclientd                   ] Session '920Iwi3qHmx9LaCDvPIcnsyMs3Vfjuyf' from ip '192.168.1.100', application 'unknown' deleted   (Session.pyo|225)
[5] [Jan 13 18:51:21] [ opsiclientd                   ] Session '08yarblFBxWhsalZmK7pNxKCmtvf9cOL' from ip '127.0.0.1', application 'opsi jsonrpc module version 4.0.7.28' expired after 120 seconds   (Session.pyo|190)
[6] [Jan 13 18:51:21] [ opsiclientd                   ] Session timer <_Timer(Thread-76, started daemon 6916)> canceled   (Session.pyo|128)
[5] [Jan 13 18:51:21] [ opsiclientd                   ] Session '08yarblFBxWhsalZmK7pNxKCmtvf9cOL' from ip '127.0.0.1', application 'opsi jsonrpc module version 4.0.7.28' deleted   (Session.pyo|225)
[5] [Jan 13 18:51:39] [ opsiclientd                   ] Session 'Pi1FOvgCAtpRY9DoWxRslN0ENqt7QX94' from ip '192.168.1.100', application 'unknown' expired after 120 seconds   (Session.pyo|190)
[6] [Jan 13 18:51:39] [ opsiclientd                   ] Session timer <_Timer(Thread-78, started daemon 7680)> canceled   (Session.pyo|128)
[5] [Jan 13 18:51:39] [ opsiclientd                   ] Session 'Pi1FOvgCAtpRY9DoWxRslN0ENqt7QX94' from ip '192.168.1.100', application 'unknown' deleted   (Session.pyo|225)
[5] [Jan 13 18:51:44] [ opsiclientd                   ] Session 'h4epccj17xCyzOQCW1Sj8RxYFGJoIP54' from ip '127.0.0.1', application 'opsi jsonrpc module version 4.0.7.28' expired after 120 seconds   (Session.pyo|190)
[6] [Jan 13 18:51:44] [ opsiclientd                   ] Session timer <_Timer(Thread-85, started daemon 12064)> canceled   (Session.pyo|128)
[5] [Jan 13 18:51:44] [ opsiclientd                   ] Session 'h4epccj17xCyzOQCW1Sj8RxYFGJoIP54' from ip '127.0.0.1', application 'opsi jsonrpc module version 4.0.7.28' deleted   (Session.pyo|225)
[5] [Jan 13 18:52:09] [ opsiclientd                   ] Session 'n9EjRSJ40DjaswRgMUxTj2RhWOhgD6dN' from ip '192.168.1.100', application 'unknown' expired after 120 seconds   (Session.pyo|190)
[6] [Jan 13 18:52:09] [ opsiclientd                   ] Session timer <_Timer(Thread-99, started daemon 9688)> canceled   (Session.pyo|128)
[5] [Jan 13 18:52:09] [ opsiclientd                   ] Session 'n9EjRSJ40DjaswRgMUxTj2RhWOhgD6dN' from ip '192.168.1.100', application 'unknown' deleted   (Session.pyo|225)
[5] [Jan 13 18:52:15] [ opsiclientd                   ] Session 'J3UIV1WDg2l4B5WsqkzJnBSVROkR58Fj' from ip '127.0.0.1', application 'opsi jsonrpc module version 4.0.7.28' expired after 120 seconds   (Session.pyo|190)
[6] [Jan 13 18:52:15] [ opsiclientd                   ] Session timer <_Timer(Thread-106, started daemon 5112)> canceled   (Session.pyo|128)
[5] [Jan 13 18:52:15] [ opsiclientd                   ] Session 'J3UIV1WDg2l4B5WsqkzJnBSVROkR58Fj' from ip '127.0.0.1', application 'opsi jsonrpc module version 4.0.7.28' deleted   (Session.pyo|225)
Here are some errors from logs but they are from different time as I have tried to install opsi packages.
Antworten